Top all-time · #5081
Hugo Tunius
Personal blog · hugotunius.se · on HN as K0nservprogrammingdesign
Hugo Tunius's personal blog at hugotunius.se covers programming and design. Since 2014, 15 different Hacker News readers have linked it 53 times, most often “The One Cent Blog: Static Web Content on the Cheap”. It is still writing: the last post was on 2026-06-14, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link Hugo Tunius's posts on owning hardware and running any code on it, WebAssembly and Flutter Web, making invalid states unrepresentable, and publishing a blog with Jekyll and git.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Personal blog of Hugo Tunius. Developer, open source enthusiast, aspiring designer, and Hugo of all trades.
Most-linked posts?
- The One Cent Blog: Static Web Content on the Cheap4 people · 6 mentions · first linked 2016-03-04
- Flutter Web: A Fractal of Bad Design4 people · 4 mentions · first linked 2020-11-01
- An Analysis of Privacy on the App Store3 people · 5 mentions · first linked 2021-01-03
- Making Invalid State Unrepresentable2 people · 2 mentions · first linked 2020-05-17
- We should have the ability to run any code we want on hardware we own2 people · 2 mentions · first linked 2025-08-31
- The Sword Juggling Fallacy2 people · 2 mentions · first linked 2026-06-18
- Stop Using (Only) GitHub Releases2 people · 2 mentions · first linked 2025-10-05
What Hacker News says?
Lovely! Definitely like the style here and the focus on content first. Like other people have said it's similar to Motherfucking Website[1], and a Better Motherfucking Website[2]. I'll need to start including this when I link to those two. For my website[3] I'm really trying to keep weight on the wire down too so I am opting to skip the custom font and header image. It's quite nice to have 10-15kb pages in the age o…
Comment linking /
on “Show HN: Web Design in 4 minutes”Submitted We should have the ability to run any code we want on hardware we own as a story · 2071 points
HN discussionRelated thread from a month ago: We should have the ability to run any code we want on hardware we own, link: https://hugotunius.se/2025/08/31/what-every-argument-about-s... (Discussion link: https://news.ycombinator.com/item?id=45087396 )
Comment linking /2025/08/31/what-every-argument-about-sideloading-gets-wrong.html
on “F-Droid and Google’s developer registration decree”Submitted Flutter Web: A Fractal of Bad Design as a story · 124 points
HN discussionFor a free alternative I’ve got a blog post[0] detailing how to do it with the excellent mitmproxy utility. There’s also Burpsuite community edition which is pretty decent 0: https://hugotunius.se/2019/01/23/going-spelunking-with-mitmp...
Comment linking /2019/01/23/going-spelunking-with-mitmproxy.html
on “LinkedIn is copying the contents of my clipboard on every keystroke”Submitted An Analysis of Privacy on the App Store as a story · 36 points
HN discussionQuite happy with my own web page/blog. Pages hover at around 10kb, 30kb if I include some images. I think the page size can be attributed a lot to there being no JS except for GA. I have taken a lot of inspiration from http://motherfuckingwebsite.com/ and http://bettermotherfuckingwebsite.com/ Of course the size will differ depending on the site's purpose, but I feel like most web pages could stand to loose a lot of…
Comment linking /2016/01/10/the-one-cent-blog.html
on “The average size of Web pages is now the average size of a Doom install”Submitted Switching to Firefox as a story · 7 points
HN discussionAdding a CA cert to the OS trust store only works if the application uses it. I've encountered apps that don't use the OS trust store or networking stack; even then it's possible to reverse engineer the traffic though[0]. 0: https://hugotunius.se/2020/08/07/stealing-tls-sessions-keys-...
Comment linking /2020/08/07/stealing-tls-sessions-keys-from-ios-apps.html
on “MitmProxy2Swagger: Automagically reverse-engineer REST APIs”Submitted You are not the average user as a story · 5 points
HN discussionThat doesn't follow, Apple provides 6 different purposes for collecting data linked to the user: * Third-Party Advertising * Developer’s Advertising or Marketing * Analytics * Product Personalization * App Functionality * Other Purposes The features you mentioned would fall under "App Functionality" and as you imply it would be legitimate. The reservation with Facebook is all the data they collect for the five other…
Comment linking /2021/01/03/an-analysis-of-privacy-on-the-app-store.html
on “Apple's privacy labels show WhatsApp and Facebook Messenger hunger for user data”Submitted Flutter Web: A Fractal of Bad Design as a story · 4 points
HN discussionGreat set of tips. Unfortunately I find that so many post that suggest rebase recommend against force pushing. This takes a lot of the power away from rebase/amend. So much does this happen that is wrote a blog post titled "You should force push more"[0]. 0: https://hugotunius.se/2014/09/08/you-should-force-push-more....
Comment linking /2014/09/08/you-should-force-push-more.html
on “Git Tips”Submitted An Analysis of Privacy on the App Store as a story · 3 points
HN discussionI wrote[0] something similar to the first part of this post a while back for one of the AoC 2019 puzzles. However, it didn't strike me that you can represent each frame as a set and use the difference to figure out the resulting render commands, that's super neat. Something strange that I found was: If you redraw only two characters in the terminal, neither iTerm nor macOS's terminal would render the update. In my s…
Comment linking /2019/12/29/efficient-terminal-drawing-in-rust.html
on “Things I've learned building a modern TUI framework”Submitted Why Svelte Is Like Rust as a story · 3 points
HN discussionI agree with your diagnosis. It's what I concluded in my own Rust async blog post[0](which surely are mandatory now). It's even worse than bifurcating the ecosystem because even within async code it's almost always closely tied to the executor, usually Tokio. I talk about this as an extension to function colouring, adopting without.boats's three colour proposition with blue(non-IO), green(blocking-IO), and red(async…
Comment linking /2024/03/08/on-async-rust.html
on “Why choose async/await over threads?”Submitted The One Cent Blog: Static Web Content on the Cheap as a story · 3 points
HN discussionI encourage everyone to try routing your own device's traffic through mitmproxy and observing this in real time. It's eye opening. Apps like Deliveroo, which have legtimate reasons for high accuracy location access, send your data to marketing companies on every launch with very high precision. I've written a guide[0] about how to use mitmproxy to look at the data escaping your device. 0: https://hugotunius.se/2019/…
Comment linking /2019/01/23/going-spelunking-with-mitmproxy.html
on “An investigation into the smartphone tracking industry”Submitted Stop Using (Only) GitHub Releases as a story · 2 points
HN discussion> No native elements, no browser integration or extensions, interaction with the page, and accessibility. They all would suffer. Uh, but those things are already happening right now, e.g. Flutter Web UI [1] [1] https://hugotunius.se/2020/10/31/flutter-web-a-fractal-of-ba...
Comment linking /2020/10/31/flutter-web-a-fractal-of-bad-design.html
on “A pure WebAssembly / JavaScript port of FFmpeg”Submitted The One Cent Blog: run website for about $0.01 per month (2016) as a story · 2 points
HN discussionCross platform solutions all share several issues that result in poor experiences: Reimplementing platform UI Poor reimplementaions of platform UI, such as navigation, that almost always looks subtley wrong or doesn't "feel" right in terms of interactivity. This also often lead to shipping a single platform's UI convention on every platform, for example Material on iOS or iOS patterns and conventions on Android. Poo…
Comment linking /2020/10/31/flutter-web-a-fractal-of-bad-design.html
on “Netflix Android and iOS Studio Apps now powered by Kotlin Multiplatform”Submitted Going Spelunking with Mitmproxy as a story · 2 points
HN discussionThe whole notion of using fingerprints for authentication is weird. Essentially something that's akin to a username is being used as a password. I've wrote about this practice the other day[0]. It's interesting to observe that when Apple announced Touch ID for example it was presented as something with improved security. 0: https://hugotunius.se/2016/04/11/why-i-disabled-touch-id-and...
Comment linking /2016/04/11/why-i-disabled-touch-id-and-you-should-do-so-too.html
on “Understanding the ginormous Philippines data breach”Submitted Making Invalid State Unrepresentable as a story · 2 points
HN discussionKind of. At a more fundamental level, it's applying the idea that "invalid states should be unrepresentable" (e.g. https://hugotunius.se/2020/05/16/making-invalid-state-unrepr... ) but to our code itself. For example, consider a simple function to copy files. We could implement it like this: def copy(fs: Filesystem, in: Path, out: Path) { inH: HandleRead = fs.openRead(in); outH: HandleWrite = fs.openWrite("/tmp/TEST…
Comment linking /2020/05/16/making-invalid-state-unrepresentable.html
on “Some programming language ideas”Submitted The Stalactite Developer as a story · 2 points
HN discussion> At the time, BA said hackers had carried out a "sophisticated, malicious criminal attack" on its website. Compromising a single JS resource that was being carelessly loaded on a payment page doesn’t qualify as sophisticated in my mind. It might not be uncommon in the industry, but tools like SRI and CSP stop these attacks dead in their tracks. I believe we are about one huge attack[0] of this kind away from realis…
Comment linking /2018/11/29/how-to-hack-half-the-web.html
on “British Airways faces record £183M fine for data breach”Submitted Edge Cached Static Sites on CloudFlare as a story · 2 points
HN discussion
