HNHacker News
TopNewBestAskShowJobs

hlieberman

2,204 karma · joined April 9, 2013

[ my public key: https://keybase.io/hlieberman; my proof: https://keybase.io/hlieberman/sigs/6tvmsGbya78Y37kxuaJoGlF0QEnr1FkxV5Jd5OU-mGs ]

Email (b64): aDhuQHNldGVjLmlv

submissionscomments
hlieberman··on "Musk" Documentary Pulled from Almost Every One of 472 Theaters After One Week
Ah, censorship.
hlieberman··on Show HN: A legal assistant that refuses to cite law it can't verify
Hilariously broken, unfortunately.
hlieberman··on Prompt injection in HTTP headers: what 217M web responses show
"RFC 9110 defines this shape." nope, I'm fuckin' out.
hlieberman··on The Aaronson Oracle
An interesting oracle, but my god, the writing is so clearly AI, I just can't stand it. "runs down the center".
hlieberman··on OpenAI engineer arrested in bugging of executive conference room
Microsoft (Research) beat you to it: https://www.microsoft.com/en-us/research/project/natick/

Still a significantly less dumb idea than space data centers.

hlieberman··on Btrfs/ZFS/bcachefs under workloads classic benchmarks skip
The integrity check is only on the tests which are either RAID or the filesystem equivalent.
hlieberman··on Tell HN: An inside view of Montana's new biotech law
Wouldn't you be asking the physicians to risk their licenses to administer these drugs? The state can't waive the Food, Drug, and Cosmetics act, so a physician doing so is breaking federal law unless they get a single-patient IND or EUE. I guess if the experimental drug is manufactured in the state, maybe you could claim the FDCA doesn't apply, but... that's a big risk.
hlieberman··on Burnt out on a three-day week
Slop is slop, whether you edit it in or whether you generate it de novo.
hlieberman··on What Running Kafka on VMs Taught Us About Systems Thinking
AI;DR

Slop-py as hell.

hlieberman··on Encryption and Globalization 15 Years Later: E2EE and the "Going Dark" Debate
What two properties are you choosing from Zooko’s Triangle? You say human readable and decentralized, so you must be giving up secure.
hlieberman··on Reimplementing pf as an eBPF/XDP dataplane on Linux
Considering the author is the founder of pfSense and has been contributing to BSD since 1995, I suspect he knows about the origins of pf.
hlieberman··on Chat Control passed first round in EU Parliament
Is this Chat Control 1.0 or Chat Control 2.0?
hlieberman··on My automated doubt development process
“They inhabit the fulcrum of the process” is straight up AI psychosis talk.
hlieberman··on $100 to a Debian Developer who can get Fresh Editor into Trixie
Security is part of it -- dpkg and apt were not built to deal with the problem of tracking each individual executables' complied library versions. When the next Heartbleed happens, how will you know which things need to be recompiled? (Some of this data exists in adjacent Debian systems for DD's internal use, but it's not integrated into dpkg in any way.)

https://wiki.debian.org/StaticLinking#downsides has some of the background there.

hlieberman··on $100 to a Debian Developer who can get Fresh Editor into Trixie
Hello! I am a Debian Developer, though not likely to work on this as I haven't done a ton of rust binary packaging.

I did want to clear up one misconception that you might be having, though. The .deb versions shipped by upstream are great, but they're not really ever going to be useful for Debian. One of the side-effects of Debian's requirements around software freedom is an important principle: you should be able to build any package in Debian with only the things that are in Debian.

The problem with fresh isn't fresh itself -- packaging that isn't particularly difficult, though it does need some amount of care and attention. The problem is that fresh pulls in 732 different crates which all need to be packaged in Debian before fresh can be. Some of them are already in Debian, of course, but... you can imagine that the effort here is very much not insignificant.

Upstream doesn't have to deal with this problem, as they can simply statically build them into the executables. That's a violation of Debian policy, though, and isn't allowed for anything in the archive.

Hope that helps you understand why you may not get many bites at this offer, generous as it is!

hlieberman··on The Serial TTL connector we deserve
TagConnect or EdgeConnect ftw.
hlieberman··on CVE-2026-31431: Copy Fail vs. rootless containers
That's true... for the exploit demo that they released. The primitive that underlies the exploit, however -- a page cache write -- can easily bypass the container boundary. One only needs to hook an executable which is also present in the host.
hlieberman··on CVE-2026-31431: Copy Fail vs. rootless containers
In fact, the authors specifically say on the very first line of their website that the copy/fail primitive can be used as a container escape. The entire premise of this article is flawed and irresponsible.
hlieberman··on A cryptography engineer's perspective on quantum computing timelines
… really? This is simultaneously so far down in the plumbing and extremely resistant to measuring the impact of, I can’t imagine anyone building a company off of this that’s not already deep in the weeds (lookin’ at you, WolfSSL).

The idea that a startup would be competitive in the VC “the only thing that matters are the feels” environment seems crazy to me.

hlieberman··on Montana referendum to outlaw corporate campaign contributions [video]
"(b) The term does not include the distribution of bona fide news, commentary, or editorial content unless the publishing entity is owned or controlled by a political party, a political committee, or a candidate".
hlieberman··on The Architecture of Asking
This is some hallucinatory slop bullshit.
hlieberman··on Process-Based Concurrency: Why Beam and OTP Keep Being Right
Forget Node.js; _Javascript_ hadn't even been invented yet when Erlang and BEAM first debuted.
hlieberman··on Open source calculator firmware DB48X forbids CA/CO use due to age verification
There is no carve out in the law for open source. I don’t think it matters for this calculator’s firmware, because there’s no covered App Store, but it certainly would for most Linux distributions.
hlieberman··on MHRA approves self replicating mRNA Covid-19 vaccine
Note, this vaccine has been approved in Japan since late 2023.
hlieberman··on Public Sans – A strong, neutral typeface
No, this was a project by 18F and the U.S. Web Design group that debued several years back.
hlieberman··on Airlines call in psychologists to stop passengers risking their lives for bags
If there is an aircraft evacuation and someone is getting their bag out of the carry-on, the proper response is punching them in the face and throwing them onto the ground so people can step over (or on) them.

With seat pitches so tight these days, the idea that an evacuation can be done by unprepared people in 90 seconds is a pipedream, even before taking into consideration people trying to get their luggage.

hlieberman··on Fighting the New York Times' invasion of user privacy
An incredibly cynical attempt at spin from a former non-profit that renounced its founding principles. A class act, all around.
hlieberman··on The Privacy Theater of Hashed PII
If it's salted, you can't share it with a third-party and determine who your customers in common are. (That's the point of the salt; to mean that my_hash(X) != your_hash(X)).
hlieberman··on Show HN: Baby's first international landline
I really like this... except you should add a special case for 911. I strongly believe that all phones, and anything that looks like phones, should be able to dial out in an emergency.

Obviously, this can raise its own problems -- you'll have to train the kids not to randomly dial 911! -- but you never know what circumstances might exist where someone in a panic reaches for the nearest phone.

hlieberman··on No bullshit guide to statistics prerelease
I bought "No Bullshit Guide to Linear Algebra" a number of years ago, and it was super useful for me to get closer to grokking the math behind it (as someone who flunked out of calc in school).

Ivan was also really helpful when I emailed him with some stupid questions -- way above and beyond.

Page 1 of 10Next →