Hacker News: Cyykratahk

New comment by Cyykratahk in "Handling secrets (somewhat) securely in shells"

Cyykratahk — Wed, 14 Jan 2026 11:05:26 +0000

An alternative to the paste commands is vipe (vi + pipe?) from moreutils which opens an $EDITOR that returns the contents once saved and closed.

It helps with pasting special chars, newlines, and remote sessions without access to the local clipboard.

    secret=$(vipe)
    echo "$secret"

https://manpages.debian.org/jessie/moreutils/vipe.1

New comment by Cyykratahk in "Using a laptop as an HDMI monitor for an SBC"

Cyykratahk — Fri, 10 Oct 2025 01:28:07 +0000

I owned an Alienware laptop (M17X R4) many years ago that had a dedicated HDMI input.

It was a strange laptop. MXM socketed GPU, 120Hz screen that came with Nvidia 3DVision shutter glasses, and the worst battery life I've ever experienced.

New comment by Cyykratahk in "Help us raise $200k to free JavaScript from Oracle"

Cyykratahk — Fri, 19 Sep 2025 13:30:20 +0000

There is some help text when clicking on the current goal amount:

> If an organiser turns on automated goal setting, GoFundMe adjusts their goal automatically based on the fundraiser’s characteristics and performance. You can see the goal history if GoFundMe has ever made automatic updates.

> To help the organiser reach their goal, we start them at a lower goal and adjust it as donations come in.

New comment by Cyykratahk in "PSA: Libxslt is unmaintained and has 5 unpatched security bugs"

Cyykratahk — Fri, 29 Aug 2025 09:50:13 +0000

I'm guessing Google is avoiding the scenario where a contributor "accidentally" commits code with a bug, then later reports the bug they "found".

New comment by Cyykratahk in "Document.write"

Cyykratahk — Sat, 16 Aug 2025 14:08:44 +0000

I'd always assumed the opposite, seeing as a browser's primary function is to parse HTML text into DOM nodes as efficiently as possible.

But on the other hand, since document.write (rightfully) gets such little usage - and has a multitude of footguns - I wouldn't be surprised if browsers used a different, slower code path when executing it; if only to prevent it from borking the parser.

New comment by Cyykratahk in "Web fingerprinting is worse than I thought (2023)"

Cyykratahk — Thu, 24 Jul 2025 13:50:24 +0000

The most obvious downside for me was remote terminal windows (e.g. using ttyd) being unusable because canvas rendering was "broken".

New comment by Cyykratahk in "Exploring Coroutines in PHP"

Cyykratahk — Tue, 08 Jul 2025 11:46:58 +0000

I'd use `yield from` more if I didn't have to re-index arrays before yielding from them:

    function numbers() {
      yield from [1,2,3];
      yield from [4,5,6];
    };
    
    foreach (numbers() as $k => $v) { echo "$k => $v\n"; }
    0 => 1
    1 => 2
    2 => 3
    0 => 4
    1 => 5
    2 => 6

New comment by Cyykratahk in "Scroll snapping, state queries, monster hunter, and gamification"

Cyykratahk — Mon, 23 Jun 2025 14:02:30 +0000

It's great to see more progress around scroll snapping - I'll have to check out this scroll-state container query and the new events.

The biggest missing scroll-snap feature I see is the ability to tell a scrolling container to "snap to the next position in this direction", and maybe by extension "which element(s) are currently snapped". In this article clicking an arrow moves the scroll position by a fixed 40px, but it would be very nice to have a proper API that accounts for element sizes, snap alignments, out-of-axis children, etc.

I ended up writing a package a few years ago that does this (scroll-snap-api). It feels so dirty to calculate the styles on every child in the tree just to find scroll snap positions.

New comment by Cyykratahk in "Pipelining might be my favorite programming language feature"

Cyykratahk — Mon, 21 Apr 2025 13:37:54 +0000

We might be able to cross one more language off your wishlist soon, Javascript is on the way to getting a pipeline operator, the proposal is currently at Stage 2

https://github.com/tc39/proposal-pipeline-operator

I'm very excited for it.

New comment by Cyykratahk in "On JavaScript's Weirdness"

Cyykratahk — Fri, 04 Apr 2025 15:51:17 +0000

For anyone who wants to see some more explanations/experimentations around for loop semantics, this Chrome Developers video is great:

https://www.youtube.com/watch?v=Nzokr6Boeaw

New comment by Cyykratahk in "Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out"

Cyykratahk — Sun, 18 Aug 2024 04:34:36 +0000

For a long time GA had no method to back up or extract the data. It also excluded itself from ADB backups. One had to root their phone to extract the data.

New comment by Cyykratahk in "Early Bookcases, Cupboards and Carousels"

Cyykratahk — Sat, 03 Aug 2024 13:23:03 +0000

Woah, those book wheels are like the 16th century version of having 200 browser tabs open.

New comment by Cyykratahk in "Take a look at Traefik, even if you don't use containers"

Cyykratahk — Sun, 05 May 2024 14:17:00 +0000

I've used caddy-docker-proxy in production and it doesn't cause Caddy to drop connections when loading a new config.

I just tested it locally to check and it works fine.

New comment by Cyykratahk in "Font height differences between Windows and Mac (2019)"

Cyykratahk — Sat, 13 Jan 2024 05:01:02 +0000

CSS now has the ability to override some font metrics, so you shouldn't need to edit the font files directly.

And these overrides can be applied to local fonts as well (generally used to ensure the metrics of the local fallback font matches the yet-to-be-downloaded web font, preventing a layout shift when the web font is swapped in)

ascent-override - https://developer.mozilla.org/en-US/docs/Web/CSS/@font-face/...

descent-override - https://developer.mozilla.org/en-US/docs/Web/CSS/@font-face/...

line-gap-override - https://developer.mozilla.org/en-US/docs/Web/CSS/@font-face/...

size-adjust - https://developer.mozilla.org/en-US/docs/Web/CSS/@font-face/...

New comment by Cyykratahk in "Why you can't divide by zero"

Cyykratahk — Sun, 03 Dec 2023 07:03:39 +0000

Exactly. And I find this is also the best explanation to give to people who don't have a maths background, but who still want to know "Why does the calculator say ERROR?"

New comment by Cyykratahk in "Horrible edge cases to consider when dealing with music (2022)"

Cyykratahk — Sun, 12 Nov 2023 06:39:32 +0000

Apple music dislikes the song "⎆" so much that it's entirely missing from the album in my account.

New comment by Cyykratahk in "Keystroke timing obfuscation added to ssh(1)"

Cyykratahk — Wed, 30 Aug 2023 08:50:49 +0000

I think it was to provide an indication that the password was correct at a glance. (IIRC the number of dots in the password field was also generated, so it didn't necessarily match the number of chars)

The image was essentially a simple checksum. Each user would eventually memorise which icon was "theirs".

New comment by Cyykratahk in "Be careful of the examples you use. They stick"

Cyykratahk — Mon, 21 Aug 2023 22:40:31 +0000

Ah, that's a good point.

New comment by Cyykratahk in "Be careful of the examples you use. They stick"

Cyykratahk — Mon, 21 Aug 2023 13:26:49 +0000

Yes, here are the reserved TLDs [0]:

    test
    example
    invalid
    localhost
    local
    localdomain
    domain
    lan
    home
    host
    corp

0. https://www.ietf.org/archive/id/draft-chapin-rfc2606bis-00.h...

New comment by Cyykratahk in "Tunnel Vision: CloudflareD AbuseD in the Wild"

Cyykratahk — Wed, 09 Aug 2023 15:28:14 +0000

I feel like this is just another case of "It rather involved being on the other side of this airtight hatchway" [0]

If an attacker is capable of installing apps on your server... you've already lost.

0. https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...