HNHacker News
TopNewBestAskShowJobs

commandersaki

2,378 karma · joined March 19, 2019

submissionscomments
commandersaki··on Sorry we made you grind LeetCode
I guess this is in response to Google (and I think even Amazon) changing up their hiring to now include some AI component. I don't think Google is ditching leetcode questions altogether though.
commandersaki··on Why Constant-Time Crypto?
BearSSL is probably the best documented cryptographic library I've come across. It also has a unique feature of being able to compile the resultant objects to only include what you need and nothing else making it great for embedded, specifically anemic devices.

Unfortunately it kind of halted development many years ago and hasn't really progressed since.

Perhaps since it was a pre-AI project, it might make sense to continue it with heavy use of LLMs, but with every LOC being human reviewed.

commandersaki··on Why Just Passwords?
Making passkeys an additional way to sign into your account is a great way for criminals to place a passkey to always have access into your account.
commandersaki··on D-Bus Hell
Save you a click: the website is named after its owner David Bushell.
commandersaki··on Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?
Private IRC server, Headscale for Tailscale, torrenting, software development, and also having friends have a place that they can use that isn't their laptop.
commandersaki··on Will Linux phones become a viable alternative to the Android/iOS duopoly?
Do any Linux phones or even GrapheneOS phones have a secure enclave/TEE?
commandersaki··on Tell HN: I've been paying for a rural Tanzanian's education for 10 years
Gives me Bram Moolenar vibes.
commandersaki··on Telegram Desktop vulnerability allowed any user's file to be stolen
If Signal had a backdoor a proof of it would have surfaced by now. There have been many cases where law enforcement repeatedly fail to get any useful information whatsoever from the Signal Foundation because they have nothing to offer and simply cannot obtain any useful evidence.

Signal having an "obvious" backdoor is really a thing for the tinfoilers, crackpots, and the misinformed.

commandersaki··on Telegram Desktop vulnerability allowed any user's file to be stolen
I use Signal and support the Signal Foundation by subscribing to their backup service.
commandersaki··on Telegram Desktop vulnerability allowed any user's file to be stolen
It isn't a secure messenger, people that think it is have been bamboozled.
commandersaki··on I paid people to try and follow my README
I hate READMEs with a gazillion emojis, too much noise.
commandersaki··on Visa, Mastercard, major banks facing new litigation over 'anticompetitive' fees
Yeah that's not account number and routing number, like practically the rest of the world. And then Zelle has its own limits.
commandersaki··on Visa, Mastercard, major banks facing new litigation over 'anticompetitive' fees
Why is it that you cannot (practically) send money between two people in the US using just bank account number and routing number for free? Can't even do it if the accounts are in the same banking institution.
commandersaki··on Ask HN: Who wants to be hired? (October 2026)
I really liked your IPv6 take.
commandersaki··on Returning from vacation? The government can search your phone without a warrant
I don't get this article, the person being searched could've refused? They wilfully yielded.
commandersaki··on Red Hat being phased out of existence?
I hope so, never liked Red Hat, even before IBM acquisition. It was essentially Microsoft-lite.
commandersaki··on Rails World 2026 Opening Keynote [video]
I wish this was the end of electron.
commandersaki··on Two-tier encryption in the UK
Please stop with the hyperbole, weak defaults are not backdoors, know the difference. A backdoor is precisely what the UK was commanding, that is a secret way to siphon the cleartext data while purporting E2EE. Messages and other data syncing to iCloud using standard encryption (that is both you and Apple know the key) is simply a different trust model. It has its own set of benefits because there is less technical burden on the user which would usually arise in the event of a disaster and attempting to recover the data.

Yes, because Apple knows the key, they can yield your cleartext data to law enforcement or whoever they authorise, but that is implied in the trust model, it isn't kept a secret or done dishonestly. A backdoor would is a devious or dishonest mechanism to siphon data, which nothing of the sort is happening here, because the trust model is transparent to the user.

commandersaki··on Rails World 2026 Opening Keynote [video]
Ignorance is bliss aye.
commandersaki··on What even is an OS now?
A new phone? How trite.
commandersaki··on Typst makes big strides
They say that the subscription to their web application is a good way to fund them. Unfortunately they don't do bounties because I would like to focus money into HTML export support.
commandersaki··on Typst makes big strides
I write this in pretty much every Typst thread. Here are some notes I wrote when I started out with typst when comparing with LaTeX and some recent additions:

1. It doesn't generate 5 bloody files when compiling.

2. Compiling is instant.

3. Diagnostics are way easier to understand (sort of like Rust compiler suggestion style).

4. List items can be either - item1 - item2, etc. or [item1], [item2]. The latter is way better because you can use anchoring to match on the braces (like "%" in vim), which means navigating long item entries is much easier.

5. In latex you have the \document{...} where you can't specify macros so they need to be at the top, in Typst you can specify the macros close to where you need them. [I've been informed this is actually incorrect and Latex does allow you to specify macros anywhere]

6. It's easier to version control and diff, especially if you use semantic line breaks.

7. Changing page layout, margins, spacing between things, etc., footers with page counters, etc. just seems way easier to do.

8. Compiling with Typst is always one pass.

9. I'm not sure how this would compare with Latex but I'm in law school and needed to cite using AGLC4 which has a CSL (citationstyles.org) template supported by Typst; I have confirmed the CSL XML is correct but doesn't render properly in Typst. The workaround I found was to hand typeset my own citation and bibliography which sucks.

10. Most of what you need is built in to Typst and I've yet to need to import a package or template; even for the most basic documents with Latex you find you'll need to use many packages (such as fancyhdr for customised headers and footers).

11. Latex distributions can be a monstrosity, gigabytes in size like TexLive, and I acknowledge you can get slimmed down on-demand version such as Miktex. There's just one distribution of Typst and its pretty lean, although it might be nice to have multiple implementations in the future.

12. Latex markup looks like an eye-sore, typst reads more naturally as plain-text with a bit of a markdown flavour.

13. Although I loathe discord, I find getting real time support so easy with an almost real time answer to any question I have and the community is heaps friendly; getting support with Latex is not so easy.

commandersaki··on Google Rolls Out $899-Plus 'Ai laptops'
Surprised you can use Adobe Photoshop with this.
commandersaki··on What happened to the Snowden archive
Can't cache interactive content which is probably more invaluable than static. HTTPS is overall a massive win, which is why NSA wanted to surveil it in the first place.
commandersaki··on What happened to the Snowden archive
Encrypted Hello will close that bit given time.
commandersaki··on What happened to the Snowden archive
I would say Snowden's legacy is the push to get HTTPS everywhere.
commandersaki··on Typst Makes Big Strides
I love typst and I really enjoy using their online editor. Use it heavily for compiling exam prep notes for law school. Even got a few guys in my law school cohort using it and collaborating via their online editor.
commandersaki··on I don't like passkeys
Passkeys are a great way for attackers to have a secondary login into your account (e.g. Outlook, Gmail, etc.)
commandersaki··on Ask HN: What is the most career altering course or book you have gone through?
Fantastic book.
commandersaki··on Neovim have a ~$800k Bitcoin donation sitting untouched since 2023
Thank you, built in LSP is invaluable.
← PreviousPage 3 of 34Next →