Hacker News: antoinealb

New comment by antoinealb in "PCB devboard the size of a USB-C plug"

antoinealb — Mon, 09 Mar 2026 06:58:54 +0000

If you are talking about USB-A Nanos, there is https://tomu.im/, which is very nice and interesting.

New comment by antoinealb in "Cloudflare Down Again – and DownDetector Is Also Down"

antoinealb — Fri, 05 Dec 2025 12:36:18 +0000

The linked article is precisely about how in 2024 they started rewriting their proxy layer from nginx (a C app). While "They haven't had an incident that bad since they switched from C to Rust." might be true, it has also been almost 9 years since cloudbleed, of which 8 were in C world.

New comment by antoinealb in "Arrests in Louvre Heist Show Power of DNA Databases in Solving Crimes"

antoinealb — Mon, 03 Nov 2025 16:33:41 +0000

What are you raving about? In the US you can get your DNA taken by authorities without possibility of refusing as well: https://www.theguardian.com/technology/2025/sep/23/us-border...

New comment by antoinealb in "F-Stack – A network development kit with high performance based on DPDK"

antoinealb — Sat, 30 Aug 2025 15:14:26 +0000

The goal of this kind of system is not to replace the application server. This is intended to work on the data plane where you do simple operations but do them many time per second. Think things like load balancers, cache server, routers, security appliances, etc. In this space Kernel Bypass is still very much the norm if you want to get an efficient system.

New comment by antoinealb in "SSL certificate requirements are becoming obnoxious"

antoinealb — Tue, 26 Aug 2025 14:51:37 +0000

There are more ACME-compatible CAs than just Let's Encrypt, should they ever become the bad guys, or if you don't want to trust them for any reason, see [0].

I understand that people get annoyed at shorter cert lifetime, for instance if you are managing appliances or use SSL certs for other reasons than the common use case. But if you just want to serve a website, there are not so many reasons not to use HTTPS today, either on Let's Encrypt or on something else.

[0] https://acmeclients.com/certificate-authorities/

New comment by antoinealb in "New Linux udisks flaw lets attackers get root on major Linux distros"

antoinealb — Mon, 23 Jun 2025 15:15:29 +0000

Android delegated some security features to a different kernel called Trusty that is separated from the main Linux kernel using virtualisation. That kernel runs high value security services.

https://source.android.com/docs/security/features/trusty

New comment by antoinealb in "FFmpeg School of Assembly Language"

antoinealb — Sun, 23 Feb 2025 11:25:43 +0000

Yes, but on projects like that, ease of maintenance is a secondary priority when compared to performance or throughput.

New comment by antoinealb in "Supreme Court upholds TikTok ban, but Trump might offer lifeline"

antoinealb — Sat, 18 Jan 2025 10:34:28 +0000

Romansh is a national language, not an official one. (At the federal level) Which means that Switzerland considers it a part of it’s culture but that for instance laws and executive orders are not translated in Romansh.

New comment by antoinealb in "Nothing-up-my-sleeve number"

antoinealb — Mon, 18 Nov 2024 14:24:09 +0000

https://security.stackexchange.com/questions/227459/why-is-t...

The initials spell out "OBSD", as a nod to the hash being first designed for OpenBSD, and they needed a 24 char / 192 bits value.

New comment by antoinealb in "A tiny self-remaking C program"

antoinealb — Mon, 09 Sep 2024 13:33:22 +0000

In arch at least it is reasonnably easy to download the source for a package, modify it locally, build it and install it. Not sure if that's what you are asking for?

New comment by antoinealb in "How I got my laser eye injury"

antoinealb — Thu, 01 Aug 2024 15:26:47 +0000

Google as a company manufactures hardware, it makes sense to have a machine shop for prototypes.

New comment by antoinealb in "A Swiss town banned billboards. Zurich, Bern may soon follow"

antoinealb — Fri, 26 Jul 2024 11:02:48 +0000

Do you have a link ? I was not aware of that, the only thing I can find is that McLaren ran some tests to replace in-cockpit ads with a small eink screen, but nothing on the side of the cars.

New comment by antoinealb in "Synchronization Is Bad for Scale"

antoinealb — Sun, 07 Jul 2024 19:01:46 +0000

etcd is fairly similar to Chubby indeed, or Zookeeper.

New comment by antoinealb in "WireViz: Easily document cables and wiring harnesses"

antoinealb — Mon, 15 Apr 2024 09:56:01 +0000

I heard good stuff about Dirty Cables: https://dirtypcbs.com/store/cables

New comment by antoinealb in "Reflections on Distrusting xz"

antoinealb — Wed, 03 Apr 2024 10:19:48 +0000

Arch Linux is not vulnerable to this specific attack, which requires sshd to be linked to liblzma. This link is provided by out-of-sshd patches, that Arch does not apply to their build.

New comment by antoinealb in "Ask HN: How can I learn about performance optimization?"

antoinealb — Sun, 03 Mar 2024 12:59:26 +0000

That leads to an infinite backlog no ? If you need more than 24h to process 24h of data ?

New comment by antoinealb in "The Linux Kernel Prepares for Rust 1.77 Upgrade"

antoinealb — Sun, 18 Feb 2024 15:36:34 +0000

At least according to the Github's language breakdown for https://github.com/Rust-for-Linux/linux, C is still 98.3% of the repository, and Rust is in the 0.1% of "others".

New comment by antoinealb in "Timeline to remove DSA support in OpenSSH"

antoinealb — Thu, 11 Jan 2024 15:28:37 +0000

CAN Bus is more like a layer 2 bus, so it should not really bother with encryption, just like Ethernet doesn't provide it. It all comes from the layers above it, and there has been proposal to add encryption or authentication to CAN. The big issue is that in normal CAN you only have 8 bytes to work with.

New comment by antoinealb in "GM says it's dropping Apple CarPlay and Android Auto because they're unsafe"

antoinealb — Wed, 13 Dec 2023 10:46:18 +0000

Well a lot of cars have a wireless charging pad available in the phone holder, so you just drop your phone there and it starts charging / connects to Android Auto.

New comment by antoinealb in "Apple and Google Monitor Notifications. We Need Push Notification Alternatives"

antoinealb — Fri, 08 Dec 2023 10:24:49 +0000

I also had some experience in that space, and my conclusion was that what was really hard is handling keep-alive correctly. Some mobile networks will very aggressively flush their NAT entries while other will be fine with a packet every hour or so. And sometimes the NAT timeout changes depending on the server's IP range. Building a solution that is both battery-optimal and that will keep the connection alive is pretty hard.