Hacker News: hlieberman

New comment by hlieberman in "Chat Control passed first round in EU Parliament"

hlieberman — Tue, 07 Jul 2026 15:41:30 +0000

Is this Chat Control 1.0 or Chat Control 2.0?

New comment by hlieberman in "Wikipedia's Cofounder Has Been Banned from Wikipedia"

hlieberman — Sat, 27 Jun 2026 21:20:44 +0000

Reality has a well-known liberal bias.

New comment by hlieberman in "My automated doubt development process"

hlieberman — Mon, 08 Jun 2026 17:34:37 +0000

“They inhabit the fulcrum of the process” is straight up AI psychosis talk.

New comment by hlieberman in "$100 to a Debian Developer who can get Fresh Editor into Trixie"

hlieberman — Tue, 02 Jun 2026 04:40:39 +0000

Security is part of it -- dpkg and apt were not built to deal with the problem of tracking each individual executables' complied library versions. When the next Heartbleed happens, how will you know which things need to be recompiled? (Some of this data exists in adjacent Debian systems for DD's internal use, but it's not integrated into dpkg in any way.)

https://wiki.debian.org/StaticLinking#downsides has some of the background there.

New comment by hlieberman in "$100 to a Debian Developer who can get Fresh Editor into Trixie"

hlieberman — Mon, 01 Jun 2026 06:46:54 +0000

Hello! I am a Debian Developer, though not likely to work on this as I haven't done a ton of rust binary packaging.

I did want to clear up one misconception that you might be having, though. The .deb versions shipped by upstream are great, but they're not really ever going to be useful for Debian. One of the side-effects of Debian's requirements around software freedom is an important principle: you should be able to build any package in Debian with only the things that are in Debian.

The problem with fresh isn't fresh itself -- packaging that isn't particularly difficult, though it does need some amount of care and attention. The problem is that fresh pulls in 732 different crates which all need to be packaged in Debian before fresh can be. Some of them are already in Debian, of course, but... you can imagine that the effort here is very much not insignificant.

Upstream doesn't have to deal with this problem, as they can simply statically build them into the executables. That's a violation of Debian policy, though, and isn't allowed for anything in the archive.

Hope that helps you understand why you may not get many bites at this offer, generous as it is!

New comment by hlieberman in "The Serial TTL connector we deserve"

hlieberman — Sun, 10 May 2026 00:26:26 +0000

TagConnect or EdgeConnect ftw.

New comment by hlieberman in "CVE-2026-31431: Copy Fail vs. rootless containers"

hlieberman — Tue, 05 May 2026 05:49:18 +0000

That's true... for the exploit demo that they released. The primitive that underlies the exploit, however -- a page cache write -- can easily bypass the container boundary. One only needs to hook an executable which is also present in the host.

New comment by hlieberman in "CVE-2026-31431: Copy Fail vs. rootless containers"

hlieberman — Tue, 05 May 2026 04:45:21 +0000

In fact, the authors specifically say on the very first line of their website that the copy/fail primitive can be used as a container escape. The entire premise of this article is flawed and irresponsible.

New comment by hlieberman in "A cryptography engineer's perspective on quantum computing timelines"

hlieberman — Mon, 06 Apr 2026 17:19:29 +0000

… really? This is simultaneously so far down in the plumbing and extremely resistant to measuring the impact of, I can’t imagine anyone building a company off of this that’s not already deep in the weeds (lookin’ at you, WolfSSL).

The idea that a startup would be competitive in the VC “the only thing that matters are the feels” environment seems crazy to me.

New comment by hlieberman in "Montana referendum to outlaw corporate campaign contributions [video]"

hlieberman — Thu, 02 Apr 2026 02:15:39 +0000

"(b) The term does not include the distribution of bona fide news, commentary, or editorial content unless the publishing entity is owned or controlled by a political party, a political committee, or a candidate".

New comment by hlieberman in "The Architecture of Asking"

hlieberman — Sun, 22 Mar 2026 19:32:23 +0000

This is some hallucinatory slop bullshit.

New comment by hlieberman in "Process-Based Concurrency: Why Beam and OTP Keep Being Right"

hlieberman — Mon, 02 Mar 2026 08:58:44 +0000

Forget Node.js; _Javascript_ hadn't even been invented yet when Erlang and BEAM first debuted.

New comment by hlieberman in "Open source calculator firmware DB48X forbids CA/CO use due to age verification"

hlieberman — Fri, 27 Feb 2026 18:31:48 +0000

There is no carve out in the law for open source. I don’t think it matters for this calculator’s firmware, because there’s no covered App Store, but it certainly would for most Linux distributions.

New comment by hlieberman in "MHRA approves self replicating mRNA Covid-19 vaccine"

hlieberman — Mon, 05 Jan 2026 16:45:53 +0000

Note, this vaccine has been approved in Japan since late 2023.

New comment by hlieberman in "Public Sans – A strong, neutral typeface"

hlieberman — Tue, 30 Dec 2025 15:08:39 +0000

No, this was a project by 18F and the U.S. Web Design group that debued several years back.

New comment by hlieberman in "Airlines call in psychologists to stop passengers risking their lives for bags"

hlieberman — Sat, 27 Dec 2025 22:36:11 +0000

If there is an aircraft evacuation and someone is getting their bag out of the carry-on, the proper response is punching them in the face and throwing them onto the ground so people can step over (or on) them.

With seat pitches so tight these days, the idea that an evacuation can be done by unprepared people in 90 seconds is a pipedream, even before taking into consideration people trying to get their luggage.

New comment by hlieberman in "Fighting the New York Times' invasion of user privacy"

hlieberman — Wed, 12 Nov 2025 14:35:35 +0000

An incredibly cynical attempt at spin from a former non-profit that renounced its founding principles. A class act, all around.

New comment by hlieberman in "The Privacy Theater of Hashed PII"

hlieberman — Mon, 20 Oct 2025 04:55:19 +0000

If it's salted, you can't share it with a third-party and determine who your customers in common are. (That's the point of the salt; to mean that my_hash(X) != your_hash(X)).

New comment by hlieberman in "Show HN: Baby's first international landline"

hlieberman — Mon, 13 Oct 2025 01:15:16 +0000

I really like this... except you should add a special case for 911. I strongly believe that all phones, and anything that looks like phones, should be able to dial out in an emergency.

Obviously, this can raise its own problems -- you'll have to train the kids not to randomly dial 911! -- but you never know what circumstances might exist where someone in a panic reaches for the nearest phone.

New comment by hlieberman in "No bullshit guide to statistics prerelease"

hlieberman — Fri, 10 Oct 2025 21:25:54 +0000

I bought "No Bullshit Guide to Linear Algebra" a number of years ago, and it was super useful for me to get closer to grokking the math behind it (as someone who flunked out of calc in school).

Ivan was also really helpful when I emailed him with some stupid questions -- way above and beyond.