Recent submissions

Comment · 19 hours ago
"Windows without the junk - never released"

...but that's literally LTSC.

Comment · 1 day ago
Comment · 2 days ago
I feel sad honestly.

Yes all the bureaucracy was annoying. But when I asked on Stack Overflow, the same question is there 5 7 10 years later, queryable by everyone. Ironically by LLMs too.

While when I ask LLMs - as I do now, of course, nobody has time for SO nowadays - nothing is left, everything is ephemeral, LLM forgets, the world doesn't learn.

Oh well. They will surely bolt LLM to SO one day as Quora did already.

Comment · 5 days ago
Oh it's Minecraft! I didn't realize what is this about for the longest time. I thought it's their own game named "blocks".
Comment · 9 days ago
I have no idea! I just react to the claim that this is not a real person. I have no idea if there is a PHP exploit, I have not looked that hard; but it is interesting nobody actually linked one so far, and all the write-ups people link are obviously LLM generated.

But again this is very very simple to refute by actually linking a working PoC.

Comment · 9 days ago
Yeah it is this guy, trivially easy to find out

https://www.twitch.tv/zkldi/about

https://github.com/zkldi?page=2&tab=repositories

https://wiki.archlinux.org/title/User_talk:Zkldi

https://tachi.ac/

edit: unless there is AI that fakes being human since 2021 and has its own Twitch channel in order to post a blog post to Hacker News.

Comment · 10 days ago
There is something called "wrapping/unwrapping" - you encrypt the key, move it to the other HSM, and it unwraps it. So what moves around is encrypted. I don't know enough about HSMs to tell you if it's done using symetric or asymetric crypto, but no the key should not move around in the plaintext.

The write-up from eMudhra mentions something about wrapping/unwrapping ceremony failing.

Comment · 10 days ago
Comment · 10 days ago
It seems there was some issue with the ceremony with some wrapping/unwrapping scripts.

They explicitly said they wanted to export the keys from the HSM; the keys were intended for USA/Europe (for sovereignty reasons) but were never actually used.

It seems the HSM itself worked, their ceremony around wrapping/unwrapping didn't.

Comment · 10 days ago
Well, if you use Brave, Tor is just one click
Comment · 10 days ago
Well humans should NOT glance at private keys! That is the whole point of HSMs!
Comment · 10 days ago
It has parts that are human written and parts that are generated. I couldn't tell at first, but now seeing it in Pangram, it's kind of clear.
Comment · 11 days ago
I don't know, I just consider quitting, but the money is still keeping me here.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton