<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Mattwmaster58</title><link>https://news.ycombinator.com/user?id=Mattwmaster58</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 21 Apr 2026 10:46:59 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Mattwmaster58" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Mattwmaster58 in "Kimi K2.6: Advancing open-source coding"]]></title><description><![CDATA[
<p>In terms of raw token cost, I've seen a couple providers at (all prices in terms of Mtok) $0.95 input/$0.15 cache input/$5 output vs $3 input/$15 output for sonnet.<p>Task prices of courses will be more interesting - a dumber model may use more tokens to get to the same goal.</p>
]]></description><pubDate>Tue, 21 Apr 2026 00:22:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=47843023</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=47843023</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47843023</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Font Smuggler – Copy hidden brand fonts into Google Docs"]]></title><description><![CDATA[
<p>copy/paste doesn't tell you much - here's the text/html content they put on your clipboard if you're curious. Apparently GDocs supports this out of the box, just hides it from the selection box. Which makes sense given that it doesn't support any font.<p><html>
<body>
<!--StartFragment--><meta charset='utf-8'><meta charset="utf-8"><b style="font-weight:normal;" id="docs-internal-guid-8b11d82e-1a25-4b6a-be64-ebdd55b2a698"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt;"><span style="font-size:22pt;font-family:'Facebook Sans',sans-serif;color:#000000;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;">I just stole Facebook Sans</span></p></b><br class="Apple-interchange-newline"><!--EndFragment-->
</body>
</html></p>
]]></description><pubDate>Tue, 17 Mar 2026 15:10:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47413783</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=47413783</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47413783</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "US private credit defaults hit record 9.2% in 2025, Fitch says"]]></title><description><![CDATA[
<p>That's exactly where my mind went as soon as I read the title. HN rules say to "use the original title, unless it is misleading". I think the original title meets the misleading bar but I can't speak for other readers.</p>
]]></description><pubDate>Thu, 12 Mar 2026 13:39:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47350394</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=47350394</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47350394</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Get free Claude max 20x for open-source maintainers"]]></title><description><![CDATA[
<p>It converts back to paid automatically if you had an existing paid subscription before. No other cases. In any case, this is still a valuable service they are providing for 6mo for free, which many will appreciate even if the goal is to recruit more users.</p>
]]></description><pubDate>Fri, 27 Feb 2026 16:18:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47182285</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=47182285</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47182285</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Ghidra by NSA"]]></title><description><![CDATA[
<p>I'll second this. I used opencode + opus 4.6 + ghidra to reverse engineer a seedkey generation algorithm[1] from v850 assembly. I gave it the binary, the known address for the generation function, and a set of known inputs/outputs, and it was able to crack it.<p>[1] <a href="https://github.com/Mattwmaster58/ic204" rel="nofollow">https://github.com/Mattwmaster58/ic204</a></p>
]]></description><pubDate>Mon, 16 Feb 2026 15:29:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=47036233</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=47036233</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47036233</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "GLM-4.7-Flash"]]></title><description><![CDATA[
<p>I assume you're talking about 50t/s? My guess is that providers are poorly managing resources.<p>Slow inference is also present on z.ai, eyeballing it the 4.7 flash model was twice as slow as regular 4.7 right now.</p>
]]></description><pubDate>Mon, 19 Jan 2026 19:17:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=46683203</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=46683203</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46683203</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "I hate GitHub Actions with passion"]]></title><description><![CDATA[
<p>It's generally very helpful - someone else mentioned here the fundamental problem is lack of a tight feedback loop. It doesn't perfectly replicate the GH environment, but for my use case that doesn't matter and it's super nice to have.</p>
]]></description><pubDate>Wed, 14 Jan 2026 19:51:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46621914</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=46621914</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46621914</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Perfectly Replicating Coca Cola [video]"]]></title><description><![CDATA[
<p>As far as I know, the HFCS vs Sucrose is unlikely to be the reason for the difference in taste. I'm basing that off this video: <a href="https://www.youtube.com/watch?v=NY66qpMFOYo" rel="nofollow">https://www.youtube.com/watch?v=NY66qpMFOYo</a><p>TLDR: carbonic acid breaks down sucrose to glucose/fructose anyway</p>
]]></description><pubDate>Mon, 12 Jan 2026 14:31:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=46589019</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=46589019</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46589019</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Show HN: DoNotNotify – Log and intelligently block notifications on Android"]]></title><description><![CDATA[
<p>A couple years back I was looking for this sort of solution and ended up paying money to buy FilterBox which I've found to be good.<p>There are certain apps that I would love to be able to uninstall but have to keep for one reason or another, so I really appreciate apps like these which prevent attention-stealing notifications from making it through :)</p>
]]></description><pubDate>Mon, 05 Jan 2026 15:33:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=46499960</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=46499960</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46499960</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "SourceFS: A 2h+ Android build becomes a 15m task with a virtual filesystem"]]></title><description><![CDATA[
<p>It's a shame that AI is ruining certain phrases, the "You’re absolutely right" was appropriate but I've been trained reading so many AI responses to roll my eyes at that.</p>
]]></description><pubDate>Wed, 22 Oct 2025 20:55:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=45675029</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45675029</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45675029</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "LD_PRELOAD, The Invisible Key Theft"]]></title><description><![CDATA[
<p>This doesn't seem like a realistic threat to me. Under what circumstances are you not pretty much completely pwned if an attacker could start their own processes, or have root access?<p>This sort of seems like saying IF an attacker gets the keys to your car, they could install a module that would allow them to come back and steal the car with a push of a button. Technically true, but they could also just steal the car straight up, or do any number of other things.</p>
]]></description><pubDate>Thu, 16 Oct 2025 15:59:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=45607035</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45607035</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45607035</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "A story about bypassing air Canada's in-flight network restrictions"]]></title><description><![CDATA[
<p>> I once merely mentioned the words “Heart Attack” on a plane and was kicked off by the flight attendants.<p>Well now you have a chance to tell your side - were you merely sitting and just uttered the words "heart attack" for no externally apparent reason?</p>
]]></description><pubDate>Fri, 10 Oct 2025 17:26:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=45541455</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45541455</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45541455</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Discord says 70k users may have had their government IDs leaked in breach"]]></title><description><![CDATA[
<p>vx-underground claims to have communication with the group, and this post of theirs adds to the support agent theory: <a href="https://xcancel.com/vxunderground/status/1976238815665856646" rel="nofollow">https://xcancel.com/vxunderground/status/1976238815665856646</a><p>> they were able to compromise Discord Zendesk by compromising a "BPO Agent" (outsourced support).<p>> Of course, as is tradition, it is also entirely possible they're lying</p>
]]></description><pubDate>Thu, 09 Oct 2025 12:50:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=45526951</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45526951</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45526951</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Pnpm has a new setting to stave off supply chain attacks"]]></title><description><![CDATA[
<p>> Is that possible?<p>This comes up every time npm install is discussed. Yes, npm install will "ignore" your lockfile and install the latest dependancies it can that satisfy the constraints of your package.json. Yes, you should use npm clean-install. One shortcoming is the implementation insists on deleteing the entire node_modules folder, so package installs can actually take quite a bit of time, even when all the packages are being served from the npm disk cache: <a href="https://github.com/npm/cli/issues/564" rel="nofollow">https://github.com/npm/cli/issues/564</a></p>
]]></description><pubDate>Thu, 18 Sep 2025 13:10:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=45289213</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45289213</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45289213</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Microsoft PowerToys"]]></title><description><![CDATA[
<p>I've found splitting up my ultrawide into 6x2 cells, then you can use Ctrl+Shift to select every cell your mouse enters additively. I've wanted something like this for linux for a long time but haven't found anything.</p>
]]></description><pubDate>Wed, 10 Sep 2025 17:24:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=45200907</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45200907</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45200907</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "NPM debug and chalk packages compromised"]]></title><description><![CDATA[
<p>Off the top of my head, you could include your own checksum in the payload. Their code only modifies the address. Nothing would prevent them from reverse engineering checksum, too.<p>There are ways to detect a replaced/proxied global window function too, and that's another arms race.</p>
]]></description><pubDate>Mon, 08 Sep 2025 20:32:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=45173582</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45173582</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45173582</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "NPM debug and chalk packages compromised"]]></title><description><![CDATA[
<p>As others have noted, npm install can/will change your lockfile as it installs, and one caveat for the clean-install command they provide is that it is SLOW, since it deletes the entire node_modules directory. Lots of people have complained but they have done nothing: <a href="https://github.com/npm/cli/issues/564" rel="nofollow">https://github.com/npm/cli/issues/564</a><p>The npm team eventually seemed to settle on requiring someone to bring an RFC for this improvment, and the RFC someone did create I think has sat neglected in a corner ever since.</p>
]]></description><pubDate>Mon, 08 Sep 2025 19:04:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=45172431</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=45172431</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45172431</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Ask HN: Spending Tracking Tools"]]></title><description><![CDATA[
<p>> You can link as many bank, credit card accounts as you want with one SimpleFIN account.<p>The website says "Connect up to 25 institutions and 25 apps"</p>
]]></description><pubDate>Mon, 06 Jan 2025 12:33:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=42610043</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=42610043</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42610043</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Cooking with black plastic is particularly crucial to avoid"]]></title><description><![CDATA[
<p>interesting, does work for me</p>
]]></description><pubDate>Thu, 31 Oct 2024 12:20:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=42006122</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=42006122</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42006122</guid></item><item><title><![CDATA[New comment by Mattwmaster58 in "Can A.I. be blamed for a teen's suicide?"]]></title><description><![CDATA[
<p><a href="https://archive.is/2zp1e" rel="nofollow">https://archive.is/2zp1e</a></p>
]]></description><pubDate>Wed, 23 Oct 2024 12:43:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=41924488</link><dc:creator>Mattwmaster58</dc:creator><comments>https://news.ycombinator.com/item?id=41924488</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41924488</guid></item></channel></rss>