<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: comex</title><link>https://news.ycombinator.com/user?id=comex</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 18 Oct 2026 03:25:03 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=comex" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by comex in "Claude reveals ECDSA curve origins"]]></title><description><![CDATA[
<p>Correct.</p>
]]></description><pubDate>Sat, 17 Oct 2026 07:56:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=50128930</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50128930</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50128930</guid></item><item><title><![CDATA[New comment by comex in "Claude reveals ECDSA curve origins"]]></title><description><![CDATA[
<p>I'm skeptical that this particular task would get blocked, though I could be wrong.  But I agree that the moat is a problem in the general case.</p>
]]></description><pubDate>Fri, 16 Oct 2026 19:16:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=50123109</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50123109</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50123109</guid></item><item><title><![CDATA[New comment by comex in "Libreboot 26.10 "Ominous Olive" released with UEFI, Chromebook support"]]></title><description><![CDATA[
<p>Presumably yes.  It is safe to assume that algorithms running the model changed, the training procedures changed, and the scale changed.  Unfortunately the AI companies refuse to disclose the details of any of this, which is a harm to human knowledge (hopefully a temporary one).  Yet the results speak for themselves.<p>For me it's only been in the last month with Opus 5.5 that I've been seeing code quality I actually respect (though this is with substantial human effort in the loop).  Though this experience is from work where I don't have access to non-Anthropic models, nor Fable.</p>
]]></description><pubDate>Fri, 16 Oct 2026 06:59:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=50115061</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50115061</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50115061</guid></item><item><title><![CDATA[New comment by comex in "Has AI tells"]]></title><description><![CDATA[
<p>I agree, with respect to the status quo where AI writing is associated with lower quality.<p>In the long term, AI writing - mostly done solo, not directed by humans - will likely have higher quality than human writing, while being better suited to people's tastes since it can be personalized for every reader.  If so, it's not hard to imagine it crowding out human writing.<p>You might ask, though, is that a bad thing?  If it's legitimately higher quality, then what's wrong with consuming it?  Well, I don't know.  It certainly seems dangerous for everyone to be in their own little bubble of content.  Social media of course tries to do that today, but there are limits.  You can't pick any topic, any set of attitudes you want and get an infinite supply of content tailored exactly for you.  Even if you find some super niche community to set up shop in, it's still a community; you're still exposed to the outside world at least a little.  What happens when that changes?</p>
]]></description><pubDate>Thu, 15 Oct 2026 06:03:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=50099810</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50099810</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50099810</guid></item><item><title><![CDATA[New comment by comex in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>It can’t, because passkeys are bound to specific domains and you simply aren’t given the option to log in with a passkey on the wrong domain.</p>
]]></description><pubDate>Thu, 15 Oct 2026 02:35:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=50098460</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50098460</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50098460</guid></item><item><title><![CDATA[New comment by comex in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>At least on iOS it’s any app that implements the protocol.  That includes Bitwarden, which is server-based but self-hostable.  In the future it should also include apps like Strongbox and KeePassium which store the private keys directly in a portable .kdbx file.</p>
]]></description><pubDate>Thu, 15 Oct 2026 02:28:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=50098411</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50098411</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50098411</guid></item><item><title><![CDATA[New comment by comex in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>I’ve run into this issue multiple times, no custom hardware involved.  Just virtual machines that didn’t support Bluetooth, and physically distant computers I was controlling remotely.</p>
]]></description><pubDate>Thu, 15 Oct 2026 02:09:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=50098295</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50098295</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50098295</guid></item><item><title><![CDATA[New comment by comex in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>You don’t have to use a password manager that relies on an account.  Personally I use Strongbox on iOS and macOS, which stores everything (including passkeys) in a .kdbx file.  I then sync the .kdbx file over iCloud, but if I lost access to iCloud then there would still be copies of the file on all my devices.  Overall this is not as secure as the more centralized alternatives, but it does leave me in control.</p>
]]></description><pubDate>Thu, 15 Oct 2026 02:05:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=50098266</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50098266</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50098266</guid></item><item><title><![CDATA[New comment by comex in "Passkeys are not a trap"]]></title><description><![CDATA[
<p>Though obnoxiously, the public computer login method doesn’t rely solely on the QR code it shows, but also uses Bluetooth.  So if you want to log in on a VM or computer without Bluetooth, or a physically distant computer being accessed remotely, you have no choice but to install your password manager on that computer.  Which is a lot less secure than copying a single password and one-time code.</p>
]]></description><pubDate>Thu, 15 Oct 2026 01:55:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=50098196</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50098196</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50098196</guid></item><item><title><![CDATA[New comment by comex in "Ask HN: Do you want a router that has DD-WRT pre-installed?"]]></title><description><![CDATA[
<p>The OpenWrt One is really not a great piece of hardware.  No 6GHz, and only two Ethernet ports, one of which is only 1Gbit.  The latest GL.iNet products are apparently better, but also apparently don't run stock OpenWrt, only a fork of it.  In other words, there's still plenty of room in the market for good routers with open-source firmware.</p>
]]></description><pubDate>Mon, 12 Oct 2026 01:57:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=50050372</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50050372</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50050372</guid></item><item><title><![CDATA[New comment by comex in "Ask HN: Do you want a router that has DD-WRT pre-installed?"]]></title><description><![CDATA[
<p>I know how to flash firmware, but I'd still rather buy routers that have open-source firmware pre-flashed and tested by the vendor.  This is simply because I've often run into issues with OpenWrt.  I once bought a bunch of Archer C7s because it was described as a good router for OpenWrt, only to discover dmesg full of crashes from the proprietary wireless firmware running on the 5Ghz chip.  In another case, I learned long after installing OpenWrt that the performance was much worse than stock firmware because OpenWrt didn't support hardware routing offload.</p>
]]></description><pubDate>Mon, 12 Oct 2026 01:48:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=50050314</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=50050314</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50050314</guid></item><item><title><![CDATA[New comment by comex in "Penguin Mail – open-source Rust email client for Linux with AI"]]></title><description><![CDATA[
<p>It's vibecoded - new, large codebases are par for the course.<p>(This used to come at the cost of code quality, but increasingly does not.)</p>
]]></description><pubDate>Wed, 07 Oct 2026 01:57:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=49987032</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49987032</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49987032</guid></item><item><title><![CDATA[New comment by comex in "Mistral Large 4"]]></title><description><![CDATA[
<p>It's unclear how big a role distillation plays, but it may be a big one.  There's also a law of diminishing returns.  To get a meaningful increase in model quality you seemingly need an exponentially larger model.  And most people don't think K3 is actually on par with top closed models.</p>
]]></description><pubDate>Tue, 06 Oct 2026 21:10:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=49984195</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49984195</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49984195</guid></item><item><title><![CDATA[New comment by comex in "cp: -r or -R?"]]></title><description><![CDATA[
<p>Many of those utilities, if you inspect the source code, are recognizably the same programs as their original versions written 30+ years ago.  They’ve been maintained and changed over the years, sure, but they’ve rarely needed big changes.  After all, they’re simple programs that do basically the same job today as they did then, using basically the same API surface.<p>The main issue with this is that the programs are usually still single-threaded.  For some key utilities like find and grep, this has allowed more modern alternatives to leapfrog them in performance.  (To be fair, it’s hard to add parallelism without breaking compatibility somewhat.)<p>But in most <i>other</i> respects, there’s nothing wrong with being a little old-fashioned.  Using global variables is an example of that.  It’s a problem in larger programs but at this scale it’s fine.</p>
]]></description><pubDate>Mon, 05 Oct 2026 07:58:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=49961937</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49961937</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49961937</guid></item><item><title><![CDATA[New comment by comex in "Updates to Full Disk Access in macOS"]]></title><description><![CDATA[
<p>That doesn't really make a difference, as TCC permissions don't care if you're root or not.</p>
]]></description><pubDate>Sun, 04 Oct 2026 03:43:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=49950388</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49950388</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49950388</guid></item><item><title><![CDATA[New comment by comex in "Updates to Full Disk Access in macOS"]]></title><description><![CDATA[
<p>Yes, and macOS entitlements work similarly, as you know.  I was interpreting “what it expects its children should be able to do” as a single rule for all child processes, like in OpenBSD pledge() which the parent seems to be referring to.  Sure, such a rule could securely be greater than the parent’s own permissions if you strictly limit what processes can be executed with what arguments.<p>Actually, there’s another exception to my previous statement that I should have mentioned.  For mitigations that are meant to prevent an attacker from turning memory corruption into code execution or code-execution-like control – such as restrictions on mapping memory executable (at least that’s one purpose for such restrictions), or memory map lockdown – the mitigations’ effectiveness doesn’t depend on whether they’re applied to children.  Those mitigations are sometimes treated as part of the sandbox system, sometimes separate.</p>
]]></description><pubDate>Sat, 03 Oct 2026 18:29:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=49946560</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49946560</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49946560</guid></item><item><title><![CDATA[New comment by comex in "Updates to Full Disk Access in macOS"]]></title><description><![CDATA[
<p>The backup apps I'm familiar with read files directly; they don't use asr.<p>If asr <i>can</i> be used to bypass FDA then that is just a security vulnerability.</p>
]]></description><pubDate>Sat, 03 Oct 2026 05:54:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=49941679</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49941679</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49941679</guid></item><item><title><![CDATA[New comment by comex in "Updates to Full Disk Access in macOS"]]></title><description><![CDATA[
<p>Yes.  Sandboxed apps do get their own home directories (~/Library/Containers/.../Data) and this home directory does contain a Documents directory, but this is just for compatibility's sake – there is no reason to actually use it for anything.  Files that an app saves by itself are typically expected to be stored under Library/Application Support or Library/Caches, and this is still true even for a sandboxed home directory.  Documents is reserved for files the user saves manually, but as mentioned, manually-saved files should reach the real ~/Documents.<p>Though, there is also a <i>third</i> type of Documents directory, the kind located at paths such as ~/Library/Mobile Documents/com~apple~TextEdit/Documents.  This  is part of iCloud Drive and is the same directory that you get in Finder by going to iCloud Drive -> TextEdit.  Very confusing.</p>
]]></description><pubDate>Sat, 03 Oct 2026 05:52:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=49941672</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49941672</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49941672</guid></item><item><title><![CDATA[New comment by comex in "Updates to Full Disk Access in macOS"]]></title><description><![CDATA[
<p>The latter does need to be a subset of the former, or else an attacker can trivially work around limitations on "what it should be able to do" by spawning a child instead of doing the thing directly.<p>But yes, it's unfortunate that macOS sandboxes cannot be nested.</p>
]]></description><pubDate>Sat, 03 Oct 2026 05:37:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49941611</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49941611</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49941611</guid></item><item><title><![CDATA[New comment by comex in "F-Droid 2.0"]]></title><description><![CDATA[
<p>I notice that<p><pre><code>    Syncthing-For
    k
</code></pre>
is one of the first pieces of text in the first screenshot.  With the k on its own line like that.  Not usually something I’d comment on, but if you’re showing off a redesign…</p>
]]></description><pubDate>Thu, 24 Sep 2026 18:50:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=49835185</link><dc:creator>comex</dc:creator><comments>https://news.ycombinator.com/item?id=49835185</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49835185</guid></item></channel></rss>