<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Scryptonite</title><link>https://news.ycombinator.com/user?id=Scryptonite</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 04 Jun 2026 09:23:18 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Scryptonite" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Scryptonite in "Various LLM Smells"]]></title><description><![CDATA[
<p>I personally wonder if the writing (and coding) smells are being leveraged for watermarking/steganography. Like, if it's quirky but intentional; they're biding the time, leaving breadcrumbs so they can more effectively sift new internet content, or perhaps tracing/de-anonymizing.<p>I can also see how it is not necessarily the case, since all models seem plagued by having unique cliche patterns. We all seem to experience the writing smells from the same models. I see 'cleanly' a lot less from GPT 5.5 vs <5.4</p>
]]></description><pubDate>Fri, 29 May 2026 03:48:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48318785</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=48318785</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48318785</guid></item><item><title><![CDATA[New comment by Scryptonite in "WebGPU-Based WiFi Simulator"]]></title><description><![CDATA[
<p>When I run the Waveguide Simulator demo on my Alienware M15 Ryzen Ed. R5 (has a RTX 3070; Windows 11 Pro, Chrome v129), I hear a distinct high pitched flutter noise emanating from my laptop. I thought it was from the speakers, but no, with my volume down it was still present as long as the simulator was playing. Weird, but very cool demo (probably my hardware, never hear this during games or other WebGPU demos). The realistic house simulation yields a different signature in the sound.</p>
]]></description><pubDate>Sun, 20 Oct 2024 20:14:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=41898167</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=41898167</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41898167</guid></item><item><title><![CDATA[New comment by Scryptonite in "Bun v1.1.22"]]></title><description><![CDATA[
<p>No question, just want to say Bun is awesome and thank you.<p>(minor nit: release article says "Uint8Array.prototype.fromBase64()" when it's actually "Uint8Array.fromBase64()" per the code sample. Same for .fromHex)</p>
]]></description><pubDate>Thu, 08 Aug 2024 02:47:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=41187647</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=41187647</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41187647</guid></item><item><title><![CDATA[New comment by Scryptonite in "YouTube will delete existing video annotations on January 15, 2019"]]></title><description><![CDATA[
<p>Or they could keep an archive of the annotations and provide a process for the video owners to choose to have Google 'bake' them into the video permanently after they've been shut off from being used by mainstream YT interfaces. Annotation links could be visually represented in a way that indicates their link could now be found in the description.</p>
]]></description><pubDate>Tue, 27 Nov 2018 09:23:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=18540829</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=18540829</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=18540829</guid></item><item><title><![CDATA[New comment by Scryptonite in "Presidential Alerts"]]></title><description><![CDATA[
<p>> The name just automatically angers a significant portion of the population, no matter who the president happens to be.<p>I think that pretty much speaks to how shamefully bad politics has gotten here in the US. I see a couple of comments that jump to speculate that it could be used as a tool of politics, or that they would rather opt-out of knowing about an imminent threat to themselves and/or their fellow American's lives. I think it's selfish, considering smoke and CO2 detectors can't warn you of nuclear attacks. If an office of the state was responsible for calling out a fire in the building, I would want every chance to be informed, regardless of whether or not they were my prefered elected official. Obviously, if the system was abused I would want it to be fixed.</p>
]]></description><pubDate>Wed, 03 Oct 2018 19:13:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=18133761</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=18133761</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=18133761</guid></item><item><title><![CDATA[New comment by Scryptonite in "Valid use cases for autocomplete=off"]]></title><description><![CDATA[
<p>Previous discussion about this in 2016: <a href="https://news.ycombinator.com/item?id=11911116" rel="nofollow">https://news.ycombinator.com/item?id=11911116</a><p>Last I checked you can always give Chrome a stronger hint not to autocomplete using something like this:<p><pre><code>    document.querySelectorAll("input[autocomplete=off]")
        .forEach(element =>
            element.autocomplete = window && window.chrome ? "hell-no-chrome" : "off"
        );
</code></pre>
I think it's a shame that they didn't design UI or something to coordinate with the user to override it in less well-behaved web apps. Instead, they just decided to ignore it completely.</p>
]]></description><pubDate>Fri, 28 Sep 2018 22:24:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=18097556</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=18097556</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=18097556</guid></item><item><title><![CDATA[New comment by Scryptonite in "Mixing Vue.js templates with server-side templates can lead to XSS"]]></title><description><![CDATA[
<p>Yup. Obfusticating using a tool like <a href="http://www.jsfuck.com" rel="nofollow">http://www.jsfuck.com</a> would get around the lack of quotations.<p>If the result was too verbose, you can always handroll your own JS:<p><pre><code>    {{constructor.constructor(constructor.name.constructor.fromCharCode(97,108,101,114,116,40,39,120,115,115,39,41))()}}</code></pre></p>
]]></description><pubDate>Mon, 26 Feb 2018 03:30:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=16462867</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=16462867</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=16462867</guid></item><item><title><![CDATA[New comment by Scryptonite in "Mixing Vue.js templates with server-side templates can lead to XSS"]]></title><description><![CDATA[
<p>Makes sense because htmlspecialchars() doesn't protect against malicious Vue template expressions, it only converts characters that are used to represent html tags, entities or attributes (<>"'&) IIRC.<p>I think another solution (besides v-pre) to "fixing" it (though you might say that relying on htmlspecialchars() to protect against user-supplied {{vue expressions}} was unwise to begin with) is to replace { and } with &#123; and &#125; after using htmlspecialchars/htmlentities.<p>EDIT: Another solution would be to pass a different set of delimiters to Vue that uses characters that would be escaped by htmlspecialchars, like demonstrated in [1] or like so:<p><pre><code>    Vue.options.delimiters = ['<%', '%>'];
</code></pre>
[1]: <a href="https://stackoverflow.com/a/40538194/4522571" rel="nofollow">https://stackoverflow.com/a/40538194/4522571</a></p>
]]></description><pubDate>Mon, 26 Feb 2018 01:47:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=16462409</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=16462409</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=16462409</guid></item><item><title><![CDATA[New comment by Scryptonite in "How to write a JavaScript-free todo app using just HTML and CSS"]]></title><description><![CDATA[
<p>I made something very similar for fun a few years ago[0] and added it to a repository called You-Dont-Need-JavaScript[1].<p>CSS-only for this sort if thing is totally contrived, but making it still proved to be a fun little exercise.<p>[0]: <a href="https://codepen.io/scryptonite/pen/oLGzdj" rel="nofollow">https://codepen.io/scryptonite/pen/oLGzdj</a><p>[1]: <a href="https://github.com/you-dont-need/You-Dont-Need-JavaScript" rel="nofollow">https://github.com/you-dont-need/You-Dont-Need-JavaScript</a></p>
]]></description><pubDate>Mon, 30 Oct 2017 20:57:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=15588806</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=15588806</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15588806</guid></item><item><title><![CDATA[New comment by Scryptonite in "Defending a website with Zip bombs"]]></title><description><![CDATA[
<p>Reminds me of a time I once wrote a script in Node to send an endless stream of bytes at a slow & steady pace to bots that were scanning for vulnerable endpoints. It would cause them to hang, preventing them from continuing on to their next scanning job, some remaining connected for as long as weeks.<p>I presume the ones that gave out sooner were manually stopped by whoever maintains them or they hit some sort of memory limit. Good times.</p>
]]></description><pubDate>Thu, 06 Jul 2017 05:15:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=14708292</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=14708292</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=14708292</guid></item><item><title><![CDATA[A new beginning for THX]]></title><description><![CDATA[
<p>Article URL: <a href="https://medium.com/@thxltd/a-new-beginning-for-thx-why-i-sold-my-company-in-my-first-year-8d2398b1e4df">https://medium.com/@thxltd/a-new-beginning-for-thx-why-i-sold-my-company-in-my-first-year-8d2398b1e4df</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=12730681">https://news.ycombinator.com/item?id=12730681</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Mon, 17 Oct 2016 23:12:17 +0000</pubDate><link>https://medium.com/@thxltd/a-new-beginning-for-thx-why-i-sold-my-company-in-my-first-year-8d2398b1e4df</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=12730681</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=12730681</guid></item><item><title><![CDATA[New comment by Scryptonite in "Stretching the limits of CSS 3: Amazing creations in pure CSS"]]></title><description><![CDATA[
<p>I once made a CSS-only Todo List[1] that demonstrated chaining sibling selectors, using the :checked psuedo selector, CSS counters and some other things to "enhance" a Todo without using JS (technically JS is used in a Jade template to compile the necessary HTML and CSS). CSS is pretty powerful.<p>1: <a href="http://codepen.io/scryptonite/pen/oLGzdj?editors=1000" rel="nofollow">http://codepen.io/scryptonite/pen/oLGzdj?editors=1000</a></p>
]]></description><pubDate>Thu, 15 Sep 2016 18:11:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=12508403</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=12508403</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=12508403</guid></item><item><title><![CDATA[New comment by Scryptonite in "“autocomplete=off is ignored on non-login input elements”"]]></title><description><![CDATA[
<p>It's tough to say that Chrome made the right call, as I enjoy being able to (in theory) rely on browsers aiming to be standard compliant. The standard is there for a reason, no?<p>I noticed that the Chrome team also developed a feature called Threaded scrolling in an attempt to improve site UX, but instead (or additionally?) completely ruins the ability to rely on onscroll/onmousewheel events (let alone being able to trust the values pulled from scrollLeft/scrollTop using requestAnimationFrame or similar). This can be seen on these two GIFs, with threaded scrolling enabled (currently the default behavior): <a href="https://gfycat.com/DiligentHomelyIndianelephant" rel="nofollow">https://gfycat.com/DiligentHomelyIndianelephant</a> and with threaded scrolling disabled (behind a chrome flag): <a href="https://gfycat.com/SlimDefinitiveErin" rel="nofollow">https://gfycat.com/SlimDefinitiveErin</a><p>The same flag/feature is active on mobile Chrome as well, so the same effect can be seen. The only way to guarantee jank-free work with scroll position (for parallax or w/e) is to implement handling user-input-to-scroll-behavior entirely yourself, which is rather unfortunate imo.<p>You can play with this yourself: <a href="http://jsbin.com/mohehotupe/edit" rel="nofollow">http://jsbin.com/mohehotupe/edit</a> (might need to click "Run with JS" / or tick "Auto-run JS" to start the scroll-listening script)<p>My take on autocomplete is that the standard says it's something I can disable, so autocomplete="off" is simply something the browser should obey. I have no problems with users using extensions or taking "advantage" of a browser setting to "fix" websites they say have abused this attribute. But there are valid use cases for disabling autocomplete as other comments have mentioned, and all they have done is make it to where I just have to do autocomplete="sudo-off" and it "works". But what happens when other webmasters misuse the attribute again? Might as well just toss support for it if they really can't trust the page to do the right thing.</p>
]]></description><pubDate>Wed, 15 Jun 2016 20:04:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=11911759</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=11911759</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=11911759</guid></item><item><title><![CDATA[New comment by Scryptonite in "IBM Watson's Visual Recognition Demo"]]></title><description><![CDATA[
<p>It classified this Labrador-"I HAVE NO IDEA WHAT I AM DOING"-meme: <a href="http://i.imgur.com/ZQaM2D7.jpg" rel="nofollow">http://i.imgur.com/ZQaM2D7.jpg</a> as vip: 45%, moustache: 45%, person: 26%<p><a href="http://i.imgur.com/FYkxCNS.png" rel="nofollow">http://i.imgur.com/FYkxCNS.png</a></p>
]]></description><pubDate>Tue, 22 Mar 2016 19:35:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=11339330</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=11339330</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=11339330</guid></item><item><title><![CDATA[New comment by Scryptonite in "Amazon Dash Button"]]></title><description><![CDATA[
<p>I think that if they are remotely serious (being almost April 1st) I think I'd like to see them offer to bundle NFC stickers with each product purchase, so that I can place them near the product's point of use should I want to replace it at some point in the future.</p>
]]></description><pubDate>Tue, 31 Mar 2015 16:05:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=9297358</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=9297358</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=9297358</guid></item><item><title><![CDATA[New comment by Scryptonite in "Valve replaces Steam Controller touchscreen with new analog face buttons"]]></title><description><![CDATA[
<p>What makes a controller right handed?</p>
]]></description><pubDate>Sat, 15 Mar 2014 17:07:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=7405185</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=7405185</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=7405185</guid></item><item><title><![CDATA[New comment by Scryptonite in "Show HN: Add forms to your static site – no iFrames required"]]></title><description><![CDATA[
<p>This might also work:<p><pre><code>    <form action="//api.formspree.com/user.smith/gmail.com">
</code></pre>
Truthfully, base64 is probably better at deterring email harvesters.</p>
]]></description><pubDate>Tue, 25 Feb 2014 17:36:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=7299041</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=7299041</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=7299041</guid></item><item><title><![CDATA[New comment by Scryptonite in "Learn You The Node.js"]]></title><description><![CDATA[
<p>Least bytes?<p><pre><code>  var a=process.argv,i=a.length,x=0;while(i>2)x-=-a[--i];console.log(x)</code></pre></p>
]]></description><pubDate>Sun, 02 Feb 2014 01:43:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=7164389</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=7164389</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=7164389</guid></item><item><title><![CDATA[New comment by Scryptonite in "IBM Watson fires its own cancer-fighting ‘moonshot’"]]></title><description><![CDATA[
<p>A stab in the dark would be chips made from Graphene or IBM's Silicene, if I am to understand what you quoted.</p>
]]></description><pubDate>Sat, 19 Oct 2013 00:14:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=6574761</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=6574761</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=6574761</guid></item><item><title><![CDATA[New comment by Scryptonite in "Who exactly is crawling my site?"]]></title><description><![CDATA[
<p>I deal(t) with the same thing. I made it so my web server would try to stream a page that never ends, and some bots would stay connected for hours and hours. But over time they seem to have adapted.<p>I've also noticed some of them used to make requests synchronously (waiting for the previous to finish before making another), but they have adapted to make requests in parallel and add timeouts so they don't have their time wasted quite as long.<p>I created a log of the ones who stayed connected the longest.<p><a href="https://gist.github.com/scryptonite/5324724" rel="nofollow">https://gist.github.com/scryptonite/5324724</a><p>I don't bother to maintain it anymore, but it was pretty interesting watching them change tactics over time.</p>
]]></description><pubDate>Fri, 18 Oct 2013 21:02:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=6573991</link><dc:creator>Scryptonite</dc:creator><comments>https://news.ycombinator.com/item?id=6573991</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=6573991</guid></item></channel></rss>