Hacker News: theK

New comment by theK in ".name Termination"

theK — Thu, 03 Sep 2026 17:51:25 +0000

Never heard of DNTLS, thanks for sharing. I skimmed the Website and am a bit uncertain what the ai angle is. Shouldnt naming be, well, just naming?

New comment by theK in "Over 400 Linux CVEs published in the last 24 hours alone"

theK — Tue, 21 Jul 2026 15:06:31 +0000

> CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked.

You are right, its over.

On a more serious note. Yes and no. The kernel is secure. It is probably the most scrutinized piece of software in existence. LLMs will find things but most probably they just will help contributors fix bugs.

New comment by theK in "Kimi Work"

theK — Mon, 20 Jul 2026 20:57:31 +0000

I think it can safely be argued that (only) good UX but also great marketing are the reason of that.

New comment by theK in "TLS certificates for internal services done right"

theK — Thu, 09 Jul 2026 21:33:37 +0000

I never understood the issue with DNS-01. if you have a process that you trust to maintain a zone's TLS identity what is the big deal about letting it control a record in that zone?

New comment by theK in "Show HN: Microsoft releases Flint, a visualization language for AI agents"

theK — Wed, 08 Jul 2026 18:47:13 +0000

> Json as a common language for human in visualization has been around for a while

Plant, Mermaid, Graphviz are all declarative textual representations designed for human authoring, JSON is made for tools. Its not a criticism just a statement that if interop across agent and human was intended this is not the simplest option.

New comment by theK in "Chatto is now open source"

theK — Wed, 08 Jul 2026 18:44:14 +0000

Yeah, there are definitely valid contexts for hosting chat like this. E2EE has the benefit of not needing to trust the host, which I personally like but I can see this being fine or even wanted for lots of cases.

New comment by theK in "Show HN: Microsoft releases Flint, a visualization language for AI agents"

theK — Wed, 08 Jul 2026 18:14:10 +0000

> requiring them to explicitly make visual decisions that are supposed to be handled by a good compiler

Isnt graphviz there for the same reason?

Edit: I see it is using JSON as the declaration language, I am OK with llms being "good at json" but a syntax also consumable by humans it is not!

New comment by theK in "Chatto is now open source"

theK — Wed, 08 Jul 2026 17:39:36 +0000

So encrypted at rest but no E2EE, did I read that right?

New comment by theK in "Podman v6.0.0"

theK — Fri, 03 Jul 2026 09:51:10 +0000

> for years

Don't know about that. I did a ddg search "using docker compose (v2) plugin with podman" I do get some tutorials but they all are from 2026. This also aligns with my experience from late 2024 where you where typical advised to use `podman compose` or the compose script.

New comment by theK in "Podman v6.0.0"

theK — Fri, 03 Jul 2026 05:36:27 +0000

The CLI plugin or the script? Last time I checked the podman CLI did not support docker CLI plugins and the script is EOL since years.

New comment by theK in "Podman v6.0.0"

theK — Fri, 03 Jul 2026 05:34:43 +0000

I spent about a week last year trying to move from docker+compose plugin to a podman hosted variant. It has issues on multiple stages of the lifecycle as I mentioned in my original comment. Mac users lose fs events, a lot of compose.yml features are flaky (post start events), buggy (reset and import), or just not implemented (don't remember the exact features).

If you use podman and have no issues that is awesome but your use case is probably quite narrow, you are most probably on a non fedora based Linux and keep compose usage to a minimum.

New comment by theK in "Podman v6.0.0"

theK — Thu, 02 Jul 2026 20:04:31 +0000

Last time I checked podman compose was only a superficial docker compose equivalent. Also stuff like inotify seems to randomly break a lot on the podman side.

I'd love to be able to recommend people use podman but not having a good docker compose compatibility and missing inotify on volumes makes the DX just too problematic.

New comment by theK in "Physical disc production ending in Jan 2028 for new games on PlayStation"

theK — Wed, 01 Jul 2026 17:56:21 +0000

Don't requirements like online server based verification and advancing crypto make it almost impossible to pirate these games?

New comment by theK in "Anonymous GitHub account mass-dropping undisclosed 0-days"

theK — Sun, 28 Jun 2026 05:20:01 +0000

I don't know how this works nowadays but when I got taught to write (the pencil and paper kind) and specifically when I got taught syntax, it was "if you want to introduce a clause that explains or expands upon something that precedes it, you draw a small horizontal line" no mention of special chars, Unicode or whatsoever. So why is it so special other than being authors fancy?

New comment by theK in "Anonymous GitHub account mass-dropping undisclosed 0-days"

theK — Sat, 27 Jun 2026 21:08:47 +0000

I understand the sentiment with the tradesman example. I would argue that there are a multitude of ways to care about or take pride in one's trade and emdashing the floor is just one of them.

New comment by theK in "Anonymous GitHub account mass-dropping undisclosed 0-days"

theK — Sat, 27 Jun 2026 21:05:33 +0000

Leaving out apostrophes isn't the same though, is it? If you leave out apostrophes you have syntactic effects while a (sortof)dash is still sort of a dash?

New comment by theK in "Anonymous GitHub account mass-dropping undisclosed 0-days"

theK — Sat, 27 Jun 2026 19:02:31 +0000

What is the typical motivation to start using em-dashes?

Why go the extra way to have a slightly elongated dash when a normal one would just as well do the job?

I might be conpletely off here but I've never seen a situation where using a normal dash where a long one should be causes any sort of syntactic trouble.

New comment by theK in "Bootimus – A Self-Contained PXE and HTTP Boot Server"

theK — Sat, 20 Jun 2026 13:47:26 +0000

Cool project! I had mistral vibecode me something similar (split into two services and run via docker compose) just a few weeks ago! I still have dome nitpicks with the result, maybe I'll switch my stack over to your solution!

New comment by theK in "Volkswagen started blocking GrapheneOS users"

theK — Sat, 20 Jun 2026 12:42:59 +0000

That's definitely a thing in the corporate world. It doesn't even have to be the project lead, sometimes it comes via stakeholders, some times its even well meaning devs. It is a difficult balance to strike if you want to "only be reasonably safe" whereas cargo culting all security features might take a bit of time but you now can say "hey we did everything"

[]: everything may very well not be a thing but people like to pretend it is

New comment by theK in "Why thinking out loud with someone beats thinking alone"

theK — Thu, 18 Jun 2026 20:26:14 +0000

Pangram is a cool idea. It can be wildly wrong though.