HNHacker News
TopNewBestAskShowJobs

andersa

3,321 karma · joined March 9, 2023

submissionscomments
andersa··on Cryptographic Issues in Cloudflare's Circl FourQ Implementation (CVE-2025-8556)
Had the same experience last time I attempted to report an issue on Hacker One. Triage did not seem to actually understand the issue and insisted on needing a PoC they could run themselves that demonstrated the maximum impact for some reason, even though any developer familiar with the actual code at hand could see the problem in about ten seconds. Ended up writing to some old security email I found for the company to look at the report and they took care of it one day later, so good ending I guess.

This was about an issue in a C++ RPC framework not validating object references are of the correct type during deserialization from network messages, so the actual impact is kind of unbounded.

andersa··on Replacing a $3000/mo Heroku bill with a $55/mo server
The best part is when you start with a $3000/month cloud bill during development and finally realize that hosting the production instance this way would actually cost $300k/month, but now it's too late to change it quickly.
andersa··on Wikipedia says traffic is falling due to AI search summaries and social video
The amount of money moving through Wikipedia is absolutely mind blowing, and next to none of that is even being used to sustain the site. Hope those still donating to it feel smart about what they're supporting...
andersa··on Space Elevator
That's a fascinating comparison, never seen it visualized like that before.
andersa··on ChatGPT – Truth over comfort instruction set
I've personally found that the "Robot" personality you can choose on that Personalize menu provides best results without cursed custom instructions. It removes all the emoji and emotional support babble and actually allows it to answer a question with just a single sentence "No, because X."
andersa··on What if I don't want videos of my hobby time available to the world?
> What if you're in the photo?

Blur that region before posting it with an algorithm that can't be reversed. The camera app could even do this automatically.

> What if you're doing something newsworthy?

Every good rule has some exceptions.

andersa··on What if I don't want videos of my hobby time available to the world?
You can do all of those things without creating a public record of me.
andersa··on What if I don't want videos of my hobby time available to the world?
This law badly needs to be updated to account for the fact that photo/video resolutions have massively increased since it was written, and "not the focus of a picture" is no longer enough to prevent you from being identified/tracked in the picture, which was the original intent.
andersa··on What if I don't want videos of my hobby time available to the world?
We should be entitled to that.
andersa··on What if I don't want videos of my hobby time available to the world?
That's a completely ridiculous comparison. Pointlessly honking or smoking does not create a public record of your activities shared globally without your consent.
andersa··on What if I don't want videos of my hobby time available to the world?
Yes.
andersa··on What if I don't want videos of my hobby time available to the world?
> Is that what you want?

Yes. I would like to go back to a time before everyone had 3 different cameras with them and the ability to share those photos to a global network so third parties can use that data to track what I am doing literally everywhere.

I no longer leave my house except for strictly necessary obligations.

andersa··on Categorical Foundations for Cute Layouts
Suggest watching this as an intro to what this is about! https://www.youtube.com/watch?v=ufa4pmBOBT8
andersa··on io_uring is faster than mmap
I meant for all 128 lanes being used, not each x16. Then you get 512GB/s.
andersa··on io_uring is faster than mmap
Your math is a bit off. 128 lanes gen5 is 8 times x16, which has a combined theoretical bandwidth of 512GB/s, and more like 440GB/s in practice after protocol overhead.

Unless we are considering both read and write bandwidth, but that seems strange to compare to memory read bandwidth.

andersa··on AI adoption linked to 13% decline in jobs for young U.S. workers: study
Your government no longer works for you, it works for a small group of billionaires. Does it make sense then?
andersa··on Electricity prices are climbing more than twice as fast as inflation
They don't use those patents internally, they discovered they can block progress in the west by spamming patents on absolutely everything and thus made it one of their strategies. The goal is to grind our industry to a halt and it's starting to work.
andersa··on Open hardware desktop 3D printing is dead?
The world would be a better place if we just completely abolished the patent system. There is no need to come up with convoluted new schemes, just delete it, done. The resulting progress will be incredible.
andersa··on Debian 13 arrives with major updates for Linux users – what's new in 'Trixie'
Can confirm, have been using Debian testing branch on my local server for AI experiments for a year and it works great. Never hit any major issues, always have (reasonably) up to date software.
andersa··on AOL to discontinue dial-up internet
I feel like finding out a house you bought doesn't actually have internet after the fact makes it worthless in the modern world and should be a valid reason to reverse the purchase.
andersa··on Theft is not fair use
The entire premise is stupid. No theft occurred at any point, the original authors still have their creations.
andersa··on The Chrome VRP Panel has decided to award $250k for this report
What if people start asking questions where you got the million dollars from? I've never understood how those presumably illegal markets can function with such large sums involved.
andersa··on Debian 13 “Trixie”
I've been using the Debian trixie branch for about a year now on my local server, never once had a real issue with anything. Very impressive.
andersa··on MCP overlooks hard-won lessons from distributed systems
It's clearly a much better design if the shotguns are pointed at someone else's feet.
andersa··on Critical vulnerability in AI coding platform Base44 allowing unauthorized access
How nice to know they will be implementing the mandatory age verification systems for this new generation of the internet!
andersa··on YouTube to be included in Australia's social media ban for children under 16
What makes you think they're not saying that already?
andersa··on How much slower is random access, really?
Note this is not true random access in the manner it occurs in most programs. By having a contiguous array of indices to look at, that array can be prefetched as it goes, and speculative execution will take care of loading many upcoming indices of the target array in parallel.

A more interesting example might be if each slot in the target array has the next index to go to in addition to the value, then you will introduce a dependency chain preventing this from happening.

andersa··on Apple introduces a universal design across platforms
It's... awful? Why would I want all this distracting shimmering as I scroll?

Apple really isn't what it once was, this is embarrassing.

andersa··on A look at Cloudflare's AI-coded OAuth library
The difference is in scale. Back then, only humans were sometimes putting up false information, and other humans had a chance to correct it. Now, machines are writing infinitely more garbage than humans can ever read. Search engines like Google are already effectively unusable.
andersa··on A look at Cloudflare's AI-coded OAuth library
It's going to be like the pre-internet dark ages, but worse. Back then you only didn't find the information. Now, you find unlimited information, but it is all wrong.
← PreviousPage 3 of 21Next →