HNHacker News
TopNewBestAskShowJobs

maeln

4,794 karma · joined October 24, 2016

submissionscomments
maeln··on Forging a Microsoft Edge Full Chain with Logic Bugs Only
The article does actually go pretty in detail about the exploit.
maeln··on Evidence of a spying operation by ICE against left-wing social movements
Some people DO advocate for better laws. It doesn't mean that it will pass. At then end of the day, you have to convince enough people to vote for people who want to make it a law, or make enough noise and be an enough electoral power that politician wants to do it. But, while a lot of people care about immigration and such, at the end of the day, some other issues (the typical example is the cost of living), might take precedences.

> Also, what makes refugees specifically the US's responsibility? E.g. verifying, processing and integrating refugees puts strain on domestic systems, and strain scales with volume.

I think nobody said it's the U.S responsibility, in spirit. Factually it is by the fact that they have to handle it and international laws. But that is why country sometimes collaborate on those issues. The U.S and Mexico do collaborate on immigration issue. Mexico do stop a lot of south american immigrant from reaching the U.S border. But the border is huge. There is also other ways to get in, legally or illegally. You can't possibly stop everything. And it is the burden you get when you are a rich country. The U.S is not the only one. And mind you, the U.S and Western European country have benefitted a lot from exploiting the people and resources in poor country and pushing allied authoritarian regime there. Immigration is but a small cost they pay for what they did, and got.

maeln··on Evidence of a spying operation by ICE against left-wing social movements
First off, there is a difference between “I come from a decent country and therefor have no real reason to take the risk of illegally immigrating somewhere” and "My country is very, very bad (possibly in not small part due to country X), and moving to country X illegally is less risky for my life and family than staying here". We tend to have at least some empathy for people in the second scenario.

But even never minding that, you could say a lot of things : The U.S.A is a country literally built by immigrants. The native-american are a minority in their own land. So is it surprising that a lot of people in an immigrant country support immigrant ? Then, there is the dirty economic secret that illegal immigration fill the low-wages jobs that citizen don't have to lower themselves too. A lot of ties, rule of law, etc. Of all country, it is weird that the U.S is turning anti-immigration.

maeln··on SS United States to be sunk as largest artificial reef
> Odd to have this as last name in France.

It's really not. Even without considering Alsace Lorraine, there is a lot of people with German origin in France. In general, it's very common to see people with family name from Spain, Italy, … And also from the old colonies / protectorate like Lebanon or Vietnam.

maeln··on Security Disclosure
I find it very funny when people put the link of their company in their bio (that's fine and normal) and next to it the ARR it brings (who cares ??). It *really* makes you look like those influencer-entrepreneur-scammer who claim to have 10 side projects making 2B ARR but still somehow spend their time selling you courses on how to be like them instead of taking care of their companies. Your client do NOT care about your ARR (well to an extent), so why is it something you are so keen on advertising
maeln··on There isn't an easy exploit for this PHP vulnerability
The pop culture makes you think cybersecurity is wearing black clothes, having wild tatoos and jacking-in the matrix with a dripped up thinkpad while at the back of a nightclub. Turns out, its wearing suit, and showing slide to corporate begging them to have a review process for their firewall and a decommission plan for their 20 years old services made in java 6 and never updated.
maeln··on Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
eMudhra explanation : https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c11

Kind of hard to understand how a bug would have generated a second pair of key so bad, and how would human would have ended up using them. Never attribute to malice what can be attributed to stupidity, but sometimes you wonder.

maeln··on Pillowfort Is Closing
it was in 2021
maeln··on How I got over 300 Tor exit nodes removed
Yep, running a relay is fine ! I did it for several years (even got the free shirt!). And it is still useful because more relay improve the network for hidden services (which are insanely cool to self-host some stuff, free NAT traversal !).
maeln··on How I got over 300 Tor exit nodes removed
In many countries, running an exit node is a very fast way to have cop knocking at your door and seizing all your stuff. To run a tor exit node, you either have to try your best to stay anonymous, preferably be based in a country who don't care at all about cyber crime, and run them on a dodgy hosting provider who dgaf. Or you have to create a legal entity, either a non-profit or a company, depending on the country register as a hosting provider (so that you are not consider legally responsible for what comes out of your server if you abide by some rules), and you will still have to respond pretty fast to any police inquiry.

If anything, it's a miracle that there is 3000 of them. Although you can safely assume that a good portion of them (if not the majority) are operated by state intelligence services, cybersecurity companies and bad actor, who will log everything that pass through their node (and might be able to decrypt them one day).

maeln··on How to Train Your Robot
It's not just that the world is built around human-shape, but it's also that humans are very, very adaptable. Our hands are a marvel of evolution allowing us to do extremely precise tasks while still being adaptable to all kind of movement : Screwing in, out, grabbing weird shape in 6dof, rotating along several axes, ... And ours arms, our legs, etc, have similar benefit. As an example, we are not a fast specie, but we can walk on even ground, rough ground, steep inclined, we can climb rock and more. If you see a place, you can probably go there.

This is why human are still used for many, many tasks, including in industry where a lot of things are handle by robot. Yes, you can have an automatic belt feeder, or moving tray system, to move pcb from the pick and place machine, to the furnace, to the assembly, etc. But it means your assembly line is fairly rigid. Accommodating a new process, a different size of pcb or whatever become a costly endeavor. A human on minimum wage can cheaply move things from machine to machine, check if everything is alright in the process, adapt to new processes, new floor layout, very easily and cheaply.

Robot don't need to be exactly human shape, but having robot with the same adaptability has human have a huge advantage for companies where adaptability is a core part of the business.

maeln··on I Love Software Rendering
You have to admit, it makes for a less catchy title
maeln··on Someone on Torrent Sites Kept Fucking with My Sonarr
There was always people trying to make $$ with piracy (I mean, didn't the tpb owner basically all became millionaire thanks to it ?), but I feel like in recent years it had become worse. It's likely because since the 2010' many countries (mostly “western” country tbf, but also Japan and now Korea) have become way more aggressive with hunting and prosecuting piracy services operator. So in a way, like with drugs, higher risk means that a lot of “in it for the love of the game” kind of people left the scene and only more, errrmmm "money focused" people stays.
maeln··on Someone on Torrent Sites Kept Fucking with My Sonarr
If anybody ask, it's not me who said it, but you can also easily use Shodan to find a lot of open Bitmagnet instances. Many people who self-host do not seem to be aware of the “questionable” decision of docker to always listen on 0.0.0.0 by default and make a firewall rule to expose your service to the entire web (you can also find instances of jackett and some *arr stack, but most of them are at least password protected).
maeln··on How Amazon pushes up prices all across the Internet
The issue is that in many cases, this is not what is being sold on Amazon. There is good chinese brand/product (I love my chinese IEM), but when looking for many household items, you will find the white label, probably not compliant with local regulation, type of product. When it is not an outright scam.

I actually have a recent example : I do woodworking and for the last step of finishing some of the thing I build, I use a mixture of beeswax and linseed oil. Beeswax has been harder and harder to find locally. Not so long ago, every hardware shop had some. Now it has been displaced by synthetic product. So unless you know a local beekeeper, you are sol. So, resigned, I went to Amazon. It had a trove of listing for "100% natural beeswax". Turns out, ALL of them are paraffin dyed to look like beeswax. You can report it to Amazon, they don't care. They will reimburse you, but never remove the listing.

maeln··on Postgres isn't slow, your storage is
You can rent bare metal server for that. The real advantage of cloud solution is a cohesive offer, ease of scalability, and many other things which boils down to "we take care of things for you". It can be worth the $, i can also be a huge waste of $.
maeln··on The Hetzner Cloud network stack – history and technical overview
I also use the storage box and easily have 30Mo/s bandwidth (and 130Mo/s+ from a hertzner server), so that's strange that you seemed capped at 3Mo/s. Are you not in Europe ? You should probably contact the support to report it, because that almost definitely now how they intend their product to be.
maeln··on Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?
The issue with Blu-rays is they are costly to rip. Basically, the only software that let you do it right now is MakeMKV, and it's proprietary. I believe that the VLC team is working on some open-source solutions, but last time I checked, it was only able to read old Blu-ray (which is understandable, they have to care about potential copyright and drm issue, unlike the people behind makemkv).

So if you want to rip recent Blu-ray, you will need to buy makemkv (they do have a 1-month trial tho). But worse, if you want to rip 4k Blu-ray, you will need a specific br-drive that makemkv support (as I understand, they make custom / modified firmware for some drives, allowing to read the protected data). The issue is that there is barely anyone still making br drives and whenever makemkv support one it goes out of stock and/or become extremely expensive on the second hand market.

This is really annoying me because I know this is the end of the physical market for movie. I fully expect Blu-ray to completely die off in a few years. Movie will probably only be available through streaming services, which means it will be harder and harder to get a good quality encoding. With recent codecs (av1, h265, will see how av2 does), the quality that streaming services is okay, but we are far from what a full Blu-ray dump allows today.

maeln··on Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?
And it is legal to do so ! We pay the "copie privé" tax for that reason.
maeln··on GPT-Synopsys: Frontier Intelligence to Revolutionize Chip Design
> These chips still need to be physically made at TSMC, Intel, or Samsung.

That's for the most advance tech (sub 10nm and such). There is a lot of fab for chips that do not require the latest and greatest. If LLMs make it easier / more accessible to design ASIC, I think those fabs will be the one who will benefit the most.

maeln··on Fuck Android Developer Verification Program
> the browser is the best tool we have now to fight the duopoly and its absurd rules.

The browser, this infamous neutral platform fighting against Google and Apple duopoly by having the two biggest browser made by... Google and Apple ?

Joke aside, the state of the web and browser is depressing right now. Sure, we get webusb and webgpu, and all new fancy spec, and are slowly turning the browser into the final portability layer of the OS. But at what cost ? All browsers are now chrome with a layer of paint. Safari only continues to exist because of iPhone, and everyone is apparently moving on from Firefox. I keep using FF because I don't want the web to become a Google monopoly, but it's getting harder and harder. Google services that I have to use for work are becoming buggier and buggier on FF, I had big SaaS with bugs making them unusable on FF too. Even a government software I have to use... Nobody seem to QA on FF anymore.

maeln··on Show HN: Using 2D DFT, dithering, etc. to maximize eInk manga image quality
I used to use KCC when I had a Kindle and it was great ! But now that I have a android based e-reader, I use Mihon
maeln··on Updated Google Maps shows destruction of the city of Rafah
Look at Google map of Gaza city, Rafah, Khan-Younes, Al Qarara, ... pretty much all building have been destroyed. You want to try to argue that every one of them was somehow hiding a tunnel ?
maeln··on 500k facial scans at UK stations yield no arrests, 1 false positive
Having lived in shitty neighborhood all my life (not in the UK tho'), I find this pretty laughable. First off, you would be surprised at how petty criminal caught on police tactic fairly quickly and find way around them. But in general, you will just get petty criminal. Sure they are a nuisance, but more a symptom than a cause. And let's say we do just that. You arrest thousand upon thousand of balaclava-wearing, e-scooter driving dudes. What do you do then ? Most of them will have to be released because, well, they didn't do anything. You might catch some of them with minor charges like drug possession or possession of a knife or something. You successfully wasted thousands of police and justice man-hours for a few petty charges which won't change anything. “Solving” crime is a hard problem, and one with 0 simple solutions and many, many things we have to work on as a society. Your idea is a net negative in prertty much all aspect.
maeln··on Systems that no one will test
> Why does our industry have that attitude towards quality? Every bike shop in my little town is better with quality than the average software shop in the world.

Personally, I find that we have been flooded with poorly designed, poorly QA'd, break-after-you-use-it-thrice product. I really don't think we have better quality standard in other industry. Quality, testing, design, etc has a cost and most company rather pull out a new version of their product every quarter than actually make a good product. The exception, which goes for software as well, is life critical applications (most public transit, defense, etc).

maeln··on US Forces Exit Iraq
> a departure celebrated as a victory by Iran and its allies who now have deep influence in the country where 4,500 Americans died during more than two decades of war.

Kind of crazy to lead with this. Talking about the Americans victims (mostly military) and ignoring the local Iraqi victims (mostly civilians).

maeln··on Remember Hong Kong
I found that (like many things) it's impossible to talk about the HK protest (and somewhat HK future) on the internet. Aside from the obvious trolls, the misinformed and those with a vested interest in pushing a narrative, the protest in themselves regrouped a lot of people, had a lot of things going on, and make you able to push whatever narrative you want.

They were some prodemocratic demonstrators. Laudable but sadly they had no chance of winning that fight. There were some genuinely weird people with weird demands too (like some far-right ultranationalist HKer). The attacks on some politician, journalist and medias, and extradition law passed at all cost, was a clear authoritarian push. But from a chinese perspective, it is just putting HK in line with the rest of the country. There was some weird disappearance of some protestor, the clear usage of the triad to inflict violence on some protestor, and some protestors turn violent too. One could say, every country would react the same to a part of a country trying to secede. But if we look at, for example, Spain and Catalonia, will independence is firmly denied, there was way less violence and authoritarianism (Catalonia still have some special status).

All in all, the sad part is that some well-meaning idealistic kids might never be able to go back to HK. And with the integration with china, HK will slowly lose its identify and distinct culture. Now that it's no different than most other chinese territory, there is no real interest for foreign investor to invest there specifically, which was a part of what made HK rich. Its landscape will probably change a lot as the land value is not as prized anymore (which, tbf, might be a win for a lot of HKer). A lot of HKer now move to the bigger and richer Shenzhen for work, as more mandarin-speaking chinese move to HK. There are too many speakers for Cantonese to disappear overnight, but it might become a secondary language for most over time. The one you use to talk with you grandparent and feel slightly unique.

maeln··on So you want to use OpenRouter?
Openrouter is useful for quickly testing various models with just one API. In development, it's useful. I would not run it in production tho' for all the caveat mentioned. Go to the first party provider directly, it's cheaper usually. And the cost to rewrite to use their API is usually noting (you can even have both and a feature flag), especially if you just vibe code it.
maeln··on Don't let anyone take away your big box of cables
It's anecdotical, but in my experience, USB cable break way more than any other cable I have.
maeln··on Notes on Private Trackers
The limitation with ghost leeching is that it won't help raise your ratio. It's a way to avoid decreasing it (by never reporting download). If your ratio is bad and for reasons you want to increase it, you will have to generate upload one way or another. You can ghost leech and then seed the torrent you downloaded, but it can also look weird that you are now seeding a torrent that you never downloaded. But due to the nature of torrent, it is also possible.

But that's what I find fascinating. BitTorrent is a very cool tech, and not that hard to understand. It uses a lot of simple idea that works very well together. It's really fun to hack on it. And I add an obsession with findings 'cheating' methods a few years back. Overall, as you said, it's more of a social contract. None cared unless it was stupidly obvious.

Page 1 of 27Next →