<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: kokada</title><link>https://news.ycombinator.com/user?id=kokada</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 15 May 2026 10:07:21 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=kokada" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by kokada in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>Yes, this is why I am saying your idea of just reinventing the FS doesn't make sense. You don't get neither the wider ecosystem you get by having an OS compatible with e.g., POSIX semantics nor all the benefits you could get if you reinvent the whole OS.</p>
]]></description><pubDate>Thu, 14 May 2026 10:48:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=48133587</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48133587</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48133587</guid></item><item><title><![CDATA[New comment by kokada in "Linux gaming is faster because Windows APIs are becoming Linux kernel features"]]></title><description><![CDATA[
<p>But it is also rare cases where a a few percent points actually make a huge difference. Remember when reviewers are doing benchmarks they're generally using a standardised test suite with uncapped framerates. For most people they would be perfectly happy to hit a target framerate, or if they really want to play uncapped they would first reduce a few graphical setting to archive good performance (most of time with imperceptible changes in the graphics). It is rare when the performance of the game is so tight in a hardware that a few percent points actually matter.<p>To give a particular example, I started playing GTAV on Windows after building a new PC since I had no spare drives. After finally installing Linux I decided to try GTAV on Linux just to see how well it would run. And it runs amazingly well, and yes, it runs a few percent points slower than Windows, but the only tradeoff I did was slightly increase FSR4 and the game still looks amazing. I didn't really notice any graphics issues, especially not during actual gameplay (if I stayed at the same place and started to nitpick I could notice differences).</p>
]]></description><pubDate>Thu, 14 May 2026 08:05:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=48132423</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48132423</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48132423</guid></item><item><title><![CDATA[New comment by kokada in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>If we are going so far to only guarantee correctness if we are using a FS that implements ACID semantics, why not just reinvent the whole kernel and remove all footguns, including memory safety? We could have a OS that each syscall to memory allocation can only be done through safe API.<p>Otherwise, it doesn't really make sense. The only reason we have things like Rust and other memory safe languages is because we want to create safer programs in the existing imperfect OSes that we have currently.</p>
]]></description><pubDate>Wed, 13 May 2026 20:57:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48127456</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48127456</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48127456</guid></item><item><title><![CDATA[New comment by kokada in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>Not sure how reliable this site is, but if it is correct it looks like 10: <a href="https://www.cvedetails.com/vulnerability-list/vendor_id-72/product_id-5075/GNU-Coreutils.html" rel="nofollow">https://www.cvedetails.com/vulnerability-list/vendor_id-72/p...</a>.<p>Maybe coreutils is so old that most security vulnerabilities was solved before CVE even existed. But I think this is also a good argument why we are replacing a solid piece of C code to Rust just because it is "memory safe" and then have lots of CVEs related to things like TOCTOUs (that Rust will not save you).</p>
]]></description><pubDate>Wed, 13 May 2026 10:30:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=48120117</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48120117</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48120117</guid></item><item><title><![CDATA[New comment by kokada in "Linux Terminal Memory Usage"]]></title><description><![CDATA[
<p>I was using GNOME Console in a postmarketOS install in my Chromebook. The fact that it is lightweight compared to say Ghostty (my main terminal everywhere else) made a difference in performance for such a constraint device.<p>And I didn't really miss any features to be honest, it has the basic that you expect (things like tabs). It is less customizable than other options, but the defaults were good enough for me.</p>
]]></description><pubDate>Tue, 12 May 2026 09:23:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=48105989</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48105989</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48105989</guid></item><item><title><![CDATA[New comment by kokada in "Linux Terminal Memory Usage"]]></title><description><![CDATA[
<p>Wait, what? ptyxis is not the default GNOME termjnal. It is the terminal of choice for both Ubuntu and Fedora, but the default terminal in GNOME is Console, internally known as kgx: <a href="https://en.wikipedia.org/wiki/GNOME_Terminal" rel="nofollow">https://en.wikipedia.org/wiki/GNOME_Terminal</a>.</p>
]]></description><pubDate>Mon, 11 May 2026 22:03:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=48101267</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48101267</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48101267</guid></item><item><title><![CDATA[New comment by kokada in "Distributing Mac software is increasing my cortisol levels"]]></title><description><![CDATA[
<p>> but then, like, what do you actually want?<p>As an author of some homebrewed Go software in the past and trying to distribute in all 3 big OSes, I completely understand the blog post author's points. The problem is not Gatekeeper per see, it is just the combination of things that makes everything infuriating:<p>- I could justify going for the whole "Apple Developer Program" even with all the bullshit things you need to do to get certified if this was a one time payment like in Google Play Store. But it is yearly. Like the author, I would probably get 0 (or close to 0) dollars in recurrent revenue for those apps, I could justify a one time payment but a yearly one is ridiculous, it is not like Apple needs this money to be profitable (they probably get a much higher margins on selling things on Apple Store)<p>- Gatekeeper UX is infuriating. The equivalent on Windows (SmartScreen, as the author also cited) is still basically the same as Gatekeeper as far I understand (e.g., you need to have a valid certificate on your app or SmartScreen will deny the app execution until you clear the safety bit). But SmartScreen, different from Gatekeeper, has an actual good UX, as the error messages are clear and actionable (and also don't require a command line command to bypass)<p>- The author was still in a more "happy path" than me since their app seems to be a CLI only app. In this case just removing the quarantine bit with `xattr` works fine. In my case I was trying to distribute a desktop app, and I needed some special permissions to show notifications. This means I need to package my app in a proper `.app` bundle, include the required XML requesting the permissions and I am now required <i>to sign the app</i>. And since I am required to sign my app, I either pay the yearly payment fee to Apple to get a certificate to sign my app or I ask the users to resign the app with a self-signed certificate before launching<p>So really, I don't want that much actually. I can definitely handle all bullshit Apple wants, but I want at least a cheaper way to develop apps in their ecossystem. Maybe a new basic certification program that you have a one time fee and you can sign your apps but not notarize them. That way Gatekeeper would still complain, but at least my app would work without resign.<p>Or limit notarization to X amount of users (non-stabled notarized apps talks with Apple servers during the app first run, so they could just limit the amount of allowed tickets to X amount of users). If my app ever pass X amount of users, I will gladly pay the Apple tax, but 99USD/year for something that I will never see it back is too much.<p>Edit: BTW, I know, maybe 99USD/year doesn't seem too much for some. But Apple also doesn't do any regional pricing as far I know, and 99USD/year is crazy expensive in the country where I come from for example.<p>Edit 2: I am sure things are better nowadays with Claude/ChatGPT, but also trying to understand how to do the correct thing for your app is very difficult, especially if you're not using Xcode, since Apple assumes you're using it so all documentation refers to Xcode.</p>
]]></description><pubDate>Sun, 10 May 2026 09:39:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=48082393</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48082393</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48082393</guid></item><item><title><![CDATA[New comment by kokada in "StarFighter 16-Inch"]]></title><description><![CDATA[
<p>I think there is a very specific niche that this notebook is target for, and this definitely doesn't seem for you, the kind of person that having a cheaper laptop is more important than some of the unique features than this one or a Framework 13 Pro have.<p>For the unique part of this laptop that AFAIK a Dell XPS won't have is the Coreboot BIOS, that also probably means better support in the long term for BIOS updates.<p>To be clear, this is also not a laptop for me (but I did pre-order a Framework 13 Pro), but saying "nerd tax" or "anyone who buys one is either giving a donation or an idiot" like the other comment is just focusing in one part (the price) and not looking at the other.</p>
]]></description><pubDate>Wed, 06 May 2026 14:39:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=48036827</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=48036827</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48036827</guid></item><item><title><![CDATA[New comment by kokada in "An AI agent deleted our production database. The agent's confession is below"]]></title><description><![CDATA[
<p>> The author sounds knowledgeable enough to me.<p>Nope, their complaint about having an API ask if you should delete or not clearly shows the author has no idea how API works. They could have said that a deletion API could require 2 different requests, one for the deletion request that returns a token and another for confirmation with the token returned by the first request, but this is not what they said so.<p>Also as others have said, this wouldn't have helped anyway because the AI could just call both APIs one after another and the result would be the same, especially if the first request returns "call this other endpoint with this token to confirm your deletion request".</p>
]]></description><pubDate>Tue, 28 Apr 2026 11:00:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47932764</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47932764</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47932764</guid></item><item><title><![CDATA[New comment by kokada in "An AI agent deleted our production database. The agent's confession is below"]]></title><description><![CDATA[
<p>Exactly, that just reinforces the fact that the author is just blaming others instead of getting any valuable insights about this "postmortem analysis".</p>
]]></description><pubDate>Sun, 26 Apr 2026 22:58:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=47915693</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47915693</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47915693</guid></item><item><title><![CDATA[New comment by kokada in "An AI agent deleted our production database. The agent's confession is below"]]></title><description><![CDATA[
<p>There is a difference between making a mistake like this one and being humble (e.g., lessons learned, having a daily external backup of the database somewhere else, or maybe asking the agent to not run commands directly in production but write a script to be reviewed later, or anything similar) and just blaming the AI and the service provider and never admitting your mistake like this article is all about.<p>The fact that this seems to be written by AI makes it even more ironic.</p>
]]></description><pubDate>Sun, 26 Apr 2026 21:06:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=47914478</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47914478</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47914478</guid></item><item><title><![CDATA[New comment by kokada in "An AI agent deleted our production database. The agent's confession is below"]]></title><description><![CDATA[
<p>I don't think this is a minor point. It seems clear by this point that the author is clueless how even API works and are just trying to shift blame for third-parties instead assuming that they're just vibecoding their whole product without doing proper checks.<p>Yes sure, there seems to be lots of ways this issue could have been mitigated, but as other comments said, this mostly happened because the author didn't do its proper homework about how the service they rely their whole product works.</p>
]]></description><pubDate>Sun, 26 Apr 2026 21:03:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=47914412</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47914412</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47914412</guid></item><item><title><![CDATA[New comment by kokada in "Apple's intentional crippling of Mobile Safari"]]></title><description><![CDATA[
<p>If that is true, this is malicious complaint. Unless Safari has the same restrictions, of course.</p>
]]></description><pubDate>Mon, 23 Mar 2026 12:16:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47488402</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47488402</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47488402</guid></item><item><title><![CDATA[New comment by kokada in "Why I love NixOS"]]></title><description><![CDATA[
<p>> As an example, nixos keeps state around regarding user id/username mappings, to avoid giving the same user id to different users across time. So a fresh install of nixos might leave services unable to read their data files, because the file might be owned by a different user id.<p>One reason to set `mutableUsers = false`: <a href="https://mynixos.com/nixpkgs/option/users.mutableUsers" rel="nofollow">https://mynixos.com/nixpkgs/option/users.mutableUsers</a>.<p>> And if you activate and enable incus, for instance, it will probably create a bridge device: the device will remain in place after you remove incus, which will have implications for how your network/firewall works that your configuration will depend on but will not enforce or be able to reproduce.<p>Impermanence: <a href="https://github.com/nix-community/impermanence" rel="nofollow">https://github.com/nix-community/impermanence</a>.<p>To be clear, I don't use neither. But you can get NixOS to be almost completely stateless (if this is something you care) with a few changes. The power is there, but it is disabled by default because it is not the pragmatic choice in most cases.</p>
]]></description><pubDate>Mon, 23 Mar 2026 10:59:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47487707</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47487707</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47487707</guid></item><item><title><![CDATA[New comment by kokada in "The Neo cannot scale with macOS behind on the basics"]]></title><description><![CDATA[
<p>BetterDisplay allow you to disable the internal monitor while keeping the lid open, this way I can still use TouchID.</p>
]]></description><pubDate>Wed, 18 Mar 2026 19:24:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47430282</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47430282</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47430282</guid></item><item><title><![CDATA[New comment by kokada in "The Neo cannot scale with macOS behind on the basics"]]></title><description><![CDATA[
<p>I think macOS makes some trade-offs to give a supposedely better user experience as long you're part of the 80%. If you're not though, yes it is painful.<p>For me the macOS Display management experience is absolute dreadful. I had the same issues as the author's and I even had to pay actual money for a third party application (BetterDisplay) to fix some of the issues.<p>The most infurienting one for me is that I can't disable the internal MacBook display when I am connected to an external monitor without closing the lid. Why you may ask? Because I want to keep using the TouchID. However this is impossible in macOS without an external app.</p>
]]></description><pubDate>Wed, 18 Mar 2026 13:19:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47425458</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47425458</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47425458</guid></item><item><title><![CDATA[New comment by kokada in "MacBook Neo"]]></title><description><![CDATA[
<p>I agree with all your points. This was not me complaining, it was just an observation.<p>I am actually really excited for a Apple laptop for once, since it is kind the perfect replacement for my Chromebook Duet 3 that I was looking for.</p>
]]></description><pubDate>Thu, 05 Mar 2026 12:18:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=47260765</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47260765</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47260765</guid></item><item><title><![CDATA[New comment by kokada in "MacBook Neo"]]></title><description><![CDATA[
<p>So my observation comes from the fact that UTM webpage: <a href="https://getutm.app/faq/#what-are-the-limitations" rel="nofollow">https://getutm.app/faq/#what-are-the-limitations</a>.<p>Now this webpage may be out-of-date, so take my claims with a grain of salt.</p>
]]></description><pubDate>Thu, 05 Mar 2026 12:13:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47260718</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47260718</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47260718</guid></item><item><title><![CDATA[New comment by kokada in "MacBook Neo"]]></title><description><![CDATA[
<p>To be clear, I am not complaining. I am well aware that the target demographic is students and casual users. It is just an observation.<p>However, the price argument doesn't make sense. I bought a EUR300 laptop for my wife 3 years ago that has a Intel Core i3 N305 CPU (<a href="https://www.intel.com/content/www/us/en/products/sku/231805/intel-core-i3n305-processor-6m-cache-up-to-3-80-ghz/specifications.html" rel="nofollow">https://www.intel.com/content/www/us/en/products/sku/231805/...</a>), and that CPU, like any modern CPU from Intel, has virtualization instructions.<p>Heck, my Chromebook Duet with a Snapdragon 7c Gen 2, that compared to this A18 Pro chip is laughable underpowered, also has virtualization instructions (this is why Crostini, the Linux virtual environment for ChromeOS, works).</p>
]]></description><pubDate>Thu, 05 Mar 2026 12:10:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47260704</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47260704</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47260704</guid></item><item><title><![CDATA[New comment by kokada in "MacBook Neo"]]></title><description><![CDATA[
<p>I think this has no virtualisation instructions right? Since AFAIK, those are restricted to the Mx series.<p>Of course the 8GB of RAM is also limiting for running any kind of VM, but this notebooks are almost exactly what I was looking for, except for the 8GB of memory.</p>
]]></description><pubDate>Wed, 04 Mar 2026 14:48:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47248234</link><dc:creator>kokada</dc:creator><comments>https://news.ycombinator.com/item?id=47248234</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47248234</guid></item></channel></rss>