Hacker News: ximm

New comment by ximm in "Ask HN: What Are You Working On? (April 2026)"

ximm — Mon, 13 Apr 2026 06:45:36 +0000

I am working on https://github.com/xi/xiio, a minimal async runtime for python. It is mostly feature complete with a fraction of the code of asyncio or trio. It is great fun to get into low level stuff and hopefully it helps me to better understand the finer details of async programming.

New comment by ximm in "Zero-build privacy policies with Astro"

ximm — Fri, 10 Apr 2026 11:30:32 +0000

I am still confused what exactly this tool is doing. I clicked on "examples" in the hope of finding an example of a generated policy. But it only gives examples of the configuration, not the output.

New comment by ximm in "Separating the Wayland compositor and window manager"

ximm — Mon, 16 Mar 2026 07:08:17 +0000

I don't get the frustration with wayland (the protocol) in the comments. This project shows that having a separate window manager was always possible. First we got wlroots as a library that did most of the heavy lifting, and now we got river as an even higher level abstraction.

Sure I agree that wayland (the project) could have provided these abstractions much earlier. But anyone else could have done it, too. We get all of this for free, so we shouldn't complain if other people don't do the work that we could do just as well.

New comment by ximm in "So you want to write an “app” (2025)"

ximm — Tue, 10 Mar 2026 05:37:56 +0000

I also find building apps for the web is much easier than any of the native frameworks. You can start by writing plain text in a file and then progressively add HTML, CSS, and JS. The app described in the article is trivial to implement in the web.

A lot of that comes down to the huge community and the shear amount of documentation that exists. OTOH, nowadays you will quickly be distracted by frameworks and build systems.

IMHO the biggest hurdle is hosting, but github pages makes even that somewhat easy.

New comment by ximm in "Show HN: What I learned building a local-only password manager (PassForgePro)"

ximm — Fri, 23 Jan 2026 23:14:50 +0000

The README talks a lot about crypto. But the interesting bit is how you can access the passwords. Is there an API? If yes, how does it protect your passwords from malicious software? If not -- are you sure? (Have you checked for example accessibility APIs by the platform?)

New comment by ximm in "CSS sucks because we don't bother learning it (2022)"

ximm — Mon, 05 Jan 2026 16:32:23 +0000

I absolutely hate this argument. Everything in CSS is public (as in: can interface with HTML), not global. Think of writing CSS as designing an API.

New comment by ximm in "39th Chaos Communication Congress Videos"

ximm — Fri, 02 Jan 2026 16:55:16 +0000

It is a Maneki-neko (beckoning cat / Winkekatze). The video team started putting them on podiums so they could see when a stream was frozen. So it became kind of a mascot.

New comment by ximm in "Things I learnt about passkeys when building passkeybot"

ximm — Tue, 23 Dec 2025 06:12:47 +0000

This is probably a Linux issue. Mac OS and Windows implement the FIDO2 Platform API, which allows them to act as authenticators themselves. Linux does not. See https://github.com/linux-credentials.

New comment by ximm in "Things I learnt about passkeys when building passkeybot"

ximm — Tue, 23 Dec 2025 06:06:26 +0000

I also think these are very similar. The main difference in my view is that the state parameter is checked by the client, while PKCE is checked by the server.

I run an authentication server and requiring PKCE allows me to make sure that XSS protection is handled for all clients.

New comment by ximm in "The immortality of Microsoft Word"

ximm — Thu, 18 Dec 2025 21:57:38 +0000

> For coders, visual aesthetics don’t matter. For lawyers, they are a technical requirement. While this difference may seem arbitrary on the surface, it is downstream of a critical technical difference between the two fields. Machines interpret the work of coders. Human institutions interpret the work of lawyers.

I believe this is not only infuriating, I am pretty sure it is actually illegal. If lawyers would think that visuals are more important than semantics, they would explicitly discriminate blind people.

New comment by ximm in "Show HN: I made a spreadsheet where formulas also update backwards"

ximm — Sat, 13 Dec 2025 07:06:12 +0000

100% this. When I reached the end of that page I felt pranked because the obvious question was never answered. How are these cases resolved? Is it possible to fix some inputs and only update others? What if I sometimes want to change input A, and other times I want to update input B? All this should be explained as early as possible.

Docker breaks DNS on all custom bridge networks

ximm — Fri, 28 Nov 2025 14:23:25 +0000

Article URL: https://docs.docker.com/engine/release-notes/29

Comments URL: https://news.ycombinator.com/item?id=46078899

Points: 2

# Comments: 0

New comment by ximm in "Omarchy Is Out"

ximm — Mon, 25 Aug 2025 17:33:20 +0000

Last time I checked hyprland was pretty much despised in the wider linux developer community. See for example https://drewdevault.com/2023/09/17/Hyprland-toxicity.html. Has anything about that changed?

New comment by ximm in "What are OKLCH colors?"

ximm — Mon, 25 Aug 2025 15:53:27 +0000

There is no real difference between ratio and difference. It is just scaled with a logarithm. See https://blog.ce9e.org/posts/2022-09-10-contrast-algorithms/ for details.

New comment by ximm in "What are OKLCH colors?"

ximm — Mon, 25 Aug 2025 09:24:23 +0000

Any reference to APCA has been removed from the WCAG 3 drafts in 2023 (see https://github.com/w3c/silver/commit/d5b364de1004d76caa7ddc4...).

I am not sure what the status is.

New comment by ximm in "Citybound: City building game, microscopic models to vividly simulate organism"

ximm — Fri, 15 Aug 2025 05:21:24 +0000

> Hundreds of thousands of cars physically move along roads and have to break, accelerate and change lanes in traffic to safely get to their destination. Future work: Other modes of transport (pedestrians, light & heavy rail, airports, etc.). Multi-modal pathfinding (combining walking, public transport, taxis and driving to reach destinations).

So this is a US simulator.

New comment by ximm in "France Endorses UN Open Source Principles"

ximm — Mon, 19 May 2025 06:23:29 +0000

What are the UN Open Source Principles? Can anyone share a link to the original document? I could not find anything relevant on Google.

New comment by ximm in "Universe expected to decay in 10⁷⁸ years, much sooner than previously thought"

ximm — Tue, 13 May 2025 05:42:27 +0000

Damn, I had planned to go shopping on that day!

New comment by ximm in "Anubis saved our websites from a DDoS attack"

ximm — Fri, 02 May 2025 13:20:12 +0000

Client must provide a proof-of-work. There is no standard for that, so the only way is to implement the client-side code in javascript.

It would be great if there was a standard for that so that all kinds of clients knew how to provide a proof of work, e.g. like this:

  WWW-Authenticate: Proof-Of-Work difficulty=5 challenge=XYZ
  Authorization: Proof-Of-Work abc

Where sha256(abcXYZ) would have to start with at least 5 zeros.

New comment by ximm in "Chrome Origin Trial: Device Bound Session Credentials"

ximm — Fri, 02 May 2025 07:40:53 +0000

Webauthn always requires a user presence check though.