News for hackers. Stuff that matters.

Dangeranger

Re:Ask HN: What're You Reading? on Wednesday September 30, 2026 @10:30AM (#49909525)
I've been reading more than usual this year, have found it profoundly rewarding, and recommend it as an antidote to social media and news fixation to anyone who will listen to me.

A few of my favorite reads so far this year:

- The Buffalo Hunter Hunter, Stephen Graham Jones

- Angel Down, Daniel Kraus

- Piranesi, Susanna Clarke

- Between Two Fires, Christopher Buehlman

- The Everlasting, Alix E. Harrow

- The Prince of Tides, Pat Conroy

- Nettle & Bone, T. Kingfisher

- The Tainted Cup, Robert Jackson Bennett

- The Nickel Boys, Colson Whitehead

A better overview of the situation with more context exists on Yahoo Finance [0], also there is no paywall.

[0] https://finance.yahoo.com/technology/ai/articles/oracle-cite...

Re:Late.sh – a command-line Clubhouse for computer people on Wednesday July 22, 2026 @10:45AM (#49007657)
For anyone looking for a safer way to evaluate this (like myself), feel free to use my safer ssh connection script[0].

[0] https://gist.github.com/dangeranger/4a00ae6bed3a733161ffa3a5...

Re:Codex starts encrypting sub-agent prompts on Tuesday July 14, 2026 @11:48AM (#48908665)
Definition provided below for others like myself who abhor acronyms:

MCTS -> Monte Carlo Tree Search

You should never store passwords in plain-text, encrypted or not, you should always use a one-way cryptographic hash like bcrypt [0], scrypt [1], or PBKDF2 [2], combined with a single use salt [3] and optionally a pepper [4], and then store the output of the hash in the database.

To confirm a user supplied password matches you run input into the same hash function again with the salt+pepper and compare it to the value in the database.

That way if the database is stolen, the attacker cannot recover the contents of the passwords without brute forcing them. Encrypting passwords is not recommended because too often attackers are able to recover the encryption keys during the same attack where the password data is extracted.

[0] https://en.wikipedia.org/wiki/Bcrypt

[1] https://en.wikipedia.org/wiki/Scrypt

[2] https://en.wikipedia.org/wiki/PBKDF2

[3] https://en.wikipedia.org/wiki/Salt_(cryptography)

[4] https://en.wikipedia.org/wiki/Pepper_(cryptography)

Re:Why Node.js needs a virtual file system on Tuesday March 17, 2026 @11:37AM (#47414182)
There are alternative package managers like Yarn that use zip files as a way to store each Node package.[0]

[0] https://yarnpkg.com/advanced/pnp-spec#zip-access

Re:AirPods Max 2 on Monday March 16, 2026 @04:25PM (#47404390)
Yes, my AirPod Pros do this too, and I've found that the issue is due to a problem with the external microphones which are involved in active noise cancelling. In order to fix the problem I had to disable ANC, and use them like a pair of basic wireless headphones, which has been quite disappointing. I've found that basically any instance of dropping the headphones on a solid floor, even while in the case, will result in this rattling sound occurring.
Re:AirPods Max 2 on Monday March 16, 2026 @04:20PM (#47404332)
I've been using the AirPods Max 1s for the last five years and you should get the Sony XM-6s. The Apple AirPod Max sound great, bur are heavy and fairly uncomfortable on the head when worn for more than an hour or two. Furthermore, I experienced persistent wireless connectivity problems and eventually sent them back to Apple under warranty. They were replaced successfully, but with a different pair of the same model which had a worn out headband. Overall it's been a bad experience and I wish that I purchased the Sony XM-6s insead.
Re:Deno Sandbox on Wednesday February 04, 2026 @10:14AM (#46886826)
The AI agent can run `echo $API_KEY` all it wants, but the value is only a placeholder which is useless outside the system, and only the proxy service which the agent cannot directly access, will replace the placeholder with the real value and return the result of the network call. Furthermore, the replacement will happen within the proxy service itself, it does not expose the replaced value to memory or files that the agent can access.

It's a bit like taking a prepaid voucher to a food truck window. The cashier receives the voucher, checks it against their list of valid vouchers, records that the voucher was used so they can be paid, and then gives you the food you ordered. You as the customer never get to see the exchange of money between the cashier and the payment system.

Re:SparkFun Officially Dropping AdaFruit due to CoC Violation on Wednesday January 14, 2026 @10:42AM (#46617326)
This post [0] suggests that leadership at SparkFun has been engaged in a long term harassment campaign targeting the founder of AdaFruit (Limor Fried) using company resources, and is allegedly using their CoC as a smokescreen to cover up their own bad behavior and cast blame on the victim.

[0] https://forum.pjrc.com/index.php?threads/open-source-teensy-...

Re:SparkFun Officially Dropping AdaFruit due to CoC Violation on Wednesday January 14, 2026 @10:35AM (#46617235)
See additional context for the accusation(s) here[0].

[0] https://forum.pjrc.com/index.php?threads/open-source-teensy-...

Re:SparkFun Officially Dropping AdaFruit due to CoC Violation on Wednesday January 14, 2026 @10:32AM (#46617182)
For context: This post by ptorrone suggests that leadership at Sparkfun has been engaged in a long running harassment campaign against the founder of AdaFruit (Limor Fried) and is now attempting to weaponize their CoC to cast blame on the victim in order to deflect from their own behavior[0].

    for anyone still reading:
    in july, we told sparkfun they needed to get their house in order. for years, sparkfun's leadership ignored specific behavior from leadership (and employees, now former... they had created and promoted hate sites, photoshopped images, and harassment targeting limor, me, and others at adafruit. this was done on company time, shared, promoted. this was reported to them. it was documented and ignored. that was the big issue i wanted them to get some hr training on, or _something_

    months later in 2025, the same individual resurfaced and re-promoted it with what appears to be nate's blessing at the time. we again told sparkfun to deal with this. instead of addressing the behavior, sparkfun’s response was to “ban” adafruit from purchasing teensy by invoking a vague, secret set of rules that neither we nor paul (the creator of teensy) were allowed to see.

    this is not a one-off. nate (the founder of sparkfun) has done this before. anyone who has worked with him long enough knows this is how conflict is handled: deflect, escalate, and try to punish rather than deal with the underlying conduct.

    we do not respond to bullying by backing down. we never have. that is why we are here.
https://forum.pjrc.com/index.php?threads/open-source-teensy-...
You could just run it in a Docker container and not think about it much after that. Mount a volume to the container with the directory contents you want to be available for edit by the agent.

https://github.com/openai/codex/blob/main/codex-cli/scripts/...

People are getting fed up with hijacking to promote a competing business or side project.
Re:Ask HN: What was your most humbling learning moment? on Monday June 03, 2024 @09:21AM (#40562374)
New eyes, new mind, freedom of ideas.
Re:Leaving Everything Behind For Elixir [video] on Wednesday February 28, 2024 @11:35AM (#39540307)
NoBoilerplate, Aarthificial, CodeAesthetic, SimonSwiss, Chris Biscardi, Planetscale, Freya Holmer, and Sam Selikoff are all great.
Re:Beautiful Documents with Groff (Part I) on Wednesday May 17, 2023 @02:15PM (#35979172)
A document describing how to use Groff and Mom together by Peter Schaffter[0] can be found here[1].

[0] https://schaffter.ca/pdf/curriculum-vitae.pdf

[1] https://www.gnu.org/software/groff/groff-and-mom.pdf

Both you and the parent commenter are correct; A saddle that matches your personal anatomy will make a tremendous difference for all riding conditions, and the amount of times you vary your position on the bike will alleviate discomfort by allowing blood to flow naturally as your weight shifts. More intense riding conditions necessitate moving around on the saddle more often.

Additionally, if you simply ride your bike more often your groin and siting bones will feel more comfortable by acclimating to the pressure and movement. It's helpful to wear appropriate clothing in the areas that contact the saddle as well, such as a chamois liner, to reduce friction and add an appropriate amount of cushion.

Re:Rapid growth, lessons learned and improvements at Fly.io on Wednesday March 08, 2023 @09:37AM (#35069436)
If you have any interest in writing a series of blog posts about your experiences in the “turnaround” and linking to them in your profile I believe you would have an audience. Your explanations are clear and your experience is worthwhile. Just food for thought.

Older »