News for hackers. Stuff that matters.

HenriTEL

Re:Passkeys are a trap. Do not use them on Monday October 12, 2026 @07:39AM (#50054911)
AFAIK the whole point of attested passkeys is that they are not copyable, which make it pointless to backup in apple cloud, which must be one of the main reason Apple decided to not go that route.
Re:Passkeys are a trap. Do not use them on Monday October 12, 2026 @05:35AM (#50053739)
It turns out that most people don't want the need to re-generate each of their credentials when they lose their device.
Re:Tell HN: PayPal Blocks GrapheneOS on Thursday August 27, 2026 @11:36AM (#49466570)
The problem here seems to be that the phone is detected as rooted, not specifically that it's running grapheneOS. But I agree that it's a big problem. That's how you end up in a situation where google has full control from hardware to final apps like on iphones. When devs assume that everybody is using the stock android with google services enabled.
Did you try to disable animations? There's an option in the developers settings.
Re:Small, native web tricks worth remembering on Tuesday August 25, 2026 @09:25AM (#49433641)
I thought the "Private Feedback" field was the demo when I checked the first example which was "Disable a subtree with inert". The css carousel sound very nice, I wish I could have played with an example directly. Thanks for sharing.
Re:Small, native web tricks worth remembering on Saturday August 22, 2026 @11:52AM (#49400954)
If only there was a way to render this syntax in the browser.
Isn't that the purpose of DKIM and SPF already?
Your DB runs more heterogeneous workloads and migrations so it's more likely to blow up.
Re:My Thoughts on the Bun Rust Rewrite on Thursday July 09, 2026 @09:00AM (#48845148)
Thank you Andrew for sharing your side of the story. We can see that the relationship with Bun and Jarred was far from easy. You say it with your own words and even if it sounds bitter I like it much more than some bland AI assisted content.
looks bad on desktop too, most content being uncentered (spread at the edges of the screen).
Re:The Last Technical Interview on Saturday May 30, 2026 @04:55PM (#48340539)
Without a way to estimate "AI power" used for the task I don't see how you can fairly rate home assignments.
Not an expert but I'm pretty sure that constitution > statutes and ordinances > rules and regulations. Meaning that USCIS must follow the intent of the law when publishing regulations. In the case of H1B the law is clear that it gives a specific status of temporary worker distinct to the immigrant status. USCIS itself acknowledges it:

https://www.uscis.gov/newsroom/news-releases/us-citizenship-...

> Our system is designed for them to leave when their visit is over. Their visit should not function as the first step in the Green Card process.

Re:GitHub RCE Vulnerability: CVE-2026-3854 Breakdown on Wednesday April 29, 2026 @08:28AM (#47947402)
So they had a security-critical header whose fields are set by their internal authentication service. And that same field can also contain arbitrary strings passed by the end user with git push -o

I know it's easy to say after the fact but still, wtf

Re:Ask HN: Who wants to be hired? (March 2026) on Tuesday March 10, 2026 @03:47PM (#47327948)

  Location: Paris, France
  Remote: Yes
  Willing to relocate: No
  Technologies: Python, AWS, Rust, kubernetes, terraform, linux
  Résumé/CV: https://www.linkedin.com/in/henrihannetel/
  Email: [email protected]
Backend engineer with 9 years experience building systems on AWS. Recently exploring Rust for high-performance services and infrastructure.
Ah yes, MinIO, that open source S3 alternative that got archived last week. To me that's the biggest problem when self-hosting services. On day to day operations, some times it just breaks and the time to get it back varies from a couple of hours to a couple of days. And for the longer term you regularly have to upgrade things yourself which takes time and energy and is stressing for stateful deployment. And then you have it, at some point maintainers are just exhausted and the project is gone.
Re:AI Is Killing B2B SaaS on Thursday February 05, 2026 @06:04AM (#46898369)
I had a similar experience where someone that had prior experience with django while we were using sqlalchemy started to design a django-like ORM on top of sqlalchemy. Of course it took him some time to get working, was a hell to understand and extend and most importantly lacked support for basic features.

Fortunately it was limited to a small isolated service but I can imagine the damage on the long term if you continue that route on what becomes a huge monolith after a few years.

Re:Scaling PostgreSQL to power 800M ChatGPT users on Friday January 23, 2026 @09:09AM (#46732660)
Yeah that's an ad for Azure Cosmos DB
Re:Python Numbers Every Programmer Should Know on Saturday January 03, 2026 @07:57AM (#46476031)
The goal of the article is not to know the exact numbers by heart, duh!

Care about orders of magnitude instead, in combination with the speed of hardware https://gist.github.com/jboner/2841832 you'll have a good understanding of how much overhead is due to the language and the constructs to favor for speed improvements.

Just reading the code should give you a sense of its speed and where it will spend most time. Combined with general timing metrics you can also have a sense of the overhead of 3rd party libraries (pydantic I'm looking at you).

So yeah, I find that list quite useful during the code design, likely reduce time profiling slow code in prod.

Re:Python Numbers Every Programmer Should Know on Saturday January 03, 2026 @05:54AM (#46475168)
Python is slow but in my experience (that mostly relates to web services and data processing) I found that I/O was by far the biggest bottleneck. Waiting for the database, another http service or local storage, which often takes more than 1ms anyway.
Re:Python Numbers Every Programmer Should Know on Friday January 02, 2026 @07:12AM (#46464030)
22ns for a function call and dictionary key lookup, that's actually surprisingly fast.
Re:Average DRAM price in USD over last 18 months on Thursday December 04, 2025 @07:44AM (#46147025)
Increasing swap is more like adding more HDD. It won't help memory pressure issues.
Re:Brand New Layouts with CSS Subgrid on Wednesday November 26, 2025 @05:36AM (#46056068)
Ah yes, a new css concept! I love this kind of article that invariably contains this kind of statement:

> This is mind-bending stuff, but it becomes intuitive with a bit of practice.

The problem is not the language, it's just that you did not spend enough time to learn it the proper way.

Well you nailed it, the language you're looking for is SQL. There's a reason why duckdb got such traction over the last years. I think data scientists overlook SQL and Excel like tooling.
Re:Over-Regulation Is Doubling the Cost by Peter Reinhardt on Friday November 21, 2025 @03:10PM (#46008407)
Login fall under the strictly necessary category and does not require consent for cookie storage under GDPR.
Re:Over-Regulation Is Doubling the Cost by Peter Reinhardt on Friday November 21, 2025 @06:03AM (#46003319)
About the cookie banners, I'm honestly not sure it's a regulation issue. For >90% of the websites the "reject all" option have no impact on user experience, so either everybody is breaching or the banner is useless in the first place.
Re:I finally understand Cloudflare Zero Trust tunnels on Tuesday November 18, 2025 @06:28AM (#45963740)
With that it becomes clear that some service is self hosted (the DNS record points to a private IP). It can be a security issue when the Whois record or the domain name allows the identification of the hosting entity. Finding its physical address can be an easy task depending on its social presence.

Then probably the hosting place is an easier target than a data center.

Re:Personal data storage is an idea whose time has come on Sunday October 05, 2025 @03:52PM (#45484645)
To be fair nowadays .com refer much more to the default, main or official domain of an entity. Say you know the name of a non corporate website, are going to try .com first of something else?
Re:Ask HN: Who is hiring? (October 2025) on Thursday October 02, 2025 @10:25AM (#45450028)
Diffusely | Backend Software Engineer - Python | Full-Time | Hybrid (Paris, FRANCE)

Diffusely is an AI media enhancement company that leverages its cutting-edge media processing platform to develop tailored products for specific verticals: Carcutter for the automotive industry, Autoretouch for the fashion one and Propershot in real estate.

As a Backend Engineer at CarCutter, you will be joining the global #1 visual AI editing and optimization solution for the automotive industry, used by customers from all around the world. Due to our steady growth, we are now expanding our passionate & motivated CarCutter team.

https://diffuselycompte-1738823875.teamtailor.com/jobs/55872...

Contacts: henri[dot]hannetel[at]diffuse[dot]ly

Re:What is "good taste" in software engineering? on Monday September 29, 2025 @07:52AM (#45412561)
You're comparing apples and oranges. Good taste in fashion is much more subjective than in software engineering, obviously because one stays a subjective discipline while the other always ends up in formal science.

What's interesting is that software engineering starts in social science where most choices are made subconsciously or at least not discussed with other people.

Older »