Hacker News: tatersolid

New comment by tatersolid in "Claude reveals ECDSA curve origins"

tatersolid — Sat, 17 Oct 2026 11:13:49 +0000

I know it has no security impact in this case, but isn’t it odd a bunch of cryptographers would choose a weak PRNG seeded by the date for a task like this?

Even state lotteries back then used physical ping pong balls and a nothing-up-my-sleeve show after the evening news.

The prolonged conspiracy theories until this discovery make some sense… not having a ceremony around anything supposedly “random” is unexpected, even back in the 1990s.

Abliterated models can get you pwned

tatersolid — Fri, 16 Oct 2026 15:19:38 +0000

Article URL: https://projectdiscovery.io/research/how-abliterated-models-can-get-you-pwned

Comments URL: https://news.ycombinator.com/item?id=50119505

Points: 2

# Comments: 0

New comment by tatersolid in "Redesigning source control at Anthropic"

tatersolid — Wed, 14 Oct 2026 03:06:56 +0000

Based on the features and design, did Anthropic just re-invent and vibe-code Subversion?

New comment by tatersolid in "Why isn't the industry freaking out about DeepSeek 4.1 Flash?"

tatersolid — Tue, 13 Oct 2026 12:04:46 +0000

> log parsing

There’s your problem right there. You’re lighting money on fire using an LLM to do a token-intensive deterministic task.

Measuring Cryptanalytic Effort

tatersolid — Mon, 12 Oct 2026 10:57:11 +0000

Article URL: https://bitsofwork.org/

Comments URL: https://news.ycombinator.com/item?id=50054506

Points: 1

# Comments: 0

New comment by tatersolid in " prevents me from logging into Vanguard"

tatersolid — Sat, 03 Oct 2026 13:34:35 +0000

To minimize annoyance I’ve set my password manager to generate 16 character random passwords by default. This seems to be the sweet spot for the USA; I don’t recall recently encountering a site with a min >16 or a max <16. Assuming 85 chars that’s ~102 bits of entropy so plenty strong and compatible with almost every site (excepting the rare idiots that ban repeating characters or some subset of symbols).

Llms.txt: agent-optimization wishful thinking

tatersolid — Wed, 30 Sep 2026 02:23:05 +0000

Article URL: https://www.phpied.com/llms-txt-agent-optimization-wishful-thinking/

Comments URL: https://news.ycombinator.com/item?id=49903627

Points: 3

# Comments: 0

New comment by tatersolid in "DeepSeek Elastic Compute (DSec)"

tatersolid — Tue, 29 Sep 2026 03:39:23 +0000

General Magic failed with all the talent and all the resources. Cautionary Tales podcast featured General Magic in a recent episode; the basic argument was no constraints led to no focus.

New comment by tatersolid in "Ask HN: Why were OpenAI, Claude, and Grok simultaneously down?"

tatersolid — Sat, 05 Sep 2026 11:45:09 +0000

My kids stopped saying “six seven” about a year ago. I still have no clue what that was about.

New comment by tatersolid in "A Beginner's Deep Dive Guide to Entra Passkeys"

tatersolid — Thu, 03 Sep 2026 11:28:15 +0000

> sites are extremely pushy about replacing your perfectly good password with a passkey

Your password was never “perfectly good” because it is easily phished. Even with TOTP or a push notification app as MFA.

Phishing is an huge risk even for “expert” technical users, and such phishing is the cause of a huge number of breaches and supply-chain attacks.

FBI Probes Service Selling 153M+ Drivers Licenses

tatersolid — Tue, 01 Sep 2026 23:17:43 +0000

Article URL: https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/

Comments URL: https://news.ycombinator.com/item?id=49529621

Points: 485

# Comments: 299

New comment by tatersolid in "A CVE Dispute"

tatersolid — Tue, 01 Sep 2026 08:59:34 +0000

> most systems have the same username and passwords (customers never change the defaults)

That is horrifying and 100% on your dev team. You should not ship default credentials, instead require unique creds to be set at install. Ship an update which required default creds to be changed.

Who do you think you are, Cisco?

New comment by tatersolid in "I used AWS cognito for a startup. I wouldn't do it again"

tatersolid — Fri, 28 Aug 2026 20:37:37 +0000

Entra External ID does not allow export of password hashes.

It actually doesn’t allow a whole shitload of stuff that should be there by now.

For example, it supports passkeys, but has no UI for adding or managing passkeys. You have to build that yourself. In a separate app, on a separate domain.

New comment by tatersolid in "Wi-Fi 8 is the first wireless upgrade in years that isn't chasing speed"

tatersolid — Sun, 23 Aug 2026 13:09:33 +0000

USB Ethernet dongles generally suck. Even “name brand” dongles are cheap crap from contract manufacturers.

New comment by tatersolid in "Californians' data deletion requests, DROP, become enforceable Aug. 1"

tatersolid — Mon, 03 Aug 2026 16:20:05 +0000

He’s a Florida Man. Do not underestimate his capacity to defile himself.

https://en.wikipedia.org/wiki/Florida_Man

New comment by tatersolid in "Atomarine: Nuclear Data Centers at Sea"

tatersolid — Thu, 30 Jul 2026 11:01:27 +0000

Current nuclear-powered ships are run by the world’s premier naval powers and protected by their own stealth or a huge array of armed escort ships.

Have these guys factored in the cost of a task force of protective missile frigates, subs, and destroyers at each site?

The consumable space data center

tatersolid — Tue, 28 Jul 2026 21:25:03 +0000

Article URL: https://networkingnerd.net/2026/07/28/the-consumable-space-data-center/

Comments URL: https://news.ycombinator.com/item?id=49090117

Points: 3

# Comments: 0

Google and Reddit do not own the Internet, web scraper says after court win

tatersolid — Tue, 28 Jul 2026 12:55:41 +0000

Article URL: https://arstechnica.com/tech-policy/2026/07/google-wont-give-up-odd-war-against-ai-web-scraping-despite-court-loss/

Comments URL: https://news.ycombinator.com/item?id=49083086

Points: 10

# Comments: 0

New comment by tatersolid in "IRGC claims it destroyed Amazon's Bahrain data center"

tatersolid — Tue, 28 Jul 2026 02:41:55 +0000

It’s a rehash of a conflict from abut 3000 BCE onwards. Who really is the “historical people” of the land that is now Palestine/Israel has been the subject of bloody conflict for 5000 years.

New comment by tatersolid in "Cloudflare R2 is now Generally Available (2022)"

tatersolid — Wed, 22 Jul 2026 23:49:43 +0000

So this is strange, it popped up on Cloudflare’s RSS feed so I thought it was new. I’m guessing they edited the article but haven’t been able find a a diff against the original 2022 version.