Hacker News: danslo

New comment by danslo in "New Nginx Exploit"

danslo — Thu, 14 May 2026 17:38:26 +0000

This one's pretty bad but there are some preconditions.

Requires a "rewrite" directive with a questionmark in the replacement string, and then a subsequent "set" directive that references a regex capture group (e.g. set $var $1).

Also the POC assumes ASLR is disabled.

New comment by danslo in "Regression: malware reminder on every read still causes subagent refusals"

danslo — Wed, 29 Apr 2026 07:15:10 +0000

We're enrolled in the Cyber Verification Program and Claude will happily help me look for vulnerabilities and built POCs demonstrating RCE. But when I point it to a malware sample and ask for analysis it will still refuse any work. It's incredibly frustrating.

New comment by danslo in "Exploiting the most prominent AI agent benchmarks"

danslo — Sat, 11 Apr 2026 20:20:10 +0000

If only the blog itself wasn't written by AI?

>No reasoning. No capability. Just exploitation of how the score is computed.

shudder

New comment by danslo in "Tailscale's new macOS home"

danslo — Thu, 02 Apr 2026 20:05:19 +0000

The only reason I used Tailscale's menubar applet was to change exit nodes, I definitely don't need a whole UI.

Guess I'll just stick with CLI only for now (via darwin-nix)

New comment by danslo in "Apple Just Lost Me"

danslo — Wed, 25 Mar 2026 15:34:20 +0000

If you're OK with it draining 3% battery per hour when you close the lid, sure.

New comment by danslo in "Claude Code LSP"

danslo — Mon, 02 Mar 2026 12:58:49 +0000

Not sure if it's Claude Code or golsp, but I had to uninstall the plugin. Regularly makes Claude Code crash with golsp going to 100% CPU usage.

Building a faster YARA engine in pure Go

danslo — Thu, 19 Feb 2026 21:55:42 +0000

Article URL: https://sansec.io/research/yargo

Comments URL: https://news.ycombinator.com/item?id=47080087

Points: 1

# Comments: 0

New comment by danslo in "If you tax them, will they leave?"

danslo — Wed, 28 Jan 2026 13:13:52 +0000

It is as long as they're not refunding you when you make a loss.

New comment by danslo in "AGI is not possible even in 10 years"

danslo — Thu, 27 Nov 2025 13:53:26 +0000

This is slop right?

>This isn’t a minor gap; it’s a fundamental limitation.

>His timeline? At least a decade, probably much longer.

>What does that mean? Simply throwing more computing power and data at current models isn’t working anymore.

>His timeline for truly useful agents? About ten years.

New comment by danslo in "What the hell have you built"

danslo — Thu, 06 Nov 2025 09:22:21 +0000

s/postgres/sqlite/g

New comment by danslo in "Notes on switching to Helix from Vim"

danslo — Fri, 10 Oct 2025 19:05:05 +0000

I tried to switch from neovim to helix for a couple weeks, but noted down the following things that were essential to me and not implemented yet:

- Code actions on save, for example adding Go imports: https://github.com/helix-editor/helix/pull/6486

- Fuzzy search with a filepicker like telescope+rg, seems to have been added earlier this year: https://github.com/helix-editor/helix/pull/11285

- Automatically updating buffers when the files on disk change (claude, templ, sqlc, etc): https://github.com/helix-editor/helix/issues/1125

- File tree in browser, which has been rejected in favor of a plugin system which has not materialized yet: https://github.com/helix-editor/helix/pull/5768

There were a number of other things too, that I could have lived with. I guess I'll try again in a year or two.

SignalBotOne – Notification Webhooks for Signal

danslo — Fri, 28 Mar 2025 17:06:56 +0000

Article URL: https://signalbot.one/

Comments URL: https://news.ycombinator.com/item?id=43507758

Points: 60

# Comments: 49

Why we're appealing the Epic Games verdict

danslo — Tue, 08 Oct 2024 11:02:42 +0000

Article URL: https://blog.google/outreach-initiatives/public-policy/epic-games-verdict-appeal/

Comments URL: https://news.ycombinator.com/item?id=41775980

Points: 3

# Comments: 0

New comment by danslo in "Go automatically downloads a newer toolchain if needed"

danslo — Tue, 20 Aug 2024 12:09:31 +0000

After explicitly setting the python version to 3 in package.json? Yes please!

New comment by danslo in "Devzat – Chat over SSH, with some nice quality-of-life features"

danslo — Thu, 18 Jul 2024 18:54:56 +0000

I appear to have crashed the server with "tic 999", sorry guys!

New comment by danslo in "Cloudflare automatically fixes Polyfill.io for free sites"

danslo — Wed, 26 Jun 2024 21:49:44 +0000

It doesn't matter anymore, Namecheap has taken down polyfill[.]io: https://x.com/malwrhunterteam/status/1806074377383121148

New comment by danslo in "Show HN: I made a HTMX Playground 100% in the browser"

danslo — Mon, 08 Jan 2024 12:41:39 +0000

If you can understand HTML, you can understand HTMX.

Lies we tell ourselves to keep using Golang

danslo — Fri, 30 Dec 2022 18:58:05 +0000

Article URL: https://fasterthanli.me/articles/lies-we-tell-ourselves-to-keep-using-golang#the-author-is-a-platypus

Comments URL: https://news.ycombinator.com/item?id=34188528

Points: 130

# Comments: 147

New comment by danslo in "Dura is a background process that watches your Git repositories"

danslo — Mon, 03 Jan 2022 18:55:51 +0000

I see no reason to use this if you commit often and know how to use reflog.

New comment by danslo in "From zero to hero: contributing to open source (2017)"

danslo — Sun, 14 Nov 2021 21:35:39 +0000

>Now I felt even more excited. I could push fixes and refactors without having to wait for someone to code review them.

Am I the only one feeling uneasy about this?