Hacker News: speedstyle

New comment by speedstyle in "Firecracker VM Escape: PwnEscape Part 2"

speedstyle — Sat, 07 Nov 2026 12:30:48 +0000

I actually do use Firecracker without a network adapter, though vsock/virtio could have remaining issues

New comment by speedstyle in "MS Paint Remote Code Execution Vulnerability"

speedstyle — Fri, 06 Nov 2026 14:27:22 +0000

At the moment I just use Zed, or I imagine I'd be fine with Sublime. When I used Jetbrains/VSCode, I would grab Notepad/Notepad++ when I didn't want to wait for them to open, set up a project, etc. But if something 'heavyweight' is quicker than notepad, and the features don't get in my way, I don't need anything else. In fact I still appreciate the extra functionality with those one-off text/data/scripts - format, regex replace, diff, occasionally even LSP like shellcheck

New comment by speedstyle in "sshole"

speedstyle — Fri, 06 Nov 2026 12:41:05 +0000

OP suggests it was always fallible, they switched to a sentinel to mitigate callers dereferencing null, which they wouldn't have with Option/Result. https://git.musl-libc.org/cgit/musl/commit/?id=b3c4cc12

But in your version, you can't preserve backwards compatibility, making an infallible function fallible is a breaking change. For something comparable to libc you might want to (eg Rust std still has mem::uninitialized), but even with security issues, I feel like people would be more inclined to deprecate for a new function (or panic, which does have its own problems).

A good type system also means things are written with better forwards compatibility, and can be safely changed later. The Rust equivalent to `crypt` likely wouldn't exist: a low-level library would just provide hash functions, leaving callers to mitigate DOS etc; a broader library might return some opaque handle with equality/serialization, which you couldn't try to compare to a passwordless user; a high-level library would parse the account store itself. None of these really need to change in incompatible ways, they have all the information to add features and fixes at their own level of abstraction.

New comment by speedstyle in "Gemini 4 Carbon"

speedstyle — Wed, 28 Oct 2026 17:11:47 +0000

'Coming soon'. 2027 perhaps?

New comment by speedstyle in "Tailscale SSH: Investigation and remediation update"

speedstyle — Wed, 28 Oct 2026 17:00:14 +0000

Of course it is, if you rely on that boundary. The 'consumer' use of tailscale is just as a reverse proxy, and that's how I figured GGP sees it. I don't have anyone on my tailnet, and when I did they didn't have ssh keys, and if they did I imagine there'd be many paths to privilege escalation, certainly it's a bigger surface than sshd. So I was clarifying it seems like an escalation from authorized execution to privileged execution, and not e.g. from unauthorized users to RCE

New comment by speedstyle in "Tailscale SSH: Investigation and remediation update"

speedstyle — Tue, 27 Oct 2026 23:45:34 +0000

I gather the bug allows people you've explicitly authorized to ssh into some account on your machine, to access more than that account can. So if you only use ssh yourself, or only give ssh keys for users with sudo, or only to people you trust not to exploit this, or if other vulnerabilities allow local shell users to escalate, or if you only use tailscale for port forwarding, then you're unaffected. Arguably even less exposed than a public openssh instance, though I can't say I have any issue doing that

New comment by speedstyle in "Around a dozen banking apps began specifically permitting GrapheneOS"

speedstyle — Sat, 24 Oct 2026 15:04:01 +0000

I got a replacement widget recently, the website pushes the app but when I asked in branch they gave me one without even asking my name. I had to wait on the phone to register the new serial number, maybe I could've done that in person too, but it lasted years (and multiple phones) so I don't mind too much

New comment by speedstyle in "Linux on iPhone 11"

speedstyle — Tue, 13 Oct 2026 10:12:42 +0000

They shouldn't be locked the day you buy them.

New comment by speedstyle in "The gap in shared understanding of LLM capability is widening"

speedstyle — Mon, 12 Oct 2026 10:11:16 +0000

2% tolerance is not the same as 2% failure rate

New comment by speedstyle in "500B Tokens Later: Letting AI Agents Decompile a First-Person Shooter"

speedstyle — Sun, 11 Oct 2026 04:16:37 +0000

Yeah, I don't think the problem needed billions of tokens

New comment by speedstyle in "We want you to build the next Git platform on Cloudflare"

speedstyle — Sun, 04 Oct 2026 02:11:11 +0000

Well, that part is easy.

New comment by speedstyle in "Make Tmux the OS"

speedstyle — Sat, 03 Oct 2026 13:27:10 +0000

Not everything is trying to be a walled garden. Only 2 apps on my machine are nonfree, and not productivity ones I would care to integrate like this. But yes it's fundamentally hard (and I don't think their suggestions are great)

New comment by speedstyle in "GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price"

speedstyle — Wed, 30 Sep 2026 01:17:51 +0000

(More precisely, doesn't have the reasoning from when the code was written)

New comment by speedstyle in "So long Google, and thanks for all the nudes"

speedstyle — Tue, 29 Sep 2026 10:15:22 +0000

It's not that apps should be websites, but that you should be able to load apps as freely as websites.

New comment by speedstyle in "When did Google get so weird?"

speedstyle — Tue, 29 Sep 2026 10:01:50 +0000

uBlock Origin has a built-in option for AI overviews (among other things). Settings > Filter lists > Annoyances > AI widgets

New comment by speedstyle in "Joseph Szabo’s pictures of American adolescents"

speedstyle — Tue, 29 Sep 2026 09:49:14 +0000

I'm British and I think it's quite different.

New comment by speedstyle in "GrapheneOS – When an app is slow"

speedstyle — Tue, 29 Sep 2026 09:32:21 +0000

Leaflet is (generally) for streaming image tiles, OsmAnd renders a set of geographical features itself. But yes, it could do so more efficiently

New comment by speedstyle in "Coding is not solved"

speedstyle — Tue, 29 Sep 2026 09:01:10 +0000

Yes, we need abstraction. X being written in Y doesn't mean you can build the same systems, with the same adaptability, reliability, and performance, within the same time and cost.

Obviously there are also unnecessary differences between tools, and hiring shouldn't focus on easily transferred skills

New comment by speedstyle in "Platform-independent SIMD in Go"

speedstyle — Fri, 25 Sep 2026 16:56:26 +0000

Races can be memory safe (they are in Java and Ocaml), but in Go they can indeed cause UB.

https://go.dev/ref/mem#restrictions:~:text=such%20races,corr...

https://www.ralfj.de/blog/2025/07/24/memory-safety.html (I don't agree with everything here, but it's a very thorough explanation)

New comment by speedstyle in "Toyota is taking the Corolla electric"

speedstyle — Fri, 25 Sep 2026 12:48:45 +0000

Efficiency, output per input, is only relevant for similar inputs. An ICE being more efficient means proportionally lower costs and emissions, but like you said, an electric drivetrain being 90% efficient is less informative than a well-to-wheel comparison.

Similarly, I think it's unhelpful to just expand it to primary energy. What's the efficiency of a wind turbine? In 50 countries already, a 100% efficient ICE would emit more than an EV! The reason for efficiency here was costs and emissions, so compare those.