HNHacker News
TopNewBestAskShowJobs

phyzome

5,703 karma · joined April 27, 2010

submissionscomments
phyzome··on CVE-2026-111943: Compromised Intermediate Certificate Authority
I prefer the chaotic option of MITM-in-the-middle.

(Mallory-in-the-middle is OK too.)

phyzome··on Using LLM for confidence scoring is a bad idea
The same as the difference between a thing and a statistical model of a thing.

They don't always match up.

phyzome··on Security Disclosure
Hahaha, you're giving Muse access to a mailbox? Good luck, have fun.
phyzome··on There isn't an easy exploit for this PHP vulnerability
Heartbleed was a buffer overread. Sounds like a memory safety bug... is it not?
phyzome··on Ask HN: How to deal with shipping AI-written code you don't understand?
What helps solve it is understanding the code deeply and thinking about it.

It's not perfect, but vibe coding means you don't even get that.

phyzome··on Google Cloud outage affects almost all banking and other operations in Europe
It's literally just a bunch of computers in a couple of expensive buildings. Of course it can go down.
phyzome··on Credit where credit is due
If the LLM says "the flow here is awkward, try connecting the thoughts better" and you do that by choosing words in your head and typing them, it's not LLM-generated.

But if you paste any output from the LLM into your document, or just wholesale roundtrip it through the LLM chat window, that's (at least partly) LLM-generated.

phyzome··on Credit where credit is due
It kinda works? But the marketing around it heavily overstates its sensitivity and specificity, and I know several people who have had their (pre-LLM!) writing detected as 100% AI by Pangram. A number of older novels are also misclassified, and writing styles heavily affect the scoring.

So I think it's probably OK at the corpus level, but it's not good enough for witch hunts.

phyzome··on Alternatives to animal testing are finally taking off
If you end up needing to keep dairy, you can do things like only buy dairy from 100% grass-fed, pasture-raised cows. Cheese from Europe is more likely to meet (or approach) that criterion, and yogurt is very easy to make, especially if you have a temperature controller (though it's not critical).
phyzome··on Ask HN: How to deal with shipping AI-written code you don't understand?
See the first paragraph here: https://alexgaynor.net/2026/sep/07/is-it-correct/

If your definition of "works" includes "doesn't have vulnerabilities", you're going to need to do more than just poke at it and add tests.

phyzome··on I no longer care to work on any Ruby gems so I've archived all my repositories
DHH hasn't been helping.
phyzome··on I no longer care to work on any Ruby gems so I've archived all my repositories
"Printing parts for your 3D printer" vibes. What about things that aren't for the printer?
phyzome··on The Electronic Disturbance Theater and Electronic Civil Disobedience (1998)
Note that this is a document from 28 years ago, not a current movement.

Basically, these were people who were experimenting with DDoS for political change.

phyzome··on Gold is now the top U.S. export
Sort of, yeah. My reaction was "I know we export huge amounts of food, gold can't be a bigger business than that". But the answer is simply that gold is so vastly overpriced that it exceeds other goods as a result.
phyzome··on Intuitive concurrent programming in any language
And it doesn't give any indication of its purpose (concurrency control).
phyzome··on Intuitive concurrent programming in any language
The elevator pitch needs work.

"in any language", but then the page says "We currently support C, C++, Python, TypeScript, and Rust."

"Lingua Franca is a coordination language" but then "Not a New Programming Language".

I think I see what this is going for but the descriptions need a lot of improvement.

phyzome··on Claude reveals ECDSA curve origins
That's one of those things I would consider "cute, but wrong". I'd rather hardcode for efficiency and add a unit test that rederives.
phyzome··on Claude reveals ECDSA curve origins
But you can show that there isn't room for (enough) unexplained entropy.
phyzome··on Claude reveals ECDSA curve origins
Eh, I hate Anthropic too, but this seems pretty tame. Lots of people have wanted to know the origin of those seeds even though they thought there was no back door.
phyzome··on Is Liquid Metal Killing Our PCs? Scientific Analysis and a 2-Year Test [video]
Oh man, I would never put (bulk) gallium into electronics if I could help it. That stuff gets into everything and will wreck various metals.
phyzome··on eBay Restricts Listings of Radio Equipment, but Exempts Ham-Band-Only Gear
So that's... kind of all consumer electronics, at this point. (Because of Bluetooth and whatnot.)
phyzome··on The 8-mile hole in a Hawaii national park that no one can explain
Yes, thank you -- I didn't express it very well.
phyzome··on The 8-mile hole in a Hawaii national park that no one can explain
At a guess: The articles are stored in some oldass MySQL DB that doesn't support Unicode, and they've somehow never gotten around to migrating the tables to a new schema.
phyzome··on Tesla Roadster
"Ergonomics" is an interesting phrase to use for "critical safety issue".

But yeah, that's not the part of the vehicle that's gong to kill its first victim.

phyzome··on Meta’s new commercial terms will allow the scraping of news sites: experts
"Will consent", that's some interesting phrasing in the current post title.
phyzome··on Wanted to download an ISO, ended up writing a kernel exploit
Ah, that must have happened in the past year, then. (Where do you see that, by the way?)

EDIT: OK, I see it on https://www.asus.com/supportonly/rtac68u/helpdesk_bios?model...

phyzome··on I designed a nose guard for my dog and gave it away. Now 500 dogs wear one
It's all very impressive and heartwarming.

But that doesn't change that slop sucks to read.

phyzome··on Wanted to download an ISO, ended up writing a kernel exploit
Pretty happy with my Asus RT-AC68U. I bought it like 8 years ago and they keep putting out firmware updates.

Before that I briefly had a Netgear Nighthawk R7000P and it kept interrupting long-running TCP connections. After much back-and-forth with their useless warranty department, I just returned it to the retailer.

phyzome··on Neural networks are clean
16,000 words into the essay: "What I mean by clean"

...and it still doesn't answer it. What is this actually about?

phyzome··on Yandex outage: data shows that instead of going dark, malicious bots moved
Take it up with Claude, I guess.
← PreviousPage 3 of 34Next →