Hacker News Reader

HumanOstrichon The federated code forge

I wanted to try this but when I signed up for a BlueSky account it was immediately banned by some automation. I appealed but never heard back.

HumanOstrichon Show HN: Auto Dismiss Mac OS "Allow <app> to find devices on local networks?"

I don't think KYC is relevant here.

HumanOstrichon Claude Code regularly sends each background agent’s transcript to its model

Thanks armchair lawyer.

HumanOstrichon Claude Code regularly sends each background agent’s transcript to its model

More paragraphs! Fewer bangs!

HumanOstrichon We let our cloud agents query prod (with OIDC, not secrets)

Not sure what you mean. How would it "breached" itself? Where would a bad prompt come from?

HumanOstrichon We let our cloud agents query prod (with OIDC, not secrets)

As stated in the second paragraph of TFA, the machine workloads get their own infrastructure identity. Each identity can have different policies and permissions.

HumanOstrichon Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

> and built that as a small static Rust binary

I don't think memory safety would have helped here.

> the case for adopting a maximalist framework and trusting that entire supply chain is a lot weaker

You mean the Rust ecosystem?

HumanOstrichon Friendship ended with Deno, now Node is my best friend

You shouldn't be sending a body with a GET request. Sounds like your code is broken.

HumanOstrichon Dutch governments builds alternative for Microsoft based on NixOS

Yes, and they should also rewrite all available packages for Nix in Rust, along with the Linux kernel.

No, that's still not enough complexity! They need at least a thousand agents using trillions of tokens around the clock to get us the Nix and Rust slop we need.

HumanOstrichon GPT-5.5 Codex reasoning-token clustering may be leading to degraded performance

Anthropic is the one that prohibits harnesses other than Claude Code on subscription plans and bans users for disobeying.

OpenAI officially allows that with subscriptions.

HumanOstrichon GPT-5.5 Codex reasoning-token clustering may be leading to degraded performance

If you bother to look at the issue instead of whining and complaining, you will see the evidence.

HumanOstrichon Half-Baked Product

Now this is the kind of honest snark I would hire.

HumanOstrichon Potential session/cache leakage between workspace instances or consumer accounts

What does this have to do with anything? Who are you talking to? This is Hacker News, not Anthropic support.

HumanOstrichon Why frontier LLMs can't read the hard documents without experts involved

Are you high?

HumanOstrichon Why frontier LLMs can't read the hard documents without experts involved

This is rather incoherent.

HumanOstrichon We found a bug in the hyper HTTP library

Order of magnitude more complexity.

HumanOstrichon OAuth for all

> OAuth is pretty simple, just read the spec.

You picked probably the only semi-straightforward thing about part of one of the OAuth specs, then hand-waved away the other 95% of the necessary related specs, knowledge, and experience for getting an implementation working robustly and securely for a non-trivial use case.

HumanOstrichon 32GB of DDR5 now costs $375 – AI shortage continues to squeeze PC building

Great if you have fiber and live down the road from the datacenter.

HumanOstrichon Uber's $1,500/month AI limit is a useful signal for AI tool pricing

We aren't talking about insect identification models from 2019.

HumanOstrichon Cloudflare Turnstile requiring fingerprintable WebGL

> I don't think I average even 2 captchas a day being terminally online, so 10 across every soul in the world sounds way too much for me. (we're ignoring bots it's meant to deter?)

You're mixing up checks, fingerprinting, and PoW with a captcha being triggered because those didn't pass. The less abnormal your setup is, the fewer captchas you'll get.

I agree with the rest of what you said.

Also I think you mean "scraper" and not "scrapper".

HumanOstrichon Creatine raises brain energy levels and slows cognitive decline: study

N=1 P=0.5

HumanOstrichon Private equity bought America's essential services

Replacing parts of PE firms with AI is so far from being a useful suggestion here.

HumanOstrichon AMD pulls a bait-and-switch on Linux users with Vivado licensing changes

I don't think gaming on Linux is comparable here.

HumanOstrichon I’ve banned query strings

Libraries that automatically throw errors for status codes in the 400 and 500 ranges are pretty obnoxious (looking at you, axios). It adds unnecessary overhead, complexity, and bad ergonomics by hijacking control flow from the app.

Responses with status codes in the 400 range are client errors, so the client shouldn't retry the same request. So a 404 is appropriate despite how annoying a library might be at handling it. Depending on which language/ecosystem you are using, there are likely more sane alternatives.

HumanOstrichon Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibc

Yep, the Anthropic acquisition, this petulant Rust rewrite, and bun's increasingly buggy releases (slop) have caused me to migrate my projects (personal and work) to nodejs+pnpm.

The risks of using bun are no longer just those concerns around a newer tech and "drop-in" replacement for nodejs. Now you have to marry Anthropic, Rust, and a founder with conflicting priorities.

HumanOstrichon Higher usage limits for Claude and a compute deal with SpaceX

Hey Grok is pretty good for meme videos and pics. For anything serious, not so much.

HumanOstrichon Accelerating Gemma 4: faster inference with multi-token prediction drafters

That is.. inaccurate.

HumanOstrichon Google Chrome silently installs a 4 GB AI model on your device without consent

> This also makes it the only open American frontier-level model right now.

I'm not going to keep arguing with you. If you want to keep arguing, go to https://gemini.google.com/. Gemini knows what a frontier model is and it knows that Gemini Nano is fundamentally different from the other Gemini models. For one, it uses the Gemma architecture. And the next version of Gemini Nano is built directly on Gemma 4.

As for your original claim that I quoted, there are other "open American frontier-level models" by your definition. Like Gemma 4.

HumanOstrichon Google Chrome silently installs a 4 GB AI model on your device without consent

Thanks. Looks like the current Gemini Nano is actually a separate model with the Gemma 3n architecture that has been distilled from Gemini 2.5 Flash[1].

Also, the next version of Gemini Nano will be based directly on Gemma 4 (so not distilled, not Gemini at all except for the name)[2].

So no, it's not a frontier model. Those don't run on your phone or in your browser.

[1]: https://developer.android.com/blog/posts/ml-kit-s-prompt-api...

[2]: https://android-developers.googleblog.com/2026/04/AI-Core-De...