<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: blackcatsec</title><link>https://news.ycombinator.com/user?id=blackcatsec</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 19 Oct 2026 16:54:49 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=blackcatsec" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by blackcatsec in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>Definitely not wrong here. It is a confusing mess for most people. Thankfully, for folks all in on the Apple ecosystem, it should be pretty decent of an experience. Everyone else? not so much.</p>
]]></description><pubDate>Wed, 14 Oct 2026 15:29:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=50089191</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=50089191</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50089191</guid></item><item><title><![CDATA[New comment by blackcatsec in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>Syncable passkeys are a thing which the OP addressed. Apple, Bitwarden, and other password managers all implement syncable passkeys. In fact, I just did an upgrade of my iPhone 15 Pro Max to an 18 Pro Max and all of my passkeys came along with the upgrade.</p>
]]></description><pubDate>Wed, 14 Oct 2026 15:28:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=50089155</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=50089155</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50089155</guid></item><item><title><![CDATA[New comment by blackcatsec in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>Google forced OAuth2 because Simple authentication is absolutely terrible.</p>
]]></description><pubDate>Wed, 14 Oct 2026 15:27:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=50089128</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=50089128</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50089128</guid></item><item><title><![CDATA[New comment by blackcatsec in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>Because I too understand passkey attestation and have written code to do exactly that and have worked in multiple enterprises where we've done a mass Yubikey rollout across thousands of people. So I've got a pretty solid understanding of passkeys, yubikeys, and attestation. As well as I don't read headlines of people claiming it's "tracking you".</p>
]]></description><pubDate>Wed, 14 Oct 2026 15:26:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=50089118</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=50089118</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50089118</guid></item><item><title><![CDATA[New comment by blackcatsec in "Passkeys Are Not a Trap"]]></title><description><![CDATA[
<p>What you describe is a different attack surface than the much more problematic on that password managers solve well: password re-use across websites where the blast radius is super high.<p>If I had to trade off the risk of a password manager being hacked versus password re-use, I'm going to strongly recommend to people generally to use a password manager. Yeah there's a lots of "if this, if that"--but that's almost a universally better risk for most people.</p>
]]></description><pubDate>Wed, 14 Oct 2026 15:25:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=50089089</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=50089089</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50089089</guid></item><item><title><![CDATA[New comment by blackcatsec in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>Thankfully someone with some sense. I saw that post title and didn't even bother to read it. It sounded like someone having argued with me a decade ago that IPv6 is a mechanism for the government to track you because you have no more privacy anymore because you don't have NAT...</p>
]]></description><pubDate>Wed, 14 Oct 2026 15:21:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=50089022</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=50089022</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50089022</guid></item><item><title><![CDATA[New comment by blackcatsec in "Permanent Daylight Saving Time Could Harm Sleep and Mental Health, Analysis Says"]]></title><description><![CDATA[
<p>Nobody wants permanent standard time. People want later daylight hours in the evening. All of the science behind it be damned.</p>
]]></description><pubDate>Wed, 07 Oct 2026 11:30:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=49991264</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=49991264</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49991264</guid></item><item><title><![CDATA[New comment by blackcatsec in "Apple is going to raise device prices, but when?"]]></title><description><![CDATA[
<p>All of these comments aged well.</p>
]]></description><pubDate>Thu, 25 Jun 2026 17:27:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48676644</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=48676644</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48676644</guid></item><item><title><![CDATA[New comment by blackcatsec in "UAE to leave OPEC"]]></title><description><![CDATA[
<p>When it comes to fossil fuels, there's no such thing as 'energy independence' because fossil fuels are traded on a global market. In addition, not all oil is the same. So you have to trade it because what you can extract may not be what is useful to you, but useful to someone else.<p>In short, the US cannot functionally be independent on fossil fuels even if we extracted every drop of oil within our borders--because we literally cannot use all of it, and most of it would be wasted just sitting around.</p>
]]></description><pubDate>Tue, 28 Apr 2026 15:56:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47936247</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47936247</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47936247</guid></item><item><title><![CDATA[New comment by blackcatsec in "Solar and batteries can power the world"]]></title><description><![CDATA[
<p>To be fair, though, electricity is usually cheaper at night. So discharging solar charged batteries well into the evening is still a net benefit for the grid (and your wallet).</p>
]]></description><pubDate>Tue, 07 Apr 2026 15:40:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47677043</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47677043</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47677043</guid></item><item><title><![CDATA[New comment by blackcatsec in "The team behind a pro-Iran, Lego-themed viral-video campaign"]]></title><description><![CDATA[
<p>people were worried about deepfakes with AI but instead the propaganda is doing pretty well, and arguably better, when it's not a deepfake but instead silly, catchy, youthful, and is playing up existing beliefs. The invasion is deeply unpopular in the US, and these videos only serve to amp that up.</p>
]]></description><pubDate>Mon, 06 Apr 2026 15:01:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=47661825</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47661825</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47661825</guid></item><item><title><![CDATA[New comment by blackcatsec in "Solar and batteries can power the world"]]></title><description><![CDATA[
<p>They've fallen victim to a catastrophically easy scare tactic, unfortunately. "The sun only shines during the day therefore solar is bad!" Dumb, but easy.</p>
]]></description><pubDate>Fri, 03 Apr 2026 15:39:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47628005</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47628005</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47628005</guid></item><item><title><![CDATA[New comment by blackcatsec in "Epoch confirms GPT5.4 Pro solved a frontier math open problem"]]></title><description><![CDATA[
<p>> I often wonder why tech has so many reductionist, materialist, and quite frankly anti-human, thinkers.<p>I think it comes from a position of arrogance/ego. I'll speak for the US here, since that's what I know the most; but the average 'techie' in general skews towards the higher intelligence numbers than the lower parts. This is a very, very broad stroke, and that's intentional to illustrate my point. Because of this, techie culture gains quite a bit of arrogance around it with regards to the masses. And this has been trained into tech culture since childhood. Whether it be adults praising us for being "so smart", or that we "figured out the VCR", or some other random tech problem that literally almost any human being can solve by simply reading the manual.<p>What I've found, in the vast majority of technical problem solving cases that average people have challenges with, if they just took a few minutes to read a manual they'd be able to solve a lot of it themselves. In short, I don't believe as a very strong techie that I'm "smarter than most", but rather that I've taken the time to dive into a subject area that most other humans do not feel the need nor desire to do so.<p>There are objectively hard problems in tech to solve, but the amount of people solving THOSE problems in the tech industry are few and far in between. And so the tech industry as a whole has spent the last decade or two spinning circles on increasingly complex systems to continue feeding their own egos about their own intelligence. We're now at a point that rather than solving the puzzle, most techies are creating incrementally complex puzzles to solve because they're bored of the puzzles that are in front of them. "Let me solve that puzzle by making a puzzle solver." "Okay, now let me make a puzzle solver creation tool to create puzzle solvers to solve the puzzle." and so forth and so forth. At the end of the day, you're still just solving a puzzle...<p>But it's this arrogance that really bothers me in the tech bro culture world. And, more importantly, at least in some tech bro circles, they have realized that their target to gathering an exponential increase in wealth doesn't lie in creating new and novel ways to solve the same puzzles, but to try and tout AI as the greatest puzzle solver creation tool puzzle solver known to man (and let me grift off of it for a little bit).</p>
]]></description><pubDate>Tue, 24 Mar 2026 05:54:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47499022</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47499022</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47499022</guid></item><item><title><![CDATA[New comment by blackcatsec in "Epoch confirms GPT5.4 Pro solved a frontier math open problem"]]></title><description><![CDATA[
<p>Sure, but this is absolutely not how people are viewing the AI lol.</p>
]]></description><pubDate>Tue, 24 Mar 2026 05:39:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47498951</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47498951</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47498951</guid></item><item><title><![CDATA[New comment by blackcatsec in "Epoch confirms GPT5.4 Pro solved a frontier math open problem"]]></title><description><![CDATA[
<p>This is a way too simplistic model of the things humans provide to the process. Imagination, Hypothesis, Testing, Intuition, and Proofing.<p>An AI can probably do an 'okay' job at summarizing information for meta studies. But what it can't do is go "Hey that's a weird thing in the result that hints at some other vector for this thing we should look at." Especially if that "thing" has never been analyzed before and there's no LLM-trained data on it.<p>LLMs will NEVER be able to do that, because it doesn't exist. They're not going to discover and define a new chemical, or a new species of animal. They're not going to be able to describe and analyze a new way of folding proteins and what implication that has UNLESS you basically are constantly training the AI on random protein folds constantly.</p>
]]></description><pubDate>Tue, 24 Mar 2026 05:36:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47498940</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47498940</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47498940</guid></item><item><title><![CDATA[New comment by blackcatsec in "OpenClaw is a security nightmare dressed up as a daydream"]]></title><description><![CDATA[
<p>This is it right here. I've long thought about this one and whether I should bother with an AI agent that can do all of this stuff for me, but the reality is both what you said and I'm not rich enough.<p>Do I want the AI Agent to take my bank account and automatically pay some bill every month in full? What if you go a little over that month due to an emergency expense you weren't prepared for? And it's not a matter of "I don't have enough in my bank account for this one time charge", but it's "I don't have enough in my bank account for this charge and 3 others coming at the end of the month." type deal.<p>Agents aren't going to be very good at that. "Hey I paid $3,000 on your credit card in order to prevent you from incurring interest. Interest is really bad to carry on a credit card and you should minimize that as much as possible." Me: "Yeah but I needed that money for rent this month." Agent: "Oh, yeah! I should have taken that into account! It looks like we can't reverse the charge for the payment."<p>Yeah, no fucking thank you LOL.</p>
]]></description><pubDate>Sun, 22 Mar 2026 20:59:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47482077</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47482077</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47482077</guid></item><item><title><![CDATA[New comment by blackcatsec in "XML is a cheap DSL"]]></title><description><![CDATA[
<p>Could you imagine hitting a rest api and like 25% of the bytes are comments? lol</p>
]]></description><pubDate>Sat, 14 Mar 2026 15:35:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=47377731</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47377731</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47377731</guid></item><item><title><![CDATA[New comment by blackcatsec in "Suburban school district uses license plate readers to verify student residency"]]></title><description><![CDATA[
<p>To be fair, the first point is a good point. But I'd argue that you should deploy them everywhere in order to not be  racist since we already generally know that the red light cameras are revenue generating devices. Is there some data on whether they increase safety? Preferably unbiased (probably not). Unsure.<p>Nonetheless, a fair point that deserves analysis. (My vote, to be fair, is ask the community what they want and put it up to a vote. With honest information on safety data versus revenue generation)</p>
]]></description><pubDate>Fri, 13 Mar 2026 02:31:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47360030</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47360030</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47360030</guid></item><item><title><![CDATA[New comment by blackcatsec in "Suburban school district uses license plate readers to verify student residency"]]></title><description><![CDATA[
<p>Likewise. I once got pulled over by the police because they insisted that my license plate had been turned in and I was driving without valid plates.<p>They called other officers, ran the plate, ran the VIN, ran the plate, ran the VIN. I dunno I think we sat there for almost an hour before they told me why they pulled me over and what was up.</p>
]]></description><pubDate>Thu, 12 Mar 2026 15:22:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47352061</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47352061</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47352061</guid></item><item><title><![CDATA[New comment by blackcatsec in "Suburban school district uses license plate readers to verify student residency"]]></title><description><![CDATA[
<p>While I'll make no judgment specifically on whether or not she is telling the truth, because the article itself isn't enough validation to say she is telling the truth here; I'll comment more on the comments in this thread.<p>At what point is automated enforcement a good or a bad thing for law breaking? We have yet to grapple with that as a society, and the short answer is there's no easy answer to this problem. Both for precisely the reason this article calls out (that overnight location of car is not a 100% accurate representation of residency, and fixing it seems like a mess); but also because people ARE inherently selfish and REALLY do not like the rules applying to them equally.<p>A great many people in the United States, particularly white (sorry, I'm going to bring race into this because it's important) enjoy some level of flexibility on what laws they follow and when. Certainly more flexibility than the average black experience. In fact, this problem is so bad that states like California have had to institute policies that allow things like license plate lights being out to exist because the profiling is so catastrophically bad that it's completely unfair.<p>So now, we have an automated system that at least tries to provide some level of fair enforcement. At least for now, things like speed cameras, red light cameras, license plate readers, etc. don't appear to openly consider racial bias in the immediate decision making process on whether the law is enforced or not. (There are other biases, of course, and even indirect bias with regards to where these things are placed, but I'll digress a bit here).<p>But even aside from the racial divide, the class divide on enforcement is a problem. And the upper classes have generally enjoyed a level of insulation from complying with laws, which just continues to go up the higher you climb (See: Epstein files). But that's on the more extreme end.<p>At any rate, better enforcement of laws that are now crossing the lower to middle class divide because automation allows us to do so is certainly an interesting social problem.</p>
]]></description><pubDate>Thu, 12 Mar 2026 15:14:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47351871</link><dc:creator>blackcatsec</dc:creator><comments>https://news.ycombinator.com/item?id=47351871</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47351871</guid></item></channel></rss>