Hacker News: mqus

New comment by mqus in "Codex for open source"

mqus — Sun, 14 Jun 2026 09:43:48 +0000

Jetbrains gives away for free infinity years of a $180+ per year subscription (its more expensive in the first year or for orgs)[1] for open source authors, students, and more. Sure, the per-month price tag is not as high but after year 4 you saved much more.

[1] https://www.jetbrains.com/store/?section=students&billing=ye...

New comment by mqus in "Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Packages"

mqus — Sat, 13 Jun 2026 13:39:53 +0000

This sounds like your update process is quite involved then. Or do you just not do it?

New comment by mqus in "AUR packages compromised with Infostealer and Rootkit"

mqus — Fri, 12 Jun 2026 14:07:01 +0000

Tbh Arch itself is the most explicit about this compared to the derivatives. Manjaro etc allow installing AUR stuff directly from their main package manager

New comment by mqus in "Using Git's rerere feature to escape recurring conflict hell"

mqus — Mon, 01 Jun 2026 15:38:22 +0000

As someone who tried rerere and didn't see the point:

How? Usually I rebase the same branch multiple times onto different, but successive commits of the master branch. But after I solved a bunch of conflicts of the first rebase, I shouldn't have the same conflicts again in a second one, since the rebased branch contains the merged conflict. Rebasing again could only turn up new conflicts (with newer, other commits on the master branch).

How can I have the same conflict again for repeated rebases?

New comment by mqus in "Bugs Rust won't catch"

mqus — Wed, 29 Apr 2026 05:39:30 +0000

Bug =! Vulnerability

Etel-Tuning

mqus — Sat, 21 Mar 2026 10:26:36 +0000

Article URL: https://etel-tuning.com/

Comments URL: https://news.ycombinator.com/item?id=47465787

Points: 2

# Comments: 0

New comment by mqus in "Google details new 24-hour process to sideload unverified Android apps"

mqus — Fri, 20 Mar 2026 13:29:33 +0000

Why can't stores take over the "verification" process (like they do already)? Why do app developers have to be verified themselves, why does the verification have to be done by google? There are so many options, why choose google of all companies? Just laziness?

New comment by mqus in "Google details new 24-hour process to sideload unverified Android apps"

mqus — Fri, 20 Mar 2026 13:24:42 +0000

At what point will you draw the line between "the user wants to do this because of his/her free will" and "the user wants to do this because someone else told them to"? Where will you stop?

All of this is just a bandaid, so why not stop at the state we are at _right now_, without some kind of 24h-long process to enable sideloading and let people be people? Yes, people make mistakes. But that is not your responsibility, especially if it comes at the cost of freedom. The most secure android device would probably be a brick, but you won't sell these, right?

Please instead take these resources and invest them into the app verification process in the play store. Way too many scams are right under your nose, no need to search in places where people are happy with the status quo.

New comment by mqus in "Google ends its 30 percent app store fee and welcomes third-party app stores"

mqus — Wed, 04 Mar 2026 20:45:42 +0000

I only trust this once they have finally detailed how they will allow "easy sideloading" (See one of the last fdroid news on this, currently google is on track to basically ban sideloading as it exists) and what exactly means "registered app store program".

New comment by mqus in "Amsterdam Compiler Kit"

mqus — Sun, 15 Feb 2026 01:48:46 +0000

Re your last paragraphs: I think RMS really meant just the Linux kernel when he wrote that(the topic is drivers, after all), not GNU/Linux, the OS or GNU/Linux, "the system". So it can be argued that he isn't really contradicting himself

New comment by mqus in "The EU moves to kill infinite scrolling"

mqus — Sat, 14 Feb 2026 10:37:43 +0000

Ok, then I don't pay you for advertising. On an entirely unrelated note, could I buy a spot on your website(e.g. at the top) to put a piece of my own website on it? You have a news website, right? And I also have some news to share.

New comment by mqus in "The EU moves to kill infinite scrolling"

mqus — Sat, 14 Feb 2026 10:31:25 +0000

But what if I rent a space on your website that I can fill however I want? And then, coincidentally, I praise my products on that rented space. How is that different from... other hosting offers?

New comment by mqus in "End of an era for me: no more self-hosted git"

mqus — Fri, 13 Feb 2026 11:50:17 +0000

In fact, I did not have any significant traffic coming from AWS, Azure, GCP, or any of the other big cloud providers. Its only the chinese ones.

New comment by mqus in "End of an era for me: no more self-hosted git"

mqus — Wed, 11 Feb 2026 22:31:10 +0000

I "solved" this by adding a fail2ban rule for everyone accessing specific commits (no one does that 3 times in a row) and then blocking the following ASs completely (just too many IPs coming from those, feel free to look them up yourself): 136907 23724 9808 4808 37963 45102. And after that: sweet silence.

How to block ASs? Just write a small script that queries all of their subnets once (even if it changes, its not so much to have an impact) and add them to a nft set (nft will take care of aggregating these into continouus blocks). Then just make nft reject requests from this set.

New comment by mqus in "A shortage of tenors"

mqus — Wed, 11 Feb 2026 17:58:52 +0000

As the article states, its usually 2:1 women to men so there is also a kind of shortage of basses, its just not as severe.

New comment by mqus in "Show HN: Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust"

mqus — Fri, 06 Feb 2026 20:07:24 +0000

I just counted the list of supported formats and landed at 35. This is still impressive, but if even this simple fact is wrong in the project description("40+ formats!!!"), I have no faith at all that any of this actually works.

New comment by mqus in "I dumped Windows 11 for Linux, and you should too"

mqus — Sun, 11 Jan 2026 13:45:55 +0000

> using mostly unpaid volunteer developers.

I'm not even sure this is true. Isn't there some company (or more) like Collabora behind most of the dev work right now?

New comment by mqus in "A Year of Work on the Arch Linux Package Management (ALPM) Project"

mqus — Sun, 11 Jan 2026 12:58:38 +0000

Its not "building a new package management system", "alpm" is literally the foundation of the pacman ecosystem. They are improving this so they _can_ catch up on packaging tasks.

I'm the same as the sibling commenter, I don't want to have another deb or rpm distro. The AUR wouldn't exist without pacman&makepkg.

New comment by mqus in "A Year of Work on the Arch Linux Package Management (ALPM) Project"

mqus — Sun, 11 Jan 2026 12:26:43 +0000

But this _is_ improving the pacman ecosystem? Afaict its aiming to be a drop-in replacement of existing tools, but with proper libraries so systems like buildbtw can be built around it.

New comment by mqus in "Linux kernel security work"

mqus — Sat, 03 Jan 2026 10:45:06 +0000

Integrity. TLS does prevent man-in-the-middle attacks. For a personal blog, that may not be important but you _do_ get a benefit, even if the encryption is not necessary.