Hacker News: Maskawanian

New comment by Maskawanian in "Passkeys are not a trap"

Maskawanian — Wed, 14 Oct 2026 16:25:42 +0000

As the hash is being encrypted with the public key in the client, that would require that the client be compromised. In which case the original password is already exposed at that point, thus a discussion of the transport is no longer the concern.

New comment by Maskawanian in "Passkeys are not a trap"

Maskawanian — Wed, 14 Oct 2026 16:12:55 +0000

Sure, you could MITM still if all you do is that, as with anything it depends on what you are defending against.

If you are defending against clear text being discoverable, then bcrypt hashing with a unique salt on the client is good enough.

If you are trying to prevent MITM you can combine that salting with public/private key transmission of the bcrypt hash to the backend (effectively the same idea as pass keys without the downsides).

MITM just affects your service, and doesn't always matter depending on what the service is, for example, a recipe manager doesn't need to have bullet proof security.

New comment by Maskawanian in "Passkeys are not a trap"

Maskawanian — Wed, 14 Oct 2026 15:58:19 +0000

What are you talking about? Whenever I've written authentication, passwords are hashed on the client side and never transmitted in the clear.

The way passkeys are being pushed is so clearly an attempt to add friction to leaving walled gardens. Stop talking in absolutes in a world of greys.

New comment by Maskawanian in "Ask HN: Who wants to be hired? (October 2026)"

Maskawanian — Thu, 01 Oct 2026 15:08:10 +0000

Location: Winnipeg, MB, Canada

Remote: Yes, Hybrid OK in Winnipeg

Willing to relocate: Only to Vancouver Island

Technologies: C#, .NET Core, Go, TypeScript/JavaScript, Vue.js, React, PHP/Laravel, Python, Java, HTML5/CSS, Node.js/Express, PostgreSQL, MySQL, MongoDB, Entity Framework, Eloquent, RESTful APIs, Docker/Swarm, Kubernetes, Nginx/Apache, Git/SVN, CI/CD, Linux

Résumé/CV: https://www.dsaul.ca/Resume Codeberg: https://codeberg.org/dsaul Linkedin: https://www.linkedin.com/in/dan-saul/ Portfolio: https://www.dsaul.ca/Portfolio

Software Certificates are viewable on LinkedIn.

Email: hn2026 at my website's domain

Please only send emails if you are employed by a company who is hiring, or a recruiter. If you are a referral bot/agent/orchestrator, don't send me emails.

Hello HN, I'm Dan Saul, a full-stack software developer with 10+ years of experience building and shipping production systems across SaaS, telecom, and business automation. I enjoy turning complex requirements into working software that people actually use.

How I work: I take ownership of features end to end, write tests and documentation as part of the job, and care about code review and solid SDLC practices. I participate in Agile processes as a team member, mentor junior developers, and contribute to architecture decisions. I build software directly and use agent-driven tooling pragmatically, treating generated code like any other contribution that needs review and verification.

What I'm looking for: Full-stack or backend-focused product teams where I can write real code, solve real problems, and help ship reliable software. Interested in SaaS, internal tools, telecom/comms, and practical business applications. I work best with teams that value clear thinking, accountability, and getting things done without unnecessary process.

New comment by Maskawanian in "Canada welcomes EU proposal to become 'associate member'"

Maskawanian — Thu, 17 Sep 2026 18:02:53 +0000

Vimmy Ridge memorial is also forever given for the use of Canada by France after WW1, it is administered by Parks Canada. So we technically control land in Europe.

New comment by Maskawanian in "Canada welcomes EU proposal to become 'associate member'"

Maskawanian — Thu, 17 Sep 2026 14:03:34 +0000

This is the same PP that grasped defeat in the face of victory, and is continually losing support, relegating himself to the same position of the Reform party that it was in the 90's. The same Polly that lost his riding last election, and had to have one handed to him on a silver spoon. I would take his opinion with a grain of salt.

New comment by Maskawanian in "Canada welcomes EU proposal to become 'associate member'"

Maskawanian — Thu, 17 Sep 2026 13:57:35 +0000

Generally it is auto approved for Canadians, but you will soon need to do an "ETIAS travel authorization".

New comment by Maskawanian in "Canada welcomes EU proposal to become 'associate member'"

Maskawanian — Thu, 17 Sep 2026 13:53:19 +0000

Agreed, and the possibility of visa free travel to the EU, plus the removal of live/work barriers is appealing. The USA really comes off as the spurned ex that calls you drunk in the middle of the night.

New comment by Maskawanian in "EU chief opens door for Canada to become 'associate member'"

Maskawanian — Wed, 16 Sep 2026 13:17:46 +0000

What is a provenance WRT Canada? :-) But it is true, our provinces have trade barriers internally that is an ongoing source of dispute. There has been movement since the USA started falling apart to remove them. The dumbest one was that hay bales had to be re-arranged on the AB/BC border.

New comment by Maskawanian in "The Google Play app review process now regularly takes longer than a week"

Maskawanian — Wed, 16 Sep 2026 13:09:04 +0000

How about treating people like adults for a start? How about starting public awareness campaigns about proper digital hygiene. Not everything has to be nanny state garbage.

New comment by Maskawanian in "EU chief opens door for Canada to become 'associate member'"

Maskawanian — Wed, 16 Sep 2026 12:45:07 +0000

Thanks for replying to a comment I didn't make. It is clear that your mind is full of American exceptionalism, I'm done in this comment thread. Thanks for your contribution.

New comment by Maskawanian in "EU chief opens door for Canada to become 'associate member'"

Maskawanian — Wed, 16 Sep 2026 12:29:09 +0000

Naïve American exceptionalism. It is going to be generations before Canadians could possibly be on as friendly terms as we were just 5 years ago.

New comment by Maskawanian in "EU chief opens door for Canada to become 'associate member'"

Maskawanian — Wed, 16 Sep 2026 12:26:10 +0000

Unsurprisingly, people in different parts of the world hold different values. Europe is generally more focused on actual people and how their lives live, than simply accumulation of wealth among the few. It is unsurprising that they focus on different things.

New comment by Maskawanian in "GrapheneOS' rewritten Messages app is released"

Maskawanian — Fri, 11 Sep 2026 20:13:26 +0000

Good to know! For others: You open their app store, go into messaging, hamburger menu, select release channel, and choose alpha.

New comment by Maskawanian in "GrapheneOS' rewritten Messages app is released"

Maskawanian — Fri, 11 Sep 2026 20:07:03 +0000

Does anyone know if this is something that we can install now, or if it will show up in the next OS release?

New comment by Maskawanian in "Fixing a bricked Framework laptop"

Maskawanian — Tue, 18 Aug 2026 15:59:12 +0000

Yup, I had to do that to get mine to work. It is a good thing that I am more experienced then the average bear when it comes to soldering. When it was **ed, I could still get it to boot with an AC adapter plugged in, so you can try that.

New comment by Maskawanian in "Anti-fraud tools can't keep pace with robocall scammers"

Maskawanian — Sat, 01 Aug 2026 01:37:08 +0000

What I did was implement a SIP number that asks for a random digit to be pressed before allowing the call through. It also connects to my CardDAV server, and any numbers in my address book don't get the prompt. This works for 95% of bogus calls. The only thing this stops is people not on my address book calling from hands-free. But this has never come up in conversation so I think I'm OK!

New comment by Maskawanian in "Anti-fraud tools can't keep pace with robocall scammers"

Maskawanian — Sat, 01 Aug 2026 01:30:43 +0000

Almost, as someone who used to work with telecom systems in Canada, while it is true that felony wiretapping requires 1 party to consent to not be illegal, it is not the only law. PIPEDA applies to only commercial endeavors, and requires two party consent.

This is why a company must inform you of the recording, but you do not have to inform them.

New comment by Maskawanian in "Tar Files Created on macOS Display Errors When Extracting on Linux (2024)"

Maskawanian — Mon, 04 May 2026 14:35:06 +0000

At least with Samba you can use the "veto files" and "delete veto files" global directives to deal with those, I personally use the following for veto files:

    /._*/.AppleDB/.AppleDouble/.AppleDesktop/:2eDS_Store/Network Trash Folder/Temporary Items/TheVolumeSettingsFolder/.@__thumb/.@__desc/:2e*/.@__qini/.Qsync/.@upload_cache/.qsync/.qsync_sn/.@qsys/.digest/

I understand that I may loose resource forks, but that isn't a problem for the use case of my server.

New comment by Maskawanian in "Can I start using Wayland in 2026?"

Maskawanian — Sun, 04 Jan 2026 15:55:17 +0000

Tearing and hidpi is why I left Linux for Windows between 2012 ans 2022. Once wayland was good enough I returned. Tearing is awful, and should be opt in (which wayland provides), not opt out.