<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Arrowmaster</title><link>https://news.ycombinator.com/user?id=Arrowmaster</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 20 Aug 2026 03:13:08 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Arrowmaster" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Arrowmaster in "A joke domain purchase turned in geopolitical warfare"]]></title><description><![CDATA[
<p>It's because curl is often embedded as a library or standalone executable with other software. So when a malicious or compromised piece of software is found, a less experienced investigator might see curl with its author tags in the file metadata, and follow it back to upstream.</p>
]]></description><pubDate>Wed, 19 Aug 2026 15:28:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=49362889</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49362889</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49362889</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Devices with GrapheneOS support should be available in 2027"]]></title><description><![CDATA[
<p>The 2026 Signature doesn't appear to be for sale in the US. Does this mean we have to wait for the lower end devices if we don't want a fold/flip?</p>
]]></description><pubDate>Wed, 19 Aug 2026 14:11:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=49361890</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49361890</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49361890</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Ask HN: Alternatives to GitHub"]]></title><description><![CDATA[
<p>I don't have any specific recommendations other than do as little in your CI/CD as possible, instead do as much as possible in your build system or scripts that get called by CI/CD. This way you can migrate with less work or run locally when you want.</p>
]]></description><pubDate>Mon, 17 Aug 2026 15:12:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=49332365</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49332365</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49332365</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Ask HN: Alternatives to GitHub"]]></title><description><![CDATA[
<p>You can use any CI/CD you want. The only reason GH is popular is that it's free for public repos.<p>But Forgejo does have a GH like CI/CD. If you really care about good CI/CD then you should try some of the alternatives out and decide what works best for your needs.</p>
]]></description><pubDate>Mon, 17 Aug 2026 14:52:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=49332035</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49332035</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49332035</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Use Task Runners for Common Coding Tasks"]]></title><description><![CDATA[
<p>It's under the `mise sponsors` subcommand. It's not intrusive ad that shows up unexpectedly but it's there.</p>
]]></description><pubDate>Tue, 04 Aug 2026 02:02:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=49163618</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49163618</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49163618</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Use Task Runners for Common Coding Tasks"]]></title><description><![CDATA[
<p>I have been using just for some projects and really like it. I looked at mise to replace direnv in the few places I use it, but between mise trying to do so many things and the in terminal advertisement for a problematic company I want nothing to do with, I have halted all plans I had for learning more about mise.</p>
]]></description><pubDate>Mon, 03 Aug 2026 23:16:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=49162612</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49162612</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49162612</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Show HN: Trylle – The Next-Gen Git Platform for Modern Teams"]]></title><description><![CDATA[
<p>So this is just a GitHub clone and has nothing to do with being a new DVCS as a competitor to git. I understand now.</p>
]]></description><pubDate>Tue, 28 Jul 2026 16:16:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=49086138</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49086138</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49086138</guid></item><item><title><![CDATA[New comment by Arrowmaster in "My security camera shipped a GitHub admin token in its login page"]]></title><description><![CDATA[
<p>I don't remember which but one of the major US cellular networks was using the DoDs 7.0.0.0/8 internally. It was never an issue since the DoD kept that /8 offline but the IPs would show up in traceroutes. I had to tell many people to ignore it.</p>
]]></description><pubDate>Sat, 25 Jul 2026 01:12:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=49043559</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=49043559</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49043559</guid></item><item><title><![CDATA[New comment by Arrowmaster in "What does privatization of the US Postal Service mean?"]]></title><description><![CDATA[
<p>> Why does a hill billy who insists on living at the bottom of the Grand Canyon deserve a subsidy?<p>I'm going to say this nicely once instead of the reply I really wanted to say because I'll give you the benefit of the doubt of not knowing or looking it up.<p>Because it provides postal service to the Havasupai people living on their native land at the bottom of the Grand Canyon. Would you like to take a guess as to why Supai, Arizona, the capital of the Havasupai Nation, is located at the bottom of the Grand Canyon.</p>
]]></description><pubDate>Sat, 04 Jul 2026 04:41:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=48782686</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48782686</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48782686</guid></item><item><title><![CDATA[New comment by Arrowmaster in "What does privatization of the US Postal Service mean?"]]></title><description><![CDATA[
<p>USPS as a public entity of the US government is required to deliver mail to all addresses. I don't know all the specific details and I'm sure there's some exceptions for getting service to a new location but existing locations cannot be removed.<p>There is daily USPS service to a postbox at the bottom of the Grand Canyon that is only accessible by mule paths. I guarantee this service would either be cancelled or go up in cost to thousands of dollars per letter if USPS was privatized. The sheer size and remoteness of parts of the USA is why it's a public good.<p><a href="https://facts.usps.com/8-mile-mule-train-delivery/" rel="nofollow">https://facts.usps.com/8-mile-mule-train-delivery/</a></p>
]]></description><pubDate>Sat, 04 Jul 2026 01:46:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48781943</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48781943</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48781943</guid></item><item><title><![CDATA[New comment by Arrowmaster in ".self: A new top-level domain designed to support self-hosting"]]></title><description><![CDATA[
<p>This entire scheme is devoid of a working knowledge of how anything works. I'm wondering what the rug pull is going to be. Crypto or VC?</p>
]]></description><pubDate>Tue, 30 Jun 2026 19:24:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=48737973</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48737973</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48737973</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Pledging another $400k to the Zig software foundation"]]></title><description><![CDATA[
<p>Yes. I think autocorrect got me on mobile keyboard.</p>
]]></description><pubDate>Mon, 22 Jun 2026 23:25:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48637907</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48637907</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48637907</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Pledging another $400k to the Zig software foundation"]]></title><description><![CDATA[
<p>As things are right now, I see this as a respectable way of operating.<p>Michael has made his views and usage of AI known. The Ghostty project has a detailed AI policy for users to see and the team is willing to devote resources to enforcing a middle ground policy. The Zig project has a detailed policy taking a strict stance and as a result I expect they do not have expend as much resources when a contribution is suspected of being AI assisted.<p>A strict policy on either side is easier to enforce based on finite resources (mostly people). I'm sure many projects would like to have a middle ground policy but cannot currently devote the resources it would require long term. We might never see a shift in moderation abilities and this remains for the longer term, or there could be advanced in moderation that allows projects to adopt a more nuisanced policy that's right for them.</p>
]]></description><pubDate>Mon, 22 Jun 2026 15:42:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=48631783</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48631783</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48631783</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Pledging another $400k to the Zig software foundation"]]></title><description><![CDATA[
<p>No it's not. It might vary by country and culture but in the west that amount has consistently been found to be well over the poverty line and more often over double the median household income.</p>
]]></description><pubDate>Mon, 22 Jun 2026 15:26:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=48631553</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48631553</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48631553</guid></item><item><title><![CDATA[New comment by Arrowmaster in "The forge we deserve"]]></title><description><![CDATA[
<p>> The author mentions avoiding multiple logins and searching across forges. The former is already addressed by social logins / federated identity. The latter is not very useful today, on a centralized GitHub, aside from finding leaked credentials and vulnerable code.<p>Absolutely not. Social logins are unacceptable and I refuse to use sites that depend on them and do not provide a normal method to make an account.<p>Ideally projects like this can bring us a model where you don't need to login to some other forge to interact with a project but do it by forking it onto your own forge and submitting pull requests between forges.</p>
]]></description><pubDate>Fri, 19 Jun 2026 22:34:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=48604093</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48604093</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48604093</guid></item><item><title><![CDATA[New comment by Arrowmaster in "SteamOS Linux 3.8 released as stable"]]></title><description><![CDATA[
<p>SteamOS is not designed or meant for installation as a generic OS. It is only designed to run on the specific supported hardware devices that it comes preinstalled on.<p>No matter how many times you see LTT install it on a system they have assembled, its not supposed to be used that way and not supported.</p>
]]></description><pubDate>Thu, 18 Jun 2026 16:07:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48587549</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48587549</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48587549</guid></item><item><title><![CDATA[New comment by Arrowmaster in "SteamOS Linux 3.8 released as stable"]]></title><description><![CDATA[
<p>You can expect it to not work. SteamOS is not designed or meant for installation as a generic OS. It is only designed to run on the specific supported hardware devices that it comes preinstalled on.<p>No matter how many times you see LTT install it on a system they have assembled, its not supposed to be used that way and not supported.</p>
]]></description><pubDate>Thu, 18 Jun 2026 16:05:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48587525</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48587525</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48587525</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Show HN: Homebrew 6.0.0"]]></title><description><![CDATA[
<p>At least the signal one is using the new DEB822 format, but whomever wrote that missed the fact they could have just embedded the key into the sources file and it would be a very simple command.<p>I'm fairly sure both of those are available from extrepo making them a single short command away. <a href="https://manpages.debian.org/trixie/extrepo/extrepo.1p.en.html" rel="nofollow">https://manpages.debian.org/trixie/extrepo/extrepo.1p.en.htm...</a></p>
]]></description><pubDate>Sat, 13 Jun 2026 03:50:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48512834</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48512834</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48512834</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Show HN: Homebrew 6.0.0"]]></title><description><![CDATA[
<p>It's not in Debian 13, the package was flagged with a critical bug and was not fixed prior to release.</p>
]]></description><pubDate>Sat, 13 Jun 2026 03:45:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=48512787</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48512787</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48512787</guid></item><item><title><![CDATA[New comment by Arrowmaster in "Flathub prohibits AI-generated code"]]></title><description><![CDATA[
<p>This has been their policy but now it's more explicitly defined. Go look through the submissions on <a href="https://github.com/flathub/flathub/pulls?q=is%3Apr" rel="nofollow">https://github.com/flathub/flathub/pulls?q=is%3Apr</a> to understand how bad the problem they are dealing with is.</p>
]]></description><pubDate>Fri, 29 May 2026 16:35:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=48325565</link><dc:creator>Arrowmaster</dc:creator><comments>https://news.ycombinator.com/item?id=48325565</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48325565</guid></item></channel></rss>