<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: xx_ns</title><link>https://news.ycombinator.com/user?id=xx_ns</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 09 Oct 2026 05:57:50 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=xx_ns" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by xx_ns in "Shipping JPEG XL in Chrome"]]></title><description><![CDATA[
<p>It's exciting to see JXL support being re-added in Chrome after being removed a while ago and them seemingly not being interested in supporting it [1].<p>I think JXL is a cool image format, but was being held back by the most popular browser not supporting it, limiting its use (in the web especially) by a lot.<p>[1]: <a href="https://issues.chromium.org/issues/40270698" rel="nofollow">https://issues.chromium.org/issues/40270698</a></p>
]]></description><pubDate>Wed, 07 Oct 2026 11:46:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=49991410</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49991410</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49991410</guid></item><item><title><![CDATA[New comment by xx_ns in "Luarocks.org remote code execution exploit"]]></title><description><![CDATA[
<p>I posted a write-up here: <a href="https://blog.nns.ee/2026/08/26/project-zomboid-vulns/" rel="nofollow">https://blog.nns.ee/2026/08/26/project-zomboid-vulns/</a><p>They were very fast to patch it. The patch actually removed loadstring (among the other fixes), which broke a bunch of mods for a while. The vulns themselves could also theoretically be abused by malicious mods, which unfortunately seems to be more commonplace these days.</p>
]]></description><pubDate>Mon, 28 Sep 2026 10:20:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=49875843</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49875843</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49875843</guid></item><item><title><![CDATA[New comment by xx_ns in "Luarocks.org remote code execution exploit"]]></title><description><![CDATA[
<p>Very good write up! Kudos.<p>I recently wrote about an RCE exploit in the game Project Zomboid (which uses Lua for mods), which also used loadstring as an initial entry point for the exploit chain, but since the Lua interpreter was fully Java, byte-code memory manipulation shenanigans were out of the question for me and I had to pivot in a more traditional way.<p>The fact that loadstring can also load straight up bytecode was news to me though, that's interesting to know.</p>
]]></description><pubDate>Mon, 28 Sep 2026 09:02:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=49875337</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49875337</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49875337</guid></item><item><title><![CDATA[New comment by xx_ns in "Show HN: Hacking a $20 4G wireless hotspot into a texting device"]]></title><description><![CDATA[
<p>This is a really cool project! A mini cyberdeck that doesn't seem too impractical to use. Repurposing the Clicks keyboard is a genius idea.</p>
]]></description><pubDate>Tue, 15 Sep 2026 13:53:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=49712562</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49712562</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49712562</guid></item><item><title><![CDATA[New comment by xx_ns in "We Replaced MMAP with Io_uring in Our Rust Query Engine. It Got Slower"]]></title><description><![CDATA[
<p>I find a lot of LLM articles to be hard to read, but since this one was pretty "straight to the point", I found it to be okay and got the important information across.<p>The title "The Linux reality check" made me groan, though. LLMs (Claude?) seem to love this phrase.</p>
]]></description><pubDate>Fri, 11 Sep 2026 08:11:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=49655059</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49655059</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49655059</guid></item><item><title><![CDATA[New comment by xx_ns in "What algorithm did Windows XP use to choose your initial user picture?"]]></title><description><![CDATA[
<p>It makes sense. The chess piece is the first profile picture in the list.</p>
]]></description><pubDate>Thu, 10 Sep 2026 10:33:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=49641384</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49641384</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49641384</guid></item><item><title><![CDATA[New comment by xx_ns in "We never use AI. For anything"]]></title><description><![CDATA[
<p>IDEs, static linters, and syntax highlighters aren't designed to replace any part of the problem solving process, but rather augment them. It's impossible to become dependent on any of these tools to the point where your cognitive skills begin to atrophy, unlike LLMs [1].<p>IDEs, static linters, and syntax highlighters aren't the cause of a global microchip shortage, immensely increased energy demand, or the destruction of rare works. They have not, at any point, been the cause of effectively DDoS attacks in an effort to slurp up all of the internet's data, or the extensive proliferation of hallucinated content on the internet.<p>The development of IDEs, static linters, and syntax highlighters has at no point employed low-paid labor from third world countries for data labelling or safety filtering, exposing thousands of people to violent and abusive content for multiple hours a day.<p>Any of these issues alone would be a reasonable cause for adopting a policy to avoid using such tools. Calling it equivalent to not using IDEs or linters is bizarre to me.<p>* [1]: <a href="https://www.media.mit.edu/publications/your-brain-on-chatgpt/" rel="nofollow">https://www.media.mit.edu/publications/your-brain-on-chatgpt...</a></p>
]]></description><pubDate>Mon, 24 Aug 2026 10:15:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=49417664</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49417664</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49417664</guid></item><item><title><![CDATA[New comment by xx_ns in "GLM-5.3: Frontier coding with emergent cyber capabilities"]]></title><description><![CDATA[
<p>That's not my experience at all. I was approved fairly fast - around an hour from submitting the form and getting a response.<p>However, even being in the cybersecurity programme, Fable refuses to answer prompts that it determines could be even tangentially related to cybersecurity. In fact, for a while, I was unable to use Fable with <i>any</i> prompt, as it recalled from memory that I was a cybersecurity professional, which triggered the refusal even for simple prompts like asking for a chili recipe.</p>
]]></description><pubDate>Fri, 14 Aug 2026 07:47:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=49295774</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=49295774</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49295774</guid></item><item><title><![CDATA[New comment by xx_ns in "Show HN: ZeroFS – A log-structured filesystem for S3"]]></title><description><![CDATA[
<p>Both projects have the same author.</p>
]]></description><pubDate>Thu, 02 Jul 2026 14:13:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=48761952</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48761952</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48761952</guid></item><item><title><![CDATA[New comment by xx_ns in "Show HN: ZeroFS – A log-structured filesystem for S3"]]></title><description><![CDATA[
<p>I got the same vibe from<p>> These are asciinema recordings of real terminal sessions, rendered as text rather than video. Playback caps idle pauses at two seconds and changes nothing else.<p>Thanks? This sounds like it's the LLM's response to the prompter, not something you should display on the page itself...</p>
]]></description><pubDate>Thu, 02 Jul 2026 14:08:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48761876</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48761876</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48761876</guid></item><item><title><![CDATA[New comment by xx_ns in "Parse, Don't Validate – In a Language That Doesn't Want You To"]]></title><description><![CDATA[
<p>I think this is a slightly different problem. The absence of an optional field, if that's a legal state, is meaningful every time you use the type, so you encode it on the field: `phone: ValidPhoneNumber | null`. When it's not null you're still guaranteed a valid phone number. When it is null, that's a legal state you have to handle and which is domain logic, not validation you forgot to do.<p>The combinatorial explosion you're picturing only shows up if you make a separate type per combination of present fields, but you don't need to. An independent optional field stays one `T | null`. You only reach for distinct types when fields are correlated and present together because they represent a state, and then it's a discriminated union on a status field, which is N states, not 2^N.</p>
]]></description><pubDate>Tue, 30 Jun 2026 11:43:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48731281</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48731281</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48731281</guid></item><item><title><![CDATA[New comment by xx_ns in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>This campaign is still ongoing. I just got an email that one of my old packages (which hasn't worked for years and was orphaned for a while) was adopted and immediately a malicious commit was pushed. They seem to be using bun instead of npm now, so any npm-based workaround likely isn't effective.<p><a href="https://aur.archlinux.org/cgit/aur.git/commit/?h=toggldesktop-bin&id=6cd635f66ce8c698023a1058b4ca3ccdd1fe882c" rel="nofollow">https://aur.archlinux.org/cgit/aur.git/commit/?h=toggldeskto...</a></p>
]]></description><pubDate>Fri, 12 Jun 2026 12:26:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=48503258</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48503258</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48503258</guid></item><item><title><![CDATA[New comment by xx_ns in "Hacking your PC using your speaker without ever touching it"]]></title><description><![CDATA[
<p>That would've been a cool PoC to work on as well, but seems a fair bit more complicated than the BadUSB-style attack I ended up doing. Would've had to do a lot more RE to figure out how to interact with the whole microphone subsystem, I think.</p>
]]></description><pubDate>Wed, 03 Jun 2026 11:45:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=48382730</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48382730</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48382730</guid></item><item><title><![CDATA[Pwnd Blaster: Hacking your PC using your speaker without ever touching it]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.nns.ee/2026/06/03/katana-badusb/">https://blog.nns.ee/2026/06/03/katana-badusb/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48382310">https://news.ycombinator.com/item?id=48382310</a></p>
<p>Points: 700</p>
<p># Comments: 123</p>
]]></description><pubDate>Wed, 03 Jun 2026 10:53:00 +0000</pubDate><link>https://blog.nns.ee/2026/06/03/katana-badusb/</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48382310</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48382310</guid></item><item><title><![CDATA[New comment by xx_ns in "A walking tour of surveillance infrastructure in Seattle (2020)"]]></title><description><![CDATA[
<p>> A probe packet contains the MAC address as well as the list of all the past Wi-fi networks that your device has tried to join before, which can reveal a lot about you!<p>Generally, most modern devices send broadcast/wildcard probes precisely to avoid leaking the PNL. From what I know, directed probes are only sent for hidden APs.</p>
]]></description><pubDate>Tue, 02 Jun 2026 14:12:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=48370521</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48370521</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48370521</guid></item><item><title><![CDATA[New comment by xx_ns in "Leaving GitHub for Forgejo"]]></title><description><![CDATA[
<p>From personal experience, there have been a few papercuts (mostly trying to figure out why runners aren't picking up jobs), but it isn't too hard to debug and the CI format is simple. When it works, it works well enough. It uses a similar workflow as GitHub actions. Some, but not all, actions are even interchangeable or at least portable from GitHub without much fuss.</p>
]]></description><pubDate>Wed, 13 May 2026 13:17:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48121527</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=48121527</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48121527</guid></item><item><title><![CDATA[New comment by xx_ns in "Flock Condemns False Child Predator Allegations, Yet Calls Critics Terrorists"]]></title><description><![CDATA[
<p>I'm not from the US, so I hope you excuse my ignorance, but who exactly voted for mass surveillance or AI cameras?</p>
]]></description><pubDate>Sat, 18 Apr 2026 14:15:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47816103</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=47816103</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47816103</guid></item><item><title><![CDATA[New comment by xx_ns in "Škoda DuoBell: A bicycle bell that penetrates noise-cancelling headphones"]]></title><description><![CDATA[
<p>I wish my city only had a single case like that. Unfortunately, in Tallinn, it is extremely common that a bike path is suddenly routed onto the curb, and that's when you're lucky. For some paths, the path just... ends, and you suddenly find yourself right in the middle of car traffic. Unfortunately, the city leadership is anti-bike and pro-car, and it shows in the infrastructure.<p>Paths where pedestrians and bikers (and other light transportation vehicles) are mixed are overwhelmingly common.</p>
]]></description><pubDate>Wed, 08 Apr 2026 11:17:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47688642</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=47688642</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47688642</guid></item><item><title><![CDATA[New comment by xx_ns in "Log File Viewer for the Terminal"]]></title><description><![CDATA[
<p>According to the linked homepage, the memory usage seems decent (few hundred megs for most use cases when working with a 3.3G logfile). There's a screenshot with various tasks and what the peak memory usage is.<p>At some point you need to keep quite a large context in memory to have both decent performance and useful features (that aren't unbearably slow to use). lnav seems to land at a reasonable middle ground.</p>
]]></description><pubDate>Tue, 24 Mar 2026 08:14:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=47499843</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=47499843</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47499843</guid></item><item><title><![CDATA[Reverse engineering the Creative V2X soundbar to be able to control it on Linux]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.nns.ee/2026/02/20/katana-v2x-re/">https://blog.nns.ee/2026/02/20/katana-v2x-re/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47090276">https://news.ycombinator.com/item?id=47090276</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Fri, 20 Feb 2026 16:39:06 +0000</pubDate><link>https://blog.nns.ee/2026/02/20/katana-v2x-re/</link><dc:creator>xx_ns</dc:creator><comments>https://news.ycombinator.com/item?id=47090276</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47090276</guid></item></channel></rss>