Hacker News: PaoloBarbolini

New comment by PaoloBarbolini in "Ubuntu 26.04"

PaoloBarbolini — Fri, 24 Apr 2026 07:21:50 +0000

Why do we still put up with GNOME?

I've spent the last 10 years off and on from Linux. Had I used something other than GNOME, I believe my experience would have been better.

I've been on KDE for the last 3-4 years and things work so well I could never imagine going back to GNOME.

New comment by PaoloBarbolini in "Jepsen: NATS 2.12.1"

PaoloBarbolini — Tue, 09 Dec 2025 08:36:11 +0000

There are many things they don't seem to understand about their own product.

https://github.com/nats-io/nats.rs/issues/1253#issuecomment-...

New comment by PaoloBarbolini in "Rootless Pings in Rust"

PaoloBarbolini — Tue, 02 Dec 2025 08:29:23 +0000

The repo link goes to a 404 page.

New comment by PaoloBarbolini in "EXIF orientation info in PNGs isn't used for image-orientation: from-image"

PaoloBarbolini — Fri, 21 Nov 2025 14:42:15 +0000

The image could have been encoded with a high compression ratio, or even something like OxiPNG. In that case, while re-encoding it wouldn't lose quality, it could still have the side-effect of making the file bigger.

New comment by PaoloBarbolini in "Ghost 6.0"

PaoloBarbolini — Tue, 05 Aug 2025 02:05:53 +0000

A few years ago I convinced a friend to make their blog using Ghost 4. Very bad decision. I haven't kept up with it but at the time they supported only 1 mailing list service. What kind of open source project does that kind of vendor lock-in to their users.

New comment by PaoloBarbolini in "Raspberry Pi 5 Gets a MicroSD Express Hat"

PaoloBarbolini — Fri, 01 Aug 2025 08:41:23 +0000

That's "easy" when all they have to do is to package https://github.com/raspberrypi/linux

New comment by PaoloBarbolini in "Postgres LISTEN/NOTIFY does not scale"

PaoloBarbolini — Fri, 11 Jul 2025 08:57:10 +0000

I've had the same experience and I fixed part of the problem by writing my own Rust client, Watermelon. It's still missing a lot of features but at least I'm not blocked by weird decisions taken by upstream.

New comment by PaoloBarbolini in "Protecting NATS and the integrity of open source"

PaoloBarbolini — Fri, 25 Apr 2025 15:43:56 +0000

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 17:19:14 +0000

I'm also finding that this has happened already in the past and GitHub didn't cleanup the spam entirely, like: https://github.com/Xyntax/1000php/issues/1#issuecomment-2318...

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 16:16:01 +0000

Before this event, I've has another encounter with GitHub. What happened is that an AI coding assistance startup seemed to have created bots that would:

1. find new GitHub issues on random repos

2. fork the repo

3. make a commit, trying to implement whatever was requested in the issue

4. reply to the issue with a link to the commit, indemnifying themselves of the code quality (which was very poor), and linking to their platform

I reported a few of those issues to GitHub. To me, the problem seemed almost obvious:

1. they were using sketchy GitHub usernames

2. there was evidence of similar replies having been mass-deleted in the past

3. some of the issues also seemed to have been opened by sketchy users

GitHub took a few days to reply and didn't seem to understand how bad the situation was, and basically allowed them to continue. I don't expect to have to spend a lot of time writing an elaborate "criminal case" to convince GitHub that they are allowing their platform to be abused by these bots.

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 15:57:23 +0000

Amazing work! This is the first time I've seen this kind of issue fixed so quickly.

GitHub should learn from this.

New comment by PaoloBarbolini in "GitHub Phishing Campaign making use of OAuth and render.com hosted site"

PaoloBarbolini — Sun, 16 Mar 2025 15:43:57 +0000

Link to search results: https://github.com/search?q=%22We+have+detected+a+login+atte...

GitHub Phishing Campaign making use of OAuth and render.com hosted site

PaoloBarbolini — Sun, 16 Mar 2025 15:42:14 +0000

A phishing campaign has been ongoing in the last 4 hours, opening more than 11.5k issues containing the wording "We have detected a login attempt on your GitHub account that appears to be from a new location or device." and links to a render.com hosted site.

Do not click any of the links!

Every once in a while this seems to reoccur, and I realize how slow GitHub is at deleting the spam issues or comments. Why doesn't GitHub fix this?

Comments URL: https://news.ycombinator.com/item?id=43379885

Points: 8

# Comments: 7

New comment by PaoloBarbolini in "The owner of ip4.me/ip6.me, Kevin Loch, has died"

PaoloBarbolini — Tue, 04 Mar 2025 16:43:47 +0000

`curl https://myip.wtf/json` too is nice to use when debugging things

New comment by PaoloBarbolini in "From xz to ibus: more questionable tarballs"

PaoloBarbolini — Tue, 02 Apr 2024 10:12:49 +0000

Same for Rust. In the short term we're trying to solve it on the user's side with https://crates.io/crates/cargo-goggles, but in the long term the registry should probably do it.

cargo-goggles: verify reproducibility of Rust libs releases

PaoloBarbolini — Mon, 01 Apr 2024 19:48:25 +0000

Article URL: https://crates.io/crates/cargo-goggles

Comments URL: https://news.ycombinator.com/item?id=39898359

Points: 8

# Comments: 0

New comment by PaoloBarbolini in "Testcontainers"

PaoloBarbolini — Wed, 28 Feb 2024 02:27:45 +0000

Could you provide an example?

New comment by PaoloBarbolini in "Netlify just sent me a $104k bill for a simple static site"

PaoloBarbolini — Tue, 27 Feb 2024 07:06:43 +0000

It means they protect themselves from layer 3 and 4 DDoS. For layer 7 you're mostly on your own. That's what most companies mean when they talk about DDoS anyway.

New comment by PaoloBarbolini in "Netlify just sent me a $104k bill for a simple static site"

PaoloBarbolini — Tue, 27 Feb 2024 07:01:17 +0000

This is the reason I've never used all of these user-facing serverless services. The price depends on the usage, but if anything goes wrong they are the ones to decide what you pay. It's not comfortable thinking that you could screw up, or get DDoS'd, and the remedy is hoping they wave the bill.

New comment by PaoloBarbolini in "DNS over HTTPS is not what I thought"

PaoloBarbolini — Thu, 01 Feb 2024 05:46:58 +0000

Certificates can be issued for IPs too, CAs don't usually do it though.