HNHacker News
TopNewBestAskShowJobs

coldpie

24,333 karma · joined June 6, 2012

I do software stuff in the computer security space. Former (2009-2022) Wine hacker at CodeWeavers. You can email me on fastmail.com with username coldpie. Personal websites: <https://smokingonabike.com> (video games, gardening, tech); <https://aechairs.com> (woodworking).

Tired of so much AI news on HN? I maintain a browser extension for that: https://github.com/ColdPie1/enough-ai-on-hn

submissionscomments
coldpie··on Making a 88x31 button book using ImageMagick
These uses of cat aren't useless.

It improves readability. One reads shell commands from left to right, following the logic of each step in the pipeline individually. It makes sense to start with a file, then pipe that to command 1, pipe that to command 2, etc. It makes less sense to start with command 1 into which we put the file and then take the output of command 1 from before the file and put that into command 2 etc.

It also improves future editability. If you wanted to change the input to command 1, you go tweak the bit to the left of command 1 instead of having to hunt down where the < is stuck in the middle somewhere and potentially remove it and replace it with something off to the left anyway depending on whether it's a file or the output of some other command.

Using cat as the first step into a pipeline is almost always the right thing to do!

coldpie··on Making a 88x31 button book using ImageMagick
Man, few things have made me feel like more of a philistine than reading Moby Dick earlier this year. I read a lot, but I've never considered myself a "literature guy" and wow Moby Dick cemented that. I did finish it, but I thought it was just an awful read, absolutely boring from start to finish. About halfway through I was just skipping pages and pages and pages of filler descriptions and incomprehensible 20-page-long speeches. I absolutely hated it, among the worst books I've ever powered through to the end.

It's definitely a "me problem," obviously people who are into literature and analysis get a lot out of it. But in future I'm gonna stick to my dumb sci-fi books where people talk in comprehensible sentences and things blow up, lol.

coldpie··on Wine ported to OpenBSD
If you follow the provided link, you'll see that the objection is about copyright, not quality: https://marc.info/?l=openbsd-tech&m=177411620801633&w=2 As someone who has certainly had his work sucked up into LLMs without consent or compensation, this seems like a reasonable stance to me.
coldpie··on Degraded availability for GitHub Actions, GitHub Pages and Webhooks
Dungeon Crawl Stone Soup's text UI could be mistaken for Perl at a glance https://crawl.develz.org/
coldpie··on Another day another GitHub incident
Time to bring back the Boss Button https://en.wikipedia.org/wiki/Boss_button :)
coldpie··on Degraded availability for GitHub Actions, GitHub Pages and Webhooks
> People didn't care. So I don't care anymore.

Yeah. Enjoy the rest of your day off. Winter's coming, maybe go hit a park for a few hours or play a new video game or something. Or take some time to learn a new skill or something. Not your fault if the company can't provide the tools to do the job, go find something better to do.

coldpie··on Wine ported to OpenBSD
You can download the attachment and take a look at the patches. Wine already supports FreeBSD and macOS, so it's not tooooo crazy hard to add another BSD/Unix to the pile. Looks like there's a few Unix APIs that have drifted, so the patches add some #if OpenBSD style stuff to avoid using some symbols that don't exist on OpenBSD. The gs register stuff is by far the most complex bit. IIRC that register is used for thread-local storage on Windows, but for other purposes on other OS's, so handling access from win32 binaries to the gs register is a big problem when porting to a new OS.

On the whole it looks well written to me, especially with how complex & low-level these areas of Wine are. Good work to the author. I'd encourage them to try upstreaming it if they're interested. Some of it looks a little hacky, which upstream will object to, but maybe they could get some help cleaning it up, which will avoid having to maintain a diff and result in an even better port.

Edit: Oh, looks like they already talked with upstream https://marc.info/?l=openbsd-ports&m=179241414029592 It's not a huge diff to maintain, so maybe that is the better route. Great work either way.

coldpie··on Let's Encrypt is adding two additional remote perspectives for domain validation
Remember Firesheep? It used to be the normal thing to use plain HTTP over open wifi networks. Literally anyone else on that access point could read your whole network session, cookies and all. https://en.wikipedia.org/wiki/Firesheep
coldpie··on My old job feels distant now
I think you need to work on your reading comprehension and anger management skills, friend.
coldpie··on My old job feels distant now
> I’m so happy I quit tech a year ago.

What do you do now? I'm also looking to get out of this industry, but it's tough to voluntarily give up the pay.

coldpie··on My old job feels distant now
I maintain a browser extension to nuke the endless stream of boring AI noise articles: https://github.com/ColdPie1/enough-ai-on-hn/ Sometimes it misses articles with less clear titles, like this one, and you gotta nuke 'em manually.
coldpie··on Hello Toronto – Waymo Is En Route
They've been doing test runs here in Minneapolis for more than a year. You're right that it's a challenge, but I bet they'll do fine after a couple years of refinement.
coldpie··on Steam Client is now faster than Epic's new vibe coded launcher
No, that's stupid.
coldpie··on Meta’s new commercial terms will allow the scraping of news sites: experts
Facebook is a zillion dollar company, so they get to decide what will happen.
coldpie··on Steam Client is now faster than Epic's new vibe coded launcher
Fair question, but there is a decent answer. It's because Steam is an app that is shipped to 3 platforms and at least 2 architectures; the web platform is a platform- and architecture-agnostic target; and there is an extremely large set of tools and large developer pool to pull from. It may not be the set of you trade-offs you would have chosen, but it's also a reasonable choice for the problem they are tackling with the set of real-world constraints they are presented with.
coldpie··on Mozilla Introduces Firefox Enterprise
Can you point to where specifically in the article it says that:

> they will remove "AI controls" from normal Firefox

which is the question the original poster asked?

coldpie··on Firefox Enterprise
Probably took them some time to clean up all of the the Work Stoppage tickets that every dev in the company filed, lol.
coldpie··on Firefox Enterprise
My company's security dept briefly (briefly!) put GCC on the banned software list. Yes, that GCC. Buncha big brainlords in that dept.
coldpie··on Passkeys are a trap
The objective is for American big tech to be the sole gatekeeper for your ability to log in to things. They would love for it to be required for everyone on Earth to own an Apple, Google, or Microsoft device to use the Internet.
coldpie··on Passkeys are a trap
This is a pretty unconvincing argument. It's just one guy saying "trust me, no one will abuse this." It's especially unconvincing when you've got this other Passkey dev directly contradicting it:

> To be very honest here, you risk having KeePassXC blocked by relying parties. ... I've already heard rumblings that KeepassXC is likely to be featured in a few industry presentations that highlight security challenges with passkey providers, the need for functional and security certification, and the lack of identifying passkey provider attestation (which would allow RPs to block you, and something that I have previously rallied against but rethinking as of late because of these situations).

https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

They need to remove attestation from the spec. Instead of promising no one will ever use it, just get rid of it and solve the problem.

coldpie··on Passkeys are a trap
Then remove it from the spec and everyone is happy. I don't trust big tech companies to not use this feature if it is available. They have too much incentive to be the sole gatekeeper for your ability to log in to services.
coldpie··on The tilde in your PATH may not be your HOME
Oh this looks quite nice!
coldpie··on The Making Of Super Mario 64 – full Giles Goddard interview (2001)
The Video Game History Foundation did a video & accompanying article about Argonaut's relationship with Nintendo a few years back:

https://gamehistory.org/eclipse-the-demo-that-sold-3d-to-nin...

Based on that, I believe Giles is mistaken in the Eurogamer interview cited by Wikipedia. The demo was on Gameboy, not NES. The also-linked NintendoLife article also mentions the demo was on the Gameboy. But I guess maybe that's actually more impressive!

coldpie··on The tilde in your PATH may not be your HOME
Excellent article, thanks for the link. I do agree with the premise. But every time I write some Bash code and think there should be a better way to do this, I ask myself why I don't just learn Perl. I dunno. Feels like inventing another solution would just hit the old "there are now 14 standards" problem where it would solve some problems but introduce others (see: PowerShell).
coldpie··on The tilde in your PATH may not be your HOME
> hope some typescript-like "typed shell" becomes mainstream someday

The trouble with trying to invent a new, more robust shell language is you basically just end up re-inventing any number of scripting languages (eg Perl, Python, awk, ...), so you might as well use one of those.

coldpie··on C for Rust programmers
> What's the hardest thing for a C programmer to unlearn when moving to Rust?

One thing that stood out to me going this direction is it's really hard to write hackish or intentionally-broken code in order to try to explore implementation options or debug an issue or test an algorithm. Rust requires you to handle error cases, and all possible values in cases, and is strict about memory access and stuff. But sometimes I just want to shove these bytes into this thing and see what happens, or hack in an early return or something, or half-implement this API to see if it "feels right" before committing to a full implementation, and Rust's enforced best practices stop me doing that.

(To be clear, I like Rust. This is just one thing that trips me up coming from C.)

coldpie··on Beauty in DVD Menus
> Shame that sort of thing didnt really catch on.

Not exactly the same, but some creative things similar to this are happening in the video game space. There have been a number of recent video games that primarily consist of watching a movie and discovering little hints here and there that let you unlock more of the movie through the user-interface. Sam Barlow has been a pioneer here, "Immortality" from 2022 is probably the most innovative example of this approach to interactive movie-watching.

It's a very fuzzy genre, but you can find some more examples with varying levels of interactivity by heading to the most recent titles here: https://en.wikipedia.org/wiki/List_of_interactive_films

coldpie··on US suspends Microsoft, major IT firms from key green card program
Has Microsoft done much toadying? I don't recall seeing their name appear in many of the articles about tech CEOs and companies debasing themselves at Trump's feet. I've seen plenty about brown-nosing from Apple and Facebook and Amazon and obviously Musk, but I don't remember seeing much about Microsoft. I wonder if that lack of ingratiation is part of why MS is being targeted here but the other large tech companies aren't? Or maybe I just missed it.
coldpie··on Vibecoding isn't as fun as writing code by hand
What?
coldpie··on Vibecoding isn't as fun as writing code by hand
But we can still be sad that we can't get paid to do something we enjoy anymore, right? I'm planning to leave the industry once my role at this company is up. The fun is gone now and I don't want to do the new form of the job.
← PreviousPage 2 of 34Next →