<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: schlarpc</title><link>https://news.ycombinator.com/user?id=schlarpc</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 08 Nov 2026 21:22:35 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=schlarpc" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by schlarpc in "Pi 1.0"]]></title><description><![CDATA[
<p>Totally agree with this sentiment. On your plugin point, I recently did a PoC of QuickJS in wasmtime with a restrictive sandbox (10 syscalls total) for running untrusted plugin code and it was great. Took maybe 3-4 days to pull together and performed more than adequately for the kind of thing this class of software needs, with a security posture that beats pretty much anything widely deployed. When this level of engineering excellence is so cheap to achieve, we really need to bully companies that refuse to do it.</p>
]]></description><pubDate>Thu, 01 Oct 2026 23:45:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=49928308</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49928308</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49928308</guid></item><item><title><![CDATA[New comment by schlarpc in "LG says we're fake news [video]"]]></title><description><![CDATA[
<p>That ribbon got slammed full of advertisements at some point, last I knew.</p>
]]></description><pubDate>Sat, 12 Sep 2026 23:26:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=49678288</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49678288</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49678288</guid></item><item><title><![CDATA[New comment by schlarpc in "Everything I own, owned"]]></title><description><![CDATA[
<p>I suspect the bar will raise for some devices, but most will continue to be made cheaply and with poorly-defined requirements and threat models, and "it works" will continue be the only bar they're measured against before release.</p>
]]></description><pubDate>Tue, 25 Aug 2026 01:28:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=49428039</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49428039</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49428039</guid></item><item><title><![CDATA[New comment by schlarpc in "Everything I own, owned"]]></title><description><![CDATA[
<p>Personal plan, but yes, my day job is being a security engineer for big tech.</p>
]]></description><pubDate>Mon, 24 Aug 2026 08:22:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=49416720</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49416720</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49416720</guid></item><item><title><![CDATA[New comment by schlarpc in "Everything I own, owned"]]></title><description><![CDATA[
<p>I have CVP access, which removes the external refusals for Opus 5. I submitted my LinkedIn and Github and got approved in less than 10 minutes.</p>
]]></description><pubDate>Mon, 24 Aug 2026 04:10:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=49415111</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49415111</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49415111</guid></item><item><title><![CDATA[New comment by schlarpc in "Everything I own, owned"]]></title><description><![CDATA[
<p>I understand what it does, I think the alert is annoying. It takes at least five minutes and automatically runs when the monitor is off. I’ve had it for a few years and have no burn in issues despite not doing this every eight hours on command.</p>
]]></description><pubDate>Mon, 24 Aug 2026 00:46:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=49414059</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49414059</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49414059</guid></item><item><title><![CDATA[Everything I own, owned]]></title><description><![CDATA[
<p><a href="https://web.archive.org/web/20260823225933/https://schlarp.com/posts/everything-i-own-owned/" rel="nofollow">https://web.archive.org/web/20260823225933/https://schlarp.c...</a></p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49413320">https://news.ycombinator.com/item?id=49413320</a></p>
<p>Points: 1453</p>
<p># Comments: 351</p>
]]></description><pubDate>Sun, 23 Aug 2026 22:41:04 +0000</pubDate><link>https://schlarp.com/posts/everything-i-own-owned/</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=49413320</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49413320</guid></item><item><title><![CDATA[New comment by schlarpc in "The best YouTube downloaders, and how Google silenced the press"]]></title><description><![CDATA[
<p>Doesn’t work for livestreams as far as I know. There’s an open PR: <a href="https://github.com/yt-dlp/yt-dlp/pull/6498" rel="nofollow">https://github.com/yt-dlp/yt-dlp/pull/6498</a></p>
]]></description><pubDate>Fri, 19 Sep 2025 18:49:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=45305069</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=45305069</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45305069</guid></item><item><title><![CDATA[New comment by schlarpc in "Mosh Mobile Shell"]]></title><description><![CDATA[
<p>Interesting that it can’t reestablish the connection, as the application level protocol should support it just fine. The client should notice the GRE (game rules engine) TCP socket is broken, and reset everything. When you reconnect, the front door service should notify you to a GRE session still in progress, and the client should be able to rejoin that. At least, that’s how it works on desktop.</p>
]]></description><pubDate>Thu, 28 Aug 2025 19:55:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=45056344</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=45056344</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45056344</guid></item><item><title><![CDATA[New comment by schlarpc in "Hidden interface controls that affect usability"]]></title><description><![CDATA[
<p>And thankfully you won’t be looking at it much longer</p>
]]></description><pubDate>Sun, 06 Jul 2025 08:20:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=44478829</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=44478829</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44478829</guid></item><item><title><![CDATA[New comment by schlarpc in "Why We're Moving on from Nix"]]></title><description><![CDATA[
<p>Just wanted to say thanks for nix2container. I’ve been using it to do some deploys to AWS (ECR) and my iteration time between builds is down to single digit seconds.</p>
]]></description><pubDate>Sat, 07 Jun 2025 19:12:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=44211875</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=44211875</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44211875</guid></item><item><title><![CDATA[New comment by schlarpc in "Deploying Containers on NixOS: A Guide"]]></title><description><![CDATA[
<p>Thanks for the link, I've got a bunch of hacky code for running Immich's compose under Nix that this might be able to replace.</p>
]]></description><pubDate>Thu, 05 Dec 2024 02:07:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=42324089</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=42324089</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42324089</guid></item><item><title><![CDATA[New comment by schlarpc in "Show HN: Building a 42-inch E-Ink frame for generative art"]]></title><description><![CDATA[
<p>I have a similar display, and also use blue noise dithering. Mine is driven in the backend by a web browser, which means I was able to abuse CSS and mix-blend-mode to do the dithering for me:<p><pre><code>  ha-card::after {
    content: "";
    background-image: url(/local/visionect-dither.png);
    background-repeat: repeat;
    position: absolute;
    height: 100%;
    width: 100%;
    display: block;
    mix-blend-mode: multiply;
  }
</code></pre>
The dithering texture used is 128_128/LDR_LLL1_10.png from <a href="https://github.com/Calinou/free-blue-noise-textures">https://github.com/Calinou/free-blue-noise-textures</a></p>
]]></description><pubDate>Tue, 10 Oct 2023 20:26:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=37837009</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=37837009</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37837009</guid></item><item><title><![CDATA[New comment by schlarpc in "Special-Use Domain Names"]]></title><description><![CDATA[
<p>Whoa, .alt is finally a proposed standard with a real RFC number. Really happy about this, it's sorely needed in some spaces.</p>
]]></description><pubDate>Tue, 19 Sep 2023 23:50:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=37578698</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=37578698</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37578698</guid></item><item><title><![CDATA[New comment by schlarpc in "Stable Linux mainline builds for Ubuntu"]]></title><description><![CDATA[
<p>Another option for NixOS is bootspec-secureboot, I'm using it with no real complaints: <a href="https://github.com/DeterminateSystems/bootspec-secureboot">https://github.com/DeterminateSystems/bootspec-secureboot</a></p>
]]></description><pubDate>Fri, 25 Aug 2023 16:06:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=37263291</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=37263291</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37263291</guid></item><item><title><![CDATA[New comment by schlarpc in "The Amazon Prime Day 2023 AWS Bill"]]></title><description><![CDATA[
<p>There kind of is, but it's not really made for that use case so there's a bunch of caveats (it's read/write, has a limited max number of attachments, io1/2 required, can't be the boot volume): <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volumes-multi.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volu...</a></p>
]]></description><pubDate>Thu, 17 Aug 2023 02:41:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=37156523</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=37156523</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37156523</guid></item><item><title><![CDATA[New comment by schlarpc in "Downfall Attacks"]]></title><description><![CDATA[
<p><a href="https://docs.aws.amazon.com/whitepapers/latest/security-design-of-aws-nitro-system/the-ec2-approach-to-preventing-side-channels.html#:~:text=However%2C%20even%20burstable%20instances%20never%20share%20the%20same%20core%20at%20the%20same%20time%2C%20and%20virtual%20memory%20pages%20are%20never%20shared%20across%20instances" rel="nofollow noreferrer">https://docs.aws.amazon.com/whitepapers/latest/security-desi...</a>.</p>
]]></description><pubDate>Tue, 08 Aug 2023 21:06:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=37055462</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=37055462</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37055462</guid></item><item><title><![CDATA[New comment by schlarpc in "You can deactivate anyone's WhatsApp account by simply sending an email"]]></title><description><![CDATA[
<p>This was considered a feature back in the day; it was called MASE - Multiple Account, Same Email. I'm pretty sure you can just change the email on one of them to get out of that state.</p>
]]></description><pubDate>Tue, 18 Jul 2023 01:29:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=36766613</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=36766613</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36766613</guid></item><item><title><![CDATA[New comment by schlarpc in "Easy HTTPS for your private networks"]]></title><description><![CDATA[
<p>Somewhat related - I made a bridge server [1] that lets ACME clients use standard RFC2136 to solve DNS-01 challenges for internal names without them needing credentials for the actual DNS backend (Route 53 in my case).<p>[1] <a href="https://github.com/schlarpc/rfc2136_bridge/blob/main/src/rfc2136_bridge/app.py">https://github.com/schlarpc/rfc2136_bridge/blob/main/src/rfc...</a></p>
]]></description><pubDate>Tue, 11 Jul 2023 00:30:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=36675000</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=36675000</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36675000</guid></item><item><title><![CDATA[New comment by schlarpc in "Heisting $20M of Magic: The Gathering Cards in a Single Request"]]></title><description><![CDATA[
<p>If anyone's interested in poking around a little bit more, here's a half-finished client for the MTG Arena wire protocol: <a href="https://gist.github.com/schlarpc/a58f2f647ee2a640baa62c23a519c2e0" rel="nofollow">https://gist.github.com/schlarpc/a58f2f647ee2a640baa62c23a51...</a><p>There may be something else more complete out there since I last worked on this, no idea.</p>
]]></description><pubDate>Fri, 05 May 2023 04:19:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=35825180</link><dc:creator>schlarpc</dc:creator><comments>https://news.ycombinator.com/item?id=35825180</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=35825180</guid></item></channel></rss>