HNHacker News
TopNewBestAskShowJobs

teekert

15,566 karma · joined March 24, 2013

submissionscomments
teekert··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
I've been compiling a list of cybersecurity RSS feeds to build a small automation (with oversight from Hermes agent) to ping me (ntfy.sh or just Telegram) when a CVE requires my intervention (matching them to a list of services I run for clients and myself.)

My list (of feeds) is still small, but this CVE did not show up, do any of you have any tips for RSS feeds to use for this purpose?

teekert··on elect.horse
It'S a TwO pArTy SyStEm!

https://www.youtube.com/watch?v=l7l9QmtiXHU

teekert··on I Returned My iPhone Duo
Or like me: Eventually you get used to -and learn to appreciate- nearly anything, and you enjoy that process of discovery?

I switch Android/iOS (and once Windows Mobile) every time I get a new phone (which is when it breaks, usually after 5-6 years), it's always a bit of pain, like now I really miss some iOS features (iPhone mini 12 did not survive the humid jungles of Malaysia), but my Pixel 10 with GrapheneOS has some cool things, like a desktop mode! I'm beginning to appreciate the (in screen) fingerprint reader, but indeed, at first I really missed face-id. Overal Android (at least GrapheneOS) is more like a full computer than iOS. Which has pros and cons. And, hooray for LibrePods ;) (AirPods work without it, but it adds some nice things.)

I also feel a switch to KDE/Konveyor coming up after years of vanilla Gnome...

teekert··on Claude Duet is the first personal-assistant-type harness that feels useful
Btw, the normal Claude app does work.
teekert··on Reddit will require an account to access
Like with TXitter (which seems to show one tweet, or a bit more) I will simply not see Reddit information anymore. Thanx for all the fish I guess. Tbh the web UI (except for old.reddit) was already horrible enough to annoy the S out of me whenever I landed on it.
teekert··on Claude Duet is the first personal-assistant-type harness that feels useful
Was hoping for a conversational AI that can do background talks, was just curious, but I prefer to set it all up using Hermes anyway.

Still disappointing to see so when things are not working on Graphene, though for some apps I suspect it's because I'm on Android 17?

Weird thing is that my banking is app is well known for not being allowed because "it uses the stricktest setting" (whatever that is) yet install and runs fine via Aurora store...

teekert··on Claude Duet is the first personal-assistant-type harness that feels useful
Can't use it, won't log me in on GrapheneOS. ("Can't be verified via Google Play")
teekert··on Patrick Stewart has died
Profound shock.

I often think of Picard looking down at us, through a force field in the Enterprise D, sees our wars, our inequalities and slowly shakes his head: "Savages". In his role as Picard he was a bit of a teacher to me.

teekert··on If IPv4 were land
It's what we do ;). I'll never forget my visit to the Delta Werken, 35 years ago? Remove our dikes, boom, half the country gone.

Anyway, the Netherlands also seems to be an attractive place to build datacenters.

teekert··on Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5
A connectome is typical grown, in wombs around the earth... DNA contains all the information needed to build it. I think we should start there, not with a printer.
teekert··on Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5
Is this the precursor to biological computers? I mean, biological computers don't have transistors as a basis, nor does this...

And before any answers with "But these neurons are very different to biological neurons!": Yes I know, I'm a biologist, I cultured neurons. But, these neurons are closer to neurons than semiconductor transistors.

teekert··on Tailscale SSH: Investigation and remediation update
Yes, perhaps, and that is annoying for poster, it also happens that people tell me that and I am annoyed. But there are times when it is justified. I believe this to be such a time, but perhaps I'm wrong.
teekert··on Tailscale SSH: Investigation and remediation update
This is the type of question any LLM can explain to perfection on any technical level, from 5 year old to IT pro, so, I'd try that?

If I literally ask an LLM your question it makes beautiful table of pros cons, underlying tech etc. So, LM G<>LLM TFY ;)

teekert··on Tailscale SSH: Investigation and remediation update
https://tailworm.com/#security-assessment-report-tailscale-v...
teekert··on Tailscale SSH: Investigation and remediation update
The amount of people claiming to be happy to have never gotten on the Tailscale (or other virtual network layer like Nebula) boat is too damn high. Remember people, it's just a layer. I.e. GitLab seems to have a new set of critical CVEs every week now, and I have been glad to have Tailscale (plus a physical firewall) as a layer in front of it. Total stress level would have been higher without Tailscale.

And before people start coming up with alternatives, I know, but they either have the same (theoretical level of) attack surface (ie [managed] Nebula), or they require much more manual work (ie Wireguard) and are therefore more sensitive to misconfiguration.

teekert··on Security Assessment Report – Tailscale v1.104.2 and headscale v0.29.5
Reaction from Tailscale: https://tailscale.com/ssh-investigation-update
teekert··on AI promised less work. I've never worked more
"My boss would never dream asking I crank more because I now have AI help."

But... You're cranking more right? I mean, she may give you the courtesy of not asking for more as you (and we collectively) figure this out, but it's getting quite clear that you can crank more, so why would she not expect it?

Sure there may be a union, but if you're the only person not cranking out more with AI, there can still be consequences.

teekert··on AI promised less work. I've never worked more
I'm pro unions and come from a social county. I'm self employed though, if I start relaxing, my "competitors" outrun me instantly. Bye bye assignments. This seems like primary school level reasoning to me, I also don't understand the premise of the article.

What stops me from working more than others is being smarter than my competitors right now. Not being smarter in any objective, fixed way. To keep it that way I must constantly evolved, learn.

Yes, micromanaging AIs is more intense for me than coding, and feels more tiring, I hope that (or I) will change, somehow.

teekert··on No Signs of AI Payoff Outside the Tech Sector
At a fundamental level LLMs reshape how we gather, shape, process and interact with information. Information is that which allows you to make a predictions with a probability better than chance. This will slowly change any industry where decisions are being made. So, it will touch all industries. And if we let it, all of life eventually. Better decisions, better survival.
teekert··on Around a dozen banking apps began specifically permitting GrapheneOS
https://walt.is/
teekert··on Phone Is About to Stop Being Yours: 70 Days Until Lockdown
In related news, I found this new app store in GrapheneOS's app store (dawg I heard you like app stores...). https://news.ycombinator.com/item?id=50192083
teekert··on Investor-owned utilities charge 23% more for electricity than public providers
6 cents per kwh! Can we set up some shipping back and forth for batteries, you charge them, I pay you for it and can have cheaper energy.

This is about what we pay here for delivery back to the grid, yes pay, not earn, they don't want our solar, we have too much (yes we can turn them off, and we do).

teekert··on Dutch government had hacked into Jared Kushner's phone
The 2 "Confessions of an Economic Hit Man" books (mostly the second one) by Perkins do a good job of describing the relation between the US and the Saudis.
teekert··on Dutch government had hacked into Jared Kushner's phone
It does? You're talking about a country that tells its civil servants to say "Super Intelligence" in stead of "Artificial Intelligence" [0], because... It's just so Super.

Came across it here [1]: "Per Executive Order 14434, federal agencies are now using "Super Intelligence" (SI) in place of "Artificial Intelligence" (AI). You may see both terms across NIH content during this transition."

[0] https://www.whitehouse.gov/presidential-actions/2026/09/inau...

[1] https://www.ncbi.nlm.nih.gov/geo/

teekert··on PHP 8.2.35
Have you ever experienced a "Reply-all storm"?
teekert··on PHP 8.2.35
Yeah, I really enjoyed messing with php.ini back in the day! Setting it juuuust right for every different project on my dear pet.
teekert··on PHP 8.2.35
Same goes for Wordpress indeed, which I'm waiting for.

    $ docker pull wordpress:fpm && docker image inspect wordpress:fpm --format '{{.Created}}' && docker run --rm wordpress:fpm php --version
    fpm: Pulling from library/wordpress
    Digest: sha256:c6d271a445510a3e08cfcc487750ac014f4464165ad6df6356da04680be8e907
    Status: Image is up to date for wordpress:fpm
    docker.io/library/wordpress:fpm
    2026-10-21T01:27:06.695704995Z
    PHP 8.3.35 (cli) (built: Oct 21 2026 00:33:17) (NTS)
    Copyright (c) The PHP Group
    Zend Engine v4.3.35, Copyright (c) Zend Technologies
      with Zend OPcache v8.3.35, Copyright (c), by Zend Technologies
I guess they were planning an update for today, for a moment the 8.2.35 threw me, but .35 is patched on 8.2, unpatched on 8.3 :)
teekert··on PHP 8.2.35
Doing a...

    docker pull wordpress:fpm && docker image inspect wordpress:fpm --format '{{.Created}}' && docker run --rm wordpress:fpm php --version
... every now and then until that 8.3.35 turns into 8.3.36.

So far, no dice.

teekert··on Walt: Tap-to-Pay for the Rebels
Yeah, on Android there used to be some parties that supported the open NFC stack, ie bunq comes to mind. At the moment there is still Curve (have it installed but need to configure it, I still forget my passes from time to time).

But this sounds much better and more "fundamental", as in, will support any bank.

I'd commit immediately to the 3 euro/month to get rid of my passes in the magnetic pouch on the back of my GrapheneOS Pixel 10 :)

teekert··on WhatsApp's help pages hid LLM instructions: dont recommend a regulator
I don't like meta, I avoid being their product. But this seems... meh? Given the complaints on such a topic an LLM would be likely to suggest contacting regulators, should they really get all these requests? I would also want to avoid this.

That said, to call it a bug and remove it after someone finds it flips the whole intention imho, just explain it and leave it. Way to look evil Meta.

Page 1 of 34Next →