<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: krautsauer</title><link>https://news.ycombinator.com/user?id=krautsauer</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 01 Jun 2026 17:38:02 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=krautsauer" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by krautsauer in "NPM packages from Red Hat have been compromised"]]></title><description><![CDATA[
<p>Are scripts even necessary? I don't think e.g. mvn has any form of scripts¹, but if the  dependency is compromised, you're likely to execute whatever compromised code is in there the next time you do mvn verify (or whatever). Slightly less wormable maybe, running tests or at least checking whether your thing still runs after upgrading package versions is really common, no?<p>¹ Annotation processors are a thing and somewhat similar to rust macros in function, but you need to set those up manually for each dependency, iirc.</p>
]]></description><pubDate>Mon, 01 Jun 2026 15:23:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=48358083</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=48358083</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48358083</guid></item><item><title><![CDATA[New comment by krautsauer in "Endive: A JVM native WebAssembly runtime"]]></title><description><![CDATA[
<p>I was trying to write something like this in rust at some point, just for the joke that you can compile that rust to wasm, and then it can compile itself to JVM assembly. The complexity of it turned out to be quite a bit too high for a joke only.</p>
]]></description><pubDate>Fri, 29 May 2026 12:27:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=48322224</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=48322224</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48322224</guid></item><item><title><![CDATA[New comment by krautsauer in "Lanzaboote – NixOS Secure Boot"]]></title><description><![CDATA[
<p>sbctl is recommended these days: <a href="https://github.com/nix-community/lanzaboote/blob/master/docs/getting-started/prepare-your-system.md" rel="nofollow">https://github.com/nix-community/lanzaboote/blob/master/docs...</a></p>
]]></description><pubDate>Wed, 13 May 2026 00:59:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48116612</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=48116612</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48116612</guid></item><item><title><![CDATA[New comment by krautsauer in "Lanzaboote – NixOS Secure Boot"]]></title><description><![CDATA[
<p>This needs a (2022).</p>
]]></description><pubDate>Wed, 13 May 2026 00:51:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=48116561</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=48116561</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48116561</guid></item><item><title><![CDATA[New comment by krautsauer in "Incident Report: CVE-2024-YIKES"]]></title><description><![CDATA[
<p>I only noticed at goat farming. But anyway, what would a left-justify package do?</p>
]]></description><pubDate>Sun, 10 May 2026 23:30:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48089219</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=48089219</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48089219</guid></item><item><title><![CDATA[New comment by krautsauer in "I have officially retired from Emacs"]]></title><description><![CDATA[
<p>We're talking about <a href="https://addons.mozilla.org/en-US/firefox/addon/tridactyl-vim/" rel="nofollow">https://addons.mozilla.org/en-US/firefox/addon/tridactyl-vim...</a>?<p>One example: it disables the default Ctrl-F search function but its own search function is subpar (no match counts/hlsearch, e.g.) and often clashes with website's built-in search (on Github, e.g.).<p>It doesn't work on the default newtab either, and changing the default newtab somehow makes opening a new tab slower (that's FF's fault, I guess)…</p>
]]></description><pubDate>Tue, 28 Apr 2026 23:07:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47942080</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47942080</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47942080</guid></item><item><title><![CDATA[New comment by krautsauer in "Box to save memory in Rust"]]></title><description><![CDATA[
<p>[Edit:deleted]</p>
]]></description><pubDate>Sun, 26 Apr 2026 23:22:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47915909</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47915909</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47915909</guid></item><item><title><![CDATA[New comment by krautsauer in "Plain text has been around for decades and it’s here to stay"]]></title><description><![CDATA[
<p>I'm curious: Do you have a nice set of GUI applications that come with the UX you'd expect of TUIs?<p>(I'm not actually sure what the UX of TUIs is I love so much. Relative simplicity / focus on core features? Uff, notepad wins this one on vim. Fast startup times? I use gomuks, that takes a minute for the initial sync. No mouse? Moving around in TUI text editors with hjkl is slow. I either jump where I want to go with search or use the mouse. Lightness over SSH/network is the only thing I can't come up with a counterexample for.)</p>
]]></description><pubDate>Sat, 25 Apr 2026 12:35:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47900948</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47900948</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47900948</guid></item><item><title><![CDATA[New comment by krautsauer in "The Vercel breach: OAuth attack exposes risk in platform environment variables"]]></title><description><![CDATA[
<p>I for one was getting bored of hearing about APTs.</p>
]]></description><pubDate>Wed, 22 Apr 2026 01:42:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47857655</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47857655</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47857655</guid></item><item><title><![CDATA[New comment by krautsauer in "Game Devs Explain the Tricks Involved with Letting You Pause a Game"]]></title><description><![CDATA[
<p>Or you bundle a copy of the engine and game content with every recording…</p>
]]></description><pubDate>Sun, 19 Apr 2026 09:42:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=47823047</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47823047</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47823047</guid></item><item><title><![CDATA[New comment by krautsauer in "FIM – Linux framebuffer image viewer"]]></title><description><![CDATA[
<p>If we're going the see-also way: sixels. Especially timg for image viewing. I've also played with <a href="https://github.com/cptpiepmatz/nu-jupyter-kernel/tree/main/crates/nu_plugin_plotters" rel="nofollow">https://github.com/cptpiepmatz/nu-jupyter-kernel/tree/main/c...</a> which can be neat but the invocation is terribly clunky.</p>
]]></description><pubDate>Fri, 17 Apr 2026 12:10:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47805036</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47805036</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47805036</guid></item><item><title><![CDATA[New comment by krautsauer in "SSH has no Host header"]]></title><description><![CDATA[
<p>SSH waits for the server key before it presents the client keys, right? Does this mean that different VMs from different users have the same key? (Or rather, all VMs have the same key? A quick look shows s00{1,2,3}.exe.xyz all having the same key.) So this is full MitM?</p>
]]></description><pubDate>Wed, 18 Mar 2026 05:52:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=47421979</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47421979</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47421979</guid></item><item><title><![CDATA[New comment by krautsauer in "SSH Secret Menu"]]></title><description><![CDATA[
<p>Does not for me, not even with busybox sh and no funky escape codes in PS1 at all. It does with cat or yes running, so just something being output is not the problem… Hm.</p>
]]></description><pubDate>Wed, 11 Mar 2026 04:32:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=47331759</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47331759</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47331759</guid></item><item><title><![CDATA[New comment by krautsauer in "My “grand vision” for Rust"]]></title><description><![CDATA[
<p>The "caveats" section in its docs hints at it, but to be explicit: no_panic is a band-aid that can break when changing optimizer options or compiler/llvm version.  It's not a good option for library crates, e.g.<p>That being said, I'm not at all happy with all the complexity and ecosystem fragmentation that async brought. I understand what you're saying. But surprise panics is a bit of a pain point for me.</p>
]]></description><pubDate>Mon, 09 Mar 2026 12:39:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47308287</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47308287</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47308287</guid></item><item><title><![CDATA[New comment by krautsauer in "Show HN: Kula – Lightweight, self-contained Linux server monitoring tool"]]></title><description><![CDATA[
<p>netdata is pretty heavy on resources, especially disk writes. I'd appreciate improvement over it, but I won't try out this thing without indication that it improves anything. Especially with such useful features as space invaders built in…</p>
]]></description><pubDate>Sat, 07 Mar 2026 01:40:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47283502</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47283502</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47283502</guid></item><item><title><![CDATA[New comment by krautsauer in "Defer available in gcc and clang"]]></title><description><![CDATA[
<p>3…2…1… and somebody writes a malloc macro that includes the defer.</p>
]]></description><pubDate>Fri, 20 Feb 2026 10:46:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47086282</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=47086282</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47086282</guid></item><item><title><![CDATA[New comment by krautsauer in "GitHub Actions is slowly killing engineering teams"]]></title><description><![CDATA[
<p>You still get bash scripts in the targets, with $ escape hell and weirdness around multiline scripts, ordering & parallelism control headaches, and no support for background services.<p>The only sane use for Makefiles is running a few simple commands in independent targets, but do you really need make then?<p>(The argument that "everyone has it installed" is moot to me. I don't.)</p>
]]></description><pubDate>Sat, 07 Feb 2026 01:55:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=46920543</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=46920543</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46920543</guid></item><item><title><![CDATA[New comment by krautsauer in "Modernizing Linux swapping: introducing the swap table"]]></title><description><![CDATA[
<p>Disk speed? You can use zram on a diskless system. Are you sure you know what it does?
(There's also the thing where it may be faster to read data from ram compressed and decompress it in cpu cache than reading it uncompressed, but that obviously depends on the workload.)</p>
]]></description><pubDate>Fri, 06 Feb 2026 12:50:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=46912193</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=46912193</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46912193</guid></item><item><title><![CDATA[New comment by krautsauer in "GitHub Actions is slowly killing engineering teams"]]></title><description><![CDATA[
<p>Make is incredibly cursed. My favorite example is it having a built-in rule (oversimplified, some extra Makefile code that is pretended to exist in every Makefile) that will extract files from a version control system. 
<a href="https://www.gnu.org/software/make/manual/html_node/Catalogue-of-Rules.html" rel="nofollow">https://www.gnu.org/software/make/manual/html_node/Catalogue...</a><p>What you're saying is essentially ”Just Write Bash Scripts”, but with an extra layer of insanity on top. I hate it when I encounter a project like this.</p>
]]></description><pubDate>Fri, 06 Feb 2026 11:48:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=46911729</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=46911729</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46911729</guid></item><item><title><![CDATA[New comment by krautsauer in "Modernizing Linux swapping: introducing the swap table"]]></title><description><![CDATA[
<p>I rely on it heavily. Have you tried zram swap?</p>
]]></description><pubDate>Thu, 05 Feb 2026 10:39:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=46898173</link><dc:creator>krautsauer</dc:creator><comments>https://news.ycombinator.com/item?id=46898173</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46898173</guid></item></channel></rss>