Hacker News: abofh

New comment by abofh in "There isn't an easy exploit for this PHP vulnerability"

abofh — Thu, 22 Oct 2026 02:50:50 +0000

When they confuse the CA issue and the PHP issue in the opening paragraph, I have a hard time trusting their analysis

New comment by abofh in "Taxing Entrepreneurial Wealth: Evidence from Norway, 2021–2025"

abofh — Sat, 10 Oct 2026 03:24:36 +0000

Stolen suggests they got no value from the society they harmed, like a marketplace.

Nobody is stealing from billionaires.

New comment by abofh in "Building a certificate authority for the whole Internet"

abofh — Wed, 30 Sep 2026 03:13:08 +0000

Me too, just add my root and you'll never be warned again!

You have access to unlimited free certificates based on DNS delegation through this method, but need more.

It might be useful to explain why this adds value that another CA can't

New comment by abofh in "Why didn't anybody tell me about Redis hash slots?"

abofh — Sat, 26 Sep 2026 00:53:46 +0000

Because you inherited it from someone who built it before that was a thing, and discovered it when you went serverless.

How'd I guess on the article itself?

New comment by abofh in "Navier-Stokes – Tristan Buckmaster [pdf]"

abofh — Wed, 09 Sep 2026 01:36:06 +0000

> The Huggingface Attack revealed that making blanket statements like this is difficult and requires quite a bit of manual labor

It requires humans to verify what agents have done.

Weird

New comment by abofh in "Adult Film Producer Unmasks Prolific 'John DOE' Torrent Pirate as Meta Executive"

abofh — Fri, 04 Sep 2026 19:31:45 +0000

I mean basically that. If you hit a corporate IP, unless they have flow level logging or you have very extensive timestamps, then the game ends, company says they've enacted new training or controls, but they can't identify a specific person and it's not their fault.

Essentially - this is not a suggestion.

Residential ip's map to a specific person, and it's a lot harder for them to deflect and say I'm not responsible for my own Internet connection

New comment by abofh in ".name Termination"

abofh — Fri, 04 Sep 2026 00:30:39 +0000

Because it's not worth it financially. After icann is the tld registrar, and after that above. So, if anyone is destroying it, it's not the registrar, it's the tld.

New comment by abofh in "The Twelve-Factor App (2025)"

abofh — Fri, 28 Aug 2026 19:13:38 +0000

Dev/shm is used to materialize them, and then you have the ability to isolate the downstream code you might use from accessing it by dropping permissions or sandboxing it away from a file. You cannot really hide your environment from anything in process, since it's such a low level construct.

Thus it's easier to leak environment unintentionally, leaking file contents takes effort.

New comment by abofh in "I used AWS cognito for a startup. I wouldn't do it again"

abofh — Fri, 28 Aug 2026 14:44:14 +0000

Yes, gcp has volumes of available accurate documentation, but it's almost entirely incomprehensible and bizarrely undiscoverable by search

New comment by abofh in "Asynchronous I/O in DuckDB: Work, Thread, Work"

abofh — Sun, 16 Aug 2026 04:17:05 +0000

Do they have SSL updates yet? Signing is great, but using https means not fighting firewalls to start a job

New comment by abofh in ""That's not SOC 2 compliant""

abofh — Sat, 15 Aug 2026 06:35:40 +0000

Youre required to have a policy. That policy may be throwing bananas at the wall, but if it's documented and you follow it, you're compliant with policy.

New comment by abofh in "I close SSH port 22 (and what I use instead)"

abofh — Sat, 15 Aug 2026 05:27:10 +0000

You run ssh?

New comment by abofh in "OpenAI’s head of ethics leaves less than a year after joining"

abofh — Wed, 12 Aug 2026 02:46:17 +0000

Largely the line was if you could write code. In the old days it was assumed, but for much of the late 90s/early aughts, it wasn't an obligation to admin, but was for devops

New comment by abofh in "What Happened to HackerOne?"

abofh — Mon, 10 Aug 2026 03:03:32 +0000

It got the executives it paid for

New comment by abofh in "Herdr is joining Y Combinator. The runtime stays open"

abofh — Fri, 07 Aug 2026 01:19:01 +0000

You've joined an accelerator, not gone public, of course you're not ready to rug pull

New comment by abofh in "GitHub Actions and Pages are experiencing degraded availability"

abofh — Fri, 07 Aug 2026 00:42:46 +0000

They couldn't handle sending webhooks for eight hours. That seems more than reasonable to expect.

New comment by abofh in "Does Speaking to Agents Like Cavemen Save 65% of Tokens? We Test"

abofh — Fri, 31 Jul 2026 03:27:03 +0000

If you just want a smaller vocabulary, use French? If your goal is to communicate to an LLM, maybe saving tokens isn't the all in win, unless you like reading assert gronkHitThing(true)

New comment by abofh in "Delayed Gratification – Proud to Be 'Last to Breaking News'"

abofh — Wed, 29 Jul 2026 01:24:31 +0000

I would love to pay a penny an article read by me my AI or whatever to a host of services provided they could prove the value first. These days I'm told which thousand companies my clicks will be sold to any time I visit an article, and that's before I've gotten value.

The industry got it wrong when it digitized

New comment by abofh in "Residential Proxies Are a National Security Threat"

abofh — Tue, 28 Jul 2026 04:08:59 +0000

Anonymous packets are a national security threat!

New comment by abofh in "US citizen charged after GrapheneOS phone wipes during airport search"

abofh — Mon, 27 Jul 2026 03:58:54 +0000

Indeed, but should he say his real code was one digit swap off, could you prove intent? Color matters, but you can't paint with only one