Hacker News: tester457

2-Click Remote Code Execution in Meccha Chameleon

tester457 — Fri, 03 Jul 2026 15:56:06 +0000

Article URL: https://khaelkugler.com/blogs/meccha_chameleon.html

Comments URL: https://news.ycombinator.com/item?id=48776527

Points: 2

# Comments: 0

New comment by tester457 in "State of Kdenlive"

tester457 — Sat, 18 Apr 2026 19:46:13 +0000

I wish Kdenlive had an api so that I could improve the QOL for myself.

New comment by tester457 in "Bitmap fonts make computers feel like computers again"

tester457 — Thu, 09 Apr 2026 20:49:44 +0000

I rather see the prompt they used to make that article, than the article itself. It overstayed it's welcome to say nothing.

New comment by tester457 in "Charm Ruby – Glamorous Terminal Libraries for Ruby"

tester457 — Tue, 30 Dec 2025 18:06:19 +0000

Charm's tui library is fantastic. This combined with ruby's ease of use will make writing cli apps more fun!

New comment by tester457 in "Hashcards: A plain-text spaced repetition system"

tester457 — Sun, 14 Dec 2025 21:01:10 +0000

> Your performance and review history is stored in an SQLite database in the same directory as the cards.

Do you use Syncthing or something else to sync your performance history between devices?

New comment by tester457 in "CLI tool to check the Git status of multiple projects"

tester457 — Thu, 20 Nov 2025 13:01:14 +0000

I like mani. It's a cli that lets you run any command on all of your projects or a tagged subset of them.

  $ mani exec --all --output table --parallel 'find . -type f | wc -l'
  
   Project            | Output
  --------------------+--------
   example            | 31016
   pinto              | 14444
   dashgrid           | 16527
   template-generator | 42

The custom commands you define also have shell completions. It's like a just command runner, but for all of your projects.

https://github.com/alajmo/mani

New comment by tester457 in "Free software scares normal people"

tester457 — Thu, 30 Oct 2025 18:55:28 +0000

How are we so blind to these beginner hurdles?

Few people are able to see through the eyes of a beginner, when they are a master.

The 4th one is a pain to teach. Every other file and directory has spaces... so I encourage liberal use of the TAB key for beginners.

New comment by tester457 in "Ivy League psychologist: 'Bring your whole self to work' is bad advice"

tester457 — Fri, 24 Oct 2025 17:10:00 +0000

It depends on the workplace and the person.

Some workplaces:

- penalize black women for having natural hairstyles like locs

- make Sikhs remove turbans

- deny chosen names and pronouns

There are entire swaths of groups who can't be their authentic selves.

New comment by tester457 in "Scripts I wrote that I use all the time"

tester457 — Thu, 23 Oct 2025 00:02:13 +0000

The defaults are unbearable. I prefer using chezmoi to feel at home anywhere. There's no reason I can't at least have my aliases.

I'd rather take the pain of writing scripts to automate this for multiple environments than suffer the death by a thousand cuts which are the defaults.

New comment by tester457 in "Scripts I wrote that I use all the time"

tester457 — Wed, 22 Oct 2025 20:28:42 +0000

I am not the author, but my bet is that he didn't know of its existence.

The best part about sharing your config or knowledge is that someone will always light up your blind spots.

New comment by tester457 in "Less is safer: Reducing the risk of supply chain attacks"

tester457 — Sat, 20 Sep 2025 00:08:43 +0000

It is resource intensive.

It's not a problem on pc, but an obsidian vault with thousands of notes can have a laggy startup on mobile, even if you disable plugins.

Users sidestep this issue with quick capture plugins and apps, but I wish there was a native stripped-down version of obsidian.

New comment by tester457 in "Valve confirms credit card companies pressured it to delist certain adult games"

tester457 — Fri, 18 Jul 2025 23:42:02 +0000

The same post by steamdb is on twitter too, they are a steam game tracker and database.

New comment by tester457 in "Blender 4.5 LTS"

tester457 — Tue, 15 Jul 2025 17:33:55 +0000

Always support open source when you can, even if you use proprietary software instead of Blender.

Supporting open source creates competition for your paid alternative, so they're forced to give you a better product or a better deal.

New comment by tester457 in "You Might Think of Shrimp as Bugs of the Sea: But Bugs Are Shrimp of the Land"

tester457 — Fri, 11 Apr 2025 22:03:07 +0000

Therefore with the right preparation some bugs might become delicacies.

New comment by tester457 in "Why “alias” is my last resort for aliases"

tester457 — Wed, 05 Mar 2025 13:53:48 +0000

For more power try fish's abbreviations.

With `--position anywhere` you can expand an abbreviation even if it's not at the beginning of a line.

New comment by tester457 in "Hacker infects 18,000 "script kiddies" with fake malware builder"

tester457 — Sat, 25 Jan 2025 21:42:36 +0000

One home is worth less than dozens of homes that bomb maker can damage. The same is true for script kiddies.

New comment by tester457 in "TikTok says it is restoring service for U.S. users"

tester457 — Mon, 20 Jan 2025 14:26:05 +0000

No, because reading is more healthy than mindlessly watching short videos. There is only so much content on the front page, it's not a slot machine you can pull for hours like tiktok.

New comment by tester457 in "Unexpected Keyboard"

tester457 — Fri, 13 Dec 2024 19:05:52 +0000

You can create your own keyboard layouts in this app.

New comment by tester457 in "Unexpected Keyboard"

tester457 — Fri, 13 Dec 2024 19:04:54 +0000

Unexpected Keyboard allows you to create your own keyboard layouts so I prefer it.

Listmonk – Open-source, High-performance, Self-hosted, Single-binary Newsletter