HNHacker News
TopNewBestAskShowJobs

tredre3

3,906 karma · joined April 22, 2022

submissionscomments
tredre3··on Llama-modchip: 284B DeepSeek on 64GB RAM, no GPU
It works the other way too! People don't know that 3 or 2 bits can still be good because they've read the hivemind's opinion that <4bit is unusable trash and they've never experimented themselves. The reality is a lot more nuanced than that, especially for models as large as 284B.
tredre3··on Asahi Linux Progress Linux 7.3
MIT isn't copyleft and it does require attribution, it's basically the only requirement of it. I guess they just don't like that attribution means "put the license snippet deep in a secondary readme file hidden somewhere, along with 50 other licensees used in the project".

I think it's clear that they don't want people to use their code and close the door behind them. They also clearly want clearer attribution. I'm sorry but if those are things you desire, then deliberately choosing MIT because of a GPL hate-boner was plain stupid.

tredre3··on First steps in bare-metal programming using UEFI
Absolutely, UTF-16 is bad and inexcusable in most contexts. Perhaps you misinterpreted my comment or I wasn't expressing myself properly.

I was trying to say: If all the components in your stack are javascript-based, it makes sense that your RPC-API would also use UTF-16. It wasn't Microsoft pushing it for historical Windows reasons as GP implied, it was dictated by a JS stack they chose but didn't create.

tredre3··on First steps in bare-metal programming using UEFI
> They did it again to LSP, and that was in 2016.

That one is explainable by the fact that it was developed for VS Code, a typescript/javascript project. Javascript uses UTF-16 for strings (for historical reasons unrelated to Microsoft, though they are the same reasons that made MS use UCS-2 during the same time period).

tredre3··on Blender's UI and Runtime: Much Faster Than GPUI
"It isn't vibecoded, it's vibe-pruned!"

That's an interesting distinction. A distinction without a difference in my opinion, but a distinction nonetheless!

tredre3··on Blender's UI and Runtime: Much Faster Than GPUI
Fascinating, I would have ranked Softimage XSI above blender (even modern blender), it was just that intuitive to me.

3Ds max being dead last is fitting, people who think it's peak UI just have stockholm syndrome in my opinion.

tredre3··on Discord is ditching Electron and its new app uses less RAM
> so I curious how you arrived at the conclusion that building a GUI application is like building a web browser

The way you phrased it, it's not. However if you've used Discord, you know that to render it you're essentially rebuilding a web browser due to the sheer variety of formatting, images, animation, audio, videos, languages, widgets, and whatnot that must all coexist in arbitrary forms in every server/room/forum.

tredre3··on Images 2.6
GPT-6 has multimodal input, not output. It can call GPT images by itself so it's seamless, but it still isn't generating the images.
tredre3··on sshole
It's not a C thing, it's a Linux thing. The asterisk is relevant to how crypt() is used for /etc/shadow.

           If the password field contains some string that is not a valid result of crypt(3), for instance ! or *, the user will not
           be able to use a unix password to log in (but the user may log in the system by other means).
tredre3··on sshole
"*" is what's been historically used to represent an invalid/no value in passwd/shadow, so it makes some sense.

Of course given the chance that one might do a direct string comparison between crypt's return and the passwd/shadow file's hash field it was still a not well thought out choice.

tredre3··on Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
> They recompiled it for EVERY kernel release of every supported distribution (they had never heard of DPMS apparently)

Neither have I, I think you goofed up on your acronyms? For a driver as embedded as crowdstrike you need to recompile, there's no other way around it. Linux doesn't provide anything stable to target and a shim won't cut it in this case.

> the service ran as root, it UPDATED ITS OWN BINARIES as root!

Would you prefer if Linux allowed local users to replace the kernel and/or its modules without root? What kind of faux-outrage is this?

tredre3··on Alleged Chinese spy had 'close relationship' with Nvidia boss Jensen Huang
It wasn't an employee, it was a freelancer who likely tried to sell the photo to multiple outlets. The guy also explained that it didn't happen as you describe https://www.bbc.com/news/world-us-canada-20611140

The NY Post is crass, we all know that. But if that's your best example of their malfeasance, then I guess they aren't that evil after all.

tredre3··on If IPv4 were land
That is a fun exercise! However the reality is that public IPv6 is always given out in 48 or 64 bits prefixes (minimum).

The math is a lot less impressive when you do it with 2^48 or 2^64.

tredre3··on If IPv4 were land
In theory IPv6 solves the problem by putting all of this under a single prefix (fc00::/8) and asking nicely that implementation/admins add 40 random bits to form their prefix. Which is plenty to prevent (almost all) eventual conflicts.

The thing is, asking nicely doesn't always work. Sure, automated tools like docker/incus/wireguard/tailscale will respect it. But admins who don't want to be stuck typing long addresses? Not so much. I've lost count of how often I encounter a network admin that manually set their prefix to some fcXX::, when it's not outright fc00::.

Of course you can (and should) blame this on admins and not on IPv6, but then the same could be said of IPv4 where adding entropy to 10.X.X.0 is the usual recommended way of doing things.

tredre3··on Chained PHP2Shell exploit roots 25 servers, including US Government servers
What else would you use to power the configuration gui frontend? Allow me to eliminate some of the obvious and inevitable answers:

- Rust didn't exist at the time

- Go didn't exist at the time

- nodejs didn't exist at the time

- Java and Python likely used too much resources for a once-in-a-while used GUI

Irrational hatred aside, that's literally what PHP was designed for.

tredre3··on DoorDash to acquire Instacart
The baseline is: I want a burger and I don't want to cook it (or I enjoy this particular restaurant's recipe).

That's it. The comparison is indeed burger delivery vs drive-through/takeout. Cooking is irrelevant in the equation.

tredre3··on AlpineBSD
You're mistaken. Here's a direct quote from Linux Torvalds dated 2006:

    The "version 2 of the License, or (at your option) any later version"
    language in the GPL copying file is not - and has never been - part of the
    actual License itself. It's part of the _explanatory_ text that talks
    about how to apply the license to your program, and it says that _if_ you
    want to accept any later versions of the GPL, you can state so in your
    source code.
    The Linux kernel has never stated that in general. Some authors have
    chosen to use the suggested FSF boilerplate (including the "any later
    version" language), but the kernel in general never has.
    In other words: the _default_ license strategy is always just the
    particular version of the GPL that accompanies a project. If you want to
    license a program under _any_ later version of the GPL, you have to state
    so explicitly. Linux never did.
https://yarchive.net/comp/linux/gpl.html
tredre3··on PaperPilot – Zero-Cloud, Pure-Rust PDF Engine with WASM and MCP
Unless they meant vaguely similar code (which I can't judge), the only mentions of mupdf are in the AI instructions:

    > **The Opportunity:** Capturing the high-growth enterprise AI engineering market by replacing bloated, slow Python extraction pipelines (`Unstructured.io`, `Docling`, `Marker`, `LlamaParse`, `PyMuPDF4LLM`) with a pure-Rust, sub-10ms, multi-format ingestion kernel.
    - This structure guarantees that if we ever swap the PDF engine to `pdfium` or `mupdf`, not a single line of business logic in `paperpilot-core` or CLI tools will need to be rewritten.
    > Directly captures the high-growth AI Engineering & RAG pipeline market (displacing bloated Python stacks like Docling, Marker, PyMuPDF4LLM, and Camelot) with sub-10ms, pure-Rust, on-device parsing.
    | A.2.5 | `MuPdfBackend` adapter (Future) | Use MuPDF for OCR-heavy workflows via FFI |
tredre3··on YousefAbdulHusain – The Dune Movies Erase Islam [video]
That is likely the point, but it's clearly phrased deliberately poorly to elicit a specific interpretation from viewers.

"The Dune books were all about islam, the movies are not; Today I will analyze what was lost in translation and why they did it!" doesn't have the same ring to it than "ISLAM IS BEING ERASED BY HOLLYWOOD!"

tredre3··on What Adobe v ArtCraft teaches us
If only management was to blame, we wouldn't see the AI spam in the open-source world.

The fact that we do proves that ICs are equally to blame, because evidently the majority of them love using AI.

tredre3··on What Adobe v ArtCraft teaches us
I disagree with your use of the word zealot but I agree, MS Office is objectively the best office suite. I no longer use it daily, but anybody arguing otherwise has: never used it, never tried the alternatives to see how bad it can be, doesn't do collaborative work, or doesn't need any features beyond bold/italic. For example I can do most of my coding in Notepad, but it's still a very inferior experience. I feel the same way about MS Office vs LibreOffice.

That being said let's keep in mind that the latest wave of moving-away-from-MS-Office is using OnlyOffice this time and I believe it might work. OnlyOffice actually wants to entice MS Office users. And thus it is more compatible, has a much closer/better UX, and despite being a web app it is somehow more responsive than LibreOffice.

tredre3··on Show HN: Steal My Bitcoin
> It's not easily defeated by the default setup. Quite the contrary, the default setups are great. Typical apache + mod_php is the easiest to exploit.

But apache + mod_php hasn't been the default setup for a very long time, that's what people are trying to tell you. Given your expertise, you must know that already. So I have to conclude that you're arguing in bad faith because it's the only setup you can break.

tredre3··on Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps
All webservers (apache, nginx, litespeed, caddy) have keep-alive enabled by default. All browsers also support it. Whether it's actually used/negotiated on most connections, I don't know, and if you want to be pedantic you're right that it can't be default by definition since you need the header to use it. But I suspect it actually is used for most connections nowadays.

Multiplexing is the default in HTTP/2 and 3. So you're still wrong.

tredre3··on Around a dozen banking apps began specifically permitting GrapheneOS
Assuming your phone cannot be trivially unlocked by a thief, it likely is safer to bank on it than on a computer.

Because unless your desktop is dedicated to banking, there's always the chance that one of your other activities will install malware. If you don't use FDE (the majority of people) and you saved your banking password in the browser rather than a password manager (likely a scary amount of people), then theft is also an issue.

Neither of those things are really a problem on a mobile device.

tredre3··on Around a dozen banking apps began specifically permitting GrapheneOS
At this point I have to assume that you're debating in bad faith or in hypothetical because I don't believe for a moment that you'd move all your money into a foreign bank out of spite.

Nobody would move all their money out of the country they live in.

tredre3··on Around a dozen banking apps began specifically permitting GrapheneOS
Canada has a lot of banks, including digital/virtual ones. All provinces also have at least one credit union to rival regular banks.

Just because there are juggernauts ("the big five/six") doesn't mean it's an oligopoly. This isn't like telecom where there are only 3 choices (4 in some provinces) and nobody else can enter the game because it costs too much.

tredre3··on I turned my TV into a Game Boy Color with a Pokemon town as my home screen
You can but when you do you get the GBC boot-up animation, not the GBA.
tredre3··on A whirlwind tour of systemd-nspawn containers (2025)
Nspawn has a lot of issues with bind mounts in general. They've never been fixed because pottery doesn't see the point. See for example: https://github.com/systemd/systemd/issues/26897
tredre3··on Air Purifiers as White Noise Machines
Allergens are likely considered "infectious particles" for that particular sentence.
tredre3··on Canadians are running out of time to oppose Bill C-22
I've never gotten such vibes either (that being said the alignment of the CBC isn't exactly neutral either, their french counterpart seems more neutral).

But I have spent/wasted enough time online to know that Conservatives do truly believe that the CBC is very biased against them and thus should be defunded (or, alternatively, they often suggest giving the same amount of money to Rebel News).

Page 1 of 34Next →