Hacker News: hugo1789

New comment by hugo1789 in "Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory"

hugo1789 — Thu, 02 Jul 2026 18:40:38 +0000

Maybe but still a little better than closed source like Windows. Everytime whem someone asked me if I could hack my way into his Windows PC I always told "After all it's Windows, how bad can it be?" Doing that since 25 years still waiting for a Windows machine that doesn't open... On the other hand I failed to open about 50% of Apple Devices I was asked to open and about 10% of Linux machines. (Not because Linux is insecure by itself but because most Linux distros install with insecure defaults and users don't care.)

New comment by hugo1789 in "Is BGP safe yet?"

hugo1789 — Wed, 01 Apr 2026 18:20:21 +0000

I think RPKI is good enough. As we have TLS on top it doesn't need to be perfect.

New comment by hugo1789 in "Cyber.mil serving file downloads using TLS certificate which expired 3 days ago"

hugo1789 — Mon, 23 Mar 2026 18:43:43 +0000

Since revocation is also a big pain.

New comment by hugo1789 in "Hormuz Minesweeper – Are you tired of winning?"

hugo1789 — Sun, 22 Mar 2026 16:17:43 +0000

No I would not. They posed no immediate danger to anyone of us until that attack.

New comment by hugo1789 in "Palestinian boy, 12, describes how Israeli forces killed his family in car"

hugo1789 — Mon, 16 Mar 2026 19:20:30 +0000

At least it's more interesting than all those AI stuff.

New comment by hugo1789 in "A review of M Disc archival capability with long term testing results (2016)"

hugo1789 — Sun, 15 Feb 2026 04:51:27 +0000

That also changed somehow... LTO-10 drives are not backward compatible and can only read/write LTO-10 media.

New comment by hugo1789 in "Singularity Rootkit: SELinux bypass and netlink filter (ss/conntrack hidden)"

hugo1789 — Mon, 05 Jan 2026 19:30:27 +0000

That is a critical observation. Last time I had to root an Android device it hat pretty robust defenses like dm-verity and strict SELinux policies (correctly configured) and then everything collapsed because the system loaded a exfat kernel module from an unverified filesystem.

Permitting user-loaded kernel modules effectively invalidates all other security measures.

New comment by hugo1789 in "Show HN: Netrinos – A keep it simple Mesh VPN for small teams"

hugo1789 — Mon, 22 Dec 2025 18:50:19 +0000

What’s the alternative—locking down all legitimate users and still losing the data anyway?

Network controls alone don’t stop exfiltration. HDMI/DP can move data faster than most consumer NICs. Does the system account for that scenario?

New comment by hugo1789 in "Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves"

hugo1789 — Mon, 22 Dec 2025 18:32:05 +0000

What is not only true for police but for every sufficiently big group of people.

New comment by hugo1789 in "MIRA – An open-source persistent AI entity with memory"

hugo1789 — Sun, 21 Dec 2025 11:02:38 +0000

Could you please stop that? First it is not true. "Open Source" has nothing to do with the "Open Source Initiative" it existed long before. Second you are making people keep their source closed (not available) which is not a good thing.

New comment by hugo1789 in "Poor Johnny still won't encrypt"

hugo1789 — Sat, 13 Dec 2025 06:00:21 +0000

I think mandatory S/MIME without user-friendly key management would either be reverted pretty soon or it would kill Gmail.

New comment by hugo1789 in "Ryanair flight landed at Manchester airport with six minutes of fuel left"

hugo1789 — Sat, 11 Oct 2025 20:33:53 +0000

I think he would attempting a landing despite the issue in most cases because running out of fuel during go-around would be worse.

New comment by hugo1789 in "LLMs are mortally terrified of exceptions"

hugo1789 — Thu, 09 Oct 2025 19:20:42 +0000

https://xcancel.com/karpathy/status/1976082963382272334

New comment by hugo1789 in "DataGrip Is Now Free for Non-Commercial Use"

hugo1789 — Thu, 02 Oct 2025 05:07:44 +0000

Too late, switched to DBeaver Community some months ago and it works too well for me to switch back again.

New comment by hugo1789 in "VMScape and why Xen dodged it"

hugo1789 — Mon, 29 Sep 2025 06:17:26 +0000

Maybe because xen is a type 1 hypervisor in its original meaning and all the other ones are type 2? (yes, ESX(i) doesn't use linux but it also brings its own os on which it runs on top)

New comment by hugo1789 in "In defence of swap: common misconceptions (2018)"

hugo1789 — Sun, 21 Sep 2025 10:45:13 +0000

And debug many tools which still ignore the fact that malloc could fail.

New comment by hugo1789 in "In defence of swap: common misconceptions (2018)"

hugo1789 — Sun, 21 Sep 2025 10:41:56 +0000

That works if there is enough memory after the "bad" process has been killed. The question is, is it necessary? Many systems can live with processes performing a little bit poorly for some minutes and I wouldn't do it.

New comment by hugo1789 in "EU court rules nuclear energy is clean energy"

hugo1789 — Fri, 12 Sep 2025 20:01:56 +0000

Imo that's a pretty complicated topic. On one side if you just build LWRs you just don't need very highly enriched uranium or plutonium so posession of those is a red flag. On the other side fast breeder reactors are the ones which are able to produce the least harmful waste. But fast breeders and closed fuel cycles produce and handle plutonium which in turn can be used for bad things.

New comment by hugo1789 in "Raspberry Pi 5 support (OpenBSD)"

hugo1789 — Tue, 02 Sep 2025 08:57:36 +0000

Linux kernel image or another stage of bootloader loaded by the GPU is pretty normal in mobile SOCs like the one that is used here. At least they did not enable secure boot so that it's still possible to execute something else.

New comment by hugo1789 in "WinBoat: Run Windows apps on Linux with seamless integration"

hugo1789 — Tue, 02 Sep 2025 08:50:40 +0000

Why another WinApps instead of contributing and fix problems there?