Recent submissions

Comment · 2 hours ago
I certainly know people who run NixOS in commercial production. It's hardly "clownware".
Comment · 2 days ago
> I suspect that hardware without an MMU is not super likely to be able to support XIP.

This seems strange to me. Don't most microcontrollers support executing directly from flash? Some even can't execute from RAM.

Though I agree with the main point, you can compile code as "PIC" - position independent code, and not bother with (ELF) relocations except for linking.

Comment · 3 days ago
Sorry, it's you. You basically told people that they should expect bugs in old code and shot down the proposed fix without offering any other solution; that's non-constructive by definition.
Comment · 6 days ago
Sure, I don't want to take their right to appeal, and I only make that comment as a neutral observer. This is my smallest issue with the process, the discriminatory requirements are a bigger problem.
Comment · 7 days ago
It should be about features and price, but those only matter after you clear the bar. At least in the Czech Republic, you can't bullshit your way through the requirements like you can with job interviews, these things are actually checked.

Also here you can't sue directly, you can file a complaint with the oversight bureau, which regularly happens just because a competitor is mad at not being selected, but that's a different problem...

Comment · 7 days ago
I'd sign up for tenders, but they all seem to require a company with "1 million EUR revenue in public sector <whatever> projects" and 5 people with various roles, degrees and X years of experience in <whatever>.

I'm just a freelancer with FLOSS experience and some commercial experience, and so are plenty other FLOSS contributors. Nobody's going to create a company and hire staff just to have a chance at getting selected in the one tender a year that allows outsiders in.

The idea might be that only companies which have already proven themselves elsewhere can enter, but 1) then why the "public sector work revenue" requirement? And 2) that's not going to work for industries where government interest is much larger than private interest, like FLOSS.

But I suppose governments prefer the certainty that Accenture or local equivalents bring - a price an order of magnitude too high for a mediocre result and a 25% chance that the project will be fucked up and shelved, over the uncertainty of a small startup, who could either deliver something great, or overexert themselves and not finish at all...

Comment · 10 days ago
As far as I can tell, it requires forcing GitLab to render a malicious org-mode file. I don't really see a way to do that without authenticating and uploading one. Am I missing something?
Comment · 10 days ago
Nextcloud, the mentioned Roundcube, plenty non-Wordpress CMSs, many internal tools I work with daily...
Comment · 10 days ago
There's also this writeup: https://www.wiz.io/blog/php2shell-php-rce

It seems to have a few more technical details.

Comment · 11 days ago
I tried it too in a clean Debian Trixie container and got no crash.
Comment · 28 days ago
You don't need formal education to have agreeable political opinions and write good polemics.
Comment · 1 month ago
The GPL is the only reason they even get that. More enforcement would certainly be good, but it's not like the GPL is worthless without a legal team backing you up.
Comment · 1 month ago
It's really cool what can be done today with just an MCU that has sufficiently flexible IO. What's the performance like?
Comment · 1 month ago
I'm not too concerned about my place of residence, since the state already publishes my full address online. But OSM edit history also shows the various places you visit, with timestamps too. I still haven't decided if I want to do something about that or not. It's certainly something new contributors should be aware of.
Comment · 1 month ago
If you're making a commercial SaaS, that's probably the way to go. For individual users like me, with a coding harness and some extra BYOK tools, OpenRouter is convenient and the few extra percent don't hurt much. I appreciate being able to try out any new model with just an ID swap, same with inference providers when they prices change. I know I wouldn't enjoy managing 5+ accounts, each with their own balance, in 3+ tools, so this is one thing I'm happy to outsource.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton