HN user

baobun

2,504 karma

Thank you for interacting with my content.

Posts29
Comments990
View on HN
www.youtube.com 7mo ago

Why tech billionaires are quietly bankrolling Europe's far-right [video]

baobun
9pts0
news.ycombinator.com 7mo ago

Ask HN: Extendable" Shell Commands?

baobun
2pts6
www.patrick-breyer.de 7mo ago

Digital House Arrest – How the EU Wants to Disempower Families

baobun
9pts0
www.rsyslog.com 7mo ago

Rsyslog Goes AI First – A New Chapter Begins

baobun
2pts0
blog.tymscar.com 8mo ago

OpenAI Demo'd Fixing Issue #2472 Live. It's Still Open

baobun
3pts0
mindustrygame.github.io 8mo ago

Mindustry: Open-source sandbox tower-defense game

baobun
2pts1
lwn.net 9mo ago

Finding a Successor to the FHS

baobun
3pts1
www.engadget.com 9mo ago

The company Discord blamed for its recent breach says it wasn't hacked

baobun
3pts1
www.theregister.com 9mo ago

Windows 11 update breaks localhost, prompting mass uninstall workaround

baobun
88pts3
www.elliptic.co 9mo ago

$15B seized by US originates from Iran/China Bitcoin miner "theft"

baobun
4pts1
apnews.com 9mo ago

New York Times, AP, Newsmax and others say they won't sign new Pentagon rules

baobun
400pts209
boingboing.net 9mo ago

Apple defined ICE as a "protected class" in blocking anti-ICE apps

baobun
146pts68
www.guru3d.com 9mo ago

Synology reverses policy banning third-party HDDs

baobun
1037pts667
www.polygon.com 9mo ago

Nintendo sues Reddit mod for $4.5M

baobun
8pts1
www.aljazeera.com 9mo ago

Myanmar activists to sue Norway's Telenor for handing data to military

baobun
7pts1
about.iftas.org 9mo ago

Coordinated Pro-Russian Propaganda Network Targeting ActivityPub and ATProto

baobun
16pts2
determinate.systems 9mo ago

Dropping Upstream Nix from Determinate Nix Installer

baobun
2pts0
www.schneier.com 9mo ago

Digital Threat Modeling Under Authoritarianism

baobun
37pts1
pluralistic.net 9mo ago

The (economic) AI apocalypse is nigh

baobun
136pts188
www.arscyni.cc 11mo ago

The how and why of GitHub to Codeberg

baobun
1pts0
github.com 1y ago

Improvements to UDP Hole Punching

baobun
1pts0
www.congress.gov 1y ago

S.1975 - Dark Web Interdiction Act of 2025

baobun
2pts0
discourse.ubuntu.com 1y ago

Ubuntu 25.10 drops support for GNOME on Xorg

baobun
4pts0
github.com 1y ago

Innernet – A private network system that uses WireGuard under the hood

baobun
3pts1
www.youtube.com 1y ago

Toward revocation checking that works (Mozilla at RWC) [video]

baobun
2pts2
www.theverge.com 1y ago

Y Combinator's Little Tech Summit was a bizarre snapshot of DC

baobun
3pts1
github.com 1y ago

iVentoy installing unsafe Windows Kernel drivers

baobun
3pts0
librewolf.net 1y ago

LibreWolf – A custom version of Firefox focused on privacy, security and freedom

baobun
11pts1
github.com 1y ago

Conduwuit – a cool, featureful fork of conduit Matrix homeserver

baobun
2pts0

Is this ironic?

Three common and well-known tells in AI writing — sometimes genuinely deployed by humans but nowhere their profligate use by AI — are the regularity of em-dashes, the high frequency of specific words like “genuinely”, and the tendency to repeatedly invoke tricolons.

[dead] 3 months ago

Clickbait.

    Uh-oh
    For a moment there it seemed that you were trying to peek into this Monero address: 47xmhbRuYpSYSrVZx2RsPBhaAQByZq3ucAT6ULxHvDAu8c853ErpLHqBdDmpVzcmWFdZFCWrfZYwp3rqs14zxXx95S7Fyv2
    No?
    Hmmm... it really looks like you were, like, trying to check out this dude's balance.
    Well, Monero says 'No'!

I played around a bit with the Hp-16c JRPN emulator for hex calculations and usefulness was limited by max number size. Largest number I can input is 0xFFFF.

Does anyone know if the SwissMicro models support operating on larger numbers than 16 bits, ideally up to 64?

For Developers

Would you mind sharing the source code?

Copy API keys

...yeah, I think that'd be a hard requirement. I don't think there is value in a cliboard-as-a-SaaS that is not self-hostable or even auditable.

I think you are putting the cart before the horse and putting your users at risk by integrating credit card payments before sorting out the basics.

The important point is to be able to recognize that and not coerce users into using your project only how you envisioned it and only like that. Some projects are failure on that count having switched on dictatorial direction on that aspect.

There is certainly a balance there. If every function inside your code is now considered part of your API contract, almost anything is a breaking change and you can basically forget about ever meaningfully refactoring that codebase.

Many times making things private or marking them as internal-only is the right call.

I'm not really intimate enough with libsodium to judge if they made the right cut there or not in hindsight.

Why are you saying lies?

I just installed fresh chromium and firefox in a clean Linux VM and typed "google.com" (and a few others) in the URL bar with tcpdump running and they both initiated with TCP port 80. Can confirm that the https-only setting is disabled for both when looking in settings/preferences.

HTTP is only used as a fallback.

Separately, using HTTP as fallback makes the whole thing mostly pointless security-wise. If an attacker can MitM port 80 it is very likely that they can also interfere with 443 to silently force a protocol downgrade. STRIPTLS.

SMTP STARTTLS has the same problem. ISPs and authorities have been known to harvest email traffic by the same technique.

We don't really need HSTS to address most scenarios. Just have browser not attempt http:// for addresses in the address bar unless explicitly specified. Have it try https:// without falling back to http://.

HTTPS-by-default with fallback is not a good default setting since it's vulnerable to the above attack. Strict HTTPS-only is not a good default setting since it prevents legitimate http traffic on internal networks. HSTS adds problematic edge-cases. It's hard to fathom that none of the major browser vendors seem to have figured out the obvious solution to just stop inferring http:// unless asked for.

For the sake of argument, let's say you have a check that caps the number of lines per file and that both you and main added lines in the same file. It's not too weird if that check fails only after merge, right?

One benign example of something that can break after merge even if each branch is individually passing pre-merge. In less benign cases it will your branch merged to main and actual bugs in the code.

One reason to not allow "unclean merges" and enforced incoming branches to be rebased up-to-date to be mergable to the main branch.

You probably want to run the checks on each commit to main in CI and not rely on them being consistently run by contributors.

You do you but I find rebasing my branch on main instead of merging makes me scratch mybhead way less.

Title reminded me of something completely unrelated:

FFI overhead is not to be neglected sometimes. I've seen cases where replacing a python or js lib with an in isolation much faster native Rust or C lib with bindings had the end result being a decrease in real-world performance due to it being in a hot path or loop and the overhead being more significant than the savings were. There is no substitute for real-world benchmarks.

The original code defined a struct with two bools that were not initialized. Therefore, when you instantiate one, the initial values of the two bools could be anything. In particular, they could be both true.

Then reading from that struct like in OP constitutes UB.