HNHacker News
TopNewBestAskShowJobs

r9295

320 karma · joined April 1, 2021

Primarily into cybersecurity especially fuzzing and supply chain.

contact: hackernews {at} ruebezahl {dot} mozmail {dot} com

submissionscomments
r9295··on Claude Code Found a Linux Vulnerability Hidden for 23 Years
In my experience, the issue has been likelihood of exploitation or issue severity. Claude gets it wrong almost all the time.

A threat model matters and some risks are accepted. Good luck convincing an LLM of that fact

r9295··on A Fuzzer for the Toy Optimizer
Those interested in testing optimizers may have a look at equivalence modulo testing, a fascinating research field:

https://dl.acm.org/doi/10.1145/2666356.2594334

r9295··on Kidnapped by Deutsche Bahn
This has been the case since I moved to Germany, 6 years ago. National humiliation is apparently an insufficient detterent.
r9295··on A P2P Vision for QUIC (2024)
It really depends on the implementation? From my understanding, WebRTC uses it to broker the connection and nothing more. Then it's p2p
r9295··on Testosterone Administration Induces a Red Shift in Democrats
136 males? Fooled by randomness
r9295··on EU lawmakers push to ban term 'veggie-burger'
Unsure what either of those have to do with this law
r9295··on Python on the Edge: Fast, sandboxed, and powered by WebAssembly
WASM runs in the browser which is why it receives so much consideration (rightfully so).
r9295··on Keep Pydantic out of your Domain Layer
Personally, I think that's a good idea. Design patterns naturally make sense (Visitor, Builder for e.g) once you encounter such a situation in your codebase. It almost makes complete sense then. Otherwise IMHO, it's just premature abstraction
r9295··on Mapbox Geospatial MCP Server
Honest question: what's the fun in travel if you remove all uncertainty?
r9295··on AI Changes Everything
How is one supposed to context switch between reading a book and rigorously understanding and verifying potentially hundreds of lines of code generated by an AI?
r9295··on Show HN: Autarkie – Instant grammar fuzzing using Rust macros
If you can translate the schema into native rust types, then yes!

https://github.com/oxidecomputer/typify may help for starters. Please create an issue if you need further help with integration!

r9295··on Show HN: Autarkie – Instant grammar fuzzing using Rust macros
Glad to hear this! Please create an issue if you run into any issues during the integration.
r9295··on New speculative attacks on Apple CPUs
They've also consistently put out some of the best fuzzing research
r9295··on Facebook and Instagram to Unleash AI-Generated 'Users' No One Asked For
I'm assuming it's similar to Spotify using session musicians to create ghost artists. Instagram won't need to pay actual creators since they own all the content created by these AI generated will be owned by them
r9295··on From Pegasus to Predator – The evolution of commercial spyware on iOS [video]
An idea I that I considered implementing was to instrument parser libraries (png/pdf etc) with address sanitizer (for iMessage/Chrome/Webkit) and run the instrumented version for 5% of all parsing operations. If we get enough people to use this, exploits may be easier to discover?
r9295··on Stopping by Woods on a Snowy Evening (1923)
I assume every English teacher of quality must have gone through this poem with their class. Mine certainly did! This reminds me, I should write to her and thank her for introducing me to such enchantment
r9295··on An Interview with Bill Watterson (1987)
I was gifted the entire collection a couple of years ago by my father, having grown up adoring Calvin and Hobbes, mostly thanks to him. I used to re-read the few books at the local library over and over again. The Christmas strips were my favourite, because I hadn't experienced snow at the time.

The entire collection opened a window into Watterson's evolution. He became a bit more cynical as time passed. I loved it.

Reading about his respect for his work, his refusal to sell out and his restraint made so much sense. You could feel it, the way these characters came to life. The essence ever intact.

Forever changed, forever grateful

r9295··on Amazon reportedly working on Echo Frames for delivery drivers
This brings to mind a recent thought I had - our senses and intuition continue to be abstracted and delegated. It is especially humiliating when this delegation, which we must obey, is derived from data which we are unable to comprehend or perceive.

The medium is the message

r9295··on Fuzzing between the lines in popular barcode software
https://github.com/antonio-morales/Fuzzing101

Is a good course

r9295··on Tech jobs are drying up and graduates are no longer guaranteed a role
Classic BusinessInsider article with no actual insight or sources, just a few shallow quotes and sensational extracts.
r9295··on Life without Aadhaar
Renewals, from what I heard, were difficult to hinder since you already had an official state issued document.
r9295··on Life without Aadhaar
Needed to get one for my passport. At that point, in 2017, it "wasn't required" but the state bureaucracy made it clear I wasn't getting it without my Aadhar card.
r9295··on More Germans left without jobs this summer as economy contracts
I seriously doubt the claim that companies held onto workers during the economic downturn, Why are there companies complaining about staff shortages (eg: Deutsche Bahn, Airport staff etc) if they retained their staff?
r9295··on Evaluating Fuzz Testing
Further reading (published this year) along similar lines: https://mschloegel.me/paper/schloegel2024sokfuzzevals.pdf

Building fuzzers that are as efficient and generic as AFL++ (with cmplog) is a truly difficult undertaking.

r9295··on Bytecode VMs in Surprising Places
Not sure if EVM is surprising though considering it means Ethereum Virtual Machine
r9295··on Dafny is a verification-aware programming language
It depends on how feasible stable Rust is for popular projects. Many projects mandate nightly. Even if it is a fixed nightly version, the discrepancies across nightly versions add up since they don't just add APIs, they remove them too.
r9295··on Dafny is a verification-aware programming language
Probably never gonna happen due to how unstable rustc is and due to the fact that a lot of projects require nightly.
r9295··on Some Fritz!Box modems might have been hijacked
Cache perhaps?
r9295··on Software glitch saw Aussie casino give away millions in cash
Same throughout Berlin and North-Rhine Wesphalia here in Germany. Not sure about the other states.
r9295··on AI Has Made Google Search So Bad People Are Moving to TikTok and Reddit
Seems like a click-bait title as Google Search was long gone before the AI spam, as noted by several people. AI will just accelerate the toxicity of SEO
Page 1 of 4Next →