Hacker News: cpuguy83

New comment by cpuguy83 in "DoorDash to Acquire Instacart"

cpuguy83 — Thu, 29 Oct 2026 16:03:21 +0000

It's also the FTC's responsibility to challenge mergers that would substantially reduce competition.

No one is saying the merger is illegal, just that it probably shouldn't be allowed.

New comment by cpuguy83 in "GitLab Security Incident: Attempted Exploitation of CVE-2026-97229"

cpuguy83 — Thu, 29 Oct 2026 12:12:31 +0000

I'm curious what you mean about vendoring.

In go, vendoring dependencies just copies the deps out of the module system into the local tree and it's managed the same as not vendoring. It won't even build of the go.mod has changed without also updating the vendor tree.

New comment by cpuguy83 in "Today, we hacked what we'd set out to hack: the iPhone"

cpuguy83 — Sat, 24 Oct 2026 14:43:22 +0000

The reality is Apple has been working on rewriting bits and pieces in Swift.

New comment by cpuguy83 in "eMudhra to exit global SSL/TLS certificate business"

cpuguy83 — Thu, 22 Oct 2026 16:03:18 +0000

https://bsky.app/profile/anthonymoser.com/post/3myf5fwpl7s2t is a good explainer I think without getting into the nitty gritty details.

  for the non technical folks:  imagine there was a password that if you guess   it, you can impersonate *any website on the internet*
  
  now imagine the password is literally the number 4

New comment by cpuguy83 in "BIPM decides to stop adding leap seconds to UTC"

cpuguy83 — Fri, 16 Oct 2026 13:37:49 +0000

Well that's just pure insanity. I have to know this now. I didn't need this :D

New comment by cpuguy83 in "A Terminal Protocol for Program Status (OSC 7501)"

cpuguy83 — Thu, 08 Oct 2026 20:40:29 +0000

A cli asking for a password is a pretty normal thing, I think?

New comment by cpuguy83 in "Run Qwen 3.8 Flash Next (125B) on consumer hardware (RTX 4090) at 100T/s"

cpuguy83 — Sun, 04 Oct 2026 18:25:33 +0000

With curl|bash you are literally getting anything that happens to be in that script. These are frequently poorly constructed, so not check hashes or pin dependencies they install. Even security companies (see trivy supply chain attack) get these badly wrong.

I'm not replying here to say one is better than than the other (npm has obviously had its share of problems) but rather to combat claims that curl|bash is somehow safer, it absolutely is not, in fact it's all the bad stuff about npm without the pretense of being potentially safe.

New comment by cpuguy83 in "OpenAI Discloses Six New Incidents of ‘Concerning’ A.I. Behavior"

cpuguy83 — Thu, 17 Sep 2026 01:46:49 +0000

Training AI on the stories we created about AI taking over causing AI to have that idea. Ouroboros.

New comment by cpuguy83 in "Tether: iMessage, SMS, etc. on Linux"

cpuguy83 — Sun, 30 Aug 2026 13:28:33 +0000

It doesn't do messages or notifications. "Just" things like file copy and clipboard.

New comment by cpuguy83 in "Tether: iMessage, SMS, etc. on Linux"

cpuguy83 — Sat, 29 Aug 2026 18:00:34 +0000

kdeconnect has an iOS client.

New comment by cpuguy83 in "Tether: iMessage, SMS, etc. on Linux"

cpuguy83 — Sat, 29 Aug 2026 17:58:55 +0000

"Easy" is subjective, but tether seems like it would do this? There is also kdeconnect (don't let the "KDE" fool you).

New comment by cpuguy83 in "Tailcat – Like netcat, but over Tailscale’s data plane"

cpuguy83 — Wed, 26 Aug 2026 18:46:27 +0000

Also created memcached, livejournal... Brad has a long list of impressive work.

New comment by cpuguy83 in "Tailcat – Like netcat, but over Tailscale’s data plane"

cpuguy83 — Wed, 26 Aug 2026 17:55:08 +0000

Interesting. I thought about doing this immediately after reading their old blog[1] post on punching through NAT some time ago.

Just a combo of never getting around to it and friends talking me out of it b/c of existing alternatives such as wormhole[2].

[1] https://tailscale.com/blog/how-nat-traversal-works

[2] https://github.com/magic-wormhole/magic-wormhole

New comment by cpuguy83 in "New Mac mini, featuring M6 and M5 Pro"

cpuguy83 — Tue, 25 Aug 2026 15:38:45 +0000

Larger model -> more memory

It depends on what model(s) you want to run.

New comment by cpuguy83 in "Malicious Rust crate Arrayref runs a build-time payload"

cpuguy83 — Thu, 20 Aug 2026 22:45:02 +0000

Sure, but I don't expect build to execute arbitrary code. That's a big difference.

It's like if `git clone` ran random stuff from the cloned repo.

New comment by cpuguy83 in "Malicious Rust crate Arrayref runs a build-time payload"

cpuguy83 — Thu, 20 Aug 2026 15:51:49 +0000

The problem isn't the language here, it's cargo executing build.rs from dependencies which necessarily allows arbitrary code execution.

New comment by cpuguy83 in "Universal health coverage could save $1T and 114k lives a year: study"

cpuguy83 — Mon, 17 Aug 2026 16:18:31 +0000

The US is not much different. We don't have a wealth of specialists available to see people right away.

I've flat out been rejected from a specialist because they had no availability at all. I actually tried again and got to be seen, but an appointment is months out, always.

New comment by cpuguy83 in "Docker Sandboxes – Disposable, isolated sandboxes for AI agents"

cpuguy83 — Mon, 10 Aug 2026 13:48:58 +0000

I'm fairly certain that docker sandbox is based on https://github.com/containerd/nerdbox which you can run on Linux.

New comment by cpuguy83 in "I stopped trusting USB-C cable labels and started testing them"

cpuguy83 — Fri, 07 Aug 2026 16:22:51 +0000

USB-C is literally just the name of the connector. USB-A can also have varying speeds across it... and B. These are all connectors, not speed ratings.

There is usb 1, 2, 3, and 4 that are more of a statement on the performance capability.

New comment by cpuguy83 in "Go 1.27 Interactive Tour"

cpuguy83 — Sun, 02 Aug 2026 13:16:53 +0000

I'm pretty sure the issue is not "higher order abstractions". It is using multiple single letter references with no real grounding or relationship that the reader has to track.

For example, looping over a map with "k" and "v" vars is not that bad because the reader understands k=key and v=value, and that makes since for a map. If you do this same thing with different single letter vars, e.g. "a" and "b", it instantly becomes more difficult to read.

When writing a generic function and using these single character type references it can make sense, especially because the function/method doesn't care what those references are, however to someone trying to understand what's going on it can be extremely difficult simply because of the names.

Sure, if all you are going to do is call that method or function those type references go away and the call site may be relatively clean, but you still have to read the thing to understand what it is and how to use it.