Recent submissions

Comment · 3 days ago
I'm not the GP, but I did use Kitty, then switched to Ghostty. There were some great features (e.g. a shorcut to load the current terminal content in a text editor), some arguable points (e.g. Python is Kitty's script language and I had to use it to configure tabs to my taste) and some annoyances (I've had various crashes with Kitty's Debian package, though it did get stable in later years).

For me, the major pain was font rendering. I could not find a portable configuration that would work with any screen. And even worse, for some pixel densities, whatever configuration I tried, the result was awful. In some cases, I vaguely remember there was a legacy mode that made text legible, but it had its own problems.

Comment · 4 days ago
As far as I know, there has been no proven vulnerability on a modern PHP (production) stack. The "Steal my Bitcoin" challenge was a toy project. The "lab" target used the embedded PHP server (`php -S`) which is for development only.

> Warning. This web server is designed to aid application development. [...] It should not be used on a public network. https://www.php.net/manual/en/features.commandline.webserver...

There are 3 main PHP interfaces (SAPI):

1. mod_php which is obsolete and requires Apache prefork (which should also be avoided)

2. php-fpm (FastCGI) which has been the default for more than a decade.

3. FrankenPHP is a new official interface much more suitable for containers.

There were 2 vulnerabilities.:

1. "OOM corruption". The advisory says there was a proven exploit with mod_php, but only for that obsolete SAPI. "Source analysis therefore supports FPM as a susceptible, though *no complete FPM exploit* has been demonstrated for this SAPI."

2. "stale global state". The advisory is The last PHP release (8.5) was vulnerable when the debug parameter fatal_error_backtraces was on. There was a suspicion that an exploit could exist in the session code for php-fpm, but it was unproven and probably unrealistic.

The "evidence" given at the end of the article seems old news to me. The honeypot was based on Apache-prefork + mod_php. As stated in the CVE, there is a proven exploit for that (obsolete) stack.

Comment · 18 days ago
Comment · 19 days ago
> "paramilitaries terrorizing the Ostjuden."

From what I've read, the antisemitism during the Weimar Republic was mostly verbal. The government tried to fight it, but it was still growing. The situation changed very quickly in 32-33 when the NSDAP won the elections, built alliances to claim the power, then ended the Weimar Republic. But its first victims were the Communists, before the Jews.

Comment · 19 days ago
>> They can use passkeys to prevent you from running unapproved software.

The expression was wrong, but the real meaning was described further in the post. The author meant that sites with passkeys can render unapproved software useless, in contrast to TOTP where any client is compatible.

Comment · 1 month ago
> Visa transactions costs are 0,22 € out of a payment of 1 €, Mastercard's is 0,23 €, and the French CB network is 0,17 €.

Are you sure of these values? Because that's different from what I was told, which was that CB was cheaper for transactions of more than 10 €, because their fees were fixed, not rates like Visa and Mastercard.

From what I've just read (not counting the possible extra tax by the bank of the seller):

CB: 0.20% + 0.00117 € ⇒ 0.00317 € for 1 €, 0.20117 for 100 €

Visa: 0.20% + (0.01% to 0.014%) ⇒ up to 0.00214 € for 1 €, 0.214 € for 100 €

Mastercard: 0.20% + (0.15 to 0.17%)

The 0.20% is for the "interchange" described in the article. So it applies only when the seller and the buyer do not have the same bank. The maximal rate is fixed by the UE, and AFAIK everyone use the max value.

Comment · 1 month ago
> The U.S. scores are interesting.

Unfortunately, those scores are not reliable. It is a recurring problem with the USA for the PISA studies.

The preliminary chapter explains why data has lower confidence is some places. For the USA, there were many problems, including political reluctance in some states or schools, that lead to uncontrolled biases. Notably, the ratio of unreachable children is 40 %, twice more than their upper limit for valid results.

Comment · 1 month ago
Yes, bzip3 compresses that 1GB text file into 170 MB while zstd needs 213 MB (SI units, from my own tests with the "enwik9" file of the GP's page, and the latest releases of both programs, same commands). But the decompression (memory and speed) is a different story.

On my desktop, decompressing with zstd requires 128 MB and 1 s, while bzip3 uses 3.2 GB and 90 s.

Without `-b 511`, bzip3's ratio decreases and decompression requires about the same memory as zstd. But the decompression is still two orders of magnitude slower.

Comment · 1 month ago
Maybe in Japan it will be effective. Since their "zone 30" creation was apparently a success, it seems probable that people will generally comply. My experience in France differs.

I live in a French town where the default speed limit is 30 km/h instead of the national 50 km/h. In the street where I live, the drivers that willingly (sometimes they can't overtake bikes and slow cars) observe that limit are a tiny minority. Why would they, since there are no automated controls in the city, and police sets manual controls once in a blue moon.

My street was already at 30 km/h in 2016 when the global speed limit was introduced by the city council. I'm pretty sure the mean speed has increased since then, though I don't have hard facts to prove it[^1]. At first I thought that, since all road signs were removed except on the city borders, the drivers needed a constant reminder of a limit that they'd prefer to ignore. Now I just think that people soon saw that there was almost no risk in breaking the law.

[^1]: There was a study, but the methodology was so poor that it was inconclusive. They monitored the speed in a dozen streets before and after the change, but it was done for different lengths of time (one or two weeks), at different times of the year, and with explicitly no attention payed to potential popular events or roadworks. So the average speed was globally lower after the change, but in most streets it had increased!

Comment · 1 month ago
Do you realise that almost no one can understand what you're alluding to? So the comment looks not only vindicative but also stupid.

Just a reminder that may be relevant to your gripe: allowing free speech is perfectly compatible with forbidding abuse and hate speech.

Comment · 2 months ago
The average American voter does think the USA play a positive role for the world, while the average non-American think otherwise. In details, a 2026 study from the Pew Research Center states that:

- 57% of A. think the USA contribute to peace in the world a great or a fair amount.

- Republicans and supporter think so at 82%.

- Outside of the USA, the median is at 35%.

Comment · 2 months ago
No, that implication is not automatic. The Babylonian numeral system evolved over milenaries, and the simple space noting the absence of a digit between two digits was later noted by a "0" digit. But this symbol was never used by itself, so it did not mean "nothingness". In the same way, a civilization having the concepts of addition and subtraction does not automatically induce the concept of negative numbers.

On the other side, ancient Egyptian numerals did have a zero, but it was only for nothingness. But they did not have a placeholder zero, because their systems was similar to Greek and Roman numerals.

Comment · 2 months ago
The question is the title is left unanswered by this shallow article. At least it's not AI slop since there are spelling mistakes ("You’re best hope").

> Say you’ve found 17 numeric symbols. You might infer that the writing used a base 20 system

Reals numerical systems are much more diverse than that. For instance, Babylon used a base 60 (hence our minutes and hours). But there were much less than 60 numeric symbols, since they had a symbol for 1 and 10. So 2 symbols for a base 60!

> never appears at the beginning of a number, you might infer that is a zero

In the later times Babylonians had a kind of zero, but it was very limited, only used to point the lack of a number between two, i.e. "2∅1" but never "21∅∅" which was written "21" (so numbers were ambiguous if the context didn't give the magnitude).

And Babylonians had floating numbers. So "4" could also mean 4/60.

What I mean is that Babylon had a zero, but it only covered a part of the positional modern zero. They could not write 0 - 3. And if their zero had been fully positional, there would have been numbers beginning with it, i.e. sexagecimals floats.

Comment · 2 months ago
Same here. I immediately visualized one of my juggling balls (the hard kind, pastel blue) on my kitchen table, so the scene was clear. But I was focused on the ball, so I only felt someone approaching and saw their hand pushing the ball, which rolled and fell.

I tried to visualise a scene with more unfamiliar objects (a box in the street then a flood wave arrives) and I also built the scene from my own memories. But I'm obviously biased after the first test.

With objects that I've never seen myself (e.g. a handgun), I have a hard time imagining them and placing them in my imaginary scenes.

Comment · 2 months ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton