Hacker News: mceachen

New comment by mceachen in "We know 15k websites are infected. how do we tell them?"

mceachen — Fri, 06 Nov 2026 23:21:41 +0000

Can't you do a .well-known or DNS handshake (like certbot) so people prove domain ownership, then hand then the report of what you found on their domain?

New comment by mceachen in "Sshole"

mceachen — Thu, 05 Nov 2026 15:04:07 +0000

New comment by mceachen in "Ask HN: What's your current AI agentic setup?"

mceachen — Thu, 05 Nov 2026 06:28:39 +0000

Have your agents keep contexts of tasks up to date as they work on stuff.

I've been iterating on this approach for about a year—it makes switching between agents and harnesses trivial.

https://photostructure.com/coding/claude-code-tpp/

New comment by mceachen in "Ask HN: What's your current AI agentic setup?"

mceachen — Thu, 05 Nov 2026 06:22:45 +0000

"use subagents as applicable" (and maybe "use sonnet for simpler tasks")

New comment by mceachen in "I dumped Apple’s word list"

mceachen — Wed, 04 Nov 2026 16:26:35 +0000

Same on the other side of the pond

New comment by mceachen in "I dumped Apple’s word list"

mceachen — Wed, 04 Nov 2026 16:23:55 +0000

There's no X in Wayland

A CVE-2026-98432 firewall rule for Ubuntu, with or without Docker

mceachen — Mon, 02 Nov 2026 17:12:47 +0000

Article URL: https://photostructure.com/coding/cve-2026-98432-ubuntu/

Comments URL: https://news.ycombinator.com/item?id=50340028

Points: 2

# Comments: 0

New comment by mceachen in "Linode Security Incident"

mceachen — Fri, 30 Oct 2026 23:05:43 +0000

gopher goes to 11

(archie and veronica are non-denumerable)

Trusted code is one bad update away from malware

mceachen — Fri, 30 Oct 2026 17:53:17 +0000

Article URL: https://photostructure.com/coding/malicious-editor-extensions/

Comments URL: https://news.ycombinator.com/item?id=50307645

Points: 2

# Comments: 0

New comment by mceachen in "Removing Next.js Got My Blog to 100 on Every Lighthouse Category"

mceachen — Mon, 26 Oct 2026 04:16:28 +0000

An “image ladder” is the same image resampled at several widths. It’s not a standard term; MDN calls the technique “resolution switching”.

A srcset lists those versions, and the browser picks the one that fits the current viewport and screen density. https://responsiveimages.org/ has details.

For an example, view the source of https://photostructure.com/tags/. All the header art looks like this:

That’s generated by https://gist.github.com/mceachen/d5915e46d1294489698e155eb11..., which uses Hugo’s resources.Get and .Resize.

New comment by mceachen in "Removing Next.js Got My Blog to 100 on Every Lighthouse Category"

mceachen — Mon, 26 Oct 2026 03:55:32 +0000

I use Hugo as well. If any of your pages have larger media, look into Pipes to get images ladder srcsets built for you automatically. Very fancy. https://gohugo.io/hugo-pipes/introduction/

New comment by mceachen in "Now Google says it might use your Gmail and Google Photos data to target ads"

mceachen — Sun, 25 Oct 2026 16:29:19 +0000

Oh man that's rough.

Your experience would make for excellent feedback for me if you're willing, email hello@ my domain name if you want complementary PLUS!

New comment by mceachen in "Now Google says it might use your Gmail and Google Photos data to target ads"

mceachen — Sat, 24 Oct 2026 18:19:18 +0000

Just to clarify, I've open sourced a ton of PhotoStructure (exiftool-vendored, batch-cluster, fs-metadata, @photostructure/sqlite, sqlite-vec, and 10 more repos), but PhotoStructure's frontend and backend integrations are not open source. If PhotoStructure, Inc. ever closes, though, I will open source the repos powering the consumer product.

I've written open source for several decades, and certainly enjoyed the spoils of open source, but I've also seen a ton of bad behavior. Keeping it closed source certainly is not a guarantee that I avoid intellectual property theft or license violations, but at least I'm not just one agent prompt away from someone rebranding and reselling what I've worked full-time on for more than a decade.

New comment by mceachen in "Now Google says it might use your Gmail and Google Photos data to target ads"

mceachen — Sat, 24 Oct 2026 05:10:34 +0000

You can switch to tgz which supports 50gb splits.

New comment by mceachen in "Now Google says it might use your Gmail and Google Photos data to target ads"

mceachen — Sat, 24 Oct 2026 05:09:05 +0000

Don't rely on Google Takeouts for byte-perfect backups of your Google Photos library.

Depending on the device that uploaded the media and your country, they may have stripped GPS metadata from your media. I've also had captured-at times get changed randomly (!!) from your original media.

If possible, pull your media directly off your smartphone to make sure there are no shenanigans going on.

(These were painful discoveries made while trying to help support my PhotoStructure users)

New comment by mceachen in "Now Google says it might use your Gmail and Google Photos data to target ads"

mceachen — Sat, 24 Oct 2026 05:01:26 +0000

I wrote the open source library that Immich (and PhotoStructure and several thousand other projects) use for metadata reads and writes.

PhotoStructure runs everywhere (laptops, desktops, macOS, Windows and Linux), libraries are portable across machines and OSes, there's a generous, usable free tier, and setup takes about three minutes. If you have any questions hop into our discord, we're a friendly bunch.

New comment by mceachen in "mitmproxy adds --emudhra option"

mceachen — Thu, 22 Oct 2026 03:05:06 +0000

That's the combination to my HSM!

New comment by mceachen in "Chain of Thought for Humans"

mceachen — Thu, 22 Oct 2026 03:00:27 +0000

In almost every interview I gave at the last several companies I worked for, I'd start with "This may feel a bit odd, but with this coding problem, I'd appreciate if you spoke through your problem solving. If it helps, pretend like I am your intern. Good ideas, bad ideas, pros and cons of whatever you're considering, it's all valuable information for me to learn a bit about how you approach problems."

I feel like being explicit like this put candidates at a bit more ease than having them try to suss out what the interviewer is expecting from them implicitly (and I know there are many interviewers that will auto-veto any candidate with the audacity to suggest a possibly imperfect approach).

New comment by mceachen in "Do dentists know what they're doing?"

mceachen — Thu, 15 Oct 2026 03:50:32 +0000

Yeah, took a look at your legacy codebase. Lots of deadwood, spaghetti, misalignments. I'd even say there was skeletal deformities in the architecture. If I was your uncle, I'd say it needed at least two full rewrites. Yeah, two, because the first rewrite will suffer from second system syndrome. You don't want that. Better to plan for both rewrites ahead of time.

New comment by mceachen in "Gemini 4 Argon"

mceachen — Tue, 13 Oct 2026 16:47:02 +0000

He deserves a full parliament