Hacker News: vitorsr

New comment by vitorsr in "Cross-Language Detection of Malicious Packages in npm and PyPI (2023) [pdf]"

vitorsr — Sun, 14 Jun 2026 12:09:22 +0000

Presented at ASAC 2023. See also:

https://dl.acm.org/doi/10.1145/3627106.3627138

Cross-Language Detection of Malicious Packages in npm and PyPI (2023) [pdf]

vitorsr — Sun, 14 Jun 2026 12:07:50 +0000

Article URL: https://www.acsac.org/2023/files/web/slides/ladisa-69-crosslanguagedetectionmalicious.pdf

Comments URL: https://news.ycombinator.com/item?id=48526430

Points: 2

# Comments: 1

New comment by vitorsr in "Show HN: Homebrew 6.0.0"

vitorsr — Thu, 11 Jun 2026 21:42:36 +0000

There is also the possibility of using Toolbx (formerly [Fedora] Toolbox), distrobox or a container, and the underlying container's package manager. The issue then ends up being about how ergonomic it is to manage a separate guest system (and have to drop into it anytime we wish to use a binary that is unavailable in the host).

New comment by vitorsr in "Show HN: Homebrew 6.0.0"

vitorsr — Thu, 11 Jun 2026 17:48:58 +0000

Thanks for all the hard work.

We are not many [1], but Homebrew has been a great way to quickly bootstrap an environment in immutable Linux distributions.

Note that certain operating systems such as Universal Blue's Bazzite (1.28%), Bluefin (0.49%) and Aurora (0.28%) default to bundling Homebrew [2].

[1] https://formulae.brew.sh/analytics/os-version/365d/

[2] https://github.com/ublue-os/brew

New comment by vitorsr in "Are you expected to run five Python type-checkers now?"

vitorsr — Mon, 08 Jun 2026 15:20:43 +0000

I am not sure it is recommending more than it is commenting on the current state of developing public-facing APIs in Python.

The downstream users that import the package either have to ignore checking its exported types altogether, manually stub it, or have a subpar development experience to varying degrees.

This is something I saw the other day with some package that provided comprehensive stubs for an untyped library. The .pyi file was littered with comments about quirks from the numerous type checkers (five now).

New comment by vitorsr in "Should you normalize RGB values by 255 or 256?"

vitorsr — Mon, 01 Jun 2026 20:16:34 +0000

This is what I do for the former:

    floor( nextafter( 256, 255 ) * value )

New comment by vitorsr in "KDE at 30"

vitorsr — Mon, 01 Jun 2026 18:07:04 +0000

I recently installed Fedora Kinoite [1] and I have been very pleasantly surprised by how stable and performant it is. I am afraid I cannot say the same for their new KDE Linux distribution [2] which in my opinion was a bit unpolished at the time. Both are immutable desktop distributions.

The good news, I guess, is Kinoite stands to benefit from KDE Linux development because it mostly depends on Flatpak to install programs which means all of the KDE ecosystem will eventually be available at Flathub [3] as first-class citizens with reasonable maturity.

[1] https://fedoraproject.org/atomic-desktops/kinoite/

[2] https://linux.kde.org/

[3] https://flathub.org/en/apps/collection/developer/KDE/1

New comment by vitorsr in "DeepSeek makes the V4 Pro price discount permanent"

vitorsr — Fri, 22 May 2026 19:51:05 +0000

Yes. The discount was most likely a "post-market trial" of how efficient the caching works for the new generation models.

New comment by vitorsr in "Google changes its search box"

vitorsr — Tue, 19 May 2026 22:44:58 +0000

Microsoft has already gone down this road some three years ago...

https://blogs.microsoft.com/blog/2023/02/07/reinventing-sear...

New comment by vitorsr in "A few words on DS4"

vitorsr — Fri, 15 May 2026 01:52:52 +0000

Tasks are taken from commit histories in public Git repositories which defeats the purpose.

New comment by vitorsr in "Amazon to acquire Globalstar and expand Amazon Leo satellite network"

vitorsr — Wed, 15 Apr 2026 12:52:43 +0000

Or become a major investor on a largely public funded project with commitments set to start at a delayed time in order to benefit from R&D before bearing financial burden. (See [1].)

[1] https://www.ft.com/content/8e75ed31-0c72-4160-b406-1ca6aa36a...

New comment by vitorsr in "Making Wolfram tech available as a foundation tool for LLM systems"

vitorsr — Tue, 24 Feb 2026 12:13:33 +0000

Unsure if this is what the announcement is referring to:

https://resources.wolframcloud.com/PacletRepository/resource...

New comment by vitorsr in "FreeBSD doesn't have Wi-Fi driver for my old MacBook, so AI built one for me"

vitorsr — Tue, 24 Feb 2026 01:10:25 +0000

Seems very promising but then you realize the LLM behind said agent was trained on public but otherwise copyright encumbered proprietary code available as improperly redistributed SDKs and DDKs, as well as source code leaks and friends.

In fact most Windows binaries have public debug symbols available which makes SRE not exactly a hurdle and an agent-driven SRE not exactly a tabula rasa reimplementation.

New comment by vitorsr in "Zed editor switching graphics lib from blade to wgpu"

vitorsr — Fri, 13 Feb 2026 15:03:54 +0000

Please elaborate, I am curious to why would you think WebGPU would meaningfully beat their Metal/DirectX renderers.

New comment by vitorsr in "Start all of your commands with a comma (2009)"

vitorsr — Sat, 07 Feb 2026 12:01:00 +0000

Nice although I think the ASCII comma feels wrong as part of a filename even if for purely aesthetic reasons.

If we want to stay within (lowercase) alphabetic Latin characters I think prefixing with the least common letters or bigrams that start a word (x, q, y, z, j) is best.

`y' for instance only autocompletes to `yes' and `ypdomainname' on my path.

Choosing a unique bigram is actually quite easy and a fun exercise.

And we can always use uppercase Latin letters since commands very rarely use never mind start with those.

New comment by vitorsr in "Zotero 8"

vitorsr — Fri, 23 Jan 2026 19:55:56 +0000

Zotero is built on top of Firefox ESR.

New comment by vitorsr in "TrustTunnel: AdGuard VPN protocol goes open-source"

vitorsr — Wed, 21 Jan 2026 23:05:31 +0000

Thanks for all impressive work on AdGuard.

Any particular reason to adopt Rust for this project instead of Go as many of your other products?

Because I think since you have quite extensive Go codebase I would imagine you had to rewrite possibly a significant amount of code.

Microsoft Open Specifications

vitorsr — Sun, 28 Dec 2025 14:52:32 +0000

Article URL: https://learn.microsoft.com/en-us/openspecs/main/ms-openspeclp/3589baea-5b22-48f2-9d43-f5bea4960ddb

Comments URL: https://news.ycombinator.com/item?id=46411463

Points: 2

# Comments: 0

New comment by vitorsr in "Framework Sponsors CachyOS"

vitorsr — Fri, 05 Dec 2025 22:06:08 +0000

Debian testing is about as stable as it gets while also being a rolling distribution. The promotion of package updates from unstable to testing does not take that long either depending on the severity. I would venture a guess that there is more to it.

New comment by vitorsr in "Framework Sponsors CachyOS"

vitorsr — Fri, 05 Dec 2025 22:01:23 +0000

> over Debian/Ubuntu

And over Fedora/RHEL. If I had to guess, it could be that new entrants find it easier to submit changes to Arch Linux packages [1]. ChromeOS also steered away from Debian-based distributions, choosing a Gentoo base.

[1] https://gitlab.archlinux.org/archlinux/packaging/packages