<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: TekMol</title><link>https://news.ycombinator.com/user?id=TekMol</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 08 Nov 2026 13:10:02 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=TekMol" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by TekMol in "Claude Code sends your email address to websites"]]></title><description><![CDATA[
<p>So the only sane way to use Claude Code is to sign up with an anonymous throwaway email?<p>That seems rather cumbersome.<p>How does everyone go about this?<p>What is an email provider that is trustworthy and does not want your phone number or credit card, so the email is not tied to you?</p>
]]></description><pubDate>Fri, 06 Nov 2026 07:10:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=50389147</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50389147</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50389147</guid></item><item><title><![CDATA[Tell HN: Claude Code adds your email to the prompt, the LLM sends it to websites]]></title><description><![CDATA[
<p>The prompt issue:<p>https://github.com/anthropics/claude-code/issues/81138<p>The LLM sends it to websites:<p>https://www.reddit.com/r/ClaudeCode/comments/1xhqvzn/opus_55_just_shared_my_email_address/</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=50286306">https://news.ycombinator.com/item?id=50286306</a></p>
<p>Points: 42</p>
<p># Comments: 5</p>
]]></description><pubDate>Thu, 29 Oct 2026 09:06:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=50286306</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50286306</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50286306</guid></item><item><title><![CDATA[New comment by TekMol in "There isn't an easy exploit for this PHP vulnerability"]]></title><description><![CDATA[
<p>There is a strong indicator that this is true:<p>There is no news about hacked websites due to this vulnerability.<p>If anyone could ask Claude for an exploit, one would expect a lot of PHP sites to be hacked just for the fun of it, right? Like putting a message on some popular website or something.</p>
]]></description><pubDate>Thu, 22 Oct 2026 09:05:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=50193016</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50193016</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50193016</guid></item><item><title><![CDATA[New comment by TekMol in "The PHP fix for CVE-2026-109618 and CVE-2026-109619: +11556 lines of code"]]></title><description><![CDATA[
<p>This is about the code itself. Not about the availability.</p>
]]></description><pubDate>Wed, 21 Oct 2026 17:17:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=50184420</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50184420</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50184420</guid></item><item><title><![CDATA[New comment by TekMol in "The PHP fix for CVE-2026-109618 and CVE-2026-109619: +11556 lines of code"]]></title><description><![CDATA[
<p>Can it really take over 10k additional lines to fix a pointer issue bug like this, where the problem is that the code uses memory that it has freed already?<p>I wished they had put the tests in a commit on their own so it would be immediately clear how large the patch itself is.</p>
]]></description><pubDate>Wed, 21 Oct 2026 17:16:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=50184406</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50184406</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50184406</guid></item><item><title><![CDATA[The PHP fix for CVE-2026-109618 and CVE-2026-109619: +11556 lines of code]]></title><description><![CDATA[
<p>Article URL: <a href="https://github.com/php/php-src/commit/31c0ea7d7ff1d1fccb6492e52dab544011628065">https://github.com/php/php-src/commit/31c0ea7d7ff1d1fccb6492e52dab544011628065</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=50184386">https://news.ycombinator.com/item?id=50184386</a></p>
<p>Points: 7</p>
<p># Comments: 4</p>
]]></description><pubDate>Wed, 21 Oct 2026 17:15:30 +0000</pubDate><link>https://github.com/php/php-src/commit/31c0ea7d7ff1d1fccb6492e52dab544011628065</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50184386</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50184386</guid></item><item><title><![CDATA[New comment by TekMol in "PHP 8.2.35"]]></title><description><![CDATA[
<p>Why is the description of "RCE via OOM corruption" mentioning all these settings like memory_limit, post_max_size, max_input_nesting_level etc under "Mitigation" but not blocking multipart requests? Isn't that a solution?<p>The description of the vurnurability "Several multipart parsing problems" makes it sound like it is?</p>
]]></description><pubDate>Wed, 21 Oct 2026 14:03:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=50181182</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50181182</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50181182</guid></item><item><title><![CDATA[New comment by TekMol in "Upcoming critical PHP security release (CVE-2026-109618 / -109619)"]]></title><description><![CDATA[
<p>I have not seen confirmation that the exploit is for the bug that is going to be patched.<p>It seems the published exploit can be easily prevented by filtering out multipart post requests. So people actively watching the situation can already prevent that issue by filtering those.</p>
]]></description><pubDate>Wed, 21 Oct 2026 09:07:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=50177902</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50177902</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50177902</guid></item><item><title><![CDATA[New comment by TekMol in "Security advisory: Critical remote code execution vulnerabilities, update now"]]></title><description><![CDATA[
<p>Many here call for an earlier release of the patch.<p>But it is not clear if releasing the fix early would make the damage smaller or larger.<p>Having the patch probably makes creating an exploit easier. So the number of attacks would increase.<p>There is no way to coordinate the whole world on an earlier time. I would guess the number of people who have to patch their instances is in the hundreds of thousands.<p>Everybody who actively watches the topic already has the option to shut down their instances.<p>So ringing the bell and getting as many people as possible to shut down their webservers now and patch at 14:00 might be the best in terms of damage minimisation.<p>By the way, it is not enough to just "shutdown -h now" and then later restart and "apt update && apt upgrade". The moment the machine comes back, it can get hacked. So you should make sure the webserver does not start after the next boot. For Apache this would be something like "rm /etc/systemd/system/multi-user.target.wants/apache2.service" and then after patching recreate the symlink via something like "ln -s /lib/systemd/system/apache2.service /etc/systemd/system/multi-user.target.wants/apache2.service".</p>
]]></description><pubDate>Wed, 21 Oct 2026 08:59:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=50177855</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50177855</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50177855</guid></item><item><title><![CDATA[New comment by TekMol in "PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)"]]></title><description><![CDATA[
<p>What about servers that run PHP from the Debian repos?<p>How fast will the repos be updated?</p>
]]></description><pubDate>Wed, 21 Oct 2026 05:37:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=50176479</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50176479</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50176479</guid></item><item><title><![CDATA[New comment by TekMol in "Show HN: Let your AI agents paint big arrows, boxes and text on your screen"]]></title><description><![CDATA[
<p>Swift, Shell, Python and Objective-C<p>Does one need 4 programming languages to draw something on a mac?</p>
]]></description><pubDate>Fri, 09 Oct 2026 11:31:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=50019011</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=50019011</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50019011</guid></item><item><title><![CDATA[New comment by TekMol in "Keep Our Servers Running"]]></title><description><![CDATA[
<p>I still don't get how copying copyrighted content to your own website and then asking for donations can be a legal business model. Nor how it can be morally justified.<p>I get that many people <i>like</i> such an archive to be around for consumption. Me too. But, keeping emotions aside, I can't find a justification to violate the rights of creators.<p>I'm sure many people here will have the knee-jerk reaction to immediately downvote this question. But I know there are also thoughtful people on HN. If some of you have ideas about the legal and moral justification for archive.org's actions, I would like to hear them.</p>
]]></description><pubDate>Mon, 07 Sep 2026 05:45:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=49594321</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49594321</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49594321</guid></item><item><title><![CDATA[New comment by TekMol in "WebLLM: high-performance in-browser LLM inference engine"]]></title><description><![CDATA[
<p>This seems to be the demo:<p><a href="https://chat.webllm.ai/" rel="nofollow">https://chat.webllm.ai/</a><p>I am getting:<p><pre><code>    WebGPUNotAvailableError: WebGPU is not supported in
    your current environment, but it is necessary to
    run the WebLLM engine.
</code></pre>
On both, FireFox and Chromium on Linux.</p>
]]></description><pubDate>Wed, 02 Sep 2026 15:12:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=49537547</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49537547</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49537547</guid></item><item><title><![CDATA[New comment by TekMol in "Sovereign Tech Agency invests €500k in Flatpak"]]></title><description><![CDATA[
<p>I never understood why a program installed in Flatpak is not just a directory on disk.<p>When you install something via Flatpak, it still changes data in god-knows-what places on my disk. And the software itself has read/write access to god-knows-where on my disk.<p>The answer is probably "convenience and efficiency". But I would much prefer a "An application is a directory and by default cannot access anything outside of that directory" approach.</p>
]]></description><pubDate>Fri, 28 Aug 2026 07:12:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=49475353</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49475353</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49475353</guid></item><item><title><![CDATA[New comment by TekMol in "PostgreSQL for Everything"]]></title><description><![CDATA[
<p>SQLite has so many advantages over PostgreSQL.<p>No deamon. Single file per DB. Less configuration overhead.</p>
]]></description><pubDate>Wed, 19 Aug 2026 14:22:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=49362040</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49362040</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49362040</guid></item><item><title><![CDATA[New comment by TekMol in "How do I permanently disable random Google Photos popup to backup photos? (2024)"]]></title><description><![CDATA[
<p>I switched back and forth between "with account"/"without account" a few times now and it seems to work just fine. I stay with the no-account state, as it not only removes the nags, the interface is actually much cleaner and more logical<p>No idea about Lens, because I never used it. Aren't there webapps or web services for everything these days? I do everything that I do only occasionally via webapps. Barcode parsing for example.</p>
]]></description><pubDate>Mon, 17 Aug 2026 08:44:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=49327977</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49327977</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49327977</guid></item><item><title><![CDATA[New comment by TekMol in "How do I permanently disable random Google Photos popup to backup photos? (2024)"]]></title><description><![CDATA[
<p>Oh, that looks good!<p>I closed the app, stopped it and cleared the cache. Then restarted it.<p>The UI is surprisingly sane now. My first impression is that it is much better than before. Everything is neatly layed out in a series of albums, for each the latest images are shown and I can click on the album name and it displays them all.<p>So I <i>do</i> see my albums. Those seem to be just directories in /Pictures/ which it seems I can edit with the files app?<p>Am I missing out on anything this way? I don't need search.<p>All the usualy edit functions like cropping, adjusting colors etc also seem to still be there.</p>
]]></description><pubDate>Mon, 17 Aug 2026 06:58:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=49327336</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49327336</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49327336</guid></item><item><title><![CDATA[New comment by TekMol in "How do I permanently disable random Google Photos popup to backup photos? (2024)"]]></title><description><![CDATA[
<p>Just tried that.<p>Unfortunately, it seems to completely mess up the interface?<p>I couldn't even see all photos anymore. Even though I do not use backup at all. So it is not possible that those photos are in the cloud or something.</p>
]]></description><pubDate>Mon, 17 Aug 2026 06:43:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=49327219</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49327219</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49327219</guid></item><item><title><![CDATA[New comment by TekMol in "Gemini 3.7 Flash"]]></title><description><![CDATA[
<p>I'm only interested in the state-of-the-art model by each provider.<p>For Google, this is still gemini-3.1-pro-preview, right?</p>
]]></description><pubDate>Thu, 13 Aug 2026 17:32:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=49289266</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49289266</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49289266</guid></item><item><title><![CDATA[New comment by TekMol in "ChatGPT Desktop (Codex Desktop) for Linux"]]></title><description><![CDATA[
<p>You could just as well use any other coding agent via ChatGPT then, right?</p>
]]></description><pubDate>Thu, 13 Aug 2026 15:46:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=49287762</link><dc:creator>TekMol</dc:creator><comments>https://news.ycombinator.com/item?id=49287762</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49287762</guid></item></channel></rss>