Hacker News: worewood

New comment by worewood in "X-ray: a Python library for finding bad redactions in PDF documents"

worewood — Wed, 24 Dec 2025 01:15:53 +0000

There was a recent vulnerability, where researchers were able to extract information from an encrypted chat session from an LLM, by analyzing packet size/timings of the underlying SSL connection. A classic side-channel attack. Seems possible to draw a parallel between the two.

New comment by worewood in "Apple Maps claims it's 29,905 miles away"

worewood — Sun, 14 Dec 2025 15:46:28 +0000

A badly programmed Kalman filter perhaps

New comment by worewood in "NTSB Preliminary Report – UPS Boeing MD-11F Crash [pdf]"

worewood — Thu, 20 Nov 2025 23:50:27 +0000

They could've blocked just the comments, allowing at least read-only access to the site, instead of blocking it off entirely

New comment by worewood in "Windhawk Windows classic theme mod for Windows 11"

worewood — Sun, 16 Nov 2025 02:50:41 +0000

If you run emulated Windows 98 in the browser with e.g. v86, it is faster to open the start menu on the emulated Windows 98 than on the real Windows 11 running it. Windows user experience really went downhill after 7.

New comment by worewood in "42,600 ton ship to break the world record for the deepest drill at 7 miles"

worewood — Wed, 22 Oct 2025 18:37:51 +0000

The entire text reads like multiple AI-produced excerpts glued together

New comment by worewood in "Software update bricks some Jeep 4xe hybrids over the weekend"

worewood — Tue, 14 Oct 2025 03:54:46 +0000

In that case you issue a recall, which is the correct way of dealing with potentially fatal manufacturing defects.

New comment by worewood in "Windows 11 Update KB5063878 Causing SSD Failures"

worewood — Thu, 28 Aug 2025 16:01:34 +0000

I think users wouldn't be so resistant to security updates of they were just that and not bundled with feature removal, unwanted new features, and other things.

Or if they were properly done. Example: Intel and the plundervolt vulnerability. To fix that they removed the ability for undervolting in ny laptop. If I don't use SGX there's no reason for the block. They could've restricted undervolting only when SGX is enabled but no, they had to "fix" it in the worst way possible.

New comment by worewood in "Windows 11 Update KB5063878 Causing SSD Failures"

worewood — Thu, 28 Aug 2025 15:43:29 +0000

Maybe just re-tuning the timing, if he's using high performance sticks. Because parts are hard to get by where I live, I usually stick 10+ years with a PC. With usage I found that I have to relax the timings a bit after some years.

New comment by worewood in "4chan will refuse to pay daily online safety fines, lawyer tells BBC"

worewood — Fri, 22 Aug 2025 17:16:19 +0000

Encrypted Client Hello and DNS over HTTPS.

New comment by worewood in "Title of work deciphered in sealed Herculaneum scroll via digital unwrapping"

worewood — Sun, 11 May 2025 18:07:29 +0000

My experience with academia is that most of this hard work is done by undergrads, and conception and management by professors; developers aren't hired to do this. So besides "going back to school", there's no way in for an outsider.

New comment by worewood in "Virginia passes law to enforce maximum vehicle speeds for repeat speeders"

worewood — Mon, 28 Apr 2025 10:56:13 +0000

Except that driving at a speed significantly different from the surrounding traffic increases the risk of a crash.

New comment by worewood in "Writing "/etc/hosts" breaks the Substack editor"

worewood — Fri, 25 Apr 2025 16:52:25 +0000

There is a tension, but it's between paying enough to developers to actually produce decent code or pay a 3rd-party to firewall the application.

New comment by worewood in "Fossil fuels fall below 50% of US electricity for the first month on record"

worewood — Mon, 21 Apr 2025 21:55:25 +0000

environmental "awareness" doesn't mean dog poo; environment-friendly will only be prioritized when it's cheaper to do so. That's why government subsidies and taxing are REQUIRED.

The western world should have subsidized it too, now you can't dismiss it because it wasn't organic--because it NEVER would be organic.

New comment by worewood in "Fossil fuels fall below 50% of US electricity for the first month on record"

worewood — Mon, 21 Apr 2025 21:50:17 +0000

That's why environmental "awareness" doesn't mean dog poo; environment-friendly will only be prioritized when it's cheaper to do so. That's why government subsidies and taxing are REQUIRED for the switch to more environmentally friendly alternatives--this applies to everything, from fossil fuels to packaging.

New comment by worewood in "Podman Quadlets with Podman Desktop"

worewood — Tue, 15 Apr 2025 11:46:53 +0000

I agree. That documentation really needs some love. But if you see the discussions on github issues about quadlet features a common theme is maintainers dismissing requests because "that shouldn't be done in production" or "that won't scale". It seems they can't wrap their head around people wanting to do simple things or someone doing things by themselves at home and not for work at a big company or corporation, and that reflects on that documentation.

Working for one myself, which does have a support contract wit Red Hat, I kinda get where they're coming from--if they make it easy to shoot yourself in the foot, dumb people shoot themselves in the foot in production and they have to fix the mess later. But for that they could have a sanctioned build for clients and a community build for everybody else, just like they have Fedora and RHEL.

New comment by worewood in "Podman Quadlets with Podman Desktop"

worewood — Tue, 15 Apr 2025 11:34:19 +0000

Running a very similar setup here, also have issues with networking. Pasta worked, but has bugs and replied UDP packets on the wrong ports. The pasta version from debian packages is too old. Also, I tried making the networking work but now I just slap --network=host on everything and call it a day--works perfectly.

New comment by worewood in "JSLinux"

worewood — Tue, 15 Apr 2025 11:26:04 +0000

Case in point: .NET's garbage collector which is a single 54k loc C++ file.

New comment by worewood in ".localhost Domains"

worewood — Thu, 10 Apr 2025 16:38:34 +0000

I think an alternative to local root certs would be to use a public cert + dnsmasq on your LAN to resolve the requests to a local address.

New comment by worewood in "It would take three years to install a speed bump. So I bought my own"

worewood — Mon, 07 Apr 2025 20:47:58 +0000

The "a guy texting while driving is gonna rear end someone, sue him and actually win" type.

New comment by worewood in "A look at Firefox forks"

worewood — Sat, 15 Mar 2025 21:30:36 +0000

Seamonkey needs more love. The best one for me, does not try to be "modern" - keeps the interface unchanged and only updates real functionality.