<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: rainforest</title><link>https://news.ycombinator.com/user?id=rainforest</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 01 May 2026 08:28:09 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=rainforest" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by rainforest in "You Need to Ditch VS Code"]]></title><description><![CDATA[
<p>I'm quite surprised to see the need to debug a live server here. I'm of the belief that the need to repro a problem locally and using a debugger lead to better understanding. SSHing into boxen feels like a cowboy behaviour on a modern stack - it shouldn't be necessary with competent observability and unit tests.</p>
]]></description><pubDate>Tue, 30 Dec 2025 10:44:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=46431855</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=46431855</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46431855</guid></item><item><title><![CDATA[New comment by rainforest in "Beyond Meat fights for survival"]]></title><description><![CDATA[
<p>Does it worry you at all that meat is ultimately made of whatever food the animal eats and processed into a litany of chemicals?<p>I feel the UPF "debate" is just an appeal to nature, and calorie/nutrient density should be what we fixate on.</p>
]]></description><pubDate>Sun, 20 Jul 2025 09:16:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=44623289</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=44623289</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44623289</guid></item><item><title><![CDATA[New comment by rainforest in "My bank keeps on undermining anti-phishing education"]]></title><description><![CDATA[
<p>I had similar with my energy provider in the UK (Octopus). For one reason or another a regular payment bounced which automatically puts you on a "call daily until the debt is repaid" list.<p>These calls come in on an unrecognised number, from staff who say "I don't know" when you ask them to prove they are from Octopus, and generate no call notes so you can't find out why they rang if you use the main customer service number.<p>To top it off they ask you to key in your card info on the phone after asking for your personal information.<p>I complained and they offered to fob me off with £30 credit instead of talking to their CISO, but they did at least say they can add phone passwords to individual accounts.</p>
]]></description><pubDate>Fri, 18 Jul 2025 06:56:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=44601973</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=44601973</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44601973</guid></item><item><title><![CDATA[New comment by rainforest in "Writing "/etc/hosts" breaks the Substack editor"]]></title><description><![CDATA[
<p>I think Cloudflare WAF is a good product compared to other WAFs - by definition a WAF is intended to layer on validation that properly built applications should be doing, so it's sort of expected that it would reject valid potentially harmful content.<p>I think you can fairly criticise WAF products and the people who advocate for them (and created the need for them) but I don't think the CF team responsible can really be singled out.</p>
]]></description><pubDate>Fri, 25 Apr 2025 14:37:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=43794057</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=43794057</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43794057</guid></item><item><title><![CDATA[New comment by rainforest in "Launch HN: Browser Use (YC W25) – open-source web agents"]]></title><description><![CDATA[
<p>Thanks, for the benefit of others the risk is that the devtools port has no Auth so is vulnerable to XSS.<p>I would surmise that this will stop being a problem if you switch to using a unix socket for the CDP.</p>
]]></description><pubDate>Thu, 27 Feb 2025 08:13:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=43192338</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=43192338</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43192338</guid></item><item><title><![CDATA[New comment by rainforest in "Launch HN: Browser Use (YC W25) – open-source web agents"]]></title><description><![CDATA[
<p>Could you go into a bit more detail about this? Why is exposing devtools to the agent a problem? What's the attack vector? That the agent might do something malicious to exfil saved passwords?</p>
]]></description><pubDate>Wed, 26 Feb 2025 11:41:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=43182782</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=43182782</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43182782</guid></item><item><title><![CDATA[New comment by rainforest in "Anyone can push updates to the doge.gov website"]]></title><description><![CDATA[
<p>For a while the /join page was blocked by cloudflare WAF yesterday - I wonder if this is why.</p>
]]></description><pubDate>Fri, 14 Feb 2025 08:26:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=43046152</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=43046152</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43046152</guid></item><item><title><![CDATA[New comment by rainforest in "Is the UK's liver transplant matching algorithm biased against younger patients?"]]></title><description><![CDATA[
<p>The NHS does this calculus routinely using Quality Adjusted Life Years. Treatments that get more are favoured which is also how NICE decides what drugs the NHS should offer. There's obviously some utilitarianism in the decision to use QALYs but to some (including me) it seems a reasonable proxy metric to maximise.<p>Ultimately a sacrifice must be chosen, but I am not sure a discussion about how that should be made is necessarily fit for HN (though I'd be interested in how you'd resolve your proposed scenario).</p>
]]></description><pubDate>Sun, 17 Nov 2024 11:04:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=42163431</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=42163431</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42163431</guid></item><item><title><![CDATA[New comment by rainforest in "AWS App Studio"]]></title><description><![CDATA[
<p>I would offer a counterpoint: most software in existence was written by not-software-professionals in Excel (most likely poorly).<p>Within reason I think there is a rational basis for not having to involve software engineers for every project - especially if the SMEs with understanding of their requirements are the ones building it.<p>This will probably fall over in the same space as Excel spreadsheets do though, when the domain complexity outgrows it, way before anyone is able to recognise that.</p>
]]></description><pubDate>Thu, 11 Jul 2024 08:30:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=40934687</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=40934687</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=40934687</guid></item><item><title><![CDATA[New comment by rainforest in "BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico"]]></title><description><![CDATA[
<p>Yes, if the key isn't in the TPM then it can't be sniffed. Secure boot would need to be enabled to protect against the threat model bitlocker is only good for here. Alternatively using a PIN would mean the key is only exposed once the PIN is typed (still vulnerable to a hardware attack, but requires physical modification).</p>
]]></description><pubDate>Wed, 07 Feb 2024 18:51:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=39292585</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=39292585</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39292585</guid></item><item><title><![CDATA[New comment by rainforest in "Big effort needed on UK diet to fight ultra-processed food, say health experts"]]></title><description><![CDATA[
<p>A cow is in a sense a factory producing various proteins, fats, and carbs from grass. Does putting it into something "natural" reset it? I would imagine that red meat isn't a UPF by definition as it's only been through one process, but would argue that the inconsistency with fake meat clearly feeling processed is definitely interesting. Also interesting is perhaps that red meat is presumably not UPF but is carcinogenic.</p>
]]></description><pubDate>Wed, 06 Sep 2023 14:31:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=37405713</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=37405713</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37405713</guid></item><item><title><![CDATA[New comment by rainforest in "UK lawmakers vote to jail tech execs who fail to protect kids online"]]></title><description><![CDATA[
<p>IIRC some of the Snowden leaks alleged that (at least at the time) domestic traffic couldn't be surveilled (but this was solved by mutual assistance across the Atlantic - the British would spy on US citizens and vice versa[1]).<p>VPNs seem useful to guarantee that your traffic is designated as foreign, so this might be a net gain for the intelligence services rather than a loss - the mandatory collection of ICRs only relates to IP addresses and time of access.<p>[1]:<a href="https://www.standard.co.uk/news/uk/edward-snowden-leaks-uk-officials-let-nsa-access-british-citizens-personal-data-8953537.html" rel="nofollow">https://www.standard.co.uk/news/uk/edward-snowden-leaks-uk-o...</a></p>
]]></description><pubDate>Tue, 17 Jan 2023 16:49:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=34414859</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=34414859</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34414859</guid></item><item><title><![CDATA[New comment by rainforest in "Brave disables Chromium FLoC features"]]></title><description><![CDATA[
<p>Most Kickstarter campaigns I get shown on FB are from third party services that just upload the Kickstarter breach list (my email is in it). Could that have happened to you?</p>
]]></description><pubDate>Sat, 10 Apr 2021 23:37:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=26766314</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=26766314</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=26766314</guid></item><item><title><![CDATA[New comment by rainforest in "Google Analytics Opt Out"]]></title><description><![CDATA[
<p>The web extension honor system "security" model is broken because that extension that prints Hello at the top of the page might later be modified by a malicious actor to do something else [1].<p>[1] <a href="https://www.reviewgeek.com/45420/over-70-chrome-browser-extensions-removed-for-spying-on-32-million-users/" rel="nofollow">https://www.reviewgeek.com/45420/over-70-chrome-browser-exte...</a></p>
]]></description><pubDate>Wed, 16 Dec 2020 11:54:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=25441539</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=25441539</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=25441539</guid></item><item><title><![CDATA[New comment by rainforest in "Apple TV Was Making a Show About Gawker. Then Tim Cook Found Out"]]></title><description><![CDATA[
<p>Perhaps you don't have a change in the number of crackpots, but you have a decent chance the crackpots are now all saying the same thing. Misled voters in a democracy seems like a bad thing to me (this extends to the way mass media is currently used of course).<p>There's an obvious slippery slope in these discussions - ultimately it's reducible to who you give the right to vote to, and discomfort about measures to keep the undesirables from rallying ought not to be ignored.</p>
]]></description><pubDate>Mon, 14 Dec 2020 12:33:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=25416657</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=25416657</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=25416657</guid></item><item><title><![CDATA[New comment by rainforest in "HiFiBerryOS"]]></title><description><![CDATA[
<p>Sure Audio makes an ADAU1701 set of boards that looks similar. Parts Express seems to carry Dayton Audio branded versions.<p>Can't say how well they work but a stack of IF board, DSP only, and Bluetooth programmer cost me around £50. Looks like the DAC resolution is better on the Beocreate though. No idea how good the amp is either - there are plenty of bad TPA3116 boards so sidestepping that problem might be worth the premium too.</p>
]]></description><pubDate>Thu, 10 Dec 2020 08:29:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=25371243</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=25371243</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=25371243</guid></item><item><title><![CDATA[New comment by rainforest in "AWS Lambda – Functions with Up to 10 GB of Memory and 6 VCPUs"]]></title><description><![CDATA[
<p>Is there any potential for extending that limit? I work on a product that uses Fargate Spot as a kind-of lambda substitute to run longer-duration tasks consumed from SQS and being able to use lambda to do that would make life easier :)</p>
]]></description><pubDate>Tue, 01 Dec 2020 19:45:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=25269016</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=25269016</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=25269016</guid></item><item><title><![CDATA[New comment by rainforest in "Evidence-based software engineering: book released"]]></title><description><![CDATA[
<p>> I don't understand why an entire elementary statistics pseudo-textbook is bolted on at the end, forming the entire back half of the text<p>It's quite difficult to talk about empirical software engineering without discussing methods, after all papers like [1] were deemed necessary 20 years ago and still the occasional meta-paper is published about correct design of experiments or analyses. As someone who worked in the field it doesn't seem particularly surprising to see some treatment - there are a handful of papers in my former subfield that are oft-cited because they describe a statistical procedure/experiment design consideration, but they also bundle the explanatory stats "for free".<p>I would hazard a guess that the intent of these chapters is to equip the reader with enough background that they could replicate or run some of the experiments in the book to try to specify findings/experiments to their own organisations. I'd follow that with an assumption that the author felt that chapter 13 needed background, and recursed until they'd finished writing a textbook.<p>[1] Kitchenham et al. "Preliminary guidelines for empirical research in software engineering" 2001: <a href="http://www.ehealthinformation.ca/wp-content/uploads/2014/07/2001-Preliminary-Guidelines-for-Empirical-Research.pdf" rel="nofollow">http://www.ehealthinformation.ca/wp-content/uploads/2014/07/...</a></p>
]]></description><pubDate>Fri, 13 Nov 2020 15:04:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=25082957</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=25082957</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=25082957</guid></item><item><title><![CDATA[New comment by rainforest in "The Native File System API allows web apps to save directly to files"]]></title><description><![CDATA[
<p>The permissions system seems to be granular with respect to whatever was selected - if you select a directory you have full access to everything in it. Theoretically the permission system requires explicit approval, but if you see the security system with the user I think it presents more risk to users than before.<p>Previously if you wanted filesystem control you had to trick a user into downloading something. With this API, it seems like it would be easier to con unsuspecting users into granting permissions they aren't aware they're granting.</p>
]]></description><pubDate>Wed, 09 Sep 2020 10:45:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=24419600</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=24419600</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=24419600</guid></item><item><title><![CDATA[New comment by rainforest in "The Native File System API allows web apps to save directly to files"]]></title><description><![CDATA[
<p>It appears I could use this to ask a victim to "select your downloads folder" to save files to and then steal or overwrite any file in it.</p>
]]></description><pubDate>Wed, 09 Sep 2020 07:55:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=24418480</link><dc:creator>rainforest</dc:creator><comments>https://news.ycombinator.com/item?id=24418480</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=24418480</guid></item></channel></rss>