Hacker News: Pesthuf

New comment by Pesthuf in "No one owes you supply-chain security"

Pesthuf — Sun, 12 Apr 2026 13:59:16 +0000

I feel like they could do a better job, though. In the postmortems of incidents you often hear it's because some maintainer got hit by the perfect phishing attack at the right time and they got tricked into entering password and TOTP into a phishing site. If that is so, why are we still allowing phishable credentials for logging into package repositories?

New comment by Pesthuf in "Windows native app development is a mess"

Pesthuf — Sun, 22 Mar 2026 19:32:56 +0000

Thanfully, you don't need to write p/invoke stuff yourself anymore. https://github.com/microsoft/cswin32 creates methods and all related structs for you. It's also AOT compatible (if you specify it). It works for calling C and COM functions.

I mean, not like this brings Windows development anywhere close to "modern", if anything, it feels like you're moving into the opposite direction, but at least this solves the "The modern APIs don't provide the specific functionality I need" problem that plagues all of Microsoft's "nice", "modern" abstractions…

New comment by Pesthuf in "Don't use passkeys for encrypting user data"

Pesthuf — Sun, 01 Mar 2026 15:17:44 +0000

Maybe we could add an extension to webauthn that adds a reason to a passkey. Then, the credential manager can warn the user better why deleting the passkey would be a bad idea.

New comment by Pesthuf in "Children with cancer scammed out of millions fundraised for their treatment"

Pesthuf — Tue, 16 Dec 2025 16:28:48 +0000

Many such cases

New comment by Pesthuf in "Apple Vision Pro upgraded with M5 chip"

Pesthuf — Wed, 15 Oct 2025 13:30:07 +0000

I think most of us will wait for these chips to get into more useful computers.

New comment by Pesthuf in "WinBoat: Windows apps on Linux with seamless integration"

Pesthuf — Thu, 09 Oct 2025 11:17:56 +0000

This! Does it render Windows‘ windows individually on the Linux desktop, with integration into alt-tab, the Ubuntu dock etc. or does it just render one big VM window? How is that not shown on the site.

New comment by Pesthuf in "Apple takes down ICE tracking apps after pressure from DOJ"

Pesthuf — Fri, 03 Oct 2025 01:36:02 +0000

Then the government will just force ISP DNS not to answer queries for the domain. That's how easy you can block 99% of users, which is good enough.

And eventually, when all our hardware is runs-software-and-settings-signed-by-approved-entity-only, that last 1% can't do anything about it either.

New comment by Pesthuf in "UK once again demands backdoor to Apple's encrypted cloud storage"

Pesthuf — Wed, 01 Oct 2025 17:59:52 +0000

Looks like I finally found some common ground with the US government. May the UK fail again.

New comment by Pesthuf in "Scammed out of $130K via fake Google call, spoofed Google email and auth sync"

Pesthuf — Thu, 18 Sep 2025 07:46:48 +0000

Did the OTP message they sent you state that this code was specifically to authenticate on the phone?

If it did and even included details like the person‘s name, that would make me feel safe. If it’s a generic OTP that could be used to log into my account or reset its password, though…

New comment by Pesthuf in "macOS Tahoe"

Pesthuf — Tue, 16 Sep 2025 08:59:09 +0000

Maybe once it’s round enough, we’ll get a round Apple Watch screen.

New comment by Pesthuf in "Denmark's Justice Minister calls encrypted messaging a false civil liberty"

Pesthuf — Mon, 15 Sep 2025 15:49:36 +0000

If the police has a warrant, they can present it to your phone provider who are then required to send the data they have about you and your phone calls. This data may include the actual recorded conversations if allowed by the warrant.

This is regulated in the Telekommunikations-Überwachungsverordnung (TKÜV).

Edit: nvm, I didn't see this was about the GDR.

New comment by Pesthuf in "macOS Tahoe is certified Unix 03 [pdf]"

Pesthuf — Sun, 14 Sep 2025 15:11:17 +0000

I wish jq would be in the posix standard. JSON is EVERYWHERE nowadays. A system that can’t parse it is incomplete. Not having a standard way to write a script that does it and works across *nixes is a mistake.

New comment by Pesthuf in "Doorbell prankster that tormented residents of apartments turns out to be a slug"

Pesthuf — Fri, 12 Sep 2025 11:45:06 +0000

Who knows if that interview even happened. Bild makes up stuff all the time, or bends the truth to make it more interesting or fit their narrative better.

My ass would be offended if so wiped it with a BILD "news"paper.

New comment by Pesthuf in "Many women have 'lost' their boyfriends because of OpenAI's GPT-5"

Pesthuf — Sat, 09 Aug 2025 09:50:35 +0000

Why don’t they just write a system prompt? If you want GPT 5 to be a sycophantic empath who validates every keystroke in every message you send, it’ll generate texts like that.

New comment by Pesthuf in "Window Activation"

Pesthuf — Fri, 08 Aug 2025 15:11:49 +0000

…if that was the reason, why would the operating systems give other applications the right to steal focus and record keystrokes? They control the kernel, they don’t need that.

New comment by Pesthuf in "Sign in with Google in Chrome"

Pesthuf — Tue, 29 Jul 2025 10:43:41 +0000

On today's episode of "Addicted to the AdTech browser": Our protagonist face yet another case of being fucked over by their favorite advertisement and surveillance vehicle disguised as a web browser. How will they gaslight themselves into keeping their toxic relationship with Chrome alive rather than switching to a browser that respects their privacy and sanity this time?!

> Just one more extension, just one more chrome://flags tweak... He loves me, he respects me, he just has a ... unique way of showing it... I'll just tell my friends I fell and that's why my eye is black... Chrome, I'm sorry I'm not good enough, I probably deserve this...

New comment by Pesthuf in "Exploring Coroutines in PHP"

Pesthuf — Tue, 08 Jul 2025 12:26:54 +0000

I once had a use case where I wrapped a callback based library (Amazon's S3 library I think) call to instead return an iterator. Couldn't do that with only a generator since you can't yield in the callback itself. And it wasnt possible to write a custom iterator class since the library didn't give you back control until it was done.

That was the first and only time they were kinda useful to me.

New comment by Pesthuf in "AV1@Scale: Film Grain Synthesis, The Awakening"

Pesthuf — Fri, 04 Jul 2025 10:18:00 +0000

>This grain, formed from tiny particles during the film’s development, is more than just a visual effect. It plays a key role in storytelling by enhancing the film’s depth and contributing to its realism

That's one hell of an exaggeration. But even if that was true, I don't see how removing it, then adding fake on in would help. That entire sentence really has a "written by ChatGPT" smell. >It's not just X. It's Y".

New comment by Pesthuf in "Bzip2 crate switches from C to 100% Rust"

Pesthuf — Wed, 18 Jun 2025 15:55:01 +0000

If it hasn't seen an upstream release since 2019, doesn't that mean the implementation is just... finished? Maybe there's no more bugs to fix and features to add. And in that case, I don't see what's wrong with it.

New comment by Pesthuf in "Apple warns Australia against joining EU in mandating iPhone app sideloading"

Pesthuf — Fri, 06 Jun 2025 17:01:03 +0000

The entire EU is in flames ever since they allowed "sideloading". Every device is compromised, people are eating their children to survive.

This is what Apple and macrumors users actually believe.