Hacker News: runningmike

New comment by runningmike in "Pyodide 314.0: Python packages can now publish WebAssembly wheels to PyPI"

runningmike — Sat, 13 Jun 2026 21:47:43 +0000

Great news. And indeed a nice step to an even broader Python ecosystem.

Zero Trust for Python Security: A Practical Checklist

runningmike — Sat, 13 Jun 2026 14:14:28 +0000

Article URL: https://medium.com/@maikelmardjan/zero-trust-for-python-security-a-practical-checklist-fab2f50c12c0

Comments URL: https://news.ycombinator.com/item?id=48517578

Points: 2

# Comments: 0

Zero Install: The future of FOSS Python static application security testing

runningmike — Fri, 12 Jun 2026 21:49:20 +0000

Article URL: https://nocomplexity.substack.com/p/zero-install-the-future-of-foss-python

Comments URL: https://news.ycombinator.com/item?id=48509839

Points: 3

# Comments: 0

New comment by runningmike in "Are insecure code completions in PyCharm a vulnerability?"

runningmike — Thu, 11 Jun 2026 06:09:28 +0000

“ Are insecure code completions a vulnerability?” No it might be a potential security weakness. Semantics matters.

New comment by runningmike in "Crucial and Vital Security by Design Principles"

runningmike — Fri, 22 May 2026 21:46:22 +0000

Security by Design principles do not guarantee security. They are a mandatory aid to thinking, not a replacement for it.

Crucial and Vital Security by Design Principles

runningmike — Fri, 22 May 2026 21:45:56 +0000

Article URL: https://nocomplexity.github.io/securitybydesign/securityprinciples/

Comments URL: https://news.ycombinator.com/item?id=48242095

Points: 2

# Comments: 1

New comment by runningmike in "WordPress 7.0"

runningmike — Wed, 20 May 2026 20:14:43 +0000

AI-Integrated WordPress….still not sure if this is good or bad. It will definitely be a disaster for the revenue of many smb web agencies.

New comment by runningmike in "Open and Free Security Books"

runningmike — Mon, 18 May 2026 09:28:29 +0000

A curated, opinionated list of high-quality cyber security books.

Open and Free Security Books

runningmike — Mon, 18 May 2026 09:28:29 +0000

Article URL: https://nocomplexity.com/documents/securityarchitecture/securitylibrary/libraryintro.html#open-and-free-security-books

Comments URL: https://news.ycombinator.com/item?id=48177223

Points: 1

# Comments: 1

New comment by runningmike in "Ask HN: How do you approach a new codebase?"

runningmike — Sun, 17 May 2026 12:45:12 +0000

Assuming you have a c or cpp project: compile and build it first , run the tests if any.. and run cscope or equivalent on code you want to change first.

New comment by runningmike in "Learning Software Architecture"

runningmike — Tue, 12 May 2026 12:07:02 +0000

Nice read. “ Learning Software Architecture” means understanding that there is no single good answer. It is art and science.

Read tip: Simplify IT - The art and science towards simpler IT solution https://nocomplexity.com/documents/reports/SimplifyIT.pdf

New comment by runningmike in "OWASP Foundation's Strategic Plan [pdf]"

runningmike — Thu, 07 May 2026 12:05:47 +0000

The OWASP Board has released its new Strategic Plan to tackle software security.

I haven’t quite made up my mind about the certification programmes yet. There are already so many out there for security, and most seem to cover the same ground.

OWASP Foundation's Strategic Plan [pdf]

runningmike — Thu, 07 May 2026 12:05:47 +0000

Article URL: https://owasp.org/assets/files/OWASP_Foundation_Strategic_Plan.pdf

Comments URL: https://news.ycombinator.com/item?id=48048382

Points: 3

# Comments: 1

New comment by runningmike in "Quarkdown – Markdown with Superpowers"

runningmike — Mon, 27 Apr 2026 12:23:13 +0000

Nice! But in the Comparison should be MyST - https://mystmd.org/ This is the new markdown standard to be….

New comment by runningmike in "A Practical Introduction to Constraint Programming Using CP-SAT and Python"

runningmike — Sun, 26 Apr 2026 13:35:31 +0000

Nice blog but title should end with (2024).

I would recommend reading: "The CP-SAT Primer: Using and Understanding Google OR-Tools’ CP-SAT Solver" - https://d-krupke.github.io/cpsat-primer/

When starting with CP-SAT. The google docs are not great unfortunately.

New comment by runningmike in "ChatGPT, Is This Real?"

runningmike — Wed, 15 Apr 2026 18:31:03 +0000

Full title: ChatGPT, is this real? The influence of generative AI on writing style in top-tier cybersecurity papers

"we find a sharp rise in the frequency of LLM-favored marker words such as underscoring and enhancing."

ChatGPT, Is This Real?

runningmike — Wed, 15 Apr 2026 18:31:03 +0000

Article URL: https://arxiv.org/abs/2604.09316

Comments URL: https://news.ycombinator.com/item?id=47783206

Points: 2

# Comments: 1

New comment by runningmike in "Security Concerns in Generative AI Coding Assistants"

runningmike — Tue, 14 Apr 2026 08:03:22 +0000

Original title: Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot

"the sentiment expressed across all concern areas is generally skewed toward the negative end of the polarity scale."

Security Concerns in Generative AI Coding Assistants

runningmike — Tue, 14 Apr 2026 08:03:21 +0000

Article URL: https://arxiv.org/abs/2604.08352

Comments URL: https://news.ycombinator.com/item?id=47762692

Points: 1

# Comments: 1

New comment by runningmike in "Google has a secret reference desk"

runningmike — Tue, 14 Apr 2026 07:37:09 +0000

Nice article. But the warning can be stronger imho: Instead of: "Don’t assume your results are the same as anyone else’s."

"The results search you get from G*gle results are unique."

G*gle does not use the easy to use Lucene search syntax but has many 'magic' things, like:

Searching for high-quality Open Access content or solid technical answers on software challenges requires a rigorous scientific methodology, combined with creativity and extensive experience. Despite being a crucial competency, it is rarely taught in depth.

Even with the rise of LLMs, effectively navigating search results remains an unsolved problem.