HNHacker News
TopNewBestAskShowJobs

zenmac

199 karma · joined July 19, 2025

submissionscomments
zenmac··on What you need to know before touching a video file
The author did mention to use MPV, which is much much lightweight than VLC. Being using it as default for quite some times now.
zenmac··on A Vulnerability in Libsodium
Do you have any links or more info about the special internal mechanism? Would need an apple employee to initiate this I assume?
zenmac··on Replacing JavaScript with Just HTML
One good thing about NOT having JS is what the page can function in Tor Browser's "Safest" mode!

A step down is to have JS only on your domain. "Safer" mode.

Try to avoid web site that require "Standard" to view and run properly.

zenmac··on What happened to all the gold Spain got from the New World? (1985)
>If you have a mental image of Spanish conquistadors sparking global inflation purely by looting Inca gold, erase it. The real culprit was silver extracted from Potosi and a few other New world mines.

That is when labors start to flood to Netherlands.

zenmac··on Show HN: Minimalist editor that lives in browser, stores everything in the URL
Yeah just would be good on a codeberg or gitlab or maybe even github repo. So we can do PR.

Here is the fix:

.leaflet-top, .leaflet-left{ z-index: 100000; /* some high number */ }

zenmac··on CSRF protection without tokens or hidden form fields
If the domain name is in the cookie value then that can't be used when submit another request from another domain. Yes you can configure the dns to bypass that, but at that point it is also pointless for CSRF.
zenmac··on Asahi Linux with Sway on the MacBook Air M2 (2024)
>I am very impressed with how smooth and problem-free Asahi Linux is. It is incredibly responsive and feels even smoother than my Arch Linux desktop with a 16 core AMD Ryzen 7945HX and 64GB of RAM.

Hmmm still have issue with the battery in sleep mode on the m1. It drains a lot battery when it is in sleep mode compare to mac sleep mode.

zenmac··on Free Software Foundation receives historic private donations
It should just be treated as cash type of donation. Get a paper receipt.
zenmac··on CSRF protection without tokens or hidden form fields
Never needed the CSRF and assumed that cookies was always SameSite, but can see that it was introduced in 2016. Just had the sitename put into the value of the cookie since, and never really needed to think about that.

Just feels like all these http specs are super duck tapped together. I guess that is only way to ensure mass adoption for new devs and now vibe coders.

zenmac··on Show HN: Vibium – Browser automation for AI and humans, by Selenium's creator
Isn't Selenium vs Playwright more a Java vs JS/ES/TS thing?
zenmac··on Show HN: Vibium – Browser automation for AI and humans, by Selenium's creator
Hmmm so it is basically using https://www.director.ai for the AI natural language stuff right?
zenmac··on Show HN: Minimalist editor that lives in browser, stores everything in the URL
Great tool! There is a little issue with the +/- zoom buttons not working something cause it is over layed by other div blocks. On mac firefox.

Is the code open source online somewhere?

zenmac··on PeerTube is recognized as a digital public good by Digital Public Goods Alliance
>but the culture (especially early on) was exceptionally protectionist and lots of people got bullied off for very silly reasons.

Had no idea that was happening. What makes your say that?

zenmac··on GitHub to Codeberg: my experience
We have already talked about this. In the end it comes down the index for the instances that bsky maintain it will inevitably be the dominate ones vs others who run AT Pro.

It would be all good if the index is shared via DHT, bittorrent, ips or other means. Same goes for the google search index, etc.

zenmac··on Self-hosting my photos with Immich
>> Immich solves the wrong problem. I just want the household to share photos

pixelfed may be what the parent want then. I don't like that it is PHP, but as long as they adhere to the ActPub protocal, we can roll our own in whatever flavor.

zenmac··on Ask HN: Who is hiring? (December 2025)
Is having an LinkedIn account a requirement to apply for this job?
zenmac··on Self-hosting a Matrix server for 5 years
People should related to anything federated like email. If you send something it is in someone else's computer now. With matrix or any e2ee protocols it is depending on pinky promise of the client to modify it. I thought the whole Snapchat fiasco already taught us that. Did we forget?
zenmac··on GitHub to Codeberg: my experience
Nostr would being better. As it is truly free vs AT protocol is backed by VC.
zenmac··on Shai-Hulud Returns: Over 300 NPM Packages Infected
You can host your own NPM reg, and examine every package, but your manager probably is NOT going to go for that.
zenmac··on Shai-Hulud Returns: Over 300 NPM Packages Infected
Just a last month someone was trying to figure the cargo tree on which Rust package got imported implicitly via which package. This will totally happen in rust as well as long as you use some kind of package manager. Go for zero or less decencies.
zenmac··on Europe is scaling back GDPR and relaxing AI laws
>Our ancestors survived perfectly fine with telephone directories dropped at every house for free which contained everyone's name and address.

Yeah but our ancestors also doesn't amount of processing power that the current big corps have. Constrain what big corp can collect personal data is beneficial for average users in current day and age.

zenmac··on Europe is scaling back GDPR and relaxing AI laws
Small company and business should be treated differently than big corp. And the fine and punishment should be adjusted accordingly.
zenmac··on Europe is scaling back GDPR and relaxing AI laws
>latest report pointed out that overregulation is a major problem in the EU and costs EU companies the equivalent of a 50% tariff (if I remember correctly). Of course.

Normally I'm against overrgulation, but when it comes to privacy more fine for big corp is need if ANY violation is found. Rather NOT have AI than compromise on privacy.

zenmac··on Do not put your site behind Cloudflare if you don't need to
Depending on who your ISP is, there may be things they can do to help.
zenmac··on Cloudflare Global Network experiencing issues
Wouldn't it be trivial to just to write a uwf to block the crawler ips?

At time like this really glad we self-hosted.

zenmac··on The cryptography behind electronic passports
>Nations and kingdoms have been able to assert sovereignty for eons.

by asserting monopoly on violence within a geographical region... and now we got private mercenaries, guess Treaty of Westphalia is kinda out of windows now or soon?

zenmac··on The cryptography behind electronic passports
That is true. However, the border guard should also be trained to recognize the passport physically without the electronic tracking. Putting your national security eggs in one digital basket just seems like a disaster waiting to happen.

Digital system can go down or hacked.

zenmac··on My Impressions of the MacBook Pro M4
Matte is always being the fancier option in Photography paper, glossy photograph just looks cheap.
zenmac··on Futurelock: A subtle risk in async Rust
Guess Rust is more built for memory safety not concurrency? Erlang maybe? Why can't we just have a language that is memory safe and built for concurrency? Like Ocaml and Erlang combine?
zenmac··on Use DuckDB-WASM to query TB of data in browser
Are you using pg_duckdb to embedded it inside postgres and access it via psql or other pg clients?
← PreviousPage 2 of 7Next →