Top all-time · #1499
David Buchanan's Blog
Personal blog · da.vidbuchanan.co.uk/blog · on HN as Retr0idsecurityprogramming
David Buchanan's Blog is a personal blog at da.vidbuchanan.co.uk about security and programming. Since 2021, 47 different Hacker News readers have linked it 94 times, most often “Adversarial ATProto PDS Migration”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (25) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for security and reverse-engineering write-ups: the Acropalypse screenshot exploit, AT Protocol account migration, Apple and Google photo provenance, and SIMD in pure Python.
- Recommended for · 2 comments
- One commenter says a post goes over running Chrome on ARM64 devices pretty well; another calls the Acropalypse write-up nice.
Summarised by Claude from a sample of 25 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Adversarial ATProto PDS Migration6 people · 10 mentions · first linked 2025-07-29
- C2PA Cameras Do Not Survive Contact with Reality5 people · 6 mentions · first linked 2026-08-25
- The Quest for Netflix on Asahi Linux5 people · 5 mentions · first linked 2023-03-09
- SIMD in Pure Python5 people · 5 mentions · first linked 2024-01-05
- Jailbreaking RabbitOS4 people · 5 mentions · first linked 2024-07-16
- Exploiting ACropalypse: Recovering Truncated PNGs4 people · 5 mentions · first linked 2023-03-18
- Shell permission errors for busy coding agents4 people · 4 mentions · first linked 2025-12-09
- Colliding Secure Hashes3 people · 5 mentions · first linked 2023-12-18
- PNG files can be animated via network latency3 people · 4 mentions · first linked 2021-06-21
- S32 Unix Clock3 people · 3 mentions · first linked 2023-09-13
What Hacker News says?
I made a less-polished version of this too, although mine uses the Oklab colourspace for interpolation: https://www.da.vidbuchanan.co.uk/widgets/css-gradient-fixer/
Comment linking /widgets/css-gradient-fixer/
on “CSS Gradients that avoid the “gray dead zone””Submitted Jailbreaking RabbitOS as a story · 1089 points
HN discussionPublished: https://www.da.vidbuchanan.co.uk/blog/android-c2pa.html
Comment linking /blog/android-c2pa.html
on “MS Paint and Photos inivisibly watermark even locally generated output with GUID”Submitted Can you get root with only a cigarette lighter? as a story · 681 points
HN discussionSomething similar with APNG: https://www.da.vidbuchanan.co.uk/adamation/image.png
Comment linking /adamation/image.png
on “Deploy a website on imgur.com”Submitted PNG files can be animated via network latency as a story · 511 points
HN discussion> it sounds like its an optional mode you have to enable It’s opt-in because your photo is sent to Apple’s servers. Only if it were on-device should they even consider making it default. > i guess you need internet to take a picture Not really, internet is required to process the reference image, but that can happen later if you’re not currently connected. > are complex hardware attacks really that important? No, bu…
Comment linking /blog/android-c2pa.html
on “Apple Reference Image: A New Approach for Verified Photography”Submitted PNG Parser Differential as a story · 506 points
HN discussionThis isn't strictly true. If you can sign a did document (i.e. you've set up a recovery key), even if your old PDS refuses to cooperate (or disappears entirely) you can still move to a new PDS and deactivate your account on the old PDS (as this is done via your did document)[1]. It's not exactly trivial to do currently but tools are being developed that automate the process and render all this down into easy to use…
Comment linking /blog/adversarial-pds-migration.html
on “Are we decentralized yet?”Submitted SIMD in Pure Python as a story · 256 points
HN discussionThe private key is normally stored on your PDS (hosting). See https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat... for how to be prepared for adversarial migration.
Comment linking /blog/adversarial-pds-migration.html
on “Where it's at://”Submitted C2PA Cameras Do Not Survive Contact with Reality as a story · 183 points
HN discussionNeither of these is quite right. In AT, data is tied to identity (DID), not handles or hosting. That’s what my article tried to explain. If you lose the “handle” domain, all it means is that you won’t have a valid handle (which apps will tell you about) but your posts will remain up (they’re still addressable by your DID, which is how apps look things up). In the Bluesky app, for example, it would say “invalid handl…
Comment linking /blog/adversarial-pds-migration.html
on “Where it's at://”Submitted How to hack time, with C2PA as a story · 62 points
HN discussionRight, I see. You can get a key that overrides your PDS if you're worried about your PDS going rogue. See https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat... and https://whtwnd.com/bnewbold.net/3lj7jmt2ct72r . This is more complicated than I'd like it to be.
Comment linking /blog/adversarial-pds-migration.html
on “Where it's at://”Submitted When circumvention is more popular than compliance as a story · 44 points
HN discussionAh yes, this might be relevant then: https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat...
Comment linking /blog/adversarial-pds-migration.html
on “Where it's at://”Submitted Text Editors Should Be Worse as a story · 14 points
HN discussionThe Android version is useless though, TBD if Apple can do better. https://www.da.vidbuchanan.co.uk/blog/android-c2pa.html
Comment linking /blog/android-c2pa.html
on “iPhone 18 Pro and iPhone 18 Pro Max”Submitted Jailbreaking RabbitOS (The Hard Way) as a story · 10 points
HN discussionIncorrect: https://www.da.vidbuchanan.co.uk/blog/adversarial-pds-migrat...
Comment linking /blog/adversarial-pds-migration.html
on “Building Bluesky comments for my blog”Submitted Adversarial ATProto PDS Migration as a story · 8 points
HN discussionFor now. In the next few years I bet we'll see AAA games releasing streaming-only. Funnily enough I ended a recent blog post on this topic with "You will own nothing and you will be kinda pissed off about it." https://www.da.vidbuchanan.co.uk/blog/reversing.html
Comment linking /blog/reversing.html
on “AnyPS5: Port PS5 binaries to PC without emulation (87% system libraries mapped)”Submitted Stop Saying "Responsible Disclosure" as a story · 6 points
HN discussionI was playing with progressive PNGs, and with an "intelligent" web server, it's possible to halt image transmission (either temporarily or permanently) at a server-decided quality level. Here is a demo, which uses the different resolutions to create a pseudo-animation: https://www.da.vidbuchanan.co.uk/adamation/image.png It would be theoretically possible to write a server with a "give me the next quality level now"…
Comment linking /adamation/image.png
on “JPEG XL”Submitted Show HN: CSS Gradient Fixer as a story · 6 points
HN discussionThis is basically how my blog works, except I use mistune as the markdown renderer, which has allowed me to extend it over time, including adding syntax-highlighted code blocks and latex math syntax: https://www.da.vidbuchanan.co.uk/blog/mathml-blogging.html I also generate an index page and an RSS feed. One thing that's been bugging me more recently (now that I have tens of articles written) is that I need to imple…
Comment linking /blog/mathml-blogging.html
on “Minimum Viable Blog”Submitted Text Editors Should Be Worse as a story · 4 points
HN discussionI tried with the demo, but full content search does not work. I don't know if the demo is randomly generated, anyway this is the test I did. Text to search in the top search bar: RRP Page that contains that term: https://www.da.vidbuchanan.co.uk/blog/r1-jailbreak.html Result found: 0 Does this search the content of the archived pages?
Comment linking /blog/r1-jailbreak.html
on “Linkwarden: FOSS self-hostable bookmarking with AI-tagging and page archival”Submitted Jailbreaking RabbitOS (The Hard Way) as a story · 4 points
HN discussion
