HNHacker News
TopNewBestAskShowJobs

dchest

14,966 karma · joined June 27, 2008

Dmitry Chestnykh, founder of Coding Robots, a tiny software company (productivity apps, currently: Mémoires, Video Mémoires). Created and maintaining "I Write Like" (https://iwl.me) and Calcish (https://calcish.com). Created BlogJet. Failed with StableLib (https://news.ycombinator.com/item?id=9342769).

Author of Password Authentication for Web and Mobile Apps (https://dchest.com/authbook/)

Based in Montenegro.

Email: dmitry@codingrobots.com

X: @dchest Bsky: dchest.com Mastodon: mastodon.social/@dchest

Website/blog: https://dchest.com

GitHub:

https://github.com/dchest

https://github.com/coding-robots

(CC-BY) All my comments on HN are licensed under Creative Commons Attribution 3.0 license.

submissionscomments
dchest··on No More Icons in Every Menu by Default
My favorite thing about this is a checkbox in Xcode's Interface Builder (or whatever it's called now) for menu items image — "Only for macOS 26".
dchest··on Scandinavia's first farmers slaughtered hunter-gatherer population, DNA suggests
> "This transition has previously been presented as peaceful. However, our study indicates the opposite. In addition to violent death, it is likely that new pathogens from livestock finished off many gatherers," says Anne Birgitte Nielsen, geology researcher and head of the Radiocarbon Dating Laboratory at Lund University.

(from the article)

dchest··on Keyboard differences between Windows and Macs
Mac equivalents to Windows Home and End are Cmd-ArrowUp and Cmd-ArrowDown. Fn-Left and Fn-Right are Mac-flavored Home/End, which don't move the text cursor, but scroll the text container, keeping cursor in its original place (although there's no distinction when viewing documents, e.g. in a web browser).
dchest··on FilesToolkit for Mac: Get More Done with Every Right-Click
FYI, batch rename (with counters and some patterns, but not regex) and Copy as pathname (hold Option) are already Finder features.
dchest··on UK military jamming other nations' satellites to defend itself, BBC told
https://www.reuters.com/world/europe/nato-allies-foil-russia...
dchest··on Key symbols we lost to time, pt. 2: The Mac side
You can also use Emacs keys (Ctrl-D) for one-handed delete. Very convenient when Caps Lock is remapped to Control.
dchest··on GEFS on OpenBSD: A Early Preview
Talk at EuroBSDCon 2026: https://exquisite.tube/w/3QQimMdswWJxrsPaJtak2u
dchest··on GEFS – new file system built for Plan 9
Talk at EuroBSDCon 2026: https://exquisite.tube/w/3QQimMdswWJxrsPaJtak2u
dchest··on Antiquated HTML Snippets and Artefacts
It's recorded in the HTML5 spec under 4.2.5.1 Standard metadata names, which defines the correct format and parsing:

https://html.spec.whatwg.org/multipage/semantics.html#meta-k...

So, it's standardized and not deprecated.

It has this note though:

"Many search engines do not consider such keywords, because this feature has historically been used unreliably and even misleadingly as a way to spam search engine results in a way that is not helpful for users."

HTML 4.01 says the following:

"This specification does not define a set of legal meta data properties. The meaning of a property and the set of legal values for that property should be defined in a reference lexicon called a profile. For example, a profile designed to help search engines index documents might define properties such as "author", "copyright", "keywords", etc."

https://www.w3.org/TR/html4/struct/global.html#h-7.4.4

dchest··on Antiquated HTML Snippets and Artefacts
Why is meta keywords deprecated? I use them for my custom website search. I don't care that external search engines don't index it.
dchest··on Actively exploited sandbox RCE in all Chromium versions
There's more to it than just using a memory safe language.
dchest··on Show HN: Open-Source eInk Bike Computer
GPS
dchest··on A note on subscription prices from LWN
Times New Roman (and STIX Two Text, Libertinus Serif clones) has been designed with increased x-height while keeping the same line height, see https://en.wikipedia.org/wiki/Times_New_Roman#/media/File:Ti...

It's normal for it to appear denser vertically. Your example of increased line height looks suitable for subheadings, but in no way represents the typographic tradition of its use.

dchest··on “I just chose words carefully”
Indeed:

https://hart.pglaf.org/

From Wikipedia:

"Michael Hart's email messages and blog posts had equal line length paragraphs in monospaced font: he chose the wording in such a way that each line had the same number of characters."

dchest··on Firefox 157 will include JPEG XL by default on all platforms
It probably used pixel-by-pixel conversion (decode input format -> encode output format), which is lossy, not the libjxl native way to convert JPEG (it needs to know about the original JPEG data, not the raw image data).
dchest··on Run OpenBSD on DigitalOcean for $4/month
A warning about openbsdhandbook[.]com - this website has completely incorrect information for some things. Like hallucinated, even though I think it was created before LLMs.
dchest··on People of ACM – Russ Cox
I recently learned that Russ also wrote software for The On-Line Encyclopedia of Integer Sequences (https://oeis.org) and is the president of the OEIS Foundation.
dchest··on Windows brings out the Rorschach test in everyone (2003)
The original: https://www.youtube.com/shorts/uaQyaBRaM9w
dchest··on Tell HN: Cloudflare silently injects its analytics when you switch nameservers
> measure and improve your website speed

inserts 31KB JavaScript into tiny HTML pages.

dchest··on Tell HN: Cloudflare silently injects its analytics when you switch nameservers
Indeed, https://blog.cloudflare.com/the-rum-diaries-enabling-web-ana...
dchest··on Xorshift Generators
Lua 5.4 and 5.5 use xoshiro256**: https://www.lua.org/manual/5.4/manual.html#pdf-math.random
dchest··on Single log line is 49KB+ (ext4) / 110KB+ (btrfs) of systemd-journald disk writes
Yes, WAL by definition means it writes the data at least twice.
dchest··on Single log line is 49KB+ (ext4) / 110KB+ (btrfs) of systemd-journald disk writes
Write-Ahead Log for... logs?

WAL means it will write the same data at least twice. Similar issue, but even worse, with LevelDB -- it will just delay the inevitable huge rewrites for later. Funny to hear those proposals in the write amplification thread.

I believe journald log rotation is basically: close file - open a new one. How is it not completely different?

dchest··on FreeBSD: Missing Mac validation in wg(4) packet decryption
Looks like it was caused by result confusion: crypto_dispatch returns errors in two different ways:

https://man.freebsd.org/cgi/man.cgi?query=crypto_dispatch&ap...

"crypto_dispatch() returns an error if the request contained invalid fields, or zero if the request was valid."

However, on an actual error from the crypto driver (e.g. invalid MAC), crypto_dispatch result is successful and the error is returned in crp_etype structure field.

https://cgit.freebsd.org/src/commit/sys/dev/wg?id=3427182452...

dchest··on Forth
FORTH LOVE? IF HONK THEN
dchest··on TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access
With CGO disabled, it only reads /etc/passwd, while the glibc getpwnam(3) can query LDAP etc.
dchest··on TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access
Which uses libc via CGO or parses /etc/passwd with no CGO, which won't work for some cases.

https://github.com/tailscale/tailscale/blob/e4144230f410204a...

  // userLookupGetent uses "getent" to look up users so that even with static
  // tailscaled binaries without cgo (as we distribute), we can still look up
  // PAM/NSS users which the standard library's os/user without cgo won't get
  // (because of no libc hooks). If "getent" fails, userLookupGetent falls back
  // to the standard library.
dchest··on An update on residential proxies and the scraper situation
I did something like this using fail2ban for some time, but 1) it didn't help much due to the larger number of IPs, 2) it blocked widely used VPN services.
dchest··on Potential session/cache leakage between workspace instances or consumer accounts
Can be malware? Something like https://news.ycombinator.com/item?id=48667495
dchest··on Underarm bowling incident of 1981
https://www.youtube.com/watch?v=E_6d3JBBo4s
Page 1 of 34Next →