Hacker Newsnew | past | comments | ask | show | jobs | submit | 0points's commentslogin

Don't fall for the whataboutism trap.


neither my answer nor ops point is whataboutism.

they bring up a valid point: libreoffice is (in their opinion) harder to use and probably lower quality, so reports are harder to write and taking away time from more important things.

in my opinion libre office is absolutely good enough for this use case and thus not taking away significant time from other tasks. furthermore, the austrian armed forces are free to contribute to the project to improve the perceived paint points themselves.

on the other hand microsoft products are closed source and probably upload data to datacenters outside the customers (i.e. in this case, the militaries) sphere of influence. this may include the data (for storage and or AI training) and meta data (for advertising and telemetry).

microsoft may even silently introduce or reactivate (after they've been declined) those options after updates (don't quote me on this, but i think i remember this happening at least once).

microsoft apologists may argue that this is only the case for improperly configured corporate deployments, but as the software is closed source nobody can really be sure and if it's that hard to get right, it's a security problem in itself.


> arder to use and probably lower quality, so reports are harder to write and taking away time from more important things.

They almost certainly have templates for their reporting, so its just adding text, figs, and tables. And lower quality how?


My point was rather that officers should have better things to do than feed the bureaucracy with reports no one will ever read, and so the harder you make it to write reports, the less likely they will do more of them!


This situation only exist because Microsoft would allow kernel level anti-cheat in the first place, which is a moronic feat wrt security.


> the CEO were backing Trump and Vance on Reddit and other places

Something happened, but THAT didn't.

https://medium.com/@ovenplayer/does-proton-really-support-tr...


> Given Proton’s outstanding track record and reputation thus far as a free, open-source, crowdfunded organization, owned by a non-profit and based in Switzerland (a country known for its neutrality), this topic is worth a deep dive.

Either it was someone paid to write this, or if author really believes this, they are not someone I trust.

Maybe the organization is non-profit (which I do not believe is practically true), it does not explain them sharing so much with Tesonet.


Not allowed to have any meaningful discussion on this site. @dang will tell you to edit your posts before banning you.


I specifically put the OP in the second-chance pool (https://news.ycombinator.com/item?id=26998308), which is why it got re-upped (https://hnrankings.info/45469376/). Rather an odd way to suppress discussion, no?


The post is not about Israel but the comment is about Israel. Comments and posts about Israel are typically flagged to death very quickly.


That comment is https://news.ycombinator.com/item?id=45496427 (same subthread as this). Anyone can look and see that it's a counterexample.

Similarly: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...


We do see your comments, you know?

https://news.ycombinator.com/item?id=45476243

etc etc etc etc.

As you yourself put it there, you are happy to have moderation abuse pointed out but when I do, you just ban me.

Such a wasted potential and time to move on.


We don't ban people for criticizing moderation. It's common, though, for people to make grand claims about being banned for that reason, when in fact we banned them for breaking the site guidelines or otherwise abusing the site.

Since your account isn't banned, you must be talking about a different account. Why not link to it so readers can make up their own minds?

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...


Daniel Stenberg has been vocal about AI generated patches in the past, and it's interesting to see him changing course here.

https://news.ycombinator.com/item?id=38845878

https://news.ycombinator.com/item?id=43907376

https://media.ccc.de/v/froscon2025-3407-ai_slop_attacks_on_t...


He's been against people submitting garbage they don't understand, not AI as a whole.


There's a metric ton of them by now. Here's incomplete notes from a couple of years ago:

### kaitai - https://github.com/kaitai-io/kaitai_struct - https://github.com/kaitai-io/awesome-kaitai - http://formats.kaitai.io/dos_datetime/index.html

### Hexinator / Synalyze It! - Universal Parsing Engine - Hexinator is freemium version of Synalyze It! - https://github.com/synalysis/Grammars/blob/master/bitmap.gra...

### quickbms - http://aluigi.altervista.org/quickbms.htm

## multiex - http://multiex.xentax.com/

### Game Extractor by WATTO - http://www.watto.org/game_extractor.html

### 010 editor templates - https://www.sweetscape.com/010editor/repository/templates/

### hex fiend templates - https://github.com/HexFiend/HexFiend/tree/master/templates

### malcat - has some form of binary templates - https://malcat.fr/

### Andys Binary Folding Editor - http://www.nyangau.org/be/be.htm

### winhex templates - https://www.x-ways.net/winhex/templates/index.html

### TRiD - file identifier - TrID is an utility designed to identify file types from their binary signatures. - https://mark0.net/soft-trid-e.html

### GNU file - https://github.com/file/file

### Noesis - Noesis is a tool for previewing and converting between hundreds of model, image, and animation formats. - http://richwhitehouse.com/index.php?content=inc_projects.php... - https://github.com/RoadTrain/noesis-plugins - https://github.com/RoadTrain/noesis-plugins-official

### Ninja ripper - extract individual models from DirectX 3D games, while they are running - https://ninjaripper.com/

### Unpakke - http://www.nullsecurity.org/unpakke

### Camoto online-only universal game modding tool - https://moddingwiki.shikadi.net/wiki/Camoto - https://camoto.shikadi.net/


Great list! Will incorporate some of those into my list of tools for binary parsing: https://github.com/dloss/binary-parsing


> Swedish here. The impression is common.

Swedish here, too.

Your impression is misguided. Maybe it's the norm in Stockholm, but 80% of the population live elsewhere. We do use cash and nobody thinks its suspicious to pay with cash, stop making stuff up.


> people under 60 that uses cash are considered, if not criminal, at least suspicious, like they have something to hide

You are spewing complete nonsense.

Here's some perfectly normal stuff I use cash for in sweden on the regular:

- flea markets

- strawberry stand by the road

- unmanned vegetable shop has a cash bin and a pay-for-what-you-take sign


Denmark would do all that with MobilePay.

But I do see people paying with cash in supermarkets etc, and I don't judge them as criminals. Some people just prefer to manage their money that way.


all those prefer swish payments instead of cash!


> It's usually not said out loud, but cash is often considered to be dirty and criminal

As a swede, your statement is outlandish and false.

We use cash all of the time.


I'm living in Sweden for ~20 years.

I haven't used a banknote in more than 15 years. During this time I can't recall a single time I saw anyone using a banknote either.

Here in Malmö where I live, especially since COVID, you'll be searching more and more to find stores that take cash (besides supermarkets and kiosks and the like). I would say more than half of them don't accept cash any longer. Speaking of restaurants or pubs, my estimation would be that 2/3 have signs that say "no cash". Maybe more.

You can't do simple things as taking public transport if you want to pay by cash. You can't pay in the bus. You can't buy in the machine. It's all card or app only. You'll need to search around for an equivalent of a 7-11 kiosk to be able to buy a ticket using cash. Depending on where exactly you are when you need that, it may take as much walking than you wanted to save by taking public transport.

If you took a daily trip to the Danish side (Copenhagen) and need to come back home, I'm not even sure if it's possible to get back if you need to buy a ticket and only have cash on hand. Only Skånetrafiken sells that particular ticket and only via machines that don't take cash.

Handling cash became more expensive than taking card payments. It's also more complicated in terms of logistics and payments take longer. With this set of incentives, it's understandable why the shift happened.

Not saying I particularly like this development. Just reporting my anecdotal experience.


If your local hairdresser gives you a cheaper price when paying cash, wouldn't you assume tax evasion? (criminal).

Someone selling a used bike, or other items of similar value, on second hand market and not accepting Swish would maybe not directly be considered criminal, but would for sure raise an extra eyebrow about the origins of the goods.

Otherwise correct, nobody would blink if you use cash for other daily purchases like ice cream or groceries, even if unusual.


As a swede, your statement is false.

Most of us don't use cash all the time unless you're a kid or >60. I can't even remember the last time I used cash.


That is just not true. To quote the Swedish riksbank. "The Swedish payment market is almost entirely digital"

https://www.riksbank.se/en-gb/payments--cash/payments-in-swe...


> The answer is likely wordpress, because its default wp_hash algorithm is still MD5.

That's only true if you ignore all the details.

As usual, you cannot make a coherent understanding on just about any subject by reading headlines alone. Life would have taught you by now that the devil is in the details.

WP uses salt and multiple rounds of hashing, fully mitigating the md5 collisions being topic of discussion here.

So no, wp doesn't "use md5" in the sense that they would be vulnerable to this type of attack.

Source: https://developer.wordpress.org/reference/functions/wp_hash_...


Your source described wp_hash_password(), not wp_hash().

As the OP article/PoC is about hashing uploaded files, not passwords btw, I think you should read it again.

Because as I pointed out, wp_hash() is used to check against uploaded files.

Oh, and source: https://developer.wordpress.org/reference/functions/wp_hash/

And as I cannot resist quoting you for trying to smartass while literally not having read the source code the PoC was about:

> As usual, you cannot make a coherent understanding on just about any subject by reading headlines alone. Life would have taught you by now that the devil is in the details.


This is not related to password hashing.,.


Literally in this "article"

>Can use it bypass some cached webshell detections.


> As usual, you cannot make a coherent understanding on just about any subject by reading headlines alone.

The amount of sweet, sweet irony displayed here will make me diabetic. Did you read the article at all? Salting? What are you on about?

Honestly, it feels that some HN commenters are LLMs instructed to defend a given entity.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: