Hacker News: LawnGnome

New comment by LawnGnome in "Who owns the code Claude Code wrote?"

LawnGnome — Tue, 28 Apr 2026 18:04:05 +0000

That's my feeling on the endgame too, but it'll probably be a decade before we get anywhere near it.

New comment by LawnGnome in "Turn Dependabot off"

LawnGnome — Sat, 21 Feb 2026 16:45:09 +0000

I was actually working on this last week, funnily enough. I've been working on a capability analysis tool for Rust, and if you're already generating a call graph via static analysis, taking that and matching it against the function-level vulnerability data that exists in RustSec isn't that hard.

Hopefully I'll have something out next week.

New comment by LawnGnome in "Turn Dependabot off"

LawnGnome — Sat, 21 Feb 2026 16:42:56 +0000

Although, unfortunately, not all RustSec advisories include function-level vulnerability metadata in practice.

New comment by LawnGnome in "A collection of links that existed about Anguilla as of 2003"

LawnGnome — Mon, 03 Nov 2025 18:51:02 +0000

ai was also one of the ccTLDs that had an MX record for a long time, and I believe (although never had reason to confirm) actually used it. foo@ai tended to be a fun test case for e-mail validation.

New comment by LawnGnome in "Using AI to negotiate a $195k hospital bill down to $33k"

LawnGnome — Tue, 28 Oct 2025 18:56:37 +0000

As a non-American, I think the thing I'm hung up on in what you said is that I don't understand why a developed country should allow anyone to be "uninsured".

New comment by LawnGnome in "KDE launches its own distribution"

LawnGnome — Wed, 10 Sep 2025 22:59:11 +0000

This sounds fairly close to SteamOS in terms of structure. (Which seems to work well for its own use case, so I can see the logic.)

Open Source is one person

LawnGnome — Thu, 28 Aug 2025 01:54:59 +0000

Article URL: https://opensourcesecurity.io/2025/08-oss-one-person/

Comments URL: https://news.ycombinator.com/item?id=45047460

Points: 435

# Comments: 176

New comment by LawnGnome in "RFC: PHP license update"

LawnGnome — Mon, 14 Jul 2025 22:38:14 +0000

Very pedantically, because PHP doesn't require copyright assignment, it would be (almost certainly) impossible to retroactively change the licence on older versions.

However, since the PHP and Zend licences both permit the user to use PHP under the terms of whatever licence version was applied to that PHP version or any later version, the point is essentially moot, since a user can choose to use the new version of the PHP/Zend licence once published, which will give them the same rights.

New comment by LawnGnome in "Understanding the PURL Specification (Package URL)"

LawnGnome — Thu, 05 Jun 2025 16:48:28 +0000

The standard supports a repository_url "qualifier" (query parameter)[0], which can be used to override whatever the default registry is (which, for Docker, is hub.docker.com[1]).

[0]: https://github.com/package-url/purl-spec/blob/main/PURL-SPEC...

[1]: https://github.com/package-url/purl-spec/blob/main/PURL-TYPE...

New comment by LawnGnome in "Stoop Coffee: A simple idea transformed my neighborhood"

LawnGnome — Tue, 25 Mar 2025 18:26:04 +0000

The dog part is definitely key. We moved a few blocks — so within the same neighbourhood — shortly after getting our dog, and it was amazing how much more quickly we got to know our new neighbours with our (extremely extroverted) then-puppy compared to the previous place. (And, on the flip side, I'm on a first name basis with every dog on my block, which usually implies also being on a first name basis with at least one of their humans.)

New comment by LawnGnome in "The Future Is Niri"

LawnGnome — Wed, 12 Mar 2025 22:54:25 +0000

I could also say the same, including the Wayland origin story. I'm pretty new to Niri — I only started playing with it about a month ago — but it's just absolutely that little bit more than Sway I didn't know I needed.

New comment by LawnGnome in "Giving C++ std:regex a C makeover"

LawnGnome — Thu, 05 Sep 2024 20:29:39 +0000

Completely agreed. My Rust origin story wasn't about memory safety, fearless concurrency, a modern type system, or anything else like that. Not that I didn't care about those things — I did — but none of them were what convinced me to start learning Rust.

What did convince me was being able to prototype things for the C project I was working on while having access to a standard library that included basic data structures, synchronisation primitives, and I/O handling in a way that used best practices from recent decades. Everything else was just a bonus that I got to learn and use as I went.

New comment by LawnGnome in "Devzat – Chat over SSH, with some nice quality-of-life features"

LawnGnome — Fri, 19 Jul 2024 17:37:02 +0000

https://en.wikipedia.org/wiki/Finger_(protocol)

An old, old Internet protocol that was used to get information on a user, and could be used by users to post updates from their .plan files. Essentially plaintext social media for people with Internet connections in the 80s and (early-ish) 90s.

New comment by LawnGnome in "Daylight eInk Computer"

LawnGnome — Tue, 09 Jul 2024 21:57:02 +0000

Previous thread: https://news.ycombinator.com/item?id=40456834

New comment by LawnGnome in "Amazon ditches 'just walk out' checkouts at its grocery stores"

LawnGnome — Tue, 02 Apr 2024 18:38:31 +0000

Expensify was a pretty well known case of this several years ago — their marketing was all about their advanced scanning technology, and it turned out they were using Mechanical Turk in many cases with little concern for PII (or corporate security) concerns.

(I have no idea if this is still the case, for the record.)

New comment by LawnGnome in "Original Pirate Material"

LawnGnome — Tue, 02 Apr 2024 16:34:00 +0000

Yeah, I've always felt A Grand Don't Come For Free is actually the better album. Empty Cans literally made me cry the first time I heard it.

The later stuff, though, and particularly the material since the 2017 revival is... not great.

New comment by LawnGnome in "Samsung extends Android and security updates to 7 years"

LawnGnome — Thu, 18 Jan 2024 04:22:51 +0000

It's not a global toggle, but Asus definitely has options to make things more stock-Androidy — you can basically turn the Settings app back into something resembling the stock version, and a bunch of their other UI enhancements and changes are also optional.

A long time Android user wouldn't have mistaken my Zenfone 9 for a Pixel at any more than a cursory glance, but you can get it pretty close, particularly in terms of feel.

New comment by LawnGnome in "VW is putting buttons back in cars"

LawnGnome — Mon, 18 Dec 2023 20:10:33 +0000

Agreed! I have a 2021 CX-5, and it's not just the infotainment controls (which are great, and work really well with Android Auto), but also just having real buttons — some with indicator lights, even — for all the heating/cooling/demisting controls.

I've rented several other cars in the last couple of years that have been touchscreen only (or, at the very least, very heavily biased towards touchscreens), and the amount of extra time needed to orient where you're pressing is honestly kind of terrifying when you need to, say, demist a windscreen quickly.

New comment by LawnGnome in "Committing to Rust for Kernel Code"

LawnGnome — Thu, 23 Nov 2023 20:09:16 +0000

Same. I gradually learned Rust while I was working in a job where I wrote C on a day-to-day basis, and after a while I realised that Rust was making me a better C developer by forcing me to think more systematically about ownership and lifetimes than I really had to that point. It significantly changed how I designed and structured my code, even in other languages.

Not to say I couldn't have gotten the same education from another language, but something about Rust clicked for me that others didn't.

New comment by LawnGnome in "Rust without crates.io"

LawnGnome — Tue, 14 Nov 2023 22:21:29 +0000

Rust does have this: you can specify dependencies from other registries or Git repositories pretty easily. (See https://doc.rust-lang.org/cargo/reference/specifying-depende... for the exact Cargo.toml syntax.)