Hacker News: personalcompute

New comment by personalcompute in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"

personalcompute — Fri, 24 Apr 2026 00:47:49 +0000

Regarding doing more than just a minimum release age: The tool I personally use is Aikido "safe-chain". It sets minimum release age, but also provides a wrapper for npm/uv/etc where upon trying to install anything it first checks each dependency for known or suspected vulnerabilities against an online commercial vulnerability database.

New comment by personalcompute in "I pitched a roller coaster to Disneyland at age 10 in 1978"

personalcompute — Tue, 24 Feb 2026 19:01:16 +0000

Wow, I didn't expect to see Clonk on HN today! Almost 20 years ago, as a 13 year old in the US I managed to make friends with an older player from Germany, and then we collaborated on making Clonk Rage mods together in c4script. It was an amazing experience and did help me get more into programming, so I'm so sorry to hear about your experience! I do recall members of the development team at the time being accessible and active in the community, specifically Sven2, but I'm not sure about MatthesB.

Thanks for the nostalgia though. Amazing game.

New comment by personalcompute in "Instant AI Response"

personalcompute — Sat, 21 Feb 2026 14:33:10 +0000

This is a demo of Taalas inference ASIC hardware. Prior discussion @ https://news.ycombinator.com/item?id=47086181

New comment by personalcompute in "Step 3.5 Flash – Open-source foundation model, supports deep reasoning at speed"

personalcompute — Thu, 19 Feb 2026 06:48:23 +0000

Step 3.5 Flash was made by Chinese company StepFun - https://en.wikipedia.org/wiki/StepFun

New comment by personalcompute in "Major AWS Outage Happening"

personalcompute — Tue, 21 Oct 2025 11:40:44 +0000

They were moved to https://news.ycombinator.com/item?id=45640838

ref: dang's comment @ https://news.ycombinator.com/item?id=45645793

New comment by personalcompute in "Scream cipher"

personalcompute — Sat, 20 Sep 2025 10:38:22 +0000

Ăặȧạaǎẩậā ȧẫạ13, áaǡặ64, aẩắ ạẵǎǡ ẩặả ǡăȧặaầ ăǎäẵặȧ aȧặ aậậ ǎẩǡặăȁȧặ, áȁạ ạẵặā ắẫ ầặặạ ạẵặ ạặăẵẩǎăaậ ắặằǎẩǎạǎẫẩ ẫằ a ăǎäẵặȧ.

New comment by personalcompute in "Eternal Struggle"

personalcompute — Sun, 31 Aug 2025 20:11:22 +0000

Here is one sample taken after 5 minutes.

https://d6f9e5179057.s3.us-west-2.amazonaws.com/Screenshot%2...

New comment by personalcompute in "AWS merges malicious PR into Amazon Q"

personalcompute — Thu, 24 Jul 2025 00:03:39 +0000

Update: I've uncovered the attacker's commit to the now-deleted "stability" branch that includes the offending prompt, it's https://github.com/aws/aws-toolkit-vscode/commit/1294b38b7fa.... (Archive: https://archive.md/s9WnJ)

New comment by personalcompute in "AWS merges malicious PR into Amazon Q"

personalcompute — Wed, 23 Jul 2025 21:01:55 +0000

I think you've got it!

- That commit's date matches the date in the 404media article (July 13th)

- The commit message is totally unrelated to the code (highly suspicious)

- The code itself downloads additional code at runtime (highly highly suspicious)

I have not yet been unable to uncover the code it downloads though. It downloaded code that was hosted in the same repo, https://github.com/aws/aws-toolkit-vscode/, just on the "stability" branch. (downloads a file called "scripts/extensionNode.bk") The "stability" branch presumably was a branch created by the attacker, and has presumably since been deleted by Amazon.

New comment by personalcompute in "Removal of Deepin Desktop from OpenSUSE Due to Packaging Policy Violation"

personalcompute — Thu, 08 May 2025 04:31:45 +0000

I was impressed at this. By sharing side-load instructions and by the the overall restrained language of the post, they're emphasizing that this is not a personal attack on Deepin or an attempt to hurt Deepin and also emphasizing that OpenSUSE leadership understands the value of their community and have no power fantasy aspirations about trying to exert undue control over the users of the distribution. Really, OpenSUSE had more than enough ammunition to make a scathing takedown on the behavior of the Deepin maintainer and all of Deepin upstream, and many other OSS leaders would have done so ("Fuck Nvidia" anyone?), but they did not. They chose restraint and statements encouraging reconciliation. Cheers to the author for keeping it together in this obviously quite disappointing situation.

New comment by personalcompute in "BART's Anime Mascots"

personalcompute — Sun, 27 Apr 2025 16:16:14 +0000

Wellington has the Snapper Card

New comment by personalcompute in "Bass: The physical sensation of sound (2015)"

personalcompute — Sat, 05 Nov 2022 05:43:26 +0000

For #1 I can highly recommend this interactive article by Bartosz Ciechanowski: https://ciechanow.ski/sound/. It might lack the depth you want in intermediate or advanced topics, but in my opinion it is the most efficient and effective beginner education material out there.

New comment by personalcompute in "Linux Mint drops Ubuntu Snap packages"

personalcompute — Thu, 09 Jul 2020 00:08:42 +0000

I have the same problem. Snaps are confined to only files within $HOME. I keep almost all data under /media/ and this caused snaps to be mostly unusable for me, at least unusable for productivity apps where I need to process data. Some apps though are self contained, e.g. Spotify, for example, works fine for me as a snap.

The limitation stems from a design problem, details at https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1643706.

New comment by personalcompute in "Ask HN: Are you doing async programming with Python?"

personalcompute — Sat, 18 Aug 2018 21:24:54 +0000

I would be interested in seeing and reviewing your asyncio work gwillz! I have a small (750 sloc) network service implemented with asyncio and ran into some design problems around modularly handling healthchecking, exception handling/monitoring, and auto recovery/restart. I was unable to find much in the way of large software written with asyncio to learn better patterns from, so ended up with what, to me, feel like mediocre solutions. My email is in my profile.

New comment by personalcompute in "Scaling the GitLab database"

personalcompute — Tue, 31 Oct 2017 05:18:17 +0000

"transaction-level" pooling might be a more apt description. Instead of assigning each incoming connection to a dedication upstream connection for the entire duration of the incoming connection, it assigns the upstream connections on a per-transaction basis. When each transaction ends, the upstream connection is returned to the pool. A better description is at https://wiki.postgresql.org/wiki/PgBouncer.

New comment by personalcompute in "Understanding Misunderstandings in Source Code [pdf]"

personalcompute — Sun, 03 Sep 2017 19:56:29 +0000

I can recommend Code Complete by Steve McConnell. One of the primary aspects of this book that makes stand above other best-practices books is how much of it is sourced from software engineering research, although not the entirety. If nothing else, the bibliography is full of articles similar to the OP.

New comment by personalcompute in "Ridesharing Algorithms in TransLoc OnDemand"

personalcompute — Tue, 29 Mar 2016 19:46:36 +0000

You end up with a very similar situation as you do without integer linear programming - an enormous search space. In the papers I've read on VRP that provide a linear programming formulation (2), they then fall back to approximate methods for actually doing the work.

New comment by personalcompute in "How the Ballpoint Pen Killed Cursive"

personalcompute — Sun, 30 Aug 2015 07:32:00 +0000

For what it is worth, the lowercase cursive characters I learned in American public primary school around ~2002 were very similar or possibly identical to the lowercase characters in your image. However, the uppercase characters did have some more complexity.

New comment by personalcompute in "Scientists have synthesized a new compound that ‘mimics’ exercise"

personalcompute — Tue, 11 Aug 2015 08:41:04 +0000

One of the things you get to track improvement on with exercise is the ability to motivate yourself. It is part of you improving your physical and mental health, not unwanted noise.

For me when I started exercising seriously I started noticing I was consistently beating my personal bests [1] after about 2 weeks. It doesn't take 6 months. I even started feeling great from the cardio on Day 1.

[1] Running times over a set distance, and amount of pushups/pullups/situps in a row. If I actually recovered properly it would probably take even less time to beat the initial records.

New comment by personalcompute in "Ask HN: Who wants to be hired? (August 2015)"

personalcompute — Tue, 04 Aug 2015 04:47:30 +0000

Location: Reno, Nevada

Remote: Maybe

Willing to Relocate: Absolutely

Technologies: C++, Python, HTML, CSS, C, MATLAB, SQL, Django, Flask, OpenGL, Ogre3D, QT, Boost, Git

Résumé/CV: http://www.johngm.com/resume-hackernews-aug2015.pdf

Email: john@johngm.com