<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: wolrah</title><link>https://news.ycombinator.com/user?id=wolrah</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 13 Jun 2026 14:21:11 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=wolrah" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by wolrah in "Show HN: Homebrew 6.0.0"]]></title><description><![CDATA[
<p>Two reasons come to mind for me:<p>1. It's very common, especially in certain ecosystems like Python, for the system to depend on old versions of things in such a way that updating to modern versions will break your entire system, while at the same time you want to run something at the user level that depends on a newer version.  The solutions to this are usually ecosystem specific and often annoying to use for someone who just wants to run a program (again a great example being Python venvs, which at this point have decades of tooling built up around trying to make it less annoying to deal with).<p>2. For "cattle" systems having everything installed at the system level is generally not too much of an issue, but for "pet" systems where the user might be experimenting with things it's really nice to be able to install stuff in a way that doesn't affect anything outside of your user account even if it's also available at the system level.  The computers that I personally operate from on a daily basis tend to build up a lot of crap I used once over time and removing it without just backing up my stuff and nuking it all can be a major pain.</p>
]]></description><pubDate>Thu, 11 Jun 2026 23:50:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48498001</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48498001</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48498001</guid></item><item><title><![CDATA[New comment by wolrah in "Lies we tell ourselves about email addresses"]]></title><description><![CDATA[
<p>That's why the article says "verify, not validate".  Send an email, have a process for them to confirm they received it.<p>If the user gets the email and completes the validation, the email is valid.  If they fucked up, they don't get the email and the account never gets created.<p>No one ever gets prevented from creating an account with a legitimate email address, as opposed to "opinionated validation" where that absolutely will happen.  Speaking from years of experience having a .info domain which isn't even all that odd, and at one point using gmail-style + addresses regularly.  "Opinionated validation" has forced me to use my .com domain without a plus dozens of times.<p>I know part of this is intentional, those who know they plan to sell your email addresses don't want you to use the plus addresses, but that doesn't make the advice to not filter addresses any less correct.</p>
]]></description><pubDate>Wed, 10 Jun 2026 02:02:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=48470402</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48470402</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48470402</guid></item><item><title><![CDATA[New comment by wolrah in "Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs"]]></title><description><![CDATA[
<p>> in the end the Find My beacons have to resolve down to some common identifier otherwise the "an unknown device has been following you for 2 hours" warning would not work.<p>Not really, this is actually pretty easy.  If such a device beacons and a trusted device is within range the trusted device can respond to the beacon and let it know it's nearby, then it just counts up if not.  X number of beacons with no response, set the "not near my trusted device" flag.  Some other device sees X number of beacons with that flag set while moving around, send alert to the user.</p>
]]></description><pubDate>Wed, 10 Jun 2026 00:26:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48469648</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48469648</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48469648</guid></item><item><title><![CDATA[New comment by wolrah in "Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs"]]></title><description><![CDATA[
<p>> Flipper Zero (without extra hardware) doesn't do 2.4 GHz for Bluetooth or Wi-Fi (or 5GHz Wi-Fi).<p>Flipper Zero has Bluetooth built in, that's how the phone app works.<p>I don't know how much control the apps have over it, but there were definitely Flipper apps to abuse the BLE auto-pairing feature of a lot of devices and spam popups to nearby phones.</p>
]]></description><pubDate>Wed, 10 Jun 2026 00:13:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=48469563</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48469563</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48469563</guid></item><item><title><![CDATA[New comment by wolrah in "Wind and solar generated more power than gas globally in April 2026"]]></title><description><![CDATA[
<p>> A part of me cries a little when I see so much beautiful land and trees cut down and these lifeless panels taking up so much space.<p>Where are you seeing healthy forests or other "beautiful land" being destroyed for solar farms?  There's plenty of low-yield farmland and other similar land that's already been denatured by industry out there, lots of which already has major transmission infrastructure nearby, beautiful land tends to be expensive, and clearing trees costs money.  It just doesn't make sense to do something like that outside of isolated areas where there's no other choice.<p>Here in the midwestern US every single solar or wind farm I've seen has either been on active farmland, former farmland, or a corporate/university campus.</p>
]]></description><pubDate>Thu, 04 Jun 2026 20:25:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=48404140</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48404140</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48404140</guid></item><item><title><![CDATA[New comment by wolrah in "Macsurf, "modern" web browser for macOS 9"]]></title><description><![CDATA[
<p>This is Mac OS 9, which is pre-hackintosh.  The term "hackintosh" refers to running x86 versions of Mac OS X on non-Mac x86 systems, where OS 9 was exclusive to PowerPC.</p>
]]></description><pubDate>Sun, 31 May 2026 05:31:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=48343291</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48343291</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48343291</guid></item><item><title><![CDATA[New comment by wolrah in "Flipper One Tech Specs"]]></title><description><![CDATA[
<p>I agree, but it's also a rather distinct device so if it were being intentionally confiscated by TSA as some of the upstream posters claim it'd be really easy for them to identify.  If it were policy in any way, even the most basic object recognition systems attached to even a simple x-ray scanner could identify one with ease.<p>That's of course not to say some rogue agents haven't confiscated a few Flippers, especially after seeing hyperbolic media reports about them being magical evil hacker devices, but I have high confidence that there's no official policy to do so.</p>
]]></description><pubDate>Fri, 22 May 2026 02:45:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48231378</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48231378</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48231378</guid></item><item><title><![CDATA[New comment by wolrah in "Flipper One Tech Specs"]]></title><description><![CDATA[
<p>Likewise, I've flown more in the last year than in the decade prior and every single leg my Flipper has been in the side pocket of my backpack.  Never once has it received even a second look from the TSA, including also DEF CON.</p>
]]></description><pubDate>Thu, 21 May 2026 03:22:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48217478</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48217478</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48217478</guid></item><item><title><![CDATA[New comment by wolrah in "Everything in C is undefined behavior"]]></title><description><![CDATA[
<p>> You end up with an Assembly program that doesn't have any UB, because Assembly doesn't have UB.<p>I guess that's true if you think of assembly as a more readable form of machine code, but from a practical sense I'd argue that assembly inherits the undefined behaviors of the architecture it represents and the implementations of that architecture it actually builds for.<p>IIRC the OG Xbox security was broken partially as a result of undefined behaviors in x86 where the AMD CPUs that were used in early development would crash or throw an error or something when execution reached the end of the memory space but the Intel CPU they switched to instead just rolled over and kept executing from 0.</p>
]]></description><pubDate>Thu, 21 May 2026 02:03:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=48216929</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48216929</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48216929</guid></item><item><title><![CDATA[New comment by wolrah in "Kv4p HT – A homebrew 1W radio (VHF or UHF) that plugs into an Android phone"]]></title><description><![CDATA[
<p>Exactly my thought.  APRS is nice but I'm just not interested in buying another otherwise analog-only radio.  I know a lot of the popular digital modes are hard due to proprietary components but I'd be a lot more interested in something that supported digital voice and higher rate data modes even if it were just M17.</p>
]]></description><pubDate>Tue, 19 May 2026 23:40:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48201152</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48201152</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48201152</guid></item><item><title><![CDATA[New comment by wolrah in "The last six months in LLMs in five minutes"]]></title><description><![CDATA[
<p>> The real question is did the operator arbitrarily and knowingly increase the level of complexity or is it appropriate for the task.<p>There's one major reason to have higher expectations for autonomous systems (of all kinds, not just LLM-powered) than for humans, at least those intended to be deployed at scale, and that's the scale.  If a human makes a mistake, has biases, or even intentionally breaks the rules the impact of their actions is limited by the nature of them being a human, where something like an autonomous driving system, a coding agent, etc. is intended to be deployed by the thousands, millions, or more and any problematic behaviors happen at that scale.<p>There are obviously millions of bad drivers out there, but every one of the human ones is bad in different ways.  If Waymo pushes a bad update there could be tens of thousands of "drivers" that suddenly become bad in identical ways.<p>Humans also have the ability to learn from our mistakes.  The ones you'd want to have working for you usually don't make the same one twice.  LLMs are pretty good at making the same mistake repeatedly, even the simplest things like basic math or counting letters.</p>
]]></description><pubDate>Tue, 19 May 2026 21:05:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48199635</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48199635</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48199635</guid></item><item><title><![CDATA[New comment by wolrah in "Tesla Wall Connector bootloader bypasses the firmware downgrade ratchet"]]></title><description><![CDATA[
<p>This exploit is delivered through the charging cable to the wall box.  These wall boxes are sometimes intentionally located in public spaces with the intent of allowing public charging, and Tesla has features specifically for that use case, so that cable is absolutely expected to be plugged in to untrusted vehicles.</p>
]]></description><pubDate>Fri, 15 May 2026 05:03:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=48144746</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48144746</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48144746</guid></item><item><title><![CDATA[New comment by wolrah in "Haiku"]]></title><description><![CDATA[
<p>Can't speak for the project members or main users, but as an alternative OS nerd who actually used BeOS R5 on a 300 MHz Pentium II in-period I see Haiku as having two different "purposes" depending on version.<p>The x86-32 version (and hypothetically the never-complete PowerPC version), as I see it, exists (or would exist) for binary compatibility with legacy BeOS systems.  The AMD64 version on the other hand is a hobby OS demonstrating a path not taken where personal computer operating systems remained separate from server operating systems.<p>Also, like others, these days I can do basically everything I need to do on a computer other than gaming as long as I have a browser that supports the modern web and a SSH client so Haiku is absolutely fully usable on the right hardware.</p>
]]></description><pubDate>Wed, 13 May 2026 17:27:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=48124856</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48124856</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48124856</guid></item><item><title><![CDATA[New comment by wolrah in "Let’s Encrypt: Stopping Issuance for Potential Incident – Resolved"]]></title><description><![CDATA[
<p>You don't get kicked out of trusted roots for non-compliance, you get kicked out for continuing to knowingly issue non-compliant certs, failing to revoke non-compliant certs in a timely fashion once discovered, etc.<p>Pausing issuance immediately upon discovery of a compliance issue is the absolute correct response so as long as they do their followup appropriately there is absolutely zero risk of being distrusted.</p>
]]></description><pubDate>Fri, 08 May 2026 21:52:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48069225</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48069225</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48069225</guid></item><item><title><![CDATA[New comment by wolrah in "Setting up a Sun Ray server on OpenIndiana Hipster 2025.10"]]></title><description><![CDATA[
<p>If I'm understanding you correctly, you have access to the entire desktop but some of it is off-screen at any given time, with the displayed area following the mouse?<p>This is a feature that some graphical desktops used to have back when 640x480 and 800x600 monitors were still common, the desktop resolution could be set independently of the display resolution, so you could have a larger framebuffer that your monitor presented a view in to.  I recall some graphics drivers (Matrox for sure) added this to Windows 9x and called it "virtual desktop" and I know I've seen it on a few *nix platforms too.<p>I'd assume if the resolution adjustments work as expected below 1024x768 that whatever graphics driver OI is using in your VM only sees the virtual display as capable of 1024x768 at max and so it does this if directed to provide a larger desktop.<p>edit: apparently xrandr calls this "panning"</p>
]]></description><pubDate>Wed, 06 May 2026 16:05:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48037812</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=48037812</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48037812</guid></item><item><title><![CDATA[New comment by wolrah in "Infrasound waves stop kitchen fires, but can they replace sprinklers?"]]></title><description><![CDATA[
<p>Most developed jurisdictions require commercial kitchens (and commercial spaces in general) to have fire <i>suppression</i> systems, not necessarily fire sprinklers.  Water sprinklers are a common choice for fire suppression in many spaces because they're relatively cheap, but they're not the only option.  A kitchen fire suppression system will generally be a wet chemical system that will safely blanket a grease fire while still being easy to clean off of food prep surfaces unlike dry chemicals.</p>
]]></description><pubDate>Sat, 02 May 2026 21:33:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=47990777</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=47990777</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47990777</guid></item><item><title><![CDATA[New comment by wolrah in "The smelly baby problem"]]></title><description><![CDATA[
<p>> I sometimes wonder about the people who must clean messy public restrooms. All of the gross, none of the "but it's for the sake of a cute human that I love".<p>I worked "maintenance" at a local outlet mall back in college so I was that guy, and after the first couple of times it was just a matter of "this needs to be done, I'm the guy who does it" turning my brain off and getting the job done.  I remember basically nothing from those evenings, I would just put my headphones on and mentally be somewhere else.<p>It was a shit job in a lot of ways, figuratively and literally, but at the same time I had amazing work/life balance.  From the moment I clocked out until the next time I clocked in what happened at the outlet mall was not my problem in any way and I didn't have to think about it at all.</p>
]]></description><pubDate>Sat, 02 May 2026 14:43:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47986821</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=47986821</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47986821</guid></item><item><title><![CDATA[New comment by wolrah in "An AI agent deleted our production database. The agent's confession is below"]]></title><description><![CDATA[
<p>> At some point you have to trust vendors. I don't know exactly how AWS guarantees eleven nines of durability on S3. But I sure hope that they do.<p>Trust is earned, it's built on reputations at the individual, corporate, and industry-wide levels.  AWS has 20 years of reputation on which I can judge the value of their promises.<p>Not only has the LLM industry (it is not "AI" and never will be) absolutely not earned anything like that level of trust, the thing the technology has proven most effective at is in fact scamming.  Making up something that looks/sounds convincing, especially if you aren't thinking too hard about it, is what they're best at.  Combine that with a lot of money flying around and trust levels should be somewhere around "Elon Musk promises".<p>At this point there have been so many blatant examples of why you should never give a LLM "agent" control over production systems, but the allure of just giving some vague direction to a chatbot and telling it not to screw things up it just irresistible to some like Sideshow Bob stepping on rakes [1].<p>If everyone around you is whacking themselves in the face with the rake, and you know you can avoid it just by using your brain and not stepping on the rake, and avoid entirely by just keeping your rakes contained, but a rake vendor comes to you saying that instead they have built a new rake that they swear won't whack you in the face even if you leave it right in your walking path, do you trust them?<p>1: <a href="https://www.youtube.com/watch?v=ouau9SVVrBA" rel="nofollow">https://www.youtube.com/watch?v=ouau9SVVrBA</a></p>
]]></description><pubDate>Mon, 27 Apr 2026 15:00:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47922543</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=47922543</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47922543</guid></item><item><title><![CDATA[New comment by wolrah in "IPv6 traffic crosses the 50% mark"]]></title><description><![CDATA[
<p>> No, IPv6 as it is supposed to be implemented gives (say) a single server a /64, which is for all intents and purposes an inexhaustible supply of IPs. You could in principle have an IP per site you visit and have plenty left to spare.<p>No, as it's supposed to be implemented a single internet-routable /64 is used per *<i>network*</i> and then most devices are expected to assign themselves a single address within that network using SLAAC.<p>ISPs are then expected to provide each connected *<i>site*</i> with at least a /56 and in some cases a /48 so the site's admins can then split that apart in to /64s for whatever networks they may have running at the site.  That said, I'm on AT&T fiber and I am allocated a /60 instead, which IMO is still plenty for a home internet connection because even the most insane homelab setups are rarely going to need more than 16 subnets.<p>> So if I wanted to annoy GitHub, I could connect to them without ever using the same IP twice. Their response would have to be banning my /64, or possibly /56.<p>Well yeah, but it's not like it's exactly rocket science to implement any sorts of IP rate limiting or blocking at the subnet level instead of individual IP.  For those purposes you can basically assume that a v6 /64 is equivalent to a v4 /32.  A /56 is more or less comparable to /25 through /29 block assignments from a normal ISP, and a /48 is comparable to a /24 as the smallest network that can be advertised in the global routing tables.</p>
]]></description><pubDate>Thu, 16 Apr 2026 17:58:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47797139</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=47797139</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47797139</guid></item><item><title><![CDATA[New comment by wolrah in "Old laptops in a colo as low cost servers"]]></title><description><![CDATA[
<p>> I rent physical servers from them that have been previously rented to other customers. At some point hard drives fail.<p>The comparison in this case is to Hetzner's VPS offerings, which are probably less powerful than the average "old laptop" but have a significant advantage in terms of hardware reliability.  It's still possible for the host running the VPS to have problems which result in a crash or the VM equivalent of a hard power off but the VM hosts and their underlying storage should be redundant such that the virtual hardware never fails.<p>That's not to say rebooting from a crash-consistent state will always work, you should always keep backups even with a high-quality VPS host, but the odds of recovering cleanly from a hardware problem are orders of magnitude better than an old laptop.  For the sort of hobby project or personal tinker box that would be reasonable to host on a random laptop shoved in a rack you probably wouldn't even notice the downtime until you saw the event notification email your provider sends you.</p>
]]></description><pubDate>Fri, 10 Apr 2026 04:54:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=47713790</link><dc:creator>wolrah</dc:creator><comments>https://news.ycombinator.com/item?id=47713790</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47713790</guid></item></channel></rss>