<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: entuno</title><link>https://news.ycombinator.com/user?id=entuno</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 09 Apr 2026 18:45:33 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=entuno" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by entuno in "The Physics and Economics of Moving 44 Tonnes at 56mph"]]></title><description><![CDATA[
<p>I've also seen roads that have these kind of signs, but they only apply during busy hours.<p>However, as with any traffic controls they're useless if they're not actually enforced. Which is a shame, because it'd be absolutely trivial to automate that detection with cameras.</p>
]]></description><pubDate>Thu, 26 Feb 2026 13:35:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=47165891</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47165891</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47165891</guid></item><item><title><![CDATA[New comment by entuno in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]></title><description><![CDATA[
<p>If that'd been the design from the start, then sure. But it's not at all obvious that setHTML is safe with arbitrary user input (for a given value of "safe") and innerHTML is dangerous.</p>
]]></description><pubDate>Tue, 24 Feb 2026 17:16:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47139695</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47139695</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47139695</guid></item><item><title><![CDATA[New comment by entuno in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]></title><description><![CDATA[
<p>It's certainly an improvement over people trying to homebrew their own sanitisers. But that distinction of being XSS-safe is a potentially subtle one, and could end up being dangerous if people don't carefully consider whether XSS-safe is good enough when they're handling arbitrary users input like that.</p>
]]></description><pubDate>Tue, 24 Feb 2026 17:12:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47139636</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47139636</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47139636</guid></item><item><title><![CDATA[New comment by entuno in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]></title><description><![CDATA[
<p>This kind of thing always makes me nervous, because you end with a mix of methods where you can (supposedly) pass arbitrary user input to them and they'll safely handle it, and methods where you can't do that without introducing vulnerabilities - but it's not at all clear which is which from the names. Ideally you design that in from the state, so any dangerous functions are very clearly dangerous from the name. But you can't easily do that down the line.<p>I'm also rather sceptical of things that "sanitise" HTML, both because there's a long history of them having holes, and because it's not immediately clear what that means, and what exactly is considered "safe".</p>
]]></description><pubDate>Tue, 24 Feb 2026 13:29:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47136906</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47136906</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47136906</guid></item><item><title><![CDATA[New comment by entuno in "Trump's global tariffs struck down by US Supreme Court"]]></title><description><![CDATA[
<p>And that it took this long to get an answer to that question.</p>
]]></description><pubDate>Fri, 20 Feb 2026 16:14:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47089925</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47089925</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47089925</guid></item><item><title><![CDATA[New comment by entuno in "MinIO repository is no longer maintained"]]></title><description><![CDATA[
<p>"Critical security fixes may be evaluated on a case-by-case basis" didn't exactly give much confidence that they'd even be doing that.</p>
]]></description><pubDate>Fri, 13 Feb 2026 11:58:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47001733</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47001733</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47001733</guid></item><item><title><![CDATA[New comment by entuno in "ai;dr"]]></title><description><![CDATA[
<p>And <i>hopefully</i> they're the same four same bullet points..</p>
]]></description><pubDate>Thu, 12 Feb 2026 17:34:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=46991956</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46991956</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46991956</guid></item><item><title><![CDATA[New comment by entuno in "ICE seeks industry input on ad tech location data for investigative use"]]></title><description><![CDATA[
<p>I've argued for a long time that adblocking isn't just a quality of life thing, it's an essential security control for browsing the Internet in the same way that patching your system and running malware protection is. I didn't expect it to be protecting your <i>physical</i> security quite so soon..<p>This sort of thing should also help put the "adblocking is unethical" argument to bed.</p>
]]></description><pubDate>Thu, 05 Feb 2026 09:29:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=46897661</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46897661</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46897661</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>Also depends on the size of your fuel tank and how full it already is. The time taken to refuel is (almost) the same regardless, but if you've got a 40l fuel tank vs a 70l one or you're only half-empty then it's going to be less worthwhile.<p>7p cheaper for 10 minutes works out at about minimum wage if you're buying 30 litres, but with a bigger car you could easily be buying twice that, which works out much better.<p>Although of course you also need to factor in how much fuel you burn driving to the cheaper place, and the extra wear and depreciation on the car. If you take the HMRC standard rate of 45p/mile (which was meant to cover all of that kind of thing, but hasn't been updated for years) then even going a few miles out of your way quickly ends up costing more than it's likely to save.</p>
]]></description><pubDate>Mon, 02 Feb 2026 14:30:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856443</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856443</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856443</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>Set's an good precedent for places that offer electric charging having to do the same thing in future though.</p>
]]></description><pubDate>Mon, 02 Feb 2026 14:14:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856263</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856263</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856263</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>I almost never go out of my way for fuel, because as you say, it's rarely worth it once you factor in your time (never mind the fuel spent).<p>But it's still useful to know about price variation so that you can plan ahead. I regularly drive past several different petrol stations, and if I know that one of them is usually cheaper or usually more expensive then I choose to use or avoid it, or to decide that I'll fill up tomorrow when I'm going that way rather than today at a more expensive one.<p>And that'd be more useful built into satnav, so that if I know I have to fill up somewhere along my route then I can pick the cheapest place, since there's no real time cost to any of the options compared to each other.</p>
]]></description><pubDate>Mon, 02 Feb 2026 14:12:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856245</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856245</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856245</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>The variation in even a couple of miles can be pretty big. I almost never go out of my way to visit a cheaper petrol station because that's usually a false economy, but there are definitely some local places that I favour or avoid because they're almost always cheaper/more expensive than the surrounding ones.</p>
]]></description><pubDate>Mon, 02 Feb 2026 13:53:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856052</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856052</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856052</guid></item><item><title><![CDATA[New comment by entuno in "Microsoft 365 now tracks you in real time?"]]></title><description><![CDATA[
<p>The Teams Android app just asked for location permission today for me for the first time. And got denied.</p>
]]></description><pubDate>Fri, 30 Jan 2026 17:50:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=46827488</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46827488</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46827488</guid></item><item><title><![CDATA[New comment by entuno in "Microsoft 365 now tracks you in real time?"]]></title><description><![CDATA[
<p>I wondered why the Teams Android app suddenly decided to ask for location permissions today.<p>Denied.</p>
]]></description><pubDate>Fri, 30 Jan 2026 17:47:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=46827440</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46827440</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46827440</guid></item><item><title><![CDATA[New comment by entuno in "Detecting Dementia Using Lexical Analysis: Terry Pratchett's Discworld"]]></title><description><![CDATA[
<p>Yes, they did.<p>> Eight titles were excluded from the analysis due to them being either shorter than the other full-length novels (Eric, 1990; The Last Hero, 2001), or because they are part of his titles for younger readers (The Amazing Maurice and His Educated Rodents, 2001; The Wee Free Men, 2003; A Hat Full of Sky, 2004; Wintersmith, 2006; I Shall Wear Midnight, 2010; The Shepherds Crown, 2015).</p>
]]></description><pubDate>Fri, 30 Jan 2026 17:29:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=46827207</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46827207</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46827207</guid></item><item><title><![CDATA[New comment by entuno in "Waymo robotaxi hits a child near an elementary school in Santa Monica"]]></title><description><![CDATA[
<p>Is there actually any difference? I'd have though that the self-driving car would need to be insured to be allowed on the road, so in both cases you're going up against the insurance company rather than the actual owner.</p>
]]></description><pubDate>Thu, 29 Jan 2026 16:07:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=46812088</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46812088</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46812088</guid></item><item><title><![CDATA[New comment by entuno in "Like digging 'your own grave': The translators grappling with losing work to AI"]]></title><description><![CDATA[
<p>Not having to setup and maintain your own self hosted platform. And it also makes it easier to share with specific individuals if you want to.</p>
]]></description><pubDate>Sun, 25 Jan 2026 09:22:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=46752263</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46752263</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46752263</guid></item><item><title><![CDATA[New comment by entuno in "Ask HN: Would you trust a new browser security extension in 2025?"]]></title><description><![CDATA[
<p>Trust is a about the author, not the code.<p>Open source is a bare minimum, although even that's not worth as much given how much harder it is now to load extensions that you've compiled yourself.<p>But those features you're talking about sound like they need extensive privileges within the browser. And while your extension might do what it says <i>today</i>, what's stopping you sticking a load of malware and adverts in there tomorrow? Or selling it to someone else who does?<p>If the author is an established person whose been known for years to develop good quality extensions and not sell out, then that gives some assurance. If it's an organisation like the EFF, even better?<p>But a random anonymous person making their first extension? No chance.</p>
]]></description><pubDate>Wed, 21 Jan 2026 14:13:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=46705969</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46705969</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46705969</guid></item><item><title><![CDATA[New comment by entuno in "cURL removes bug bounties"]]></title><description><![CDATA[
<p>There are plenty of places you can sell exploits other than OCGs. At the more legitimate end of that market is people like ZDI who will then collaborate with the vendors (after a time), or companies making exploit kits/tooling for pentesters/red teaming. More questionable ones are companies that make things like forensics tools or spyware who are legal, but perhaps ethically dubious. All completely legal, but not great for the wider community if they're getting the vulns rather than the developers.<p>If you're trying to protect your own website and servers, those markets won't be a concern for you. If you ship a widely used product that's an attractive target (like web browser, mobile device, network kit, etc) then they definitely are.</p>
]]></description><pubDate>Wed, 21 Jan 2026 13:49:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=46705677</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46705677</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46705677</guid></item><item><title><![CDATA[New comment by entuno in "SETI@home is in hiberation"]]></title><description><![CDATA[
<p>I remember seeing a prank program years ago that showed the SETI@home screensaver for a bit, then popped up an alert box saying "Alien Life Found!" with options to submit or cancel(!).<p>If you tried to submit it would spend a while with a really slow progress bar, and then say it failed to submit and asked you to contact SETI directly. I wonder if anyone actually did....</p>
]]></description><pubDate>Wed, 21 Jan 2026 13:34:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=46705493</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46705493</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46705493</guid></item></channel></rss>