Hacker News: mhio

New comment by mhio in "Axios compromised on NPM – Malicious versions drop remote access trojan"

mhio — Tue, 31 Mar 2026 04:34:03 +0000

What does an interceptor in the RequestInit look like?

New comment by mhio in "Axios compromised on NPM – Malicious versions drop remote access trojan"

mhio — Tue, 31 Mar 2026 04:33:12 +0000

and for yarn berry

    ~/.yarnrc.yml
    npmMinimalAgeGate: "3d"

New comment by mhio in "Motorola announces a partnership with GrapheneOS"

mhio — Mon, 02 Mar 2026 07:40:44 +0000

Cunningham's Law in full effect!

New comment by mhio in "WinApps: Run Windows apps as if they were a part of the native Linux OS"

mhio — Sun, 30 Nov 2025 02:35:12 +0000

or a GPU that supports virtualization

New comment by mhio in "WinApps: Run Windows apps as if they were a part of the native Linux OS"

mhio — Sun, 30 Nov 2025 02:34:46 +0000

A number of intel consumer CPUs support SR-IOV. The iGPU splits out to 7 "virtual functions" or pci devices to map to a VM. On latest Core Ultra's you need a 2x5 model.

- https://www.intel.com/content/www/us/en/support/articles/000... - https://github.com/strongtz/i915-sriov-dkms

New comment by mhio in "Every satellite orbiting earth and who owns them (2023)"

mhio — Fri, 01 Aug 2025 08:00:31 +0000

That generally falls to the International Telecommunication Union globally, as a satellite without a radio is basically junk.

Then maybe the 4(+) countries that can field anti sat weapons beyond that.

New comment by mhio in "Every satellite orbiting earth and who owns them (2023)"

mhio — Fri, 01 Aug 2025 07:42:13 +0000

For anyone interested in current data like this, Jonathan McDowell maintains GCAT which is a General Catalog of Artificial Space Objects (and does so fastidiously).

https://www.planet4589.org/space/gcat/index.html

Be warned if you planning to ingest this dataset, the dates are fun =)

New comment by mhio in "Upgrading an M4 Pro Mac mini's storage for half the price"

mhio — Sat, 12 Jul 2025 05:19:31 +0000

Toms Hardware usually includes a "Sustained Write Performance and Cache Recovery" test

The test measures the write cache speed and the time to the fall to the native NAND write speed. There are usually irregularities in the sustained write speeds as well.

https://www.tomshardware.com/reviews/wd-black-sn850x-ssd-rev...

The other test I've seen is based on writing and using up free space, SSD performance can drop off as the free space fills up and garbage collection efficiency goes down. I think this impacts random writes particularly

In the enterprise space, drives tend to keep more over provisioned NAND free to maintain more consistent performance. Very early on the SSD timeline, it was advisable to only allocate 80% of consumer drives if you were using them outside of desktops and expected the workload to fill them.

New comment by mhio in "MCP-B: A Protocol for AI Browser Automation"

mhio — Thu, 10 Jul 2025 01:14:51 +0000

A playright-mcp server, or any bidi browser automation, should be equally capable of discovering/injecting and calling the same client JS exposed MCP-B site API?

It's like an OpenAPI definition but for JS/MCP? (outside of the extension to interact with that definition)

New comment by mhio in "Why email startups fail"

mhio — Tue, 01 Jul 2025 09:03:36 +0000

50% of that is spam that is blocked. At least 50% of the rest is spamish but not spam spam.

So don't feel too overwhelmed!

New comment by mhio in "Implementing fast TCP fingerprinting with eBPF"

mhio — Mon, 30 Jun 2025 10:12:34 +0000

https://bpfilter.io/ https://github.com/facebook/bpfilter https://lwn.net/Articles/1017705/

New comment by mhio in "Show HN: PLJS – JavaScript for Postgres"

mhio — Thu, 26 Jun 2025 02:32:01 +0000

What are the advantages to pljs over plv8? I thought the context creation would have been the big one, but it doesn't appear so in the current benchmarks.

How did the project weigh the intermittent updates of bellard quickjs and the community fork quickjs-ng?

New comment by mhio in "Hurl: Run and test HTTP requests with plain text"

mhio — Fri, 20 Jun 2025 06:52:10 +0000

Yeah...

    [Captures]
    csrf_token: xpath "normalize-space(//meta[@name='_csrf_token']/@content)"

The use the name with mustaches

    {{csrf_token}}

- https://hurl.dev/docs/capturing-response.html

New comment by mhio in "Building Private Processing for AI Tools on WhatsApp"

mhio — Fri, 02 May 2025 02:42:55 +0000

What's the motive "to gain trust and encourage users to use AI on WhatsApp"? Meta aren't a charity. You have to question their motives because their motive is to extract value out of their users who don't pay for a service, and I would say that whatsapp has proven to be a harder place to extract that value than their other ventures.

btw whatsapp implemented the signal protocol around 2016.

New comment by mhio in "Doxx/Darkflare: DarkFlare TCPoCDN (TCP over CDN)"

mhio — Thu, 21 Nov 2024 03:30:27 +0000

The headers are seen by the monster-in-the-middle CDN.

It's obfuscation at best. I'm not sure the encrypted traffic will look particularly php-ish for example. Compressed formats might look vaguely passable.

I can't see any stenography code or libraries in the repo.

New comment by mhio in "SpaceX Super Heavy splashes down in the gulf, canceling chopsticks landing"

mhio — Wed, 20 Nov 2024 00:39:17 +0000

The pins/struts are a 2 point system that double as the booster lift points in general operations. The booster mostly hangs in tension which the existing tank structure can support. I would guess they share some of the structure beefiness with the grid fins.

Legs require at least 4 points, probably more. Shock absorption hardware, ability to unfurl to an acceptable width. Require reinforcement (cross bracing) near the base of the tanks to handle the loads pushing inwards toward the center of the tanks.

New comment by mhio in "Zod: TypeScript-first schema validation with static type inference"

mhio — Mon, 14 Oct 2024 06:43:28 +0000

How does haxe modify a typescript project pre or post compile?

New comment by mhio in "Zod: TypeScript-first schema validation with static type inference"

mhio — Thu, 10 Oct 2024 02:19:28 +0000

Not really - https://github.com/Microsoft/TypeScript/issues/16607.

ts-morph provides an easy way to use the TypeScript Compiler API to view and edit the AST before compile. Once you get your head around the API, which has good examples but isn't thoroughly documented on the web.

https://github.com/dsherret/ts-morph

New comment by mhio in "React on the server is not PHP"

mhio — Mon, 07 Oct 2024 10:07:21 +0000

Next.js won't require a Deno backend. You can define backend data fetches [0] along with the UI Pages and routes for an API [1].

Of course the NextJS application could call out to a Deno backend as well, but the external app is not required.

- [0] https://nextjs.org/docs/pages/building-your-application/data... - [1] https://nextjs.org/docs/pages/building-your-application/rout...

New comment by mhio in "Playing with BOLT and Postgres"

mhio — Sun, 06 Oct 2024 00:05:36 +0000

Would the profiles and resulting binaries be highly CPU specific? I couldn't find any cross hardware notes in the original paper.

The example's I'm thinking of are CPU's with vastly different L1/L2/L3 cache profiles. Epyc vs Xeon. Maybe Zen 3 v Zen 5.

Just wondering if it looks great on a benchmark machine (and a hyperscaler with a common hardware fleet) but might not look as great when distributing common binaries to the world. Doing profiling/optimising after release seems dicey.