<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: cbsmith</title><link>https://news.ycombinator.com/user?id=cbsmith</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 29 May 2026 23:12:43 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=cbsmith" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by cbsmith in "Velonus – Open-source AppSec scanner that deduplicates SAST noise"]]></title><description><![CDATA[
<p>Confirming it was fixed and it worked well.</p>
]]></description><pubDate>Sun, 17 May 2026 22:45:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48173838</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=48173838</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48173838</guid></item><item><title><![CDATA[New comment by cbsmith in "Velonus – Open-source AppSec scanner that deduplicates SAST noise"]]></title><description><![CDATA[
<p>Installing collected packages: sortedcontainers, boolean.py, urllib3, typing-extensions, tqdm, tomlkit, tomli-w, tomli, tenacity, stevedore, shellingham, ruamel-yaml, regex, PyYAML, pyparsing, pygments, pycparser, platformdirs, pip-api, packaging, packageurl-python, msgpack, mdurl, marshmallow, MarkupSafe, license-expression, joblib, idna, h11, filelock, defusedxml, click, charset_normalizer, certifi, annotated-types, annotated-doc, typing-inspection, requests, pydantic-core, py-serializable, pip-requirements-parser, nltk, markdown-it-py, jinja2, httpcore, dparse, cffi, anyio, rich, pydantic, httpx, cyclonedx-python-lib, cryptography, CacheControl, typer, safety-schemas, joserfc, bandit, pip-audit, authlib, safety, velonus
Successfully installed CacheControl-0.14.4 MarkupSafe-3.0.3 PyYAML-6.0.3 annotated-doc-0.0.4 annotated-types-0.7.0 anyio-4.13.0 authlib-1.7.2 bandit-1.9.4 boolean.py-5.0 certifi-2026.4.22 cffi-2.0.0 charset_normalizer-3.4.7 click-8.3.3 cryptography-48.0.0 cyclonedx-python-lib-11.7.0 defusedxml-0.7.1 dparse-0.6.4 filelock-3.29.0 h11-0.16.0 httpcore-1.0.9 httpx-0.28.1 idna-3.15 jinja2-3.1.6 joblib-1.5.3 joserfc-1.6.5 license-expression-30.4.4 markdown-it-py-4.2.0 marshmallow-4.3.0 mdurl-0.1.2 msgpack-1.1.2 nltk-3.9.4 packageurl-python-0.17.6 packaging-26.2 pip-api-0.0.34 pip-audit-2.10.0 pip-requirements-parser-32.0.1 platformdirs-4.9.6 py-serializable-2.1.0 pycparser-3.0 pydantic-2.13.4 pydantic-core-2.46.4 pygments-2.20.0 pyparsing-3.3.2 regex-2026.5.9 requests-2.34.2 rich-15.0.0 ruamel-yaml-0.19.1 safety-3.7.0 safety-schemas-0.0.16 shellingham-1.5.4 sortedcontainers-2.4.0 stevedore-5.7.0 tenacity-9.1.4 tomli-2.4.1 tomli-w-1.2.0 tomlkit-0.15.0 tqdm-4.67.3 typer-0.25.1 typing-extensions-4.15.0 typing-inspection-0.4.2 urllib3-2.7.0 velonus-1.0.0a1<p>(venv) $ velonus scan data<p>Traceback (most recent call last):<p><pre><code>  File "~/venv/bin/velonus", line 5, in <module>

    from shield.main import app

  File "~/venv/lib/python3.12/site-packages/shield/main.py", line 15, in <module>

    from shield.commands import auth, config, scan

  File "~/venv/lib/python3.12/site-packages/shield/commands/scan.py", line 32, in <module>

    from scanner.pipeline import ScanPipeline</code></pre>
ModuleNotFoundError: No module named 'scanner'</p>
]]></description><pubDate>Fri, 15 May 2026 04:02:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48144413</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=48144413</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48144413</guid></item><item><title><![CDATA[New comment by cbsmith in "Computer Hobby Movement in Canada"]]></title><description><![CDATA[
<p>Wow. I remember the Toronto PET Users Group. That takes me back.</p>
]]></description><pubDate>Thu, 14 May 2026 22:52:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48142328</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=48142328</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48142328</guid></item><item><title><![CDATA[New comment by cbsmith in "A message from President Kornbluth about funding and the talent pipeline"]]></title><description><![CDATA[
<p>He he. If you think the costs for an education will go down because they're seeing fewer applications and they're getting less funding from other sources, I have bad news for you.</p>
]]></description><pubDate>Thu, 14 May 2026 18:54:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48139604</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=48139604</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48139604</guid></item><item><title><![CDATA[New comment by cbsmith in "The limits of Rust, or why you should probably not follow Amazon and Cloudflare"]]></title><description><![CDATA[
<p>This is a bizarre article, and it kind of reminds me of the concept that the only truly good software is the software you've never used.</p>
]]></description><pubDate>Wed, 13 May 2026 15:49:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=48123512</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=48123512</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48123512</guid></item><item><title><![CDATA[New comment by cbsmith in "Facebook Has a Health Scam Problem"]]></title><description><![CDATA[
<p>Also correct. I see the problem as particularly rampant with the video sites.</p>
]]></description><pubDate>Wed, 29 Apr 2026 19:21:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=47953108</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47953108</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47953108</guid></item><item><title><![CDATA[New comment by cbsmith in "Facebook Has a Health Scam Problem"]]></title><description><![CDATA[
<p>I was going to say: "in what way is the problem restricted to health?"</p>
]]></description><pubDate>Wed, 29 Apr 2026 14:33:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47949021</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47949021</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47949021</guid></item><item><title><![CDATA[New comment by cbsmith in "GTFOBins"]]></title><description><![CDATA[
<p>It's kind of a comprehensive guide to all the ways that restricted shells don't.</p>
]]></description><pubDate>Tue, 28 Apr 2026 16:09:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47936400</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47936400</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47936400</guid></item><item><title><![CDATA[New comment by cbsmith in "Framework Laptop 13 Pro"]]></title><description><![CDATA[
<p>Yup. Sounds right. Interestingly though, you can use the new input cover with the older frames.</p>
]]></description><pubDate>Wed, 22 Apr 2026 00:57:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47857248</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47857248</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47857248</guid></item><item><title><![CDATA[New comment by cbsmith in "Framework Laptop 13 Pro"]]></title><description><![CDATA[
<p>More like the reverse: if you want the new battery you need a new bottom.</p>
]]></description><pubDate>Tue, 21 Apr 2026 23:14:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47856077</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47856077</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47856077</guid></item><item><title><![CDATA[New comment by cbsmith in "Live Nation illegally monopolized ticketing market, jury finds"]]></title><description><![CDATA[
<p>Ask yourself why airlines deliberately overbook flights while venues do their best to never overbook events, why are subject to identify verification before a flight, and why you go through the TSA before you board... and you'll start to understand why airline seats are maybe not such the perfect metaphor for concert seats.</p>
]]></description><pubDate>Thu, 16 Apr 2026 07:50:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47789958</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47789958</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47789958</guid></item><item><title><![CDATA[New comment by cbsmith in "Live Nation illegally monopolized ticketing market, jury finds"]]></title><description><![CDATA[
<p>> If only the federal government were allowed to pursue this case, it would have ended when the administration changed.<p>This is more why DOJ cases should remain independent from the executive branch. Politically controlled prosecutions means justice is intrinsically unequal. Having states be independent is helpful, but not in this regard.</p>
]]></description><pubDate>Thu, 16 Apr 2026 04:23:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=47788639</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47788639</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47788639</guid></item><item><title><![CDATA[New comment by cbsmith in "Live Nation illegally monopolized ticketing market, jury finds"]]></title><description><![CDATA[
<p>> Because artists don't always want to extract the maximum money possible from their fanbase?<p>I think that's both true and not. The larger truth is that trying to maximize the extraction during a single ticket sale is incredibly short-sighted of an artist. Having fans attend shows is a very effective way to grow your fan base and your brand, and that brings so much more lifetime value for an artist than you'd ever get from a single ticket sale (except for <i>maybe</i> on your retirement tour --and even then).</p>
]]></description><pubDate>Thu, 16 Apr 2026 04:19:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47788616</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47788616</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47788616</guid></item><item><title><![CDATA[New comment by cbsmith in "Live Nation illegally monopolized ticketing market, jury finds"]]></title><description><![CDATA[
<p>> They don't seem to mention the most obvious reason: the same companies profit from both the primary and secondary market.<p>That's not true. Ticketmaster has a monopoly (or near-monopoly) on the primary market. On the secondary market they have a fraction of the market; the dominant players are StubHub, SeatGeek, and Vivid. Furthermore, most of the revenue from primary ticket sales goes to the venue and the artist/promoter, and they are usually completely disintermediated from the resale market.</p>
]]></description><pubDate>Thu, 16 Apr 2026 04:15:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47788591</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47788591</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47788591</guid></item><item><title><![CDATA[New comment by cbsmith in "Live Nation illegally monopolized ticketing market, jury finds"]]></title><description><![CDATA[
<p>> Why not just ban the transfer of tickets and allow refunds?<p>There are laws against transfer bans. Also, people don't like being required to provide identity information just to buy a ticket to a live event, and venues HATE enforcing identity checks.<p>...and you'd be surprised how often you can get a refund on tickets just by asking your venue for a refund.<p>> First choice in seats goes to the most passionate and attentive fans.<p>Now you've opened the debate about how to determine which fans are the most passionate and attentive... ;-) Ticketmaster has a service for this that attempts to address this called Verified Fan.</p>
]]></description><pubDate>Thu, 16 Apr 2026 04:10:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=47788564</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47788564</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47788564</guid></item><item><title><![CDATA[New comment by cbsmith in "Live Nation illegally monopolized ticketing market, jury finds"]]></title><description><![CDATA[
<p>> A perhaps bigger issue is the vertical integration (if that's the right term) of first-party ticket sales and resale in one company.<p>The monopoly findings were about vertical integration, but the resale issue wasn't. I think, if you do some research, you discover that the vertical integration issues they were concerned about are actually a bigger part of the problem.<p>> Ticketmaster has no real incentive to try to prevent resellers from buying up all the tickets on first sale, because it gets to charge fees on all the resales through its platform.<p>The incentives for to prevent abuse of the primary ticket sale is that the venues, who actually decide how tickets are sold, don't like it. If Ticketmaster doesn't make them happy, they go elsewhere and lose out on the primary market. Perhaps ironically, they are often less concerned about abuse if they still have control over the ticket resale as well, which they often do when the resale happens on Ticketmaster. In practice though, most of the resale doesn't happen on Ticketmaster; this gives both the venues and Ticketmaster plenty of incentive to combat abuse.<p>> I'd like to see tickets sold by dutch auction.<p>Pretty much everyone who first enters the ticketing industry thinks auctions are a better way to sell tickets until they learn how the industry works. Interestingly, Ticketmaster offers auction-based ticket sales. You wouldn't know this, because venues don't want to use it. You might think a dutch auction for tickets would be great, but people who experience the reality often don't. Dutch auctions work when you're selling a commodity where each item is effectively the same as the other. Often people value each seat for an event differently. Dutch auctions, by their very nature, require the a fixed time window for the auction, which makes them difficult to fit the outcome you're describing... that would more be handled by some form of yield management where venues release blocks of tickets for sale at specific time windows, which is something that already happens in the live event business.<p>There's all kinds of dark aspects to the live event business, but it's generally completely different from the perception of the general public.</p>
]]></description><pubDate>Thu, 16 Apr 2026 04:04:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47788533</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47788533</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47788533</guid></item><item><title><![CDATA[New comment by cbsmith in "EFF is leaving X"]]></title><description><![CDATA[
<p>Appears being the operative word.</p>
]]></description><pubDate>Fri, 10 Apr 2026 05:03:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47713837</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47713837</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47713837</guid></item><item><title><![CDATA[New comment by cbsmith in "EFF is leaving X"]]></title><description><![CDATA[
<p>It sort of doesn't matter. Bottom line is it isn't an effective platform for them.</p>
]]></description><pubDate>Fri, 10 Apr 2026 05:01:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=47713830</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47713830</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47713830</guid></item><item><title><![CDATA[New comment by cbsmith in "EFF is leaving X"]]></title><description><![CDATA[
<p>If you think it is "essentially zero cost", I'm going to respectfully suggest you do not understand what you read. If you think they reached 13 million people on X last year, you do not understand social media.<p>They have made 399 posts to YouTube over the life of their YouTube channel, so that's an average of 20 posts a year.<p>I'm sorry, but you're projecting a subtext.</p>
]]></description><pubDate>Fri, 10 Apr 2026 01:13:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47712367</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47712367</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47712367</guid></item><item><title><![CDATA[New comment by cbsmith in "EFF is leaving X"]]></title><description><![CDATA[
<p>It's really weird that the EFF would post something on their own site to speak to their supporters, and that it would employ "identity-group-affirming language".<p>Just because they issue one post that is targeting their supporters doesn't mean that they don't care or are ignorant about the broader audience. That's ridiculous.</p>
]]></description><pubDate>Fri, 10 Apr 2026 00:59:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47712282</link><dc:creator>cbsmith</dc:creator><comments>https://news.ycombinator.com/item?id=47712282</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47712282</guid></item></channel></rss>