HNHacker News
TopNewBestAskShowJobs

panzi

1,119 karma · joined August 30, 2013

https://github.com/panzi/
submissionscomments
panzi··on Winamp Skin Museum
Even Linux DEs have it less now than they used to, but there are renewed efforts to bring a better universal theming engine to KDE at least.

It's more difficult now than it was back then for KDE I guess, because with Qt Widgets, QML, and Plasma you basically have three times as much to support in a theme/theming engine. And then back in the day better KDE themes also provided themes for Gtk, so that Gtk apps integrated nicely. How many concurrent Gtk versions are now used that you would all have to support? And sometimes (especially non-Qt programs) take some colors from the theme, but not others, breaking everything when you want to customize your theme (you get e.g. black text on black background). So I appreciate the renewed effort, but I'm not holding my breath.

panzi··on JSON-LD explained for personal websites
And then there is https://schema.org/ It's the item* attributes, e.g.: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/... Also Dublin Core in <meta> tags. Why do they keep adding conflicting meta data formats to HTML!?!
panzi··on .gitignore Isn't the only way to ignore files in Git
Python packages aren't quite so insane on transitive dependencies. The diff of package-lock.json can be novel length.
panzi··on Not everyone is using AI for everything
or for anything
panzi··on Why SpaceX 2040 Revenue FCST $4.3T in highly unlikely
I mean the animated graphics and some other hackery going on when you try to zoom. It thinks to detect a different scroll position and jumps to a different slide. Also means you can't convert it to a PDF or print it, if you want to (though I wouldn't want to do that).
panzi··on Why SpaceX 2040 Revenue FCST $4.3T in highly unlikely
The animated graphics are fancy, but can anyone with a screen reader tell us how that "looks" to them? The graphics are all one SVG mixed together with different parts set to opacity: 0. The accessibility tree in Firefox gives you all the labels randomly mixed together. If that is how people with screen reader "see" it, its unusable.

Maybe make the graphic aria-hidden and add an empty tag with aria-description (or other kind of tag only screen readers see) describing the current graphic to each slide.

panzi··on Why SpaceX 2040 Revenue FCST $4.3T in highly unlikely
While I'm not that against to such a web page (when viewing it on a monitor, not a phone) I'd say follow these points:

• Don't hijack any browser functionality. Scrolling shall scroll the document, the end.

• Don't scale something to the screen size, breaking zoom! Especially don't do it so that when zooming causes a different scroll position and then it all jumps to a different slide. WTF!

• Make it accessible!

If you want to make flashy graphics and animations make a game. That is not meant as to belittle games, I love games.

panzi··on GPT-2: Too Dangerous To Release (2019)
It's the wrong way around. If we get AGI (or any well working AI) before we abandon capitalism it's going to be a huge disaster. A handful of even richer even more powerful very greedy people will have all the wealth and everyone else will have nothing. I mean, there was a WW3 in Star Trek, so maybe it was that path that humanity took in Star Trek anyway?
panzi··on Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot
We have the same saying in German: Operation erfolgreich, Patient tot.
panzi··on Meta's ships facial recognition on smart glasses
How many ships does Meta have?
panzi··on GitHub confirms breach of 3,800 repos via malicious VSCode extension
On one hand yes, sandbox everything. On the other the extensions still can change your code which you then run. Though you might only run it in a container at first.

I heared zed sandboxes extensions. I should have a look at that editor some day.

panzi··on 'No way to prevent this,' says only package manager where this regularly happens
I googled a bit and found this snippet:

            <plugin>
                <artifactId>exec-maven-plugin</artifactId>
                <version>3.5.1</version>
                <groupId>org.codehaus.mojo</groupId>
                <executions>
                    <execution>
                        <id>Generate-shared-lib</id>
                        <phase>package</phase>
                        <goals>
                            <goal>exec</goal>
                        </goals>
                        <configuration>
                            <executable>bash</executable>
                            <arguments>
                                <argument>generate-lib.sh</argument>
                            </arguments>
                            <environmentVariables>
                                <JAVA_HOME>${env.JAVA_HOME}</JAVA_HOME>
                            </environmentVariables>
                        </configuration>
                    </execution>
                </executions>
            </plugin>
At least with certain plug-ins Maven will execute arbitrary commands at build time. And if you need that to build native bindings it feels like a big hole. Granted, most projects don't need JNI, I guess.
panzi··on HTML Lists
Wasn't it more like this?

    <style>
    @keyframes blink {
        0% { visibility: visible; }
        50% { visibility: hidden; }
        100% { visibility: visible; }
    }
    
    blink { animation: blink 0.7s steps(1, end) infinite; }
    </style>

    <blink>This guy blinks.</blink>
panzi··on 'No way to prevent this,' says only package manager where this regularly happens
Plus the lock file doesn't just contain the exact versions, it contains hashes. Making sure that you actually got the package in the exact same version.
panzi··on 'No way to prevent this,' says only package manager where this regularly happens
How does Maven handle JNI? Is it also a build system for C/C++, or do packages with native bindings require manual build steps?
panzi··on 'No way to prevent this,' says only package manager where this regularly happens
Last I checked npm had 2FA for publishing, but cargo didn't. I don't think cargo is any better than npm, just not that of an attractive target.
panzi··on 'No Way to Prevent This,' Says Only Package Manager Where This Regularly Happens
A good part of it is already implemented in web crypto, which is supported by browsers and node. There is a chance that npm could implement something there without extra dependencies. Maybe I'm too optimistic?
panzi··on New Nginx Exploit
Does Debian 12 have this patched? But I guess I'm not affected if I don't use `rewrite` or `set` anywhere?
panzi··on Linux gaming is faster because Windows APIs are becoming Linux kernel features
Is NTSYNC used for anything else other than wine/proton?
panzi··on I moved my digital stack to Europe
So are certain states of the USA: https://www.ipvanish.com/blog/ban-vpns-us-privacy/

It's horrible everywhere. If you're in the EU go donate to: https://epicenter.works/ They're a citizen rights NGO working against all that BS in the EU (and in Austria, where they're from).

panzi··on You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
We should assume that multiple state actors already are using it.
panzi··on Ratty – A terminal emulator with inline 3D graphics
What use cases do you see?
panzi··on I’ve banned query strings
watch?v=oHg5SJYRHA0
panzi··on You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
I forgot who it was, but someone on YouTube said LLMs already work hooked up to gidra. If true it's only a matter of time once they find similar things in e.g. Windows. I'll wait half a year to a year (think of embargo) and if there still isn't such work for Windows I'll conclude that LLMs have a problem disassembling binaries.
panzi··on How far behind is each major Chromium browser?
Just wanted to write the same comment!
panzi··on Zed 1.0
What are they doing with proprietary binary blobs? I thought it's open source.
panzi··on Who owns the code Claude Code wrote?
Also fair use is much more limited in the EU. Don't know how it applies here or if there where any rulings. Are you going to stop doing business with the EU (and Japan etc.)?
panzi··on Who owns the code Claude Code wrote?
Other than putting something into the public domain I don't really know any open source licence that doesn't require at least attribution. One can assume that 99.9% of training data had some sort of license requirements, so just blindly using it is a copyright violation. People just don't seem to care.
panzi··on Anthropic Joins the Blender Development Fund as Corporate Patron
They didn't enter in any obligations. It's a donation.
panzi··on Anthropic Joins the Blender Development Fund as Corporate Patron
Wait, wasn't that OpenAI, not Anthropic? Lost track of all those AI companies.
← PreviousPage 3 of 27Next →