HNHacker News
TopNewBestAskShowJobs

cpburns2009

1,454 karma · joined April 9, 2013

submissionscomments
cpburns2009··on Residential proxies detected on White House network
I thought AI scrapers were generally a little more intelligent than let's spam the same request 1k times (without any obvious permutations).
cpburns2009··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
Nice analysis. That helps clarify how mptcp is involved. At first I thought your response was total nonsense because I have no idea what "hungry ghosts" have to do with anything.
cpburns2009··on Residential proxies detected on White House network
It wasn't any sensible AI scraper. It kept requesting the same pages a thousand times over.
cpburns2009··on Residential proxies detected on White House network
This isn't a theoretical problem either. My employer's website was being hammered by residential proxies a month ago. It wasn't until we setup WAF captcha rules that they mostly subsided. It wasn't even the typical exploit scanner. I don't know what the purpose was but it was effectively a DDoS.
cpburns2009··on AMD expects to outsell Intel in Q4 for the first time in history
INTC was unusually high the past six months. They're still up 48% ytd though.
cpburns2009··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
Thanks. Red Hat's claim that blocking IPv4 options wasn't enough made me think a larger structure was used-after-free.
cpburns2009··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
My past experience with Debian was running it as a desktop distro on laptops which required proprietary drivers for GPU and wifi. I haven't had trouble in containers or VMs. Though I am considering switching my homelab servers (repurposed desktops running DE-less) from Ubuntu LTS to Debian testing or stable.
cpburns2009··on Tell HN: Claude Code queries raw GitHub token on startup
I guarantee it's a convenience feature. Having a Github token available make using Github significantly easier for Claude. I only use the web interface, and Claude frequently cannot access Github repos or issues, or gets rate limited. If Claude has a token, it can authenticate and not run into this annoying problem.
cpburns2009··on Ubuntu unattended-upgrades installs HAProxy version with a major regression
Really Ubuntu? They released a broken Nginx back in June that would cause workers to constantly segfault when using common modules available in the repo.
cpburns2009··on Ballot Rejections Have Soared in Rural Counties as USPS Reduces Mail Service
Can they increase the digital stamp price for all the spam mail I receive?
cpburns2009··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
Does Debian still make it annoying to use "nonfree" drivers?
cpburns2009··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
I know that's one mitigation technique, like disabling mptcp does. But does that fully prevent this exploit?
cpburns2009··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
My UDM-Pro had an update available yesterday. I don't know if it's related to the CVE or the shit eMudhra CA.
cpburns2009··on Ask HN: What hardware are you using to run local LLMs?
I'm running an RTX 5090 (32gb VRAM) and Strix Halo (128gb unified memory). I haven't had much time to tinker with my AI setup so I'm still running Qwen3.6-27B (NVFP4 quant) on the 5090. The prices today are just insane.
cpburns2009··on Why Anthropic's Filing Crushed Tech Stocks
People began disliking big tech well before this latest bout of AI.
cpburns2009··on Python's experimental JIT to be removed
Literally all the PSF had to do was follow federal antidiscrimination guidelines. I guess that's too much of a burden for some organizations.
cpburns2009··on Python's experimental JIT to be removed
If there's common real world paths that need to be supported, you can tailor optimizations to target those uses cases.
cpburns2009··on Python's experimental JIT to be removed
What would have been really nice is if the $1M/y in funding the PSF rejected due to ideological purity could have been reallocated to PyPy.
cpburns2009··on Python's experimental JIT to be removed
This is exactly how I write my Python. I'm currently debating between going in deep and transitioning to either TypeScript or Rust. Go's object system and error handling is too weak. Java is too verbose, but I have a soft spot for it.
cpburns2009··on Python's experimental JIT to be removed
The problem with PyPy, which I'm a huge fan of BTW, is it's on life-support. The only reason the past couple major versions were released was due to a few small companies or individuals directly implementing the updates themselves. That's my understanding at least. It's disheartening because I've been primarily using PyPy for 5 years, advocated for it, and was looking into contributing more to it before finding out about its state.
cpburns2009··on Python's experimental JIT to be removed
I have no doubt Julia's far better with this. I just wanted to point out Python does have a similar precedence for ahead-of-time compilation, albeit with byte-code only. If the Python steering council ever gets its act together, maybe Python could have real AOT and JIT.
cpburns2009··on Python's experimental JIT to be removed
I've never bought this argument. Underneath all of the magic inheritance in Python is just the MRO (method resolution order). That's not characteristically any different from JavaScript's prototype chain. There's no reason a Python JIT couldn't optimize everything JavaScript does, and if you do specifically access `self.__dict__`, that can be a cold, unoptimizable path.
cpburns2009··on Python's experimental JIT to be removed
That's basically how Python already compiles source to byte-code.
cpburns2009··on Why Is Everyone Watching TV with the Subtitles On?
Quite simply the audio mixing for TV and movies is utter shit. You shouldn't need a 7.3 sound system to potentially hear the actors legibly. The stereo speakers built into my TV should be adequately supported, and it is frankly the default set up for most people including myself.
cpburns2009··on UUIDv7: Timestamps aren’t time-ordered and other oddities
I read it. There's no convincing reason for most applications.
cpburns2009··on UUIDv7: Timestamps aren’t time-ordered and other oddities
What's bad about using them as opaque public ids? The only information that's leaked is approximate time of creation which is moot for most applications.
cpburns2009··on UUIDv7: Timestamps aren’t time-ordered and other oddities
ULID is what I use. I convert it to UUID before storing in PostgreSQL. Technically it's an invalid serialization but it works. The system predates UUIDv7. I also like ULID's shorter representation.
cpburns2009··on UUIDv7: Timestamps aren’t time-ordered and other oddities
PostgreSQL's UUID type is convenient. But yes it's pretty much just a 16 byte type.
cpburns2009··on Evolving Threat: http2shell is an RCE in Node, Python, and more
Only decompression with Google's brotli library is affected. So if you use "Brotli" or "brotlicffi" in your Python app to decompress brotli, you're vulnerable. Compressing responses with brotli from Apache is safe.
cpburns2009··on Evolving Threat: http2shell is an RCE in Node, Python, and more
Here's the normal link:

https://x.com/AikidoSecurity/status/2113759110625906950

Page 1 of 29Next →