Hacker News: andersa

New comment by andersa in "Obsidian plugin was abused to deploy a remote access trojan"

andersa — Mon, 11 May 2026 18:34:18 +0000

This is implemented the wrong way around. Each program should only have access to its own folders by default, with it being possible to grant additional access. Also, I don't believe Endpoint stuff is included in the normal Windows license.

New comment by andersa in "Obsidian plugin was abused to deploy a remote access trojan"

andersa — Mon, 11 May 2026 18:33:05 +0000

Sandboxie is essentially a giant pile of fragile hacks on top of a Windows API that does not want to be used this way. Does it seem like it works most of the time? Sure. Has it had bypasses? Also yes. I've used it in the past but I don't truly trust it.

New comment by andersa in "Obsidian plugin was abused to deploy a remote access trojan"

andersa — Mon, 11 May 2026 18:30:04 +0000

Can you configure that as a user for an unsafe program you want to run such as an online game? I think not.

New comment by andersa in "Obsidian plugin was abused to deploy a remote access trojan"

andersa — Mon, 11 May 2026 18:29:07 +0000

Microsoft has refused to allow any kind of persistence of these sandboxes making them absolutely worthless. Such a waste of an otherwise good feature.

New comment by andersa in "Obsidian plugin was abused to deploy a remote access trojan"

andersa — Mon, 11 May 2026 10:50:09 +0000

Sadly, Windows cannot do that. Every installed program has full disk access by default. It's very, very difficult to make it not so.

New comment by andersa in "Show HN: SimDrive – a browser racing game with your phone as the controller:D"

andersa — Sat, 02 May 2026 12:19:24 +0000

There need to be better instructions that you have to open the web page on your computer first, opening the link on the phone directly appears useless as it just displays a qr code on the phone.

New comment by andersa in "Anonymous request-token comparisons from Opus 4.6 and Opus 4.7"

andersa — Sat, 18 Apr 2026 22:29:38 +0000

Bruh. It's getting hard to track down all these MAKE_IT_ACTUALLY_WORK settings that default to off for no reason.

New comment by andersa in "Claude Opus 4.7"

andersa — Thu, 16 Apr 2026 15:14:10 +0000

You mean the 33k bots that created a nearly linear stars/day graph? There's a dip in the middle, but it was very blatant at the start (and now)

New comment by andersa in "Issue: Claude Code is unusable for complex engineering tasks with Feb updates"

andersa — Tue, 07 Apr 2026 08:40:52 +0000

I didn't know we could change the base system prompt of Claude Code. Just tried, and indeed it works. This changes everything! Thank you for posting this!

New comment by andersa in "Issue: Claude Code is unusable for complex engineering tasks with Feb updates"

andersa — Tue, 07 Apr 2026 05:42:57 +0000

But you can't. Many times I've seen claude write confusing off-track nonsense in the thinking and then do the correct action anyway as if that never happened. It doesn't work the way we want it to.

New comment by andersa in "Free stuff makes us irrational"

andersa — Fri, 03 Apr 2026 06:16:19 +0000

Many people are not salaried and can roughly convert more working hours into proportionally more money, so the comparison does kinda make sense. Why uselessly stand in line for an hour when you could use that hour to make more deliveries, do research on one of your clients cases, or whatever?

New comment by andersa in "4Chan mocks £520k fine for UK online safety breaches"

andersa — Fri, 20 Mar 2026 02:18:42 +0000

Thinking that you are operating in the UK because a UK user can theoretically send packets to you, is similar to thinking a corner store in Japan is operating in the UK because a brit can theoretically get on a plane and fly there to shop.

New comment by andersa in "“Design me a highly resilient database”"

andersa — Fri, 13 Mar 2026 01:47:06 +0000

> At Apple Pay, we processed millions of daily transactions across 30,000 servers

Why does it require 30,000 servers to process millions of daily transactions? Is there a typo in the amount?

New comment by andersa in "Samsung Upcycle Promise"

andersa — Tue, 24 Feb 2026 17:40:30 +0000

> Meanwhile, Samsung's own recycling numbers tell a different story. Its old phone collection campaign, running since 2015, had collected just 38,000 phones as of May 2019. Samsung had sold 2 billion Galaxy devices by February 2019.

Well... duh? Their program offers far less money for the old phone than selling it used on ebay. Why would anyone use it?

New comment by andersa in "I found a vulnerability. they found a lawyer"

andersa — Sat, 21 Feb 2026 15:50:01 +0000

It can. The fact there is a password, even if you can trivially find said password, is considered a protection. The German law is completely absurd here.

New comment by andersa in "Claude Code is being dumbed down?"

andersa — Thu, 12 Feb 2026 12:01:19 +0000

Why does it have access to those paths?

New comment by andersa in "GLM-5: Targeting complex systems engineering and long-horizon agentic tasks"

andersa — Wed, 11 Feb 2026 19:50:23 +0000

Now they have!

New comment by andersa in "GLM-5: Targeting complex systems engineering and long-horizon agentic tasks"

andersa — Wed, 11 Feb 2026 15:01:52 +0000

They haven't published the weights yet, don't celebrate too early.

New comment by andersa in "Zulip.com Values"

andersa — Tue, 10 Feb 2026 15:03:30 +0000

True, though even before this we just made a chatting topic with the name "general", that worked just fine while still letting people make other threads for long discussions.

New comment by andersa in "Zulip.com Values"

andersa — Tue, 10 Feb 2026 12:09:28 +0000

You can just not specify a topic and write your messages in "general chat", nothing stops you from doing this.