Hacker News: StrauXX

New comment by StrauXX in "Why Switzerland has 25 Gbit internet and America doesn't"

StrauXX — Mon, 06 Apr 2026 08:06:11 +0000

Switzerland is one of the least homogenous countries in Europe! Four languages, relatively weak federal government with strong local (canton) governments. Most state services are handled on a localized (canton) level.

New comment by StrauXX in "LibreOffice – Let's put an end to the speculation"

StrauXX — Sun, 05 Apr 2026 21:11:33 +0000

I had the same impression. The introduction reads really unprofessionally.

AI Wafer Timeline

StrauXX — Tue, 31 Mar 2026 22:43:57 +0000

Article URL: https://xcancel.com/aakashgupta/status/2038813799856374135

Comments URL: https://news.ycombinator.com/item?id=47594448

Points: 2

# Comments: 0

Organizational Politics and the Security Program

StrauXX — Sun, 29 Mar 2026 19:16:08 +0000

Article URL: https://www.philvenables.com/post/organizational-politics-the-security-program

Comments URL: https://news.ycombinator.com/item?id=47566221

Points: 3

# Comments: 0

New comment by StrauXX in "My minute-by-minute response to the LiteLLM malware attack"

StrauXX — Sat, 28 Mar 2026 08:48:20 +0000

If your requirements are just to load balance between selhosted AI servers: nginx. If you want a more thorough system with configurability, logging, etc.: Bifrost from MaximAI

New comment by StrauXX in "My minute-by-minute response to the LiteLLM malware attack"

StrauXX — Fri, 27 Mar 2026 08:28:42 +0000

LiteLLM isn't a good choice for a proxy in any case. It introduces a lot of lag amd latency and the features are often half baked. To me, it looks like a vibecoded application without a product owner. And the code itself isn't very organized either. I evaluated it for a project a few months ago and will never use it for anything production. Theres a few much better alternatives out there.

New comment by StrauXX in "More common mistakes to avoid when creating system architecture diagrams"

StrauXX — Mon, 23 Mar 2026 07:50:48 +0000

You shouldn't! The official writings explicitly discourage creating third and fourth layer diagrams!

Clearing Member 991

StrauXX — Mon, 23 Mar 2026 07:37:44 +0000

Article URL: https://no01.substack.com/p/clearing-member-991

Comments URL: https://news.ycombinator.com/item?id=47486441

Points: 1

# Comments: 0

New comment by StrauXX in "Polymarket gamblers threaten to kill me over Iran missile story"

StrauXX — Fri, 20 Mar 2026 12:59:52 +0000

The "market" isn't a zero-sum-game though. Polymarket is.

New comment by StrauXX in "Meta’s AI smart glasses and data privacy concerns"

StrauXX — Tue, 03 Mar 2026 08:07:02 +0000

They are! This Tesla feature is illegal to use in Germany and Austria.

[1] (in German) https://www.derstandard.at/story/3000000215526/aktueller-fal...

New comment by StrauXX in "AI Made Writing Code Easier. It Made Being an Engineer Harder"

StrauXX — Sun, 01 Mar 2026 14:51:15 +0000

This tracks with the way a lot of heavily vibecoded projects have issues with beeing feature heavy, while those features often don't fully work and most importantly don't fit together cohesively. In other words, the quality is low.

New comment by StrauXX in "Danish government agency to ditch Microsoft software (2025)"

StrauXX — Thu, 26 Feb 2026 14:11:40 +0000

That's "just" the interpretation of TU Berlin. Here is the FOI request that was never answered: https://fragdenstaat.de/anfrage/onlyoffice-sanktionen/

Just to be clear: TU Berlin is probably right. But according to some sources (which I don't believe) OnlyOffice no longer has any connections to Russia and is now really from an EU company.

New comment by StrauXX in "Danish government agency to ditch Microsoft software (2025)"

StrauXX — Wed, 25 Feb 2026 12:42:11 +0000

OnlyOffice had some controversy around being owned and operated by a Russian company through shell companies. They might even fall under EU sanctions. There is an open German information request to the government that was never answered.

Wether those connections are true or not I can't say, but I do know people that dropped OnlyOffice in their evaluations for this reason.

New comment by StrauXX in "I verified my LinkedIn identity. Here's what I handed over"

StrauXX — Sat, 21 Feb 2026 12:53:59 +0000

Do you have a reference with more information on that?

New comment by StrauXX in "cURL removes bug bounties"

StrauXX — Thu, 22 Jan 2026 08:04:15 +0000

Simple. You multiple instances with different flags covering different threat models. RCE, file read, etc. You then expose a webapplication for every instance that lets users control only those curl flags, that must be safe to be user controlled in the reapective threat model.

New comment by StrauXX in "cURL removes bug bounties"

StrauXX — Wed, 21 Jan 2026 09:36:48 +0000

The process of finding bugs is still slow and time consuming. The kinds of vulnerabilities you find in codebases like cURL are still beyond AI. Binary exploitation is still a human only field.

New comment by StrauXX in "cURL removes bug bounties"

StrauXX — Wed, 21 Jan 2026 09:32:55 +0000

The solution for this, IMO, is flags. Just like with CTFs, host an instance of your software with a flag that can only be retrieved after a successful exploit. If someone submits the flag to you, there is no argueing about wether or not they found a valid vulnerability.

Yes, this does not work for all vulnerability classes, but it is the best compromise in my mind.

New comment by StrauXX in "Dead Internet Theory"

StrauXX — Mon, 19 Jan 2026 16:05:30 +0000

That is actually something I quite like about Discord. Whatever I write and post, while not "private" is not indexed or searchable by anyone other tgan those people that have been vetted (invited) by the respective community. Not that I'm mostly on small friendgroup Discords with 10 - 100 members.

New comment by StrauXX in "True explanation behind the Guidance project"

StrauXX — Mon, 19 Jan 2026 10:35:32 +0000

When I looked into to the then common libraries back in 2024, Guidance seemed to be by far the most technically sound. Their approach of token masking seems moch more "engineering minded" than what most libraries back then did: repromting.

I don't know if other libraries hace since adapted Guidances approach. It's also somewhat sad that their approach isn't mentioned more prominently in their readme.

True explanation behind the Guidance project

StrauXX — Mon, 19 Jan 2026 10:33:10 +0000

Article URL: https://github.com/guidance-ai/guidance/issues/1040

Comments URL: https://news.ycombinator.com/item?id=46677322

Points: 1

# Comments: 1