<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: riskable</title><link>https://news.ycombinator.com/user?id=riskable</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 01 Jun 2026 18:23:46 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=riskable" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by riskable in "I Found Ultra-Pure Quantum Crystals in an Abandoned Mine in the Atacama Desert"]]></title><description><![CDATA[
<p>The quest: Recover data stored in the quantum crystal matrix by building a tachyon pulse emitter.</p>
]]></description><pubDate>Tue, 19 May 2026 13:50:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=48193299</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=48193299</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48193299</guid></item><item><title><![CDATA[New comment by riskable in "A new spam policy for “back button hijacking”"]]></title><description><![CDATA[
<p>If you don't manage the history properly in your SPA, pressing the back button could take the user out of the app entirely.<p>If you don't let web developers manage history/state like this, we'd be going back to the inefficient world of, "every forward/back movement loads a whole page." (With lots of unnecessary round trip messages between the client and server while the user waits for everything to load).<p>Basically, the ability to manage history is a user-centric feature. It makes the experience better for <i>them</i>.</p>
]]></description><pubDate>Tue, 14 Apr 2026 14:41:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47766289</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47766289</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47766289</guid></item><item><title><![CDATA[New comment by riskable in "France to ditch Windows for Linux to reduce reliance on US tech"]]></title><description><![CDATA[
<p>Windows uses Group Policy (which isn't particularly secure for many reasons) while Linux uses configuration files (e.g. udev, AppArmor, stuff in /etc like fstab) in conjunction with file permissions.  However, you can go <i>way farther</i> by compiling your own kernel that has certain functionality removed (e.g. USB mass storage).<p>Managing lots of configuration files/scripts across many thousands of servers, desktops, devices, etc is a long-solved problem.  Most enterprises use Ansible or similar.<p>In almost every way, managing many thousands of Linux desktops is much simpler and more straightforward than Windows.  If you're using Ansible playbooks, you can keep everything nice and tidy in a single place and everything you'd ever want to customize is managed via a plaintext file you can modify with your editor of choice.<p>You can organize them however you want or even use a GUI to change stuff (if you pay for Ansible Enterprise or whatever it's called...  Or use one of the FOSS alternatives).<p>Managing Linux desktops at scale really isn't much different than managing Linux servers at scale.</p>
]]></description><pubDate>Fri, 10 Apr 2026 16:09:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47720232</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47720232</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47720232</guid></item><item><title><![CDATA[New comment by riskable in "France to ditch Windows for Linux to reduce reliance on US tech"]]></title><description><![CDATA[
<p>Firefox has /usr/lib/firefox/distribution/policies.json which lets the sysadmin lock down what users can do with the browser.  Example: If you wanted to block all extensions except for a whitelist, you could control that via that file.<p>There's a <i>bazillion</i> tools that let you manage files like that across thousands of servers/desktops but the hot one right now in enterprises is Ansible (which would make it trivial to push out an update to such a configuration).<p>Chrome has a similar file: /etc/opt/chrome/policies/managed/lockdown.json<p>"Ah yes, but what stops the user from downloading the portable version of a browser and using that?"<p>You can mount all user directories with +noexec.  Also, Apparmor lets you control which applications can make network connections if you want to get really fine-grained.<p>Other applications have similar policy files.  For example, Visual Studio Code has /etc/code/policy.json which—for example—would let your company lock down which extensions are allowed to be used/installed.</p>
]]></description><pubDate>Fri, 10 Apr 2026 15:51:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47719971</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47719971</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47719971</guid></item><item><title><![CDATA[New comment by riskable in "France to ditch Windows for Linux to reduce reliance on US tech"]]></title><description><![CDATA[
<p>On a Linux desktop you can lock down <i>waaaaay</i> TF more stuff than Group Policy allows.  The only difference is <i>you need a sysadmin that knows what they're doing</i>.  You can't just point and click a button that prevents users from connecting USB devices.  Instead, you use a combination of groups, udev rules, and systemd-logind.  There's also ways to do it with PAM if you want.<p>The most popular way to control user desktops that I've seen is to have your user login via LDAP (just like AD), optionally with Kerberos and then have their permissions to various things controlled via those groups.  For example, if you were building a "desktop policy" for Linux users across your organization, you'd probably make a .deb or .rpm that installs some udev rules that grant or deny access to various things based on which groups the users are in.<p>Of course, you can also control things down at the user level.  You could put a script in /etc/profile.d/ that does whatever you want when the user logs in.  You can even make it dependent on <i>how</i> they login (detect remote SSH session or local login).<p>There's also dconf and KDE's Kiosk mode if you <i>really</i> want to lock shit down to annoy TF out of your users (haha).<p>Once you've got your Linux desktops setup the way you want (which is usually just a matter of making your_company_desktop.deb or .rpm) to customize things/permissions, you have <i>so much power</i> to do things you can't do on Windows.  The fine-grain control in Linux is unreal:  You can give a specific user access to run and do <i>very, very specific things</i> as root (Windows Administrator equivalent) without much effort at all.<p>Linux also lets you lock down the hardware in ways Windows doesn't support.  For example, you can chattr +i to make certain devices/files immutable.  You could compile a custom kernel that <i>doesn't even have USB mass storage support</i>.  What's more secure than that?  Haha.<p>BTW: You can also make all USB mass storage devices read-only with a simple udev rule.  You can even add exceptions for special things!</p>
]]></description><pubDate>Fri, 10 Apr 2026 15:38:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=47719745</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47719745</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47719745</guid></item><item><title><![CDATA[New comment by riskable in "Microsoft terminated the account VeraCrypt used to sign Windows drivers"]]></title><description><![CDATA[
<p>The time for regulatory action against Microsoft was <i>thirty years ago</i> and the need for it has only grown since then.<p>The FTC wasn't doing their job between 1980-2020 because of their ridiculous standard of, "if it doesn't raise consumer prices, it must be allowed."  This lead to massive consolidation in many industries which of course ended up raising prices and hurting consumers anyway.<p>Recently they've had <i>some</i> wins but overall they're still failing to do their job.</p>
]]></description><pubDate>Wed, 08 Apr 2026 13:58:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47690316</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47690316</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47690316</guid></item><item><title><![CDATA[New comment by riskable in "Microsoft terminated the account VeraCrypt used to sign Windows drivers"]]></title><description><![CDATA[
<p>No.  Embrace, Extend, Extinguish was replaced by the AAA strategy:  Acquire, Assimilate, Abandon.  They were trying to be more Google-like with that "Abandon" step I think.<p>They've since moved on to the SSS strategy:  Ship, Slip, Slop.</p>
]]></description><pubDate>Wed, 08 Apr 2026 13:46:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47690163</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47690163</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47690163</guid></item><item><title><![CDATA[New comment by riskable in "Veracrypt project update"]]></title><description><![CDATA[
<p>You think it would <i>succeed</i> at that?  Come on.  Copilot is for entertainment purposes only!</p>
]]></description><pubDate>Wed, 08 Apr 2026 13:39:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47690085</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47690085</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47690085</guid></item><item><title><![CDATA[New comment by riskable in "I've sold out"]]></title><description><![CDATA[
<p>Listen, one does not simply walk into a new project without naming it properly.  It's your precious!</p>
]]></description><pubDate>Wed, 08 Apr 2026 13:31:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47689992</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47689992</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47689992</guid></item><item><title><![CDATA[New comment by riskable in "My Experience as a Rice Farmer"]]></title><description><![CDATA[
<p>China has a minimum purchase price of corn that's set by the government in order to maintain food stocks.  It's also part of a larger jobs program (that I don't know much about).<p>China also imports 80% of its soybeans which means it's based on the rising/falling prices of oil and whatnot.<p>In the US, soybeans are a very important crop that's fed to livestock and also used in biodiesel production.  There's <i>enormous</i> soybean "crush" infrastructure in the US to support the biodiesel market and the side effect of this results in tons of extra soybean oil.  It ultimately ends up with soybean oil being cheap compared to everything else.</p>
]]></description><pubDate>Tue, 07 Apr 2026 15:27:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=47676869</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47676869</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47676869</guid></item><item><title><![CDATA[New comment by riskable in "OpenAI closes funding round at an $852B valuation"]]></title><description><![CDATA[
<p>This assumes that these companies aren't going to use smaller providers or hosting models themselves.  THAT is the great big assumption going into all the Big AI funding.<p>I think it's a very, very bad assumption.  After trying GLM-5 and Qwen3 on Ollama Cloud, not only were they <i>faster</i> than OpenAI's offerings (by a huge amount) it was <i>just as good</i> if not better at doing what I asked of it.<p>Claude Code is still superior to anything else but GLM-5 and Qwen3 are easily just as good as GPT-5.X (for coding).</p>
]]></description><pubDate>Wed, 01 Apr 2026 14:14:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=47601209</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47601209</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47601209</guid></item><item><title><![CDATA[New comment by riskable in "Show HN: Baton – A desktop app for developing with AI agents"]]></title><description><![CDATA[
<p>How can people afford to use Claude Code like this‽  Is everyone just playing with it on their employer's dime or what?</p>
]]></description><pubDate>Wed, 01 Apr 2026 14:02:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47601026</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47601026</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47601026</guid></item><item><title><![CDATA[New comment by riskable in "Why the US Navy won't blast the Iranians and 'open' Strait of Hormuz"]]></title><description><![CDATA[
<p>> What makes you think the us army would unite against them?<p>I'd turn that around and ask, "What makes you think the people would accept the gun nuts rebellion?"<p>Many would be celebrating in the streets if the military showed up with tanks and started blasting.  Furthermore, there's enough people in the military from far, far outside whatever state is being threatened to care that much about the locals.<p>"Fuckin' Texas gun nuts" <starts shooting></p>
]]></description><pubDate>Wed, 01 Apr 2026 13:49:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47600856</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47600856</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47600856</guid></item><item><title><![CDATA[New comment by riskable in "Do your own writing"]]></title><description><![CDATA[
<p>I use bullet points a lot in my writing and it seems <i>that</i>, specifically is causing people to accuse me of either:<p><pre><code>    * Being an AI bot.
    * Using an LLM to generate it.
</code></pre>
It's driving me bonkers!</p>
]]></description><pubDate>Tue, 31 Mar 2026 16:37:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47589964</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47589964</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47589964</guid></item><item><title><![CDATA[New comment by riskable in "Hold on to Your Hardware"]]></title><description><![CDATA[
<p>If this ends up being true, desktop Linux adoption might make inroads.  Windows apps run like crap on ARM and no one is bothering to make ARM builds of their software.</p>
]]></description><pubDate>Fri, 27 Mar 2026 14:50:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47543319</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47543319</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47543319</guid></item><item><title><![CDATA[New comment by riskable in "Earthquake scientists reveal how overplowing weakens soil at experimental farm"]]></title><description><![CDATA[
<p>10,000 years of feast and <i>famine</i>.  Until the enlightenment, people were basically just guessing and sharing anecdotes.</p>
]]></description><pubDate>Thu, 26 Mar 2026 15:47:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47531947</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47531947</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47531947</guid></item><item><title><![CDATA[New comment by riskable in "FCC updates covered list to include foreign-made consumer routers"]]></title><description><![CDATA[
<p>I have a PC hooked up to my TV in my living room that has been running the latest version of Kubuntu for over 18 years now.  It has had many upgrades in that time but it's still the same basic hardware:  A CPU, some memory, USB ports, a video card, and an ethernet port on the back.<p>That "genericness" is what's missing in the router space.  <i>Literally</i> every consumer router that comes out has some super proprietary design that's meant to be replaced in its entirety in 3-4 years.  Many can run Linux, sure, but how many have a replaceable/upgradable board?  How many are like a PC where you can install whatever OS you want?<p>Sure, you can forcibly flash a new OS (e.g. OpenWRT) but <i>that is a hack</i>.  The company <i>lets</i> you do that because they figure they'll get a bit more market share out of their products if they don't lock the firmware so much.  They key point remains, however:  They're not <i>just</i> hardware—even though they should be!<p>The world of consumer routers needs a PC-like architecture change.  You can buy routers from companies like Banana Pi and Microtik like this but they're not marketed towards every-day consumers.  Mostly because they're considered "too premium" and require too much expertise to setup.<p>I think there's a huge hole in the market for consumer-minded routers that run hardware like the Banana Pi R4 (which I have).  When you buy it, you get the board <i>and nothing else</i>.  It's up to you to get a case and install an OS on it (with OpenWRT, Debian, and Ubuntu being the normal options).<p>We need something like the Framework laptop for routers.  Not from a, "it has interchangeable parts" perspective but from a marketing perspective.  <i>Normal people</i> are buying Framework laptops because geeky friends and colleagues recommend them and they're not <i>that</i> much more expensive/troublesome than say, a cheap Acer/Asus laptop.</p>
]]></description><pubDate>Tue, 24 Mar 2026 13:30:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47502310</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47502310</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47502310</guid></item><item><title><![CDATA[New comment by riskable in "Meta will shut down VR Horizon Worlds access June 15"]]></title><description><![CDATA[
<p>I honestly think VR hasn't taken off yet because every VR headset since forever has been a locked-down platform or not a stand-alone device (meaning: You need a powerful PC to use it, which makes the cost too high for casual players).  The development barrier to entry is far too high and the market far too small.<p>The Steam Frame is a full PC that doesn't require a tether.  I think it'll change everything if it doesn't cost a fortune (which it might).  The possibilities for 3rd party hardware and the open ecosystem of a complete Linux distro + Steam are endless.<p>Day one of the Steam Frame I'm sure we're going to see all sorts of open source tools/scripts that make it better.  Then 3rd party hardware will be announced and suddenly everyone's going to want one because all those things together make it sooooo nice.</p>
]]></description><pubDate>Wed, 18 Mar 2026 17:20:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47428514</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47428514</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47428514</guid></item><item><title><![CDATA[New comment by riskable in "Meta will shut down VR Horizon Worlds access June 15"]]></title><description><![CDATA[
<p>> No one wants to wear a PC on their faces.<p>This has yet to be determined!  Because no VR headset <i>so far</i> has actually been a proper PC.  You can't develop on them.  You can't just install whatever TF you want.  You have to use their app store and getting developer mode enabled doesn't even give you root on the device.<p>A more accurate statement would be, "No one wants to wear a locked-down, extremely limited-use phone on their faces."<p>When the Steam Frame comes out, <i>then</i> we'll see how much of a difference having full control over your VR hardware can make.  It runs SteamOS and <i>you can install whatever you want.</i>  It's a complete Linux distro!  An <i>actual</i> PC on your face.</p>
]]></description><pubDate>Wed, 18 Mar 2026 17:10:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47428372</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47428372</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47428372</guid></item><item><title><![CDATA[New comment by riskable in "Honda is killing its EVs"]]></title><description><![CDATA[
<p>Exactly!  There's vastly more software available for Linux than there is for Windows and the Linux experience is vastly superior.  It's a real-world example of "more software == better".</p>
]]></description><pubDate>Wed, 18 Mar 2026 12:51:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47425156</link><dc:creator>riskable</dc:creator><comments>https://news.ycombinator.com/item?id=47425156</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47425156</guid></item></channel></rss>