Hacker News: titularcomment

New comment by titularcomment in "I Stored a Website in a Favicon"

titularcomment — Sat, 20 Jun 2026 09:59:34 +0000

Painful read.

Related interesting project: https://github.com/EtherDream/web2img

New comment by titularcomment in "I hate compilers"

titularcomment — Thu, 18 Jun 2026 14:03:16 +0000

I believe poisonous loops of non-sense text are the best choice in terms of LLM capabilities and human distinguishing potential; the next iteration could be non-sense with reasonably intact grammar and content. At the very least, show some content whilst doing the PoW (isn't the point rising computational costs? Give me something like YouTube video decryption instead of having me wait at least) OR use the PoW for some useful protein-folding, finding the next prime, or an alternative monetization scheme.

New comment by titularcomment in "Cloudflare Turnstile requiring fingerprintable WebGL"

titularcomment — Sun, 31 May 2026 17:18:19 +0000

My guess is its an implementation error, not an hardware limitation. I have two 10-year-old devices and one passes instantaneously while the other halts for a good half minute every time.

New comment by titularcomment in "Someone used my open source project to phish people"

titularcomment — Fri, 29 May 2026 18:08:36 +0000

Abuse such as this wasn't uncommon before, email platforms with lax ratelimits have always been abused through their clients' unsecured infrastructure. The only difference in post-LLM world is the amount of platforms as well as clients popping up in this space with dubious code quality that may lead to more attacks as;

a) having an email-sending product typically meant you had a project with a lot of effort invested into it as well as knowledge

b) the models, tokens spent and review done differs in the world of vibecoding and there is a race to the bottom to produce, produce, produce. Quantity > quality

New comment by titularcomment in "Someone used my open source project to phish people"

titularcomment — Fri, 29 May 2026 17:57:52 +0000

Dots and periods. Everywhere. So many. There is no paragraph — its sentences all the way down.

That made me think if the project is entirely vibecoded as well.

Even for a project manager without network access, hosting flawed software on your LAN can only get you so far.

New comment by titularcomment in "Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibc"

titularcomment — Sun, 10 May 2026 11:17:13 +0000

I believe new (programming) languages will emerge both for LLMs to parse and take instructions from as well as for them to generate code in. The former is because English is a nuanced language evolved for human usage which the LLMs don't quite need, with the only advantage of it being a metric ton of training material. Same goes for Rust, Go and other languages LLMs do primarily well coding in, which all have concepts geared towards human convenience.

New comment by titularcomment in "Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibc"

titularcomment — Sat, 09 May 2026 23:17:18 +0000

I agree. From the get-go, Bun was apparent in its design philosophy: we do everything you'd ever want; runtime, bundler, test suite, package manager, all in a new breaking patch each week. With each and every one blowing the established competition out, better, faster and stronger. But it was glaringly obvious that they'd do anything but Keep It Simple Stupid. It was obvious that the only production environment it would see the light of the day in the near future would be YC startups burning one after another at the speed of an accelerant. Now, they're past the point of no return.

New comment by titularcomment in "Google broke reCAPTCHA for de-googled Android users"

titularcomment — Fri, 08 May 2026 21:59:46 +0000

the fact that this works, as well as cloudflare having a literal web scraping tool available as another product honestly makes my blood boil.

New comment by titularcomment in "Agents can now create Cloudflare accounts, buy domains, and deploy"

titularcomment — Thu, 07 May 2026 11:51:56 +0000

Asking out of curiosity, have you had material success with this technique?

New comment by titularcomment in "Agents can now create Cloudflare accounts, buy domains, and deploy"

titularcomment — Thu, 07 May 2026 11:46:49 +0000

> At least an AI has a chance to ingest it all

Solving humanity's issues, one more issue at a time

New comment by titularcomment in "Agents can now create Cloudflare accounts, buy domains, and deploy"

titularcomment — Thu, 07 May 2026 11:42:01 +0000

This particular example is not contradictory if you think about it, its essentially a protection racket.

New comment by titularcomment in "Today I've made the difficult decision to reduce the size of Coinbase by ~14%"

titularcomment — Wed, 06 May 2026 01:35:16 +0000

Maintaining software is like 80% of the job.

New comment by titularcomment in "Security through obscurity is not bad"

titularcomment — Sun, 03 May 2026 23:09:11 +0000

Obscurity can be combined with security for much better results. Machines as well as AI in extension thrives off patterns and making illogical off-pattern decisions is usually to the benefit of the defender, not the attacker. As you said, the attacker has a wide attack surface to cover while the defender only has to fortify his home NAT. E.g. port knocking may very well throw off the hoard of scanners on the wide net simply because its not standart and the combination is known only to you. Similarly, fail2ban may not work as well on a standart SSH port, because every attacker is going to hammer that and one may get your misconfigured password root login right.

Now, in both instances, the obscurity provided does not necessarily cure your infrastructure's vulnerabilities, a dedicated attacker wouldn't have a single problem with either of these. But for someone who hammers the whole internet in a dim hope of finding another Wordpress server from 2017, or the latest flawed online security cam, your disguise is as good as perfect.