HNHacker News
TopNewBestAskShowJobs

ignoramous

18,817 karma · joined June 15, 2011

mz at celzero dot com

https://rethinkdns.com/

follow:

sec: tptacek, moxie, nickpsecurity, strcat, agl, SwellJoe, drewcrawford, schoen, mirimir, secfirstmd, mjg59, userbinator, gorhill, rgovostes, lallysingh, malandrew, mikewest, jedberg, wtarreau, michaelaiello, segmondy, whitequark_, jsnell, salgernon, geofft, jlund, sinak, alecmuffett, mrb, nneonneo, pwg, viraptor, indutny, jart, Danenania, cyphar, lisper, drfuchs, mahmoudimus, lrvick, woodruffw, lvh, FiloSottile, pgl, mh_, amarbi, psanford, jedisct1, lotharrr, axoltl, cperciva, sleevi, kwantam, syncsynchalt, Moral_, saurik, cryptonector, JoachimS, j2kun, woodruffw, bjackman, nneonneo

start: pg, sama, garry, mbesto, coffeemug, davidu, rms, xal, malgorithms, Alex3917, jacquesm, jl, AndrewWarner, emmett, ig1, anateus, lpolovets, ivankirigin, sahillavingia, Joshua, ericflo, immad, rdl, joshfraser,s gdb, grellas, gatsby, mayop100, bryanh, josephsunny, ayw, pbiggar, sytse, csallen, joshu, jhuckesteinm, pclark, whockey, sjtgraham, jenthoven, aresant, mayop100, cmdrtaco, zt, erohead, tomhoward, drderidder, rfrey, pauldix, akcreek, mojombo, salsakran, armon, drob, pavlov, goodmachine, snowmaker, sorenbs, simonw, zds, jessepollak, raviparikh, buf, paraschopra, ahaseeb, james_impliu, skrish

prog: aphyr, KiranDave, peterwaller, saosebastiao, amirmc, lhorie, judofyr, nikita, huhtenberg, pron, Animats, dmbaggett, chris_wot, aaronbrethorst, grey-area, drewg123, dom96, jashkenas, rich_harris, jordwalke, Homunculiheaded, mark_l_watson, kibwen, Sir_Cmpwn, KenoFischer, ahoyhere, scrollaway, trishume, dbaupp, skrebbel, cryptica, peterhunt, rauchg, TazeTSchnitzel, syrusakbary, megous, jemfinch, fogus, jcelerier, 1st1, anderskaseorg, willvarfar, Veedrac, kodablah, mraleph, enriquto, joosters, loeg, jorangreef, ot, asicsp, felixhandte, ezmobius, r1ch, luckydude, btilly, dherman, Manishearth, carllerche, gregdoesit, q3k, codahale, kuschku, _vbdg, enneff, phiresky, mitchellh, JoshTriplett, NovaX, kmavm, nullc, EvanYou, colanderman, sadiq, sereja, ot, pfdietz, c-smile, xena, WalterBright, izacus, bradfitz, scott_s, pizlonator, pojntfx, lifthrasiir, kentonv, barsonme, rspivak, tekknolagi, ndesaulniers

systems: brendangregg, DannyBee, steveklabnik, fsk, pcwalton, jbk, ajross, yosefk, netguy, minimax, munificent, ColinWright, beat, zwischenzug, derefr, jandrewrogers, shykes, lallysingh, dochtman, SamReidHughes, hnkimb3558, rurban, gonzo, bogomipz, marknadal, mazieres, bramcohen, koverstreet, bkanber, mafintosh, ksec, amluto, kyledrake, mrkurt, dsl, dspillett, kevinburke, catwell, kmod, scarface74, eru, sanxiyn, znpy, influx, ncmncm, toast0, evil-olive, bonzini, monocasa, ncopa, bfirsh, jefftk, tlrobinson, kiwicopple, stavros, alexellisuk, hardwaresofton, jhgg, jeffbee, hinkley, danielbmarkham, cpuguy83, silverstorm, josephg, tialaramex, apenwarr, nocarrier, KMag, kllrnohj, astrange, bayindirh, inkyoto, fweimer, mananaysiempre, antics

mods: dang

philosophy: mbateman, samd

bio: Fomite, comicjk, anderspitman, danieltillett, wgrover

linux: rwmj, pdkl95, linuxlizard, polvi, phillips, zozbot234, wmf, beagle3, megous, bcrl, cdesai, lgierth, monocasa, loeg, swetland, jchw, abarth, microcolonel

misc: phkahler, davidw, antirez, gwern, patio11, jgrahamc, darksaints, jamwt, nostrademons, plinkplonk, mikekchar, holman, mikeash, edw519, jrockway, noonespecial, staunch, petercooper, jmathai, tzs, jacques_chester, coldtea, peteretep, happy-go-lucky, aaronbrethorst, mtgx, codingdave, jawns, jvns, CPLX, tomcam, ethomson, HenryR, JoeAltmaier, jerf, pjc50, dmix, jcr, alexbowe, JulianMorrison, adamnemecek, capnrefsmmat, detaro, calinet6, dargonwriter, tootie, kqr, comex, eloff, andersource, dantiberian, lern_to_spel, swyx, pgeorgi, sago, zokier

os: vezzy-fnord, rbehrends, vardump, amirmc, pjmlp, rsync, waddlesplash, eyberg, penberg, ambrop7, shuss, amscanne, tytso, surajrmal, captainmuon, Morgawr, quotemstr, olliej, kllrnohj, pizlonator, tadfisher, faragon

db: craigkerstiens, teraflop, ifcologne, espeed, gopalv, thekozmo, lorenzhs, SQLite, mytherin, pgaddict, sumeer, NovaX, arjunnarayan, dmoura, eatonphil, cube2222, zX41ZdbW, benbjohnson, JoelJacobson, benesch

graphics: pcolton, Jasper_, macawfish, kvark, Agentlien, shmerl, Atrix256, jasondavies, bhickey

net: zx2c4, keithwinstein, bsder, walrus01, apenwarr, newman314, stuntprogrammer, bluejekyll, jlgaddis, revertts, samcrawford, wahern, brian-armstrong, lrizzo, kev009, muppetman, Nrsolis, signa11, majke, shaklee3, emmericp, zamadatix, Sean-Der, techsupporter, downwithbgp, p1mrx, ghshephard, matsur, vasilvv

x/aws: colmmacc, _msw_, aligouri, illumin8, jcrites, socttlegrand2, openasocket, otterley, mslot, bbgm, NathanKP, appwiz, planckscnst, blasdel, mjb, ragona, donavanm, grogenaut, jeffbarr, twirrim, jtoberon, fnordpiglet, scarface74

x/nvidia: jebarker

x/google: kortilla, moultano

ai: jph00, eli_gottlieb, iandanforth, karpathy, mjn, nl, albertzeyer, bravura, michael_nielsen, dgacmu, cs702, emu, lhl, espadrine, edwardjhu, binarymax, jll29, MontyCarloHall

bootstrap: arvidkahl

crypto: jaekwon, tipsysquid, Taek, daeken, pbsd, davidcash

a11y: mwcampbell

eee: geerlingguy, sowbug, ta8645, mmmBacon, gchadwick, femto

submissionscomments
ignoramous··on Nietzschian Debugger
> Nietszche, directly attacks the Socratic dialectic

Probably why Michael Sugrue opined that Friedrich Nietzsche was a Philologist and not a Philosopher.

ignoramous··on LLMs are making formal software verification feasible at a much larger scale
> formal semantics for both C and Rust in Lean, both sound like Herculean efforts

If we're doing Ancient Athens, then Platonic Methexis probably fits better.

ignoramous
·
·on Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.
petecooper's post that apparently broke the embargo: https://news.ycombinator.com/item?id=50167754
ignoramous··on eMudhra to exit global SSL/TLS certificate business
> Folks in India — especially the boomer class — are trepidated by how they're perceived over actual substance and quality of their work

Just the sheer size and diversity of the Indian "boomer class" could put such generalizations in doubt?

> As someone who's well-versed with the "face-saving" aspects of Indian work culture, I can state with clarity

Pause to consider that the world might appear to you as you imagine it to be. That is, it might be holding up a mirror in to your own psyche.

ignoramous··on Show HN: KiviDB, a faster Redis-compatible memory database and vector cache
From one Murtaza (who also worked on NoSql DBs) to another, congrats on the launch! The benchmark numbers are impressive. For a database, as always, durability guarantees (in case of in-memory setups, this would translate to any of the "reasonable" forms of consistency, like read your writes) trump speed. Hopefully, there's some focus on that, too.
ignoramous··on The NIST Elliptic Curves Seeds Bounty Has Been Claimed
> I accept suggestions for other seed-based swag.

Obfuscated, self-evaluating bash script by CDN Akamai being supplied to consumers via retail stores, https://tris.sherliker.net/blog/obfuscated-self-evaluating-b... / https://archive.vn/DI4NS / https://news.ycombinator.com/item?id=48829312

ignoramous··on Tesla Roadster
Elon doesn't miss with his social media marketing. Compare the announcement tweets from Andy Jassy and the engagement they generate. Meta, with the Muse app (personal AI), is also leaning heavily on social media, but by paying influencers (instead of cool & viral product demos).
ignoramous··on Suicide rates highest ever among middle-aged men
> A new board game gets set up, new pieces doled out, we learn to play the new game

Reminds me of this idea about sport / competition from the parenting book, The Gardener and the Carpenter by Alison Gopnik. She says that children must be encouraged to explore, not exploit ("play games"), without any end goal in mind. This lets them figure out the world around them and how they can affect it.

As "exploitation" (competition) is a means to use specific knowledge (performance) to achieve goals (progress), it will tend to have winners & losers. "Exploration", otoh, is choosing among umpteen pathways to growth and learning. Of course, middle-aged folks can seldom afford to not be playing games, but perhaps in times of change, they need to be exploring like children again.

Also see this post on Ask HN: Has anyone here turned around their life in their 40s? about Pyscho-Cybernetics & achieving goals: https://news.ycombinator.com/item?id=34053801

ignoramous··on AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware
> I'm going to stay out of the political issue of what any actor should do.

Thankfully, in many such cases, we can call the skyman to rescue:

  What is hateful to you, do not do to your neighbor. That is the whole Torah; the rest is the explanation of this—go and study it!
https://www.chabad.org/library/article_cdo/aid/689306/jewish...
ignoramous··on OpenCode 2.0
More on Charm x Anomaly: https://news.ycombinator.com/item?id=44741894
ignoramous··on Smart people don't think others are stupid (2012)
Thanks for sharing your thoughts.

> But [Wittgenstein's] philosophy is general enough to not really contribute much as a whole

Is this consensus (in Western tradition) or your opinion?

> Wittgenstein wasn't very smart (and in my opinion, often wrong)

Well, you've got to hand it to Wittgenstein for being one of the most self-critical philosophers, if nothing else.

> He rejected infinite mathematical extensions

Socrates abhorred the written form, but that takes nothing away from his works (as presented by Plato). I guess humans are weird in weird ways, and pretty excellent in others.

ignoramous··on Ledger confirms spy chip implant behind wallet crypto thefts
> It speaks a lot to the power of financial incentives

Also, to the power of modern-day cryptography that rubber-hose and evil maid (backdoors) are the only viable (even if expensive) alternatives.

> the government disappears, there are really only two fundamental technologies needed to reboot everything: money and contracts

Both of which require "governance", but post-collapse, it may be of form that may not benefit the collective.

ignoramous··on NYC's "Click to Cancel" rule is now in effect
When folks subscribe, we make it a point to highlight the fact that the app would always have a big red button they could tap at will to either get a full refund (within 30 days) or stop the subscription payments (if after).

Not sure if it was the only cause, but in a month since then, conversion rates 2x'd (~100/mo to ~250/mo), while % of cancel/refund requests have stayed the same.

ignoramous··on I paid people to try and follow my README
> Being short and concise is usually the better way.

The golang docs are like this. As a novice, you are looking for detailed prose, but as you progress, you come to appreciate the terseness.

ignoramous··on Bitwarden Dual License Model
> His response at the time wasn't that convincing, but I was willing to give him the benefit of the doubt. I feel its fair to ask if the same thing occurred again.

Business will have to try different things at different points due to external & internal pressures. Some decisions are reversible (at cost), some aren't. Decisions (chaotic / complex / complicated ones, at least) are not made merely based on available data and analysis, but also based on intuition, experiments, and predictions. Then, to look at the outcome rather than the process is missing the point. When the circumstance / situation isn't clear-cut, the feedback (the outcome of a decision) is in itself more valuable to the organization (than never having taken the decision, at all), especially when the costs (to reverse / change it) are bearable.

ignoramous··on System-level ad-blocking in Android
> ended up just switching to Control D's free tier using the Hagezi blocklist

HaGeZi recently launched their own public DNS-over-HTTPS / DNS-over-TLS resolvers: https://github.com/hagezi/dns-servers.

  # privacy
  root.hagezi.org
  # security
  ctif.hagezi.org
ignoramous··on What is Codemode
> Dan Ingalls who said "An operating system is a collection of things that don't fit into a language. There shouldn't be one."

Anil Madhavapeddy's take on such setups: A compiler that just refuses to stop.

  MirageOS is a system written in pure OCaml where not only do common network protocols and file systems and high-level things like web servers and web stacks can all be expressed in OCaml but the compiler just refuses to stop ... compiler, instead of stopping and generating a binary that you then run inside Linux or Windows, will continue to specialize the application that it is compiling and ... emit a full operating system that can just boot by itself.
https://signalsandthreads.com/what-is-an-operating-system / https://archive.vn/yLfkq
ignoramous··on Toronto-Based VPN Provider Plans to Quit Canada over Lawful-Access Bill

  [if they had to comply with the bill as written] Tailscale told The Globe and Mail that it would have to "pursue corporate structures" to distance its international operations from Canada.
https://betakit.com/tailscale-windscribe-co-sign-open-letter... / https://archive.vn/899Cm
ignoramous··on System-level ad-blocking in Android
The only link in the article with "in 2026" in the title...
ignoramous··on What even is an OS now?
> don't know what's wrong with my perspective

Nothing. Thomas, as most ambitious start up founders do according to PG, is living in the future.

  There are already a few places that are living in the future in this respect. Silicon Valley is one of them: an unknown person working on a strange-sounding idea won't automatically be dismissed the way they would back home ...

  The right way to deal with new ideas is to treat them as a challenge to your imagination — not just to have lower standards, but to switch polarity entirely, from listing the reasons an idea won't work to trying to think of ways it could.
https://www.paulgraham.com/early.html
ignoramous··on Making Tailscale Faster
No. I specifically said, "lose the formally-verified cryptography guarantees underpinning WireGuard & its implementation" and I pointed out the implementation quirks.

Anywho, given your strong conviction about this, consider suggesting to Jason on the WireGuard mailing list to swap ChaPoly for AES-GCM, or perhaps consider a fork yourself. Good luck.

ignoramous··on Making Tailscale Faster
Implementation requires different considerations, no? For example, AES-GCM needs to be supplied a big-endian nonce, whilst ChaPoly uses little-endian. As the WireGuard paper notes, ChaPoly (in software) can be better protected against (CPU) side-channels. Besides extended-nonce AEAD being "native" to ChaPoly, BLAKE family of hash functions that WireGuard uses, are also based on the same construction as ChaPoly, making the implementation leaner (something Jason keenly emphasizes as an advantage).
ignoramous··on Making Tailscale Faster
> diverging from WireGuard

You lose the formally-verified cryptography guarantees underpinning WireGuard & its implementation, though. That's a bigger tradeoff: https://www.wireguard.com/protocol/

ignoramous··on Making Tailscale Faster
> wireguard itself has a problem that the crypto suite it uses is not supported by hardware accelerators. So if we want to get into the hundreds of gigabits range, we will possibly need to switch packet formats entirely

Has hardware-offload (for AES et al) got faster still, or that keeping CPU busy in the data path for 100gbps workloads is not ideal, or something else? The WireGuard website claims ChaPoly is at least as fast as hardware-accelerated AES. And that it can be further sped up with SIMD.

https://www.wireguard.com/known-limitations

> now we’re on to the next order of magnitude together

Curious: Is this work currently in progress? If so, what's more that's still lined up? The previous GRO/GSO(/LRO, too?) improvements were incredibly impressive (even to u/majke, https://news.ycombinator.com/item?id=35567268).

Thanks.

ignoramous··on Obscura: VPN that can't log your activity
> Very true, but if even 1 of (Obscura, Mullvad) is honest

Just Obscura's compromise is enough, as pointed out previously: https://news.ycombinator.com/item?id=43016574

Unless something has changed in Obscura's architecture, the interface with Mullvad is under Obscura's control, and thus it can compromise client's credentials. This is unlike iCloud Private Relay where the guarantees are cryptographic in nature and not merely based on promises.

ignoramous··on Can gzip be a language model?
See: Fast Static Symbol Table: https://github.com/duckdb/duckdb/pull/4366

FSST is based on a fixed size (255 items) dictionary of high frequency variable length strings/substrings (learned from the corpus) encoded as one byte.

ignoramous··on Obscura: VPN that can't log your activity
I wouldn't be so sure; Ex A: The terrifying expansion of Sweden’s state surveillance, https://edri.org/our-work/the-terrifying-expansion-of-sweden...
ignoramous··on Obscura: VPN that can't log your activity
> ... a certain popular "pro-privacy" product beloved by many here ...

If you're talking about Proton VPN, they do support "credential-less accounts" through their official apps, I believe? At least, on Android since 2024: https://www.androidpolice.com/proton-vpn-works-without-accou...

ignoramous··on GPT-6 Sol and Luna
> 50% cheaper

Cache read/write decrease by 50% or similar? That's where most (95%+) of the cost is for agentic coding workloads.

ignoramous··on MiMo-v2.6-Pro: Intelligence, Performance and Price Analysis
Per Xiaomi, MiMo v2.6 training run cost $3.47m. A far cry from the estimated costs ($100m+) for the Big 5 (MSL, xAI, GDM, OAI, Ant). I wouldn't be surprised if salaries and R&D costs have similar drastic disparities.

For a model that matches Muse Spark 1.3 in benchmarks, MiMo v2.6 Pro is incredibly cheap, given its cache rates will remain $0.0036 per million.

Page 1 of 34Next →