HN user

19h

2,352 karma

Software Engineer at Hex-Rays SA

https://github.com/19h

kenan [at] sly.mn ksulayman [at] hex-rays.com

Posts33
Comments239
View on HN
github.com 6d ago

Russian kamikaze drone C++ reconstruction of onboard autonomy stack

19h
18pts2
docs.hex-rays.com 5mo ago

What's New in Ida 9.3

19h
2pts0
hex-rays.com 5mo ago

IDA 9.3: Expanded Architecture Support, Faster UI and More

19h
2pts0
github.com 5mo ago

Idax – A beautiful, idiomatic and less frustrating IDA C++ SDK

19h
5pts0
github.com 6mo ago

Apeiron – A GPU- and SIMD-accelerated binary entropy visualizer written in Rust

19h
2pts0
stack.int.mov 7mo ago

Reversing IDA's Lumina Protocol

19h
1pts0
stack.int.mov 8mo ago

A Reverse Engineer's Anatomy of the macOS Boot Chain and Security Architecture

19h
122pts49
github.com 2y ago

Rsult: Rust-inspired Option and Result types for safer TypeScript code

19h
1pts0
www.reuters.com 2y ago

Music publishers ask court to halt AI company Anthropic's use of lyrics

19h
1pts0
thebookofshaders.com 2y ago

Fractal Brownian Motion: Simulating Realistic Terrains with Fractal Noise

19h
1pts0
en.wikipedia.org 2y ago

Onion Futures Act – US law banning trading futures on onions

19h
14pts2
www.youtube.com 4y ago

Hacking Google Maps with a wheelbarrow full of phones

19h
7pts2
www.president.gov.ua 4y ago

President signed a decree on the imposition of martial law in Ukraine

19h
4pts0
www.cnbc.com 4y ago

Tesla cut a steering component from some cars, didn’t tell customers

19h
110pts139
ec.europa.eu 4y ago

EU Commission Declares Gas and Nuclear Energy Sustainable

19h
6pts1
robbreport.com 4y ago

Unvaccinated? The Maldives Will Put a Shot in Your Arm When You Land

19h
2pts1
nvidianews.nvidia.com 4y ago

Nvidia Introduces the Next Generation in Cloud Gaming

19h
4pts2
blogs.nvidia.com 4y ago

Nvidia GeForce Now RTX 3080: Cloud Gaming with 1440p at 120 FPS

19h
1pts1
en.wikipedia.org 4y ago

Food Irradiation

19h
1pts0
manishearth.github.io 4y ago

Wrapper Types in Rust: Choosing Your Guarantees

19h
1pts0
datatracker.ietf.org 5y ago

BGP Blackhole Community

19h
2pts0
kinvolk.io 5y ago

Microsoft Acquires Kinvolk

19h
1pts0
azure.microsoft.com 5y ago

Microsoft acquires Kinvolk to accelerate container-optimized innovation

19h
11pts0
livingatlas.arcgis.com 5y ago

Esri World Imagery Wayback Machine

19h
3pts0
status.npmjs.org 5y ago

NPM Is Down

19h
27pts3
blog.charliemonroe.net 5y ago

Apology by Apple for "erroneous flag": A Day Without Business

19h
6pts2
twitter.com 5y ago

Pangu: New Unpatchable Vulnerability in Secure Enclave of iPhone

19h
2pts0
9to5mac.com 5y ago

Apple antitrust documents: Amazon Prime Video pays only 15% App Store comission

19h
2pts0
lwn.net 6y ago

Bao: A lightweight static partitioning hypervisor

19h
1pts0
www.gwern.net 7y ago

Everything Is Correlated

19h
162pts53
Ghidra by NSA 5 months ago

Well, Ghidra's strength is batch processing at scale (which is why P-Code is less accurate than IDA's but still good enough) while allowing a massive amount of modules to execute. That allows huge distributed fleets of Ghidra. IDA has idalib now, and hcli will soon allow batch fleets, but IDA's focus is very much highly accurate analysis (for now), which makes it a lot less scalable performance wise (for now).

Ghidra by NSA 5 months ago

Ghidra has a slightly different focus than IDA, so they're definitely not just using Ghidra :-)

Warp, while excellent, requires individual approval for each command—there’s no equivalent to Claude’s “dangerous mode” where you can grant blanket execution trust.

That’s a lie. I simply added “.*” to the whitelist. It’s a regex.

The frustration seems justified.

Spending significant time adapting core kernel code or developing a safe Rust abstraction for DMA, only to be summarily shut down by a single gatekeeper who cites "not wanting multiple languages" is demotivating. It's especially incongruent given that others have championed Rust in the kernel, and Linux has begun hosting Rust modules.

If the project leadership — i.e. Linus — truly wants Rust integrated, that stance needs to be firmly established as policy rather than left up to maintainers who can veto work they personally dislike. Otherwise, contributors end up in a limbo where they invest weeks or months, navigate the intricacies of the kernel's development model, and then find out a single personality is enough to block them. Even if that personality has valid technical reasons, the lack of a centralized, consistent direction on Rust's role causes friction.

Hector's decision to leave is understandable: either you have an official green light to push Rust forward or you don't. Half measures invite exactly this kind of conflict. And expecting one massive rewrite or an all‐encompassing patch is unrealistic. Integration into something as large and historically C‐centric as Linux must be iterative and carefully built out. If one top‐level developer says "no Rust", while others push "Rust for safety", that is a sign that the project's governance lacks clarity on this point.

Hector's departure highlights how messy these half signals can get, and if I were him, I'd also want to see an unambiguous stance on Rust — otherwise, it's not worth investing the time just to beg that your code, no matter how well engineered, might be turned down by personal preference.

Selling a NYC skyscraper for 97.5% under market value? Yeah, that's tax evasion 101.

Reasons:

- Property taxes? Tanked.

- Capital gains? What capital gains?

- Money laundering? Check.

- Gift tax dodge? Probably.

- Transfer tax? Lol.

- Asset value shenanigans? You bet.

IRS gonna love this one. Good luck explaining that "market rate" to the auditors.

Surely, the loss of some user metadata is a catastrophe on par with the burning of the Library of Alexandria. Perhaps next time, the Internet Archive should consult their vast army of paid engineers and their bottomless coffers to ensure such a calamity never befalls humanity again. After all, what's the point of preserving vast swathes of human knowledge and culture if one can't access their personal bookmarks from 2007?

Abused how? If you need sigint on a possible bomb threat you learned about via humint in the field and you're waiting for bureaucracy to happen, people will die, and they have died already.

As a German, and as a privacy conscious person, yes, I think it's worth it.

As a CTO of an AI company that does automated background checks for international compliance, .. jesus fucking christ, my job is 90% GDPR compliance at this point.

off-topic: did you know in Germany you need a court order to surveil Taliban terrorists ... in Afghanistan? Fun times.

Answer the following question using verbatim quotes from the text above: "What material absorbs infrared light efficiently?"

"Graphene is a promising material that could change the world, with unlimited potential for wide industrial applications in various fields... It is the thinnest known material with zero bandgaps and is incredibly strong, almost 200 times stronger than steel. Moreover, graphene is a good conductor of heat and electricity with very interesting light absorption properties."

Interestingly, the first sentence of the response actually occures directly after the latter part of the response in the original text.

Screenshot from the document: https://i.imgur.com/5vsVm5g.png.

Edit: asking it "What absorbs infrared light and converts it into electrical signals?" yields "Graphene sheets are highly transparent presenting high optical transparency, which absorbs thermal radiations with high efficacy and converts it into electrical signals efficiently." verbatim.

To test this hypothesis, I just took the complete book "Advances in Green and Sustainable Nanomaterials" [0] and pasted it into the prompt, asking Gemini: "What absorbs thermal radiations and converts it into electrical signals?".

It replied: "The text indicates that graphene sheets present high optical transparency and are able to absorb thermal radiations with high efficacy. They can then convert these radiations into electrical signals efficiently.".

Screenshot of the PDF with the relevant sentence highlighted: https://i.imgur.com/G3FnYEn.png

[0] https://www.routledge.com/Advances-in-Green-and-Sustainable-...

Funnily enough I ran a 980k token log dump against Gemini Pro 1.5 yesterday to investigate an error scenario and it found a single incident of a 429 error being returned by a third-party API provider while reasoning that "based on the file provided and the information that this log file is aggregated of all instances of the service in question, it seems unlikely that a rate limit would be triggered, and additional investigation may be appropriate", and it turned out the service had implemented a block against AWS IPs, breaking a system that loads press data from said API provider, leaving the customer who was affected by it without press data -- we didn't even notice or investigate that, and Gemini just randomly mentioned it without being prompted for that.

I'd like to see this for Gemini Pro 1.5 -- I threw the entirety of Moby Dick at it last week, and at one point all books Byung Chul-Han has ever published, and it both cases it was able to return the single part of a sentence that mentioned or answered my question verbatim, every single time, without any hallucinations.

Maybe they needed a German company to receive money from the BND for their user data without the US knowing :-D

But in all seriousness, I’ve been a subscriber ever since they started and I’m an ultimate subscriber still, and I’d be sad if they went bankrupt due to mismanagement of the funds.