HNHacker News
TopNewBestAskShowJobs

maple3142

1,632 karma · joined October 26, 2017

Personal Blog(in Chinese): https://blog.maple3142.net/
submissionscomments
maple3142··on Show HN: Dotenv, if it is a Unix utility
But a lot of env file doesn't do that iirc. `allexport` solves this though.
maple3142··on Curl is just the hobby
Isn't it already supported by REST? CREATE: POST READ: GET (or QUERY if body is needed) UPDATE: PUT for full update, PATCH for partial update DELETE: DELETE
maple3142··on Quantum Algorithms for Lattice Problems
AFAIK, only SIDH-like schemes that exposes auxiliary points are broken, so others schemes like CSIDH may have some chances? https://issikebrokenyet.github.io/
maple3142··on Meta's Onavo VPN removed SSL encryption of competitor's analytics traffic
It really depends on why are you trying to do. It is not easy (or just impossible) to get the same amount of ip with that $5/mo or $10/mo VPN services by renting your own VPS at the same price.
maple3142··on Tunnelmole, an ngrok alternative (open source)
One of the thing I found missing is a lot of ngrok alternative is a web interface for viewing HTTP requests/responses when tunneling in HTTP/HTTPS mode, so I made a kinda hacky solution to this using cloudflared + mitmproxy: https://gist.github.com/maple3142/e46ab5ce8697476db13b4d9dc0...
maple3142··on LLM4Decompile: Decompiling Binary Code with LLM
There is [PyLingual](https://pylingual.io/), but it is not open source unfortunately. I am not sure if it is also LLM based.
maple3142··on Google's threat model for post-quantum cryptography
SQIsign is relatively small and fast to verify, but it is pretty slow to sign.
maple3142··on gh-116167: Allow disabling the GIL
Python is probably much more monkey patchable. Almost any monkey patching that JavaScript supports also works in Python (e.g. modifying class prototype = assigning class methods), but there are a few things that only Python can do: accessing local variables as dict, access other stack frames, modifying function bytecode, read/write closure variables, patching builtins can change how the language works (__import__, __build_class__). Many of them can make a language hard to optimize.
maple3142··on Don't fuck with paste
Paste with format is actually usefull sometimes. For example, you can copy from vscode and paste into Microsoft Word, then the resulting code will be property formatted and highlighted.
maple3142··on Unity's Open-Source Double Standard: The Ban of VLC
But you don't have to publish that modified apk to Play Store. You can just sign it with your own key and install the apk manually, no root needed.

I know there are some apps that do its own cryptographic signature verification on their own, but most apps don't do that, so replacing a LGPL library in an APK is actually feasible in most cases. It is not hard to do so either.

maple3142··on Lessons from building GitHub code search [video]
Shouldn't the competitors just clone the repository locally and train their model on it instead of relying search api which probably cost more computation resources?
maple3142··on There's Math.random(), and then there's Math.random() (2015)
In V8 engine, Math.random is implemented using xorshift128, which is a completely linear PRNG with 128 bits of state. Since you can recover 1 bit from each output, 128 outputs should be enoguh for you to setup a GF(2) linear system and solve for the state. Once you have the state, all you need is to simulate how V8 output future random values from state.

There are a series of challenges called "fastrology" from PlaidCTF 2023, which is about predicting Math.random() given some partial output (e.g. Math.floor(Math.random() * k)) with several variants. You can try to find writeups for that challenges, those solvers should be easy to adapt to predicting Math.random()>0.5 .

maple3142··on Podman Desktop v1.5 with Compose onboarding and enhanced Kubernetes pod data
On WSL2, you just install Docker the same way as you would do on Linux. `sudo apt install docker.io` (from Debian/Ubuntu repo) or `curl https://get.docker.com | sh` (from Docker Inc). If you are using different WSL distribution, the standard way to install docker should work just fine. (e.g. `sudo pacman -S docker` works as expected on ArchWSL)
maple3142··on Nota is a language for writing documents, like academic papers and blog posts
I think some basic dynamism is still necessary to make reading pdf on small screens comfortable (e.g. mobile). When on mobile, I vastly prefer reading webpages over pdf because most reasonable webpage should be able to fit mobile screen.
maple3142··on That's a Lot of YAML
Maybe duplicate keys in JSON counts? Some JSON parsers choose the first and some choose the last, and YAML directly forbid that.
maple3142··on Towards a new SymPy
I am not sure current SAT solver is good at solving things that a good CAS can do. It is fast at a lot of operations related to bits (xor, shift, and, or ...) but it performs way worse for things like solving a linear system in a finite field. (This is all from my personal experiences, so I may be wrong.)
maple3142··on Docker Is Four Things
If you don't need to access `docker` command from Windows, just install docker using the same way you would install docker on a regular Linux in WSL2. (e.g. sudo apt install docker-ce, curl https://get.docker.sh/)
maple3142··on PackagingCon – A conference only for software package management
The problem with system packaging is there are so many systems. For example if you only package something for Debian, how should a Fedora, Arch, Gentoo or even Mac and Windows user use that?
maple3142··on Safari 17 Link Tracking Protection
I don't think that would play well with cdn caching.
maple3142··on Text rendering hates you (2019)
Your simplified variant of 龜 appear to be used in Japanese kanji, but the "old, moetly unused" version is still used in places using Traditional Chinese like Taiwan and Hong Kong.
maple3142··on The Matasano crypto challenges (2014)
Another similar website for people who like this: https://cryptohack.org/

It is like cryptopals, but in a Catch The Flag format. Many challenges on cryptopals do exist on CryptoHack too, but CryptoHack also have some even harder challenges to solve.

maple3142··on Bye Bye Ubuntu, Hello Manjaro. How Did We Get Here?
There are still some reason that you may want to use a newer version of a software when your distro is stable. e.g. The latest version added a new feature that is really useful to you, or a long-standing bug has been fixed in latest version.

I think Flatpak would be current best choice for these tasks if you are running a stable distro. But I think it would be good to have a distro where core OS and user application is completely separated, and can be updated independently. It would be nice to have latest application without fearing the next grub/DE/kernel/driver/... update might break your current setup.

maple3142··on Still Love Telnet
It is deprecated is the sense that you can't even login using telnet. Try `luit -encoding big5 telnet ptt.cc`, and it will tell you to switch to websocket or ssh in Chinese.
maple3142··on Still Love Telnet
Telnet support for PTT has already been deprecated for security reason so I am not sure PTT still count as a telnet-based BBS. Only ssh and websocket is supported nowadays.
maple3142··on We Need To Talk About Vercel
> Unless CloudFlare cables are somehow shinier than the rest of the internet’s, adding one hop almost certainly adds latency. More hops more time.

In my experience, CloudFlare (and other CDNs) can often provide a better route then a regular ISP. Sometimes downloading speed is really slow, switching to CloudFlare wrap (VPN) can at least double or triple the speed.

maple3142··on JSON vs. XML
I know that one, but I think JSON.NET is to blame for this because it decide to take `$type` and other fields and apply some reflection magic on it. It isn't really different from evaling a random json field in your own business code. A lot of sane json implementation also don't do this too, like `JSON.parse` `json.loads` `json.Unmarshal`...

On the other way, XML External Entity is a part of XML standard, so any standard compliant XML implementation have to support it. This is why XXE attack applies to many languages.

maple3142··on JSON vs. XML
One of the reason to prefer JSON over XML is that you can reasonably parse an untrusted JSON using default configuration without getting yourself pwned. A lot of XML processing libraries still support external entities by default that you have to disable them manually: https://cheatsheetseries.owasp.org/cheatsheets/XML_External_...
maple3142··on Ask HN: Why does every package+module system become a Rube Goldberg machine?
Probably because your Debian doesn't work on other Linux distros like CentOS, Arch Linux ..., let alone MacOS and Windows. The holy grail would be a package manager that is both cross language and cross platform at the same time, but it seems too hard to be implemented in general.

Anaconda is probably the closest as it also package many non python packages. Nix is also similar but it doesn't support Windows at all (without WSL)

maple3142··on Tiktoken: OpenAI’s Tokenizer
JavaScript certainly has a standard library, it just really small. Node.js have a bigger standard library (https://nodejs.org/docs/latest-v18.x/api/index.html), including http/https and crypto stuffs and more, they are just not easy to use.
maple3142··on Termux on Android 5 or 6
You can use this without root by using the rish provided by [Shizuku](https://play.google.com/store/apps/details?id=moe.shizuku.pr...), because it only need adb shell permission for this.
← PreviousPage 2 of 9Next →