Hacker News Reader

deepersprouton IBM CEO says open weight models are now good and cheap on-prem

> No political censorhip? Try asking Chinese models about Taiwan.

In open models you can "uncensor" them: https://arxiv.org/abs/2406.11717

deepersprouton Getting ready to operate GNU Taler in Germany

> It's "money" [that] expires

I agree. I can hold my paper cash in my wallet for as long as I like. Having digital money that expires (even if i can "refresh" the validity period) is a no go. It would have to be used like this: need to buy something? load some money on GNU Taler wallet, buy thing, keep GNU Taler wallet empty.

So it would be just cumbersome to use in real life.

deepersprouton Security advisory: Critical remote code execution vulnerabilities, update now

i started seeing a lot of scans on my webservers:

  ==> /var/log/apache2/access.log <==
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /myglu.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /bnmtp.php HTTP/1.1" 301 431 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /bnmtp.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1" 301 493 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 301 447 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:02 +0200] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /flamini.php HTTP/1.1" 301 435 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /flamini.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /alfa.php HTTP/1.1" 301 429 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /alfa.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /wp-content/index.php HTTP/1.1" 301 453 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /wp-content/index.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:03 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 463 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 467 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET //wp-admin/js/index.php HTTP/1.1" 301 455 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-content/admin.php HTTP/1.1" 301 453 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-content/admin.php HTTP/1.1" 200 837 "-" "-"
  example.com:80 74.225.203.7 - - [21/Oct/2026:12:39:04 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 301 467 "-" "-"
  example.com:443 74.225.203.7 - - [21/Oct/2026:12:39:05 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 200 837 "-" "-"

deepersprouton [dead]

They have awesome uptime for the resources they have, so I am looking forward to the post mortem.

deepersprouton Letsencrypt will kill SMTP server auth following Chrome CA policy change

I still don't understand what this breaks. I use a LE certificate for my smtp service, but as I understand it, other mail servers don't connect to it using a client cert, they just check that the cert deleivered is trusted. Or am I missing something?

Does this break some custom setup?

deepersprouton Commercial jet collides with Black Hawk helicopter near Reagan airport

> They were almost certainly both cleared to maintain visual separation.

DCA TWR: PAT25, traffic just south of the Woodrow Bridge, a CRJ, it's 1200 feet setting up for runway 33.

PAT25: PAT25 has the traffic in sight, request visual separation.

DCA TWR: Visual separation approved.

Audio of MID-AIR CRASH into Potomac River: https://www.youtube.com/watch?v=CiOybe-NJHk

deepersprouton PUBG developer Krafton make a life simulation game inzoi

No, it's most probably the PUBG engine.

deepersprouton Priced out of home ownership

Just nitpicking here, but Milan (Lombardy) is the second most expensive region in Italy. The first ist South Tyrol: https://www.immobiliare.it/mercato-immobiliare/

Probably because income there is higher than in the province of Milan, and quality of life is better for some indicators.

deepersprouton Take a look at Traefik, even if you don't use containers

I usually feed all the documentation to an llm and ask the question to the llm that fetches the info with rag. For example:

> how do i configure Traefik to proxy traffic to two backend services?

Configuring Traefik to proxy traffic to multiple backend services is a common use case. You can achieve this by defining multiple entry points and routers in Traefik's configuration, each pointing to a different backend service. Here's a basic example of how you can configure Traefik to proxy traffic to two backend services:

  yaml
  
  # traefik.yaml
  
  # Enable API and Dashboard
  api:
    dashboard: true
  
  # Define entry points
  entryPoints:
    web:
      address: ":80"
    app1:
      address: ":8081"
    app2:
      address: ":8082"

[...more stuff...]

deepersprouton Simon Riggs has died

I remember the discusson between Simon and Robert about RLS in Postgres, a feature I was eagerly awaiting at the time: https://www.postgresql.org/message-id/CA%2BU5nM%2BADSzcSs_2d...

Simon always replied in a professional and objective tone, while making his point. I liked him.

deepersprouton How I Backup

I do something similar[1] with rsync --link-dest and hard links, so that I can go back in time if I delete something. OP seems to just have a copy of his actual files, but if he sees a file missing after 2 weeks after deleting it, he has no way of recovering it.

[1]https://31337.it/incremental-backups-with-rsync/

deepersprouton JAL A359 at Tokyo collided with Coast Guard DH8C on runway and burst into flames

Or god wanted them all to die, but human technological advances made them live.

deepersprouton The Never Ending Now

> From the moment the driver hit the gas pedal, everybody was on their phones. From the back row, I watched my friends scroll their social media feeds with ferocious intensity.

Sorry, but I think you should change friends. Or your friends have a serious problem with social media that you should help them overcome. There are tons of other interesting venues on the internet. This is one of them. And here you have articles from the past, as from the present. No need to live in The Never Ending Now.

deepersprouton Ask HN: What are the most eye-opening textbooks you have ever read?

Never Split the Difference: Negotiating As If Your Life Depended On It by Chris Voss. It made me change how I aproach a negotiation in about every aspect of my life.

https://www.amazon.com/dp/0062407805

deepersprouton How to lose your work using Undo Copy in Windows

The folder you copy your file (any file that has some importance to you) to should be a onedrive synced folder. Word/Excel/Powerpoint/... files you edit in a synced folder save automatically without the need for you to ctrl+s.

If you undo copy that file you will find it in your onedrive history.

deepersprouton Ask HN: Concepts that clicked only years after you first encountered them?

Haskel monads.

deepersprouton Users reporting artifacts appearing in old images stored in Google Photos

I'm using Nextcloud. Works great.

deepersprouton Using HTTP Basic Auth in 2022

Send an ajax request to your api with invalid credentials. The response returns a 401 and loggs the user out. Then redirect to the pre-login page.

deepersprouton Tell HN: You are not alone this Christmas

I think this whole christmas thing makes a lot of people feel alone and depressed. I hate that. Posts like these make me think this even more. I am alone, and I like it. I can play Warzone and code some stuff I wanted to finish. I can do things I like. I know this may sound stupid, but if you feel alone, don't. There is no reason to. It's just a day like many others. There is really nothing to it.

And we don't need "Christmas" for a virtual hug. We can do that every day of the year.

deepersprouton Google Cloud reported an operating loss of $5.6B in 2020

I hope they don't terminate it like they did with a lot of other producs. GCP is a pleasure to work with.

deepersprouton Spain passes law allowing euthanasia

I don't think it's always wrong to end your life. If you are in pain and have no way out, why should you have to endure suffering?

deepersprouton Spain passes law allowing euthanasia

So she got the choice. Even if it was given to her in a non offical way.

deepersprouton No Cookie for You

> GitHub still sends the same personal data to their own analytics endpoint

I see nothing wrong with that. Analysing your users on your own site is no problem for me. I should know what users do on my property.

What's the problem you have with that?

deepersprouton Is There a Google-Free Future for Firefox?

why is dev tools dead?

deepersprouton Signing .jars is not worth the effort

> PGP is bad and needs to go away

how should we sign git commits?

deepersprouton Zettlr – FOSS markdown editor for personal knowledge management and publishing

How do you organize your notes? Do you have one big file for everything, one file for one note, one file for argument, or something else? Do you keep a date on your notes?

Maybe you can share a bit about how you organize your written down knowledge?

deepersprouton George Floyd Protest – police brutality videos on Twitter

You and your Dad are not statistically relevant. My experience is very different, and it is backed up by data:

https://en.wikipedia.org/wiki/List_of_killings_by_law_enforc...

United States is between Congo and Iraq when sorted by rate per 10 mil. people.

The first european country is way down that list.

deepersprouton George Floyd Protest – police brutality videos on Twitter

> because police brutality is kind of a global phenomenon

No it's not. Police in Europe is, on average, very kind. When they stop you, you don't have to be afraid of anything, and more often than not you stop them to ask for help, even if it's just to ask for directions.

deepersprouton Generating Crime Safe CSRF Tokens

> Some people like their sites to work with out javascript.

The 2020 solution to CSRF attacks is using `SameSite` cookies. That makes CSRF tokens obsolete. So if you can accept that old browsers may be vulnerable, you can just use `SameSite` cookies and be done with it.

deepersprouton Running your own secure communication service with Matrix and Jitsi

Does someone have experience running Jitsi with 4+ users? Like in conferences with maybe up to 12 people? Can it handle it?