HNHacker News
TopNewBestAskShowJobs

serhack_

4,084 karma · joined October 9, 2017

Serhack.me account. E-mail: hi@serhack.me Blog: https://serhack.me
submissionscomments
serhack_··on A Dynamic and Distributed Virtual GPU Cloud Built on Idle Apple Silicon Devices
true, shame on apple for the paper quality
serhack_··on Sourcehut account takeover via build logs (XSS in ansi2html)
I love sourcehut, and I can't really think anything to replace it. But here's my shot. It's a popular myth that independently from the project size, someone should always take the main stream product in the field than small projects because most of the people would use the main stream product and there's an higher chance that vulnerabilities get already exploited/recognized/fixed. Is that true or not? TL;DR: in the evaluation of such products (sourcehut but even self hosted stuff), should we also take account about the project history and the exposition to threats?
serhack_··on Rate limits on GitLab.com are changing
I would spend thousands of dollars for gitlab in terms of: 1) better UX for admin panel, I'm not sure what I've enabled and what not. Several buttons do not disable the rest of the settings, leaving me with some doubts (e.g. if I disabled grafana, why is there a setting that talks about where/how I store?) 2) a minimal version of gitlab without all the AI
serhack_··on Does anyone know YouTube's pre-2006's des key?
the question is: do you know approximately a well known plaintext from a ciphertext?
serhack_··on Overcooked? Why robotic pizza makers are failing
Half baked product: https://weli.dev/blog/half-baked-product/
serhack_··on I made a game where you build a CPU from logic gates
wasn't there recently another game that was starting with mosfet/pmos?
serhack_··on I Stopped “Creating Content”
after discovering most of my content has been scraped thousands of times, I don't have any willingness to continue posting my blog. Well, yes, I was expecting that (you know.. by publishing content on the net, everyone could read it -- and profit off!). I've some content for some months, including some analysis.

I wish somebody could motivate me to publish them anyway.

serhack_··on Sipeed NanoXray
Is it possible to achieve such level of precision of building something so complex without being worried around safety?
serhack_··on Half-Baked Product
It's flabbergasting how this story is close to the reality. Bookmarked, I would love to see it printed.
serhack_··on ReactOS Implements First Windows NT6 System Call Toward Vista Compatibility
I'm playing with it and it is impressive that is starting to have less and less problems than few years ago
serhack_··on Micropatching Brings the Abandoned Equation Editor Back to Life (2018)
I just wished there could be something easy to replace this equation editor, it's really smooth for people that are not really proficient with LaTeX
serhack_··on No More JetBrains Products for Me
if anyone ever reads about this comment, please start to think about how to fuzz your software in a fast way. You don't need to correct or patch every bug, you just need to find where the algorithm A, B, C doesn't perform well, or where you have an allocation of 2 MBs for a linked list that should have been half of it.

I'm not a daily user of jetbrains product, but please. If there's any engineering/developers, start to use afl/cargo fuzz or whatever your fuzzer is, and spot bottlenecks, issues. I started to write software because I was looking at the quality of the very first softwares that were being fuzzed and it opened me some doors.

serhack_··on We are retiring our bug bounty program
cool idea
serhack_··on Embedded Rust or C Firmware? Lessons from an Industrial Microcontroller Use Case
nope, I was meaning the TeX source for the paper

https://info.arxiv.org/help/faq/whytex.html

serhack_··on Embedded Rust or C firmware? Lessons from an industrial microcontroller use case
off topic question: why is there no source attached to this paper?
serhack_··on If I could make my own GitHub
I dream of a world of stagit + issue creation written in Rust. End
serhack_··on Tim Cook Is Leaving. Good
I'm very sad to see some bugs catch by my fuzzer that was coded in three minutes of cargo-fuzz, disrupting UX. I filled some apple feedbacks that were fortunately fixed by some engineers, but I wonder what's happening under Q&A testing.
serhack_··on I Ported Mac OS X to the Nintendo Wii
awesome, good to see some real content from pre-AI moment
serhack_··on Breaking the console: a brief history of video game security
interesting video I was seeing the other day: https://www.youtube.com/watch?v=FTFn4UZsA5U
serhack_··on Proof of Corn

   choice = random() % 5

   switch choice:

      case 0: blog_post

      case 1: tell_to_plant_corn
 
      case 2: register_website
  
      case 3: pause
  
      case 4: move_money
serhack_··on Ask HN: Share your personal website
https://serhack.me
serhack_··on Visual regression tests for personal blogs
Love it. As a blogger myself, I can't think of the amount of time wasted to check every page of my blog during hugo upgrades. :)
serhack_··on NTSB Preliminary Report – UPS Boeing MD-11F Crash [pdf]
Not an aviation expert, nor I want to be one, but the images look pretty intense.
serhack_··on I gave the AI arms and legs then it rejected me
Not for any job:

> Through a friend of a friend, I found out that Anthropic had an open position in the team implementing the secret, unreleased feature of Claude Desktop using enigo. I wrote a cover letter and sent out my application.

serhack_··on Italy drags Meta, X, LinkedIn into €1B+ VAT showdown: free sign‑ups now taxable?
For anyone wondering what this "new" tax is: https://www.agenziaentrate.gov.it/portale/dichiarazione-impo...

> The digital services tax (Digital Service Tax) is applied at a rate of 3% on revenues deriving from the provision of services on a digital interface for targeted advertising to users of that interface, for the provision of a multilateral digital interface that allows users to connect and interact with each other, also for the purpose of facilitating the direct supply of goods or services for the transmission of data collected from users and generated by the use of a digital interface.

> In practice, taxation applies to digital advertising on websites and social networks, access to digital platforms, fees received by the operators of such platforms, and also the transmission of data “collected” from users. Revenue is taxable if the user of the digital service is located within the territory of the State. For online advertising services, the user is considered to be located in the territory of the State if the advertisement appears on their device when it is used in the territory of the State. The location of the device in Italian territory is determined on the basis of its IP address.

> Businesses that generate revenue in Italy from the above-mentioned digital services and that, during the calendar year preceding the one in which the tax liability arises, generate a total revenue of not less than €750 million anywhere in the world, either individually or as a group, are subject to the digital tax.

It seems for me a fair tax for corporations that take advantages of data collected to provide a service that someone pays (advertisements).

serhack_··on Catalog of Novel Operating Systems
I would love to see some examples outside of the WIMP-based UI
serhack_··on Lightweight open source reCaptcha alternative
The real secret of an effective captcha-like system is to identify/collect lots of data, identify suspicious patterns, validate them (checking what kind of data exposes a bot-like system) and then use this for serving dynamic challenges based on a couple of information.

Example: if the system identifies the user as a bot, it tries to give a less performant solution in terms of PoW.

serhack_··on Oxide’s compensation model: how is it going?
Ah now I understand what you meant with "You are purchasing hardware", I missed completely that point. "You are purchasing hardware from us" :) yeah, then it's what I originally understood. Good :) so I guess one time payment, I get the hardware, I set up with your software into your hardware that I purchased and then I should be good.
serhack_··on Oxide’s compensation model: how is it going?
Ah nice, I thought for a second it was more vertical with its own hardware (which has its pro and cons, maybe it's in your plans..). Would that work as a SAAS? Or price per hardware device/machines I can create?
serhack_··on Oxide’s compensation model: how is it going?
OT: how does anyone buy their cloud? Is it only available as a public alpha/beta with remote control? I might have a client interested into this, but needs to have some guarantees that their data remains on-premise.
Page 1 of 3Next →