News for hackers. Stuff that matters.

brewmarche

Re:US boy names that became girl names and vice versa on Monday November 02, 2026 @01:47PM (#50341614)
Interestingly if I remember correctly they have different origins, Maria is a biblical name, while Mario comes from Latin (which can decline Marius to Maria, but that’s a different word)
Re:Ask HN: Who wants to be hired? (November 2026) on Monday November 02, 2026 @11:40AM (#50339498)

  Location: Germany (UTC +1/+2), EU citizen
  Remote: preferred
  Willing to relocate: no
  Technologies: C# and previously C++ and Java, I like functional programming and data-oriented where appropriate. I know SQL, Azure, Docker, high performance computing (Monte Carlo simulations), see also CV
  CV: https://pub.999568.xyz/wwtbh/rcv-202611-hjh39tsvaj1.pdf
  Email: see CV
I work in mathematical finance so I have domain knowledge in that area (derivatives, pricing, probability theory), but other domains are also welcome.

Happy to provide you with an unredacted CV personally.

Re:Domain hacks with unusual Unicode characters (2018) on Sunday November 01, 2026 @09:33AM (#50326078)
Not sure why so many things use the compatibility form of normalisation.

Some older RFCs even recommended using it for passwords, which needlessly reduces entropy (yes we need to normalise passwords because of combining characters, but we don’t need to collapse symbols that a user can choose from, like ſ and s).

In my opinion, the compatibility form makes mostly sense for searching text, and even then it’s sometimes annoying (I want to search exactly for ss and not ß, browser). If you know of other good use cases let me know.

It also OK to disallow registering two identifiers with the same compatibility normalisation form (edit: this does not prevent all homoglyph attacks BTW, that is another can of worms), but I don’t see the need to normalise the identifier when it’s used.

Interestingly, this blog post says it is implemented in the Win32 and kernel API (in RtlGetFullPathName) and thus should also work outside of cmd.exe: <https://projectzero.google/2016/02/the-definitive-guide-on-w...>
Re:NetBSD adds a new beginner-friendly text editor called atto on Thursday October 29, 2026 @09:46AM (#50288972)
> Unless they need Linux GPU/WIFI/BT drivers to make things work, of course. Then it's fine.

The parts of Linux that get integrated into BSDs should not be GPL-licensed, e.g. <https://github.com/torvalds/linux/blob/c339f4010dea8b0d754f8...> and its siblings use MIT.

I think it’s possible to add intermediate certificates with distrust marker attributes to bundles with OpenSSL. But other libraries consuming the bundle would not understand it, so the problem remains.
Apple’s own security framework is supported by curl with OpenSSL or GnuTLS (build with ./configure --with-apple-sectrust). That blocks the intermediate certificates via the same mechanism Safari uses for example.

Not sure why macOS doesn’t ship such a build of curl.

Re:Who killed the EV cert? A browser whodunit for Halloween on Tuesday October 27, 2026 @11:10AM (#50260545)
Maybe we should do registered trademarks? For disambiguation location and class of goods/services might still be needed, but a certificate showing as “Google (search engines, US)” (taken from [0], picking Nice class 42) would be recognisable to many users, I guess.

[0]: https://branddb.wipo.int/en/brand/US502016086912587

Re:Show HN: Steal My Bitcoin on Sunday October 25, 2026 @05:15PM (#50236130)
I’m not sure I’m understanding this comment [0] correctly, but even back then it seemed possible to get PHP involved?

[0]:<https://news.ycombinator.com/item?id=50225861>

Re:There is no official XScreenSaver GitHub repository on Tuesday October 20, 2026 @08:43AM (#50165500)
Just delete the cookies of jwz.org (to be specific, the cookie called HN)
I’d say most ‘mainstream’ libraries pretend that every day, even a day with leap seconds, has 86400 regular-length seconds. But I thought that within UT1 the length of a second varies every day, so I would not have called that UT1.
Re:The technical actions needed to ensure the continuity of UTC on Thursday October 15, 2026 @07:20PM (#50111727)
Didn’t Julia choose UT1 for their standard date time library? Although they might want to reconsider with this decision
Re:Apple/macOS silently removed from official Unix registry on Saturday October 10, 2026 @10:53AM (#50033576)
IIRC there were some UNIX Linux distributions in the past but the certification wasn’t renewed
Re:Why don't more developers "use the platform"? on Sunday October 04, 2026 @06:09PM (#49958415)
> Landscapers sometimes accommodate desire paths by paving them, thereby integrating them into the official path network rather than blocking them.[…] Sometimes, land planners have deliberately left land fully or partially unpathed, waiting to see what desire paths are created, and then paving those.

from <https://en.wikipedia.org/w/index.php?title=Desire_path&oldid...>

Re:Ask HN: Who wants to be hired? (October 2026) on Sunday October 04, 2026 @11:05AM (#49954518)

  Location: Germany (UTC +1/+2), EU citizen
  Remote: preferred
  Willing to relocate: no
  Technologies: C# and previously C++ and Java, I like functional programming and data-oriented where appropriate. I know SQL, Azure, Docker, high performance computing (Monte Carlo simulations), see also CV
  CV: https://pub.999568.xyz/wwtbh/rcv-202610-vfay7k0zano.pdf
  Email: see CV
I work in mathematical finance so I have domain knowledge in that area (derivatives, pricing, probability theory), but other domains are also welcome.

Happy to provide you with an unredacted CV personally.

Re:cp: -r or -R? on Saturday October 03, 2026 @08:13PM (#49949193)
I remember that macOS/FreeBSD’s cp -R behaves differently depending on the trailing slash (it’s pointed out in the man page). But when I compared with GNU coreutils and busybox they did not, so it’s something to look out for.
Just checked it and I underestimated. Just before the split it was at 54k LOC: <https://github.com/dotnet/runtime/blob/b96f3cc738f7fca9474fb...>

I’ve also read that a first version of the file came from a Common Lisp to C++ code generation step: <https://news.ycombinator.com/item?id=23295041>

Until recently the .NET garbage collector used to be a single 30,000+ lines C++ file. And it was maintained by one person if I remember correctly.
Re:Small Programming Tricks on Wednesday September 16, 2026 @05:30PM (#49733298)
Didn’t know about that one, and can’t find any references, but works in my fish

I’ve always used Ctrl+U, it’s an Emacs shortcut, so it works in many shells and other prompts (especially since readline supports it) by default.

(For example Ctrl+Opt+- doesn’t seem to work in the Python REPL whereas Ctrl+U does.)

Yeah I have seen this issue a few times. If you use Docker build arguments that way add `--provenance=false` to get rid of all that build metadata. Build secrets are still better since they allow you to scope the secret inside of the Dockerfile. Also, the metadata can be useful to inspect images.
Re:Why is the x86 undefined instruction called ud2? Why 2? on Sunday September 13, 2026 @12:27PM (#49685728)
I thought MS-DOS had special handling for A: and B: since it allowed you to copy from A: to B: even with just one floppy drive.
Apologies, I focused on LLVM as a whole. You are right about clang (and I didn’t know about the arm64 backend)
They asked about ‘originated’ in particular.
Swift comes to mind, and this website has more https://opensource.apple.com/projects/ (it lists WebKit, but I guess they count WebKit after it split from KHTML, I’d agree with you there)

Also, Bonjour originated at Apple and it is cross-platform, although Avahi probably is more popular

CUPS is associated with Apple as well, but it seems that it also did not originate there

Re:.gitignore Everything by Default on Sunday September 06, 2026 @12:18PM (#49587991)
But they do: https://github.com/github/gitignore/blob/main/Global/VisualS...

You need to merge the relevant ignore files to create one specific for you, so if you use VSCode on macOS VisualStudioCode.gitignore (e.g., .vscode) + macOS.gitignore (e.g., .DS_Store). There are files for other OSs and editors as well. Technically their README says that the Global folder is intended for user-specific ignore files. But you can still use them for the repo .gitignore.

There is also this API which you can curl: https://gitignore.io/api/macos,vscode

Some of the templates seem to be identical, but I think they are not in sync.

Re:Ask HN: Who wants to be hired? (September 2026) on Tuesday September 01, 2026 @03:42PM (#49527050)

  Location: Germany (UTC +1/+2), EU citizen
  Remote: preferred
  Willing to relocate: no
  Technologies: C# and previously C++ and Java, prefer functional style and privately dabble with F# and Haskell. I know SQL, Azure, Docker, high performance computing (Monte Carlo simulations), see also CV
  CV: https://stash.ldr.name/wwtbh/rcv-202609-vfay7k0zano.pdf
  Email: see CV
I work in mathematical finance so a lot of domain knowledge in that area (derivatives, pricing, probability theory).

I am looking for work in other domains as well.

Happy to provide you with a full CV personally.

Older »