HNHacker News
TopNewBestAskShowJobs

iCarrot

115 karma · joined December 17, 2017

submissionscomments
iCarrot··on Forgejo <=16.0.3 Critical RCE
Using LLMs for automated security audit looks like it could fall under the definition of "vibe coding" or "agent mode", which is strictly forbidden

>6. It is not allowed to use AI in an autonomous-looking way to contribute in Forgejo. This also applies when someone engages in 'vibe coding' or uses so-called 'agent mode'.

iCarrot··on We have a year to fix security everywhere
Is this not it? https://pagescms.org/
iCarrot··on Why Are There No Empires in Age of Empires? (2019)
Dota 2 runs natively in Linux, and it's one of the biggest competitive online multiplayer games. It worked in Wine (along with Steam), too, last I tried 10 years ago when I was dual-booting and did not have disk space for two copies.
iCarrot··on Gemini 3.1 Pro
You can turn off thinking in Gemini pro models by using completion mode.

Essentially, append a message with role=model and minimal text part, such as a simple "A", at the end of the "contents" array. The model will try to complete the message without using any thought tokens.

You can also set the model message to start with "think" or something along that line and watch it thinks out loud (or melts down with over-thinking and stop due to reaching maximum output token)

``` [ { "parts": [{"text": "hello"}], "role": "user" }, { "parts": [{"text": "*think"}], "role": "model" } ] ```

iCarrot··on Formlabs Form 4 Teardown
The common wisdom (this is back when I was still fiddling with an Elegoo Mars 2-3 years ago) was to print the model at an angle and elevated from build plate. There should always be rafts and supports under the model.
iCarrot··on Shattered Pixel Dungeon is an open-source traditional roguelike dungeon crawler
Is this not it? Built and distributed by F-Droid https://f-droid.org/en/packages/com.shatteredpixel.shattered...
iCarrot··on Shattered Pixel Dungeon is an open-source traditional roguelike dungeon crawler
I always found the game becoming easier with more mechanics/weapons/potions added (in other variants). Is this the case with SPD?
iCarrot··on Show HN: Nekoweb – a retro static web hosting
Kinda weird to start talking FOSS when the website itself never ever claimed to have anything to do with FOSS.

What does search engines indexability have to do with FOSS? There's no shortage of old school forums locked behind membership system, not indexable by any search engines.

Also Discord is an instant messaging software and not "web". It just happens to have a web frontend. It's OK to be nostalgic of the old web but not the old instant messaging softwares.

iCarrot··on All ¥500 coins that glitter are not gold
Vending machines take ¥10 coins, there's a huge issue if they don't.
iCarrot··on Why I Like Obsidian
It's built with Electron so not entirely opaque.

Car manufacturers don't release their source code either, yet people trust something as important as their life to it daily.

iCarrot··on Translating blog posts with GPT-4, or: on hope and fear
Try telling GPT-4 that the translation is bad, and ask it to proofread the result for a more natural French
iCarrot··on Dive: A tool for exploring a Docker image, layer contents and more
It is a Docker's term: https://docs.docker.com/build/guide/layers/
iCarrot··on I won't pay on your website
There are post codes in Vietnam, believe it or not. Though I doubt any local delivery service actually look at it.

Hanoi post code is in the 100000 range (used to be 10000), Saigon's 700000

iCarrot··on Codespaces but open-source, client-only, and unopinionated
Is it because of tracking protection/fingerprinting protection being on by default?
iCarrot··on Gov.uk drops jQuery from their front end
Animated collapsible div can be done with 0 line of JS.

https://code-boxx.com/expand-collapse-div-css-only/

iCarrot··on PowerToys – open-source Windows utilities
Give high contrast mode a try, when enabled it will force native UI and websites to look nearly the same.

Should be available under Setting app -> Accessibility -> Vision -> Contrast theme

iCarrot··on Speeding up Prettier locally and on your CI with dprint
I'm using Vite for a small greenfield project. Perhaps it's the selection of packages I use, but setting up was rather painful.

Vite Vue + Typescript template run fine in dev mode but could not be built for production, thanks to a combination of an Vue issue and a tsconfig flag.

Node polyfills work on `yarn dev`, but throw "kn.nextTick is not a function" for production build. Apparently I have to use package `rollup-plugin-polyfill-node` instead of `rollup-plugin-node-polyfills`.

Now with all the setting up out of the way, it does feels good to have a dev server starting almost instantly, hot reload and full page reload stay constantly fast. Sometime though hot reload just fails and I had to manually reload the page, or manually remount the component I'm working on (by navigating back and forth) to see the changes.

It also feels like I'm not even using typescript but plain javascript. Vite would happily serve broken code and some errors will only be shown on `yarn build`. I lost a watch compiler essentially.

iCarrot··on AWS Lambda function URLs: Built-in HTTPS endpoints
A few years back at $DAY_JOB I was trying to optimize the cost for a serverless stack. To my surprise, small RAM lambda instances had extra latency of up to 100ms for DynamoDB queries!
iCarrot··on I have quit my job
Yeah it read like he was competent in his job, but elsewhere in the company people were struggling so he was reassigned to help out.

He should not have treated his employer's asset (the product) as his child and sacrifice things for it.

iCarrot··on MonoLisa – A font designed for developers
Have been using Victor Mono for a year now, that Victor Mono demo on programmingfonts.org definitely does not look like what I'm used to. Looks like the medium weighted Victor Mono.
iCarrot··on OpenSCAD 3D rendering just got an order of magnitude faster
>a model that is customizable

That's what parametric modeling do: you have a history of what you did, and traveling back in time to change something like a diameter is trivial.

iCarrot··on ‘Hard’ skills from PhDs remain relevant beyond academia
Not a PhD just a MSc, but the presentation skill I picked up along the way was definitely the most important thing I got out of it.

To paraphrase the words of my professor: if I really understand something, I must be able to explain it to any audience in 2 seconds, 2 minutes, or 2 hours.

iCarrot··on Entire website in a single HTML file
A decade ago we have this niche vBulletin forum where members would self-publish news article regarding the hobby. vBulletin BBCode is pretty limited, but then the admin started to add more and more styling support via custom BBCode.

At one point we were able to create "interactive" content entirely in our heavily customized BBCode without a single line of JS, and this #target is one of the more used tricks.

iCarrot··on Fleet, a Lightweight IDE from JetBrains
Looks like it places itself a little above VSCode, thanks to its Intellij code engine. Also remote coding means you could have a much beefier machine elsewhere and code on a notebook on the go, for example.
iCarrot··on Telnet BBS Guide
Not for my withered eyes, I need to zoom 130% for it to be readable.
iCarrot··on Ask HN: Why there are no Android mini phones?
There's a Sony Walkman model running on Android, NW-A105 I think.
iCarrot··on Why Are Topre Keyboards So Expensive?
>Due to RSI I tried dozens of keyboards over the years. When I see these new keyboards being sold at these prices, especially the mechanical ones marketed with "improved layouts" and ergonomics, I have to laugh.

If you haven't got to the opensource crowd of the mechanical keyboard world yet, you should. Ergonomic is one of the problems that people are trying to solve, and their solutions are opensource.

iCarrot··on Why Are Topre Keyboards So Expensive?
>That said, the annoying thing here is that it's expensive to try keys

You can get switch tester kits off Aliexpress, I see there are $15-ish options that let you test 16-30 types of switches.

iCarrot··on Why Are Topre Keyboards So Expensive?
You can check the Keychron K3. These use low profile switches have 3mm max travel distance.
iCarrot··on Direct file transfer via browser with no server involvement
>the application is making GET, POST and PUT requests to send the file

Have you looked at the actual payload of the POST/GET/PUT requests? It only contains the WebRTC offers/answers. Actual file transfer is via local WebRTC.

The site also claims that it only work for "devices on the same network", so there's no need for any STUN/TURN because there's no wall to punch.

Page 1 of 4Next →