For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | whizzter's commentsregister

And they include "phase 3 opts" in the phase2 benchmark, so the move to Bun also includes improvements from removing "safeParse". So Node might've been at more than 40% of the performance.

It's sad since these kinds of numbers are interesting, but when there's blatant misrepresentations it just create a stink.


I really hope NVidia takes this to court and manages to sue them for a ridiculous amount that sets a precedent.

Would it though? The only precedent it would set is to not mess with trillion dollar companies.

Is this implementation related to the AusweissApp I've seen mentioned before (that reads the cert via NFC from a physical card) or another implementation?

Still that huge a regression that affects multiple platforms doesn't sound too neat, did they narrow down the root cause?

That should be obvious to anyone who read the initial message. The regression was caused by a configuration change that changed the default from PREEMPT_NONE to PREEMT_LAZY. If you don’t know what those options do, use the source. (<https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...>)

EU digital identity law to make inter-EU signatures (And authentication) work.

As an example, an EU citizen working in Sweden should be able to submit Swedish tax forms whilst living here by using a digital identity from the originating nation.

There are also some standards in place like ETSI standardized extensions to PDF signatures so that you can verify that a signature inside the PDF was actually signed by a specific physical person (the standard is there but it's not fully used throughout the EU yet due to some legacies).

Implementation is a bit of a mess still but things are converging.


Is there a reason this user-hostile mess is preferred over an X.509 certificate (besides big tech lobbying)?

Slovenia hands out certificates for online government services, including document signing, and it seems to be going fine, with the added benefit that Google can't take away my access.


In the end it's mostly x509 certificates, an ETSI pADES PDF signature for example contains the signing x509 certificate (ETSI specifies extension OID's to the x509 certificates to contain personal numbers, country, etc).

The big question is how to let users properly handle their certificates so they won't get abused into being useless.

If I understood it correctly, the German current Ausweissapp seems to require NFC to read it from your personal id card together with a PIN code you got with the card, it's not entirely user-friendly since aligning the card with your phone seems to be prickly.

Swedish BankID handles it internally in their app (unlocked via PIN's) but they don't have a good way to use it to sign things (It all relies on the infrastructure even if they give out signature documents it's not compatible with pADES).

There's a new govt sponsored one that I assume will piggyback on the personal cards/passes that are readable via NFC.

Norway and Denmark iirc supports proper signatures but I don't think the certificates are under user control (someone correct me if I'm wrong here).

Now these things are mostly issues for document signatures, authentication is often handled via other flows.

What I skimmed from the article, it seems to be more in line with Swedish BankID and is actually fairly smooth for end users even if less secure than what they have now with Ausweissapp.


Most people wouldn't know what to do with a certificate, so governments build some stuff on top (like an official mobile app) which makes auth easier. It's usually just certificates underneath (not exposed to the user).

Eidas tries to harmonize these implementations across EU member states.


eIDAS is about making the electronic IDs emitted by the different EU governments intercompatible, so you can use a Slovenian certificate to authenticate into the German tax system, if you want to.

Do you happen to know if German citizens can obtain a certificate to sign PDFs (from the government / for free)?

Several paid providers for X.509 certificates exist but document signing certificates cost around 80 € per year [0]. And if I want duplicate X.509 certificates for my redundant Yubikeys then the cost doubles.

Other providers require an initial deposit and then charge per signature [1], which leads to intransparent pricing. In the interest of open commerce, I strongly believe that securely signing an electronic document should cost the same as my manual signature, i.e. nothing.

A partial solution already exists because I can use my electronic ID card with the AusweisApp to prove my identity when interacting with German authorities. This feature is generally useful because I live outside of the EU, but I especially appreciate that I can have my OpenPGP key signed by Governikus (a government provider) to prove the key belongs to my name [2].

Technically, I should be able to use my certified PGP key to sign documents, but in practice most non techies don't know how to validate my signature. For the average user opening my signed PDF in Adobe Reader, I would need an X.509 certificate from a trusted Certificate Authority for users to see the green check mark.

[0] https://shop.certum.eu/documentsigning-certifcates.html

[1] https://www.entrust.com/products/electronic-digital-signing

[2] https://pgp.governikus.de/wizard/requirements


The gold standard for digital signatures today is

- someone sends you a docusign link

- you sign up with your email

- you sign with your name in a cutesy font

Theres a dispute? Well it was going to end up in court no matter how you signed it anyway. This has all the hallmarks of a design by committee project by people whose salary is paid regardless of demonstrating market fit, productivity, usage, plain sensibleness...


Can I use Docusign to provide my identity in Estonia online via my phone when I move there to buy a SIM card or open a bank account or file a document with the local authority?

Can I also send the Docusign document via Signal without Docusign knowing the person who signs it?

Because that is what the eIDAS is supposed to deliver on top of cryptographic validation of signatures.


> Theres a dispute? Well it was going to end up in court no matter how you signed it anyway.

The fact that it's ALWAYS a docusign is the ridiculous part. It is just a glorified where you enter your name and email. No need to pretend otherwise. Any other service would be just as good. This is basic human sheep-like behavior?


Funny part is that the real infra behind digital signatures is insanely serious compared to DocuSing "cutesy font"..

I did not know that root CA keys are generated in faraday cages?? Multiple custodians persent, then kept in tamper proof vaults.

I had no idea until I saw this visual breakdown - https://vectree.io/c/public-key-infrastructure-pki-and-certi...


Made me laugh then cry. I’m willing to bet your comment still stands in 2030 unless someone like Apple allows FaceID to be used to sign too (this seems like an obvious and easy thing to do as they already got more than half of the infrastructure in place)

> inter-EU signatures

I assume this should be "intra-EU"? I'm not very familiar with eidas so I'm not sure, but afaik it's about signatures within the EU, not between different EUs (as there is only one in this world). (I hate this inter/intra wording, always have to translate it in my head to understand whether it's like internet (between networks) or like intranet (within a network). Would recommend using "within-" instead of intra whenever it's not already a well-established word, like intranet)


Yes of course, a bit tired here since it's nighttime.

Chineese phonemakers exist yet Apple pulls in a significant portion of profits due to their _halo_ allowing them to sell at a higher price point.

Tesla had that, all Musk had to do was refrain himself from waving his hand around in that certain fashion.

New registrations in Sweden for the past 3 years, Sweden alone would've probably absorbed about 14000 cars of that unsold stock.

  2023  20388  341835  0,0596428101276932  (5.96%)
  2024  21894  314485  0,0696185827622939  (6.96%)
  2025   7254  314426  0,0230706112089967  (2.31%)
  2026   2849   72525  0,0392830058600483  (3.93%)
(Sales in 2026 were low until March 2026, Musk probably gotta thank Trump for oil-prices jumping up enough to move the needle again)

The worst news for Tesla isn't the sales though, with "Texas-like" distances in Sweden (and Norway and Finland) there was a perception that only Tesla cars could properly handle the distances without getting too much battery angst.

When people started looking around they realized that the other carmakers were getting their shit together and could actually deliver cars that handled distances well enough.


> Chineese phonemakers exist yet Apple pulls in a significant portion of profits due to their _halo_ allowing them to sell at a higher price point.

The difference is that most customers have the financial wiggle room to buy a more expensive phone. With cars this is an entirely different story because cars are the most expensive things people own (besides a house).

For most people it holds that a car should just get them from A to B. The money for anything more fancy is better spent on something else.

There is a reason Apple is not in the car business.


And yet the average price paid for a new car is up to $50k. Americans definitely aren’t just buying a basic car to get them from A to B.

> Tesla had that, all Musk had to do was refrain himself from waving his hand around in that certain fashion.

He probably also would have had to refrain from retweeting white nationalists and adding the 100 points emoji that is usually used in that context to mean "100% agreement with the tweet".


Buying a Tesla was already considered edgy in some demographics, but doing that famous fascist gesture because you feel powerful definitely crossed a line as far as Europeans are concerned.

DOGing half the US population didn't help. I guess he wasn't content firing most of twitter, then begging half of them to come back, only to then lament that twitter had lost 80% of it's value in this processs wasn't enough. He had to do the same to the entire US ... and it's still working.

DOGE was super crazy and corruption at its finest, but that was US internal politics of which many in Europe do not care to such a degree.

Effectively endorsing Hitler is on a different level for many Europeans.

Even the right most extremists/fascists parties don't do that in the open, as far as I know (in Germany that would even be illegal and a party doing that systematically could get banned).


Those are mostly end-user or hosting platforms you mention (and their problems), what really makes MS tick is the enterprise platforms.

Windows networks, Active Directory,etc. Azure is the continuation of that, those who run AD oftne default to Azure (that offers among other things hosted or hybrid AD environments).


Yeah those too, sorry I never worked with the MSFT stack in corporate, except for my first company when my IT knowledge was still minimum.

MacOS "was" big-endian due to 68k and later PPC cpu's (the PPC Mac's could've been little but Apple picked big for convenience and porting).

Their x86 changeover moved the CPU's to little-endian and Aarch64 continues solidifies that tradition.

Same with Java, there's probably a strong influence from SPARC's and with PPC, 68k and SPARC being relevant back in the 90s it wasn't a bold choice.

But all of this is more or less legacy at this point, I have little reason to believe that the types of code I write will ever end up on a s390 or any other big-endian platform unless something truly revolutionizes the computing landscape since x86, aarch64, risc-v and so on run little now.


And honestly at this point it's mostly a historical artifact, if we write that kind of stuff then sure we need to care but to produce modern stuff is a honestly massive waste of time at this point.

FWIW I doing hobby-stuff for Amiga's (68k big-endian) but that's just that, hobby stuff.


IBM z/Architecture, i (OS/400), and AIX aren't primarily used for "hobby stuff".

As troublesome digital tools are in practice, the stories of "tech execs refusing digital tools for their kids" is a trope often promoted/created by kindly put fringe actors.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You