Hacker News: opello

New comment by opello in "1-Click GitHub Token Stealing via a VSCode Bug"

opello — Wed, 03 Jun 2026 04:05:54 +0000

Do it for the exposure! Artists of many stripes have had to combat that for ages.

New comment by opello in "ABC News has taken all FiveThirtyEight articles offline"

opello — Sat, 16 May 2026 06:36:46 +0000

Isn't the checkers level move to make 539 and call it a day? Sure, it's no longer about electors but ... checkers.

... and to think I thought I was being clever. I see this has been suggested already.

New comment by opello in "Update on "Co-authored-by: Copilot" in commit messages"

opello — Wed, 06 May 2026 05:25:47 +0000

I always thought this was an implicit request to forgive obvious typos and autocorrect mistakes. Sent from a mobile device (iPhone, Samsung Galaxy, Blackberry, Windows Phone, etc.) with a tiny keyboard and in a setting in which proofreading may not be as rigorous as normal.

New comment by opello in "VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage"

opello — Wed, 06 May 2026 05:20:59 +0000

It seems like it would be most reasonable to consider porcelain vs. plumbing command details in deciding if something is logically distinct to Git. git-commit has --message and --trailer options, git-commit-tree has a --message option. I take that as trailer is a convenience option to provide a consistent way to append those details to the commit message. But that doesn't mean it's not part of the commit message, nor that the user shouldn't see it while reviewing the commit message.

New comment by opello in "My Stratum-0 Atomic Clock"

opello — Sun, 03 May 2026 04:18:58 +0000

I did dig into this a bit more the other day and learned that the "main RF can" is the cesium oscillator module. The history there was pretty interesting! The early ones I found were the Symmetricom Quantum SA.45s[1,2] which included a pretty entertaining thread here[3]. There were several levels of quality and function in the family of products which have been discontinued in favor of the MAC-SA55[4], and I wish I could find where I saw that recommendation... It's a rubidium, instead of cesium oscillator, not that I know enough about these things to concluded one should be better than the other but my impression was cesium was higher precision.

[1] https://www.gpsworld.com/wirelesstimingnewssymmetricom-offer...

[2] https://www.si.edu/object/symmetricom-chip-scale-atomic-cloc...

[3] https://febo.com/pipermail/time-nuts_lists.febo.com/2021-Jan...

[4] https://www.microchip.com/en-us/product/mac-sa55

New comment by opello in "For Linux kernel vulnerabilities, there is no heads-up to distributions"

opello — Fri, 01 May 2026 00:48:58 +0000

I do get that, this era of automation is too responsive to not go public to provoke action. I think I might just be wistful of an era in which the alternate path might have made a difference. Sorry to pile on.

New comment by opello in "For Linux kernel vulnerabilities, there is no heads-up to distributions"

opello — Fri, 01 May 2026 00:21:13 +0000

I realize you've been championing this idea in the thread, and I admire it because I also recognize the misdirected blame. Please understand I do not harbor "blame" for the researchers.

> Their job is to bring information to light, not to manage downstreams.

The researchers are also members of a community in which more harm than is necessary may be dealt by their actions. Nuance must exist in evaluating "reasonable" and "responsible" in the context of actions.

New comment by opello in "For Linux kernel vulnerabilities, there is no heads-up to distributions"

opello — Fri, 01 May 2026 00:09:28 +0000

> Should a security researcher that identifies a vulnerability in electron.js need to identify _every_ possible project using electron.js to communicate with them the vulnerability exists? No. That's absurd.

But this is a false comparison, right? The scope of "Linux distributions" and "electron apps" are orders of magnitude different. If the reporter spot checked one or two of the most popular distributions to see if fixes had been adopted, that seems like an extra level of nice diligence before publicizing the details.

It doesn't seem "insane" as much as "not the most efficient path" as has already been well argued. But it also doesn't seem unreasonable to think in a project of the scope of the Linux kernel, with the potential impact of fairly effective(?) privilege escalation, some extra consideration is reasonable--certainly not "insane" at the very least?

New comment by opello in "My Stratum-0 Atomic Clock"

opello — Thu, 30 Apr 2026 15:29:41 +0000

It strikes me as strange that the article links to [1] which appears to be the same board, absent the "Viavi" logo on the main RF can, as the Microchip product you linked. I couldn't tell with a brief look if the Viavi product is offering something like software, configuration, tuning, etc. on top of GPS-2700 product.

The photo of the device on the article says "Jackson Labs" which seems to have been the previous name of "Viavi Solutions" and a review video [2] mentioned using Symmetricom atomic clock modules, which was acquired first by Microsemi (2013) and subsequently Microchip (2018)[3].

[1] https://www.viavisolutions.com/en-us/products/chip-scale-ato...

[2] https://www.youtube.com/watch?v=CogN630jUSs

[3] https://en.wikipedia.org/wiki/Symmetricom

New comment by opello in "FastCGI: 30 years old and still the better protocol for reverse proxies"

opello — Thu, 30 Apr 2026 14:45:22 +0000

> I agree with the article, FastCGI is better than HTTP for these things.

If this is what you mean to identify as claiming FastCGI and HTTP are generally interchangeable, and are rising to correct, I'll also offer that "agree with the article" and "these things" narrow the context to "for reverse proxy communication" and do not suggest the broader meaning you've interpreted.

New comment by opello in "FastCGI: 30 years old and still the better protocol for reverse proxies"

opello — Thu, 30 Apr 2026 02:07:39 +0000

You didn't though. You may have intended to?

The article points out that HTTP and FastCGI are both options for reverse proxies to communicate to the downstream server. I didn't find a reference to them being interchangeable outside of that context. If there is or was one please quote it.

New comment by opello in "Copy Fail"

opello — Wed, 29 Apr 2026 20:02:21 +0000

While not formally reviewing code like this, I read a lot of it for fun. When it's clear and understandable, it's more educational and enjoyable. If the PoC code can also serve as a means of communication, that seems like an extra win.

New comment by opello in "What is a property?"

opello — Sun, 12 Apr 2026 02:43:25 +0000

It seems like "jargon" fits the need for a way to label the more specific meaning intended, like "property from objected oriented programming jargon." I think programmers might differ without the more specific description on if OOP, or say, the abstract algebra meaning, of property would be intended, since both seem relevant to different contexts of programming.

New comment by opello in "Quantization from the Ground Up"

opello — Thu, 26 Mar 2026 15:46:58 +0000

I think it's a good introduction to quantization generally and specifically in how it applies to reducing LLMs. But I also think it should say something about LLMs or "AI" in the title (as even the article is tagged AI on the author's site) because despite that being an easy assumption to make given the zeitgeist, including the detail would be more clear.

New comment by opello in "An old photo of a large BBS (2022)"

opello — Fri, 13 Mar 2026 14:53:26 +0000

I assume, at least for me, it's because I typed them in many, many more times.

New comment by opello in "WSL Manager"

opello — Mon, 09 Mar 2026 01:23:43 +0000

Thanks, it wasn't out of doubt that I asked, but it seemed having a reference to point at would help resolve the contention. The Docker blog post covered a lot more detail, even about WSL2, which was really informative and I hadn't seen.

I wonder exactly how much work "container" is doing in that Microsoft blog post's description, because it doesn't seem like it's the same kind of environment as a runc or containerd container?

I also wasn't quite sure how much detail to infer from the behavior of vmmemWSL or vmcompute.exe, because my casual understanding is that there's some adaptation layer that handles mapping Linux calls to Windows calls. It seems reasonable to allow for process mapping or accounting shenanigans for any number of good reasons.

New comment by opello in "WSL Manager"

opello — Mon, 09 Mar 2026 00:46:47 +0000

Is there a way to visualize this on a running system or some documentation that describes it? I'm not familiar with the plumbing here but did try to find some documentation.

New comment by opello in "Was Windows 1.0's lack of overlapping windows a legal or a technical matter?"

opello — Thu, 05 Mar 2026 04:58:56 +0000

This was discussed in Advent of Computing episode 150 "Starting Windows Up"[1,2] and the timeline of a 1983 demo which showed overlapping windows and multitasking, but also highlighted the contrast to the DR4 build from late 1984 claiming to introduce a multi-tasking scheduler.

This isn't really new information to the Stack Exchange question and answers, but it's kind of fun coincidental coverage of the topic.

[1] https://adventofcomputing.libsyn.com/episode-150-starting-wi...

[2] https://podscripts.co/podcasts/advent-of-computing/episode-1...

New comment by opello in "Git's Magic Files"

opello — Mon, 23 Feb 2026 00:32:22 +0000

In the above case, since this touches the local repo, wouldn't a .gitconfig include.path be a better option?

Just in case it's unclear, you'd then set an excludesFile in the included file to the path to a file like jj.gitignore that has a line like .jj in it.

New comment by opello in "In world without BlackBerry, physical keyboards on phones are making a comeback"

opello — Sun, 22 Feb 2026 23:01:20 +0000

I really liked the Motorola Droid family of slider keyboards, also horizontal. Made for a very handy, pocket ssh terminal.