Hacker News: geraldcombs

New comment by geraldcombs in "Curl will not accept vulnerability reports during July 2026"

geraldcombs — Mon, 15 Jun 2026 17:22:55 +0000

...so open source developers should know their place and just dedicate themselves to endless, unpaid toil forever and ever, amen?

New comment by geraldcombs in "Travel locally, where you are"

geraldcombs — Thu, 11 Jun 2026 21:26:40 +0000

You might want to take a look at Atlas Obscura Places map: https://www.atlasobscura.com/articles/all-places-in-the-atla.... For the US at least, it shows a variety of interesting and quirky sights in most parts of the country.

New comment by geraldcombs in "Bliss (Photograph)"

geraldcombs — Mon, 11 May 2026 15:25:20 +0000

No clue if that exact image was altered, but I do a fair amount of road biking east of Napa and Sonoma, and on some days the sky and hills look just like the photo.

New comment by geraldcombs in "Significant Raise of Reports"

geraldcombs — Thu, 02 Apr 2026 16:38:21 +0000

If I read the sentence correctly they're saying that past reports were AI slop, but the state of the art has advanced and that current reports are valid. This matches trends I've seen on the projects I work on.

New comment by geraldcombs in "The C-Shaped Hole in Package Management"

geraldcombs — Tue, 27 Jan 2026 17:47:07 +0000

What "distro" package manager is available on Windows and macOS? vcpkg doesn't provide binary packages and has quite a few autotools-shaped holes. Homebrew is great as long as you're building for your local machine's macOS version and architecture, but if you want to support an actual user community you're SOL.

New comment by geraldcombs in "State of the Windows: What is going on with Windows 11?"

geraldcombs — Mon, 26 Jan 2026 22:41:01 +0000

Don't schools typically use Chromebooks these days? My daughter was issued one each year from grade 7 to 12.

New comment by geraldcombs in "Ask HN: How to stop an AWS bot sending 2B requests/month?"

geraldcombs — Fri, 17 Oct 2025 20:14:58 +0000

I ran into a similar situation a couple of years ago. It wasn't at the scale you describe, but it was an absurd number of requests for a ~80 MB software installer. I ended up redirecting the offending requests to a file named "please-stop.txt" that contained a short note explaining what was happening and asking them to stop. A short time later they did.

New comment by geraldcombs in "Show HN: ut – Rust based CLI utilities for devs and IT"

geraldcombs — Sun, 05 Oct 2025 21:16:25 +0000

I lead a large-ish open source software project. We have developers that need to build on Linux, macOS, and Windows. It's useful to be able to get everyone bootstrapped with as few steps as possible and with as few dependencies as possible. For our uses CMake works well as a universal superbinary, but I'm always on the lookout for tools that can reduce developer friction.

New comment by geraldcombs in "Show HN: ut – Rust based CLI utilities for devs and IT"

geraldcombs — Sun, 05 Oct 2025 19:53:17 +0000

Those tools either don't ship with, or exist in wildly different forms on Windows. It's particularly bad for curl, which might be the real curl.se curl or Microsoft's confusingly-named Powershell alias.

I could definitely see using this in a cross-platform build or installation environment.

New comment by geraldcombs in "Blender is Native on Windows 11 on Arm"

geraldcombs — Tue, 12 Aug 2025 23:02:25 +0000

For plain C/C++ you can just pass `-arch x86_64 -arch arm64` to clang. CMake takes care of this for you if you specify `CMAKE_OSX_ARCHITECTURES=x86_64;arm64` and IIRC Meson has similar functionality.

New comment by geraldcombs in "Blender is Native on Windows 11 on Arm"

geraldcombs — Tue, 12 Aug 2025 20:48:57 +0000

For us (Wireshark) the difficulty wasn't with our own codebase, but with getting our dependencies ported over. Most libraries built just fine, but some strongly assumed that "Windows" meant "x86".

It's not just Windows, either. Many libraries (particularly ones that use Autotools) are absolutely blind to the notion that you might want a universal binary on macOS.

New comment by geraldcombs in "It's a DE9, not a DB9 (but we know what you mean)"

geraldcombs — Fri, 25 Jul 2025 15:43:35 +0000

There's also 13-W3: DB shell, 13 pins, 3 of them coax: https://en.wikipedia.org/wiki/DB13W3. They were used for high-end workstation video back in the day.

New comment by geraldcombs in "Google Play sees 47% decline in apps since start of last year"

geraldcombs — Wed, 30 Apr 2025 22:42:24 +0000

The One Weird Trick I learned was to to get a company attorney to write a professional opinion letter saying that you are indeed authorized to get a cert on behalf of your company.

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Sat, 25 Jan 2025 18:19:09 +0000

You might try passing `--modern-bpf` to sysdig. It has traditionally captured syscalls using a kernel module, and it sounds like that's where your errors are coming from. Newer versions have added eBPF support, which doesn't require a kmod but you have to pass in the `--modern-bpf` flag.

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Thu, 23 Jan 2025 23:17:19 +0000

Thanks! It's great to hear from you!

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Thu, 23 Jan 2025 17:29:03 +0000

Chris is definitely a good resource! We (the Wireshark Foundation) also have SharkFest session recordings up at https://www.youtube.com/@WireSharkFest

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Wed, 22 Jan 2025 22:44:23 +0000

In this case you would presumably have a capture file that contained syscall events at both the macOS boundary and at the Linux VM boundary. At the present time it would be like capturing traffic on either side of a firewall and loading it into Wireshark (which is something people do!) You'd have to correlate the events visually/manually but adding an automatic correlation feature is well within the realm of possibility.

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Wed, 22 Jan 2025 21:35:16 +0000

Done. We've been upgraded from medium-risk "grayware" to low-risk "generally do not contain content that is useful to the end user" which is technically better, I suppose.

Update: We're now Low-Risk / Computer-and-Internet-Info.

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Wed, 22 Jan 2025 21:27:04 +0000

The tools are similar in many ways, but Stratoshark shares Wireshark's dissection, filtering, and UI code, which provides a more low-level details and a free-form filtering language. Stratoshark is currently limited to capture on Linux (we're hoping to expand to macOS and Windows in the future) and the UI runs on all three platforms. There's an enhancement request[1] to add Procmon file support but I haven't had a chance to investigate what that might require.

[1]https://gitlab.com/wireshark/wireshark/-/issues/20317

New comment by geraldcombs in "Show HN: Stratoshark, a sibling application to Wireshark"

geraldcombs — Wed, 22 Jan 2025 20:30:48 +0000

It uses Falco libs[1] underneath, which supports capture using eBPF or a kmod. I work with the Falco libs team and they go to great lengths to minimize overhead.

[1]https://github.com/falcosecurity/libs/