Hacker News: inahga

New comment by inahga in "AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira"

inahga — Mon, 17 Aug 2026 17:17:19 +0000

Sadly I'm not. Either way, how LLMs work mean that traditional software analysis tools are every bit as important as they were in the before times. This is why we see a lot of hype around LLMs and formal verification.

New comment by inahga in "AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira"

inahga — Mon, 17 Aug 2026 16:01:46 +0000

I probably would have made the same mistake. It is negligent to write GitHub Actions without using static analysis.

Use zizmor in CI https://github.com/zizmorcore/zizmor

    error[template-injection]: code injection via template expansion
      --> .github/workflows/jira_issue.yml:24:29
       |
    22 |         run: |
       |         --- this run block
    23 |           # Escape special characters in title and body
    24 |           TITLE=$(echo '${{ github.event.issue.title }}' | sed 's/"/\\"/g' | sed "s/'/\\\'/g")
       |                             ^^^^^^^^^^^^^^^^^^^^^^^^ may expand into attacker-controllable code
       |
       = note: audit confidence → High
       = note: this finding has an auto-fix

New comment by inahga in "Nashville uses eminent domain to block data center near zoo"

inahga — Thu, 06 Aug 2026 19:17:12 +0000

I don't understand his point either. I used to work off of Diehl Road not too far from the CyrusOne DC[1] and it is anything but a prairie. It has greenery, but it's just the usual fake landscaping that all the industrial parks in Aurora, Bolingbrook, Warrenville, etc. do.

And there's counterexamples to the desolate office space... the Ace Hardware corporate office[2] I think is remarkably pleasant.

[1]: https://maps.app.goo.gl/rFgzVfWNBaGxpBNg7

[2]: https://maps.app.goo.gl/5EiQy5YUPengwDE18

New comment by inahga in "LAPD lets contract with surveillance giant Flock expire"

inahga — Mon, 13 Jul 2026 21:57:55 +0000

> That Pookie can show a video from a flock camera showing him somewhere else is a massive boost to his civil liberties. Same with whatever poor sap gets beat by the cops.

Not even remotely. The US is already at the stage where citizens can be brutally murdered, have said murder filmed at multiple angles, and have the officers involved get away with it.

Your civil liberties are irrelevant when we can just redefine and expand what it means to endanger a police officer. Or have the officers bypass the judicial system entirely.

Camera footage will only be used against you, not for you.

New comment by inahga in "LAPD lets contract with surveillance giant Flock expire"

inahga — Mon, 13 Jul 2026 16:49:21 +0000

If you hold police accountable, they respond by refusing to work. That's a problem that, at this time, has no solution.

New comment by inahga in "Removing the modem and GPS from my 2024 RAV4 hybrid"

inahga — Fri, 15 May 2026 02:12:10 +0000

Tesla https://www.tesla.com/support/vehicle-firmware-prevent-autos...

Ford https://www.caranddriver.com/news/a70513450/ford-4-million-v...

GM https://www.themanual.com/auto/gm-brake-fluid-warning-recall...

I think Chrysler does it too, but I only find mention of the time they bricked a bunch of Wranglers with a bad OTA update.

Broadly I don't think it's hard to imagine a software update being safety critical if the software is used in a safety critical system.

New comment by inahga in "Removing the modem and GPS from my 2024 RAV4 hybrid"

inahga — Thu, 14 May 2026 19:38:42 +0000

Has anyone experienced a case where they needed an over-the-air safety update/recall performed, but weren't able to because they removed the cellular modem?

I'd like to think failure to apply an OTA safety update would trigger a mail-out notification requesting you bring the vehicle into the dealer. But that's probably optimistic...

New comment by inahga in "WolfGuard: WireGuard with FIPS 140-3 cryptography"

inahga — Tue, 24 Mar 2026 16:59:43 +0000

The ciphers used by WireGuard are not FIPS 140-3 certified. So you have to also change the ciphers, as is done in this project.

New comment by inahga in "Better to Skip a Year for Hardware Upgrades?"

inahga — Thu, 26 Feb 2026 17:33:50 +0000

On the contrary, GP's warning saved my time and attention. For that I thank them.

New comment by inahga in "DNS-Persist-01: A New Model for DNS-Based Challenge Validation"

inahga — Wed, 18 Feb 2026 22:31:36 +0000

You should persist certs somewhere. Otherwise your availability is heavily tied to LE’s uptime.

New comment by inahga in "How wolves became dogs"

inahga — Fri, 09 Jan 2026 17:19:07 +0000

Mostly, if not entirely due to intentionally poor breeding practices. Who betrayed who?

New comment by inahga in "How Does Microwaving Grapes Create Plumes of Plasma? (2019)"

inahga — Thu, 27 Nov 2025 18:18:30 +0000

Watching this classic channel may be safer https://youtube.com/playlist?list=PLU4IMu04MIlJgB6Aaj07q-5iX...

New comment by inahga in "I Want You to Understand Chicago"

inahga — Sun, 09 Nov 2025 03:28:26 +0000

Sure, I don't mean this to arouse anger. I point it out for the Democratic primaries in March. https://ballotpedia.org/Illinois_gubernatorial_and_lieutenan...

New comment by inahga in "I Want You to Understand Chicago"

inahga — Sat, 08 Nov 2025 23:10:24 +0000

If he doesn't, he needs to be forthright about it in his speeches and podcasts. "The ISP is disobeying my direct orders."

Until then, he bears responsibility for their actions.

New comment by inahga in "Software update bricks some Jeep 4xe hybrids over the weekend"

inahga — Mon, 13 Oct 2025 16:49:04 +0000

I don't think the software hacking side of Wrangler mods is barren. e.g. https://www.jlwranglerforums.com/forum/threads/jeep-hacking-..., which IIUC has been commercialized into https://www.zautomotive.com/products/z_tzr_jlm.

I don't know that anyone has broken the head unit firmware though.

New comment by inahga in "Not all browsers perform revocation checking"

inahga — Tue, 16 Sep 2025 12:45:57 +0000

For those (i.e. me) who were concerned that the cert wasn't actually revoked, it is.

https://crt.sh/?id=20924740030

    $ curl -s http://r13.c.lencr.org/105.crl | openssl crl -noout -text | grep -A1 899DE8
        Serial Number: 055B8B1F23D5BCF09DD8E9CAF8798F899DE8
            Revocation Date: Sep 10 16:00:16 2025 GMT

New comment by inahga in "Budget Car Buyers Want Automakers to K.I.S.S"

inahga — Thu, 07 Aug 2025 16:45:25 +0000

2023 Jeep: I was able to remove the cellular modem from the head unit. Disconnecting the antenna was not effective (just reduces the range).

See e.g. https://sandsprite.com/blogs/index.php?uid=7&pid=462&year=20...

New comment by inahga in "Return of wolves to Yellowstone has led to a surge in aspen trees"

inahga — Sun, 27 Jul 2025 15:54:15 +0000

Colorado, at least, provides several resources for minimizing and compensating wolf depredation.

https://cpw.widencollective.com/assets/share/asset/pzqhipzb1... (see Funding)

Cursory search shows that not just Colorado does this.

New comment by inahga in "My AI skeptic friends are all nuts"

inahga — Tue, 03 Jun 2025 02:21:14 +0000

It's rather shocking for a company to admit to flaunting software licensing in public communications.

But this is not new https://fly.io/blog/wrong-about-gpu/

> At one point, we hex-edited the [NVIDIA] closed-source drivers to trick them into thinking our hypervisor was QEMU.

New comment by inahga in "You do not need NixOS on the desktop"

inahga — Sat, 17 May 2025 14:14:24 +0000

What's been driving me batshit is when nixos-rebuild decides it wants to build from source. I just burned an hour the other day trying to update, and getting stuck because Nix decided my little old laptop needed to compile node.js from source. Had to trial-and-error remove packages to figure out which one was transitively pulling in node.js.

It turned out to be ansible... which is a pure python tool. Beats me.

There's also some cases where it wants to build Android Studio from source. I've just removed it and now run it in a VM.

I'm sure I'm doing it wrong, and I'm sure nixos-rebuild has a reason to build things from source, and maybe I'm not RTFMing hard enough. But good god, I just need my system to update.