<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: ponkpanda</title><link>https://news.ycombinator.com/user?id=ponkpanda</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 02 Jun 2026 18:26:43 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=ponkpanda" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by ponkpanda in "Why Janet? (2023)"]]></title><description><![CDATA[
<p>Perhaps requiring webauthn credential for any post/comment with a whitelist of permitted webauthn hardware devices which must have touch/interaction enabled.<p>I'd have to read the FIDO specs, however the only place I've seen webauthn hardware pinning in the wild is with Azure AD/Entra which is ostensibly based on token GUID. If this is the only enforcement mechanism available, it's spoofable.</p>
]]></description><pubDate>Tue, 02 Jun 2026 11:39:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=48368912</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=48368912</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48368912</guid></item><item><title><![CDATA[New comment by ponkpanda in "1D Chess"]]></title><description><![CDATA[
<p>Damn!</p>
]]></description><pubDate>Sat, 11 Apr 2026 19:03:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47733123</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47733123</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47733123</guid></item><item><title><![CDATA[New comment by ponkpanda in "NHS staff refusing to use FDP over Palantir ethical concerns"]]></title><description><![CDATA[
<p>> And that if there is a clear and direct contradiction between the Supreme Court and the president, the former trumps (no pun intended) the latter.<p>The extent to which members of the executive branch adhere to their oaths is not written down. Ofc the oath is written and its power may <i>partly</i> derive from its written nature (clear; predictable; well publicised etc) but there is a lot more than its written nature that might cause a general to refuse to follow a Presidential order to arrest all people suspected of voting for their opponent.<p>> The lack of arbitrary rule... is emphatically not [a defining feature of both]<p>I guess it depends on whether you (or most reasonable people) would call countries like Russia a 'constitutional republic'. Of course there are plenty of dysfunctional and dictatorial countries which superficially describe themselves as XYZ but it lacks substance.<p>While there may be a textbook answer, I strongly suspect it is debatable within the field and comes down (like so many things) to how you define your terms. Do you define 'constitutional' as attaching more to the codified and written nature of any rules or whether it is more to do with predictable and enforceable rules limiting arbitrary government. My view is that it attaches more the latter.<p>If you go into the etymology of the term, I don't think codification is baked in - that you can find a large number of books discussing the English or UK constitution (using that term) is testament to the fact that it's not just some niche view. I do suspect the influence of US popular culture (e.g. Hollywood) has biased the term towards the US' arrangement vs. the alternatives.</p>
]]></description><pubDate>Sat, 04 Apr 2026 22:01:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47643953</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47643953</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47643953</guid></item><item><title><![CDATA[New comment by ponkpanda in "How many products does Microsoft have named 'Copilot'?"]]></title><description><![CDATA[
<p>Tighter (read better) integration with VSCode and Github than what you could get running claude code on the side.<p>Your question does raise a valid point - Github Copilot's value proposition is fairly limited in my opinion. Not to say worthless but limited and clearly varies depending on how Githubbey your dev workflows are.</p>
]]></description><pubDate>Sat, 04 Apr 2026 21:39:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47643730</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47643730</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47643730</guid></item><item><title><![CDATA[New comment by ponkpanda in "NHS staff refusing to use FDP over Palantir ethical concerns"]]></title><description><![CDATA[
<p>> It's a fundamentally substantive difference in the two structures<p>Yes, it is a substantive difference but it does not follow that this difference provides the 'constitution' property.<p>> one of these has an indisputable source of truth... the foundations are not the same<p>They are so similar as to be almost the same and if an 'indisputable source of truth' exists anywhere, it is not in the written documents or their structure but unwritten norms and rituals sit beneath both.<p>What stops a President from simply choosing to ignore a Supreme Court ruling and what prevents the King from returning to personal rule?<p>The lack of arbitrary rule is a defining feature of both and relies on something that emerged rather than something imposed from without by written words.</p>
]]></description><pubDate>Fri, 03 Apr 2026 17:04:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=47629225</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47629225</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47629225</guid></item><item><title><![CDATA[New comment by ponkpanda in "NHS staff refusing to use FDP over Palantir ethical concerns"]]></title><description><![CDATA[
<p>>It doesn't look like a duck<p>Some special amendment procedure is not the only or even defining feature of constitutional law. There is non-constitutional law that has this property and there is constitutional law that does not.</p>
]]></description><pubDate>Fri, 03 Apr 2026 16:54:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=47629081</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47629081</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47629081</guid></item><item><title><![CDATA[New comment by ponkpanda in "Moving from GitHub to Codeberg, for lazy people"]]></title><description><![CDATA[
<p>Repo hosting is the kind of thing that ought to be distributed/federated.<p>The underlying protocol (git) already has the cryptographic primitives that decouples trust in the commit tree (GPG or SSH signing) with trust in the storage service (i.e. github/codeberg/whatever).<p>All you need to house centrally is some SSH and/or gpg key server and some means of managing namespaces which would benefit from federation as well.<p>You'd get the benefits of de-centralisation - no over-reliance on actors like MS or cloudflare. I suppose if enough people fan out to gitlab, bitbucket, self hosting, codeberg, you end up with something that organically approximates a formally decentralised git repo system.</p>
]]></description><pubDate>Thu, 26 Mar 2026 15:06:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47531423</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47531423</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47531423</guid></item><item><title><![CDATA[New comment by ponkpanda in "Modern wealth is a parlour game played by the well fed"]]></title><description><![CDATA[
<p>fixed rates embed best current (market) estimate of path of future floating rates.<p>The fixed rate payer/receiver is protected but they typically pay for that protection.</p>
]]></description><pubDate>Sat, 14 Mar 2026 16:33:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47378363</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=47378363</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47378363</guid></item><item><title><![CDATA[New comment by ponkpanda in "Wireguard FPGA"]]></title><description><![CDATA[
<p>Except FPGA chips/boards aren't free from malware either:
<a href="https://www.iacr.org/archive/ches2012/74280019/74280019.pdf" rel="nofollow">https://www.iacr.org/archive/ches2012/74280019/74280019.pdf</a><p>Nor will you be immune from AMD Vitis/Vivado sideloading  crap into the bitstream.<p>Sadly, you have to fab your own chips using sovereign facilities if you want security. Individuals simply cannot access genuinely high assurance product and there's no major government in the world with the slightest interest in changing their stance on this policy. There are simply too many governments long on SIGINT to go down such a route.</p>
]]></description><pubDate>Tue, 14 Oct 2025 11:50:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=45578898</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=45578898</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45578898</guid></item><item><title><![CDATA[New comment by ponkpanda in "Making Rust binaries smaller by default"]]></title><description><![CDATA[
<p>You're not adding the +nightly switch and the required flags to compiled std. Just setting panic=abort in cargo.toml isn't enough.<p>One can get binaries pretty damn small (low-mid tens of kilobytes for a basic cli program doing something like hashing of a file).<p>Problem I've found with manually compiling std (which has ancillary benefits of being able to compile to a specific uarch) is it can break the compilation process when bringing in third-party deps. The config.toml (stored in $PROJECT_ROOT/.cargo) overrides cargo's behaviour for all dependencies as well - which may break those compilations.<p>Tbh, it's one reason I don't particularly rate the rustc+cargo toolchain - but for most people writing regular applications: just being able to do ```cargo build -r``` and not care about binary size, uarch optimization or custom llvm/rustc optimizations (PGO etc), most won't care.</p>
]]></description><pubDate>Wed, 24 Jan 2024 13:19:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=39116939</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=39116939</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39116939</guid></item><item><title><![CDATA[New comment by ponkpanda in "Introduction to FPGAs"]]></title><description><![CDATA[
<p>I habe a few lying about. My fun project is to implement a usb CCID (smartcard) device to create a pkcs11comiant HSM from scratch (FYI the ESA dis this on MAX10s for one of their satellites or probes). Assuming you dev environment is not compromised. USB 1.1 and USB 2.0 have free/OSS IP cores.<p>Personally, I do not see point in implementing a softcore
Cpu unless design absolutely requires it.<p>Separately, FPGA makers has shifted focus a bit from facilitating hardware design to providing coprocessors/accel cards.</p>
]]></description><pubDate>Tue, 07 Feb 2023 01:33:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=34687326</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=34687326</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34687326</guid></item><item><title><![CDATA[New comment by ponkpanda in "Ask HN: Why Java ecosystem doesn't feel as vibrant as some other lang's ecosys?"]]></title><description><![CDATA[
<p>I can't speak for you personally but I think its simpler than that - Java is unfashionable because it's ubiquitous. It's the Ford of programming languages. Not every problem needs a Ferrari - indeed its bad for the organization to be building everything with Ferraris.<p>I do wonder whether someone has looked at the game theory of all this - how devs (and employers) pick langs and frameworks as a strategy to maximize their respective positions under competition.<p>It's also used by some pretty huge and non-middling corporations. I don't know why I'm defending it - I find Java a too verbose and don't use it personally- however if I were employing and needed to build anything that wasn't a game, an OS, embedded etc. I'd go with Java for large chunks of it because I can find good people to build, maintain and improve it - for years to come. I'd probably throw in some Go and perhaps C++ for compute bottlenecks.</p>
]]></description><pubDate>Sun, 05 Feb 2023 05:24:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=34662205</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=34662205</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34662205</guid></item><item><title><![CDATA[New comment by ponkpanda in "Ask HN: Why Java ecosystem doesn't feel as vibrant as some other lang's ecosys?"]]></title><description><![CDATA[
<p>Also - don’t discount all the new features JVM and Java have added or are adding: virtual threads, structured concurrency, FFI, class primitives, SIMD. JVM is highly compute performant given its GCd.<p>I’m not even a Java dev but I respect its place in the ecosystem and find evangelism quite irritating and normally, has some corporate backer(s).</p>
]]></description><pubDate>Sat, 04 Feb 2023 15:31:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=34655169</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=34655169</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34655169</guid></item><item><title><![CDATA[New comment by ponkpanda in "Ask HN: Why Java ecosystem doesn't feel as vibrant as some other lang's ecosys?"]]></title><description><![CDATA[
<p>Firstly, as long as there is still a broad need for software engineers - there is a future for Java. Together with dotnet - it has huge market share of enterprise middleware, lots of web backends.<p>Its future in some segments is extremely safe while in others it has more competition. Whether it has a future for you depends on the kind of fields you want to work in.<p>In any case - once you learn a couple of languages (especially from a couple of different paradigms or layers of abstraction) - it becomes easier to pick up new languages.</p>
]]></description><pubDate>Sat, 04 Feb 2023 15:21:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=34655099</link><dc:creator>ponkpanda</dc:creator><comments>https://news.ycombinator.com/item?id=34655099</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34655099</guid></item></channel></rss>