Hacker News: roddux

New comment by roddux in "Surveillance Watch – A map that shows connections between surveillance companies"

roddux — Fri, 09 Jan 2026 10:37:31 +0000

Adding 'https://www.surveillancewatch.io/noise-anim.gif' to your favourite rule-based adblocker fixes this.

New comment by roddux in "Surveillance Watch – A map that shows connections between surveillance companies"

roddux — Fri, 09 Jan 2026 10:34:12 +0000

The stupid dancing fuzz filter across the entire website renders the content almost completely illegible, and is a struggle to read. Shame.

New comment by roddux in "Ask HN: Where do I find good code to read?"

roddux — Fri, 25 Aug 2023 08:05:10 +0000

Rather than seeking an impossible ideal (>2 people who agree on what 'good' code is)-- instead read ALL sorts of code. This will then help you learn to distinguish between what is good and not good, and what makes it so. Simplicity, clarity, and lack of surprise come to mind as concepts for 'good'. Others will have different ideas.

New comment by roddux in "Readline crime: exploiting a SUID logic bug"

roddux — Thu, 16 Feb 2023 14:21:44 +0000

Looking at a local privilege escalation (on some systems) that works due to a logic bug in readline, when used with SUID programs.

Readline crime: exploiting a SUID logic bug

roddux — Thu, 16 Feb 2023 14:21:44 +0000

Article URL: https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/

Comments URL: https://news.ycombinator.com/item?id=34818959

Points: 5

# Comments: 1

New comment by roddux in "Tell HN: Stripe closed my GPT-3 G.Sheet addon because they think I “sell essays”"

roddux — Wed, 15 Feb 2023 10:27:56 +0000

Find a new provider that won't randomly shaft you for spurious reasons.

New comment by roddux in "Porting the Solana eBPF JIT Compiler to ARM64"

roddux — Thu, 13 Oct 2022 15:54:33 +0000

Solana really seems like the most interesting Layer-1 chain outside of Ethereum... lots of cool tech.

New comment by roddux in "Aleksandr Sorokin smashes 24-hour world record with 198.6 mile run"

roddux — Mon, 19 Sep 2022 15:32:45 +0000

https://news.ycombinator.com/item?id=32897812

New comment by roddux in "It’s time for a new Bretton Woods"

roddux — Tue, 19 Apr 2022 09:59:10 +0000

Archive/no paywall: https://archive.ph/Uxssq

New comment by roddux in "Barrier: Share mouse and keyboard between computers"

roddux — Fri, 11 Mar 2022 12:57:32 +0000

I love the look of this, but haven't been able to find any information about latency... It seems to be a local network solution? Light on details about how it works, short of reading source.

New comment by roddux in "“Compiling” Music"

roddux — Thu, 10 Mar 2022 14:54:09 +0000

LaTeX for music? nice!

New comment by roddux in "The Dirty Pipe Vulnerability"

roddux — Tue, 08 Mar 2022 09:13:24 +0000

Nobody is arguing that users having a 1-2 week patch window is a bad thing. However, this frankly seems incompatible with open-source projects. Silently patching issues does not work in practice; it frequently leads to missed fixes, misapplied patches and other incompatibility woes. The situation with backports and LTS releases showcases this well— the only truly well-supported kernel is latest. Everything else is a patchwork of best-effort fixes, not all of which may have been applied correctly. Brad Spengler of grsecurity fame talks frequently about this (primarily via Twitter): https://twitter.com/spendergrsec

New comment by roddux in "The Dirty Pipe Vulnerability"

roddux — Mon, 07 Mar 2022 16:55:26 +0000

Don't know why your other comment got downvoted. Silently patching bugs has left many LTS kernels vulnerable to old bugs, because they weren't tagged as security fixes. Also leads to other issues..: https://grsecurity.net/the_life_of_a_bad_security_fix

New comment by roddux in "Sotheby's Metaverse"

roddux — Tue, 11 Jan 2022 13:01:03 +0000

Is it a rule that all NFT art must be algorithmically generated and look like shit? Jesus wept.

New comment by roddux in "One program to rule them all: Or the exe as an extension of the thinking organ"

roddux — Mon, 10 Jan 2022 14:54:53 +0000

I am quite interested in your setup! Have you written at all about how you use this, day to day, or perhaps made a screencast? I would be very keen to watch it.

I am a huge fan of integrated environments. I often find the promise of extendability in Linux is unfilfilled by components that do not interop without a lot of manual effort.

New comment by roddux in "Work is not your god"

roddux — Mon, 10 Jan 2022 14:49:09 +0000

Readable version: https://archive.is/GXIeZ

New comment by roddux in "FBI held back ransomware decryption key to run operation targeting hackers"

roddux — Tue, 21 Sep 2021 16:22:22 +0000

https://archive.is/K9JP3

New comment by roddux in "Hacker downloads close to 300k personal ID photos from Estonian gov database"

roddux — Thu, 29 Jul 2021 18:39:34 +0000

So when can we expect ThisEstonianDoesNotExist?

New comment by roddux in "Microsoft to reveal its next generation of Windows on June 24th"

roddux — Thu, 03 Jun 2021 09:55:41 +0000

Article is pretty light on details; but I don't think much is public yet. I think the big question is, will Windows turn into a subscription-based OS?

New comment by roddux in "Huawei HarmonyOS and New Products Launch [video]"

roddux — Wed, 02 Jun 2021 13:34:43 +0000

If anyone else was curious about HarmonyOS, don't bother..:

> https://en.wikipedia.org/wiki/HarmonyOS

Unveiled on 9 August 2019, Huawei initially stated that it would be an independently-developed, microkernel-based, distributed OS, and "completely different from Android and iOS",[1] but it was later discovered that HarmonyOS was actually a derivative of Android.