HN user

sersi

1,937 karma
Posts6
Comments480
View on HN

I've done it (it's standard in many countries). Honestly, it's a bit horrifying because you are completely at the mercy of someone else but it's bearable. Colonoscopy is definitely easier.

My only experience with global anesthesia was as a child waking up with a massive asthma attack unable to breathe so I try to avoid it.

At the Montessori school my kid goes to, children read a lot. They have access to the Library, can ask the teacher to go there when they need/want to. The school has a no phone policy, children are not allowed to bring them to school. Computers are only in the computer room for children to access when they want to do research and there are no laptops in the class room.

It works well and the children are both happy and do well academically

Let's say they are correct. What would the solution look like from there? Personally after being diagnosed at 36, I started taking concerta occasionally. Mostly once a week to deal with all the things I have a tendency to not do otherwise. It's helped a lot.

And I'm saying this as someone who lost circa 120k in work I never invoiced because of ADHD

And how much does the Trump administration understand and embrace the values and worldview that created the American political system. How much do they agree with the Founding Fathers? ‘We hold these truths to be self-evident, that all men are created equal, that they are endowed by their Creator with certain unalienable Rights, that among these are Life, Liberty and the pursuit of Happiness.’?

I worked for a software consulting company in Japan, we had a contract with a big well known company. The contract gave a precise date for the delivery with huge fines if we delivered late but there was also a long bug fixing period after the initial delivery.

So we had overtime for 2 months working from 10am to 4am just so that we could deliver the "feature complete" software. If any bugs were found they were classified as either blockers (feature cannot be shown without) or scheduled to be fixed after delivery.

My boss knew it was stupid, he didn't like it but it was the standard contract from that big Japanese company and we were small and they weren't going to change that.

Sometimes watered down though. When I summon the soul of Linus, he is nowhere near as scathing or biting as the original :)

Yes, as long as context size increase and llm improve at least there's a way out through using AI but once the progress stops...

To be fair with how powerful our computers are, it's a pity that electron apps like bitwarden, spotify are so slow and consume so much resources. I do miss the time when a lot of apps were snappy

That was my experience. When I first started consulting 20 years ago I stupidly charged $40/hour because I was young and dumb I stupidly discounted the time it took to find clients (and things like health insurance, etc...). I quickly adjusted and started charging $120/hour. I got much better clients and the projects I worked on became that much more interesting.

In my experience charging too little is one of the biggest mistake to do when starting.

Do_not_track 3 months ago

While we wait for companies to very very slowly implement that proposal, is there a place that collects in one place all the opt out methods for most common tools in one place? Perhaps even a shell module that sets them and regularly updates its list?

Thanks for the reply (and thanks for the work you do)! Fair enough. And the issue is also that without some form of vetting you run the risk of disclosing the 0 day too early?

About that "That's the only policy by which all the legal/governmental agencies have agreed to allow us to operate in, so we are stuck with it.", you mean that if you disclose selectively, then you become liable for damages? or was it a more direct conversation with legal/governmental agencies?

And for a bug like this, what is the policy with backporting patches to lts branches? Since it was corrected in mainline on april 1st but only backported after the public disclosure. Do you delay backporting to minimise any attention on the security issue?

I guess that having a patch for that land on all the LTS branch would signal to any would be attacker that it's a significant security issue...

Sorry for all the questions but I'm genuinely interested.

EDIT: Just read your blog post at http://www.kroah.com/log/blog/2026/01/02/linux-kernel-securi... which does answer a lot of my questions...

To be fair, once Xint gave the heads up and the kernel team committed a patch, what was Xint supposed to do? Keep asking the kernel security team to backport patches for the LTS kernels?

As soon as a patch is committed, the clock starts ticking, the exploit will be discovered by reverse engineering recent commits. The commit was made on April 1st, Xint disclosed it on the 29th. If the Kernel Security team had wanted to, they had 28 days to backport patches in the LTS branches...

So, I wouldn't put any blame on Xint there.

Interesting comment by Greg Kroah-Hartman when asked why the kernel team doesn't notify distros directly

Nope, sorry, we are NOT allowed to notify anyone about anything "ahead of time" otherwise we will have to tell everyone about everything. That's the only policy by which all the legal/governmental agencies have agreed to allow us to operate in, so we are stuck with it.

I'd be interested in knowing more about that policy... Seems that there should be exceptions for the major distros.

Of course, major distros who have contracts with SLA could also pay for someone to be on the kernel security team and get a heads up like that..