Hacker News: dinkelberg

New comment by dinkelberg in "You might want to build your WebApp in Canvas instead of HTML"

dinkelberg — Sun, 09 Aug 2026 11:23:12 +0000

The dev tools in the browser become much more useless when you draw everything in a canvas. It's gonna be sad when everyone starts using frameworks that draw on canvases. Arguably more sad than when Webassembly came. One could probably write new dev tools for those frameworks though.

I also imagine this will be a big setback for web accessibility.

New comment by dinkelberg in "Artificial Intelligence used to design new viruses"

dinkelberg — Thu, 06 Aug 2026 20:06:18 +0000

Study: https://www.science.org/doi/10.1126/science.aec2657

Commentary: https://www.science.org/doi/10.1126/science.aej8512

Published 6 August 2026 in Science

New comment by dinkelberg in "Dates That Don't Exist (2015)"

dinkelberg — Tue, 04 Aug 2026 16:39:17 +0000

Who else uses the proleptic Gregorian calendar other than programmers of datetime libraries?

New comment by dinkelberg in "Show HN: ssh ssh.place"

dinkelberg — Tue, 04 Aug 2026 10:02:17 +0000

Went to the kitty website. No mentions of security.

Went to Alacritty. No mentions of security.

Went to Ghostty. No mentions of security, except for "secure keyboard entry".

None have a "security policy" on GitHub.

All written in memory unsafe languages (C, Zig).

New comment by dinkelberg in "Decathlon Germany adds Wero payment option to decathlon.de website"

dinkelberg — Mon, 03 Aug 2026 13:02:54 +0000

SEPA guarantees the payment to arrive within 10 seconds. Same with Wero, because it uses SEPA. It doesn't work like the card companies that authorize payments before they are settled.

New comment by dinkelberg in "Show HN: ssh ssh.place"

dinkelberg — Mon, 03 Aug 2026 11:05:24 +0000

Web browsers are generally built with security in mind. Terminal emulators surely much less so. The OpenSSH client probably sits somewhat in between, generally developed with security in mind, but not necessarily consistently expecting malicious servers.

New comment by dinkelberg in "Show HN: Open-source engine running Gemma 4 26B in 2 GB RAM on any M-series Mac"

dinkelberg — Wed, 29 Jul 2026 22:45:51 +0000

Life is short. Do you want to spend it reading text that was evidently generated by a machine? There is an opportunity cost to reading "slop."

New comment by dinkelberg in "Decathlon Germany adds Wero payment option to decathlon.de website"

dinkelberg — Mon, 27 Jul 2026 20:13:53 +0000

There's two functions of Wero: peer-to-peer and consumer-to-business transactions. TFA is about consumer-to-business.

If you look at the video for how Wero online payments work (https://www.youtube.com/watch?v=Bu5_X3oSgHM), you'll see that an EPC QR code could just as well be used (with a banking app installed instead of Wero).

With Wero you probably also get automatic processing of the incoming payment, without having to connect the financial transaction to a purchase yourself. But payment through bank transfers is also available through the payment service providers and costs less than Wero (at least it costs less when using Mollie; the Stripe fee is the same for Wero and bank transfer, and Adyen apparently hasn't published the Wero fee yet). So you'd still get the same service for less money.

New comment by dinkelberg in "Decathlon Germany adds Wero payment option to decathlon.de website"

dinkelberg — Mon, 27 Jul 2026 17:48:53 +0000

The payment service provider (like Stripe or Adyen).

New comment by dinkelberg in "Decathlon Germany adds Wero payment option to decathlon.de website"

dinkelberg — Mon, 27 Jul 2026 17:33:00 +0000

Wero shows that marketing is everything. It's just regular bank transactions with a much larger fee. We could have had EPC QR codes and similar completely free technologies instead.

New comment by dinkelberg in "Modern email can be built from borrowed parts"

dinkelberg — Mon, 27 Jul 2026 16:50:36 +0000

Copies the mistake from PGP with the unencrypted metadata.

New comment by dinkelberg in "OpenAI’s accidental attack against Hugging Face is science fiction that happened"

dinkelberg — Thu, 23 Jul 2026 03:43:25 +0000

If a criminal can escape a prison, that's usually negligence on part of the prison staff.

Now suppose the criminal can think 1000 times faster than a typical human, can act 1000 times faster than a typical human, and knows 1,000,000 times more than a typical human. Is the prison staff still at fault for not preventing the outbreak?

New comment by dinkelberg in "Restructuring GitHub's bug bounty program"

dinkelberg — Thu, 23 Jul 2026 02:54:17 +0000

So if the "wrong" person finds a critical vulnerability in GitHub, the payout is capped at $10,000. Might reduce the likelihood of it being submitted to the bug bounty program.

New comment by dinkelberg in "OpenAI and Hugging Face address security incident during model evaluation"

dinkelberg — Wed, 22 Jul 2026 21:06:24 +0000

Could you explain what you mean by a proper hypervisor? I don't see how hypervisors are relevant here.

New comment by dinkelberg in "OpenAI and Hugging Face address security incident during model evaluation"

dinkelberg — Wed, 22 Jul 2026 01:23:34 +0000

As you said, they can already figure out that they are being tested. So even if they don't exfiltrate any data or malware; if they are malicious, they can just pretend to be harmless in the test, so that less checks are put in place in the production environment. Airgapping during testing is not enough.

New comment by dinkelberg in "Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber"

dinkelberg — Wed, 22 Jul 2026 00:37:18 +0000

Their shop is linked to in the bio. They don't seem to have a privacy policy up on the site. When in the checkout form it links to the generic Shopify privacy policy. No hints to the fact that uploaded images are processed by third parties, as far as I can tell. That should be corrected for sure.

New comment by dinkelberg in "The EU is about to sell our most sensitive data to the US for visa-free travel"

dinkelberg — Mon, 20 Jul 2026 15:34:46 +0000

This is the leaked draft: https://statewatch.org/wp-content/uploads/2026/05/wk_5183_20...

It's not clear how it is supposed to work in detail. But it sounds like it could be implemented in a way that makes illegitimate queries possible. It doesn't sound like they want to really ensure that you can catch those.

New comment by dinkelberg in "The EU is about to sell our most sensitive data to the US for visa-free travel"

dinkelberg — Mon, 20 Jul 2026 14:59:56 +0000

From the analysis linked in TFA:

"The automated query can be based on: * Identity information included in the application or in travel documents, such as name, date of birth, national ID number, and/or * the fingerprint of an individual."

Sounds like they could send requests to that computer system just based on publicly available information on a person like name and date of birth, even if the person never applied for a visa or tried to enter the US.

New comment by dinkelberg in "I found a WordPress RCEs with GPT5.6 and $25"

dinkelberg — Mon, 20 Jul 2026 09:44:25 +0000

What an awful fix. Does WordPress seriously still use basic string concatenation (edit: and sprintf) to build SQL queries?

New comment by dinkelberg in "Vancouver PD website features Quick Escape button that wipes itself from history"

dinkelberg — Wed, 15 Jul 2026 08:49:26 +0000

It doesn't seem to work in Safari on iPhone correctly. When I click on the Back button (from weather.gc.ca), it goes back to the Vancouver PD site. Therefore I do not think that it is built well.

The other site someone mentioned (https://www.thetrevorproject.org/) doesn't have that issue.