<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: entuno</title><link>https://news.ycombinator.com/user?id=entuno</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 10 Jun 2026 23:09:27 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=entuno" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[YellowKey Bitlocker Bypass Vulnerability]]></title><description><![CDATA[
<p>Article URL: <a href="https://github.com/Nightmare-Eclipse/YellowKey">https://github.com/Nightmare-Eclipse/YellowKey</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48114997">https://news.ycombinator.com/item?id=48114997</a></p>
<p>Points: 87</p>
<p># Comments: 20</p>
]]></description><pubDate>Tue, 12 May 2026 21:42:27 +0000</pubDate><link>https://github.com/Nightmare-Eclipse/YellowKey</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=48114997</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48114997</guid></item><item><title><![CDATA[New comment by entuno in "NetHack 5.0.0"]]></title><description><![CDATA[
<p>There's been a lot of nice quality of life changes in the 3.7 builds (which has now become 5.0.0) that make going back to the older versions a bit painful.<p>Also some pretty major gameplay and balance changes, some of which are pretty controversial. But overall, I think that it's a big improvement, and although I don't necessarily agree with all the changes it certainly makes the mid and late game a lot more interesting and varied (not to mention dangerous) than it was in 3.6.7.</p>
]]></description><pubDate>Sat, 02 May 2026 19:29:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47989616</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47989616</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47989616</guid></item><item><title><![CDATA[New comment by entuno in "Game devs explain the tricks involved with letting you pause a game"]]></title><description><![CDATA[
<p>Against the Storm (and excellent rouguelite city-builder) does this in a really cool way. Pausing is a core mechanic of the game, and you frequently pause while you place building or things like that - and all the visual animations stop (fire, rain, trees swaying, etc).<p>But when you find a broken ancient seal in the forest, the giant creepy eyeball moving around in it keeps moving even when you pause the game, which helps emphasise how other-worldly it is.</p>
]]></description><pubDate>Sun, 19 Apr 2026 09:08:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=47822905</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47822905</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47822905</guid></item><item><title><![CDATA[New comment by entuno in "Sam Vimes 'Boots' Theory of Socio-Economic Unfairness"]]></title><description><![CDATA[
<p>> The reason that the rich were so rich, Vimes reasoned, was because they managed to spend less money.<p>The "boots" item feels less true, because expensive doesn't seem to be as correlated with "good quality" as it used to. But the general statement still very much stands.<p>Things like financial products that charge higher interest rates to poorer people, or services that offer discounts for paying annually rather than monthly are great examples of this. And less direct things, like being able to drive to cheaper shops and buy in bulk, or being able to do preventative maintenance to avoid a cheap fix turning into an expensive one.<p>It can still apply to individual items, as long as you're careful about what you buy and do your research to make sure you're <i>actually</i> buying high quality boots, and not just cheap ones with an expensive logo on the side.</p>
]]></description><pubDate>Wed, 15 Apr 2026 15:22:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=47780394</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47780394</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47780394</guid></item><item><title><![CDATA[New comment by entuno in "Sam Vimes 'Boots' Theory of Socio-Economic Unfairness (2022)"]]></title><description><![CDATA[
<p>Expensive doesn't guarantee high quality, but very cheap almost always means low quality. A £200 pair of boots might be great and last for a decade, or might be overpriced and fall apart after six months. But a £5 pair are definitely going to be crap.</p>
]]></description><pubDate>Wed, 15 Apr 2026 15:14:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47780288</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47780288</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47780288</guid></item><item><title><![CDATA[New comment by entuno in "Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It"]]></title><description><![CDATA[
<p>Financial costs won't solve the problem for companies, because they're hard to enforce. You'd be weighting up the cost of dealing with the fallout of getting hacked against the cost of paying the random and the <i>chance</i> that you might get caught and fined. If that former cost is existential for the business, then it'd always be worth paying and taking the risk.<p>The only real way around that would personal consequences for the owners/directors of the company - "get caught paying a ransom and the whole board goes to jail" would certainly discourage people. And also provide a wonderful opportunity for blackmail when people did.<p>Not to mention all the problems of fining public sector organisations, and how counter-productive that usually is.</p>
]]></description><pubDate>Tue, 14 Apr 2026 15:57:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47767347</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47767347</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47767347</guid></item><item><title><![CDATA[New comment by entuno in "Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It"]]></title><description><![CDATA[
<p>Plus it gives the ransomware gangs a whole new angle they can use.<p><i>So, remember how you illegally paid us a ransom a few months ago? Unless you want to go to prison, then you better...</i><p>We're already seeing this against companies who pay ransoms and fail to report the breaches when they're legally required to - but it would be much worse if it's against individuals who are criminally liable.</p>
]]></description><pubDate>Tue, 14 Apr 2026 12:11:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47764573</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47764573</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47764573</guid></item><item><title><![CDATA[New comment by entuno in "Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It"]]></title><description><![CDATA[
<p>It's one of those ideas that sounds nice in theory, but doesn't survive contact with the real world. In the same way that many people would say that you shouldn't negotiate with terrorists or kidnappers; but if it's <i>their</i> loved one who's being held and tortured they'll very quickly change their mind.<p>Getting to a world where no one pays ransoms and the ransomware groups give up and go away would be the ideal, and we'd all love to get there. But outlawing paying ransoms basically sacrificing everyone who gets ransomwared in the meantime until we get to that state for the greater good.<p>And where companies get hit, they'll try hard to find ways around that, because the alternative may well be shutting down the business. But if something like a hospital gets hit, are governments really going to be able to stand behind the "you can't pay a ransom" policy when that could directly lead to deaths?</p>
]]></description><pubDate>Tue, 14 Apr 2026 11:39:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47764288</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47764288</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47764288</guid></item><item><title><![CDATA[New comment by entuno in "The Physics and Economics of Moving 44 Tonnes at 56mph"]]></title><description><![CDATA[
<p>I've also seen roads that have these kind of signs, but they only apply during busy hours.<p>However, as with any traffic controls they're useless if they're not actually enforced. Which is a shame, because it'd be absolutely trivial to automate that detection with cameras.</p>
]]></description><pubDate>Thu, 26 Feb 2026 13:35:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=47165891</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47165891</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47165891</guid></item><item><title><![CDATA[New comment by entuno in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]></title><description><![CDATA[
<p>If that'd been the design from the start, then sure. But it's not at all obvious that setHTML is safe with arbitrary user input (for a given value of "safe") and innerHTML is dangerous.</p>
]]></description><pubDate>Tue, 24 Feb 2026 17:16:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47139695</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47139695</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47139695</guid></item><item><title><![CDATA[New comment by entuno in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]></title><description><![CDATA[
<p>It's certainly an improvement over people trying to homebrew their own sanitisers. But that distinction of being XSS-safe is a potentially subtle one, and could end up being dangerous if people don't carefully consider whether XSS-safe is good enough when they're handling arbitrary users input like that.</p>
]]></description><pubDate>Tue, 24 Feb 2026 17:12:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47139636</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47139636</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47139636</guid></item><item><title><![CDATA[New comment by entuno in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]></title><description><![CDATA[
<p>This kind of thing always makes me nervous, because you end with a mix of methods where you can (supposedly) pass arbitrary user input to them and they'll safely handle it, and methods where you can't do that without introducing vulnerabilities - but it's not at all clear which is which from the names. Ideally you design that in from the state, so any dangerous functions are very clearly dangerous from the name. But you can't easily do that down the line.<p>I'm also rather sceptical of things that "sanitise" HTML, both because there's a long history of them having holes, and because it's not immediately clear what that means, and what exactly is considered "safe".</p>
]]></description><pubDate>Tue, 24 Feb 2026 13:29:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47136906</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47136906</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47136906</guid></item><item><title><![CDATA[New comment by entuno in "Trump's global tariffs struck down by US Supreme Court"]]></title><description><![CDATA[
<p>And that it took this long to get an answer to that question.</p>
]]></description><pubDate>Fri, 20 Feb 2026 16:14:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47089925</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47089925</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47089925</guid></item><item><title><![CDATA[New comment by entuno in "MinIO repository is no longer maintained"]]></title><description><![CDATA[
<p>"Critical security fixes may be evaluated on a case-by-case basis" didn't exactly give much confidence that they'd even be doing that.</p>
]]></description><pubDate>Fri, 13 Feb 2026 11:58:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47001733</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=47001733</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47001733</guid></item><item><title><![CDATA[New comment by entuno in "ai;dr"]]></title><description><![CDATA[
<p>And <i>hopefully</i> they're the same four same bullet points..</p>
]]></description><pubDate>Thu, 12 Feb 2026 17:34:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=46991956</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46991956</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46991956</guid></item><item><title><![CDATA[New comment by entuno in "ICE seeks industry input on ad tech location data for investigative use"]]></title><description><![CDATA[
<p>I've argued for a long time that adblocking isn't just a quality of life thing, it's an essential security control for browsing the Internet in the same way that patching your system and running malware protection is. I didn't expect it to be protecting your <i>physical</i> security quite so soon..<p>This sort of thing should also help put the "adblocking is unethical" argument to bed.</p>
]]></description><pubDate>Thu, 05 Feb 2026 09:29:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=46897661</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46897661</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46897661</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>Also depends on the size of your fuel tank and how full it already is. The time taken to refuel is (almost) the same regardless, but if you've got a 40l fuel tank vs a 70l one or you're only half-empty then it's going to be less worthwhile.<p>7p cheaper for 10 minutes works out at about minimum wage if you're buying 30 litres, but with a bigger car you could easily be buying twice that, which works out much better.<p>Although of course you also need to factor in how much fuel you burn driving to the cheaper place, and the extra wear and depreciation on the car. If you take the HMRC standard rate of 45p/mile (which was meant to cover all of that kind of thing, but hasn't been updated for years) then even going a few miles out of your way quickly ends up costing more than it's likely to save.</p>
]]></description><pubDate>Mon, 02 Feb 2026 14:30:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856443</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856443</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856443</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>Set's an good precedent for places that offer electric charging having to do the same thing in future though.</p>
]]></description><pubDate>Mon, 02 Feb 2026 14:14:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856263</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856263</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856263</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>I almost never go out of my way for fuel, because as you say, it's rarely worth it once you factor in your time (never mind the fuel spent).<p>But it's still useful to know about price variation so that you can plan ahead. I regularly drive past several different petrol stations, and if I know that one of them is usually cheaper or usually more expensive then I choose to use or avoid it, or to decide that I'll fill up tomorrow when I'm going that way rather than today at a more expensive one.<p>And that'd be more useful built into satnav, so that if I know I have to fill up somewhere along my route then I can pick the cheapest place, since there's no real time cost to any of the options compared to each other.</p>
]]></description><pubDate>Mon, 02 Feb 2026 14:12:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856245</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856245</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856245</guid></item><item><title><![CDATA[New comment by entuno in "UK government launches fuel forecourt price API"]]></title><description><![CDATA[
<p>The variation in even a couple of miles can be pretty big. I almost never go out of my way to visit a cheaper petrol station because that's usually a false economy, but there are definitely some local places that I favour or avoid because they're almost always cheaper/more expensive than the surrounding ones.</p>
]]></description><pubDate>Mon, 02 Feb 2026 13:53:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46856052</link><dc:creator>entuno</dc:creator><comments>https://news.ycombinator.com/item?id=46856052</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46856052</guid></item></channel></rss>