Hacker News: ctippett

New comment by ctippett in "Ten days later, Git on macOS still trusts the compromised eMudhra certificates"

ctippett — Wed, 28 Oct 2026 13:13:33 +0000

They wouldn't. A device like the Pineapple broadcasts its own copycat wireless signal and tricks unsuspecting clients to connect to it thinking it's the real one.

Edit: Holy moly we all jumped on this comment at the same time didn't we.

New comment by ctippett in "Tailscale SSH: Investigation and remediation update"

ctippett — Wed, 28 Oct 2026 07:52:58 +0000

This was(/is?) a great write-up. Would the vulnerability enabled through Taildrop still work if the compromised machine was tagged or would the attacker's control of the... control plane make this additional safeguard redundant?

New comment by ctippett in "Tailscale SSH: Investigation and remediation update"

ctippett — Wed, 28 Oct 2026 05:15:04 +0000

Tags are a key part of managing ACLs. If you're concerned about an untrustworthy node on your tailnet, use tags. Even if you forget to add a tag to a newly added node (API keys can be set to automatically assume a tag when used fwiw), if your other devices are tagged then they're ineligible for taildrop.

New comment by ctippett in "Tailscale SSH: Investigation and remediation update"

ctippett — Wed, 28 Oct 2026 05:07:39 +0000

Taildrop only works with devices that are yours, i.e. you can't send or receive anything from a device that's either tagged or owned by someone else. The only way malware is getting onto your NAS (via Taildrop) is if you're the one sending it there.

New comment by ctippett in "Today, we hacked what we'd set out to hack: the iPhone"

ctippett — Sat, 24 Oct 2026 12:26:48 +0000

You can do that already without jailbreaking with a-Shell[1]. It includes a wasm compiled ffmpeg binary and you can install (Python only) pip packages.

[1]: https://holzschu.github.io/a-Shell_iOS/

New comment by ctippett in "Quad9 (DNS Resolver) to Exit France"

ctippett — Thu, 22 Oct 2026 19:32:02 +0000

Sometimes when I come up with analogies they miss the mark. Yours was on point.

New comment by ctippett in "Plex laid off the whole player team"

ctippett — Wed, 21 Oct 2026 23:01:56 +0000

Someone created a native Plex client[1] for WebOS and it's an absolute dream. The responsiveness of the interface is really very impressive, especially considering my TV is coming up 10 years old.

[1] https://plxnative.com

New comment by ctippett in "DeepSeek search and fetch – $0.75 per 1000 successful requests"

ctippett — Sun, 18 Oct 2026 13:49:13 +0000

I like the idea, but its a surefire way of bloating the context. Although I guess you'd want a subagent to do the search.

New comment by ctippett in "GLM-Legal"

ctippett — Tue, 13 Oct 2026 02:33:13 +0000

  > In theory, theory and practice are the same. In practice, they're not.

This is such beautiful rhetoric.

New comment by ctippett in "Once: Cache CLI commands"

ctippett — Sat, 10 Oct 2026 11:54:21 +0000

Unfortunately not, the preexec event happens asynchronously from the actual execution of the command. You can't manipulate or otherwise log the output of what's run, all you get is a copy of the command text.

New comment by ctippett in "Once: Cache CLI Commands"

ctippett — Fri, 09 Oct 2026 13:31:17 +0000

You could probably achieve something like that using Fish shell and their fish_preexec and fish_postexec event hooks.

Edit: Nope, looks like you can't. You only get the invoked command and no output.

New comment by ctippett in "ChatGPT is adding real cartoonists' signatures to fake New Yorker cartoons"

ctippett — Tue, 06 Oct 2026 00:28:33 +0000

This. It's also while you'll sometimes get a mangled Getty Images watermark on some image generations, or a logo in the bottom left corner. If it's a prominent feature in the training dataset it'll show up, exactly how these models are supposed to work.

The 'bug' here is whatever post-processing step or system prompt is in place to steer the model away from doing this.

New comment by ctippett in "In the wake of Tippett Studios’ closure, a digital archive appears online"

ctippett — Mon, 05 Oct 2026 18:42:30 +0000

Perhaps not an HN username, but several Tippett's seem to think they all share my gmail address based on the invitations, council minutes, school notices and bank statements that get sent my way.

The best was another famous Tippett of NFL fame sending me a $500 gift voucher for their son's birthday.

New comment by ctippett in "In the wake of Tippett Studios’ closure, a digital archive appears online"

ctippett — Mon, 05 Oct 2026 15:35:46 +0000

Two T's my good friend. Two T's.

New comment by ctippett in "In the wake of Tippett Studios’ closure, a digital archive appears online"

ctippett — Mon, 05 Oct 2026 15:33:19 +0000

I wonder what will come of the domain tippett.com. Hopefully Phil gets to hold on to it despite the bankruptcy, he's had it since 1995!

I can't imagine anyone else being interested in it...

New comment by ctippett in "Turn off Apple Intelligence on macOS 27 and get its disk space back"

ctippett — Mon, 05 Oct 2026 05:20:27 +0000

  I can uninstall Pages and Garage Band.

Not Chess.app though!

New comment by ctippett in "macOS Golden Gate Is a Buggy Mess"

ctippett — Fri, 02 Oct 2026 07:42:58 +0000

Figured it out, it's a shortcut in Raycast that I obviously forgot I'd set up.

New comment by ctippett in "CSS Bed: Classless CSS themes to use as starting points in web development"

ctippett — Fri, 02 Oct 2026 06:22:54 +0000

holiday.css for me, only 5kb to boot.

New comment by ctippett in "CSS Bed: Classless CSS themes to use as starting points in web development"

ctippett — Fri, 02 Oct 2026 06:16:19 +0000

Not only that, but very few of them differentiate between a visited link and an unvisited one. I noticed this immediately when clicking through the list of themes and getting no visual indication of which ones I'd already looked at.

New comment by ctippett in "PS5 Relapse Exploit"

ctippett — Tue, 29 Sep 2026 21:54:10 +0000

I noticed this exact flavour of frustration in the webOS jailbreak scene. Some newcomer proudly announced a vulnerability they found only to be met with hostility because it was seen as premature and unnecessary given there was already an existing jailbreak available that had yet to be patched.