<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: shortsunblack</title><link>https://news.ycombinator.com/user?id=shortsunblack</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 29 May 2026 19:56:18 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=shortsunblack" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by shortsunblack in "Anthropic officially bans using subscription auth for third party use"]]></title><description><![CDATA[
<p>Anthropic has no authority to do as such. Users and third apps are protected by interoperability exceptions found in copyright case law.<p>Trying to prevent competitors from interoperating with the service also may be construed as anticompetitive behaviour.<p>The implementation details of an authentication process do not beget legal privileges to be a monopolist. What an absurd thought.</p>
]]></description><pubDate>Thu, 19 Feb 2026 15:21:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47074761</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=47074761</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47074761</guid></item><item><title><![CDATA[New comment by shortsunblack in "What has Docker become?"]]></title><description><![CDATA[
<p>Open source community detests dilettante attempts at rent seeking by building mediocre wrappers over commodity software.<p>Docker did not invent Linux containers. They did not invent namespaces or chroots.<p>You'll be hard pressed to name the things they did invent and those things have long ago left Docker to hang dry (OCI imagespec).<p>OrbStack is built by a single person and it provides an objectively better experience than Docker Desktop, built presumably by dozens of full time engineers.<p>People detest incompetence and rent seeking. That they do.<p>The lack of important contributions of Docker can be best summarized by all the alternatives that popped up in no time. With Kubernetes now defaulting to CRI-O, modern container stack has precisely zero Dockerisms.</p>
]]></description><pubDate>Sat, 24 Jan 2026 16:01:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=46744688</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=46744688</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46744688</guid></item><item><title><![CDATA[New comment by shortsunblack in "Anthropic Explicitly Blocking OpenCode"]]></title><description><![CDATA[
<p>OpenCode is doing nothing wrong and adversarial interoperability is the cornerstone of hacker ethos.<p>As such, the sentiment in this thread is chilling.</p>
]]></description><pubDate>Thu, 15 Jan 2026 12:16:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=46631402</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=46631402</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46631402</guid></item><item><title><![CDATA[New comment by shortsunblack in "Passkeys: They're not perfect but they're getting better"]]></title><description><![CDATA[
<p>Yes. HMAC extension allows for this use case.</p>
]]></description><pubDate>Wed, 29 Oct 2025 13:04:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=45746315</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=45746315</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45746315</guid></item><item><title><![CDATA[New comment by shortsunblack in "Passkeys: They're not perfect but they're getting better"]]></title><description><![CDATA[
<p>Android to this day does not support CTAP 2.1, hence it does not support hardware-bound passkeys with PIN via NFC as transport. You can only do PIN via USB.<p>Google does not care about FIDO or standards compliance. They care about vendor lock-in their proprietary passkey offerings allow.</p>
]]></description><pubDate>Wed, 29 Oct 2025 13:03:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=45746309</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=45746309</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45746309</guid></item><item><title><![CDATA[New comment by shortsunblack in "VMScape and why Xen dodged it"]]></title><description><![CDATA[
<p>KVM was made because Citrix made moves against Xen that spooked Linux community, hence KVM. Then Red Hat ran with it and based its virtualization platform on it.<p>Citrix involvement has subsided in meantime and the ecosystem is much healthier (governance is actually under Linux Foundation), but the damage was done.<p>Xen to this day lacks in features, also.</p>
]]></description><pubDate>Mon, 29 Sep 2025 11:19:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=45412373</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=45412373</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45412373</guid></item><item><title><![CDATA[New comment by shortsunblack in "EU age verification app not planning desktop support"]]></title><description><![CDATA[
<p>The current reference design is not compatible with existing law. eIDAS regulation that is the legal basis for digital wallet mandates unlinkability. GDPR has a general requirement for technical controls to be state of the art. Inherent reliance on American monopolies is incompatible with Digital Markets Act.<p>The current design and usage of cryptographic primitives does not allow for unlikability (it is actually quite easy to for verifiers and relying parties to collude) and it certainly is not state-of-the-art. BBS signatures would achieve actual unlinkability, but those have been outright rejected by the designers.<p>Current implementation is poised to not comply with the regulation that established the mandate for the wallet and it violates GDPR. The best one could hope for is for CJEU to strike down the whole project.<p>The GitHub organization of the OP's post has various issues that discuss these ills. Here is a position of several cryptographers against the current design: <a href="https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/issues/200" rel="nofollow">https://github.com/eu-digital-identity-wallet/eudi-doc-archi...</a></p>
]]></description><pubDate>Sun, 28 Sep 2025 20:31:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=45407716</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=45407716</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45407716</guid></item><item><title><![CDATA[New comment by shortsunblack in "OpenAI slams court order to save all ChatGPT logs, including deleted chats"]]></title><description><![CDATA[
<p>The legal obligation has to come from relevant member state or EU law. Not third party countries' laws.<p>This at best is force majeure that prohibits OpenAI with satisfying its contractual obligations that are there to comply with EU law. But contractual obligations are not the only control organizations have to ensure compliance with EU law, so this is not a defense.</p>
]]></description><pubDate>Fri, 06 Jun 2025 11:13:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=44199691</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=44199691</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44199691</guid></item><item><title><![CDATA[New comment by shortsunblack in "OpenAI slams court order to save all ChatGPT logs, including deleted chats"]]></title><description><![CDATA[
<p>OpenAI is breaching relevant laws that regulate data protection. Being compelled by a foreign power, for instance, are not grounds for data processing under GDPR.<p>OpenAI has not started to "be incompliant" with GDPR with this order, yes. More like OpenAI was always incompliant because it does not have relevant controls installed that mitigates extraterritorial tendencies of US law.<p>Regardless of legality of retention this order brings, them not notifying their users (the court did not compel them to hide this from their users (no gag order is in place) about this material change of data processing, could be constituted as breach of various consumer protection laws, misrepresentation, unfair dealing, false advertising and related.</p>
]]></description><pubDate>Fri, 06 Jun 2025 11:11:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=44199671</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=44199671</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44199671</guid></item><item><title><![CDATA[New comment by shortsunblack in "OpenAI slams court order to save all ChatGPT logs, including deleted chats"]]></title><description><![CDATA[
<p>The order mandates retention of all user data, even of non-Americans. This is a massive extraterritorial overreach and a highlight of how US law has zero regard to data protection as a fundamental human right. As if there were not enough concerns about US cloud providers already.</p>
]]></description><pubDate>Fri, 06 Jun 2025 11:06:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=44199645</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=44199645</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44199645</guid></item><item><title><![CDATA[New comment by shortsunblack in "Docs – Open source alternative to Notion or Outline"]]></title><description><![CDATA[
<p>And United States still has regulations. Chevron doctrine is not a thing in Europe and European institutions do not get captured by NIMBYs when industry wants to build a railroad, a house or an apartment complex. There are no hundreds of governmental organizations demanding you impact assessments and environmental studies.<p>For crying out loud, as an American you cannot work on your own house, since a lot of labour is licensed (electrical work, etc) and taped in red.<p>The regulation Americans talk of in disparaging way is always the regulation that shifts and allows consumer/user surplus.</p>
]]></description><pubDate>Sun, 16 Mar 2025 15:54:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=43379990</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=43379990</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43379990</guid></item><item><title><![CDATA[New comment by shortsunblack in "Deploy from local to production (self-hosted)"]]></title><description><![CDATA[
<p>Cloud init/Cloud config is a standard way to provision Linux hosts. It is slowly being outcompeted by Ignition and the friends, though.</p>
]]></description><pubDate>Sat, 08 Mar 2025 22:46:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=43304275</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=43304275</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43304275</guid></item><item><title><![CDATA[New comment by shortsunblack in "AI systems with 'unacceptable risk' are now banned in the EU"]]></title><description><![CDATA[
<p>EU law largely does not regulate national security matters of the states. Though that justification is limited per international law (such as ECHR, which is the basis of many anti-government surveillance rulings by CJEU). All European Union members are part of ECHR because that is a pre-requisite for EU membership.<p>But ECHR is not part of EU law, especially it is not binding on the European Commission (in the context of it being a federal or seemingly federal political executive). This creates a catch-22 where member states might be violating ECHR but are mandated by EU law, though this is a very fringe consequence arising out of legal fiction and failed plans to federalize EU. Most recently, this legal fiction has become relevant in Chat Control discourse.<p>Great Britain and Poland have explicit opt-outs out of some European law.</p>
]]></description><pubDate>Tue, 04 Feb 2025 01:57:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=42926533</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42926533</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42926533</guid></item><item><title><![CDATA[New comment by shortsunblack in "AI systems with 'unacceptable risk' are now banned in the EU"]]></title><description><![CDATA[
<p>You cannot barter with fundamental human rights, which right to data protection is (as per Charter of Fundamental Rights of the European Union), the same way you cannot barter yourself into slavery, even if you insist you are willing and consenting. By what precedent? By the precedent of the state being sovereign in enacting law.</p>
]]></description><pubDate>Tue, 04 Feb 2025 01:51:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=42926488</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42926488</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42926488</guid></item><item><title><![CDATA[New comment by shortsunblack in "AI systems with 'unacceptable risk' are now banned in the EU"]]></title><description><![CDATA[
<p>Free as in free from coercion. And GDPR has clear language of 'no detriment'.</p>
]]></description><pubDate>Tue, 04 Feb 2025 01:50:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=42926463</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42926463</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42926463</guid></item><item><title><![CDATA[New comment by shortsunblack in "AI systems with 'unacceptable risk' are now banned in the EU"]]></title><description><![CDATA[
<p>It's called dark patterns and malicious compliance
.
The annoying banners in particular, were designed by IAB Tech Lab, which is an industry front for adtech/martech companies.</p>
]]></description><pubDate>Tue, 04 Feb 2025 01:49:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=42926455</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42926455</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42926455</guid></item><item><title><![CDATA[New comment by shortsunblack in "AI systems with 'unacceptable risk' are now banned in the EU"]]></title><description><![CDATA[
<p>Consent is never "needed". Consent is one of many legal bases that allows for data processing to take place. If other legal bases than consent do not apply, the industry can use "consent" as a get out of jail card. Consent as a legal basis was heavily lobbied by Big Tech.<p>If even consent does not apply, then the data shall not be processed. That's the end of it.</p>
]]></description><pubDate>Tue, 04 Feb 2025 01:48:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=42926443</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42926443</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42926443</guid></item><item><title><![CDATA[New comment by shortsunblack in "AI systems with 'unacceptable risk' are now banned in the EU"]]></title><description><![CDATA[
<p>By which data is that clear? If anything, GDPR has lead to greater investment in areas that actually matter. Zero knowledge proofs, pseudonymization techniques, user friendly open-source SaaS products such as NextCloud.</p>
]]></description><pubDate>Tue, 04 Feb 2025 01:45:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=42926411</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42926411</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42926411</guid></item><item><title><![CDATA[New comment by shortsunblack in "Sigstore: Making sure your software is what it claims to be"]]></title><description><![CDATA[
<p>See Keylime for this.</p>
]]></description><pubDate>Tue, 21 Jan 2025 22:53:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=42786196</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42786196</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42786196</guid></item><item><title><![CDATA[New comment by shortsunblack in "Supreme Court upholds TikTok ban, but Trump might offer lifeline"]]></title><description><![CDATA[
<p>The ban is nothing more than an attempt to abridge speech and deny the youth voice in politics. TikTok increasingly has become refuge from censorship occurring on other platforms (see the recent issues). The lawmakers indicated that is the reason for the ban.<p>If United States was honestly concerned about data protection and privacy, it would devise a federal privacy law that models GDPR. They are trying to pass a federal law now, but it is seriously flawed and they are trying to preempt more user-centric privacy laws of the states.<p>Finally, such partisan, targeted and unprincipled bans reenforce that EU's approach on issues such as data transfers abroad (see Schrems 1 and Schrems 2) is perfectly valid. EU has a principled regulation, which gets evaluated by free and democratic courts. The outcomes are what they are. Not partisan and discriminatory, as they are here.</p>
]]></description><pubDate>Sat, 18 Jan 2025 15:38:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=42749103</link><dc:creator>shortsunblack</dc:creator><comments>https://news.ycombinator.com/item?id=42749103</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42749103</guid></item></channel></rss>