HNHacker News
TopNewBestAskShowJobs

karaziox

104 karma · joined March 1, 2012

submissionscomments
karaziox··on Claude Code is steganographically marking requests
They offer (extremely) discounted Claude prices but you have to go through their gateway. They subsidize part of that, and they get the low price by reselling unused Max capacity, there's been a few posts on that in the past months. People are apparently getting 90% discounts on their claude use this way, tradeoff is that you have two companies learning from your data, instead of just one. So people use the same tools they use normally, but get it for a lot cheaper
karaziox··on Discord will require a face scan or ID for full access next month
This doesn't feel like a real question... Slack free tier is basically crappy Discord, limited message history, no voice channels, huddles are also behind the paying tiers. It is basically worse on all aspects unless you start paying
karaziox··on Tailscale Peer Relays
In your example the src would be the "machine that is behind a NAT". That's the one the peer relay enable access to. And then all your other devices (that laptop) can reach it through the peer relay.

I was also a bit confused on the meaning of src/dst in the grants. The naming didn't match my thinking.

karaziox··on Maybe Skip SHA-3
But NIST didn't make that clear. The thing they made clear is in fact the exact opposite and the OP mentions it. They called it SHA-3, saying to the world that this was a better SHA-2. If they wanted to make clear that SHA-3 wasn't to replace SHA-2, they should really have named it something else. Now everybody not knowledgeable to the details will sadly assume the 3 is better than the 2.
karaziox··on CocoaPods downloads max out five GitHub server CPUs
Because cloning the dependency is not the issue here. CocoaPods is keeping its index in a git repo that is updated by the user as a way to get the latest index. This is the repo that incur a lot of requests from everyone.

Go get on the other hand doesn't keep any index. It just uses the url to download the dependency because of the mapping "url==project name" that exists with go projects.

karaziox··on Comparison of SSL Labs TLS Scores with Different Go Versions
It will be exactly the same as 1.5.3 normally since no feature are added in those releases. The key generation problem had no visible impact on the tls negociation, it simply resolved a flaw in the key generation process.
karaziox··on Go 1.5.3 released to address security vulnerability
If you can't track the binaries you are running you have a bigger problem than recompiling some of them. Security issues aren't the one in a decade thing, if you can't easily locate which code has to be updated, you are in trouble already...
karaziox··on HTTP/2 is here. Goodbye SPDY? Not quite yet
Well, the specification defines two negociation procedures. You are not forced to support both, you are not even forced to support one, but then how would you make use of it? And you are also free to negociate it another way should you decide to. The spec defines the protocol, not the transport on which it is used or the way the underlying communication is established. They could have put the two negociation methods in another RFC for what it's worth, since they don't affect the inner workings of the protocol itself.
karaziox··on Panicparse: Crash your Go app in style
Because this one involve checking duplicates and does a fair amount of logic. When the process is crashing, all bets are off and you may not be able to allocate memory for this processing. This is why they simply dump all there is to stderr and exit.
karaziox··on Virtual DNS: DDoS Mitigation and Global Distribution for DNS Traffic
A quick google search gave this page : https://www.cloudflare.com/ips

I think this is what you want.

karaziox··on Google Shames Slow U.S. ISPs With Its New YouTube Video Quality Report
They are doing it. If you have a slow connection and the video start to buffer a lot, there is a banner that appear right under the video linking to the video quality report. I saw it yesterday
karaziox··on "Disable Javascript" option removed in Firefox 23
The Internet is a technology helping others track and pigeonhole you. Will you stop using it? And telephone? And everything? Seriously, everything can be "corrupted" to be used against you...
karaziox··on Write Android apps in Google Go
Yes Golang is the "complete name", at least way more than "Google Go", since Go isn't affiliated directly with Google anymore.
karaziox··on Tiedot - Your NoSQL document database engine powered by Go
The formatting style is standardized by go (Enforced by gofmt) and they made the choice of tabs over spaces :)

http://golang.org/doc/effective_go.html#formatting

karaziox··on Trying out this Go thing at Disqus
Go was never designed for "realtime". Also, 32 bits wasn't the main compiler focus, 64 bits was. This problem being mainly fixed with the 1.1 release, this is a non issue now. The memory model seems pretty well defined without being too restrictive, with the recent addition of the race detector.. Go looks well equiped for this kind of problems and some pretty interesting projects are there to prove it.
karaziox··on Trying out this Go thing at Disqus
Well some persons are ready to trust Go even for this http://andrewwdeane.blogspot.de/2013/05/the-reliability-of-g...
karaziox··on Trying out this Go thing at Disqus
These benchmarks seems to rely heavily on math operations and the Go bench seems compiled with gc. I suspect that gccgo with the latest runtime (There was no release of gcc with the 1.1 runtime yet) can show prettier results with the use of the more mature gcc optimisations.
karaziox··on Trying out this Go thing at Disqus
go func(){ channel <- data }()

Here, you will never actually block on your send since it runs on it own goroutine. I can't see an actual use case for this kind of thing but since you are using this argument over and over then.. :)