HNHacker News
TopNewBestAskShowJobs

esseph

2,781 karma · joined December 26, 2024

submissionscomments
esseph··on GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
> This "era of constant exploits/patches" is not normal and can't go on. Currently it is an ongoing cat and mouse game, but it doesn't have to be.

Security is always reactive by its very nature. You can do proactive things, but you will always be reactive to novel attacks.

Expect everything to have various levels of rolling upgrades, and soon. That's a lot of work.

esseph··on GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
> Probably larger Datadog bills too.

I don't think that lasts, I've seen at least 5 viable replacements now. All internal projects at major US companies.

esseph··on GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
It's not maintainable unless you autobuild, and yes, upgrade treadmill.
esseph··on Discord will soon let anyone find public server messages through Google
You have a misunderstanding of the value the service provides for the larger market.

They want a service, not software.

If you'd like to build a clone or even a better version? I'd love to see it! I might use it!

esseph··on Discord will soon let anyone find public server messages through Google
Matrix sucks. The ecosystem.

The design sucks. The clients suck.

I'm sure a lot of very well meaning people worked very hard at it! But from an end user and server operator POV, it's ass.

esseph··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
> probably it doesn't make things better that the vendor is Lenovo.

You mean, arguably the best vendor of linux laptops since 2005?

Just google around.

esseph··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
> The value of UEFI is surely dubious. I recently had to update my BIOS using Windows PE since there was no way of doing this on Linux.

That sucks. I'm able to upgrade the firmware of my checks 8 year old motherboard and its backup firmware from a linux shell.

esseph··on Amazon to buy satellite firm Globalstar in $11.57B deal
The original duplicates the path

Here's the link:

https://www.reuters.com/business/media-telecom/amazon-signs-...

esseph··on Discord will soon let anyone find public server messages through Google
> OTR supports IRC, but in practice either solution beats the privacy of Discord, which requires all traffic to be sent in plain text to their corporate owned databases.

As someone who was an irc operator, I can assure you, everything from IRC was funneled into ever place it was ordered to be...

esseph··on Discord will soon let anyone find public server messages through Google
> Matrix

Is a piece of shit with awful UX.

esseph··on Tailscale SSH: Investigation and remediation update
That's not a knock, it's a password :-)
esseph··on UK to charge universities $1,200 per international student
My first guess for that was a watch. My second was a car.
esseph··on Discord will soon let anyone find public server messages through Google
> [chat]... without mandating use of a surveillance capitalism product

Sooooooo what is your solution?

You just described every single, non-E2E communication product, because they are all indexed and used by surveillance capitalism, including governments and corporations.

Your problem isn't the tools, it's the internet.

esseph··on Tailscale SSH: Investigation and remediation update
LLMs port knock for redteam scans. Have for a long time.
esseph··on UK to charge universities $1,200 per international student
Okay, so you live in California or NY and you're hitting a federal cap around the 32% mark on the progressive tax rate.

Ofc not counting social security, medicare, and that state tax that is around half as much as what you are paying federally (which is more than double many other localities).

So you were saying as a combination kind of effective tax rate, got it.

When you first said that 44% number, it was very fishy - because there is a federal cap at 37% :)

esseph··on UK to charge universities $1,200 per international student
I think your perception of this place in 2026 is greatly skewed.
esseph··on UK to charge universities $1,200 per international student
For your effective tax rate to be 44%, you'd have to live in California or New York, be single, and make over $600,000 a year. Insurance can be significant but is still around $12k a year total for most family rates.

(That pay would effectively be almost 10x what the average person in the US makes a year.)

esseph··on AI promised less work. I've never worked more
Might be just as bad, possibly worse, if you aren't BigCo.
esseph··on Anthropic S-1
> Or is it local compute, models becoming more efficient and [...] companies hosting their own AI clusters like they would run SAP?

Already happening, which is requiring a lot of enterprise DC power retrofits.

esseph··on DOJ says presidents should be able to sell secrets on eBay
Quash your commits before merging?
esseph··on NBA announces partnership with prediction markets Kalshi, Polymarket
> It's crazy how dramatic the shift has been.

Follow the money. It didn't happen by accident, it was a well orchestrated campaign.

esseph··on France asked ISPs to prepare temporary DNS blocks for major social platforms
Interesting...
esseph··on Tool book of a Nuremberg knight from 1505
> It's like I'm a cow being milked on an industrial engagement farm.

Always were, just now this signal makes people aware of it and they don't like how it makes them feel.

esseph··on France asked ISPs to prepare temporary DNS blocks for major social platforms
Afaik everyone has always been rate limited.
esseph··on Roku developer repositories moved from GitHub to GitLab
Oh look, they may have started to catch up. Like actually out some effort in!
esseph··on Roku developer repositories moved from GitHub to GitLab
Parent child pipelines

Shared pipelines across multiple projects

rules: have far more flexibility than githubs if:

GitLab is very easy to fan out CI/CD runners on your own k8s infra.

esseph··on Roku developer repositories moved from GitHub to GitLab
It's a paid enterprise offering vs GitLab Open Source
esseph··on Roku developer repositories moved from GitHub to GitLab
They should be pulling from a pull through scanning repository cache anyway, so they can be scanned before going into production.
esseph··on Sony Retires Its Last 4K Blu-ray Player in Japan, PS5 Is All That's Left
Claude, rewrite my disc players shitty firmware in rust, make no mistakes
esseph··on Mortality Among People with Attention-Deficit/Hyperactivity Disorder
My (~30yr old) stepson has been on it for most of a decade and has not had those issues (to my knowledge!).

I'm just glad there are different medicine paths that work for different people.

Page 1 of 34Next →