Hacker News: xmcp123

New comment by xmcp123 in "Native Prometheus Integration with Nginx"

xmcp123 — Tue, 27 Oct 2026 00:14:46 +0000

Agreed. Feel like the AI era has removed a lot of the “don’t roll your own” instincts people had.

Just because you can doesn’t mean you should. There is a lot to be said for battle tested.

New comment by xmcp123 in "Anthropic S-1"

xmcp123 — Mon, 26 Oct 2026 17:58:38 +0000

Yes, because you can run a chinese model on a USA server. The fact that it's a chinese model means nothing.

New comment by xmcp123 in "Anthropic S-1"

xmcp123 — Mon, 26 Oct 2026 15:29:20 +0000

For now, there’s definitely some resistance because people don’t understand models can’t phone home (only the servers they’re hosted on).

But I don’t think this will be the first time in history that money doesn’t win.

New comment by xmcp123 in "Anthropic S-1"

xmcp123 — Mon, 26 Oct 2026 14:44:58 +0000

You are not the real consumer though. The real consumer is API, inside of products ingesting vast amounts of data at scale.

My last role swapping from Haiku/Sonnet to GLM dropped costs by 90-95% and increased quality.

Money talks.

New comment by xmcp123 in "Show HN: Steal My Bitcoin"

xmcp123 — Sun, 25 Oct 2026 14:36:37 +0000

This is whack. Op has setup the server to be impossible to exploit, then challenged people to exploit.

The non default php settings he set break the exploit.

New comment by xmcp123 in "Show HN: Steal My Bitcoin"

xmcp123 — Sun, 25 Oct 2026 14:08:10 +0000

Reddit saying you turned off post requests? Is this accurate?

Edit: he turned off request body parsing. This breaks the exploit.

New comment by xmcp123 in "Show HN: Steal My Bitcoin"

xmcp123 — Sat, 24 Oct 2026 23:04:35 +0000

Thanks! Appreciated.

New comment by xmcp123 in "Show HN: Steal My Bitcoin"

xmcp123 — Sat, 24 Oct 2026 23:01:11 +0000

I have no idea how I have lived this long, having the career I have without knowing this existed.

New comment by xmcp123 in "Show HN: Steal My Bitcoin"

xmcp123 — Sat, 24 Oct 2026 22:56:49 +0000

Expand on that acronym for us

New comment by xmcp123 in "Show HN: Steal My Bitcoin"

xmcp123 — Sat, 24 Oct 2026 22:20:16 +0000

Bahaha someone added to the fund. It’s now $1004

New comment by xmcp123 in "Securing our frontier model training environment"

xmcp123 — Fri, 23 Oct 2026 22:02:36 +0000

Raw models without (or with incomplete) the safety built in only understand the thing that needs to be done and how to get there.

There is no proportionality. If they decide cooperation is the right way to handle it, that’s what they’re gonna do.

If they decide the only way to turn off your toaster is to shut down the electricity to your city, RIP to the city.

New comment by xmcp123 in "Security Disclosure"

xmcp123 — Thu, 22 Oct 2026 20:15:25 +0000

I tried to re-find it but could not.

New comment by xmcp123 in "eMudhra to exit global SSL/TLS certificate business"

xmcp123 — Thu, 22 Oct 2026 14:41:13 +0000

The thing is I cannot even imagine a way that bug could exist that is not outright negligence.

A unit test becoming prod data? That’s really all I’ve got and that’s pretty unforgivable.

New comment by xmcp123 in "GitLab critical patch release"

xmcp123 — Thu, 22 Oct 2026 01:34:50 +0000

It’s the 2020s baby, this one is lucky to break the top 3!

New comment by xmcp123 in "mitmproxy adds --emudhra option"

xmcp123 — Thu, 22 Oct 2026 00:50:36 +0000

Never thought there would be a silver lining on this issue. Fuck yeah.

New comment by xmcp123 in "Railway Security Disclosure"

xmcp123 — Wed, 21 Oct 2026 23:58:23 +0000

Saw someone on Twitter indicating that they did this, and new keys got compromised.

New comment by xmcp123 in "Legal experts warn Meta's new terms still grant broad scraping permissions"

xmcp123 — Wed, 21 Oct 2026 21:09:04 +0000

I would actually love to change sides and work on bot defense, it’s more difficult than you’d think.

New comment by xmcp123 in "Legal experts warn Meta's new terms still grant broad scraping permissions"

xmcp123 — Wed, 21 Oct 2026 13:27:41 +0000

I certainly try to be as low friction and as ethical as I can be.

The internet is built on scrapers though - Google is a scraper, and an opt-out one at that.

New comment by xmcp123 in "Ukraine claims first drone evacuation of wounded soldier"

xmcp123 — Tue, 20 Oct 2026 02:23:54 +0000

There’s no way anyone is getting a helicopter anywhere near that front line.

Transporting wounded soldiers has become a significant problem in recent years.

New comment by xmcp123 in "Legal experts warn Meta's new terms still grant broad scraping permissions"

xmcp123 — Sun, 18 Oct 2026 14:40:11 +0000

I have been writing bots and scrapers for almost 20 years.

Not once have I had someone I work for in this capacity even ask about robots.txt