HNHacker News
TopNewBestAskShowJobs

basilikum

2,329 karma · joined July 30, 2025

https://basilikum.monster
submissionscomments
basilikum··on Owner of grok.bot domain name asks for $1M
If we're already at it, i'd also offer https://scam.ceo to Elon for $10MM
basilikum··on NIST is selling Peanut Butter for $415.33 per jar
Related: Going Nuts over NIST’s Standard Reference Peanut Butter (2016) - https://news.ycombinator.com/item?id=42815454 - 2025-01-27
basilikum··on Replace "using AI" with "using computers"
"Computer oracle controlled or biased by someone else" would be more fitting
basilikum··on I like 'em thick: an apology to my English teachers
Good writing isn't complex for complexity's sake though. Mistaking complexity for quality is the most common mistake when it comes to writing — and I allege one central reason why many people like and trust LLM output.

I'd argue that complexity is not even the right word to describe what the author describes. Thickness or depth is more accurate.

basilikum··on German court rules: Emails must be end-to-end encrypted
This seems dubious.

> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.

How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.

The only case where this has much to do with email security is when an email server is breached.

This whole article is a lot of words around very little information.

basilikum··on A 25-year-old video patent just expired, ending a legal headache for Linux
> If I can get one AI to reverse engineer Photoshop, and another to implement the produced spec, I have a copyright-clean version of Photoshop.

You won't get this, otherwise we had tons of LLM written photoshop alternatives already. And if it would work, that would be a good thing.

basilikum··on A 25-year-old video patent just expired, ending a legal headache for Linux
Not OC, but yes.
basilikum··on The other Sean Byrne doesn't exist
Only if you don't backup your TOTP tokens. Just like you lose your photos when you lose your phone. One of the main advantages of TOTP is that it is portable and can be backed up.

> I walk to the local phone shop and get a replacement sim for my number with a few of bits of ID and I regain sms access.

Or someone else gets access to your SIM by sim swapping you, which is not as stupidly easy as it used to be, but still SMS remains insecure. Building an authentication system on it is just a bad idea from virtually every angle.

basilikum··on The other Sean Byrne doesn't exist
That is far from everyone.
basilikum··on The other Sean Byrne doesn't exist
In some countries you can get a new birrh certificate with your new name.
basilikum··on The other Sean Byrne doesn't exist
2FA over SMS is stupidly bad. It's worse than TOTP in every aspect including this reason. It is also much less secure. You could start switching accounts to TOTP regardless of this and then decide if you want to switch your number later when you have the option.

TOTP is portable and can be backed up.

I went a little bit off on a tangent, the stupidity of SMS 2FA is a pet peeve of mine.

basilikum··on Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
Much more than 0.001% of people care about their privacy or (the larger portion) do not have unfiltered access to the internet.
basilikum··on Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
> /commercial IP from legitimate users

No, because legitimate users do not just use residential and "commercial" IPs. Like me, right now

basilikum··on I backtested my own stock rankings. They lost to the index
You didn't write this yourself. It's AI.

Your top level comment is also AI which is against the HN guidelines. Also it is allowed to post your own works, but they should only be a small fraction of your submissions. Please do not use HackerNews primarily for self promotion.

I suggest you read the guidelines: https://news.ycombinator.com/newsguidelines.html

basilikum··on New Orleans is using AI to triage 911 calls in case of backlog
Related:

911 calls answered by AI in New Orleans [video] – 2026-08-11 – https://news.ycombinator.com/item?id=49258252

New Orleans is testing Carbyne’s AI-powered Emergency Call Triage software – 2026-08-07 – https://news.ycombinator.com/item?id=49204546

basilikum··on The Hacker's Renaissance (2025)
Read the original instead of this AI slop:

Another one got caught today, it's all over the papers. "Teenager Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"... Damn kids. They're all alike.

But did you, in your three-piece psychology and 1950's technobrain, ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him, what may have molded him? I am a hacker, enter my world... Mine is a world that begins with school... I'm smarter than most of the other kids, this crap they teach us bores me... Damn underachiever. They're all alike.

I'm in junior high or high school. I've listened to teachers explain for the fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I didn't show my work. I did it in my head..." Damn kid. Probably copied it. They're all alike.

I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me... Or thinks I'm a smart ass... Or doesn't like teaching and shouldn't be here... Damn kid. All he does is play games. They're all alike.

And then it happened... a door opened to a world... rushing through the phone line like heroin through an addict's veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found. "This is it... this is where I belong..." I know everyone here... even if I've never met them, never talked to them, may never hear from them again... I know you all... Damn kid. Tying up the phone line again. They're all alike...

You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us willing pupils, but those few are like drops of water in the desert.

This is our world now... the world of the electron and the switch, the beauty of the baud. We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and you call us criminals. We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good, yet we're the criminals.

Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.

I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... after all, we're all alike.

basilikum··on Taste Is All That's Left
They don't just give different implementations of the same categorical output, but categorically different output. LLMs do not write like humans.
basilikum··on A year of fighting scrapers on my 1.5 million-page website
1. It makes the web more annoying and time wasting.

2. I'm a real user and I have to enable JavaScript and run arbitrary programs from untrusted websites to access them. One browser that I use doesn't even support JavaScript (w3m). Fortunately it is unaffected because it doesn't have the string "Mozilla" in its UA and Anubis lets every user without that pass to not hurt legitimate bots like search engine crawlers. As said Anubis is trivially bypassed. The only reason it isn't bypassed is because it's simply too irrelevant to the AI companies.

basilikum··on A year of fighting scrapers on my 1.5 million-page website
It doesn't detect "real browsers". It simply adds some friction and is niche enough that AI scrapers have not bothered to bypass it yet.
basilikum··on Taste Is All That's Left
Calculating is not math. Calculators make mathematicians better mathematicians by allowing them to spend their time on actual mathematics.

Writing is thinking. LLM writing makes authors worsr authors and even dumber people overall.

Also a calculator gives the same answer as a human (except for human errors where the calculator isa strict improvement). LLMs absolutely do not give the same output as humans.

basilikum··on Taste Is All That's Left
An antithesis is a completely valid stylistic device. It's just very easy to overuse or to use as a cliché when you're not using language as a tool for a specific purpose, but just want to sound smart or think "fancy stylistic devices = good writing".
basilikum··on The Gargantuan Lie That Is Collapsing the Climate
> we wouldn't be fascist, we'd simply need totalitarian control over every facet of business, labor, capital, leisure, transport and production.

Even ignoring all the rest, that is in fact not what fascism means.

basilikum··on Google's HTTP/2 codec slows Envoy
There is absolutely nothing wrong with using AI as a grammar checker and as a help for finding formulations. But I would very much recommend to you to only use it as an aid and to actually write yourself. You can put every iteration through an LLM to flag errors and unclarities. That way you even learn something and the writing is still you thoughts in the end.

Recommended reading:

https://paulgraham.com/writes.html

Writing is thinking.

In the end you do you, but personally I generally only bother to read things that someone else bothered to write; and so far that has heen an extremely good heuristic to distinguish what might be worth reading.

basilikum··on Google's HTTP/2 codec slows Envoy
this looks like it could be an interesting read that i would be bothered to read if a human bothered to write it.
basilikum··on A directory of people who love RSS
I really need to finish the blog post for my emoji domain. What are mods gonna do when the emoji is literally in the domain?
basilikum··on How Google helped destroy adoption of RSS feeds (2023)
RSS is a free way to reach almost no one.
basilikum··on Residential Proxies Are a National Security Threat
Mirai took out the internet in large parts of the US. The situation hasn't exactly improved since then.
basilikum··on US citizen charged after GrapheneOS phone wipes during airport search
That's not how VeraCrypt hidden volumes work.

> If you're hiding something in "empty space" it won't behave like empty space when you try to fill it.

Yes, it will. It will overwrite the hidden data.

When you have a 1 TB drive that you encrypt with VeraCrypt using a hidden volume the following happens:

You have an outer decoy volume. This volume is 1TB in size and works like any other VeraCrypt volume.

You have a smaller, hidden inner volume with a different password. When you unlock this volume the following happens: Veracrypt tries to unlock the normal voume, but fails because the password is incorrect. It now tries to decrypt a secondary volume header at an offset. This header contains the layout for the hidden volume which is positioned inside the free space of the outer volume. So the position of the hidden volume is encrypted.

Now when you want to plant decoy files in the outer volume you actually do the following: While unlocking the volume you enable the option for hidden volumes and now you enter both passwords. So VeraCrypt knows where the inner volume is located and how large it is so it will not overwrite it. VeraCrypt will show the adjusted smaller size for the outer volume.

When you're in a situation where you are forced to give up your password: You tell them your decoy password. They open the outer decoy volume. It appears like any other VeraCrypt volume spanning the whole size of the disk. If they write any files to it that might overwrite parts of the hidden volume.

Notably all standard VeraCrypt volumes principally feature the option of hidden volumes. You cannot proof that a VeraCrypt volume does not have a hidden volume (short of it being full in the first place). The user base of people not using hidden volumes gives the plausible deniability to the people who do. Which is worth knowing as this can get you in trouble in certain scenarios.

There are some issues with this though:

SSD wear leveling and especially TRIM. You must not TRIM the blocks of the hidden volume, which can reveal it as it shall appear as free space that would usually be trimmed. So disable TRIM, which is suspicious in itself. Though TRIM also leaks information about file layout even for normal volumes, so there is some plausibility left. But it's not ideal. This is not an issue with HDDs (maybe with SMR though).

I don't remember exactly, but I think you can do statistical analysis on the layout of files inside the outer volume and deduct the existence of the hidden volume from this under certain circumstances. Essentially, in a normal volume the filesystem would have written this file to these blocks, but it didn't and chose other blocks instead. So there must have been a block layer translation that reroutes blocks from the hidden volume and these free blocks that should not be free must be the hidden volume. I'm not too sure that's really what it was about.

5$ wrench method. I suspect you are hiding certain information in this VeraCrypt volume. I torture you. You give me the password. The information is not in there. Either you do not have the information or you are lying and using a hidden volume. I continue to torture you for the second password on the chance that you're using a hidden volume. This is what I was about earlier when I said VeraCrypt can get you in trouble.

basilikum··on If coding has been solved, why does software keep getting worse?
Maybe because the start menu equivalent and the task bar are their own modules. They just come precondition, but you can use lots of alternatives. But I'm just guessing.
basilikum··on If coding has been solved, why does software keep getting worse?
Not exactly the same, but Microsoft shipped the "Backup" or some similar name software that is actually just a OneDrive client in a Windows 10 LTSC update. LTSC is specifically for not getting such feature updates. They also changed the folder icons in the graphical shell at some point.
← PreviousPage 5 of 15Next →