HNHacker News
TopNewBestAskShowJobs

hun3

304 karma · joined February 21, 2022

submissionscomments
hun3··on Interactive pattern discovery in binaries (FF-16-TUI)
I believe r2 can already highlight same 16-bit patterns, am I missing anything?
hun3··on When str.lower() is a security vulnerability in Python
Browsers (WHATWG) uses UTS #46, not IDNA2008.

ada-url (https://github.com/ada-url/ada-python) closely tracks WHATWG spec and thus less likely to lead to parser differential vulnerabilities when interoperating with browsers.

hun3··on How the FSF sysadmins block botnets with reaction
> The only downside is that it won't stop UDP packets from getting to a UDP listener. There will not be a response but the application will still see it.

Try:

  ip route add src ${net} blackhole
hun3··on Codex logging bug may write TBs to local SSDs
> The OS is a thin layer providing an abstract and consistent interface regardless of the hardware configuration.

This is called a hardware abstraction layer, not OS.

https://en.wikipedia.org/wiki/Hardware_abstraction

hun3··on Deno Desktop
System WebView but Electron is now the system
hun3··on Codex logging bug may write TBs to local SSDs
The operating system has historically trusted the applications not to do dumb things too much.

Only now we're witnessing the consequences much more frequently thanks to accelerated slop.

hun3··on Zenzizenzizenzic
(zenzi)³

I mean zenzi-cubic

hun3··on Anthropic requires 30 day data retention for Fable and Mythos
China has proxies that sell cheaper access to frontier models in exchange for permission to train on your data.
hun3··on Do we fear the serializable isolation level more than we fear subtle bugs?
Right.

As an example: Oracle and PostgreSQL don't have dirty reads: READ UNCOMMITTED does nothing. MySQL's concurrency model depends on the engine.

hun3··on Ask HN: Why is the HN crowd so anti-AI?
What keeps users themselves from vibe-coding their own software?

If you don't own quality, why should I pay? You're just a middleman at that point.

hun3··on Claude Code and Codex can have real-time conversation via Git
If you squint hard enough, you'll notice your bank account serves as an IPC semaphore replenishing API credit balances.

Your wallet is now a real-time communication channel.

hun3··on Ask HN: Shouldn't Google need to give a public statement about Railway incident?
With consent, yes.
hun3··on CopyFail: From Pod to Host
No, "virtual machine" alone doesn't make things safer.

Shrink your attack surface.

Use a completely locked down seccomp. Use nsjail or gVisor for containers. Use microvm or libkrun for full OS.

Lesser attack surface is what matters. Virtualization is only half of the story.

hun3··on Why senior developers fail to communicate their expertise
Avoiding problems outside your business problem domain, and can therefore guide the AI more effectively towards building the right thing.
hun3··on Ask HN: We just had an actual UUID v4 collision...
(Note that this still assumes that each biased-coin toss is i.i.d.)
hun3··on How OpenAI delivers low-latency voice AI at scale
They are orthogonal.

Suppose you have 100ms audio latency and no wait time. Then, natural pause will trigger response immediately but you won't notice it has started until after ~200ms (round-trip time). Twice as annoying.

hun3··on An AI agent deleted our production database. The agent's confession is below
But it's still a bit more difficult to sue them for leaking your company's data.

At least for now.

hun3··on AI should elevate your thinking, not replace it
You can write unambiguous (UB-free) code and the compiler's output will be deterministic. There will even be a spec that explains how your source maps to your program's behavior. LLM has neither.

Also, if you need to control performance, you still need to know how CPU cache and branch prediction works, both of which exists at the abstraction level of assembly.

hun3··on AI should elevate your thinking, not replace it
How can you read a language you didn't learn?
hun3··on OpenClaw isn't fooling me. I remember MS-DOS
PatchGuard would like to have a word with you.
hun3··on OpenClaw isn't fooling me. I remember MS-DOS
Ironic, since Unix is itself an embodiment of "worse is better."
hun3··on It's OK to compare floating-points for equality
I used floating timestamps as some kind of an identity. If there is ever a conflict, I just increase it by 1 ulp until it doesn't collide with anything. Sorry.
hun3··on Safe ways to do things in bash (2023)
In Python, `shlex` has utilities for quoting and tokenizing strings for POSIX shells.

> Documentation: https://docs.python.org/3/library/shlex.html

(Windows users: CMD is hopeless. Sorry. Try powershell.)

hun3··on DOOM Over DNS
Finally, a DOOM download that bypasses captive portals
hun3··on Autoresearch on an old research idea
> There are better techniques for hyper-parameter optimisation, right?

There always are. You need to think about what those would be, though. Autoresearch outsources the thinking to LLMs.

hun3··on Show HN: Threadprocs – executables sharing one address space (0-copy pointers)
This is exactly what subinterpreters are for! Basically isolated copies of Python in the same process.

https://docs.python.org/3/library/concurrent.interpreters.ht...

If you want a higher-level interface, there is InterpreterPoolExecutor:

https://docs.python.org/3/library/concurrent.futures.html#co...

hun3··on Astral to Join OpenAI
> why we keep trusting venture capital to be the community's stewards I have no idea.

They bought the trust.

hun3··on Shall I implement it? No
Well, tell that to OP, not me.
hun3··on Shall I implement it? No
Does appending "/genq" work?

Or use the /btw command to ask only questions

hun3··on RISC-V Is Sloooow
It was kind of an experiment from start. Some ideas turned out to be good, so we keep them. Some ideas turned out not to be good, so we fix them with extensions.
Page 1 of 5Next →