Hacker News: jcarrano

New comment by jcarrano in "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)"

jcarrano — Wed, 10 Jun 2026 11:41:42 +0000

Steps to reproduce:

1. Get pwned

2. Open Notepad++

3. Get pwned again (?)

New comment by jcarrano in "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)"

jcarrano — Wed, 10 Jun 2026 11:39:52 +0000

We are living through CVE-inflation (or CVEflation?) where anyone who discovers a bug using LLMs will instantly claim it is huge security hole.

New comment by jcarrano in "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)"

jcarrano — Wed, 10 Jun 2026 11:36:41 +0000

How is this supposed to be zero-click? All attack scenarios require either the attacker to modify configuration files, or the user to click on a malicious shortcut.

New comment by jcarrano in "The Skeuomorphism Nobody Talks About [video]"

jcarrano — Tue, 26 May 2026 13:00:59 +0000

Optically, it looks very nice, but it kills my CPU.

New comment by jcarrano in "All the bugs they found"

jcarrano — Thu, 21 May 2026 10:46:43 +0000

I found, in my rather recent experience with Go, that using anything other than zero for invalid, default or "sentinel" values is a source of potential problems due to the lack of real constructors.

New comment by jcarrano in "The weird, wild story of humanity's obsession with gold"

jcarrano — Wed, 20 May 2026 11:55:55 +0000

It is also relatively easy to work, since ancient times. Iridium is the rarest metal, so rare and hard to work that it is not practical.

New comment by jcarrano in "Why is almost everyone right-handed? A new study connects it to bipedalism"

jcarrano — Wed, 20 May 2026 11:09:09 +0000

At one point I used to have two mice plugged in and would use either one depending on which hand was free.

New comment by jcarrano in "Appearing productive in the workplace"

jcarrano — Thu, 07 May 2026 12:59:17 +0000

That's honestly a fear of mine, that I might lose the taste for simplicity.

New comment by jcarrano in "Gap between national food production and food-based dietary guidance (2025)"

jcarrano — Tue, 05 May 2026 09:08:56 +0000

How much of the fish self-sufficiency of China is due to them plundering the seas across the globe?

New comment by jcarrano in "Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised"

jcarrano — Thu, 26 Mar 2026 13:25:17 +0000

Thinking how a secure setup for uploading packages from a CI would look like: the package must be signed by the devs, and for that they must build it independently on their machines (this requires a reproducible build).

New comment by jcarrano in "Afroman found not liable in defamation case"

jcarrano — Thu, 19 Mar 2026 15:00:50 +0000

100% of those cases would be favorable to cops. Defamation laws are quite restrictive in Europe, much more so when it involves public officials (take a look at the Strafgesetzbuch)

New comment by jcarrano in "Afroman found not liable in defamation case"

jcarrano — Thu, 19 Mar 2026 14:57:22 +0000

Exactly what I meant. For example, in Germany one would have a hard time for much less.

New comment by jcarrano in "Honda is killing its EVs"

jcarrano — Wed, 18 Mar 2026 12:35:40 +0000

"Download more HP" is the new "download more RAM".

New comment by jcarrano in "Lenovo’s new ThinkPads score 10/10 for repairability"

jcarrano — Wed, 04 Mar 2026 10:09:46 +0000

My colleague's Thinkpad had its fan fail. He ordered a replacement which arrived next day. He swapped it himself and kept on working.

New comment by jcarrano in "British Columbia is permanently adopting daylight time"

jcarrano — Tue, 03 Mar 2026 09:23:36 +0000

100% agree. I used to watch the sun rise over the river from the train during my commute. It was worth having to wake up when it was still dark.

New comment by jcarrano in "Microwave Oven Failure: Spontaneously turned on by its LED display (2024)"

jcarrano — Thu, 12 Feb 2026 13:05:25 +0000

> This control board uses the same microcontroller GPIO pin to both drive segment A of the LED display and sense the door switch.

Is it necessary to be so skimpy with a safety feature?

New comment by jcarrano in "Ireland rolls out basic income scheme for artists"

jcarrano — Thu, 12 Feb 2026 12:54:26 +0000

"If you need subsidies in order to live off art, you don't live off art but live off the state".

As part time artist I see many problems with these schemes:

- Decoupled from people's actual appreciation of the art being done: I feel better when I know people voluntarily gave up their hard-earned money for what I do. - Monopoly-style "winner takes all". The people who benefit from this are the ones already in a position to ask for the benefit. - No one bites the hand that feeds then. That will form a body of "artists" subservient to the state.

The human problem is that no artist is willing to acknowledge that the public is not willing to spend money on their product.

New comment by jcarrano in "Ireland rolls out basic income scheme for artists"

jcarrano — Thu, 12 Feb 2026 12:47:16 +0000

> Society has not disintegrated.

Has art improved in any measure?

New comment by jcarrano in "Linux From Scratch ends SysVinit support"

jcarrano — Tue, 03 Feb 2026 17:27:10 +0000

That is one of my problems with systemd: it has way to much "magic" built in. SysVinit/OpenRC and related are easy to understand and debug: they only do what's in the scripts.

New comment by jcarrano in "Vibe coding kills open source"

jcarrano — Mon, 26 Jan 2026 17:55:46 +0000

The 3d-printer of software: get a custom part quickly and cheaply, even if not suitable for mass production.