Hacker News: kichik

Show HN: SSO Zen

kichik — Wed, 15 Jul 2026 12:04:47 +0000

I got tired of switching back to console and typing `aws sso login --profile WHICH ONE WAS IT AGAIN` every time my session expired. So I made a little tool that listens for those events and calls login for me. It also has a compact UI that lists all profiles and tells me which one is expired.

It was fun "reverse engineering" the way botocore stores the tokens and determine the filenames and structures.

Chose Go for easy cross platform compatibility and builds. Makes the UI not very neat, but it's functional.

Comments URL: https://news.ycombinator.com/item?id=48919549

Points: 2

# Comments: 0

New comment by kichik in "Six Harmless Bugs Lead to Remote Code Execution"

kichik — Mon, 05 Jan 2026 00:15:10 +0000

Nice chain and write-up. I don't know that I would call eval() on user input, hard coded secrets, and leaked credentials small or harmless. All of those are scary on their own.

New comment by kichik in "Copy-Item is slower than File Explorer"

kichik — Sat, 06 Dec 2025 22:45:01 +0000

Invoke-WebRequest is also very slow if you forget to disable the progress bar with $ProgressPreference = 'SilentlyContinue'

PowerShell has some "interesting" design choices...

New comment by kichik in "A Tale of Two AI Failures: Debugging a Simple Bug with LLMs"

kichik — Tue, 02 Dec 2025 00:49:01 +0000

The echo server will have no knowledge on how to construct the string to be signed.

New comment by kichik in "A Tale of Two AI Failures: Debugging a Simple Bug with LLMs"

kichik — Mon, 01 Dec 2025 16:38:49 +0000

You are indeed misunderstanding me. I am talking about returning the entire string to be signed. Not the result of the signature.

New comment by kichik in "A Tale of Two AI Failures: Debugging a Simple Bug with LLMs"

kichik — Sat, 29 Nov 2025 14:38:25 +0000

You can save the expected string to a file, save your string to a file, and run diff on a hexdump of both. Even without hexdump, you should see the difference between "\n" and "\\n" in properly escaped output.

New comment by kichik in "A Tale of Two AI Failures: Debugging a Simple Bug with LLMs"

kichik — Fri, 28 Nov 2025 23:22:51 +0000

Not exactly the point of this article, but it would be cool if APIs like this can return the expected signed string for debugging. It would have to be properly limited for security. But if the API is expecting non-standard signatures, it could help developers with better debugging tools.

New comment by kichik in "Chromium Switching from Ninja to Siso"

kichik — Sat, 21 Jun 2025 11:21:44 +0000

Wasn't ninja invented by a Google employee?

New comment by kichik in "Foreigners Dump U.S. Treasuries. Here's Who Did the Most Selling"

kichik — Sat, 22 Mar 2025 01:09:59 +0000

From MSN:

> The largest net seller in January was Canada. The U.K. was the largest buyer in January, after having been the largest net seller in December. Norway and Japan were the second and third largest net buyers in January, respectively, Goldman said in a note.

New comment by kichik in "Open source maintainers are drowning in junk bug reports written by AI"

kichik — Tue, 24 Dec 2024 14:50:40 +0000

They might be looking for some open-source fame. The contribution to their resume is more important than the contribution to the project.

New comment by kichik in "Man locked out of Google Drive and loses 9 year old photos after SIM Swap attack"

kichik — Fri, 25 Oct 2024 17:45:49 +0000

You can ask for larger zip files. The maximum is 50GB. It uses zip64 which most modern systems should support. So still 6 files in your case, but at least not 50.

New comment by kichik in "Man locked out of Google Drive and loses 9 year old photos after SIM Swap attack"

kichik — Tue, 22 Oct 2024 17:05:14 +0000

Google Takeout can also run on a schedule. You can do a monthly backup and they will email you when it's ready.

New comment by kichik in "Naval Is Mistaken"

kichik — Sun, 20 Oct 2024 13:03:53 +0000

Keep reading down the thread. He's not trying to hide it that much.

https://x.com/paulg/status/1847333998554447948

New comment by kichik in "Automattic–WP Engine Term Sheet"

kichik — Wed, 02 Oct 2024 11:52:20 +0000

Those are the first two paragraphs of the article. Verbatim. Can't get more in context than that.

New comment by kichik in "Re: Automattic's Actionable Misconduct Directed to WP Engine [pdf]"

kichik — Tue, 24 Sep 2024 12:43:13 +0000

The texts he sent are in the PDF.

New comment by kichik in "Ask HN: Any hope for removable, rechargable battery standards?"

kichik — Wed, 11 Sep 2024 01:19:12 +0000

You can still charge $80 for the proprietary plastic shell.

New comment by kichik in "Foobar2000"

kichik — Wed, 31 Jul 2024 21:26:22 +0000

Yeah he loves that stuff.

https://github.com/kichik/nsis/blob/b4f28a7071dcd0bf3bcdb766...

New comment by kichik in "Foobar2000"

kichik — Wed, 31 Jul 2024 21:22:41 +0000

Sorry, clone might not be the right word here. Foobar2000 was created out of spite because the creator didn't like what Winamp was doing. I vaguely recall something about bitrate limits and ogg support? It was so long ago and on IRC so no history saved. So it's a replacement?

Edit: some more context here:

https://forums.winamp.com/forum/developer-center/winamp-deve...

https://www.reddit.com/r/software/comments/lqu9u/a_brief_his...

New comment by kichik in "Foobar2000"

kichik — Wed, 31 Jul 2024 20:31:59 +0000

That's a funny name considering it was the Winamp creator's nickname and Foobar2000 itself is a Winamp clone.

New comment by kichik in "Avoid ISP Routers"

kichik — Sun, 28 Jul 2024 12:22:56 +0000

And their local DNS servers crash with heavy usage.