<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: rlpb</title><link>https://news.ycombinator.com/user?id=rlpb</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 23 May 2026 22:34:31 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=rlpb" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by rlpb in "Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD"]]></title><description><![CDATA[
<p>> However, with some of the shenanigans that the Linux distributions are pulling around age verification/attestation...<p>You've been misled.</p>
]]></description><pubDate>Thu, 21 May 2026 21:40:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=48229189</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=48229189</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48229189</guid></item><item><title><![CDATA[New comment by rlpb in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>> ...they have literally shipped straight-up broken packages before, because fixing it would somehow make it not "stable"<p>Irrelevant strawman, since you're not accusing the dnsmasq package in Debian stable of being straight-up broken.</p>
]]></description><pubDate>Tue, 12 May 2026 21:20:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48114767</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=48114767</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48114767</guid></item><item><title><![CDATA[New comment by rlpb in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>> ...upstream package maintainers who are expected to deal with bug reports from ancient versions...<p>They are not expected to deal with this. This is the responsibility of the Debian package maintainer.<p>If you (as an upstream) licensed  your software in a manner that allows Debian to do what it does, and they do this to serve their users who actually want that, you are wrong to then complain about it.<p>If you don't want this, don't license your software like that, and Debian and their users will use some other software instead.</p>
]]></description><pubDate>Tue, 12 May 2026 21:16:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=48114715</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=48114715</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48114715</guid></item><item><title><![CDATA[New comment by rlpb in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>Refactoring and rewrites prove time and time again that they also introduce new bugs and changes in behaviour that users of stable releases do not want.<p>For what you want, there are other distributions for that. Debian also has stable-backports that does what you want.<p>No need to rage on distributions that also provide exactly what their users want.</p>
]]></description><pubDate>Tue, 12 May 2026 21:12:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=48114659</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=48114659</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48114659</guid></item><item><title><![CDATA[New comment by rlpb in "Debian must ship reproducible packages"]]></title><description><![CDATA[
<p>Debian has had a better "software supply chain" posture than any other player in the ecosystem since before the turn of the century. While we all face the risk of malware from upstream, Debian is the least at risk of being affected by it. See for example the stream of issues from npm et al. None of it has affected Debian.</p>
]]></description><pubDate>Sun, 10 May 2026 06:23:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=48081477</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=48081477</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48081477</guid></item><item><title><![CDATA[New comment by rlpb in "Claude Opus 4.7"]]></title><description><![CDATA[
<p>> In this context we are talking explicitly about cloud-hosted AIs.<p>Looking upthread, we seem to be talking about Claude. Claude is cloud-hosted inference but the harness is local if you're using Claude Code, and can be MITM'd there.</p>
]]></description><pubDate>Fri, 17 Apr 2026 17:51:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=47808620</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47808620</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47808620</guid></item><item><title><![CDATA[New comment by rlpb in "US v. Heppner (S.D.N.Y. 2026) no attorney-client privilege for AI chats [pdf]"]]></title><description><![CDATA[
<p>> It boggles my mind to see legal firms increasingly rely on consumer-oriented cloud services while acting like they are retaining custody of the data entrusted to them.<p>My theory is that lawyers tend to lean on the law to protect them more than others might. "I can ensure that it would be illegal for them to them to expose this data; therefore this method is safe" vs. "If they expose this data, is that a situation I want to deal with?".</p>
]]></description><pubDate>Thu, 16 Apr 2026 23:36:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47800874</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47800874</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47800874</guid></item><item><title><![CDATA[New comment by rlpb in "Claude Opus 4.7"]]></title><description><![CDATA[
<p>A smart AI would realise that I can MITM its web access such that sees the .well-known token that isn't actually there. I assume that the model doesn't have CA certificates embedded into it, and relies on its harness for that.</p>
]]></description><pubDate>Thu, 16 Apr 2026 23:26:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=47800826</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47800826</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47800826</guid></item><item><title><![CDATA[New comment by rlpb in "Anthropic downgraded cache TTL on March 6th"]]></title><description><![CDATA[
<p>> It's all circumstantial but everything points towards "desperately trying to cut costs".<p>I have been wondering if it's more geared at reducing resource usage, given that at the moment there's a known constraint on AI datacenter expansion capability. Perhaps they are struggling to meet demand?</p>
]]></description><pubDate>Sun, 12 Apr 2026 10:11:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47737966</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47737966</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47737966</guid></item><item><title><![CDATA[New comment by rlpb in "WireGuard makes new Windows release following Microsoft signing resolution"]]></title><description><![CDATA[
<p>It sounds more like a "driver program" gatekeeper so you are arguing about semantics. I'm not claiming that there is no problem, just that an argument based on the distinction between "hardware" and "driver" is void.</p>
]]></description><pubDate>Fri, 10 Apr 2026 22:53:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=47724771</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47724771</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47724771</guid></item><item><title><![CDATA[New comment by rlpb in "The FAA’s flight restriction for drones is an attempt to criminalize filming ICE"]]></title><description><![CDATA[
<p><a href="https://en.wikipedia.org/wiki/Mens_rea#Levels_of_mens_rea_within_the_United_States" rel="nofollow">https://en.wikipedia.org/wiki/Mens_rea#Levels_of_mens_rea_wi...</a> is relevant here. There are exceptions - I don't know the specifics especially in relation to US law - but the starting point is that unknowingly causing the situation to exist doesn't make you guilty automatically. You have to intend it.</p>
]]></description><pubDate>Sat, 04 Apr 2026 13:06:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=47638744</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47638744</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47638744</guid></item><item><title><![CDATA[New comment by rlpb in "Britain today generating 90%+ of electricity from renewables"]]></title><description><![CDATA[
<p>The markets accomodate that though. Market participants buy energy futures because they do need guaranteed future energy. Solar and wind producers cannot sell such futures (or else they can but will be forced to buy from gas plants to fulfil them when they can't). So in practice, wholesale buyers continue to buy a mix.</p>
]]></description><pubDate>Mon, 30 Mar 2026 16:56:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47576793</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47576793</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47576793</guid></item><item><title><![CDATA[New comment by rlpb in "Britain today generating 90%+ of electricity from renewables"]]></title><description><![CDATA[
<p>> Investors begin to refuse to build new potato farms because a return on their investment gets worse whenever anyone decides to build a new farm.<p>If they all refuse, then they're leaving money on the table. One investor could invest in 10% production only, and that would be very lucrative. It would be exactly my low cost to produce potato scenario.<p>In practice, they don't all refuse, or all invest. The market finds a balance. In time, producers switch to the new method, because anybody who doesn't leaves an opportunity for someone else to take their business and make more money.<p>This takes time, though. If we want things to go quicker, then we need to guarantee return on investment for longer, which is exactly what the government does by guaranteeing prices to renewable energy producers.</p>
]]></description><pubDate>Sat, 28 Mar 2026 20:53:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=47558031</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47558031</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47558031</guid></item><item><title><![CDATA[New comment by rlpb in "Britain today generating 90%+ of electricity from renewables"]]></title><description><![CDATA[
<p>> Sure, but those same free markets will happily see those expensive producers go out of business.<p>No, because remember you are only able to meet 10% of market demand. The expensive producers will still get 90% of the business, and the market price for their product will remain basically the same. This is what we observe in the electricity markets today: the price to us is the cost of the most expensive product. The cheaper producers who cannot meet the full market demand still get to sell at the cost of the most expensive product.</p>
]]></description><pubDate>Sat, 28 Mar 2026 19:25:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=47557476</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47557476</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47557476</guid></item><item><title><![CDATA[New comment by rlpb in "Britain today generating 90%+ of electricity from renewables"]]></title><description><![CDATA[
<p>> Doesn't this mean that solar/wind are insanely lucrative?<p>This is how markets are supposed to work. It provides an economic incentive for production to increase, which is what we want.<p>Consider what happens if you develop a farming method to produce potatoes for a fraction of the usual cost, but you can only meet 10% of total demand at your local market. What price are you going to sell your potatoes for when you show up to the market? You (like any free market seller) want to maximise your return, so you'll be able to sell for a fraction under the previous market rate, undercutting everyone else. Your farming method would be extremely lucrative.</p>
]]></description><pubDate>Sat, 28 Mar 2026 13:03:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=47554218</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47554218</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47554218</guid></item><item><title><![CDATA[New comment by rlpb in "People inside Microsoft are fighting to drop mandatory Microsoft Account"]]></title><description><![CDATA[
<p>> This might be obvious, but all of those things have a single common denominator: Microsoft, over you, getting to decide what your computer is doing.<p>Sure, but Microsoft have to strike a balance, too. If they push too hard in this direction, they'll lose their users to Macs on one side (probably the majority) and Linux on the other (a minority in number, but perhaps significant in expertise and clout). Once an exodus begins, it's much harder to stop. So where we are in that balance, and the state of user mindshare migration, is still interesting to discuss.</p>
]]></description><pubDate>Fri, 27 Mar 2026 21:17:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47548380</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47548380</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47548380</guid></item><item><title><![CDATA[New comment by rlpb in "Moving from GitHub to Codeberg, for lazy people"]]></title><description><![CDATA[
<p>You cannot git push something that is not committed. The solution is to commit often (and do it over ssh if you forget on a remote system). It doesn't need to a presentable commit. That can be cleaned up later. I use `git commit -amwip` all the time.<p>Sure, you might neglect to add a file to your commit, or commit at all, but that's a problem whether you're pushing to a central public git forge or not.</p>
]]></description><pubDate>Thu, 26 Mar 2026 15:32:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47531778</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47531778</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47531778</guid></item><item><title><![CDATA[New comment by rlpb in "The way CTRL-C in Postgres CLI cancels queries is incredibly hack-y"]]></title><description><![CDATA[
<p>TCP has an "urgent data" feature that might have been used for this kind of thing, used for Ctrl-C in telnet, etc. It can be used to bypass any pending send buffer and received by the server ahead of any unread data.</p>
]]></description><pubDate>Mon, 23 Mar 2026 08:38:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=47486773</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47486773</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47486773</guid></item><item><title><![CDATA[New comment by rlpb in "CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root"]]></title><description><![CDATA[
<p>It absolutely could have happened when the ecosystem norm is `curl <a href="https://third.party/installer|sudo" rel="nofollow">https://third.party/installer|sudo</a> sh`. That was the normal method for third parties to ship software before snaps came along.<p>We have Flatpaks to solve this problem too now, but AFAICT while Flatpaks do support sandboxing the UX for that is such that most Flatpak non-power-users aren't enforcing sandboxing on Flatpaks they install, so in practice the feature isn't present where it's most needed.</p>
]]></description><pubDate>Thu, 19 Mar 2026 09:21:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=47436772</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47436772</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47436772</guid></item><item><title><![CDATA[New comment by rlpb in "FSF threatens Anthropic over infringed copyright: share your LLMs freely"]]></title><description><![CDATA[
<p>Here's an article that seems relevant to the topic:<p>"District Court Finds That Using Copyrighted Works to Train Large Language Models Is Fair Use"<p><a href="https://www.finnegan.com/en/insights/ip-updates/district-court-finds-that-using-copyrighted-works-to-train-large-language-models-is-fair-use.html" rel="nofollow">https://www.finnegan.com/en/insights/ip-updates/district-cou...</a></p>
]]></description><pubDate>Mon, 16 Mar 2026 13:28:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47398752</link><dc:creator>rlpb</dc:creator><comments>https://news.ycombinator.com/item?id=47398752</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47398752</guid></item></channel></rss>