HNHacker News
TopNewBestAskShowJobs

Insimwytim

459 karma · joined March 7, 2026

submissionscomments
Insimwytim··on The Mythical Man-Month in the Age of AI
Maybe he had AI assist him with that comment
Insimwytim··on There isn't an easy exploit for this PHP vulnerability

  Most non-browser TLS clients (so basically everything else, with default settings), things like curl, Python, Node, Go, Java, git, package managers and every script and daemon you've got, do three things that matter here: they trust a CA bundle on disk, they don't check revocation by default, and they don't check CT. So the fact that eMudhra and Sectigo have revoked these intermediates doesn't help them at all. [1]
[1] https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-key... ( https://news.ycombinator.com/item?id=50177916 )
Insimwytim··on There isn't an easy exploit for this PHP vulnerability
> It wasn't even a problem with the most popular logging framework at the time.

I can't say if it was most popular overall, but it (Log4Shell) was a nightmare for many F500 companies.

Insimwytim··on There isn't an easy exploit for this PHP vulnerability
It's also weird that it seem to has overshadowed certificates incident, which, to me, appears to be of at least the same magnitude of impact.
Insimwytim··on Chrome and Edge are removing XSLT: what breaks and what does not
So, this site breaks, we know that much
Insimwytim··on Stolen Renoir paintings found hidden, and damaged, behind cinder block wall
for a split second branch prediction in my head replaced 'cinder block wall' in the title with 'paywall'
Insimwytim··on ADHD as a circadian rhythm disorder: evidence and implications for chronotherapy
uBlock filter to fix selection:

  www.frontiersin.org##.InfoDrawer
Insimwytim··on OpenAI withdraws three mathematical results

  AI progress in software
Oh, yes... the progress... You measure it by LOC, right?
Insimwytim··on ChatGPT is adding real cartoonists' signatures to fake New Yorker cartoons
The problem is not that ChatGPT is doing that, the problem is that it's not being sued into oblivion after.
Insimwytim··on The death of web development education
This is quite weird that "AI" presumably ruined book sales, since the info from the books were mostly available though the search.

You want it structured? You need the book - "AI" won't solve it for you (well, if we discount cases of word for word reproduction... which we probably shouldn't, but this does not seem to be the argument here).

The kind of people, that read the books, are the kind of people that largely won't settle for a chatbot as a replacement.

Can there be another reason for the sales drop? Unemployment, "death of the junior", wages decline?

Insimwytim··on Android 17 is the first since 3.x to add new APIs without releasing to the AOSP

  No, these are standard Android APIs included since Android 17 QPR1. These will be available through AOSP and other OEMs via Android 17 QPR2 in December 2026. It's currently exclusive to Pixels because it was released as part of Android 17 QPR1 since QPR1 and QPR3 releases are now Pixel exclusive since Android 16.
  This is simply the first time they've added APIs in a QPR1 or QPR3 release following no longer releasing QPR1 and QPR3 to AOSP after the release of Android 16.
Insimwytim··on How to Write with an LLM
You can't even watch funny animal compilations anymore!
Insimwytim··on Linux Zoom client proactively reading everything written to X11 clipboard
Spin up your own instance and ask them to join!
Insimwytim··on The asteroid currently hitting front end web development

  Prompt: Answer without searching the internet:
Woah! Must it discard all pre-training as well?

It already slurped "the internet". You can't seriously say it doesn't count!

Insimwytim··on GPS glitched across the US by as much as 33 feet
TL;DR:

1. Not today. November 2025. They don't make it clear.

1.1. One would expect that to be put in the title, when the article is written almost a year after that.

1.2. No, the article doesn't state that in the first paragraph. Posting in it full seem to be the only way to fend off lazy comments:

  In November 2025, Earth was buffeted by several massive eruptions of solar material that slammed into the magnetosphere.
That's it - the whole paragraph. Several paragraphs later - GPS first mentioned. No clear links between dates stated.

2. It is unclear what is the source of the claim.

UPD: Commenter below found the source, but TFA doesn't make a good job of presenting that as a source of the 33 feet glitch claim, but rather posts another citation from it.

They should've just quote this and be done with it:

  During the storm main phase, an east–west elongated band of intense auroral brightness expanded equatorward, producing a horizontally extended strip of strong density gradients that favored the development of small-scale irregularities. These small-scale irregularities triggered pronounced amplitude scintillations (S4 > 0.5) and caused significant positioning errors exceeding 10 m—large enough to disrupt GNSS-dependent applications across CONUS for hours, particularly precision agriculture and autonomous transportation industries. [1]
3. Navigation issues happened before, they state it right there. They were more disruptive as well.

4. The author has articles all over the topics. Everything is sensationalized.

5. Every presented link seem to have this awful Cloudflare js challenge.

Bad article overall.

P.S. Response to the false claim below - no, there's nothing about GPS in "the first 3 words of the article".

[1] https://agupubs.onlinelibrary.wiley.com/doi/10.1029/2026GL12...

Insimwytim··on Claude Session URL appended to commit messages and PR descriptions by default
Wouldn't think I'd be cheering Antrophic decision, but this is excellent.

They probably were thinking about how that serves them as an ad, not about transparency, but still.

I say they should go one step further and somehow make it harder/inconvenient to turn it off (big tech is good at this already, so...); or, maybe, hide that option behind extra feature under premium subscription or something.

P.S. The comments are pure gold. They don't like they can't fake authorship and have the audacity to be indignant!

Insimwytim··on A safe MySQL upgrade that wasn't so safe
Versions are different during the upgrade. That's how upgrade is done.

You spin up replica, upgrade it to the target engine version, ensure it's up to date and switch over. [1]

[1] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_...

Insimwytim··on A safe MySQL upgrade that wasn't so safe
That's kinda fun (not in a fun way).

Since the update is done semi-automatically by the means of AWS RDS, does AWS takes any responsibility for that? Unless this use case is warned against in migration notes, I would think they ought to.

Insimwytim··on SQLite as a Document Database (2020)
If you applying NOT NULL constraint, why not extract it from json altogether as a separate column? What's the use of it in json?

You may construct it back on retrieval, if you need it in results.

Insimwytim··on Bookshelf – Self-hosted eBook library that runs on object storage
About five hundred dependencies (give or take).

npm being npm.

Insimwytim··on How Universities Should Prepare Founders
What's worse is when it is used as a job title, a role, which people are hired for!

Sounds like a complete nonsense, yet here we are.

Insimwytim··on Anna's Archive Owes $340 Million, Lost Several Domains, but It's Still Online

   The term "piracy" is used by record companies to demonize sharing and cooperation by equating them to kidnaping, murder and theft.[1]
[1] https://stallman.org/articles/end-war-on-sharing.html
Insimwytim··on Anthropic appears to be A/B testing reduced effort levels in Claude Code
LLM users don't want to put in effort, so they offload tasks to LLM.

LLM doesn't seem to be keen to put in effort either!

Is this AGI?

Insimwytim··on Optimizing things in the USSR (2016)
I understand why it's appealing for techies, but I feel like talks about importance of OGAS are very much blown out of proportion.

Not that the project didn't have merit on itself (we're talking about proto-internet, basically), but its potential role in planning is exaggerated. If anything, it's a pitch before MVP.

The issues were very much political (denied funding speaks in favor of that), not computational. You can't solve those with math and transistors.

Insimwytim··on Optimizing things in the USSR (2016)
It is difficult, this is why it required a whole institution. And not just an institution, but with proper mandate as well.

It also can be necessary.

In fact, Fred Brooks in The Mythical Man-Month, specifically in chapters 3 "The Surgical Team" and 4 "Aristocracy, Democracy, and System Design" explains why strong (even, maybe, authoritarian) central planning is imperative for large [software] projects.

Without proper mandate the work would be undermined constantly. Again, with regard to software projects (which with all accustomed with) a "Broken Ownership" article [0] [1] illustrates (among other things) the necessity of the mandate.

All in all, if you've been stripped of the mandate, lacking resources and your project is sabotaged in other ways, you don't need to look too far in the search of why it doesn't go as ...planned.

[0] https://blog.alexewerlof.com/p/broken-ownership

[1] https://news.ycombinator.com/item?id=37225397

Insimwytim··on Optimizing things in the USSR (2016)
The efforts to sabotage and disband central planning started as early as 1954.

In 1954 an executive order of 14 Oct 1954 reduced the amount of administrative personnel by 450 thousands.

The amount of metrics went down from 9 940 to 6 308 in 1954, to 3 081 in 1955, and to 1 780 in 1958.

Khrushchev moved most of the planning power from central planning institution to the regions and down to the factories and enterprises. What previously was strict targets from the center now became soft suggestions.

Article misses those basic things completely and instead goes into tangential theoretic topics and even goes to state things like that:

  central planners preferred to use the CIA’s analyses of certain Russian commodities rather than reports from local Party bosses
Source: the comment #162 in some blog. Talking about quality of the data...
Insimwytim··on Police officer used Flock cameras to track estranged wife 717 times
It's baffling to me how they can get away with such evident naming!
Insimwytim··on Air Theremin – A browser theremin you play by waving at your webcam
I'd love if people stopped trying to pretend Snowden didn't happen.
Insimwytim··on AI;DR (AI; Didn't Read)
I think there are some, who couldn't be a part of the public conversation, precisely because of they inability to add anything to said conversation.

LLMs enables them to post (or, rather, paste) something, in an attempt to trick others into believing they do have something to say.

They think they sound smart now, because LLMs are "very much the “stupid person’s idea of an intelligent person”"[1]

So now we are flooded with stupid people's attempts to show us how smart they are.

[1] https://news.ycombinator.com/item?id=49300763

Insimwytim··on Going Dark, and the era of law enforcement hacking
On one side, you have pieces like this, where seemingly there are constant fights between serious actors with large and properly distributed budgets, employing top tech and top minds; on the other - regular news of the hackz, where responsible person in charge of security with root access failed to grasp basic technical knowledge (several times), ticking every checkbox in "never do this" list from security best practices, which led to every customer being pwned.

It's like two parallel worlds, that exist in the same place at the same time, but somehow don't cross.

Page 1 of 4Next →