Hacker News: ImJasonH

New comment by ImJasonH in "Fully in-browser container builds"

ImJasonH — Wed, 27 May 2026 23:39:35 +0000

Unfortunately due to the limitations of a valid image ref you can't include creds like that.

You can fork the registry and include your own creds in the backend when it pulls the repo though.

New comment by ImJasonH in "Fully in-browser container builds"

ImJasonH — Wed, 27 May 2026 21:28:28 +0000

AFAIK people only begrudgingly pay for Docker and it does way waaay more.

I have yet to receive any commercial interest in any of these tools :)

New comment by ImJasonH in "Fully in-browser container builds"

ImJasonH — Wed, 27 May 2026 21:19:33 +0000

You absolutely can just build things and put them on base images without building or pulling the base image at any point. This is a central feature of ko, a simple container build tool for most Go applications: https://ko.build

(I am a maintainer)

New comment by ImJasonH in "Fully in-browser container builds"

ImJasonH — Wed, 27 May 2026 21:17:42 +0000

I love seeing folks learn that container images are just fancy tar files and JSON and are therefore buildable by normal tools.

Along my own journey of demystification I made a few toy container image registries over the years that generated and served container images from nothing but the URL itself:

https://ko.kontain.me builds a go application on demand and serves it atop a minimal base image

https://apko.kontain.me builds a base image containing packages listed in the URL, again on demand.

The latest addition, https://git.kontain.me serves an image with the specified git repo already checked out in the image.

None of these should be used for anything serious but they were fun to make and play with. :)

random.kontain.me has been uncharacteristically useful in debugging image caching scenarios.

New comment by ImJasonH in "Show HN: Write your BPF programs in Go, not C"

ImJasonH — Mon, 25 May 2026 22:27:23 +0000

What's NASA :)

Containers Are a Security Boundary (some assembly required)

ImJasonH — Thu, 21 May 2026 01:46:55 +0000

Article URL: https://ram.tianon.xyz/post/2026/05/20/container-security.html

Comments URL: https://news.ycombinator.com/item?id=48216824

Points: 4

# Comments: 0

New comment by ImJasonH in "Show HN: Gaussian Splat of a Strawberry"

ImJasonH — Tue, 19 May 2026 12:08:19 +0000

I'm really interested to see what folks can do with animated Gaussian splats: https://youtu.be/X8yRlA7jqEQ?si=dXeHa03jO7MTBNLA

The filesize of a 3d animated splat is seemingly very small, and the method enables ~arbitrary FPS. But it seems the setup required to record it is still huge and expensive, which limits its usefulness.

Even with that there are some interesting use cases, eg. I'd love to be able to watch concerts this way, and freely move around the stage and crowd from any angle.

New comment by ImJasonH in "Canonical/Ubuntu have been under DDoS"

ImJasonH — Fri, 01 May 2026 11:26:57 +0000

In the US we have the Super Bowl Flush: https://medium.com/nycwater/the-big-flush-on-super-bowl-sund...

New comment by ImJasonH in "LinkedIn scans for 6,278 extensions and encrypts the results into every request"

ImJasonH — Thu, 30 Apr 2026 21:36:51 +0000

Can you create it?

Cerberus Anti-theft is stalkerware: a reverse engineering

ImJasonH — Thu, 30 Apr 2026 20:42:19 +0000

Article URL: https://hexproof.dev/datagrams/cerberus-stalkerware-re/

Comments URL: https://news.ycombinator.com/item?id=47967950

Points: 4

# Comments: 0

New comment by ImJasonH in "Mounting tar archives as a filesystem in WebAssembly"

ImJasonH — Fri, 24 Apr 2026 14:01:02 +0000

The first time I'd heard of this was via https://github.com/jonjohnsonjr/dagdotdev/blob/main/internal... which powers https://oci.dag.dev to let you browse OCI images (e.g., https://oci.dag.dev/fs/ubuntu@sha256:b40150c1c2717d324cdb172...)

New comment by ImJasonH in "To Protect and Swerve: NYPD Cop Has 547 Speeding Tickets"

ImJasonH — Thu, 23 Apr 2026 17:11:47 +0000

Reminds me of: https://www.youtube.com/watch?v=fqYyxvM85zU

New comment by ImJasonH in "GitHub CLI now collects pseudoanonymous telemetry"

ImJasonH — Wed, 22 Apr 2026 14:10:55 +0000

I did not get that impression from these docs or from a brief look through the gh CLI codebase. Can you point to evidence that makes you believe this is used to collect metrics about requests to other services?

New comment by ImJasonH in "GitHub CLI now collects pseudoanonymous telemetry"

ImJasonH — Wed, 22 Apr 2026 13:04:47 +0000

Do people think that GitHub isn't already collecting and aggregating all the requests sent to their servers, which is after all the entire point of the gh CLI?

If you don't want your requests tracked, you're going to have to opt out of a lot more than this one setting.

New comment by ImJasonH in "GitHub's Fake Star Economy"

ImJasonH — Mon, 20 Apr 2026 11:48:12 +0000

Why would OpenAI have bought stars for openai-fm I wonder?

New comment by ImJasonH in "OpenSSL 4.0.0"

ImJasonH — Tue, 14 Apr 2026 21:08:41 +0000

On this topic, there was a great episode of a little-known podcast about Python cryptography and OpenSSL that was really eye opening: https://securitycryptographywhatever.buzzsprout.com/1822302/...

New comment by ImJasonH in "Tell HN: docker pull fails in spain due to football cloudflare block"

ImJasonH — Sun, 12 Apr 2026 14:16:32 +0000

It's pretty easy to write your own. I made this one a while ago: https://github.com/chainguard-dev/crow-registry

Show HN: Portcullis, a review gate for curl|bash

ImJasonH — Thu, 02 Apr 2026 16:39:54 +0000

Article URL: https://github.com/imjasonh/portcullis

Comments URL: https://news.ycombinator.com/item?id=47616777

Points: 5

# Comments: 1

New comment by ImJasonH in "Claude Code Source Leak Is Fake"

ImJasonH — Wed, 01 Apr 2026 08:26:59 +0000

The leaked source code is fake? Or it's the real code that they leaked purposefully to generate buzz?

Either way I'm not sure I believe it's worth the effort. People have been talking about Claude Code plenty without having to resort to tricks.

Occam's Razor etc etc

New comment by ImJasonH in "Stop using ldflags to embed Go build information"

ImJasonH — Wed, 01 Apr 2026 08:25:01 +0000

tl;dr debug.ReadBuildInfo has basically everything you need