HNHacker News
TopNewBestAskShowJobs

nijave

2,463 karma · joined August 22, 2018

[ my public key: https://keybase.io/nickv; my proof: https://keybase.io/nickv/sigs/qMdHcggaKRYKr002ExXFme5MjZeOQbHt-PyAl_07HDk ]
submissionscomments
nijave··on Synaptics Appears to Use Legal Threats to Block Open-Source DisplayLink Driver
If they were smart, they'd welcome an effort to make DisplayLink not a piece of trash.
nijave··on Synaptics Appears to Use Legal Threats to Block Open-Source DisplayLink Driver
Mostly agree. It's been super helpful for personal use but I don't think it's possible to achieve a true "clean room" implementation. Anything copyright encumbered should stay away.

On the other hand, it's been great for poking at cheap IoT devices and figuring out how to interact without crappy proprietary apps.

nijave··on A map of 5000+ midterm ads
Thought this was just going to be Ohio /s
nijave··on macOS 27 does not support CoreStorage volumes
Eh, mine was always on zfs first on FreeNAS then Ubuntu and it didn't seem to help.

The only thing that definitely made it worse was smb over openvpn. It'd corrupt itself every couple months instead of once or twice a year.

nijave··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
Nomad and Kubernetes orchestrate Linux containers using features of the Linux kernel (except where Windows kernel support has also been added).

Maybe you're thinking of jails? I'm not sure if there's any mainstream/popular distributed orchestration systems for those.

nijave··on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
systemd-networkd hides
nijave··on Landline phones will switch off across Britland in 100 days, no extensions
Apparently controversial but POTS should die. Cell is reliable, has better voice quality, and is cheaper.

As an added bonus, it also works when you're not at home.

I think I can count on one hand the times cell service has been down for me in the last 20 years.

nijave··on Ask HN: Which TV do you recommend for privacy?
It should mostly work with HDMI CEC. My Android TV (Nvidia Shield) will turn my TV on and off. I only use the LG remote to adjust the volume although if you're using an AVR, it should do everything.
nijave··on Ask HN: Which TV do you recommend for privacy?
The one with the best looking picture at the store. Don't connect it to Internet and use your own streaming box (that you trust).

Really I think in store is the way to go. Some "low" and "mid" tvs look identical to me. Some "high end" are meh. Some other "low end" look great. I think it's a bit of a crapshoot. Not sure currently but Samsung QLED used to be rated well but I always thought LG OLED looked worlds better. I've always liked LG OLED although I've heard their firmware has gotten pretty predatorial...

nijave··on Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Norton Anti Virus...
nijave··on Building an AI-native engineering org
I think it also depends on how well defined requirements are. I can have Claude nearly one shot a Terraform provider but it's just taking 2 API contracts and combining them together (the provider contract and the API you're automating)

On the other hand, some things are incredibly product intensive and poorly defined and it seems LLMs will latch on to an arbitrary direction with much lower success rate.

It is also worse in "brown field" where there's lots of tribal knowledge and technical debt. Two systems may both exist that look very similar but oftentimes there's the one on life support that almost no one uses or cares about and the LLM doesn't know it should largely ignore that until it's thoroughly documented (which can be a significant undertaking)

nijave··on Building an AI-native engineering org
Idk imo code is and has always been a liability. Like the toilet paper bear says "less is more"
nijave··on AI isn't replacing SREs, it's deskilling them
Eh, I think they're still terrible at architecture. They'll find bugs but they'll try to make them go away instead of building a sustainable system.

They also have a propensity to try to rewrite gigantic amounts of code in one go making changes riskier and harder to scrutinize... without using more LLMs.

nijave··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
Maybe they forgot to run this one by the lawyers before posting. I'm surprised they'd publicly admit to that
nijave··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
It does have to do with GLM-5.3 but you're correct it doesn't have anything to do with the model.

It effects the _endpoint serving GLM-5.3_

I'm not sure how else you'd identify the GLM-5.3 serving endpoint without naming GLM-5.3.

That said, having the word "model" in the title is misleading imo

nijave··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
Changing "model" to "endpoint" might help since it's the endpoint, not the model
nijave··on PHP2Shell: AI uncovers critical RCE in PHP
Also sandboxing and strong permission boundaries ie when things fail, contain the damage
nijave··on PHP2Shell: AI uncovers critical RCE in PHP
I'm not sure that's true. It seems very popular in OSS in general but not much enterprise/commercial uptake.

I guess node has taken some market share it seems like

nijave··on PHP2Shell: AI uncovers critical RCE in PHP
Yeah, I thought it was dying a bit but was looking for webmail software (Roundcube, etc) a couple days ago and all of it is PHP.
nijave··on New Withings Users Must Pay $99/Year for Apple Health Syncing
Haven't tried it yet but there's OpenMuse for the Athena S Muse headband.

I think there's an open source Whoop firmware now for that.

nijave··on New Withings Users Must Pay $99/Year for Apple Health Syncing
They are nice in cold weather to "hold you over" on short drives before the air heating warms the car up.

My Civic remote start with the key fob will automatically turn them on when it's cold.

nijave··on New Withings Users Must Pay $99/Year for Apple Health Syncing
I've had (what I think is) the Renpho Elis 1 for years and have been happy with it. Was like $20-25 from Amazon I think in 2018 and still works fine
nijave··on OpenCode 2.0
Found out on 1.x it goes crazy with file watches. If you launch in a top level directory with lots of sub directories, iirc it can create millions of watches X2

Not sure if it's fixed in 2.x. There's some way to get it to not do that with ignore files or rules but not sure exactly how--I had Claude fix it...

nijave··on OpenCode 2.0
Don't worry, it's janky on my Pixel 11 as well
nijave··on OpenCode 2.0
ACP?
nijave··on We’re releasing Jev 1.14.0 along with experimental features for dreamers
I generally trust benchmarks but my personal experience in the last 6-9 months is they have little relation to real LLM performance, unfortunately.

I've had better luck just running a few of my own simple tests.

nijave··on Firefox Enterprise
Cloudflare Access does that. I suspect other SASE/zero trust solutions probably also do (iirc it does everything you've named)
nijave··on Firefox Enterprise
You used to be able to also do a .conf or .js file and iirc the only thing different between platforms was the path.

I think it's policies.json and mozilla.cfg

nijave··on How Amazon pushes up prices all across the Internet
Really Lowes and Home Depot have been doing better imo for anything they have. Their website actually has filters and decent search and most stuff is free next day delivery. On top of that, the Chinese knockoffs are fairly minimal or at least more established knock-off brands.

On top of that, that's without a $150/yr subscription.

Costco and Chewy are also pretty good.

nijave··on Firefox Enterprise
I thought you could push a non user writable config that could control pretty much everything since... Forever?

Along with that, push extensions to add DLP bits, etc

Page 1 of 34Next →