Hacker News: Shank

New comment by Shank in "Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM"

Shank — Thu, 28 May 2026 14:26:37 +0000

It's kind of like how if you owe the bank $1000, you have a problem, but if you owe a bank $100M, they have a problem. You just can't reasonably ignore a huge portion of the class as a professor without a serious amount of documentation, and proof that you've tried to escalate and solve the issue. Ultimately, people are paying for these courses, and it's probably better to teach something rather than nothing.

New comment by Shank in "What Is a Direct Attach Copper (DAC) Cable"

Shank — Wed, 27 May 2026 12:28:13 +0000

I’m a huge fan of fiber optic cables instead of DAC. For one thing, the distance you can run is far greater. For another, they don’t get as hot as metal cables, particularly at high speeds. OM3 and OM4 is actually quite affordable and SFP+ is nice.

Yes on an absolute sense, DAC can be cheaper, but for a homelab or something, it’s not that much different. Also, it’s much cooler to run fiber optic to things (imho).

New comment by Shank in "Microsoft Copilot Cowork Exfiltrates Files"

Shank — Tue, 26 May 2026 04:10:30 +0000

> Does Cowork help with reading email?

Yes. It can read email.

New comment by Shank in "Search engines alternatives now that Google isn't Google anymore"

Shank — Mon, 25 May 2026 12:46:26 +0000

I find it great for Japanese, provided you search in the Japanese language mode.

New comment by Shank in "Bun support is now limited and deprecated"

Shank — Fri, 22 May 2026 19:44:08 +0000

> Rockets failing in test flights isn't a bad thing.

I hate to be pedantic but for a whole host of environmental reasons, they are suboptimal, and it still incinerates money to lose a rocket during a flight test.

A Comparative Security Analysis of Three Cloud-Based Password Managers

Shank — Fri, 22 May 2026 16:43:09 +0000

Article URL: https://eprint.iacr.org/2026/058

Comments URL: https://news.ycombinator.com/item?id=48238301

Points: 1

# Comments: 0

New comment by Shank in "The Companies Cutting Headcount for AI Will Lose to the Ones Who Didn't"

Shank — Fri, 22 May 2026 13:01:41 +0000

The problem that software engineers and product teams often face is that the time from roadmap to feature is quite long, and AI has offered a clear, meaningful speedup to some parts, like writing tests and boilerplate. In many cases, the same ticket flow can be managed much faster with AI. So, what? We're not quite at the point where people have transitioned this into demand for more product deliveries faster. As soon as that occurs, it doesn't matter how great the AI is, because the current pace will be slow. Why stop at what the current roadmap is? Why not ask for double the features? When we gave everyone power tools that didn't dramatically make construction easier, it just enabled more complex buildings.

New comment by Shank in "Get your passwords out of Bitwarden while you still can"

Shank — Thu, 21 May 2026 16:07:38 +0000

You can leave via Strongbox (a KeePassXC client), which supports the new export system that includes Passkeys.

New comment by Shank in "Incident Report: May 19, 2026 – GCP Account Suspension"

Shank — Thu, 21 May 2026 06:07:01 +0000

> As a former GCP consultant, I can share that these sort of shut downs aren't random and it's usually due to the customer not being compliant - that breaks cloud compliance requirements for the big clouds, so automated systems flag it. Eg. Someone serving CP on their CDN, for instance.

If this was the case it would obviously be horrific. I did check to see, and I noticed that Railway is not listed as an ESP who sent any reports to NCMEC / CyberTipline in 2025, which seems like the wrong number for a hosting provider. Maybe they just have absurdly good customers.

https://www.missingkids.org/content/dam/missingkids/pdfs/202...

New comment by Shank in "Incident Report: May 19, 2026 – GCP Account Suspension"

Shank — Wed, 20 May 2026 17:46:23 +0000

> If the timestamps are accurate, what was causing the errors 10 minutes before the account was suspended?

Assuming the timestamps are accurate, Google probably started terminating resources while the account was not "suspended" and only completed that after all resources were disabled.

New comment by Shank in "GitHub is investigating unauthorized access to their internal repositories"

Shank — Wed, 20 May 2026 05:48:09 +0000

I would say, first and foremost, the era where a developer machine with source code access also has access to meaningful security systems should be over. Internal repository access should mean nothing. It's just text files. It does look like this is the case here, where there aren't actually meaningful outcomes from this, but this should be the case everywhere. Isolate these systems from each other. GitHub compromise could happen at any time, even from GitHub themselves.

New comment by Shank in "Disney erased FiveThirtyEight"

Shank — Wed, 20 May 2026 05:45:06 +0000

> For archival purposes, I'd think everything is still in the internet archive?

I encourage anyone who thinks this is true to actually look for things in the internet archive and report back success. If you have the original exact URL you might be able to easily find something in the wayback machine, but if you have only a vague inclination that something existed and a general timeframe, it's a needle in a haystack. The wayback machine is, also extremely slow to retrieve data.

New comment by Shank in "Incident Report: Railway Blocked by Google Cloud [resolved]"

Shank — Wed, 20 May 2026 03:56:10 +0000

At a minimum you should contact AWS before you launch a phishing page as a test that targets AWS customers.

New comment by Shank in "Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised"

Shank — Tue, 19 May 2026 13:47:22 +0000

I mean that's lovely, but you still store confidential data, I assume, like credentials on your development machine? This doesn't solve anything but the least important "reinstall the OS post-compromise" step.

New comment by Shank in "Claude for Legal"

Shank — Thu, 14 May 2026 21:52:06 +0000

It seems like they ripped out Lexis, which is probably one of the most important tools for lawyers: https://github.com/anthropics/claude-for-legal/pull/5.

New comment by Shank in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"

Shank — Mon, 13 Apr 2026 18:52:02 +0000

> And with this much at stake, they can afford to simply buy your software dependencies, or to offer one of your employees some retirement money in exchange for making a "mistake".

LAPSUS$ was prolific by just bribing employees with admin access. This is far from theoretical. Just imagine the kind of money your average nation state has laying around to bribe someone with internal access.

New comment by Shank in "Microsoft isn't removing Copilot from Windows 11, it's just renaming it"

Shank — Mon, 13 Apr 2026 16:38:24 +0000

If you turn off Apple Intelligence, it’s one switch and features like that are gone from every single location.

New comment by Shank in "Google removes "Doki Doki Literature Club" from Google Play"

Shank — Mon, 13 Apr 2026 06:30:07 +0000

> I think it could use a few trigger warnings

Doesn't DDLC start with the following?

> This game is not suitable for those who are easily disturbed. Individuals suffering from anxiety or depression may not have a safe experience playing this game. For content warnings, please visit https://ddlc.moe/warning.

Then the plus version even added in-game content warnings?

https://teamsalvato.com/news/updates-to-content-warnings-in-...

Also, the game is rated PEGI 18, USK 18, M, CERO C, in various countries.

New comment by Shank in "Apple update looks like Czech mate for locked-out iPhone user"

Shank — Sun, 12 Apr 2026 10:20:01 +0000

Continuity has never worked on the lock screen and certainly not in the BFU state.

New comment by Shank in "Has Mythos just broken the deal that kept the internet safe?"

Shank — Fri, 10 Apr 2026 23:48:22 +0000

> I guess when an AI proves that P!=NP,

What would be the practical impacts of this discovery?