Hacker News: ishouldbework

New comment by ishouldbework in "Trivy under attack again: Widespread GitHub Actions tag compromise secrets"

ishouldbework — Tue, 24 Mar 2026 10:42:01 +0000

So, fork the action repository and pull from upstream at your own pace?

New comment by ishouldbework in "Rebasing in Magit"

ishouldbework — Tue, 10 Mar 2026 14:26:11 +0000

While faster Emacs would always be nice, I think the idea is you just keep it running. Hence emacsclient program. So startup time is not such a big deal.

New comment by ishouldbework in "New benchmark shows top LLMs struggle in real mental health care"

ishouldbework — Wed, 10 Dec 2025 15:21:06 +0000

Finding a licensed therapist, especially one covered by health insurance, who takes new patients, can be a challenge in some areas. So while it obviously is a bad idea, I can hardly blame people in a bad place looking for at least some help.

New comment by ishouldbework in "Acme, a brief history of one of the protocols which has changed the Internet"

ishouldbework — Thu, 04 Dec 2025 12:51:46 +0000

That should be prevented by dnssec no?

New comment by ishouldbework in "Tech Titans Amass Multimillion-Dollar War Chests to Fight AI Regulation"

ishouldbework — Fri, 28 Nov 2025 15:22:09 +0000

> most of the population [..] can vote.

I mean, this is a solvable problem...

New comment by ishouldbework in "I don't care how well your "AI" works"

ishouldbework — Wed, 26 Nov 2025 23:39:15 +0000

Fair. My "information" is based on what I heard in my network. :)

New comment by ishouldbework in "I don't care how well your "AI" works"

ishouldbework — Wed, 26 Nov 2025 11:43:30 +0000

Well, speaking just for central Europe, it is pretty average. Sure, entry-level positions are different story, but anyone with at least few years for work experience can find reasonably payed job fairly quickly.

New comment by ishouldbework in "Checkout.com hacked, refuses ransom payment, donates to security labs"

ishouldbework — Thu, 13 Nov 2025 13:08:04 +0000

Interesting, that number is much higher than I would expect.

New comment by ishouldbework in "Leaving Meta and PyTorch"

ishouldbework — Fri, 07 Nov 2025 10:33:38 +0000

Look, I get that some pages require javascript, but

which is then unset by JS, with no

Changing it to

New comment by ishouldbework in "Firefox profiles: Private, focused spaces for all the ways you browse"

ishouldbework — Thu, 06 Nov 2025 14:59:34 +0000

Huh, I had no idea the argument to -P is optional (--help does not say), I was always using --ProfileManager instead. Nice quality of life improvement, thanks for the information!

New comment by ishouldbework in "The grim truth behind the Pied Piper (2020)"

ishouldbework — Wed, 05 Nov 2025 14:30:08 +0000

I do not believe that is dang's point. He often posts comments like these under recurring posts, I assume in hope that the past discussions could also be of interest to the readers.

New comment by ishouldbework in "Debian Technical Committee overrides systemd change"

ishouldbework — Fri, 24 Oct 2025 19:53:31 +0000

Well yes, but the complication is that Luca is both systemd developer and debian developer, so the passing of the baton did not really happen here.

New comment by ishouldbework in "Debian Technical Committee overrides systemd change"

ishouldbework — Fri, 24 Oct 2025 19:52:11 +0000

Funny part is that it used to be a separate file system, before Luca decided to kill it. https://lwn.net/Articles/1041948/

New comment by ishouldbework in "Element: setHTML() method"

ishouldbework — Thu, 23 Oct 2025 11:39:06 +0000

I did not notice setHTMLUnsafe exists. That makes it (in my, unimportant, opinion) fine.

New comment by ishouldbework in "Element: setHTML() method"

ishouldbework — Wed, 22 Oct 2025 21:16:09 +0000

> It then removes any HTML entities that aren't allowed by the sanitizer configuration, and further removes any XSS-unsafe elements or attributes — whether or not they are allowed by the sanitizer configuration.

Emphasis mine. I do not understand this design choice. If I explicitly allow `script` tag, why should it be stripped?

If the method was called setXSSSafeSubsetOfHTML sure I guess, but feels weird for setHTML to have impossible-to-override filter.

New comment by ishouldbework in "MinIO stops distributing free Docker images"

ishouldbework — Wed, 22 Oct 2025 11:24:22 +0000

Electricity is not a basic commodity required for life. It is convenient for sure.

New comment by ishouldbework in "Pwning the Nix ecosystem"

ishouldbework — Wed, 15 Oct 2025 16:57:16 +0000

Well, anything POSIX or GNU does support the --. I think most golang libraries as well? And if the program does not, you can always pass the files as relative paths (./--help) to work around that.

For sure though, this can get tricky, but I am not really aware of an alternative. :/ Since the calling convention is just an array of strings, there is no generic way to handle this without knowing what program you are calling and how it handles command line. This is not specific to xargs...

Well, I guess FFI would be a way, but it seems like a major PITA to have to figure out how to call a golang function from bash shell just to "call" a program.

New comment by ishouldbework in "I almost got hacked by a 'job interview'"

ishouldbework — Wed, 15 Oct 2025 16:49:32 +0000

So, uh, this part "Here's the kicker: the URL died exactly 24 hours later. These guys weren't messing around - they had their infrastructure set up to burn evidence fast." was completely made up by the AI or did you provide the "exactly 24 hours later" information out of band in some chat with the AI?

New comment by ishouldbework in "Pwning the Nix ecosystem"

ishouldbework — Wed, 15 Oct 2025 14:36:42 +0000

> It is not possible for xargs to be used securely

Eh... That is taken out of context quite a bit, that sentence does continue. Just do `cat "$HOME/changed_files" | xargs -r editorconfig-checker --` and this specific problem is fixed.

New comment by ishouldbework in "Why did Crunchyroll's subtitles just get worse?"

ishouldbework — Tue, 07 Oct 2025 14:18:54 +0000

Oooh I see, thanks!