Hacker News: dwedge

New comment by dwedge in "There isn't an easy exploit for this PHP vulnerability"

dwedge — Thu, 22 Oct 2026 07:30:59 +0000

There are two linked in the article

New comment by dwedge in "PHP 8.2.35"

dwedge — Wed, 21 Oct 2026 14:46:35 +0000

It was your response. Of course you prefer your response.

The fact is you had no idea how useful or dangerous your advice was. PHP maintainers said to shut it down, how many people followed your advice instead? Did it work or just leave them vulnerable? Do you know?

Because you're heavily implying that the people who knew about the details of the vulnerability were panicking and thank god we had you with an LLM

New comment by dwedge in "PHP 8.2.35"

dwedge — Wed, 21 Oct 2026 14:01:22 +0000

This is just Claude output. Did you verify anything or just rehash the links?

New comment by dwedge in "Security advisory: Critical remote code execution vulnerabilities, update now"

dwedge — Wed, 21 Oct 2026 13:11:46 +0000

As far as I can tell none of this is related to the current vulnerability in PHP itself. Even having a site that just returns echo "phone us on XXXX" is vulnerable apparently.

A dynamic language having access to all of the files it has access to is not unique to PHP. Vulnerabilities are not unique to PHP, and I doubt the Dutch National Cyber Security Center took their website offline because they lack user-specific roles in the database: https://www.ncsc.nl/index-en.html

So maybe save your elitism for a day when so many of us aren't already putting out fires? Congratulations on not being part of the 75% of the internet affected.

New comment by dwedge in "Security advisory: Critical remote code execution vulnerabilities, update now"

dwedge — Wed, 21 Oct 2026 12:29:43 +0000

Given that the base you ran against was faulty and not actually RCE, I'm starting to get sceptical of the truth of your highly upvoted comment.

New comment by dwedge in "Security advisory: Critical remote code execution vulnerabilities, update now"

dwedge — Wed, 21 Oct 2026 10:41:14 +0000

They've retracted RCE capabilities from that site, said they made a mistake and it's a crash bug. So what base did you use?

New comment by dwedge in "Tesla Roadster"

dwedge — Sun, 18 Oct 2026 20:22:55 +0000

Big difference between getting people to buy 0.0000001% at that valuation, and getting them to buy 5%. Even if you assume SpaceX is worth zero, he's still worth $200B

New comment by dwedge in "Claude reveals ECDSA curve origins"

dwedge — Fri, 16 Oct 2026 21:59:04 +0000

Moat must have been written more times in the last 12 months than in all of history before that time.

New comment by dwedge in "Tesla Roadster"

dwedge — Fri, 16 Oct 2026 21:44:26 +0000

In his pocket or what? When SpaceX IPO'd he was valued at over a trillion USD. Currently somewhere over 900MM, and worth more than the 2nd, 3rd and 4th on the rich list combined.

In terms of net worth, you are closer to Jeff Bezos than Bezos is to Musk.

New comment by dwedge in "Hackers activate automatic defrosting in supermarket fridges across Europe"

dwedge — Mon, 12 Oct 2026 22:11:26 +0000

> Is it more expensive to keep your systems upgraded and maintained or to have all your product get destroyed one arbitrary day and then have to pay to do the upgrade anyways so that the arbitrary property destruction doesn't keep happening?

It happened once. Did you do the maths here? Can you tell us which one was Kore expensive and what percentage chance there was of this hack happening?

New comment by dwedge in "Bitwarden Dual License Model"

dwedge — Sun, 11 Oct 2026 16:44:46 +0000

Saw an interesting app on f droid that lets your encrypt the password with another password and print them as qr codes. Nice idea but no idea why I'd use it

New comment by dwedge in "Bitwarden Dual License Model"

dwedge — Sat, 10 Oct 2026 19:48:08 +0000

With android changes this year how do you deploy it?

New comment by dwedge in "Bitwarden Dual License Model"

dwedge — Sat, 10 Oct 2026 18:55:35 +0000

Presumably the bitwarden apps will stop working with them eventually

New comment by dwedge in "Bitwarden Dual License Model"

dwedge — Sat, 10 Oct 2026 18:54:43 +0000

> and you can use bitwarden's phone client

What will you use when this stops working in the near future?

New comment by dwedge in "`123456' password used in Danish CPR data breach"

dwedge — Sat, 10 Oct 2026 12:31:13 +0000

How do you force password manager usage?

New comment by dwedge in "New gTLD Application for .lan"

dwedge — Thu, 08 Oct 2026 21:30:35 +0000

This being on the front page at the same time as the coffee machine sending 1TB of data, and the icann application being submitted by Coffee Danger LLC is just beautiful

New comment by dwedge in "New gTLD Application for .lan"

dwedge — Thu, 08 Oct 2026 21:30:30 +0000

This being on the front page at the same time as the coffee machine sending 1TB of data, and the icann application being submitted by Coffee Danger LLC is just beautiful

New comment by dwedge in "Penguin Mail – open-source Rust email client for Linux with AI"

dwedge — Wed, 07 Oct 2026 08:04:15 +0000

3 years ago written in rust meant it was probably faster and smoother than other options. Now it means vibecoded

New comment by dwedge in "ESP32-C3 Adblock"

dwedge — Wed, 07 Oct 2026 07:54:26 +0000

With github being the exception, I use comments to see if the article is AI. If it is, I prefer the condensed opinions in the comments. Not to say it can't be interesting I just don't want to waste time reading overly verbose generated text.

New comment by dwedge in "ESP32-C3 Adblock"

dwedge — Wed, 07 Oct 2026 07:51:59 +0000

Apparently solving blocking extra domains due to hash collisions (reducing from 1 to 0) would be extra space "to solve a problem I don't have".

I dislike when LLMs talk to me like that. I hate it when humans do it, confidently spewing their overconfident llm assumptions to others