News for hackers. Stuff that matters.

retlehs

Re:Polymarket Halts Trading as Users Report $1.4M Drained on Thursday October 29, 2026 @04:43PM (#50295606)
Looks like DebugBear was compromised, they’re telling folks to remove their embeds from sites

Can only find this communicated on Twitter at the moment: https://x.com/debugbear/status/2115866496643535293

Re:Show HN: Swurf – Swipe through the real web on Friday October 23, 2026 @04:30PM (#50214905)
Very cool, this reminds me of Kagi's Small Web:

https://kagi.com/smallweb/

Re:Quien – A better WHOIS lookup tool on Saturday April 11, 2026 @10:41PM (#47735721)
The link doesn’t load for me FYI. A web version would be in Go, reusing the TUI internals. All doable, just not where I want to spend my time right now. I’ll likely get to it at some point.
Re:Quien – A better WHOIS lookup tool on Saturday April 11, 2026 @09:49PM (#47735515)
This was really just a personal tool I built because I got tired of parsing default whois output. Don’t have the bandwidth for a web UI right now, maybe down the road.

It’s not about making money. It’s more that there’s no real way for people to discover it by competing for visibility on whois-related searches against established sites.

Re:Quien – A better WHOIS lookup tool on Saturday April 11, 2026 @03:57PM (#47733483)
The goal was a fast terminal tool, and I'm not ruling it out, but considering how hard it would be to compete in the SERPs with other whois sites, I don't think I'd spend the time on it right now
Re:Quien – A better WHOIS lookup tool on Saturday April 11, 2026 @12:07PM (#47731726)
Thanks for the request! Shipped both in https://github.com/retlehs/quien/pull/4
Re:Show HN: ANSI-Saver – A macOS Screensaver on Saturday March 07, 2026 @11:30AM (#47289060)
This is really great work, I’m installing this immediately once I’m back on my machine

My terminal loads ANSI each time it opens, but requires downloading artpacks first: https://github.com/retlehs/ansimotd

I also like how your README suggests specific packs to grab

Show HN: ANSItype – Browse 900 TheDraw fonts in the browser

https://ansitype.com/

There's a project called tdfiglet that allows you to preview TheDraw fonts (https://www.roysac.com/thedrawfonts-tdf.html) from a CLI, but I wanted a web view to quickly browse through the font archive.Type some text, pick a font, get ANSI color or plain block output, and filterable by style.

( Read More... | no comments | 2 points | on HN )
Re:Ghostty – Terminal Emulator on Sunday March 01, 2026 @12:58PM (#47209023)
The tip releases have had search support for a few months:

https://github.com/ghostty-org/ghostty/issues/189

https://x.com/mitchellh/status/1993728538344906978

As Mitchell stated above:

> Ghostty 1.3 is around the corner, literally a week or two away, and will bring some critically important features like search (cmd+f), scrollbars, and dozens more. In addition to GUI features it ships some big improvements to VT functionality, as always.

As others have noted, the emails frequently include the sender's actual GitHub username or organization in the body or signature.

Attribution isn't speculative. The DKIM/SPF headers show the messages are authenticated and sent through the company's own mail servers, signed by their domain. These are not spoofed "[email protected]" messages. I include the original headers in every abuse report.

In several cases I've engaged directly. One founder replied to my "stop spamming" email and later sent me a LinkedIn request. When the name in the signature, the GitHub profile, the authenticated sending domain, and the LinkedIn account all align, the hacked-account explanation no longer fits the facts.

By visiting the account and noticing that it still has activity long after the report.
I’ve made over five reports for this exact spam scenario, and never once have y’all acted on them. I have a hard time believing you ban spam accounts that clearly violate your ToS.

I even wrote about a specific example of a YC company spamming me from my GitHub email at https://benword.com/dont-tolerate-unsolicited-spam

Re:Serving Markdown Instead of HTML to LLM User Agents on Sunday September 28, 2025 @10:30AM (#45404589)
After Bun reported a 10x token reduction by serving markdown docs to Claude Code, I implemented the same approach for our docs site.
Re:The American nations across North America on Monday September 22, 2025 @05:00PM (#45339380)
> There's a big ford in each driveway that hasn't hauled more than dogs and kids since the day it came home

I can't speak on Knoxville because I've only spent a day there, but I've spent a good bit of time around Amarillo mostly from driving between CO and TX over a hundred times, although not really in the suburbs.

Saw a lot of beat up trucks that looked like they were owned by blue collar folks and used for truck things. But of course there's also plenty of brodozers, which I'm assuming are also fairly common in Knoxville.

Re:The American nations across North America on Monday September 22, 2025 @02:17PM (#45337372)
What shared traits do you see between Amarillo and Knoxville? Having visited both, Amarillo is distinctly High Plains/Western while Knoxville is Appalachian. Different cultures, geography, everything.
Re:Tinycolor supply chain attack post-mortem on Wednesday September 17, 2025 @03:08PM (#45280063)
This won’t protect against everything, but it still seems like a good idea to implement:

https://github.com/danielroe/provenance-action

Re:Legal win on Saturday September 13, 2025 @03:29PM (#45234658)
WP offers a “no-content” packaged version

https://downloads.wordpress.org/release/wordpress-6.3.1-no-c...

There’s also a Composer package:

https://github.com/roots/wordpress-no-content

Re:Distrust of Symantec TLS Certificates on Wednesday September 05, 2018 @12:41PM (#17919582)
PayPal's site is affected by this
Re:Show HN: Live Simple – Tiny homes on Sunday September 20, 2015 @04:10PM (#10248871)
Tried to sign up with Facebook and got an error, FYI.
Re:Wordpress Bootstrap 3 Starter Theme – MIT License on Tuesday December 17, 2013 @11:41AM (#6922039)
You shouldn't be hardcoding CSS/JS into the template files - look into wp_enqueue_style and wp_enqueue_script.

Could use a better directory structure, too. Assets should be in a different folder, things like the walker should be in a lib/includes folder.

Being a starter theme, it doesn't make sense to just reference the Bootstrap CSS from a CDN. Shouldn't you have the LESS files so people can easily make changes without having to do overrides in their CSS?

ps. It's "WordPress", not "Wordpress" (http://codex.wordpress.org/Function_Reference/capital_P_dang...)

Disclaimer: I made Roots (http://roots.io), a Bootstrap starter theme that's been around for a while

Re:Stop using Digital Ocean Now For the greater good on Tuesday September 24, 2013 @01:19PM (#6439277)
This happened to a friend who runs a DO server on July 22nd. The server had been running for several weeks when it was suddenly taken down out of nowhere for over 4 hours to "verify" the account. There wasn't any warning and my friend immediately provided what they had requested.

Their response? They shut down the server because of "unusual traffic" coming from the server which wasn't even being used yet.. but there was "outbound traffic about 977.38 Mbps at its peak at around 2013-07-22 14:50:00UTC"

They need to fully verify accounts before letting anyone create a server. You shouldn't just take down a server out of nowhere, for several hours, after it's been running for weeks.

Re:SiteInspire — web design inspiration on Sunday January 06, 2013 @04:19PM (#5017785)
It's hard to find good inspiration galleries that feature modern design and code. Drawar's gallery (no longer around) used to be my favorite, but lately I've mainly used Unmatched Style:

http://unmatchedstyle.com/gallery

Re:Bootstrap 3.0 Upcoming changes on Wednesday December 19, 2012 @12:21PM (#4943571)
Adding support for IE7 will be easy:

- Add the box-sizing polyfill: https://github.com/Schepp/box-sizing-polyfill

- Use 'display: inline; zoom: 1;' (with the * hack) wherever 'display: inline-block;' is used

Re:Click around, hover over a link on Thursday September 27, 2012 @11:58PM (#4584243)
This is awesome, too: http://metafizzy.co/ (also from David DeSandro)

Hover over the logo and watch how the colors on the page change

Re:Team Fortress 2 now free forever on Friday June 24, 2011 @12:56AM (#2691055)
TF2 is an extremely fun game. Looks like there's a Hacker News group on Steam with a few members..

http://steamcommunity.com/groups/newsyc

Re:Gridless: a responsive HTML5 and CSS3 boilerplate on Sunday June 12, 2011 @01:53PM (#2646950)
ahh, my bad on #1 - it's early :)

The source formatting kinda threw me off with the entire head being tabbed and the empty body, maybe add a little dummy HTML inside the body like the H5BP?

Re:Gridless: a responsive HTML5 and CSS3 boilerplate on Sunday June 12, 2011 @01:34PM (#2646908)
Looks good, I've got few questions for you:

- Why put respond.js in the footer? (H5BP puts it up in the head with the call to Modernizr)

- Why self-close your meta and link tags if you're using HTML5?

- Why doesn't the image in the demo resize as you resize the window? (img { max-width: 100%; } fixes that)

Older »