Hacker News: n4bz0r

A critical 9.8 CVSS (ZDI-CAN-30207) hits Telegram

n4bz0r — Fri, 27 Mar 2026 19:49:24 +0000

Article URL: https://twitter.com/the_yellow_fall/status/2037464498097803344

Comments URL: https://news.ycombinator.com/item?id=47547358

Points: 7

# Comments: 0

New comment by n4bz0r in "Show HN: Hacker Smacker – Spot great (and terrible) HN commenters at a glance"

n4bz0r — Thu, 26 Feb 2026 22:25:50 +0000

Poof!

New comment by n4bz0r in "My smart sleep mask broadcasts users' brainwaves to an open MQTT broker"

n4bz0r — Mon, 16 Feb 2026 01:18:42 +0000

Seems like a fitting area for government regulation and certification. But in order for a government to even begin to consider the lack of security in IoT a problem, the adoption must ubiquitous. I.e. the devices (or the number of thereof) should pose enough a threat to public infrastructure (think botnets) to be subjected to regulation. Is there such an incentive in any country at the moment?

New comment by n4bz0r in "uBlock filter list to hide all YouTube Shorts"

n4bz0r — Sat, 14 Feb 2026 21:09:39 +0000

I might be wrong, but I don't think people really care about the addictiveness in the first place. As I see it, the shorts were irritating to see, mainly because they were heavily out of tune with the rest of recommendations. But they seem to have tuned them to be more in line with the rest of the videos. Being not that different from the rest of the videos one gets recommended, there is not much point in hiding them? I'm not exactly protecting shorts here. My point is, you can, of course, cut some of the videos from the feed, but the rest would still be affected by the same algorithm. You still don't get to filter anything, really. So what's the point?

If addictiveness really is that much of a factor, I rest my case.

New comment by n4bz0r in "uBlock filter list to hide all YouTube Shorts"

n4bz0r — Sat, 14 Feb 2026 20:50:04 +0000

On the main page, shorts, as all the other videos, are served by the recommendation algorithm which should filter out general audience crap you'd see if you're not logged in or have view history disabled. You'd normally see the same stuff you're subscribed to there, plus a few random videos of cats. Maybe a wamen butt occasionally. Might as well hide the main page entirely if you're not that easily entertained. To be quite frank, the main page is such an echo chamber lately that I almost got myself unhooked from procrastinating on YouTube.

On the search page, shorts are mostly a mixed bag, but you do occasionally get useful results.

So what does this solve? Seems like a form of protest nobody important (those in power) cares about.

Another thing is, I have, to my own surprise, discovered a few decent channels that I like, that post their videos in form of shorts exclusively. That's a somewhat new trend and mostly relevant to humor-related or music channels, though.

Almost forgot to mention. YouTube recently added the scroll bar to the shorts so they aren't all that different from the other videos now.

New comment by n4bz0r in "7zip.com Is Serving Malware"

n4bz0r — Sat, 14 Feb 2026 19:15:18 +0000

Not exactly news, wiki's been used for misinformation quite extensively from what I recall. You can't always be 100% sure with any online source of information, but at least you know there is an extensive community that'll notice if something's fishy rather sooner than later.

New comment by n4bz0r in "My smart sleep mask broadcasts users' brainwaves to an open MQTT broker"

n4bz0r — Sat, 14 Feb 2026 18:15:51 +0000

Went right over my head :)

New comment by n4bz0r in "7zip.com Is Serving Malware"

n4bz0r — Sat, 14 Feb 2026 18:13:28 +0000

Funny thing that it's exactly the same for Russian citizens - they'd rather use US government malware. Same goes for mail providers.

New comment by n4bz0r in "7zip.com Is Serving Malware"

n4bz0r — Sat, 14 Feb 2026 18:12:01 +0000

There is normally a wiki page for every popular program which normally contains an official site URL. That's how I remember where to actually get PuTTY. Wiki can potentially be abused if it's a lesser known software, but, in general, it's a good indicator of legitimacy.

New comment by n4bz0r in "My smart sleep mask broadcasts users' brainwaves to an open MQTT broker"

n4bz0r — Sat, 14 Feb 2026 18:05:51 +0000

I don't think there is an S in IoT?..

New comment by n4bz0r in "Clean Coder: The Dark Path (2017)"

n4bz0r — Mon, 09 Feb 2026 10:57:52 +0000

As someone not familiar with Haskell and Ocaml, which parts of Java are poorly implemented?

New comment by n4bz0r in "Microsoft forced me to switch to Linux"

n4bz0r — Wed, 28 Jan 2026 18:20:53 +0000

> If my computer goes to sleep, WSL becomes unresponsive. I have to save all my stuff and reboot to continue working.

Try wsl --shutdown. Works for me when WSL hangs for no apparent reason.

I've also noticed that, in my case, these hangs are somehow tied to Docker for Windows. Couldn't figure what triggers them so far, though. I just restart DFW and kill WSL when that happens.

New comment by n4bz0r in "How to make a damn website (2024)"

n4bz0r — Wed, 14 Jan 2026 11:26:25 +0000

https://lmnt.me/badges

I would like about 5000 more of these by tomorrow, kthxbai.

New comment by n4bz0r in "Why is the Gmail app 700 MB?"

n4bz0r — Tue, 06 Jan 2026 18:41:56 +0000

Why is my banking app 1.5GB?

New comment by n4bz0r in "Advent of Sysadmin 2025"

n4bz0r — Mon, 01 Dec 2025 11:54:52 +0000

For a throwaway, I don't think Jenkins will be much of a problem. Or any other tool for that matter. My only suggestion would be to still put some extra effort into building your own Jenkins container on top of the official one [0]. Add all the packages and plugins you might need to your image, so you can easily move and modify the installation, as well as simply see what all the dependencies are. Did a throwaway, non-containerized Jenkins installation once which ended up not being a throwaway. Couldn't move it into containers (or anywhere for that matter) without really digging in.

Haven't spent a lot of time with it myself, but if Jenkins isn't of much appeal, Drone [1] seems to be another popular (and lightweight) alternative.

[0] https://hub.docker.com/_/jenkins/

[1] https://www.drone.io

New comment by n4bz0r in "Advent of Sysadmin 2025"

n4bz0r — Mon, 01 Dec 2025 09:59:34 +0000

> Sysadmin/DevOps (they're synonyms now!)

I've notified the authorities and social services.

New comment by n4bz0r in "Advent of Sysadmin 2025"

n4bz0r — Mon, 01 Dec 2025 09:42:36 +0000

Cons:

  - DSL is harder to get into.
  - Hard to reproduce a setup unless builds are in DSL and Jenkins itself is in a fixed version container with everything stored in easily transferable bind volumes; config export/import isn't straightforward.
  - Builds tend to break in a really weird way when something (even external things like Gitea) updates.
  - I've had my setup broken once after updating Jenkins and not being able to update the plugins to match the newer Jenkins version.
  - Reliance on system packages instead of containerized build environment out of the box.
  - Heavier on resources than some of the alternatives.

Pros:

  - GUI is getting prettier lately for some reason.
  - Great extendability via plugins.
  - A known tool for many.
  - Can mostly be configured via GUI, including build jobs, which helps to get around things at first (but leads into the reproducibility trap later on).

Wouldn't say there is a lot of hate, but there are some pain points compared to managed Gitlab. Using managed Gitlab/Github is simply the easiest option.

Setting up your own Gitlab instance + Runners with rootless containers is not without quirks, too.

New comment by n4bz0r in "Advent of Sysadmin 2025"

n4bz0r — Mon, 01 Dec 2025 09:25:31 +0000

Sysadmin.

New comment by n4bz0r in "Don't Download Apps"

n4bz0r — Wed, 26 Nov 2025 23:37:34 +0000

Neat, thanks for the explanation!

Given it's a "VPN", would it work alongside real VPN?

New comment by n4bz0r in "Don't Download Apps"

n4bz0r — Wed, 26 Nov 2025 22:32:44 +0000

How does it work without root? Any app can just block other apps from connecting to the internet?