Hacker News: rasengan

New comment by rasengan in "Rich Dad Poor Dad author shocks fans with $1.2B debt"

rasengan — Thu, 03 Sep 2026 15:21:41 +0000

Depends what interest, contingencies and on other information to understand if 1.2B debt is a problem or not. Otherwise, for most UHNW people, debt is just a number on a balance sheet.

New comment by rasengan in "Civic Hygiene – avoid building technologies that could be used by a police state (2013)"

rasengan — Wed, 19 Aug 2026 16:30:07 +0000

I feel really bad for you.

It might actually be wise [1] to create a new, slightly less permissioned license for open source wherein the open is defined as anything that isn’t in a kill or surveillance chain or, more broadly, for military use…

[1] for the community

New comment by rasengan in "NSA and IETF, Part 9"

rasengan — Sat, 15 Aug 2026 06:36:24 +0000

> Orr Dunkelman

The great Dr. Orr Dunkelman was admirably vocal in his opposition to the publishing of this draft.

New comment by rasengan in "NSA and IETF, Part 9"

rasengan — Sat, 15 Aug 2026 06:31:48 +0000

RFCs are used by developers as strict guidelines for implementation.

The mere publishing of an RFC has customarily been treated by developers as a stamp of approval from the IETF.

The NSA, contractors and their fans argue that simply adding a "RECOMMENDED=N" in an obscure section of this draft will somehow prevent said implementations in deployments.

However, as an example, Canada's NSA equivalent specifically requested the draft to be published so that they can use it to support their poor choice in deployment of solo ML-KEM nation-wide.

While ML-KEM may be sound, significant bugs in implementations in the wild continue to be published.

To be clear, CRQCs do not exist today.

ECC is battle tested, proven, and is used today.

It makes no sense to delete working cryptography and replace it with potentially buggy, non-battle tested implementations of new cryptography for a threat that does not yet exist today.

Instead, you fight HNDL [1] with hybrid which preserves the safety of today, and hopefully also, tomorrow.

No serious security person should be recommending otherwise which is, perhaps, why some may question the motives of those that are pushing for solo ML-KEM.

[1] Harvest now decrypt later

New comment by rasengan in "NSA and IETF, Part 9"

rasengan — Sat, 15 Aug 2026 06:16:09 +0000

> A majority (but not a large majority) of cryptography engineers would use hybrids at this point

Actually, based on the WGLC, or the three of them rather, it's pretty clear that Ph.D cryptographers significantly prefer hybrid over pure ML-KEM.

> he'd much rather you believe he's arguing for hybrids against people who are trying to exterminate hybrids.

The brigade by the NSA (6+ votes or more if you include NSA contractors), the AD being former NSA and the moderation of Dr. Bernstein for a footnote seems pretty fair and balanced .

Meanwhile, the lead of the EU PQC program, professors from several universities, Ph.Ds and, additionally, legendary cryptographers all expressed significant concern and even stronger opposition to the publishing of the draft.

Finally, the chairs refused to share their methodology in determining consensus when asked by several Professors and Ph.Ds.

New comment by rasengan in "NSA and IETF: Fairness"

rasengan — Tue, 07 Jul 2026 07:26:18 +0000

> In the NSA's defense, combining cryptosystems also creates attack surfaces, timing problems, additional complexity, etc

Actually, Dr. Nadim Kobeissi formally proved that hybrid is secure, even if ML-KEM fails. [1]

[1] https://eprint.iacr.org/2026/1147

New comment by rasengan in "NSA and IETF: Fairness"

rasengan — Tue, 07 Jul 2026 07:15:31 +0000

I certainly find it fascinating that the majority of those in favor come from signal intelligence agencies, while the majority of those against are PhD cryptographers.

I was happy to see the lead of Europe’s PQC team also voted with the cryptographers.

New comment by rasengan in "The US Used to Demand the Best Tech. Now We Ban It"

rasengan — Sun, 28 Jun 2026 19:37:58 +0000

It’s been like this for a while. Take a technology, call it a weapon and control it. Same playbook.

NSA's SIGINT Enabling Project includes sabotaging cryptographic standards

rasengan — Sat, 27 Jun 2026 21:02:19 +0000

Article URL: https://nsa.2026.action.cr.yp.to/

Comments URL: https://news.ycombinator.com/item?id=48701723

Points: 16

# Comments: 3

New comment by rasengan in "Previewing GPT‑5.6 Sol: a next-generation model"

rasengan — Fri, 26 Jun 2026 20:56:11 +0000

To be fair, whenever I join a pre-existing code-base [1], it's the same. I have no idea and have to map it out ;)

[1] Not AI codebases (and of course, AI code bases I guess)

New comment by rasengan in "VPN ban update for UK households as government looks at 'age-gate'"

rasengan — Sat, 20 Jun 2026 17:18:21 +0000

The UK can’t block Dissent [1] since it looks like normal HTTPS traffic.

[1] https://godissent.com

New comment by rasengan in "Hardware Attestation as Monopoly Enabler"

rasengan — Sun, 10 May 2026 18:33:29 +0000

I agree hw attestation is net negative when forced upon end users. OTOH, when service providers use it, it results in transparency to end users [1] so it's really about how it is used.

[1] https://bmail.ag/verify

A Private (PQ Safe) E-Mail Provider You Can Verify End to End

rasengan — Sat, 02 May 2026 13:51:29 +0000

Article URL: https://bmail.ag/verify

Comments URL: https://news.ycombinator.com/item?id=47986417

Points: 2

# Comments: 0

New comment by rasengan in "Ubuntu 26.04"

rasengan — Fri, 24 Apr 2026 05:04:27 +0000

> TPM-backed full-disk encryption

This is going to be very useful for servers hosted in third party DCs.

New comment by rasengan in "Show HN: Clone, a small Rust VMM, forks VMs in under 20ms via CoW"

rasengan — Mon, 20 Apr 2026 21:22:59 +0000

Great question! We rebuild if there's a security update or otherwise every few weeks. We're working on a better method, but right now a few templates can be kept warm so users aren't forced to reboot.

Show HN: Clone, a small Rust VMM, forks VMs in under 20ms via CoW

rasengan — Sun, 19 Apr 2026 23:22:39 +0000

We needed a secure, multi-tenant way to offer shell accounts to users, but most VMMs were using too much memory and containers are unsafe. With clone, VMs are now more memory efficient than containers in most cases.

Since many other projects on HN looked like they were doing this too, open sourcing this was the right thing to do.

Feel free to use in whole or in part as you see fit!

Comments URL: https://news.ycombinator.com/item?id=47828636

Points: 11

# Comments: 3

New comment by rasengan in "Do you even need a database?"

rasengan — Wed, 15 Apr 2026 17:18:42 +0000

Sounds like a good way to waste the only scarce resource: time.

I built a free SSH relay for homelab machines behind CGNAT

rasengan — Tue, 14 Apr 2026 19:29:36 +0000

As most of you know, ISPs don't often provide real ingress-routable IP addresses. So I built a free relay system, that works directly with latch [1], a terminal multiplexer with built in SSH/Mosh/etc.

It's powered by 9 POPs. latch maintains a QUIC tunnel with your relay, and you connect to whichever is closest to you. Wherever you are in the world, you will be able to connect to a nearby relay and be routed to your instance.

latch is written in go: https://github.com/unixshells/latch

You can simply get started by typing: curl -sSf unixshells.com/install.sh | sh

Then, just simply do latch relay register, confirm your e-mail and you're good to go!

You can also access it via our web terminal [2]!

Full disclosure: This is completely free and subsidized by the shells we do offer.

[1] https://github.com/unixshells/latch

[2] https://www.youtube.com/watch?v=iWo9I2bjZkI

Comments URL: https://news.ycombinator.com/item?id=47770287

Points: 2

# Comments: 0

Show HN: Chrome Developer Tools on Android

rasengan — Wed, 08 Apr 2026 02:57:21 +0000

Web development on Android has been difficult due to the lack of the full Chrome Dev Tools Suite.

We solved this by packaging it with a proxy that bridges them via CDP.

It's open source and available on Play!

https://unixshells.com/browser.html

Comments URL: https://news.ycombinator.com/item?id=47684456

Points: 1

# Comments: 0

New comment by rasengan in "Launch HN: Freestyle – Sandboxes for Coding Agents"

rasengan — Mon, 06 Apr 2026 17:56:12 +0000

Interesting!

We're working on a similar solution at UnixShells.com [1]. We built a VMM that forks, and boots, in < 20ms and is live, serving customers! We have a lot of great tools available, via MIT, on our github repo [2] as well!

[1] https://unixshells.com

[2] https://github.com/unixshells