Hacker News: kosinus

New comment by kosinus in "Restoring 5 GHz Wi-Fi on an LG C5 by changing its webOS region"

kosinus — Fri, 04 Sep 2026 13:59:41 +0000

I was playing around with LG TV homebrew a while back. Still have the same TV, and in the age of AI, I'm considering putting a coding agent to work on a dump of the filesystem to see what it'd take to run stock Linux on it.

New comment by kosinus in "Swiss e-voting pilot can't count 2,048 ballots after decryption failure"

kosinus — Wed, 11 Mar 2026 21:30:02 +0000

One of the reasons The Netherlands abandoned voting machines was because of electromagnetic emissions that could be read tens of meters away.

New comment by kosinus in "US plans online portal to bypass content bans in Europe and elsewhere"

kosinus — Fri, 20 Feb 2026 08:23:49 +0000

There are so so many reasons to get arrested for social media posts that have nothing to do with censorship.

New comment by kosinus in "A 'small' vanilla Kubernetes install on NixOS"

kosinus — Wed, 19 Nov 2025 16:00:29 +0000

Author here. Yeah, unfortunately, that's kinda it: just rebuild a lot. At work we have a custom setup with a build server and agents for provisioning, which is nice for multiple nodes, but also even slower. The QEMU setup in the attached repo was added later and also handy for testing multiple nodes. QEMU is also nice because you can just trash the disk images to get a clean start.

New comment by kosinus in "A 'small' vanilla Kubernetes install on NixOS"

kosinus — Wed, 19 Nov 2025 07:44:05 +0000

Author here.

You're right, it's very much a trade-off and preference where you put control, NixOS or Kubernetes. I'm not so much torn, but more believe you always have to weigh pros and cons.

For CoreDNS specifically, this setup adds CoreDNS to every node, and every node does DNS locally, so there's no redundancy benefit to using a Kubernetes deployment for CoreDNS. It does become a benefit as soon as you can't have a CoreDNS per node. I guess the obvious downsides to CoreDNS per node are that cache becomes very spread out in larger setups, and you may end up hammering your API server and upstream DNS servers more.

New comment by kosinus in "Incus-OS: Immutable Linux OS to run Incus as a hypervisor"

kosinus — Fri, 14 Nov 2025 16:13:16 +0000

You can also start QEMU/KVM powered VMs with Incus, I assume that's also possible with IncusOS?

New comment by kosinus in "Another European agency shifts off US Tech as digital sovereignty gains steam"

kosinus — Fri, 31 Oct 2025 19:13:26 +0000

What is cutting off the ICC if not restricting. I think that was a pretty blatant move, and is a large part of the chain reaction we're seeing now.

New comment by kosinus in "Offline card payments should be possible no later than 1 July 2026"

kosinus — Fri, 03 Oct 2025 21:18:50 +0000

I have no idea how the terminals operate, but I was on a flight two days ago and paid with a debit card. The flight otherwise required devices to be in airplane mode. Though there are flights that offer wifi, so there's a good chance the terminal can communicate with the ground, but they just don't allow anything else.

New comment by kosinus in "Offline card payments should be possible no later than 1 July 2026"

kosinus — Fri, 03 Oct 2025 21:12:52 +0000

Debit cards are most definitely accepted on planes.

New comment by kosinus in "Apple's Browser Engine Ban Persists, Even Under the DMA"

kosinus — Mon, 14 Jul 2025 10:46:53 +0000

I think that is true when you initially switch and are still comparing browsers, but I certainly no longer check if something broken happens to work in Chrome. Stuff may equally be broken by my adblocker. Too lazy to debug someone else's work.

New comment by kosinus in "Show HN: I am building an open-source Confluence and Notion alternative"

kosinus — Sun, 30 Jun 2024 06:28:32 +0000

Personal gripe, but there are a gazillion note taking tools, but very few of them do real-time collab.

Me and my partner currently use Apple Notes for this, simple stuff like grocery lists, todo lists, etc. But Apple Notes perf is abysmal with real-time collab. The app constantly hangs and fans are spinning non-stop. iOS is not much better.

New comment by kosinus in "European Commission's use of Microsoft 365 infringes data protection law for EU"

kosinus — Mon, 11 Mar 2024 11:56:24 +0000

It goes on to say:

> The EDPS has also decided to order the Commission to bring the processing operations resulting from its use of Microsoft 365 into compliance with Regulation (EU) 2018/1725.

Which, to me, reads like they can keep using Microsoft 365, they just need to work with Microsoft to bring it in compliance.

So my guess is your second interpretation.

New comment by kosinus in "Show HN: Obligator – An OpenID Connect server for self-hosters"

kosinus — Sat, 14 Oct 2023 12:23:32 +0000

Thanks for pointing that out! Maybe we can improve on that, even if we keep it as a non-goal.

Right away, a partial mitigation for current versions of Portier is to modify the `email_*.mustache` templates to remove the link. But a second piece of information Portier leaks is simply which sites you're logging into. That's right in the subject for Portier, and not something you can customize for current versions.

I think it's worthy to try and harden against this type of attack, but I'm worried the effect is limited. There's often nothing stopping someone from simply starting the login process / creating a new session, so an attacker just has to know where, and there are a bunch of ways to find out.

New comment by kosinus in "Show HN: Obligator – An OpenID Connect server for self-hosters"

kosinus — Thu, 12 Oct 2023 07:54:31 +0000

This looks like it has the same core functionality as Portier? https://github.com/portier/portier-broker

I'm on mobile, so haven't really checked where we differ in details.

New comment by kosinus in "The problem with federated web apps"

kosinus — Mon, 03 Jul 2023 10:46:09 +0000

The post body is just one property of a JSON-LD document in ActivityPub. The rest of it is metadata, relations, etc, that different apps may present ever so slightly differently.

It's more like an API with multiple implementations.

(Even just JSON serialization differences will pop up. For example, PHP always likes to escape forward slashes.)

New comment by kosinus in "The problem with federated web apps"

kosinus — Sun, 02 Jul 2023 07:09:01 +0000

I'm not sure that applies here. If data is migrated from one app to another, content may change.

We could create a protocol for requesting content-addressable URLs over HTTP, but it wouldn't help with the problem described either.

New comment by kosinus in "Surprising Consequences of macOS’s Environment Variable Sanitization"

kosinus — Wed, 11 Jan 2023 08:10:13 +0000

Maybe it's possible to patch the dependency? For example, for Node.js / npm, there are automated ways to do this, like [patch-package](https://www.npmjs.com/package/patch-package). Does Python / pip have something similar?

New comment by kosinus in "Ask HN: How much does it cost to run Hacker News?"

kosinus — Thu, 29 Dec 2022 11:40:03 +0000

I don't believe business opportunities are lost that quickly. Sure if you're down for 2 months, yes. But use a solid dbms and web framework and you can transition to multiple servers quite easily, in the order of hours. Doesn't even have to be k8s, but call in an expert the next day if you have to.

New comment by kosinus in "Open Source Bait and Switch"

kosinus — Mon, 26 Sep 2022 13:46:08 +0000

This mentions the Elasticsearch situation, but there's nothing the GPL does that would've helped Elastic.

New comment by kosinus in "Show HN: RootMy.TV"

kosinus — Sat, 15 Jan 2022 18:21:39 +0000

This isn't available on my model. I think it's only 2019 and newer? The exploit seems to cover some older models as well.