News for hackers. Stuff that matters.

grouchypumpkin

Re:Let's discuss sandbox isolation on Friday February 27, 2026 @04:07PM (#47185616)
QubesOS was built to give sandboxes kernel isolation via a hypervisor.

It’s not surprising that most people don’t know about it, because QubesOS as a daily driver can be painful. But with some improvements, I think it’s the right way to do it.

I believe current research says the root cause of homelessness is lack of affordable housing in a city. Drugs and mental illness are important, but still secondary factors.
Re:HPV vaccination: How the world can eliminate cervical cancer on Saturday November 09, 2024 @09:06PM (#42098141)
Sudden death almost two years later, and Cerebral hemorrhage almost three years after vaccination does seem unrelated to the “medicine they took”.
Re:Why you should use Go on Wednesday October 23, 2024 @03:32PM (#41928533)
I'm really curious, which language is better than Go in those regards?

Because I find Go is better than Javascript/Typescript, Java, Python, C++, C# on all of those.

Re:Android "Password Store" client for pass discontinued on Monday October 21, 2024 @03:26AM (#41901561)
Isn’t it the same threat model as Lastpass breach? Login credentials seem to be worth money, and crypto keys even more.
Re:Android "Password Store" client for pass discontinued on Monday October 21, 2024 @02:37AM (#41901265)
I worry a lot about password managers on mobile. Such as:

* if an app has a single developer (keepassium? strongbox?), how much money would it take them to add a back door? 1M USD? 10M USD? Let’s say they are exceptionally honest, and won’t take money. How about threats to their lives or families?

* if an app has a small number of engineers with commit access (bitwarden? 1paasword?) could any one of them be compromised by money or threats?

* Would password managers from Google/apple/microsoft fare better because they already face these risks and have controls? Or maybe not?

Re:Ask HN: Which companies give programmers offices? on Thursday August 10, 2017 @10:57AM (#14980347)
I know for a fact LBNL Software Developer 4 pays less than half the salary of other software companies.

Screw that.