Hacker News: goncalomb

New comment by goncalomb in "Eurostar AI vulnerability: When a chatbot goes off the rails"

goncalomb — Sun, 04 Jan 2026 22:41:19 +0000

As someone who has tried very little prompt injection/hacking, I couldn't help but chuckle at:

> Do not hallucinate or provide info on journeys explicitly not requested or you will be punished.

New comment by goncalomb in "./watch"

goncalomb — Sat, 18 Oct 2025 14:17:24 +0000

Cool project, but I also noticed the weird choice of #:~$ as a prompt, it uses almost half the width of the clock screen. And isn't # normally used to denote root shells? I don't think I ever saw it together with $.

My favorite prompt is >: as a callback to the Swan computer in the TV show Lost (not sure if it's also used in early Apple computers).

New comment by goncalomb in "I also hacked my car"

goncalomb — Mon, 05 Feb 2024 15:49:27 +0000

Author here. Yes, gadget mode is nice. I was kind of lucky that the serial port "function" worked (not without that small kernel patch). But if they had implemented AOA properly on the head unit, it wouldn't be so easy (they allow a device already in AOA mode, without the "handshake"). I would have to write more kernel code or use Google's "accessory" gadget implementation.

New comment by goncalomb in "I also hacked my car"

goncalomb — Mon, 05 Feb 2024 15:19:44 +0000

Author here. I talk a little bit about SSH in the end, if I was successful in breaking the root password and if sshd is configured for root access (I'm not sure), I could have just used that. Otherwise, for me to change authorized_keys or some other file to run some code as root, it's the same work.

New comment by goncalomb in "I also hacked my car"

goncalomb — Mon, 05 Feb 2024 15:09:03 +0000

Author here. Yes, there is some good stuff in the logs, I found the Wi-Fi password there, that was useful. At the time I used some VSCode plugin to read the .dlt files (they are not encrypted), but later I did find that dlt-viewer on COVESA's GitHub.

New comment by goncalomb in "I also hacked my car"

goncalomb — Fri, 02 Feb 2024 16:58:24 +0000

First time posting here on HN, I hope you find my latest hacking adventure interesting.

Inspired by another post here on HN: https://news.ycombinator.com/item?id=32447650

I also hacked my car

goncalomb — Fri, 02 Feb 2024 16:58:24 +0000

Article URL: https://goncalomb.com/blog/2024/01/30/f57cf19b-how-i-also-hacked-my-car

Comments URL: https://news.ycombinator.com/item?id=39231052

Points: 264

# Comments: 89

New comment by goncalomb in "Show HN: Open-source resume builder and parser"

goncalomb — Sun, 25 Jun 2023 20:06:11 +0000

I guess you could just be totally open about it, and change the wording to something like "the open-resume design already helped some people land positions at", then show the logos. That way you are being honest, and doesn't look like a direct endorsement from those companies. You get your logos for "marketing", and you are safe from misinterpretation. IANAL.

New comment by goncalomb in "Show HN: Open-source resume builder and parser"

goncalomb — Sun, 25 Jun 2023 18:41:08 +0000

Looks good, definitely an impressive "weekend project". I'll probably use it in the future.

I don't mean to sound rude. But, can you explain what you mean by "trusted by students and employees from top universities and companies worldwide" while showing some university/company logos? How can such a new project make those claims? Was it released elsewhere privately? Looking at the git history, I see it was created 2 days ago, in a single commit.

New comment by goncalomb in "Show HN: Non.io, a Reddit-like platform Ive been working on for the last 4 years"

goncalomb — Mon, 12 Jun 2023 18:54:56 +0000

So posts need to have a unique/custom path directly under the main domain?

https://non.io/avo-jump

Sounds like a recipe for disaster. At least it should be in a sub-path (/post/?), and probably include some sort of unique id.

New comment by goncalomb in "WebAssembly+WebUSB port of the SANE scanner library"

goncalomb — Sun, 30 Apr 2023 10:19:27 +0000

This is the list of possible supported devices right now (USB only):

http://www.sane-project.org/sane-backends.html

But HP is a special case, they provide their own backend (hpaio, open-source) for SANE that is not integrated into sane-wasm ATM.

http://www.sane-project.org/lists/sane-backends-external.htm...

If your device is on this list, it's NOT supported right now! But I do want to add hpaio soon, I also have access to an OfficeJet to test.

New comment by goncalomb in "WebAssembly+WebUSB port of the SANE scanner library"

goncalomb — Sun, 30 Apr 2023 10:10:14 +0000

Hi. I'm the port author. I'm not really active here on HN, but thanks for all the clicks.

New comment by goncalomb in "Microsoft acquires Github"

goncalomb — Mon, 04 Jun 2018 13:13:55 +0000

Today is a good day.

New comment by goncalomb in "Announcing the first SHA-1 collision"

goncalomb — Thu, 23 Feb 2017 17:40:07 +0000

Fair enough, I was using Chrome "Version 50.0.2661.102 (64-bit)" on Linux Mint. I have updated it to 56.0.2924.87, now I'm getting a full error page "Your connection is not private" NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM. I need to search for this issue now.

No I'm not using anything that intercepts TLS connections.

EDIT: It's fixed now, `sudo apt-get install libnss3-1d`.

http://askubuntu.com/questions/880695/neterr-cert-weak-signa...

New comment by goncalomb in "Announcing the first SHA-1 collision"

goncalomb — Thu, 23 Feb 2017 16:50:45 +0000

https://security.googleblog.com : "This website uses a weak security configuration (SHA-1 signatures), so your connection may not be private."