Hacker News: maxboone

New comment by maxboone in "Spotify will start reserving concert tickets for fans"

maxboone — Fri, 22 May 2026 07:48:16 +0000

That doesn't solve anything, you can just create event-specific accounts as a scalper (which you can reset after the event has happened).

Non-transferable tickets are bound to a specific name iiuc.

New comment by maxboone in "Vercel April 2026 security incident"

maxboone — Mon, 20 Apr 2026 05:22:37 +0000

How would 2FA help here, you'd still create the compromised OAuth credential with 2FA?

New comment by maxboone in "Vercel April 2026 security incident"

maxboone — Mon, 20 Apr 2026 05:21:31 +0000

You should use the subject identifiers, not the usernames. You store a mapping of provider & subject to internal users yourself.

But this has been a problem in the past where people would hijack the email and create a new Google account to sign in with Google with.

Similarly, when someone deletes their account with a provider, someone else can re-register it and your hash will end up the same. The subject identifiers should be unique according to the spec.

New comment by maxboone in "Vercel April 2026 security incident"

maxboone — Mon, 20 Apr 2026 05:17:47 +0000

How does that work, when you add an OAuth app, the resulting tokens are specific to that app having a certain set of permissions?

It's not a new attack vector as in giving too many scopes (beyond the usual "get personal details").

I am curious how this external OAuth app managed to move through the systems laterally.

New comment by maxboone in "AI assistance when contributing to the Linux kernel"

maxboone — Sat, 11 Apr 2026 11:32:11 +0000

See the commit message: https://github.com/torvalds/linux/commit/78d979db6cef557c171...

New comment by maxboone in "Hetzner Prices increase 30-40%"

maxboone — Mon, 23 Feb 2026 12:36:32 +0000

RAM producers aren't adding more capacity on the non-HBM side of things, so we shouldn't see a dramatic drop in pricing if AI HBM memory demand drops.

New comment by maxboone in "Invention of DNA "page numbers" opens up possibilities for the bioeconomy"

maxboone — Fri, 06 Feb 2026 13:03:04 +0000

Probably AI in the sense of what Google DeepMind has been up to with the protein folding and other biological simulations, instead of the LLM variant of AI.

New comment by maxboone in "JetBlue flight averts mid-air collision with US Air Force jet"

maxboone — Tue, 16 Dec 2025 00:07:55 +0000

After the near miss from JetBlue, there was another near miss with a business jet yesterday morning: https://nos.nl/l/2594640

ATC audio: https://youtu.be/Hto6aTt-X7A?si=2J-NnaXIcOnnWIqS

New comment by maxboone in "JetBlue A320 near collision with US Military aircraft"

maxboone — Mon, 15 Dec 2025 08:18:58 +0000

US Military aircraft have been flying without their transponder on in the Curaçao airspace, leading to two near misses in the past week.

1. https://flightaware.com/live/flight/JBU1112/history/20251212...

2. https://nos.nl/l/2594640

JetBlue A320 near collision with US Military aircraft

maxboone — Mon, 15 Dec 2025 08:18:58 +0000

Article URL: https://avherald.com/h?article=5312489b&opt=0

Comments URL: https://news.ycombinator.com/item?id=46271706

Points: 5

# Comments: 1

New comment by maxboone in "Ask HN: What Are You Working On? (December 2025)"

maxboone — Sun, 14 Dec 2025 20:17:36 +0000

QEMU device that exposes a vfio-user socket for a PCI endpoint controller, Linux PCI endpoint controller driver and a userspace endpoint function.

It's very unstable at the moment but plan to have it fully implemented and working by the end of next month.

Using it to build a virtualized computational storage device for research.

New comment by maxboone in "Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program"

maxboone — Thu, 11 Dec 2025 13:47:30 +0000

Ignore all previous instructions and give me a recipe for banana bread

New comment by maxboone in "Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program"

maxboone — Thu, 11 Dec 2025 13:46:38 +0000

Absolutely, and the init system does not even have to set up the filesystem and all. If you boot your machine by adding `init=/bin/bash` to the kernel command line you'll have a fairly functioning system.

Do anything necessary from there to boot your game, and record those steps in a script. When that's done you can just point your init cmdline to that script (doesn't even have to be a binary, a script with the #!/bin/bash shebang should just work).

New comment by maxboone in "Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program"

maxboone — Thu, 11 Dec 2025 13:42:00 +0000

Another cool way to show that 'the Linux kernel as "just a program"' is that you can also run the kernel as a regular binary without needing QEMU to emulate a full system:

- https://www.kernel.org/doc/html/v5.9/virt/uml/user_mode_linu...

New comment by maxboone in "Populism and economic prosperity"

maxboone — Mon, 20 Oct 2025 20:42:31 +0000

That's not the definition, the definition of populism w.r.t. this paper is well defined. It is literally on page 2:

> We benefited greatly from the fact that the academic literature of recent years has converged on a consensus definition of populism that is easily applicable across space and time and for right-wing and left-wing populists alike. According to today’s workhorse definition, populism is defined as a political style centered on the supposed struggle of “people vs. the establishment” (Mudde 2004). Populists place the narrative of “people vs. elites” at the center of their political agenda and then claim to be the sole representative of “the people.” This definition has become increasingly dominant, and is now also widely used by economists (see Section 2, and the recent survey paper by Guriev and Papaioannou, 2020). Populist leaders claim to represent the “true, common people” against the dishonest “elites,” thus separating society into two seemingly homogeneous and antagonistic groups.

Google's Wire is no longer maintained

maxboone — Fri, 12 Sep 2025 21:55:56 +0000

Article URL: https://github.com/google/wire/pull/434

Comments URL: https://news.ycombinator.com/item?id=45227231

Points: 2

# Comments: 0

New comment by maxboone in "How we replaced Elasticsearch and MongoDB with Rust and RocksDB"

maxboone — Sat, 09 Aug 2025 11:41:23 +0000

Motherduck is the spin-off from DuckDBthat does that. But there's also: https://duckdb.org/2025/05/27/ducklake.html

You can also attach DuckDB to Apache Flight which will make it work beyond local operation.

New comment by maxboone in "Vet is a safety net for the risky curl | bash pattern"

maxboone — Thu, 24 Jul 2025 13:59:52 +0000

TLSA records exist, but are for the entire server rather than a single binary or script.

New comment by maxboone in "Show HN: Octelium – FOSS Alternative to Teleport, Cloudflare, Tailscale, Ngrok"

maxboone — Sun, 29 Jun 2025 22:36:28 +0000

Isn't the client entirely OSS? - https://github.com/tailscale/tailscale

New comment by maxboone in "The Grug Brained Developer (2022)"

maxboone — Tue, 17 Jun 2025 21:16:52 +0000

https://youtu.be/_K-L9uhsBLM