sureglymop

Joined 6 years ago

Karma
2,730
Submissions
1,717
Member since
Oct 30
View on Hacker News

Recent submissions

Comment · 6 days ago
I've been running Qwen 3.8 Flash Next on Strix Halo with halogen-flash-server which is a pretty good experience (although unfortunately halogen is closed source).

But for coding and cybersec tasks I think GLM 5.3 might be the best one to use still.

Comment · 8 days ago
That's not what I mean. Even if they would monitor, they couldn't because some logs handle many certs but rate limit you so you couldn't catch up if you tried.

On top of that, to monitor you have to download full certificates and parse them all. Does that seem like a great way to do this to you?

Comment · 9 days ago
And the key on top of that can be used to open every other car that exists.
Comment · 10 days ago
No. It doesn't solve anything for domain owners. They don't really monitor the logs nor can they sustainably do so.

The static CT API does have a "names tiles" API but it's not a real/usable thing.

Comment · 10 days ago
Certainly some American CAs aren't any better, flashbacks to Comodo 2011 (now Sectigo).
Comment · 10 days ago
Interesting to mention Google because the whole system still relies on them. They decide what certificate transparency logs can enter the program and offer the list of logs. If you don't trust Google web PKI falls apart.
Comment · 10 days ago
What's worse is, if this hadn't come to light, how would you even know when an attacker issues a cert for your domain?

Well you might think, oh I can monitor the certificate transparency logs.

I would say well, good luck downloading and parsing terabytes of certificates as they are logged. Then there are CAs whose logs will rate limit you in a way such that you can't catch up to the certs being logged with one server and IP. The system might "work" but not for domain owners. Good luck.

Comment · 11 days ago
I just had a thing today where I wanted to play Forza Horizon 4 on my handheld.

When trying to launch the game I got a "Must sign in to Xbox/Microsoft to play". So I reluctantly complied and entered my password only to be met with "password login not available" after pressing enter.

Great... guess I just won't play then.

Comment · 18 days ago
When you are on "gemini.google.com" there is a little lock icon next to Gemini 3 and Gemini 4. When you click it you get the prompt to subscribe (pay). Once you have successfully done so, the Gemini 4 option disappears!

Pretty misleading.

Comment · 18 days ago
Well, what I will say though is that I trust the university more when it comes to curating which textbook to read.

Learning on your own can sometimes feel like looking for needles (good learning material) in a haystack (e.g. the internet).

Luckily, many universities and university professors make their courses and course material publicly available!

Comment · 18 days ago
Isn't EmbeddingGemma2 already a decision model? Am I misunderstanding your question?
Comment · 23 days ago
I agree. It's "open source" but I would put a huge asterisk on that label. It really reminds me most of AI models that are only open weights.
Comment · 25 days ago
I've used Polars before and can only recommend it.

It's like you get a really good 'query planner' like a DB would give you, but for your notebooks/scripts/etc. Much better than pandas imo.

Comment · 26 days ago
Look into the krun runtime (part of crun) if you'd like to do this.
Comment · 28 days ago
C3 is honestly so good and a bit underrated.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton