<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: raimue</title><link>https://news.ycombinator.com/user?id=raimue</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 22 Sep 2026 01:26:36 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=raimue" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by raimue in "Show HN: Sigabrt.dev – cronjob monitor with an SSH TUI"]]></title><description><![CDATA[
<p>A temporary failure means that the job failed only once and then starts running again. If you want to investigate why it failed, you will need the output of that particular failed run.</p>
]]></description><pubDate>Sun, 20 Sep 2026 17:18:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=49777823</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=49777823</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49777823</guid></item><item><title><![CDATA[New comment by raimue in "Show HN: Sigabrt.dev – cronjob monitor with an SSH TUI"]]></title><description><![CDATA[
<p>You could just wrap cronic around the command and immediately receive the full output per mail when it fails. I don't see how a heartbeat alone without logs would help to identify temporary failures.<p><a href="https://habilis.net/cronic/" rel="nofollow">https://habilis.net/cronic/</a><p>Your service could accomplish something similar if it had such a wrapper to report both success and failures with logs to a remote server. That would take away the need to run a local MTA, while also detecting with the heartbeat whether the job ran at all.</p>
]]></description><pubDate>Sun, 20 Sep 2026 15:25:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=49776795</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=49776795</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49776795</guid></item><item><title><![CDATA[OOB write in UDP MSG_SPLICE_PAGES fragment-boundary handling in Linux kernel]]></title><description><![CDATA[
<p>Article URL: <a href="https://seclists.org/oss-sec/2026/q3/174">https://seclists.org/oss-sec/2026/q3/174</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48982562">https://news.ycombinator.com/item?id=48982562</a></p>
<p>Points: 3</p>
<p># Comments: 0</p>
]]></description><pubDate>Mon, 20 Jul 2026 18:09:03 +0000</pubDate><link>https://seclists.org/oss-sec/2026/q3/174</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=48982562</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48982562</guid></item><item><title><![CDATA[New comment by raimue in "Xz: Can you spot the single character that disabled Linux landlock?"]]></title><description><![CDATA[
<p>I already explained above why the existence of linux/landlock.h is not sufficient. Why do you still question it? If you know a bit about system programming and how configure checks work, the change in itself is totally reasonable.</p>
]]></description><pubDate>Sun, 31 Mar 2024 19:29:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=39887281</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=39887281</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39887281</guid></item><item><title><![CDATA[New comment by raimue in "Xz: Can you spot the single character that disabled Linux landlock?"]]></title><description><![CDATA[
<p>Now we are running in circles. As you see in the git commit, the compile check was added because the existance of linux/landlock.h alone was not enough to check that the feature can be used.<p>This header defines the data types for the Linux kernel interface, but not how the syscall landlock_create_ruleset(2) will be issued. That is provided by libc either as a separate wrapper function (does not exist in glibc) or the implementation needs to use syscall(SYS_landlock_create_ruleset, ...), with the constant also being provided by libc. That is how it works for all syscalls and you won't be able to change this.</p>
]]></description><pubDate>Sun, 31 Mar 2024 12:42:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=39883750</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=39883750</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39883750</guid></item><item><title><![CDATA[New comment by raimue in "Xz: Can you spot the single character that disabled Linux landlock?"]]></title><description><![CDATA[
<p>Read the code of the check again. It mostly checks that the required SYS_* constants are defined to be able to use the syscalls. You can compile this on a system that does not have landlock enabled in the running kernel, but the libc (which imports the kernel system call interface) has to provide the syscall numbers.</p>
]]></description><pubDate>Sun, 31 Mar 2024 00:29:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=39880117</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=39880117</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39880117</guid></item><item><title><![CDATA[Show HN: Flaticron – mail notifications for pending Flatpak updates]]></title><description><![CDATA[
<p>Article URL: <a href="https://github.com/raimue/flaticron">https://github.com/raimue/flaticron</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=39856591">https://news.ycombinator.com/item?id=39856591</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 28 Mar 2024 19:57:56 +0000</pubDate><link>https://github.com/raimue/flaticron</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=39856591</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39856591</guid></item><item><title><![CDATA[A new Copilot key to kick off the year of AI-powered Windows PCs]]></title><description><![CDATA[
<p>Article URL: <a href="https://blogs.windows.com/windowsexperience/2024/01/04/introducing-a-new-copilot-key-to-kick-off-the-year-of-ai-powered-windows-pcs/">https://blogs.windows.com/windowsexperience/2024/01/04/introducing-a-new-copilot-key-to-kick-off-the-year-of-ai-powered-windows-pcs/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=38864958">https://news.ycombinator.com/item?id=38864958</a></p>
<p>Points: 47</p>
<p># Comments: 85</p>
]]></description><pubDate>Thu, 04 Jan 2024 09:26:38 +0000</pubDate><link>https://blogs.windows.com/windowsexperience/2024/01/04/introducing-a-new-copilot-key-to-kick-off-the-year-of-ai-powered-windows-pcs/</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=38864958</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38864958</guid></item><item><title><![CDATA[Apollo 11 vs. USB-C Chargers (2020)]]></title><description><![CDATA[
<p>Article URL: <a href="https://forrestheller.com/Apollo-11-Computer-vs-USB-C-chargers.html">https://forrestheller.com/Apollo-11-Computer-vs-USB-C-chargers.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=38778390">https://news.ycombinator.com/item?id=38778390</a></p>
<p>Points: 502</p>
<p># Comments: 202</p>
]]></description><pubDate>Wed, 27 Dec 2023 02:21:39 +0000</pubDate><link>https://forrestheller.com/Apollo-11-Computer-vs-USB-C-chargers.html</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=38778390</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38778390</guid></item><item><title><![CDATA[New comment by raimue in "Reproducible Git Bundles"]]></title><description><![CDATA[
<p>The question is whether you can expect this format to stay stable and reproducible across git versions. Remember the fallout from git 2.38 when the output of 'git archive' changed. Although for this backup use case it would just mean the next backup with a new format would make a full copy once.</p>
]]></description><pubDate>Mon, 25 Dec 2023 22:28:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=38766819</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=38766819</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38766819</guid></item><item><title><![CDATA[Antarctic research base Vostok local time]]></title><description><![CDATA[
<p>Article URL: <a href="https://mm.icann.org/pipermail/tz/2023-December/033317.html">https://mm.icann.org/pipermail/tz/2023-December/033317.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=38704424">https://news.ycombinator.com/item?id=38704424</a></p>
<p>Points: 8</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 20 Dec 2023 01:31:33 +0000</pubDate><link>https://mm.icann.org/pipermail/tz/2023-December/033317.html</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=38704424</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38704424</guid></item><item><title><![CDATA[A story of Docker, QEMU, and memfd_create()]]></title><description><![CDATA[
<p>Article URL: <a href="https://raimue.blog/2023/11/23/a-story-of-docker-qemu-and-memfd-create/">https://raimue.blog/2023/11/23/a-story-of-docker-qemu-and-memfd-create/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=38398969">https://news.ycombinator.com/item?id=38398969</a></p>
<p>Points: 32</p>
<p># Comments: 3</p>
]]></description><pubDate>Thu, 23 Nov 2023 23:32:18 +0000</pubDate><link>https://raimue.blog/2023/11/23/a-story-of-docker-qemu-and-memfd-create/</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=38398969</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38398969</guid></item><item><title><![CDATA[New comment by raimue in "Apple unveils M3, M3 Pro, and M3 Max"]]></title><description><![CDATA[
<p>In the 2000s, Apple ran a big campaign with the phrase "I'm a Mac - I'm a PC" to highlight the difference.</p>
]]></description><pubDate>Tue, 31 Oct 2023 01:09:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=38078659</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=38078659</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=38078659</guid></item><item><title><![CDATA[Microsoft SEC 8-K: IRS is seeking an additional tax payment of $29B]]></title><description><![CDATA[
<p>Article URL: <a href="https://microsoft.gcs-web.com/node/31951/html">https://microsoft.gcs-web.com/node/31951/html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=37850110">https://news.ycombinator.com/item?id=37850110</a></p>
<p>Points: 215</p>
<p># Comments: 308</p>
]]></description><pubDate>Wed, 11 Oct 2023 20:52:37 +0000</pubDate><link>https://microsoft.gcs-web.com/node/31951/html</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=37850110</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37850110</guid></item><item><title><![CDATA[New comment by raimue in "Ubus (OpenWrt micro bus architecture)"]]></title><description><![CDATA[
<p>Back then, your suggestions were niche languages (and some still are) and are still not popular for embedded systems or network equipment. Large runtimes or huge static binaries are not suitable due to the memory and storage constraints.<p>You have to consider the surrounding ecosystem. Those interested in such languages are not necessarily those interested in contributing solutions to the problem space. Any project attempting to use such a language in OpenWrt would very likely not have survived until today.</p>
]]></description><pubDate>Sun, 27 Aug 2023 12:38:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=37282103</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=37282103</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37282103</guid></item><item><title><![CDATA[New comment by raimue in "OpenSSH has some peculiar handling around command line arguments"]]></title><description><![CDATA[
<p>I think the confusion comes from the documentation where ssh(1) says that the command "is executed on the remote host instead of a login shell.". Which is true from the perspective of ssh(1) in the sense of the protocol. The client has no control over what the server does with that string.<p>However, sshd(8) clearly documents that it will always execute the login shell, even when a command has been passed. ("All commands are run under the user's login shell as specified in the system password database.")<p>Subsystems open secondary channels to communicate separately from stdin/stdout of the remote command. I used the X11 forwarding before to run a remote command with sudo without getting the password prompt interfering with the protocol: <a href="https://raimue.blog/2016/09/25/how-to-run-rsync-on-remote-host-with-sudo/" rel="nofollow noreferrer">https://raimue.blog/2016/09/25/how-to-run-rsync-on-remote-ho...</a></p>
]]></description><pubDate>Fri, 14 Jul 2023 13:51:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=36724035</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=36724035</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36724035</guid></item><item><title><![CDATA[New comment by raimue in "OpenSSH has some peculiar handling around command line arguments"]]></title><description><![CDATA[
<p>The author missed that sshd will always execute the user's shell and pass it the command with arguments as a `-c` argument. This means that the given command string will always be parsed by the remote shell. This is required to restrict users to certain commands with special shells like scponly or rbash.<p>When you keep in mind that the given command string will be parsed twice, first by your local shell and then again by the remote shell, it becomes clear why a running a remote ssh command behaves like this.</p>
]]></description><pubDate>Fri, 14 Jul 2023 13:36:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=36723828</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=36723828</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36723828</guid></item><item><title><![CDATA[New comment by raimue in "Beating Bisect with Branchless Binary Search"]]></title><description><![CDATA[
<p>This is most probably because they are actually TIFF, but with the .png file extension they are served as image/png.</p>
]]></description><pubDate>Sun, 30 Apr 2023 19:34:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=35765873</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=35765873</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35765873</guid></item><item><title><![CDATA[Open Source in a Headunit]]></title><description><![CDATA[
<p>Article URL: <a href="https://neverpanic.de/blog/2023/03/13/open-source-in-a-headunit/">https://neverpanic.de/blog/2023/03/13/open-source-in-a-headunit/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=35185418">https://news.ycombinator.com/item?id=35185418</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 16 Mar 2023 17:45:04 +0000</pubDate><link>https://neverpanic.de/blog/2023/03/13/open-source-in-a-headunit/</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=35185418</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35185418</guid></item><item><title><![CDATA[New comment by raimue in "Sapling: A new source control system with Git-compatible client"]]></title><description><![CDATA[
<p>There is git-fixup, which provides the 'git fixup' command that makes suggestions to which commit the currently staged changes should be added.<p><a href="https://github.com/keis/git-fixup" rel="nofollow">https://github.com/keis/git-fixup</a><p>git-fixup will add fixup! commits, so it still needs the mentioned 'git rebase -i --autosquash' afterwards. Usually you do not even need to give it a specific commit if your branch is set to track an upstream branch.</p>
]]></description><pubDate>Wed, 16 Nov 2022 11:05:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=33621333</link><dc:creator>raimue</dc:creator><comments>https://news.ycombinator.com/item?id=33621333</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33621333</guid></item></channel></rss>