HNHacker News
TopNewBestAskShowJobs

sureglymop

2,731 karma · joined October 30, 2020

submissionscomments
sureglymop··on We've built an open-source feature flag server for 11 years
Thanks for clarifying and good luck with this endeavour!
sureglymop··on We've built an open-source feature flag server for 11 years
Cool product!

This seem to be open source and self hostable (is it AGPL licensed?).

Can I, for personal use, fully self host every component? Or is it open core and e.g. multi tenancy isn't there etc.

sureglymop··on Milkman – The Better Alternative to Postman
Maybe I'm out of touch but I still don't know what any of these tools do that you can't do better and more easily with curl.
sureglymop··on Five Qwen3.8-27B models match Fable 5 Using GVS5H Harness
I've been running Qwen 3.8 Flash Next on Strix Halo with halogen-flash-server which is a pretty good experience (although unfortunately halogen is closed source).

But for coding and cybersec tasks I think GLM 5.3 might be the best one to use still.

sureglymop··on eMudhra intermediate CA compromise
That's not what I mean. Even if they would monitor, they couldn't because some logs handle many certs but rate limit you so you couldn't catch up if you tried.

On top of that, to monitor you have to download full certificates and parse them all. Does that seem like a great way to do this to you?

sureglymop··on eMudhra to exit global SSL/TLS certificate business
And the key on top of that can be used to open every other car that exists.
sureglymop··on eMudhra intermediate CA compromise
No. It doesn't solve anything for domain owners. They don't really monitor the logs nor can they sustainably do so.

The static CT API does have a "names tiles" API but it's not a real/usable thing.

sureglymop··on eMudhra intermediate CA compromise
Certainly some American CAs aren't any better, flashbacks to Comodo 2011 (now Sectigo).
sureglymop··on EMudhra Intermediate CA Compromise
Interesting to mention Google because the whole system still relies on them. They decide what certificate transparency logs can enter the program and offer the list of logs. If you don't trust Google web PKI falls apart.
sureglymop··on EMudhra Intermediate CA Compromise
What's worse is, if this hadn't come to light, how would you even know when an attacker issues a cert for your domain?

Well you might think, oh I can monitor the certificate transparency logs.

I would say well, good luck downloading and parsing terabytes of certificates as they are logged. Then there are CAs whose logs will rate limit you in a way such that you can't catch up to the certs being logged with one server and IP. The system might "work" but not for domain owners. Good luck.

sureglymop··on Putting Linux on my RTX Spark laptop because I don't have a Microsoft account
I just had a thing today where I wanted to play Forza Horizon 4 on my handheld.

When trying to launch the game I got a "Must sign in to Xbox/Microsoft to play". So I reluctantly complied and entered my password only to be met with "password login not available" after pressing enter.

Great... guess I just won't play then.

sureglymop··on Gemini 4 Argon
When you are on "gemini.google.com" there is a little lock icon next to Gemini 3 and Gemini 4. When you click it you get the prompt to subscribe (pay). Once you have successfully done so, the Gemini 4 option disappears!

Pretty misleading.

sureglymop··on Now that information is free, what's a college campus for?
Well, what I will say though is that I trust the university more when it comes to curating which textbook to read.

Learning on your own can sometimes feel like looking for needles (good learning material) in a haystack (e.g. the internet).

Luckily, many universities and university professors make their courses and course material publicly available!

sureglymop··on We turned EmbeddingGemma 2 into a speech-to-text model
Isn't EmbeddingGemma2 already a decision model? Am I misunderstanding your question?
sureglymop··on The Slow Formation of Durable Software
I agree. It's "open source" but I would put a huge asterisk on that label. It really reminds me most of AI models that are only open weights.
sureglymop··on Polars 2.0
I've used Polars before and can only recommend it.

It's like you get a really good 'query planner' like a DB would give you, but for your notebooks/scripts/etc. Much better than pandas imo.

sureglymop··on Docker has always used microVMs (well since 2016)
Look into the krun runtime (part of crun) if you'd like to do this.
sureglymop··on Zig v0.17.0
C3 is honestly so good and a bit underrated.
sureglymop··on SvelteKit 3
I still use Svelte but I switched to Astro too. I think the best thing about it is that its devs are focused on building primarily a good ssg. The Svelte people are primarily building a frontend framework and added sveltekit as an addition. Using Svelte in astro even feels nicer to me.
sureglymop··on Sober: We Ported Roblox to Linux
Seems closed source... bold choice to use this.
sureglymop··on Topcoat is pushing the boundary of server applications with Rust
I hope I'm not discouraging you with what I'm writing. This looks to me like a cool project/idea. Unfortunately the landing page just immediately made me uninterested when I tried reading the text.

I think the reason for that is, the text to me feels immediately AI generated which evokes a feeling of "the human didn't care enough to do the easiest part, which is to describe their project themselves".

sureglymop··on PipePipe: NewPipe hard fork implementing SponsorBlock
Same. My only issue (with NewPipe also) is that at ~50 subscribed channels, Google rate limits me when I refresh. I wish there was better logic to get new content or a way to space it out over an amount of time.
sureglymop··on The scourge of x86 emulation
I have the Retroid Pocket Nova which has a 5000mAh battery. It applies a CPU underclock by default and also has full support for deep sleep/suspend now. The screen is also Amoled so that helps too.

In desktop mode I get about ~7h of continuous light work, e.g. browsing. I often use it plugged into a 21:9 4k monitor though just like a laptop. There I should note that at that resolution it seems limited to 60hz refresh rate.

When gaming it changes a bit. But for example, it plays GTA V at least as good as a steam deck but at just ~6W power draw. So much more power efficient. I also sometimes do Switch emulation. But that can be a bit more fiddly as patches are required due to the 4:3 screen ratio.

The nicest thing for me though is that it can pretty seamlessly dual boot between linux and android. And even in linux, android apps work super well in waydroid because it's arm based. It feels magical to me...

I know this reads like an ad but it truly is holy grail tech to me. Never could've imagined this 5 to 10 years ago.

sureglymop··on The scourge of x86 emulation
Slightly related but this project (FEX) is amazing. I've been running Armada OS on multiple ARM handhelds and they're viable little linux machines now except with amazing battery life.

Most problems I run into are anti cheat related (EAC, etc.) but those can be circumvented for now. Feels kind of insane how far x86 emulation has come.

sureglymop··on Steam Frame starts at $1059
I think its performance is quite underappreciated. It has a Snapdragon 8 Gen 3 chip.

I have a tiny handheld with a Snapdragon 8 Gen 2 chip and among many other things it plays GTA V and RDR2 almost perfectly, using FEX nonetheless. And because it's arm, battery life is so much better than on my laptop that I use it as a tiny mini linux laptop now.

sureglymop··on XCancel service is suspended until further notice
It's because X is chosen (wrongfully) as the main communications channel of all kinds of important public institutions and people (police departments, city administrations, politicians, etc.).

Of course that's a real issue since the whole thing is login gated and inaccessible. But unfortunately it is the reality. So I think something like XCancel is needed.

sureglymop··on OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others
On an isolated test device for this purpose, yes. But otherwise, I would decompile it to look at it.
sureglymop··on Ask HN: Can we please limit the AI news flood?
I highly agree. I am very interested in the AI news but the distribution isn't right at the moment. It doesn't really feel like the same website to me.
sureglymop··on Don't Use a gmail.com Address
I do this often when corresponding with businesses/companies and I've been asked before if I have a similar business or am in their line of work also...
sureglymop··on Cloud in a Bottle: making self-hosting accessible to everyone
Looking at the issues, do I understand it correctly that you have some way to install directly from repositories if they contain a `cloudinabottle.toml` file?

If yes, regardless of who made the issues, that seems like terrible architecture/design there...

Page 1 of 34Next →