HNHacker News
TopNewBestAskShowJobs

coldpie

24,241 karma · joined June 6, 2012

I do software stuff in the computer security space. Former (2009-2022) Wine hacker at CodeWeavers. You can email me on fastmail.com with username coldpie. Personal websites: <https://smokingonabike.com> (video games, gardening, tech); <https://aechairs.com> (woodworking).

Tired of so much AI news on HN? I maintain a browser extension for that: https://github.com/ColdPie1/enough-ai-on-hn

submissionscomments
coldpie··on Why is this fingerprinting script creating bioweapons?
No, I'm afraid you really are stuck in a culture war. As the above poster said, "they" truly has been a gender-neutral singular or plural pronoun for hundreds of years.

For example, someone two blocks down the street is doing something weird. "What are they doing?" is a perfectly grammatically normal reaction to seeing this.

coldpie··on Blaise Pascal invented fixed route public transport (2024)
Excited to say we are doing exactly this up here in the Twin Cities. The local transit agency has been planning a bunch of BRT routes and implementing about one every year or two. Often they have dedicated lanes for much of the route, and they typically have wait times around 7-15 minutes depending on time of day. BRT is extremely affordable and efficient and fits quite nicely into legacy car-based infrastructure, too.

It appears to be quite successful in terms of ridership, too (warning: local news website, but you can get all you need from the URL slug): https://www.fox9.com/news/6-months-in-minneapolis-e-line-nea...

coldpie··on Lego collaboration with Daft Punk
I actually asked about this on HN a long, long time ago: https://news.ycombinator.com/item?id=20704840 My takeaway from the feedback there was that IP lawyers just aren't the sharpest tools in the shed.
coldpie··on Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier
Don't forget your local library. They've often got decent selection especially if you're in a denser area.
coldpie··on Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier
It's ok to delete things.
coldpie··on Victory! Court Rules OPM Data Disclosure to DOGE Is Unlawful
Those peons deserve to go to jail just as much as the ringleaders do. Perhaps they can get reduced sentences by testifying against the higher level criminals.
coldpie··on Jailbreaking the Switch 2
I think most of that is true for games shipped on cart, too. Games often ship broken or missing features which are patched in at launch. Official physical media has not been a reliable method for future accessibility for at least a decade now. It's way past time to start using other methods of preservation.
coldpie··on Jailbreaking the Switch 2
I believe that is largely true even if they shipped a game on the cart. Many games ship broken, and they also change many times over the course of their life. I don't think official media can be considered any part of a future accessibility strategy for at least a decade now. Game keycards don't change that fact in any way.
coldpie··on Jailbreaking the Switch 2
> Game keycards keep the appearance of physical ownership without delivering what people expect from a cartridge.

How's that? Can't you buy & resell them on the used market? That seems like the only thing a physical cartridge gets you, and not shipping the outdated-on-day-one bits on the cart saves some money, too. Seems like win-win?

coldpie··on Victory! Court Rules OPM Data Disclosure to DOGE Is Unlawful
It is going to take decades to clean up the mess of just the last 2 years. So, so, so many people need to be in jail.
coldpie··on Making a 88x31 button book using ImageMagick
These uses of cat aren't useless.

It improves readability. One reads shell commands from left to right, following the logic of each step in the pipeline individually. It makes sense to start with a file, then pipe that to command 1, pipe that to command 2, etc. It makes less sense to start with command 1 into which we put the file and then take the output of command 1 from before the file and put that into command 2 etc.

It also improves future editability. If you wanted to change the input to command 1, you go tweak the bit to the left of command 1 instead of having to hunt down where the < is stuck in the middle somewhere and potentially remove it and replace it with something off to the left anyway depending on whether it's a file or the output of some other command.

Using cat as the first step into a pipeline is almost always the right thing to do!

coldpie··on Making a 88x31 button book using ImageMagick
Man, few things have made me feel like more of a philistine than reading Moby Dick earlier this year. I read a lot, but I've never considered myself a "literature guy" and wow Moby Dick cemented that. I did finish it, but I thought it was just an awful read, absolutely boring from start to finish. About halfway through I was just skipping pages and pages and pages of filler descriptions and incomprehensible 20-page-long speeches. I absolutely hated it, among the worst books I've ever powered through to the end.

It's definitely a "me problem," obviously people who are into literature and analysis get a lot out of it. But in future I'm gonna stick to my dumb sci-fi books where people talk in comprehensible sentences and things blow up, lol.

coldpie··on Wine ported to OpenBSD
If you follow the provided link, you'll see that the objection is about copyright, not quality: https://marc.info/?l=openbsd-tech&m=177411620801633&w=2 As someone who has certainly had his work sucked up into LLMs without consent or compensation, this seems like a reasonable stance to me.
coldpie··on Degraded availability for GitHub Actions, GitHub Pages and Webhooks
Dungeon Crawl Stone Soup's text UI could be mistaken for Perl at a glance https://crawl.develz.org/
coldpie··on Another day another GitHub incident
Time to bring back the Boss Button https://en.wikipedia.org/wiki/Boss_button :)
coldpie··on Degraded availability for GitHub Actions, GitHub Pages and Webhooks
> People didn't care. So I don't care anymore.

Yeah. Enjoy the rest of your day off. Winter's coming, maybe go hit a park for a few hours or play a new video game or something. Or take some time to learn a new skill or something. Not your fault if the company can't provide the tools to do the job, go find something better to do.

coldpie··on Wine ported to OpenBSD
You can download the attachment and take a look at the patches. Wine already supports FreeBSD and macOS, so it's not tooooo crazy hard to add another BSD/Unix to the pile. Looks like there's a few Unix APIs that have drifted, so the patches add some #if OpenBSD style stuff to avoid using some symbols that don't exist on OpenBSD. The gs register stuff is by far the most complex bit. IIRC that register is used for thread-local storage on Windows, but for other purposes on other OS's, so handling access from win32 binaries to the gs register is a big problem when porting to a new OS.

On the whole it looks well written to me, especially with how complex & low-level these areas of Wine are. Good work to the author. I'd encourage them to try upstreaming it if they're interested. Some of it looks a little hacky, which upstream will object to, but maybe they could get some help cleaning it up, which will avoid having to maintain a diff and result in an even better port.

Edit: Oh, looks like they already talked with upstream https://marc.info/?l=openbsd-ports&m=179241414029592 It's not a huge diff to maintain, so maybe that is the better route. Great work either way.

coldpie··on Let's Encrypt is adding two additional remote perspectives for domain validation
Remember Firesheep? It used to be the normal thing to use plain HTTP over open wifi networks. Literally anyone else on that access point could read your whole network session, cookies and all. https://en.wikipedia.org/wiki/Firesheep
coldpie··on My old job feels distant now
I think you need to work on your reading comprehension and anger management skills, friend.
coldpie··on My old job feels distant now
> I’m so happy I quit tech a year ago.

What do you do now? I'm also looking to get out of this industry, but it's tough to voluntarily give up the pay.

coldpie··on My old job feels distant now
I maintain a browser extension to nuke the endless stream of boring AI noise articles: https://github.com/ColdPie1/enough-ai-on-hn/ Sometimes it misses articles with less clear titles, like this one, and you gotta nuke 'em manually.
coldpie··on Hello Toronto – Waymo Is En Route
They've been doing test runs here in Minneapolis for more than a year. You're right that it's a challenge, but I bet they'll do fine after a couple years of refinement.
coldpie··on Steam Client is now faster than Epic's new vibe coded launcher
No, that's stupid.
coldpie··on Meta’s new commercial terms will allow the scraping of news sites: experts
Facebook is a zillion dollar company, so they get to decide what will happen.
coldpie··on Steam Client is now faster than Epic's new vibe coded launcher
Fair question, but there is a decent answer. It's because Steam is an app that is shipped to 3 platforms and at least 2 architectures; the web platform is a platform- and architecture-agnostic target; and there is an extremely large set of tools and large developer pool to pull from. It may not be the set of you trade-offs you would have chosen, but it's also a reasonable choice for the problem they are tackling with the set of real-world constraints they are presented with.
coldpie··on Mozilla Introduces Firefox Enterprise
Can you point to where specifically in the article it says that:

> they will remove "AI controls" from normal Firefox

which is the question the original poster asked?

coldpie··on Firefox Enterprise
Probably took them some time to clean up all of the the Work Stoppage tickets that every dev in the company filed, lol.
coldpie··on Firefox Enterprise
My company's security dept briefly (briefly!) put GCC on the banned software list. Yes, that GCC. Buncha big brainlords in that dept.
coldpie··on Passkeys are a trap
The objective is for American big tech to be the sole gatekeeper for your ability to log in to things. They would love for it to be required for everyone on Earth to own an Apple, Google, or Microsoft device to use the Internet.
coldpie··on Passkeys are a trap
This is a pretty unconvincing argument. It's just one guy saying "trust me, no one will abuse this." It's especially unconvincing when you've got this other Passkey dev directly contradicting it:

> To be very honest here, you risk having KeePassXC blocked by relying parties. ... I've already heard rumblings that KeepassXC is likely to be featured in a few industry presentations that highlight security challenges with passkey providers, the need for functional and security certification, and the lack of identifying passkey provider attestation (which would allow RPs to block you, and something that I have previously rallied against but rethinking as of late because of these situations).

https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

They need to remove attestation from the spec. Instead of promising no one will ever use it, just get rid of it and solve the problem.

Page 1 of 34Next →