Hacker News: bflesch

New comment by bflesch in "Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps"

bflesch — Sat, 24 Oct 2026 15:30:06 +0000

Cloudflare has this amazing feature where it accepts compressed payloads and forwards them to unsuspecting backends. Can be weaponized in many ways.

New comment by bflesch in "Claude reveals ECDSA curve origins"

bflesch — Fri, 16 Oct 2026 21:54:17 +0000

Check out 133784883 then, it really gets the machine going.

New comment by bflesch in "Claude reveals ECDSA curve origins"

bflesch — Fri, 16 Oct 2026 20:04:36 +0000

If you keep posting like this you're gonna get microwaved from space ;)

New comment by bflesch in "Fire at Starlink site in Bulgaria after suspected sabotage in Poland"

bflesch — Wed, 14 Oct 2026 19:22:10 +0000

It's not only about musk but about continued US influence over European defense. If every European defense company moves away from the Starlink platform the US loses a lot of leverage. If they create "plausible deniabiliy" feel-good propaganda like this one, then they can convince some decision makes to keep building defense projects upon the Starlink platform.

New comment by bflesch in "A statement on the Tor Project's relationship with Mullvad"

bflesch — Fri, 09 Oct 2026 19:49:44 +0000

Why is Mullvad making so much money and other VPN providers are seemingly not?

New comment by bflesch in "Microsoft-Decision-1, our model for fast decision-making"

bflesch — Fri, 09 Oct 2026 19:47:18 +0000

While this looks like a contribution from a capable team trying to impress senior leadership, for me personally the Microsoft brand is so badly tarnished I don't even feel negative emotions any more - just pity.

New comment by bflesch in "Imposing Sanctions on the International Criminal Court"

bflesch — Fri, 09 Oct 2026 15:25:44 +0000

I don't understand why this is such an urgent topic. Is ICC currently prosecuting an US citizen?

New comment by bflesch in "Tell HN: AGI Is Here"

bflesch — Fri, 25 Sep 2026 14:52:45 +0000

Happy to hear but I got to go because my forza download has just completed

New comment by bflesch in "Git-bug: Distributed, offline-first bug tracker embedded in Git"

bflesch — Fri, 25 Sep 2026 12:44:29 +0000

Looks really nice, I wonder why there hasn't been a project with this exact name and functionality before. When I think about it, "git bug" is quite limiting (the bug vs. feature discussion).

Naming things is hard, but I can see that it might feel unnatural to use "git bug" to track features. Maybe that's totally okay because it does one thing - tracking bugs - very well, and the whole feature roadmap is living in another system/process anyways?

New comment by bflesch in "Forging 1024-bit RSA signatures in nearly SNFS time [pdf]"

bflesch — Thu, 24 Sep 2026 19:19:43 +0000

Thank you for this nice explanation. I skimmed the abstract but didn't really understand it.

New comment by bflesch in "Amazon blocks Meta’s new Muse AI agent from shopping on amazon.com"

bflesch — Mon, 21 Sep 2026 19:12:12 +0000

> Why shouldn't I be allowed to let Google have that data if I find using Gmail to be beneficial to me?

The main issue is that this is not a conscious decision that google asks you to make. They offer a free mail service and then turn around and harvest your personal mail to increase their revenue, without most consumers realizing it.

They could've been happy with your lock-in to the google ecosystem and to google search, but they wanted to more data and systematically scoured all transactions from users' inboxes for additional data.

Like with physical mail, the digital mail has an envelope and a message. Gmail offers to handle your envelopes and assists you in viewing the message, but then went a step further and data mined all info from the messages.

In the physical world, if a company handles my inbox, it would be forbidden to open the envelope and read the message without a proper consent. The company would just open the inbox, tell me there are two letters from the bank and one letter from the customer, without reading the actual message.

New comment by bflesch in "Turn off and restrict access to Apple Intelligence features on Mac"

bflesch — Mon, 21 Sep 2026 18:20:12 +0000

Funny how Apple has reached the crapware maturity level that Microsoft users are quite familiar with: After first boot, go through a long list of things to deactivate so that one can experience at least some feeling of agency and privacy when using your own hardware.

New comment by bflesch in "Amazon blocks Meta’s new Muse AI agent from shopping on amazon.com"

bflesch — Mon, 21 Sep 2026 18:11:06 +0000

We should blame Google for this, and not Amazon. Google added this data from your email to your advertisement profile and used it to increase their own revenue.

New comment by bflesch in "Attention is all you have"

bflesch — Mon, 21 Sep 2026 18:09:23 +0000

Your chain of thoughts is dangerous, because once you realize that can you can cache website content locally, you might also want to share this cache with your friends so that traffic is reduced ;)

New comment by bflesch in "What happened to the Snowden archive"

bflesch — Sun, 20 Sep 2026 23:26:55 +0000

In 2026 these kind of articles must be a bait to receive the latest pegasus-style payload on your honeypot devices.

No matter how many internals are being leaked about five eyes, it's important to realize that there is always someone who benefits from the turmoil and the loss of faith into democratically-supervised institutions.

With technical agencies I'd guess that at least they promoted people based on technical merit and not by how much land ownership their families had 500 yrs ago.

New comment by bflesch in "Prompts aren’t Real"

bflesch — Sun, 20 Sep 2026 22:33:15 +0000

I'm currently building something like this, basically converting every service to a standardized API that you can consume in a structured manner. Not focused on AI, but focused on normal users with special requirements on usability.

Basically the ad blocking approach has failed, and one needs to recognize that an allow-list based approach is needed when consuming internet-based offerings. Pick the cherries out of each website, leave the trash behind, and then build a custom per-website GUI around the things that you actually want to consume.

New comment by bflesch in "US Treasuries Have Become Unappetizing for Foreign Central Banks and Governments"

bflesch — Fri, 18 Sep 2026 16:50:24 +0000

Institutional investors are very slow to adapt, so I wouldn't take their continued investment as a positive signal. The sentiment shift is real, and a lot of goodwill has been spent.

It's basically divide and conquer on a national scale tearing down the democratic world police and the democratic systems it supported.

New comment by bflesch in "Vinix – A modern operating system written in V"

bflesch — Thu, 17 Sep 2026 17:24:16 +0000

You have an amazing eye for details. Might be the "wine calculator" from the desktop.

New comment by bflesch in "Vinix – A modern operating system written in V"

bflesch — Thu, 17 Sep 2026 17:23:34 +0000

It looks nice. How much vibecoding does it contain? Can we trust these claims?

New comment by bflesch in "I spent $220 on Google app ads and 60% of the installs were robots"

bflesch — Sat, 12 Sep 2026 12:18:07 +0000

Google is fleecing other megacorps.