HNHacker News
TopNewBestAskShowJobs

vbezhenar

16,222 karma · joined September 23, 2014

https://vbezhenar.com/
submissionscomments
vbezhenar··on Credentials for Linux: Bringing Passkeys to the Linux Desktop
The benefit is to not type encryption password on every boot. TPM stores the encryption key and Secure Boot ensures that the system is not tampered.

That said, I think that it's better to use alternative approach. Use unencrypted signed system partition which presents login screen. After user typed their username and password, only user home gets decrypted. This scheme does not require TPM and only uses secure boot to ensure that system partition has not been altered. I think that macOS uses similar approach.

vbezhenar··on How to effectively write quality code with AI
> why wouldn’t he want you to use that to great efficiency

Because I deny that? It's not fun for me.

> would a carpenter shop accept employees rejecting the power saw in favour of a hand saw to retain their artisanal capability?

Why not? If that makes enough money to keep going.

You might argue that in theoretical ideal market companies who're not utilizing every possible trick to improve productivity (including AI) will lose competition, but let's be real, a lot of companies are horribly inefficient and that does not make them bankrupt. The world of producing software is complicated.

I know that I deliver. When I'm asked to write a code, I deliver it and I responsible for it. I enjoy the process and I can support this code. I can't deliver with AI. I don't know what it'll generate. I don't know how much time would it take to iterate to the result that I precisely want. So I can't longer be responsible for my own output. Or I'd spend more time baby-sitting AI than it would take me to write the code. That's my position. Maybe I'm wrong, they'll fire me and I'll retire, who knows. AI hype is real and my boss often copy&pasting ChatGPT asking me to argue with it. That's super stupid and irritating.

vbezhenar··on Man who videotaped himself BASE jumping in Yosemite arrested, says it was AI
Put private key into every digital camera and hash/sign every frame. That private key is accompanied with manufacturer signature and can't be easily extracted. Mark all unsigned media as suspicious.
vbezhenar··on We tasked Opus 4.6 using agent teams to build a C Compiler
What's so hard about it? Compiler construction is well researched topic and taught in the universities. I made toy language compiler as a student. May be I'm underestimating this task, but I think that I can build some simple C compiler which will output trivial assembly. Given my salary of $2500, that would probably take me around a year, so that's pretty close LoL.
vbezhenar··on Claude Opus 4.6
I don't care about privacy and I didn't have much problems with reliability of AI companies. Spending ridiculous amount of money on hardware that's going to be obsolete in a few years and won't be utilized at 100% during that time is not something that many people would do, IMO. Privacy is good when it's given for free.

I would rather spend money on some pseudo-local inference (when cloud company manages everything for me and I just can specify some open source model and pay for GPU usage).

vbezhenar··on Postgres Postmaster does not scale
It is bad application architecture. Database work should be concentrated in minimal transactional units and connection should be released between these units. All data should be prepared before unit start and additional processing should take place after transaction ended. Using long transactions will cause locks, even deadlocks and generally should be avoided. That's my experience at least. Sometimes business transaction should be split into several database transaction.
vbezhenar··on Postgres Postmaster does not scale
In a properly optimized database absolute majority of queries will hit indices and most data will be in memory cache, so majority of transactions will be CPU or RAM bound. So increasing number of concurrent transactions will reduce throughput. There will be few transactions waiting for I/O, but if majority of transactions are waiting for I/O, it's either horrifically inefficient database or very non-standard usage.
vbezhenar··on Postgres Postmaster does not scale
I've always thought that there should be `cat -o output-file` flag for that. GNU coreutils have miriads of useless flags and missing one actually useful flag LoL.

And probably `echo -o output-file` as well.

vbezhenar··on What's up with all those equals signs anyway?
An interesting thing is that most webpages are generated using text templates. There's some text processing like escaping special characters, but it's mostly text that happened to be (somewhat) valid HTML.

So extracting information from this text with regexps often makes perfect sense.

vbezhenar··on They lied to you. Building software is hard
Modern Java is vastly more complicated than early Java. So I'm not sure I follow your reasoning. Programming nowadays is absurdly complicated. I have 20 years of experience and I can't imagine how new developer could learn it all.

I don't really know if AI makes programming easier or harder. At one side, you can explore any topic with AI. This is super powerful ability when it comes to learning. At another side, the temptation to offload your work to AI is big and if you do that, you'll learn nothing. So it comes down to a person type, I guess. Some people will use AI to learn and some people will use AI to avoid learning, both behaviours are empowered.

I have simple and useless answer how to solve that. Throw it all out. Start from the scratch. Start with simple CPU. Start with simple OS. Start with simple protocols. Do not write frameworks. Make the number of layers between your code and hardware as small as possible. So it's actually possible to understand it all. Right now the number of abstraction layers is too big. Of course nobody's going to do that, people will put more abstraction layers and it'll work, it always works. But that sucks. Software stack was much simpler 20-30 years ago. We didn't even had source control, I was the young developer who introduced subversion into our company, but we still delivered useful software.

vbezhenar··on Apple's MacBook Pro DFU port documentation is wrong
I'm not sure that it uses standard DFU protocol. When I had to write firmware from Linux, I had to use some software specifically for Mac (idevicerestore) and I had the impression that it was super proprietary stuff.
vbezhenar··on US has investigated claims WhatsApp chats aren't private
I'm not going to promote Telegram, just wanted to highlight that Whatsapp is not considered trustworthy by a geopolitical enemy of US. I don't think that Telegram is bad, and when your life depends on it, you can click "Secret Chat" button, it's not a big deal.
vbezhenar··on Claude Code is your customer
I worked on a system which used Oracle 9i database run on Itanium with HPUX OS.

User-facing side was written with Delphi 7 (quite a huge client application, it even had constructor to build new forms inside the application and GUI to build algorithms, like n8n of 90-s, I learned a lot working on that system).

I've used Java 6, then migrated to Java 7 to write some new components for that system with web UI. I was bad at Delphi and they didn't really care about consistency, so I went that route.

AFAIK this system is in use nowadays. They wanted to update it with modern database and other modern stuff 15 years ago. They wanted to update it every year since that, but every year this modernization project is postponed. So probably one day they'll replace everything, but so far it works.

I won't delve into details, but this system serves as a database of criminals and some other stuff for a small country, so it's actually quite important one.

TBH I don't think that AI could even build it. When I had to build it last time, the build consisted of several VMs. You had to build various DLLs and then build final application. Every part was built in a separate VM with separate installed Delphi components of a specific versions. It was a huge mess.

vbezhenar··on Designing a Passively Safe API
You can just hire one person who will handle double charge issues and refund them when necessary. Might be much simpler and cheaper.
vbezhenar··on US has investigated claims WhatsApp chats aren't private
Whatsapp is considered insecure and banned from use for military in Russia. Telegram, on the other hand, is widely used. Of course that's not something definitive, but just a food for thought.
vbezhenar··on Automatic Programming
Intellectual property is not absolute and can be expropriated, just like any other property.
vbezhenar··on Designing a Passively Safe API
That sounds like a lot of over engineering and a good way to never complete the project. Perfect is the enemy of good.
vbezhenar··on GOG: Linux "the next major frontier" for gaming as it works on a native client
You don't need launchers. Game is a simple application like any other. Just double click it...
vbezhenar··on Is the RAM shortage killing small VPS hosts?
You definitely can use Linux with few simple servers with 128 MB RAM.

Install can be tricky indeed, but if you have installed system, it's easier.

vbezhenar··on Is the RAM shortage killing small VPS hosts?
Small VPS hosts oversell like crazy and they offer much lower prices. Also their reliability might be worse, because they don't migrate VM between hosts.
vbezhenar··on Parametric CAD in Rust
This is not parametric CAD. Not useful anyway. You need much more complicated engine.

This approach is explored by OpenSCAD. No need to reinvent the wheel. But parametric CAD is much more than that.

vbezhenar··on Lennart Poettering, Christian Brauner founded a new company
It is not useless. I'm using UKI, so initrd is built into the kernel binary and signed. I'm not using bootloader, so UEFI checks my kernel signature. My userspace is encrypted and key is stored in TPM, so the whole boot chain is verified.
vbezhenar··on The browser is the sandbox
No, Microsoft has nothing to do with it. Browsers are controlled by Google and Mozilla and they decided to block Java plugin.
vbezhenar··on The browser is the sandbox
> Java applets provided more scope compared to the browser itself, not less. They're not really comparable to seccomp or namespaces.

They are comparable because they provided a restricted sandbox to execute untrusted code.

> There's lots of CI or function runners that expose docker-like environments.

These are running inside VMs.

vbezhenar··on The browser is the sandbox
Any sandbox technology works fine until it isn't. It's not like you could escape Java sandbox, but Java applets were removed from the browsers due to issues being found regularly. In the end, browser sandbox is one of the few that billions of people use and run arbitrary code there every day, without even understanding that. The only comparable technology is qemu. I don't think there are many hosters who will hand off user account to a shared server and let you go wild there.
vbezhenar··on The browser is the sandbox
Linux kernel is ridden with local privilege escalation vulnerabilities. This approach works for trusted software that you just want to contain, but it won't work for malicious software.
vbezhenar··on A static site generator written in POSIX shell
I wonder what would be a good way to generate a website with minimal software installations, for example in standard github runner image. This example uses comrak tool to process markdown into HTML.

I've come up with using Java and XSLT. Java is installed in Github Runner image and there's built-in XSLT support in Java standard library. You can write HTML and use XSLT to add header, footer and do other processings if necessary.

So basically I want to generate a website in github runner without accessing network to install something else.

I guess one could just `cat header.html content.html footer.html` but that requires a lot of tiny things like extracting title from content and inserting it into header, etc. Nothing that lots of greps and seds couldn't handle, of course...

vbezhenar··on Google confirms 'high-friction' sideloading flow is coming to Android
http://vimeo.com/1158294037

That's iOS 18.5, maybe they fixed it in later versions

vbezhenar··on The browser is the sandbox
Yes, it was improved.

https://developer.chrome.com/blog/persistent-permissions-for...

vbezhenar··on Show HN: A small programming language where everything is pass-by-value
Because it's super slow and shared memory is super fast. And people generally prefer fast code rather than safe code.
← PreviousPage 9 of 34Next →