Hacker News: deeebug

New comment by deeebug in "'No way to prevent this,' says only package manager where this regularly happens"

deeebug — Sat, 16 May 2026 02:10:36 +0000

They have build.rs (https://doc.rust-lang.org/cargo/reference/build-scripts.html)

New comment by deeebug in "Leaving GitHub for Forgejo"

deeebug — Wed, 13 May 2026 17:40:20 +0000

As someone who uses gitea, honestly it’s because I set it up a while ago and foregjo hasn’t offered anything compelling to force a switch, nor has gitea “enshittified” like the concerns around the fork raised.

Honestly, stay where you are

New comment by deeebug in "MinIO Is Dead, Long Live MinIO"

deeebug — Sat, 28 Feb 2026 23:19:56 +0000

Do note rustfs has had a...questionable...security posture. See https://github.com/rustfs/rustfs/security/advisories/GHSA-h9... as a good example (hardcoded static token).

New comment by deeebug in "MinIO is now in maintenance-mode"

deeebug — Wed, 03 Dec 2025 23:27:40 +0000

> So if the minio maintainers (or anybody that forks the project and wants to work it) can fix any security issues that may occur I don't see any problems with using it.

The concerning language for me is this part that was added:

> Critical security fixes may be evaluated on a case-by-case basis

It seems to imply that any fixes _may_ be merged in, but there's no guarantees.

New comment by deeebug in "We survived 10k requests/second: Switching to signed asset URLs in an emergency"

deeebug — Fri, 16 Aug 2024 06:11:18 +0000

> That aside, I’m confused about the 250ms thing. You don’t have to hit a Google API to construct a signed URL. It should just be a signature calculation done locally in your server. [0]

I assume the additional latency is the initial cred fetch from the VM Metadata Service to perform that sign, no?

New comment by deeebug in "AWS Code Commit Ceased Onboarding New Customers"

deeebug — Tue, 30 Jul 2024 07:17:59 +0000

Slight correction, the sales org uses GitLab, mainly to segregate any “code” they build for customers. Internal AWS/Amazon teams use an internal git-backed UI.

New comment by deeebug in "Uniqlo's Automated Self-Checkout"

deeebug — Sat, 23 Dec 2023 06:15:47 +0000

> I believe they had intentions of selling this tech to other stores but it never really took off (maybe uniqulo is using it?)

They did, it's called "Just Walk Out" - https://www.justwalkout.com/ and https://aws.amazon.com/just-walk-out/ . I've seen it a bunch at airports, and occasional random city locations.

New comment by deeebug in "Why TSA's Implementation of Facial Recognition Is More Dangerous Than You Think"

deeebug — Mon, 20 Nov 2023 23:23:21 +0000

As an opposite point - the airports I've been to have been pretty easy to opt-out, though they usually have snippy comments about "saying it up front".

That being said, did your airport not have signs talking about the pilot, and it being optional? I would of pointed to that if I was told no.

New comment by deeebug in "The Rise and (Eventual) Fall of the SIM Card"

deeebug — Mon, 11 Sep 2023 17:13:06 +0000

> Why can’t T-Mobile issue me a free “advertising” eSIM that doesn’t actually provide service (or provides a ridiculously small amount)

Not sure if you’ve checked, but they actually do. On the iOS, I downloaded the TMobile app and was given the ability for a trial eSIM.

New comment by deeebug in "Elasticsearch SQL"

deeebug — Mon, 24 Oct 2022 20:46:50 +0000

Unsure if it was added recently, but Splunk Query Language does have VAL IN (1,2,3) now -> https://docs.splunk.com/Documentation/Splunk/9.0.1/SearchRef...

New comment by deeebug in "Codecov Bash Uploader compromised"

deeebug — Thu, 15 Apr 2021 19:31:11 +0000

This looks to be that version: https://github.com/ehmicky/dev-tasks/blob/1f6cd2a9c7bc2146b7...

Though this was uploaded before April 1, and it doesn't appear to have any malicious code.

New comment by deeebug in "1.1.1.1: Fast, privacy-first consumer DNS service"

deeebug — Sun, 01 Apr 2018 18:32:23 +0000

What’s your threat model? The latency you’re going to introduce with TOR will make everyday browsing slow

New comment by deeebug in "Tinc VPN: Secure Private Network Between Hosts"

deeebug — Wed, 07 Feb 2018 18:47:03 +0000

Just because the protocol has a formal set of proofs, doesn't mean it's production ready. The very fact that the only releases are snapshots and not eligible for CVE's makes me weary of utilizing this in a non-testing environment.

New comment by deeebug in "Hack the Kernel – Learn about operating systems online"

deeebug — Sun, 23 Oct 2016 21:06:22 +0000

University at Buffalo, SUNY. The person that teaches the course (who is the lectuerer) is Geoffrey Challen (https://blue.cse.buffalo.edu/people/gwa/)

Source: I took this class last semester (Spring 2016)

New comment by deeebug in "How I'd teach computer science"

deeebug — Mon, 17 Oct 2016 19:38:48 +0000

This doesn't sound like a Computer Science course. Maybe for something like a Software Engineering degree, but not for CS.

New comment by deeebug in "Show HN: Meet me, I'll buy you coffee"

deeebug — Wed, 12 Nov 2014 06:51:07 +0000

"FILTER_SANITIZE_EMAIL" doesn't do any validation. That only filters.

New comment by deeebug in "Ask HN: Where do you register your domains?"

deeebug — Fri, 14 Feb 2014 15:08:33 +0000

Yup, they include a free SSL cert for 1 year on all domain purchases

New comment by deeebug in "What.cd's Gazelle on GitHub"

deeebug — Wed, 10 Jul 2013 22:33:31 +0000

Actually they check the $_GET['id'] variable, which is used to set the $UserId variable. Check the top of the source:

if (empty($_GET['id']) || !is_numeric($_GET['id']) || (!empty($_GET['preview']) && !is_numeric($_GET['preview']))) {