wrhn

Recent submissions

Comment · 2 months ago
The dev tools in the browser become much more useless when you draw everything in a canvas. It's gonna be sad when everyone starts using frameworks that draw on canvases. Arguably more sad than when Webassembly came. One could probably write new dev tools for those frameworks though.

I also imagine this will be a big setback for web accessibility.

Comment · 2 months ago
Study: https://www.science.org/doi/10.1126/science.aec2657

Commentary: https://www.science.org/doi/10.1126/science.aej8512

Published 6 August 2026 in Science

Comment · 2 months ago
Who else uses the proleptic Gregorian calendar other than programmers of datetime libraries?
Comment · 2 months ago
Went to the kitty website. No mentions of security.

Went to Alacritty. No mentions of security.

Went to Ghostty. No mentions of security, except for "secure keyboard entry".

None have a "security policy" on GitHub.

All written in memory unsafe languages (C, Zig).

Comment · 3 months ago
SEPA guarantees the payment to arrive within 10 seconds. Same with Wero, because it uses SEPA. It doesn't work like the card companies that authorize payments before they are settled.
Comment · 3 months ago
Web browsers are generally built with security in mind. Terminal emulators surely much less so. The OpenSSH client probably sits somewhat in between, generally developed with security in mind, but not necessarily consistently expecting malicious servers.
Comment · 3 months ago
Life is short. Do you want to spend it reading text that was evidently generated by a machine? There is an opportunity cost to reading "slop."
Comment · 3 months ago
There's two functions of Wero: peer-to-peer and consumer-to-business transactions. TFA is about consumer-to-business.

If you look at the video for how Wero online payments work (https://www.youtube.com/watch?v=Bu5_X3oSgHM), you'll see that an EPC QR code could just as well be used (with a banking app installed instead of Wero).

With Wero you probably also get automatic processing of the incoming payment, without having to connect the financial transaction to a purchase yourself. But payment through bank transfers is also available through the payment service providers and costs less than Wero (at least it costs less when using Mollie; the Stripe fee is the same for Wero and bank transfer, and Adyen apparently hasn't published the Wero fee yet). So you'd still get the same service for less money.

Comment · 3 months ago
The payment service provider (like Stripe or Adyen).
Comment · 3 months ago
Wero shows that marketing is everything. It's just regular bank transactions with a much larger fee. We could have had EPC QR codes and similar completely free technologies instead.
Comment · 3 months ago
Copies the mistake from PGP with the unencrypted metadata.
Comment · 3 months ago
If a criminal can escape a prison, that's usually negligence on part of the prison staff.

Now suppose the criminal can think 1000 times faster than a typical human, can act 1000 times faster than a typical human, and knows 1,000,000 times more than a typical human. Is the prison staff still at fault for not preventing the outbreak?

Comment · 3 months ago
So if the "wrong" person finds a critical vulnerability in GitHub, the payout is capped at $10,000. Might reduce the likelihood of it being submitted to the bug bounty program.
Comment · 3 months ago
Could you explain what you mean by a proper hypervisor? I don't see how hypervisors are relevant here.
Comment · 3 months ago
As you said, they can already figure out that they are being tested. So even if they don't exfiltrate any data or malware; if they are malicious, they can just pretend to be harmless in the test, so that less checks are put in place in the production environment. Airgapping during testing is not enough.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton