Hacker Newsnew | past | comments | ask | show | jobs | submit | kludge41's commentslogin

How do you build the POC? I get "No such file or directory" and error 127 on Ubuntu.


I had to run make on the uncompressed folder. Perhaps the build-essential package doesn't come with NASM in Ubuntu? I'll need a bit more info on the error if you want me to try and help you :)


The parent commenter seems to have figured this out, but to clarify a bit for posterity: build-essential does not come with nasm on Ubuntu (or upstream Debian, AFAICT). It has to be installed separately for the Zenbleed PoC to compile (if not already installed).


After extracting the POC and installing build-essential, I still get this: nasm -O0 -felf64 -o zenleak.o zenleak.asm make: nasm: No such file or directory make: ** [Makefile:11: zenleak.o] Error 127


Install the nasm package. It's probably not included in build-essencial.


Thank you. I guess I should've read the error better, but I thought nasm was the thing complaining.


No shit you don't see people using it, all browsers hide support behind a feature flag or straight up removed support. Use your brain for a second.


When you evaluate Keepassium could you look into if the application honors not contacting anything on the internet? For me this is a major point of feeling secure when using the application and iOS has no way to block apps from accessing the internet.

Otherwise thank you a lot for checking KeePassXC!


Hi, KeePassium author here.

You can also directly verify these claims using the App Privacy Report. It's a system feature that shows which domains an app contacted over the last 7 days (and how often). And it works for all apps.

Unfortunately, there is no way to _enforce_ the offline behavior of an iOS app, but being able to monitor it is already something.


How exactly are you supposed to use a format that isn't supported?

How would 5% of sites ever get to use JXL if it isn't supported in web browsers?


By implementing the decoder in WebAssembly. It'd be lower performance than native decoding but probably not that bad.

Here's one: https://github.com/niutech/jxl.js

Demo: https://niutech.github.io/jxl.js/

Libjxl's own WASM build: https://github.com/libjxl/libjxl/tree/main/tools/wasm_demo


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: