HNHacker News
TopNewBestAskShowJobs

jwilk

9,177 karma · joined November 2, 2015

  ^__^
  (oo)\_______
  (__)\       )\/\
      ||----w |
      ||     ||
submissionscomments
jwilk··on Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps
What are the other implementations?
jwilk··on Moreutils: The utilities package every Unix/Linux/Mac OS developer should know
Previous discussions on moreutils:

2015: https://news.ycombinator.com/item?id=9013570 (36 comments)

2016: https://news.ycombinator.com/item?id=12023277 (56 comments)

2020: https://news.ycombinator.com/item?id=24241986 (220 comments)

2022: https://news.ycombinator.com/item?id=31043655 (258 comments)

2023: https://news.ycombinator.com/item?id=38814599 (59 comments)

jwilk··on Today, we hacked what we'd set out to hack: the iPhone
TIL! This is what PDF 1.7 spec says (§4.7.1):

> Beginning with PDF 1.1, a content stream can include PostScript language fragments. These fragments are used only when printing to a PostScript output device; they have no effect either when viewing the document on-screen or when printing it to a non-PostScript device. In addition, applications that understand PDF are unlikely to be able to interpret the PostScript fragments. Hence, this capability should be used with extreme caution and only if there is no other way to achieve the same result. Inappropriate use of PostScript XObjects can cause PDF files to print incorrectly.

> Note: Since PDF 1.4 encompasses all of the Adobe imaging model features of the PostScript language, there is no longer any reason to use PostScript XObjects. This feature is likely to be removed from PDF in a future version.

jwilk··on Today, we hacked what we'd set out to hack: the iPhone
> the PostScript support

What do you mean by that?

jwilk··on A complete bypass of eMudhra’s 1FA OTP login system
It uses the API, which hopefully is protected from bots less fiercely.
jwilk··on A complete bypass of eMudhra’s 1FA OTP login system
You can use https://github.com/jwilk/zygolophodon to read Mastodon posts in your terminal:

  $ zygolophodon --with-ancestors https://mastodon.catgirl.cloud/@49016/117475976434068995
jwilk··on mitmproxy adds --emudhra option
Yes, but: https://news.ycombinator.com/item?id=50189990
jwilk··on PHP2Shell: AI uncovers critical RCE in PHP
> I want to understand how it leaked

I'm confused. How do you know it leaked?

jwilk··on Making an 88x31 book-button using ImageMagick
https://news.ycombinator.com/item?id=50132198 (28 comments at the moment)
jwilk··on Making a 88x31 button book using ImageMagick
(2024)
jwilk··on The Unicode Standard, Version 18.0
Previous discussion:

https://news.ycombinator.com/item?id=48290881 ("Unicode 18.0.0 Beta", 3 months ago, 66 comments)

jwilk··on XCancel service is suspended until further notice
ITYM https://status.d420.de/
jwilk··on XCancel service is suspended until further notice
They do this by setting cookie "redesign_optout=true" for www.reddit.com (and then using that domain).
jwilk··on XCancel service is suspended (again)
Currently on the front page: https://news.ycombinator.com/item?id=49695459 (over 100 comments)
jwilk··on The kernel does not care what you named the tool
LSM = Linux Security Module

What's TCB though?

jwilk··on Stop making swap partitions—use swap files instead
Also, fallocate+chmod is racy: between the two calls, an attacker could open the file, and then keep it open until next reboot. OTOH, mkswap creates the swap file with the correct permissions straight away.

The --size and --file options are relatively new, though: they were added in util-linux v2.40, released in 2024.

jwilk··on Recursion into Madness
https://news.ycombinator.com/item?id=49603335 (30 comments at the moment)
jwilk··on CERN's migration path from CentOS Linux to Debian
Previously:

https://news.ycombinator.com/item?id=49562262 (22 comments)

https://news.ycombinator.com/item?id=49538096 (4 comments)

jwilk··on Nitter has more working instances than before the takedowns
You can use www.reddit.com (yes, this domain, not old.reddit.com) with the old UI if you set cookie "redesign_optout=true".
jwilk··on Working to Make Python Lazy
It's a soft keyword: https://docs.python.org/3.15/reference/lexical_analysis.html...

> As soft keywords, their use in the grammar is possible while still preserving compatibility with existing code that uses these names as identifier names.

jwilk··on Hackers had a live feed of every ID verification company scanned for over a year
The HN submission title is a garden-path sentence:

Hackers Had a Live Feed of Every ID Verification Company Scanned

(Huh? How do you scan a company?)

The original title is easier to parse:

Hackers Had A Live Feed Of Every ID This Verification Company Scanned

jwilk··on Fuck Off as a Service (Foaas)
Discussed in 2013:

https://news.ycombinator.com/item?id=6069353 (105 comments)

Sadly the original domain has been usurped.

jwilk··on Mushroom hunting with LLMs: what can go wrong?
The lack or determinism is irrelevant. It's trivial to make an LLM deterministic (certianly much easier than to make a human deterministic!), but that wouldn't make it any more trustworthy.
jwilk··on Tmp.0ut Volume 5
https://news.ycombinator.com/item?id=49465158 (7 comments)
jwilk··on “I just chose words carefully”
Hmm…

  To do so, attach the following notices to the program. It is safest 1 to
  attach them to the start of each source file to most effectively 2 state
  the exclusion of warranty 3; and 4 each 5 file 6 should 7 have 8 at 9 10
  least 11 the 12 "copyright 13 line 14 and 15 a 16 pointer 17 to 18 where
  19 the 20 full 21 notice 22 is 23 found 24.
What's up with the numbers?
jwilk··on Creepy Crawlies
From the HN guidelines <https://news.ycombinator.com/newsguidelines.html>:

> Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that".

jwilk··on Creepy Crawlies
Huh? Are you saying there's an Argon2 implementation in the kernel?
jwilk··on Git.kernel.org Is "Interesting" to Crawlers
https://news.ycombinator.com/item?id=49491791 (over 200 comments at the moment)
jwilk··on Creepy Crawlies
https://news.ycombinator.com/item?id=49491791 (over 200 comments at the moment)
jwilk··on Bug Blindness
Curiously, this makes Firefox display the default favicon (instead of no favicon):

https://github.com/mozilla-firefox/firefox/raw/refs/heads/ma...

Page 1 of 34Next →