Hacker News: musicnarcoman

New comment by musicnarcoman in "An AI agent published a hit piece on me"

musicnarcoman — Thu, 12 Feb 2026 18:19:28 +0000

Looks like the bot is still posting:

https://github.com/QUVA-Lab/escnn/pull/113#issuecomment-3892...

https://crabby-rathbun.github.io/mjrathbun-website/blog/post...

New comment by musicnarcoman in "How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos"

musicnarcoman — Tue, 19 Aug 2025 19:28:14 +0000

So the CodeRabbit application with access to application secrets still runs in the same virtual machine as untrusted code from the outside?

New comment by musicnarcoman in "If you're remote, ramble"

musicnarcoman — Sun, 03 Aug 2025 12:39:44 +0000

I think they meant each person has a public channel of their own.

New comment by musicnarcoman in "Show HN: Qrkey – Offline private key backup on paper"

musicnarcoman — Fri, 13 Jun 2025 14:29:45 +0000

As someone who made the mistake of printing keys only in human-readable format: ocr software is only so accurate.

So if you have more than a handfull of bytes you may have to actually read it "by hand" to fix errors.

These days I keep the really important keys both as a qr codes and also hex. But the hex is not pleasant to work with.

New comment by musicnarcoman in "Why Flatpak apps use so much disk space on Linux"

musicnarcoman — Sun, 04 May 2025 20:38:54 +0000

"Storage is cheap" if you do not have to pay for it. It is not so cheap when you are the one paying for the organizations storage.

New comment by musicnarcoman in "Effective Rust (2024)"

musicnarcoman — Sun, 02 Mar 2025 19:21:03 +0000

While I am only a Rust novice it seems to me like the "2.2 Item 11: Implement the Drop trait for RAII patterns" could use some kind of mention of Drop-leaks. I learned about it at https://doc.rust-lang.org/nightly/nomicon/leaking.html

New comment by musicnarcoman in "Show HN: Compiler Playground for energy-efficient embedded dataflow processor"

musicnarcoman — Thu, 27 Feb 2025 21:26:18 +0000

Same thing for the "Product Brief" document that maybe goes into detail about the hardware.

The Media section does have some details such as whitepapers and a doctoral thesis. Still it would be nice to have specifications for the actual product if you are trying to sell it...

New comment by musicnarcoman in "Ask HN: Is Git commit history useful to you?"

musicnarcoman — Sat, 16 Nov 2024 16:39:08 +0000

The git history is useful to find out: * The why, who and when of some change to the code or configuration. * Looking at older variants of code to see previous attempts to know what has already been tried. * git blame and git bisect for automated troubleshooting.

New comment by musicnarcoman in "Varlink – IPC to replace D-Bus gradually in systemd"

musicnarcoman — Tue, 01 Oct 2024 06:20:32 +0000

Yes. I run shared desktop login server clusters for students, DBUS is a bottle neck.

New comment by musicnarcoman in "I Built Linux from Scratch"

musicnarcoman — Tue, 27 Jun 2023 19:14:36 +0000

While I do not build LFS regularly or for production use, the security improvement typically comes from the fact that the end system is _super_small_ and focused. Less software means less attack surface.

Sure, compromised binaries are nasty but personally I do place quite a lot of trust with the distribution repos.

(PS, if you are reading this and contribute packages to distribution repos: Thank you!)

New comment by musicnarcoman in "Compilers for the Future"

musicnarcoman — Tue, 20 Jun 2023 17:11:14 +0000

Ah yes, the dreaded page limit! I look for examples of working synthesis so I will still read it.

The question of fixed vs. infinite integers and observable sizes of datastructures is a dilemma that I do not know of any good solution to. Selecting fixed and observable sizes leads to efficient execution but risks making programs unportable (after they have been compiled and are distributed as object code).

Selecting arbitrary precision integers and no observable sizes instead requires a smart runtime/jit/compiler to get efficient execution.

New comment by musicnarcoman in "Compilers for the Future"

musicnarcoman — Tue, 20 Jun 2023 16:51:04 +0000

Nice work, I will have to read the research paper later ("Tacit Programming Code Synthesis and Optimization with Genetic Algorithms").

One question, why did you decide to make the size of cells visible to programs (pointer arithetic)? Will that not lead to the same portability challenges that we have already had with C and C++?

New comment by musicnarcoman in "Functional Geometry with Gambit Scheme and Raylib"

musicnarcoman — Thu, 16 Mar 2023 08:29:02 +0000

Yes, `rot` is a higher order function that expects a function argument and returns another function as the result. In Scheme the car does not have to be a name.

New comment by musicnarcoman in "Taking control of all .io domains with a targeted registration"

musicnarcoman — Tue, 11 Jul 2017 08:13:00 +0000

> This makes no sense - how did the attacker get between gandi.net and their technical partner in order to MITM them?

On the top of my head, bgp hijacking perhaps?

> MITMs aren't magic

No. But do not trust the network. Ever.

New comment by musicnarcoman in "Lively Linear Lisp – 'Look Ma, No Garbage' (1991)"

musicnarcoman — Tue, 02 May 2017 19:17:11 +0000

Hmm, I thought Rust uses something like affine types [0] (which is similar to linear types).

[0] https://www.reddit.com/r/rust/comments/4mdgux/rust_and_affin...

New comment by musicnarcoman in "Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates"

musicnarcoman — Thu, 23 Mar 2017 16:57:02 +0000

> Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates

When I read that something like this popped up in my head:

"Google is using the nuclear option on Symantec. Neat!"

New comment by musicnarcoman in "[dead]"

musicnarcoman — Wed, 08 Mar 2017 12:16:09 +0000

No, works for me.

New comment by musicnarcoman in "Fukishima is Worse than Ever"

musicnarcoman — Fri, 17 Feb 2017 11:04:49 +0000

"Your connection is not secure" - Firefox

(The certificate is only valid for the following names: *.wpengine.com, wpengine.com)

New comment by musicnarcoman in "Ask HN: Haskell/Rust – what work overhead when used as general language?"

musicnarcoman — Tue, 17 Jan 2017 18:26:59 +0000

(Also curious.)

New comment by musicnarcoman in "Building and Linking Libraries in C"

musicnarcoman — Fri, 23 Dec 2016 18:07:18 +0000

> (3b) you could also build an ARCHIVE FILE (a statically linked library, libmylib.a) from one or more .o files. If you link with a static library, its code is copied into the a.out file at runtime.

Huh? There is no copying at runtime when using a static library. Or have I misunderstood this all these years?