fguerraz

The strong language is fully appropriate given the circumstances.

In 2006, in my first job after uni in France, I wrote a toy PaaS system called CASIMIR based on qemu. It was a lot of fun, I could via a web UI launch VMs, access them via VNC, etc..

I've always had a lot of admiration for Fabrice Bellard, I always wished I was as good an engineer as he is.

Moving to a closed development model => opensource is just a gimmick, especially with a BSD licence.

I feel like the project just died.

It’s a good thing because it’s definitely an interesting company worth investing into long term. But not at this valuation. 10% seems reasonable given the profits perspective.

This is misleading and not the point of the wealth tax.

If you’re lucky enough that you don’t need to work for your income, you should be taxed. A lot. How much? Enough to make sure you don’t become so rich that your children don’t need to work.

Being rich is not fair, it’s very rarely deserved, and it needs to be taxed unfairly.

This is great news, maybe people are going to start caring about their electronic gadgets more and not treat them as disposable? Maybe longevity is going to become a criteria again?

And then Apple pay and Google pay are not going to implement it, and nobody is going to use it.

This is incredibly light in details, no verifiable claim as far as I can tell.

(I’m sure they’re not lying, but we’re not learning anything here)

Does it mean I can finally run Slack on Asahi?

They evolve and they don’t. People call things whatever they want. How is it going for X/Twitter?

I have renamed the bird Türkiye . It was called Turkey in reference to the country, I think it’s fair to rename the bird too.

Well, let's say I just don't understand the popularity of this magazine on HN.

So, nothing new?

The cosmic ray hypothesis has been dominant for a few years now.

This magazine…

That’s… great. But who runs containerised 32 bit applications?

I just contributed this [1] which does what you want for seccomp. Well, not by default, but profiling is now effective against this attack.

Oh, an this [2] just happened

[1] https://github.com/containers/oci-seccomp-bpf-hook/pull/209 [2] https://github.com/moby/moby/pull/52501

However, the author managed to squeeze the word "however" eleven times in this article, however.

In cryptography, you want operations to run in constant time, even if it’s wasteful, otherwise an attacker could guess information about the key or plaintext by measuring execution times.

Modern compilers are extremely clever and will produce machine code that takes full advantage of modern CPU branch predictors, and reorder instructions to better take advantage of pipelining. This in itself will make the same code run at different speeds depending on the input data.

Then there is the whole issue of compiler version roulette. As a developer you have no idea which version of compilers your users and distros will use, and what new and wonderful optimisation they will bring.

Cryptography and video codecs are notable exceptions, they put a lot of effort to making the code provably memory safe: no recursion, limited use of stack variables, no dynamic allocations, etc. As a result, memory safe languages bring nothing but trouble by making it non deterministic, that’s especially true for crypto where compiler “optimisations” guarantee you side channels attacks.

Distributions using outdated (sorry “stable”) kernels are stupid.

We are not 20 years ago, the world in which it made sense doesn’t exist anymore, but the industry is slow to move on. Just pick a long term release and update it regularly.

Like this: https://archive.is/2026.03.03-070033/https://www.nytimes.com...

You’re correct, the article doesn’t say anything about that, I’m using my own judgement given the facts that I have.

All I know is, if I was at war with the USA, I would definitely cut the internet in my country. Not doing it is like being at war with a big maritime power, and not protecting your coastline.

There is no naivety on my part, the USA has publicly admitted that it orchestrated and even armed the protests [1]

[1] https://www.aljazeera.com/news/2026/4/6/has-trump-confirmed-...

Excepts the internet blackout has nothing to do with censorship at all. This is just Iran protecting itself from cyber attacks, if they had kept Internet running, they would have been completely pwned.

I find it interesting that the BBC published this at a time they are already under heavy criticism for their coverage of the war in the Middle East (where they didn’t blink at Trump’s genocidal threats and published an article claiming that Iranians wanted to be nuked).

Now we’re saying that war is just natural. It must be a coincidence.

Interestingly, I think 3 or 4 out of the 5 bugs would have been prevented / mitigated quite well using https://github.com/anthraxx/linux-hardened patches...

(disabled io_uring, would have crashed the kernel on UAF, and made exploitation of the heap overflow very unreliable)

A lot of AI generated horseshit.

Yes, if you count the Drax power plant as renewable, sure.

If you add to that deindustrialization and buying everything from abroad and not caring where that energy comes from, it’s super easy.

yes, I do mean Firefox specifically. Mozilla fundation is not Mozilla corporation. The money you give to the fundation is for their charity work, none of that goes to the development of Firefox.

We have no idea what is in that contract with Google. They get to be the default search engine, but what else? Does it prevent Firefox from accepting some sources of funding, like donations?

It would be great to get transparency on this…