Hacker News: antiloper

New comment by antiloper in "Am I German or Autistic?"

antiloper — Thu, 09 Apr 2026 14:22:00 +0000

Thanks chatgpt

New comment by antiloper in "12k AI-generated blog posts added in a single commit"

antiloper — Sat, 04 Apr 2026 17:55:11 +0000

"Nawaz Dhandala"

New comment by antiloper in "Axios compromised on NPM – Malicious versions drop remote access trojan"

antiloper — Tue, 31 Mar 2026 08:49:57 +0000

That maintainer (also the one whose creds got stolen) also has an obvious chatgpt slop profile picture on github.

New comment by antiloper in "Disruption with Some GitHub Services"

antiloper — Tue, 10 Feb 2026 15:30:40 +0000

Copilot has improved GitHub's uptime from five nines to nine fives, a four magnitude improvement!

New comment by antiloper in "Notepad++ hijacked by state-sponsored actors"

antiloper — Mon, 02 Feb 2026 08:50:24 +0000

> Additionally, the XML returned by the update server is now singed (XMLDSig)

XMLDSig is notoriously difficult to implement correctly and securely, I hope this doesn't backfire.

Arknights Endfield disables PayPal after players report unauthorised charges

antiloper — Thu, 22 Jan 2026 11:50:07 +0000

Article URL: https://www.gosugamers.net/entertainment/news/77880-arknights-endfield-disables-paypal-payments-after-players-get-hit-with-unauthorised-transactions

Comments URL: https://news.ycombinator.com/item?id=46718053

Points: 2

# Comments: 0

The Office Twitter account went private

antiloper — Fri, 09 Jan 2026 17:18:20 +0000

Article URL: https://x.com/office

Comments URL: https://news.ycombinator.com/item?id=46556224

Points: 3

# Comments: 0

New comment by antiloper in "Tell HN: Google ignores English searches and forces localized results"

antiloper — Sun, 28 Dec 2025 19:37:03 +0000

If you don't want to pay for Kagi: https://duckduckgo.com/

New comment by antiloper in "Lotusbail npm package found to be harvesting WhatsApp messages and contacts"

antiloper — Mon, 22 Dec 2025 23:34:33 +0000

Was anyone actually affected by this? Is this package a dependency of some popular package?

I assume the answer is no because this is clearly clickbait AI slop but who knows.

New comment by antiloper in "We pwned X, Vercel, Cursor, and Discord through a supply-chain attack"

antiloper — Fri, 19 Dec 2025 10:10:25 +0000

Content-Security-Policy: default-src 'none'

New comment by antiloper in "Problems with D-Bus on the Linux desktop"

antiloper — Mon, 15 Dec 2025 19:56:39 +0000

Raises the obvious question of why not using the wayland protocol (on another socket, not on the compositor socket). It has mature implementations in many languages, an IDL with compilers, and every GUI application is already going to link to libwayland anyway.

(Or perhaps even COM)

New comment by antiloper in "Problems with D-Bus on the Linux desktop"

antiloper — Mon, 15 Dec 2025 19:52:51 +0000

> Make clients store a cookie or something and only reply if they prove ownership of it

Unix domain socket authentication is stronger and doesn't require storing cookies on the client side.

> what the hell is your threat model here? The attacker is just going to ptrace firefox and read all the secrets anyway.

Which is why you can (and people do, e.g. flatpak) run applications where ptrace or global filesystem access is blocked. Which is why portals exist and why there shouldn't be a "get all secrets via dbus" escape hatch.

> I _want_ other programs to be able to read secrets (e.g. keyring administrators, .netrc-style shared secrets, etc.)

Then don't use it? Secure defaults matter for most users.

> Do you hate a{sv}? If you propose JSON as alternative, you are going to make me laugh.

Find the *kwargs here: https://wayland.app/protocols/xdg-shell

Etc. etc. This isn't the 90s anymore.

New comment by antiloper in "Cloudflare outage on December 5, 2025"

antiloper — Fri, 05 Dec 2025 15:52:43 +0000

Make faster websites:

> we started rolling out an increase to our buffer size to 1MB, the default limit allowed by Next.js applications.

Why is the Next.js limit 1 MB? It's not enough for uploading user generated content (photographs, scanned invoices), but a 1 MB request body for even multiple JSON API calls is ridiculous. There frameworks need to at least provide some pushback to unoptimized development, even if it's just a lower default request body limit. Otherwise all web applications will become as slow as the MS office suite or reddit.

New comment by antiloper in "Everyone in Seattle hates AI"

antiloper — Thu, 04 Dec 2025 18:32:29 +0000

Did you really read and understand this page in the 1 minute between my post and your reply or did you write a dismissive answer immediately?

New comment by antiloper in "Everyone in Seattle hates AI"

antiloper — Thu, 04 Dec 2025 18:28:06 +0000

I'm glad you asked! https://reproducible-builds.org/

New comment by antiloper in "Everyone in Seattle hates AI"

antiloper — Thu, 04 Dec 2025 18:24:18 +0000

> Is the output of your C compiler the same every time you run it?

Yes? Because of actual engineering mind you and not rolling the dice until the lucky number comes up.

https://reproducibility.nixos.social/evaluations/2/2d293cbfa...

New comment by antiloper in "Microsoft lowers AI software growth targets"

antiloper — Wed, 03 Dec 2025 20:05:41 +0000

Copilot is so useless compared to the rest, using Windows really is like trying to evade having shit smeared in your face all the time.

New comment by antiloper in "Anthropic taps IPO lawyers as it races OpenAI to go public"

antiloper — Wed, 03 Dec 2025 16:36:52 +0000

But they aren't the first. Google is the first frontier model lab to go public.

New comment by antiloper in "Anthropic taps IPO lawyers as it races OpenAI to go public"

antiloper — Wed, 03 Dec 2025 16:32:34 +0000

Index investors aren't exposed to IPOs, since the common indexes (SPX etc) don't include IPOs (and if you invest in a YOLO index that does, that's on you).

Also:

> The US led a sharp rebound, driven by a surge in IPO filings and strong post-listing returns following the Federal Reserve’s rate cut.

https://www.ey.com/en_us/insights/ipo/trends

New comment by antiloper in "Anthropic taps IPO lawyers as it races OpenAI to go public"

antiloper — Wed, 03 Dec 2025 16:08:53 +0000

> It's kind of funny, you can ask Rufus for stuff like "write a hello world in python for me" and then it will do it and also recommend some python books.

Interesting, I tried it with the chatbot widget on my city government's page, and it worked as well.

I wonder if someone has already made an openrouter-esque service that can connect claude code to this network of chat widgets. There are enough of them to spread your messages out over to cover an entire claude pro subscription easily.