News for hackers. Stuff that matters.

adontz

Similar in Georgia https://eservices.rs.ge/app/Downloads

XML/SOAP based protocol was created with modern at the time .Net technologies, but nobody really cared about interoperability, so it screams "old .Net" now.

Re:TLS certificates for internal services done right on Thursday July 09, 2026 @11:36AM (#48847667)
Moreover you can delegate domain to improve security.

https://www.eff.org/deeplinks/2018/02/technical-deep-dive-se...

It's not a good analogy. Something is still on in suspend. Good you can control Linux kernel, but what about all other chips which may be an attack vector?
Re:DialUp95 – A 90s inspired nostalgia hit on Wednesday February 25, 2026 @08:18AM (#47151098)
Very similar, thank you so much
Re:DialUp95 – A 90s inspired nostalgia hit on Saturday February 21, 2026 @01:47PM (#47103476)
Oh, nostalgia. I had a US Robotics 56K modem, which produced two bell-alike sounds during handshake. It was cool. I search for that specific sounds for years and cannot find.
Re:I dumped Windows 11 for Linux, and you should too on Sunday January 11, 2026 @01:04PM (#46577935)
I'm currently developing ASP.Net Core services and modern .Net is quite nice. Everyone around me uses absolutely free Visual Studio Community edition, so it would be weird to not use it.
Re:I dumped Windows 11 for Linux, and you should too on Sunday January 11, 2026 @07:47AM (#46575294)
These articles... I'm not sure who are the target audience, because I am definitely not and I don't know anyone who is. Specific OS is not the important, anything with modern KDE is good enough to replace Windows 10/11.

But do I (and all my colleagues) need Microsoft Office (Word, Excel at least) and/or Drawing software (Adobe or something) and/or god forbid Visual Studio 2026, and some other corporate software to make a living? Inevitably yes.

Re:Is Google Down? - EU networking issue on Thursday September 04, 2025 @03:50AM (#45124734)
In particular the following are not accessible ajax.googleapis.com fonts.gstatic.com gmail.com google.com www.googletagmanager.com www.youtube.com
Re:Is Google Down? - EU networking issue on Thursday September 04, 2025 @03:45AM (#45124692)
Same in Georgia
Re:Nginx Introduces Native Support for Acme Protocol on Thursday August 14, 2025 @08:00AM (#44899368)
It's a Python package you can install with pip, never ever installed it with Snap
Re:Nginx Introduces Native Support for Acme Protocol on Wednesday August 13, 2025 @12:31PM (#44890604)
certbot has an plugin for nginx, so I'm not sure why people think is was hard to use LetsEncrypt with nginx.
Re:SQL Injection as a Feature on Wednesday July 23, 2025 @07:35AM (#44658017)
What people often don't realize is that in a big business system a user may have no permission to raw data of some table, but may have permission to report which includes aggregated data of the same table, so report permissions cannot be deducted from base CRUD permissions.

If such SIAAS

    - Checks that query is SELECT query (can be tricky with CTE, requires proper SQL parser)
    - Allows editing said query by superuser only
    - Can be parametrized, including implicit $current_user_id$ parameter
    - Has it's own permissions and users can run the query if they have permissions
It's safe enough. I've seen and applied such "Edit raw SQL in HTML form" many times. It's super flexible, especially combined with some CSV-to-HTML, CSV-to-PDF, or CSV-to-XLS rendering engine.
I've successfully replaced django.contrib.auth multiple times. It it not easy, but it is not too hard either. Honestly, everything else they do could be a regular Django app. Looks to me like forking a big project became a marketing move rather than technology necessity.
Re:I built a website where you can pop confettis for no reason on Thursday January 30, 2025 @06:07AM (#42876718)
Thank you. I really needed that in my life today.
Re:Ask HN: Who wants to be hired? (December 2024) on Tuesday December 03, 2024 @12:04PM (#42308420)
Location: Georgia

Remote: Yes

Willing to Relocate: Yes

Technologies: .Net, Ansible, AWS (DynamoDB, EC2, ElasiCache, Lambda, Organizations, RDS, etc.), Azure, C, C++ (Qt), C# (WPF), Jira, Go, Linux, Python (Django), TailwindCSS, Terraform, reverse engineering formats and protocols, cryptocurrencies

LinkedIn: https://www.linkedin.com/in/adontz/

Email: [email protected]

I am an Engineer with experience in backend software development, desktop software development, embedded development, electronics, and infrastructure management. I like to know things.

In recent years I was head of DevOps department in a bank and CTO is an early stage startup. Love open source.

Re:There is no legitimate parliament or government in Georgia on Friday November 29, 2024 @02:17AM (#42271646)
A bit of a first-hand witness context

The Georgian Dream party rigged the elections, stole at least 20% of the votes, securing a constitutional majority.

During the election campaign, the Georgian Dream party promised its voters EU membership.

The party approved the composition of the parliament and government with a gross violation of the law.

The party presented an average football player without a higher education as a candidate for the country's president. This same person could not become the president of the football federation due to the lack of a higher education.

The self-appointed prime minister announced that the question of EU membership will not be considered until 2028.

Unorganized protests began simultaneously in five cities. Police dispersed people with a mixture of cold water and pepper spray. Dozens of protesters were hospitalized with chemical burns to their skin.

Re:Hyrum's Law in Golang on Thursday November 21, 2024 @04:47AM (#42202617)
Nobody teaches people to use them. There is no analog to "catch most specific exceptions" culture in other languages.
Re:Hyrum's Law in Golang on Thursday November 21, 2024 @04:46AM (#42202610)
Nope, exceptions in Python are not the same. There are a lot of standard exceptions

https://docs.python.org/3/library/exceptions.html#concrete-e...

and standard about exception type hierarchy

https://github.com/psycopg/psycopg/blob/d38cf7798b0c602ff43d...

https://peps.python.org/pep-0249/#exceptions

Also in most languages "catch Exception:" (or similar expression) is considered a bad style. People are taught to catch specific exceptions. Nothing like that happens in Go.

Re:Hyrum's Law in Golang on Thursday November 21, 2024 @03:30AM (#42202261)
Honestly, this is so much worse than "catch". It's what a "catch" would look like in "C".
Re:Hyrum's Law in Golang on Thursday November 21, 2024 @03:28AM (#42202248)
This is a good example of "stringly typed" software. Golang designers did not want exceptions (still have them with panic/recover), but untyped errors are evil. On the other hand, how would one process typed errors without pattern matching? Because "catch" in most languages is a [rudimentary] pattern matching.

https://learn.microsoft.com/en-us/dotnet/csharp/language-ref...

Re:Hyrum's Law in Golang on Thursday November 21, 2024 @03:23AM (#42202221)
https://www.joelonsoftware.com/2000/05/24/strategy-letter-ii...

Jon Ross, who wrote the original version of SimCity for Windows 3.x, told me that he accidentally left a bug in SimCity where he read memory that he had just freed. Yep. It worked fine on Windows 3.x, because the memory never went anywhere. Here’s the amazing part: On beta versions of Windows 95, SimCity wasn’t working in testing. Microsoft tracked down the bug and added specific code to Windows 95 that looks for SimCity. If it finds SimCity running, it runs the memory allocator in a special mode that doesn’t free memory right away. That’s the kind of obsession with backward compatibility that made people willing to upgrade to Windows 95.

Re:SQLite vs. PostgreSQL Performance [video] on Tuesday November 19, 2024 @02:28AM (#42180840)
Great video.

I suspect CPU spikes are caused by Go's GC, not some Postgres client issue. Anton got similar latency spikes in nginx vs Caddy test, explained them by GC then.

While settings in the video make sense for production, worth noting that SQLite WAL settings can affect performance by an order of magnitude, so YMMV. Also, SQLite may be completely in memory.

Yes, it's not a good solution. Targeting was missing, good catch. I've just shared an unusual experience to inspire further experimenting.
Yeah, naming was bad. Courage 0 is maximum courage.

>> How did you measure "experiment tolerance"?

Feedback from CS mostly. No formal method. We tried to survey clients to calculate courage metric, but failed to come up with anything useful.

Mostly functional changes. Like deploying a new parser, which may not support all the old files. There were users which will contact customer support in panic stating that their life is ruined by this change and there were users who's like that fixed by next quarter.
I respectfully disagree. Depends on number and severity of experiments. Comparing two decimals is really not harder than checking a boolean, still a single "if". I do not see much over-engineering here.
>> How do you deal with the bias from your 'more courageous' people?

That's a great question. We had no general solution for that. We tried to survey people, but results were inconclusive, not statistically significant.

Older »