<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: jaromilrojo</title><link>https://news.ycombinator.com/user?id=jaromilrojo</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 01 May 2026 08:44:32 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=jaromilrojo" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by jaromilrojo in "CJIT: C, Just in Time"]]></title><description><![CDATA[
<p>hi! matter of timing I guess, development isn't stopping :^)
a friend just prompted me to look at unx - fun to see if it all works with cjit</p>
]]></description><pubDate>Wed, 29 Apr 2026 11:45:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47946987</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=47946987</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47946987</guid></item><item><title><![CDATA[Show HN: CJIT, a single-binary C compiler that can self host]]></title><description><![CDATA[
<p>CJIT started as a hobby project around Fabrice Bellard’s tinyCC and slowly grew into something much more practical. It is now a small portable C compiler and runner that works across Linux, macOS, and Windows, can self host, and is packaged as a single executable.<p>What mattered most to me was keeping the barrier to entry low. You can take one small binary, drop it onto a system, and compile or run C code using the libraries already available there, without setting up a full toolchain or installing a large stack of dependencies.<p>I find that useful for quick prototyping, testing, auditing, learning, and generally exploring real systems with less friction. The codebase also reached a point where it feels solid and maintainable, not just experimental.<p>It is still a small project, and I want to keep it that way: simple, useful, and easy to carry around.<p>A fun extra: it works nicely with raylib as well.<p>Interested in feedback from people here, especially on the single-binary approach and whether this kind of tool feels useful in practice.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47751458">https://news.ycombinator.com/item?id=47751458</a></p>
<p>Points: 7</p>
<p># Comments: 1</p>
]]></description><pubDate>Mon, 13 Apr 2026 13:11:27 +0000</pubDate><link>https://dyne.org/cjit/</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=47751458</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47751458</guid></item><item><title><![CDATA[New comment by jaromilrojo in "The Future Was Federated"]]></title><description><![CDATA[
<p>This article was never meant as a comparison between existing federated and decentralized protocols. But we do take up the challenge for the next, good idea!</p>
]]></description><pubDate>Fri, 06 Feb 2026 07:59:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=46910251</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=46910251</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46910251</guid></item><item><title><![CDATA[New comment by jaromilrojo in "C, Just in Time"]]></title><description><![CDATA[
<p>Hi! thanks for your enthusiasm. I am writing a tutorial that can be fun both for experienced and newbie coders here <a href="https://dyne.org/docs/cjit" rel="nofollow">https://dyne.org/docs/cjit</a></p>
]]></description><pubDate>Fri, 06 Dec 2024 08:43:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=42337710</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=42337710</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42337710</guid></item><item><title><![CDATA[New comment by jaromilrojo in "C, Just in Time"]]></title><description><![CDATA[
<p>As a fun project we hacked a C interpreter (based on tinyCC) that compiles C code in-memory and runs it live. CJIT today is a 2MB executable that can do a lot, including call functions from any installed library on Linux, Windows, and MacOSX.</p>
]]></description><pubDate>Tue, 26 Nov 2024 14:46:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=42246210</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=42246210</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42246210</guid></item><item><title><![CDATA[C, Just in Time]]></title><description><![CDATA[
<p>Article URL: <a href="https://dyne.org/cjit/">https://dyne.org/cjit/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=42246209">https://news.ycombinator.com/item?id=42246209</a></p>
<p>Points: 15</p>
<p># Comments: 7</p>
]]></description><pubDate>Tue, 26 Nov 2024 14:46:11 +0000</pubDate><link>https://dyne.org/cjit/</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=42246209</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42246209</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Benchmark of the BBS+ Signature Scheme"]]></title><description><![CDATA[
<p>For anyone interested, benchmarks of the zero-knowledge proof signature closer to standardization today.</p>
]]></description><pubDate>Fri, 16 Aug 2024 09:34:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=41264753</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=41264753</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41264753</guid></item><item><title><![CDATA[Benchmark of the BBS+ Signature Scheme]]></title><description><![CDATA[
<p>Article URL: <a href="https://news.dyne.org/benchmark-of-the-bbs-signature-scheme-v06/">https://news.dyne.org/benchmark-of-the-bbs-signature-scheme-v06/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=41264752">https://news.ycombinator.com/item?id=41264752</a></p>
<p>Points: 3</p>
<p># Comments: 1</p>
]]></description><pubDate>Fri, 16 Aug 2024 09:34:57 +0000</pubDate><link>https://news.dyne.org/benchmark-of-the-bbs-signature-scheme-v06/</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=41264752</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41264752</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Backdoor in upstream xz/liblzma leading to SSH server compromise"]]></title><description><![CDATA[
<p>thanks for your review! tho you are referring to the tomb-portable unfinished experiment which is about to be dismissed since cross-platform experiments with veracrypt show very bad performance.<p>you are welcome to share a review of the tomb script, but be warned in that we use a lot of zsh specific features. It is a script that works since 15+ years so it has a discrete amount of patchwork to avoid regressions.</p>
]]></description><pubDate>Sun, 31 Mar 2024 06:11:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=39881859</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=39881859</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39881859</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Backdoor in upstream xz/liblzma leading to SSH server compromise"]]></title><description><![CDATA[
<p>I really appreciate your tone and dialectic reasoning, thanks for your reply. And yes, as simple as it sounds, I believe that shell scripts help a lot to maintain mission critical tools. One hands-on example is <a href="https://dyne.org/software/tomb" rel="nofollow">https://dyne.org/software/tomb</a> where I took this approach to replace whole disk encryption which is nowadays also dependent on systemd-cryptsetup.</p>
]]></description><pubDate>Sat, 30 Mar 2024 20:54:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=39878561</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=39878561</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39878561</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Backdoor in upstream xz/liblzma leading to SSH server compromise"]]></title><description><![CDATA[
<p>It is 10 and more years that I experience such ad-hominem attacks.<p>You are so quickly labeling an identifiable professional as troll, while hiding behind your throwaway identity, that I am confident readers will be able to discern.<p>Meanwhile let us be precise and add more facts <a href="https://github.com/systemd/systemd/pull/31550">https://github.com/systemd/systemd/pull/31550</a><p>Our community is swamped by people like you, so I will refrain from answering further provocations, believing I have provided enough details to back my assertion.</p>
]]></description><pubDate>Sat, 30 Mar 2024 15:07:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=39875550</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=39875550</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39875550</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Backdoor in upstream xz/liblzma leading to SSH server compromise"]]></title><description><![CDATA[
<p>You are distracting from facts with speculations and trolling FUD. I refer to what is known and has happened, you are speculating on what is not known.</p>
]]></description><pubDate>Sat, 30 Mar 2024 13:54:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=39874907</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=39874907</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39874907</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Backdoor in upstream xz/liblzma leading to SSH server compromise"]]></title><description><![CDATA[
<p>This is another proof that systemd is an anti-pattern for security: with its crawling and ever growing web of dependencies, it extends the surface of vulnerability to orders of magnitude, and once embraced not even large distro communities can defend you from that.<p>A malware code injection in upstream xz-tools is a vector for remote exploitation of the ssh daemon due to a dependency on systemd for notifications and due to systemd's call to dlopen() liblzma library (CVE-2024-3094). The resulting build interferes with authentication in sshd via systemd.</p>
]]></description><pubDate>Sat, 30 Mar 2024 13:40:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=39874777</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=39874777</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39874777</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Devuan 5.0 Released For Debian 12 Without systemd"]]></title><description><![CDATA[
<p>The people's appreciation we get is impressive: desktop Linux users (a 3% niche in the world, I know...) really like Devuan and, in general report a better experience on distros without systemd, see <a href="https://distrowatch.com/dwres.php?resource=ranking" rel="nofollow noreferrer">https://distrowatch.com/dwres.php?resource=ranking</a><p>thanks for posting the news here, there is a lot of love and attention to detail in Daedalus <3</p>
]]></description><pubDate>Tue, 15 Aug 2023 21:11:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=37139326</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=37139326</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37139326</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Brave New Trusted Boot World"]]></title><description><![CDATA[
<p>IMHO we should maintain GNU/Linux/BSD systems as tools that can free us, not entangle us or turn us into guinea pigs.<p>The world is already full of proprietary systems, including the one produced by the employer of systemd. WSL has improved a lot in the past years, he should be focusing on that, or at least use that as a testing ground.<p>Not confining new technology like systemd has lead to an infinite amount of CVEs to deal with in the past years, this could have been avoided by not allowing a tech prototype to bypass community adoption and impose itself as a ego-driven standard.</p>
]]></description><pubDate>Fri, 28 Oct 2022 20:49:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=33377771</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=33377771</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33377771</guid></item><item><title><![CDATA[The machine-id and its privacy implications]]></title><description><![CDATA[
<p>Article URL: <a href="https://linux.slashdot.org/story/19/11/30/0538211/the-file-varlibdbusmachine-id-matters-for-your-privacy-and-devuan-fixed-it">https://linux.slashdot.org/story/19/11/30/0538211/the-file-varlibdbusmachine-id-matters-for-your-privacy-and-devuan-fixed-it</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=21674809">https://news.ycombinator.com/item?id=21674809</a></p>
<p>Points: 5</p>
<p># Comments: 0</p>
]]></description><pubDate>Sun, 01 Dec 2019 10:21:45 +0000</pubDate><link>https://linux.slashdot.org/story/19/11/30/0538211/the-file-varlibdbusmachine-id-matters-for-your-privacy-and-devuan-fixed-it</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=21674809</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=21674809</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Open Letter to the Free Software Movement"]]></title><description><![CDATA[
<p>fixed thanks</p>
]]></description><pubDate>Fri, 27 Sep 2019 07:29:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=21089365</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=21089365</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=21089365</guid></item><item><title><![CDATA[Devuan Jessie 1.0.0 stable release candidate announced]]></title><description><![CDATA[
<p>Article URL: <a href="https://devuan.org/os/debian-fork/stable-candidate-announce-042017">https://devuan.org/os/debian-fork/stable-candidate-announce-042017</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=14171119">https://news.ycombinator.com/item?id=14171119</a></p>
<p>Points: 3</p>
<p># Comments: 0</p>
]]></description><pubDate>Sat, 22 Apr 2017 04:29:16 +0000</pubDate><link>https://devuan.org/os/debian-fork/stable-candidate-announce-042017</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=14171119</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=14171119</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Ask HN: What do you want to see in Ubuntu 17.10?"]]></title><description><![CDATA[
<p>also check <a href="https://www.devuan.org" rel="nofollow">https://www.devuan.org</a><p>we are very close to release Jessie stable, backed by a vibrant community<p><a href="http://distrowatch.com/table.php?distribution=devuan" rel="nofollow">http://distrowatch.com/table.php?distribution=devuan</a><p>For those preferring an introductory video:
<a href="https://www.youtube.com/watch?v=wMvyOGawNwo" rel="nofollow">https://www.youtube.com/watch?v=wMvyOGawNwo</a></p>
]]></description><pubDate>Fri, 31 Mar 2017 14:19:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=14004022</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=14004022</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=14004022</guid></item><item><title><![CDATA[New comment by jaromilrojo in "Balde: a microframework to develop web applications in C"]]></title><description><![CDATA[
<p>I used my own C code generator for CGIs for years, along mongoose for other tasks. Nowadays I'm using <a href="https://kore.io" rel="nofollow">https://kore.io</a> and I'm VERY happy with it, great developer experience, well written and understandable code, minimal in dependencies and no bugs so far. I'm using it quite heavily in a project, it was easy to add templating and other amenities to it. Highly recommended.</p>
]]></description><pubDate>Mon, 23 May 2016 11:34:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=11753162</link><dc:creator>jaromilrojo</dc:creator><comments>https://news.ycombinator.com/item?id=11753162</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=11753162</guid></item></channel></rss>