<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Vorh</title><link>https://news.ycombinator.com/user?id=Vorh</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 17 Apr 2026 06:37:23 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Vorh" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Vorh in "We hacked Burger King: How auth bypass led to drive-thru audio surveillance"]]></title><description><![CDATA[
<p>> Why do you think copyright has anything to do with the post?<p>Because the Digital Millenium Copyright Act is for copyright. You haven't stated how the blog post infringes upon BK's copyright at all, so... yes, seems like a standard fraudulent DMCA claim.<p>> First thing first. This is NOT DMCA abuse. The DMCA is the only way to communicate with web companies and take down content. As such, it has become the legitimate way to take down any content that needs to be taken down, in the absence of alternatives.<p>This assumes that companies should be able to take down any content they do not like. This is very much not the case. The DMCA is <i>very specifically</i> only for copyrighted content.<p>From copyright.gov[1]:<p>> To be effective, a notice must contain substantially the following information:<p>> ...<p>> (v) a statement that the person sending the notice has a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law; and<p>> (vi) a statement that the information in the notice is accurate, and under penalty of perjury, that the person sending the notice is authorized to act on behalf of the copyright owner .<p>This is pretty clearly DMCA abuse. TFA isn't using any of BK's copyrighted content, which is what a DMCA claim alleges. Just because people have abused the form... pretty much since inception does not mean that it's not perjury to do so.<p>If BK wants to press charges for unauthorized usage of computer systems, that's another route. This would involve a police report, not perjury, and would probably not take down the website.<p>[1]: <a href="https://www.copyright.gov/512/" rel="nofollow">https://www.copyright.gov/512/</a></p>
]]></description><pubDate>Sun, 07 Sep 2025 01:43:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=45154604</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=45154604</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45154604</guid></item><item><title><![CDATA[New comment by Vorh in "Show HN: Astra – a new js2exe compiler"]]></title><description><![CDATA[
<p>Looks like a good start.
A few notes:<p>- The first thing on the "features" list should be something that other compilers cannot do. Esthetics (maybe just say "DX"?) is a nice to have - sometimes VERY nice to have - but should not be positioned as the most important item.<p>As the original post says the alternatives have poor ESM support - that's a good differentiator.<p>- Even though ES Modules are part of the ECMAScript standard, having a header stating "(Partial) Support for ECMAScript"- to me, at least - indicates the project does not support base JS features, not that ESM imports have problems. Maybe say "improved ESM support"?<p>- Docs seem a little bare. For example, the Usage section says:<p><pre><code>    # Preinstall Node.js on the target machine
    astra install
</code></pre>
Which machine is the "target" machine? I would assume, in the context of compiling, that the target would be the machine you are compiling for... but installing software remotely seems out of scope. Does it install it locally, or swap the bundled installation in the .exe?<p>Also, no mention of binary limitations in actual docs, despite mention in post.<p>Hopefully this does not come off as discouraging - this looks like a good project.</p>
]]></description><pubDate>Tue, 20 May 2025 15:57:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=44043049</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=44043049</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44043049</guid></item><item><title><![CDATA[New comment by Vorh in "Trusting clients is probably a security flaw"]]></title><description><![CDATA[
<p>Employees don't want to ask either, but corporate made it an item in mystery shop inspections.</p>
]]></description><pubDate>Fri, 17 Jan 2025 18:00:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=42741242</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=42741242</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42741242</guid></item><item><title><![CDATA[New comment by Vorh in "Google Public DNS's approach to fight against cache poisoning attacks"]]></title><description><![CDATA[
<p>As far as I remember from when I last read that article, it was a police-requested MiTM by the hosting provider. LetsEncrypt did a standard challenge (requesting <a href="http://webroot/.well-known/something" rel="nofollow">http://webroot/.well-known/something</a>) and the MiTM responded appropriately. This isn't really a problem with LE - if you can control the http response to all outside servers, it's fair to say that you control the domain and should have the cert. Bad on the hosting provider for doing so? Maybe, but there is no way for LE to know.</p>
]]></description><pubDate>Mon, 08 Apr 2024 14:12:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=39969899</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=39969899</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39969899</guid></item><item><title><![CDATA[New comment by Vorh in "Don't fuck with paste"]]></title><description><![CDATA[
<p>I just read through the 65LOC source, and it's because it swaps out an active or inactive extension icon based on your active tab.<p><a href="https://github.com/aaronraimist/DontFuckWithPaste/blob/8cb68e1a99d098d1dfe99d35ef4657d668e56738/background.js#L5-L19">https://github.com/aaronraimist/DontFuckWithPaste/blob/8cb68...</a></p>
]]></description><pubDate>Fri, 08 Mar 2024 04:14:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=39637697</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=39637697</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39637697</guid></item><item><title><![CDATA[New comment by Vorh in "The day I canceled my Spotify subscription"]]></title><description><![CDATA[
<p>Was going to try this out, but the permissions required are too much for me.<p><pre><code>     View your email
     Add and remove items in Your Library
    Create, edit, and follow private playlists
    Create, edit, and follow playlists
    Manage who you follow on Spotify
    Stream and control Spotify on your other devices</code></pre></p>
]]></description><pubDate>Tue, 20 Feb 2024 08:00:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=39438979</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=39438979</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39438979</guid></item><item><title><![CDATA[New comment by Vorh in "The day I canceled my Spotify subscription"]]></title><description><![CDATA[
<p>Somewhat similar experience for me- I canceled apple music today because the Linux experience is... not great. The web client has an issue where the emoji font (Noto Emoji) makes all spaces full width. There's an unofficial client called Cider, but it has issues with favoriting items. And neither web nor Cider support playing to a networked speaker.</p>
]]></description><pubDate>Tue, 20 Feb 2024 07:57:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=39438962</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=39438962</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39438962</guid></item><item><title><![CDATA[New comment by Vorh in "Modern CSS One-Line Upgrades"]]></title><description><![CDATA[
<p>Nope!<p><pre><code>    Element.scrollIntoView({ behavior: 'smooth' });
</code></pre>
<a href="https://developer.mozilla.org/en-US/docs/Web/API/Element/scrollIntoView" rel="nofollow">https://developer.mozilla.org/en-US/docs/Web/API/Element/scr...</a></p>
]]></description><pubDate>Mon, 29 Jan 2024 21:29:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=39182934</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=39182934</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39182934</guid></item><item><title><![CDATA[New comment by Vorh in "Tell HN: Bash.org is no more"]]></title><description><![CDATA[
<p>The reasoning behind the banning of cross-server emojis in most "respectable" servers is that you can split an image into a 5x5 grid of "emoji" and post images in channels you're not supposed to. It's a mess.</p>
]]></description><pubDate>Thu, 11 Jan 2024 22:02:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=38959932</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=38959932</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38959932</guid></item><item><title><![CDATA[New comment by Vorh in "Tell HN: Bash.org is no more"]]></title><description><![CDATA[
<p>You actually can, you have to preface your emoji with a backslash.</p>
]]></description><pubDate>Thu, 11 Jan 2024 21:58:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=38959855</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=38959855</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38959855</guid></item><item><title><![CDATA[New comment by Vorh in "Firefox for Android is adding support for 400 add-ons"]]></title><description><![CDATA[
<p>Might be a DNS lookup issue.</p>
]]></description><pubDate>Fri, 01 Dec 2023 15:57:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=38488184</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=38488184</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38488184</guid></item><item><title><![CDATA[New comment by Vorh in "Fish – Update on the Rust port"]]></title><description><![CDATA[
<p>Presumably because the second to top comment links this issue, which answers your question:
<a href="https://github.com/fish-shell/fish-shell/pull/9512#issuecomment-1410820102">https://github.com/fish-shell/fish-shell/pull/9512#issuecomm...</a></p>
]]></description><pubDate>Mon, 27 Nov 2023 16:25:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=38434253</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=38434253</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38434253</guid></item><item><title><![CDATA[New comment by Vorh in "Subdomain.center – discover all subdomains for a domain"]]></title><description><![CDATA[
<p>Have you had any problems with browsers leaking the prefixed sites, as seen here?<p><a href="https://news.ycombinator.com/item?id=35703789">https://news.ycombinator.com/item?id=35703789</a></p>
]]></description><pubDate>Sun, 17 Sep 2023 03:48:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=37541346</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=37541346</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37541346</guid></item><item><title><![CDATA[New comment by Vorh in "Making Figma better for developers with Dev Mode"]]></title><description><![CDATA[
<p>If you click the link in the errors it tells you what they mean.<p>- "Text content does not match server-rendered HTML."<p>- "Hydration failed because the initial UI does not match what was rendered on the server."<p>- "There was an error while hydrating. Because the error happened outside of a Suspense boundary, the entire root will switch to client rendering."<p>None of these should impact the videos, though, because the fallback (client-side rendering) should work too. So if that's causing the issue, it's because there's a larger problem enabling it.</p>
]]></description><pubDate>Wed, 21 Jun 2023 17:50:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=36421914</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=36421914</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36421914</guid></item><item><title><![CDATA[New comment by Vorh in "ZLibrary domains have been seized by the United States Postal Inspection Service"]]></title><description><![CDATA[
<p>I much doubt it. This seems like the type of thing that would take a while to set up, and that article was posted less than a week ago.</p>
]]></description><pubDate>Sat, 05 Nov 2022 03:24:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=33477535</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=33477535</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33477535</guid></item><item><title><![CDATA[New comment by Vorh in "Cloudflare is breaking the internet by requiring "JavaScript and cookies“"]]></title><description><![CDATA[
<p>That seems more like a misconfiguration on the site owner's part; if something is designed to be read by bots/programs, they shouldn't put a challenge on it.</p>
]]></description><pubDate>Wed, 05 Oct 2022 19:41:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=33100352</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=33100352</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33100352</guid></item><item><title><![CDATA[New comment by Vorh in "You don’t want to be on Cloudflare’s naughty list"]]></title><description><![CDATA[
<p>Anecdote: I've been using Starlink for about a year now, and I've had no trouble with Cloudflare.</p>
]]></description><pubDate>Thu, 22 Sep 2022 17:31:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=32942069</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=32942069</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=32942069</guid></item><item><title><![CDATA[New comment by Vorh in "Sending spammers to password purgatory"]]></title><description><![CDATA[
<p>As a side note, uBlock Origin blocks the sponsor banner which makes sense, but also makes it so you can't see the disclosure.</p>
]]></description><pubDate>Thu, 04 Aug 2022 22:35:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=32349179</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=32349179</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=32349179</guid></item><item><title><![CDATA[New comment by Vorh in "Brave’s use of direct mailers"]]></title><description><![CDATA[
<p>As far as I know, the database is owned by the USPS, and they can't do their job _without_ that information. You can dislike Brave for buying access to the information, or dislike USPS for selling said information. But the information is already collected by USPS so they can do their job.</p>
]]></description><pubDate>Sat, 04 Jun 2022 18:26:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=31623613</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=31623613</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=31623613</guid></item><item><title><![CDATA[New comment by Vorh in "Ditch your version manager"]]></title><description><![CDATA[
<p>It is, though? Just swap "standards" with "programs"</p>
]]></description><pubDate>Mon, 20 Sep 2021 04:38:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=28590429</link><dc:creator>Vorh</dc:creator><comments>https://news.ycombinator.com/item?id=28590429</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=28590429</guid></item></channel></rss>