<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Sebb767</title><link>https://news.ycombinator.com/user?id=Sebb767</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 15 Apr 2026 00:51:41 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Sebb767" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Sebb767 in "GitHub Stacked PRs"]]></title><description><![CDATA[
<p>> Unless you have a “every commit must build” rule, why would you review commits independently?<p>Security. Imagine commit #1 introduces a security vulnerability (backdoor) and the features. Then #2 introduces a non-obvious, harmless bug and closes the vulnerability introduced in #1 [0]. At some point, the bug will surface and rolling back commit #2 will be an easy fix, re-introducing your bug.<p>Alternatively, one of the earlier commits might, for example, contain credential dumping code. Once that commit is mainlined, CI might either automatically run on it or will be able to be run on it since it's no longer marked as unsafe PR.<p>[0] Think something like #1 introduces array access and #2 adds a bounds-check in a function a layer above - a reviewer with the whole context will see the bounds check and (possibly) consider it fine, but to someone rolling back a commit the necessity will not be obvious.</p>
]]></description><pubDate>Tue, 14 Apr 2026 13:22:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47765332</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=47765332</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47765332</guid></item><item><title><![CDATA[New comment by Sebb767 in "Oneplus phone update introduces hardware anti-rollback"]]></title><description><![CDATA[
<p>What was the issue with the Nord line?</p>
]]></description><pubDate>Sun, 25 Jan 2026 21:32:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=46758504</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=46758504</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46758504</guid></item><item><title><![CDATA[New comment by Sebb767 in "Why does SSH send 100 packets per keystroke?"]]></title><description><![CDATA[
<p>Each of our devices spents a lot of energy dedicated to encryption. By now, all disks you did not set up manually are most likely encrypted and hardly any unencrypted package will travel out of your network. That's not to mention the tons of load and dedicated hardware we have just to terminate https and scan traffic for suspicious activity or the hardware being replaced because it's internal security triggered/broke.<p>In a perfect world, we could send all traffic completely unencrypted and never scan for a malicious payload, saving all that energy and hardware. But we do not live in that world and drawing the line with this minor, mostly unintrusive security feature seems strange.</p>
]]></description><pubDate>Fri, 23 Jan 2026 13:21:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46732176</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=46732176</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46732176</guid></item><item><title><![CDATA[New comment by Sebb767 in "James Moylan, engineer behind arrow signaling which side to refuel a car, dies"]]></title><description><![CDATA[
<p>Usually, it will be where the passenger side is in the cars home market. That is left for Japanese and British vehicles and right for US and German ones.<p>Fun fact, for single exhaust cars, the exhaust will usually be on the driver side, in order to route around the fuel tank :-)</p>
]]></description><pubDate>Fri, 02 Jan 2026 08:50:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=46462786</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=46462786</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46462786</guid></item><item><title><![CDATA[New comment by Sebb767 in "I took all my projects off the cloud, saving thousands of dollars"]]></title><description><![CDATA[
<p>> Probably because actual time required to manage a db server is really unpredictable.<p>This, and also startups are quite heterogeneous. If you have an engineer on your team with experience in hosting their own servers (or at least a homelab-person), setting up that service with sufficient resiliency for your average startup will be done within one relaxed afternoon. If your team consists of designers and engineers who hardly ever used a command line, setting up a shaky version of the same thing will cost you days - and so will any issue that comes up.</p>
]]></description><pubDate>Tue, 04 Nov 2025 23:10:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=45816959</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45816959</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45816959</guid></item><item><title><![CDATA[New comment by Sebb767 in "I took all my projects off the cloud, saving thousands of dollars"]]></title><description><![CDATA[
<p>I dislike those black and white takes a lot. It's absolutely true that most startups that just run an EC2 instance will save a lot of cash going to Hetzner, Linode, Digital Ocean or whatever. I do host at Hetzner myself and so do a lot of my clients.<p>That being said, the cloud does have a lot of advantages:<p>- You're getting a lot of services readily available. Need offsite backups? A few clicks. Managed database? A few clicks. Multiple AZs? Available in seconds.<p>- You're not paying up-front costs (vs. investing hundreds of dollars for buying server hardware) and everything is available <i>right now</i> [0]<p>- Peak-heavy loads can be a lot cheaper. Mostly irrelevant for you average compute load, but things are quite different if you need to train an LLM<p>- Many services are already certified according to all kinds of standards, which can be very useful depending on your customers<p>Also, engineering time and time in general can be expensive. If you are a solo entrepreneur or a slow growth company, you have a lot of engineering time for basically free. But in a quick growth or prototyping phase, not to speak of venture funding, things can be quite different. Buying engineering time for >150€/hour can quickly offset a lot of saving [1].<p>Does this apply to most companies? No. Obviously not. But the cloud is not too expensive - you're paying for stuff you don't need. That's an entirely different kind of error.<p>[0] Compared to the rack hosting setup described in the post. Hetzner, Linode, etc. do provide multiple AZs with dedicated servers.<p>[1] Just to be fair, debugging cloud errors can be time consuming, too, and experienced AWS engineers will not be cheaper. But an RDS instance with solid backups-equivalent will usually not amortize quickly, if you need to pay someone to set it up.</p>
]]></description><pubDate>Tue, 04 Nov 2025 22:48:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=45816786</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45816786</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45816786</guid></item><item><title><![CDATA[New comment by Sebb767 in "Counter-Strike's player economy is in a freefall"]]></title><description><![CDATA[
<p>It would be more correct to say that most _payments_ happen off-platform. They still use the Steam API for trades, but it's just bots trading with players for nothing and payment is facilitated offsite.</p>
]]></description><pubDate>Fri, 24 Oct 2025 10:18:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=45693001</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45693001</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45693001</guid></item><item><title><![CDATA[New comment by Sebb767 in "Ask HN: Our AWS account got compromised after their outage"]]></title><description><![CDATA[
<p>> Always, always log in through bookmarked links or typing them manually. Never use a link in an email unless it's in direct response to something you initiated and even then examine it carefully.<p>If you still want to avoid the comfort of typing in stuff manually or navigating the webinterface, logging in on a new tab and then clicking on the link is also an option.</p>
]]></description><pubDate>Wed, 22 Oct 2025 12:33:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=45668083</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45668083</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45668083</guid></item><item><title><![CDATA[New comment by Sebb767 in "Delete FROM users WHERE location = 'Iran';"]]></title><description><![CDATA[
<p>> There's no proof that your catastrophic imaginary scenario would actually happen.<p>There is, just read TFA.<p>> Financial transactions happen all the time and are plenty cheap, they just don't do any with sanctioned entities.<p>And that's exactly the point. They are cheap because people are protected by the corporate veil (as long as they don't explicitly do something highly illegal). Anything where people are suddenly personally liable, they stay far away from. If we apply the same harsh punishments to all financial crime as we do for interacting with sanctioned countries, people will stay far away from interacting with that and those that don't will either demand truck loads of money or also be shady in other ways (most likely both).<p>> Nobody would claim such BS in good faith.<p>Someone reading my comment in good faith would have been able to see the point that I was making, which actually is pretty distinct from what you appear to be arguing against.</p>
]]></description><pubDate>Mon, 29 Sep 2025 12:02:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=45412643</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45412643</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45412643</guid></item><item><title><![CDATA[New comment by Sebb767 in "Delete FROM users WHERE location = 'Iran';"]]></title><description><![CDATA[
<p>> They know what works - threaten executives with prison.<p>The problem is that it works <i>too well</i>. As you can clearly see, the solution basically everyone individually applies is to stay clear of anything that might be an issue by several miles.<p>If you apply the same reasoning to things like private data handling, little things like just shipping stuff will be prohibitively expensive, as no one will want to handle private data like addresses and instead go to a provider, which will need excessive amounts of cash and red tape to do anything for taking on that liability. Building stuff will become impossible, as all of the current red tape will be exponentially expanded with liability checks against any possible pollution. Founding a company will basically never happen, because no one wants to risk 20+ years in jail - and if they do, they'll simply turn to crime, because if your risk profile is that off anyway, not paying taxes will just be a minuscule risk increase.<p>I'm not saying that there's no political incentive to ignore those issues and keep fines low, but piercing the corporate veil is the nuclear option and there is a reason it's used so little.</p>
]]></description><pubDate>Tue, 23 Sep 2025 11:54:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=45345701</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45345701</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45345701</guid></item><item><title><![CDATA[New comment by Sebb767 in "The Synology End Game"]]></title><description><![CDATA[
<p>If you need a lot of (not so fast) storage, 3,5" drives are still by far the best TB per €. For a lot of NAS solutions (backups, video/movie/music storage etc.) their performance is completely fine.<p>Plus, we're most likely talking about Gigabit networking here, so unless your workload consists of very parallel random access, this is going to be the limiting factor anyway.</p>
]]></description><pubDate>Fri, 29 Aug 2025 10:22:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=45062303</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=45062303</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45062303</guid></item><item><title><![CDATA[New comment by Sebb767 in "Weaponizing image scaling against production AI systems"]]></title><description><![CDATA[
<p>It could be made harder, yes. This depends a lot on how the text is hidden and what kind of noise you use, though. Also, this would quite likely also impact legit usecases - you'll obscure intended text and details, as well.</p>
]]></description><pubDate>Thu, 21 Aug 2025 20:02:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=44977367</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44977367</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44977367</guid></item><item><title><![CDATA[New comment by Sebb767 in "I'm worried it might get bad"]]></title><description><![CDATA[
<p>> and successfully avoided using Llm development these last few years.<p>I'm not sure that's much of an achievement, to be honest. If you tried it and it turned out to be not useful for you, fine, I'm on your side. But refusing to try for the sake of it seems backwards. I mean, then why use CI, version control and those fancy IDEs anyway? Notepad is a perfectly cromulent text editor (and what is code, if not text, anyway?) and my local build.bat and deploy.bat do their job nicely and quickly.</p>
]]></description><pubDate>Wed, 13 Aug 2025 16:19:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=44890438</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44890438</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44890438</guid></item><item><title><![CDATA[New comment by Sebb767 in "I'm worried it might get bad"]]></title><description><![CDATA[
<p>> And I think that then leads to calls for:<p>> - Redistribution of wealth<p>We can talk about excessively wealthy individuals all day, but I'm pretty sure that most knowledge workers are not going to be on the receiving side of wealth redistribution. This is even more likely to be true for the programmers affected by these tech layoffs.</p>
]]></description><pubDate>Wed, 13 Aug 2025 15:05:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=44889426</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44889426</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44889426</guid></item><item><title><![CDATA[New comment by Sebb767 in "GitHub is no longer independent at Microsoft after CEO resignation"]]></title><description><![CDATA[
<p>> but you can also run most Windows and Linux applications (in a VM).<p>This is really just a cheap rhetorical trick. Linux [0] can run just as much software, if you include VMs, but you can't legally virtualize MacOS, therefore buying a Mac is the only way to legally run their software, in addition to everything else. Now, you are technically correct, but the casual interpretation of<p>> Eh, macOS is still the UNIX with the most commercial software available.<p>isn't really that you can simply run everything unavailable on MacOS in a VM (or several layers of VMs). It's the same as arguing that Powerpoint is all you ever need, as it is Turing complete.<p>[0] And so can Windows, if you run said VMs in a Linux VM.</p>
]]></description><pubDate>Mon, 11 Aug 2025 22:14:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=44870062</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44870062</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44870062</guid></item><item><title><![CDATA[New comment by Sebb767 in "Weather satellites detect 515-mile-long lightning flash"]]></title><description><![CDATA[
<p>An NFL football field is 120 yards, according to WolframAlpha (which I used for the calculation).</p>
]]></description><pubDate>Wed, 06 Aug 2025 01:02:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=44806484</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44806484</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44806484</guid></item><item><title><![CDATA[New comment by Sebb767 in "How to prove false statements: Practical attacks on Fiat-Shamir"]]></title><description><![CDATA[
<p>> "all crypto is fraud" stands alone just fine.<p>It might, but in this case it is preceded by "This is why", which makes the sentence as a whole simply wrong.</p>
]]></description><pubDate>Thu, 10 Jul 2025 12:32:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=44520275</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44520275</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44520275</guid></item><item><title><![CDATA[New comment by Sebb767 in "Jokes and Humour in the Public Android API"]]></title><description><![CDATA[
<p>> BTW I used to browse tcrf.net and it was so interesting that video game developers would leave pieces of themselves in their work. Love letters, old memes, angry letters, random shit, whatever.<p>This is quite dependent on the games you play. Modern games are becoming larger, which makes the project overall more serious and makes it harder to hide easter eggs. That being said, Indie games with small teams still contain a lot of fun and even AAAs can still contain some goodies.</p>
]]></description><pubDate>Mon, 16 Jun 2025 09:11:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=44287802</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44287802</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44287802</guid></item><item><title><![CDATA[New comment by Sebb767 in "The value isn't in the code (2022)"]]></title><description><![CDATA[
<p>> And I’d go further than that. I’d suggest that, contrary to what intuition might tell you, refactoring might be better achieved by throwing the code away and starting again.<p>I don't think this applies in most situations. If you have been part of the original core team and are rewriting the app in the same way, this might be true - basically a lost code situation, like the author was in.<p>However, if you are doing so because you lack understanding of the original code or you are switching the stack, you will inevitably find new obstacles and repeat mistakes that were fixed in the original prototype. Also, in a real world situation, you probably also have to handle fun things like data import/migration, upgrading production instances and serving customers (and possibly fixing bugs) while having your rewrite as a side project. I'm not saying that a rewrite is never the answer, but the authors situation was pretty unique.</p>
]]></description><pubDate>Wed, 21 May 2025 00:13:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=44047160</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=44047160</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44047160</guid></item><item><title><![CDATA[New comment by Sebb767 in "I ruined my vacation by reverse engineering WSC"]]></title><description><![CDATA[
<p>> * Defer has an overloaded operator%. It's a template function, which takes a callable object (type is the template parameter Callable) and returns a DeferHolder<Callable> instance.<p>Is there any reason to use operator% instead of a normal method call? Except possibly looking cool, which doesn't seem useful given that the call is hidden away in a macro anyway.</p>
]]></description><pubDate>Mon, 12 May 2025 10:16:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=43961399</link><dc:creator>Sebb767</dc:creator><comments>https://news.ycombinator.com/item?id=43961399</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43961399</guid></item></channel></rss>