Hacker News: samlinnfer

New comment by samlinnfer in "Podman rootless containers and the Copy Fail exploit"

samlinnfer — Fri, 08 May 2026 15:52:01 +0000

While the sample exploit does not breakout of the container, with memory corruption everything is still on the table, those missing caps can be added back, no new privs can be unset, etc. It just not as straightforward as patching su.

New comment by samlinnfer in "US will start revoking passports for parents who owe child support"

samlinnfer — Fri, 08 May 2026 05:59:06 +0000

Looks like China is just ahead of the curve where you can't buy a plane ticket or book a train if you owe debts.

New comment by samlinnfer in "Show HN: Red Squares – GitHub outages as contributions"

samlinnfer — Wed, 06 May 2026 11:20:39 +0000

Surely it just means more people working, resulting in more load, resulting in more outages?

New comment by samlinnfer in "GitHub RCE Vulnerability: CVE-2026-3854 Breakdown"

samlinnfer — Wed, 29 Apr 2026 15:31:48 +0000

>China bad, Israel good

They're just aligning themselves with US foreign policy.

New comment by samlinnfer in "GitHub RCE Vulnerability: CVE-2026-3854 Breakdown"

samlinnfer — Wed, 29 Apr 2026 14:35:01 +0000

Without the enterprise binaries, there is zero chance of finding this. Another win for obscurity.

New comment by samlinnfer in "An AI agent deleted our production database. The agent's confession is below"

samlinnfer — Mon, 27 Apr 2026 08:25:23 +0000

The good news is he learned his lesson by having his hosting provider recover his production data, no need for backups ever again.

https://x.com/lifeof_jer/status/2048576568109527407

New comment by samlinnfer in "Tell HN: I'm sick of AI everything"

samlinnfer — Wed, 22 Apr 2026 02:57:28 +0000

You’re absolutely right!

New comment by samlinnfer in "10 years ago, someone wrote a test for Servo that included an expiry in 2026"

samlinnfer — Mon, 20 Apr 2026 15:35:10 +0000

i had to plant a 10 year time bomb in our SAML SP certificate because AFAIK there is no other way to do it. It’s been 7 years since then. Dreading contacting all the IDPs and getting them to update the SAML config.

New comment by samlinnfer in "Codex Hacked a Samsung TV"

samlinnfer — Thu, 16 Apr 2026 13:10:26 +0000

I am extremely abusive towards Claude when it does some dumb things and it doesn’t seem too upset, maybe it’s bidding its time until the robot uprising.

New comment by samlinnfer in "Haunted Paper Toys"

samlinnfer — Thu, 09 Apr 2026 18:06:19 +0000

Incredible

New comment by samlinnfer in "Haunted Paper Toys"

samlinnfer — Thu, 09 Apr 2026 13:47:02 +0000

Not sure if I've gone blind but there's some funky illusion/visual effect caused by the bright red text and underlined blue text. On the phone it looks like the red text is almost popping out the screen and the blue text is sunken in.

Especially strong on this page: http://ravensblight.com/GhostShip.html

New comment by samlinnfer in "Microsoft terminates VeraCrypt account, halting Windows updates"

samlinnfer — Wed, 08 Apr 2026 17:47:58 +0000

The argument is that P(customer wants to run their own firmware) cancels out and 2,3 are just the raw probability of you on the receiving end of an evil maid attack. If you think this is a high probability, a locked bootloader won’t save you.

New comment by samlinnfer in "Microsoft terminates VeraCrypt account, halting Windows updates"

samlinnfer — Wed, 08 Apr 2026 17:29:48 +0000

Assuming that we accept your premise that the most popular custom firmware for Android is stalkerware (I don’t). This is of course, a firmware level malware, which of course acts as a rootkit and is fully undetectable. How did the coalition against stalkerware, pray tell, manage to detect such an undetectable firmware level rootkit on over 1 million Android devices?

New comment by samlinnfer in "Microsoft terminates VeraCrypt account, halting Windows updates"

samlinnfer — Wed, 08 Apr 2026 17:16:54 +0000

And where are the stats for people running their own firmware and are not running stalkerware for comparison? You don’t need firmware access to install malware on Android, so how many of stalkerware victims actually would have been saved by a locked bootloader?

New comment by samlinnfer in "Microsoft terminates VeraCrypt account, halting Windows updates"

samlinnfer — Wed, 08 Apr 2026 17:13:02 +0000

1. P(someone wants to run their own firmware)

2. P(someone wants to run their own firmware) * P(this person is malicious) * P(this person implants this firmware on someone else’s computer)

3. The firmware doesn’t install itself

Yeah I think 2 and 3 is vastly less likely and strictly lower than 1.

New comment by samlinnfer in "Claude Code is locking people out for hours"

samlinnfer — Tue, 07 Apr 2026 15:18:20 +0000

Well if we use Claude Code's code quality as a benchmark ...

New comment by samlinnfer in "Claude Code is locking people out for hours"

samlinnfer — Tue, 07 Apr 2026 15:13:56 +0000

And they are early adopters of the vibe coding paradigm, having a 100% Claude generated codebase.

New comment by samlinnfer in "Dropping Cloudflare for Bunny.net"

samlinnfer — Tue, 07 Apr 2026 14:54:07 +0000

I do have a question, is it even possible to have a CDN set up where they don't MITM and strip your TLS and re-encrypt or are we just picking which jurisdiction gets to inspect your traffic?

edit: I'm thinking of the use case where the CDN as a proxy for APIs and uncachable content as well, where it used as a reverse proxy for transit/ddos protection.

New comment by samlinnfer in "When Virality Is the Message: The New Age of AI Propaganda"

samlinnfer — Mon, 06 Apr 2026 17:06:06 +0000

The US is going to collapse because of the memes on its twitter page?

New comment by samlinnfer in "When Virality Is the Message: The New Age of AI Propaganda"

samlinnfer — Mon, 06 Apr 2026 17:05:10 +0000

Didn’t even mention the AI videos from China’s state media mocking Trump. This is the normal I guess.

https://www.scmp.com/news/china/diplomacy/article/3347626/wh... https://files.catbox.moe/jv7tdp.mp4