HNHacker News
TopNewBestAskShowJobs

delroth

3,137 karma · joined December 3, 2009

NixOS developer and infrastructure maintainer. Dolphin Emulator (https://dolphin-emu.org/) developer. Ex-infrastructure Security Engineer, now on a long break away from full time employment.
submissionscomments
delroth··on Retired decorator's Pokémon cards sell for £1.5M
The main reason is that these days every rare collectible card in Pokémon is an alternate version of a cheaper card from the same set. For example, N's Zoroark ex ASC 286/217 is a $120 card, but the same set has a more common, mechanically identical $1 card numbered 137/217.

This is very much intended so that collectors chasing the nice full art / textured rare cards flood the second hand market with the less desirable cheaper versions. Players can then easily buy those cards for almost nothing and with ample volume available.

delroth··on Retired decorator's Pokémon cards sell for £1.5M
That's blatantly wrong. PTCGL is the online card game, you don't hear much about it because it's basically free and there's no strong incentive to market it to you.

In person, the competitive scene in western countries is larger than MTG right now, and on the same scale as Riftbound. In Japan it's always been the biggest by an order of magnitude. The two big western open entry tournaments, EUIC / NAIC, sell out ~4,000 player tickets in a matter of seconds. Regionals tournaments that happen almost twice a month throughout the year sell out ~2K-3K player tickets in a matter of minutes.

delroth··on Dolphin Progress Release 2603
FWIW, while Dolphin doesn't accept donations, the non-profit foundation behind it has been collecting money for almost 15 years via ads and referrals. All of the financials are transparent: https://opencollective.com/dolphin-emu
delroth··on Web Bot Auth
Don't use a user agent that sends signed headers identifying you as a bot? How are any of the failure modes you mention not /improved/ by the spec proposal this comment section is about?
delroth··on I gave the AI arms and legs then it rejected me
Which is not something that happened, even according to Max Howell himself: https://www.quora.com/Whats-the-logic-behind-Google-rejectin...

> I feel bad about my tweet, I don’t feel it was fair, and it fed the current era of outragism-driven-reading that is the modern Internet, and thus went viral, and for that I am truly sorry.

delroth··on TSMC says employees tried to steal trade secrets on iPhone 18 chip process
It's nice to see TSMC's internal security teams are detecting these things, but it would be more surprising news if this kind of IP theft wasn't happening to be honest...
delroth··on Predicting Competitive Pokémon VGC Leads Using Latent Semantic Analysis
The soft prediction metric seems especially ridiculous to me. If I'm not mistaken, just picking at random gets better results than their ML selection at >= 5 predictions (1-(2/3)*5 > 0.8438).

However:

> your opponent's team is only partially known (you see their Pokemon species but not the moves, stat distributions, etc)

That's not true in the main competitive live format (e.g. NAIC 2025 which is the main case study here). These tournaments are "open team sheet", aka. moves, ability and held items are known (but not IVs/EVs).

I'm not sure whether this is the case on Smogon though, which means they might even be mixing two completely different datasets...

delroth··on Bruteforcing the phone number of any Google user
Google Reader was the last major user of the old social sharing stack at Google designed for Buzz, a product mostly remembered to these days for United States v. Google and the 2011 FTC consent decree. When people redesigned Google's social stack for G+ (e.g. all the infrastructure like Zanzibar underlying Circles, which to this day is close to state of the art!) the choice was between migrating Reader to the new tech - which nobody could justify the cost of - or keeping the old tech around for Reader when that tech was known to have had serious privacy issues leading to a major lawsuit.
delroth··on All four major web browsers are about to lose 80% of their funding
There are several other programs like STF funded by the EU (often mediated via NLNet), and for example Servo gets some amount of its funding via NGI (an EU Commission initiative): https://nlnet.nl/project/Servo/
delroth··on Libogc (Wii homebrew library) discovered to contain code stolen from RTEMS
> HBC had to give up development

HBC has not been under real development for 10+ years. This is mostly a performative act.

delroth··on Libogc (Wii homebrew library) discovered to contain code stolen from RTEMS
> AFAIK it's software RE work, and nothing done in the console hacking scenes is truly cleanroom at all

There's a wide gradient of how much effort people put into reverse engineering consoles in a legal way vs. just copying code straight from their decompiler and slapping an open source license on it. libogc is very much on the "didn't even try" side of that gradient, it's been known since pretty much forever, and even their documentation is straight up copied from Nintendo's SDKs for part of their libraries.

What's new here is discovering that even the parts people thought were developed "fresh" and not just straight-up asm2c'd from Nintendo are actually stolen from other open source projects in a way that tries to conceal the origin of the code.

Whether you'll find that "more morally reprehensible" or not will largely depend on your personal morals, but clearly for some people that seems to be the case...

delroth··on France's new high-speed train has Americans asking: Why can't we have that?
English has no literal word-to-word equivalent to this - this french "à" is used to describe the main property of a noun, and the translation in English when no original word exists is via a nominal group or a concatenation of nouns. An "avion à hélice" is a propeller plane, a "bateau à vapeur" is a steamboat, or an "étui à lunettes" is a glasses case. So a "train à grande vitesse" is similarly just a high-speed train.

"of" in English here sounds like you're describing what the object is made of instead of its property. A "boat of steam" is made of steam, it's not the same as a steam boat.

delroth··on France's new high-speed train has Americans asking: Why can't we have that?
Except here it's not even a correct literal translation of "TGV", so you wouldn't be learning anything useful.
delroth··on Italy demands Google poison DNS under strict Piracy Shield law
> It's impressive how much internet censorship in Europe is currently being caused by this one group of extremely greedy people.

How is this greedy? It's clearly illegal behavior, both from illegal re-broadcasters and from users. Most of those re-broadcast services aren't even free either, they're directly making money from the broadcasts they're replicating.

The problem is that we still haven't figured out a way to properly enforce laws on the internet. Even for completely egregious violations there's no way to do anything once you track down the website to a bulletproof host in Russia or Ukraine or similar countries that don't cooperate. After 20 years of getting nowhere the courts have to find new and creative ways to enforce laws. I think everyone agrees that ideally this shouldn't be DNS blocks or IP blocks but rather these services getting removed from the internet and/or having to implement regional blocks to comply with laws. But there's just no way at all to make this happen right now.

delroth··on Tell Mozilla: it's time to ditch Google
The EU invests in Servo already, for example through NLNet grants.
delroth··on Italy moves to reverse anti-nuclear stance
You're describing the IAEA, founded in 1957 and in activity since: https://www.iaea.org/topics/verification-and-other-safeguard...
delroth··on Italy moves to reverse anti-nuclear stance
> As always with nuclear there are a few taboo topics. One of them being fuel supply.

It's not taboo, the answer is just extremely simple: mining needs people willing to work in a dangerous and exhausting field, so when practical, rich countries tend to prefer outsourcing this (capitalism does not tend to reward ethics). It's very practical for uranium because nuclear reactors need a tiny volume which is trivial to ship and to store. Most countries with a nuclear program keep a stockpile of multiple years.

Mining uranium in other places is very feasible, as are other more expensive options like extracting it out of the ocean. After all, with nuclear the cost of the fuel is a tiny amount of the actual cost of power generation. This is not happening because there's really no need to. In the past, there have been uranium mines in pretty much every european country, see https://en.wikipedia.org/wiki/Uranium_mining_by_country#Euro...

(Refining/processing is a different story. But that's more obviously a "money/care" problem - there's no possible physical constraint for refining/processing as there could be for mining.)

delroth··on Meta claims torrenting pirated books isn't illegal without proof of seeding
This is a common misconception: there are some exceptions for certain types of media, but for example downloading copyrighted software (including games) without authorization is not legal in Switzerland. And some of those exceptions are more constrained than others.
delroth··on A layoff fundamentally changed how I perceive work
> It’s not the case for big tech employers, who tend to have very clear “levels” and (from what I can tell on levels.fyi) it’s often a 25%+ jump in total comp.

You're misinterpreting the data, because you can't see for data points on levels.fyi whether they obtained their reported salary by being promoted within the company or by doing the very common "side-promotion" of getting hired at a higher level at a competitor.

I was young and naive and unwilling to play the company hopping game, I got promoted from L3 to L6 at Google, after a year and a half at L6 I was paid in base salary less than some of my colleagues who got recently hired at L5 and negotiated well, plus they got significantly higher stock grants as part of their signing bonus (like, around 2x what I was getting through standard yearly grant refreshes).

delroth··on How far can you get in 40 minutes from each subway station in NYC?
Same in Switzerland, with the added quirk/bonus that shops in train stations are allowed to open on Sundays, when shops outside of train stations usually can't open due to employment laws. This wasn't originally meant as a way to increase attractiveness of businesses in train stations and other public transit places, rather as a way to make sure that people travelling have services available while on their way. But nowadays it's definitely a big reason for people to come specifically shop in train stations on the weekend.
delroth··on Spain proposes 100% tax on homes bought by non-EU residents
Those expats are residents though, and thus wouldn't be impacted by the proposal being discussed in the linked article.
delroth··on Spain proposes 100% tax on homes bought by non-EU residents
How does allowing *non-residents* to buy real estate help in attracting foreigners and cultivate growth?
delroth··on Carlsen quits World Rapid and Blitz championship after dress code disagreement
He was 2.5/3 the day he was fined (then forbidden to play) for his dress code violation, and was around rank 25 after game 8, one point behind first place. Not a winning performance but not particularly bad either.
delroth··on Fake Nintendo lawyer is scaring YouTubers, and its not clear YouTube can stop it
Most game studios these days - including Nintendo - explicitly provide guidance and licensing terms for content creators. You can for example check out https://www.nintendo.co.jp/networkservice_guideline/en/index...

> As long as you follow some basic rules, we will not object to your use of gameplay footage and/or screenshots captured from games for which Nintendo owns the copyright ("Nintendo Game Content") in the content you create for appropriate video and image sharing sites. To help guide you, we prepared the following guidelines: [...]

The legal gray area definitely still exists for many of the smaller/indie game studios, but this kind of licensing is more common than not today.

delroth··on We can now fix McDonald's ice cream machines
This has recently been challenged in courts and rejected: https://www.eff.org/deeplinks/2024/08/federal-appeals-court-...

> Integral to the Court’s decision was the conclusion that Section 1201’s ban on circumvention of access restrictions is a regulation of “conduct” rather than “speech.”

delroth··on The gigantic and unregulated power plants in the cloud
I have no idea what you're talking about, since nowhere did I use solar capacity factor data nor did I look at number of reactors per plant.
delroth··on The gigantic and unregulated power plants in the cloud
> In the Netherlands alone, these solar panels generate a power output equivalent to at least 25 medium sized nuclear power plants.

Since this didn't pass the smell test: the author is looking at nameplate capacity, which is a completely useless metric for variable electricity production sources (a solar panel in my sunless basement has the same nameplate capacity as the same panel installed in the Sahara desert).

Looking at actual yearly energy generation data, this is more like 1.5 times the generation of an average nuclear power plant (NL solar production in 2023: 21TWh, US nuclear production in 2021: 778TWh by 54 plants).

Which maybe puts more into perspective the actual risks involved here. I'm not saying there shouldn't be more regulations and significantly better security practices, but otoh you could likely drive a big truck into the right power poles and cause a similar sized outage.

delroth··on Lix is a modern, delicious implementation of the Nix package manager
"Right to sponsor a project and get it to advertise your company" does not exist in any FOSS license that I know of. There's pretty much nobody complaining about Anduril using Nix, or even contributing to Nix. Many contributors have placed their ethical line at "accepting money from Anduril in exchange for services at official project events".

It's not helpful to misrepresent these things to try and simplify a complicated situation.

delroth··on Backdoor in upstream xz/liblzma leading to SSH server compromise
> The systemd notification protocol could have been as simple as just writing a newline to a pipe

It basically is. libsystemd links to liblzma for other features not related to notifications.

(The protocol is that systemd passes the path to a unix socket in the `NOTIFY_SOCKET` env variable, and the daemon writes "READY=1" into it.)

delroth··on Starbucks $10 pork-flavored coffee
It's Starbucks Reserve, so yes, you're absolutely paying for the experience.
Page 1 of 12Next →