HNHacker News
TopNewBestAskShowJobs

rollulus

2,324 karma · joined March 14, 2016

Hi.
submissionscomments
rollulus··on GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
With the eMudhra situation we saw e.g. Go doing an emergency release that blacklists the certs, while they aren’t shipped with Go, as a protection of dependencies that haven’t caught up.

In this situation, wouldn’t the more responsible behaviour of gitlab be to blacklist Ruby runtimes that enable the CVE?

rollulus··on Dutch government had hacked into Jared Kushner's phone
The Dutch hacking Russian hackers sounds like a regular day for them, like last time when they even got access to the security cams in the hackers office: https://arstechnica.com/information-technology/2018/01/dutch...

The Dutch intelligence services are world class.

rollulus··on PHP 8.2.35
Guess what, there are answers to that question! October 14, 2026 was the date the domain got registered.
rollulus··on eMudhra intermediate CA compromise
A grumpy state actor today.
rollulus··on eMudhra intermediate CA compromise
I think you’re right. And since the intermediate certs expire around 2039 and the private keys are known, we have plenty of smooth MitM fun against IoT in front of us.
rollulus··on Go will reject certificate chains containing eight distrusted SPKIs
I think that the Go project is lucky to have you. Thank you for what you do!
rollulus··on Go will reject certificate chains containing eight distrusted SPKIs
There are no certs baked into Go’s stdlib. This is about pkg x509 blacklisting certain certs that get loaded from elsewhere.
rollulus··on Citroen revives the 2CV for an electric age
I’m still waiting for the revived Renault R17 which was a too cool concept car. https://www.renault.co.uk/concept-cars-range/r-17-restomod.h...
rollulus··on Nearly 200 people under observation after Irkutsk lab worker dies from plague
In absence of sources, the latter sounds like government cover-up bs to me.
rollulus··on Great Dirhombicosidodecahedron ("Miller's Monster")
J. C. P. Miller, who with H. S. M. Coxeter and M. S. Longuet-Higgins enumerated the uniform polyhedra in 1954.
rollulus··on Replacing the old battery on rechargeable bike lights
I don’t know what it is with Julia’s writing but it always makes me happy. It reminded me of replacing the soldered battery in Super Metroid so I could save my progress again. As a cheapskate I used a regular battery and connected the wires mechanically.
rollulus··on Reverse-engineered Jev-like model
From the readme

> A Jev-like model takes a piece of text and a list of N text options. It returns one probability for each option. It does this in one pass instead of writing an answer word by word.

I’ve read TypeSafe’s announcement, watched the home assistant demo, and still had no idea what it was. If instead those three sentences were in the announcement…

rollulus··on Everything is free now, so why not a floating orb in my IDE
The orb is free yet comes at a cost. When I wrote the equivalent of the orb 25 years ago I had to go through the book “Real-Time Rendering” by Tomas Akenine-Möller and Eric Haines, the first edition with the chameleon. I remember the smell of the book. I learned that 3D projection was not mostly trigonometry (as I believed) but instead “just” multiplications and an occasional division, mind blown! I learned while skimming through the various chapters in the book how little I knew and how much there was to explore, creating a sense of excitement and craving to understand and implement algorithms from shadow volumes to spherical harmonics, and acquire first all the mathematical prerequisites. And I had the rewarding feeling of accomplishment when my orb was rendering.

Now all of that is gone, if you choose so, and what’s left is brainrot and the equivalent of doom scrolling.

rollulus··on The Highest Point in the Netherlands
Nice, I stand corrected. A “special municipality”, TIL!
rollulus··on The Highest Point in the Netherlands
Well since you ask: GP is inaccurate because Mt. Scenery is part of the Kingdom of the Netherlands, but not the Netherlands.

Edit: I was wrong, see skylurk’s comment.

rollulus··on The Highest Point in the Netherlands
I don’t find that strange. Our drug policy is not backed by any sort of philosophy. E.g. possessing cannabis is illegal in NL. The policy is the outcome of micro-panics (a few accidents with tourists on shrooms), indecisiveness and fear.
rollulus··on Dutch central bank moves 86 tonnes of gold from US citing 'geopolitical unrest'
Not OP but the amount from Canada was next to nothing, which could make the title sound misleading. Just guessing.
rollulus··on TurboKV: Insanely fast Rust key-value store
Now that “blazing fast in Rust” has become a meme, is “insanely” the next thing?
rollulus··on Slovakia finds Russian backdoor in traffic speed cameras
Any idea what happens to the grid when a significant chunk of solar power suddenly disconnects?
rollulus··on Using the railway network as a flatbed scanner [video]
From experience: the iPhone’s panorama photo mode works to take pictures like this from a train.
rollulus··on Learning a few things about running SQLite
I realized that in the age of LLMs I appreciate Julia’s writing even more. Authentic exploration as an antidote to overconfident know-it-all generated junk articles.
rollulus··on 98% Isn't Much
What’s much and what isn’t depends on the context. One hair on your head isn’t much but one hair in your soup is.
rollulus··on Chat Control passed first round in EU Parliament
“We decide on something, leave it lying around, and wait and see what happens. If no one kicks up a fuss, because most people don't understand what has been decided, we continue step by step until there is no turning back.”

And

“If it's a Yes, we will say 'on we go', and if it's a No we will say 'we continue'.”

- Jean-Claude Juncker

rollulus··on Where to Find the Colors Your Screen Can't Show You
What I missed in the article: the curves of the three “cone kinds” overlap. What if you could stimulate kinds of cones individually to see entirely new colors? Some people shoot layers at them into eyes. But you can also try this website: https://dynomight.net/colors/ (previously on HN but search fails me).
rollulus··on GPT‑NL: a sovereign language model for the Netherlands
Interesting that this got posted now: the project is receiving increasingly more skepticism lately in the Dutch tech scene [0], and I think that’s fully justified.

[0]: https://www.quotenet.nl/zakelijk/a71588202/techondernemers-m...

rollulus··on I'm Tired of Talking to AI
I’m in the very same situation currently. A coworker vibe coded a PR for me to review. I asked: normally I would ask “why did you do xyz”, but what are you going to do now, proxy that question to your LLM? And is the LLM going to construct a “why” based on the nonsensical code it produced? Is this how we want to work?

The review is currently stalled in absence of answers.

rollulus··on Spanish court declines to fine NordVPN over LaLiga piracy blocking order
Mullvad is Swedish, right?
rollulus··on In 1979 engineer Hugh Padgham discovered "gated reverb" – by accident
This article is incomplete without examples.
rollulus··on Rendering the Sky, Sunsets, and Planets
Incredible what mobile phones and browsers can do nowadays. I remember implementing this paper from 1993 (the absolutely OG for this topic and very readable): “Display of The Earth Taking into Account Atmospheric Scattering” by Nishita et al: https://www.researchgate.net/publication/2933032_Display_of_...
rollulus··on Bun is being ported from Zig to Rust
Rewriting it using an LLM is one. But did all the contributors became as proficient in Rust as they were in Zig over night as well?
Page 1 of 11Next →