brunoborges

> On the other hand we don't give technology the same pass we give to humans, meaning that we don't tolerate machine incidents the same way we tolerate human ones.

It comes down to accountability, IMO. We tend to be forgiven to humans because we are humans too and we know we, humans, make mistakes, and these can have serious consequences.

When a human makes a mistake, they are immediately accountable, and therefore judged and forgiven (or not). When technology makes a mistake, who's to blame? The CEO? The software developer who wrote the code? The tester? The architect?

Yes, we want technology to be an order of magnitude safer than humans for this reason, because we know that, given the current way our judicial system works, when technology makes a mistake, no one is held accountable.

> Do you really want to get into the game of having opinions on design of every tool you use forever?

Yeap. Most users want someone else to think for them. Not just "something" (AI). Having a vision on what works best (design) is still, for the time being, a human task IMO.

> I think LLMs have changed that equation in a way that makes the original dream much more feasible.

> Several times a day I'll prompt regular Claude chat to "Clone x/y from GitHub and tell me how Z works".

Still highly dependant on one's access to SOTA AI models (availability and funding). Most people praising LLMs publicly for this sort of use case, are the ones with unlimited access to tokens / AI credits, or simply with a lot of money to burn.

But reality is that between using one's limited employer-sponsored quota of tokens to do their 9-5 business logic coding maintenance job, versus exploring 3rd-party software as end-users, I am sure of which one their managers will prefer.

I believe it will eventually happen, whether with SOTA local models on highly capable local hardware, or super cheap inference APIs... or both.

I'd say it is very characteristic of the Java team at Oracle to be committed to discipline and long term vision.

I strongly suggest watching some of their talks from JVMLS (JVM Language Summit), especially the ones from Brian Goetz and Mark Reinhold.

https://www.youtube.com/playlist?list=PLX8CzqL3ArzUOgZpIX6Gs...

Valhalla is 99% done by Oracle, yes.

Granted, it has been months that I don't use an IDE, but that's also because I am working full time on the developer tools ecosystem.

But when it comes to troubleshooting and debugging, especially business logic, I image based on my past experience working on insurance and banking systems, that I would still rely on an IDE to dive into the code.

I have a hunch that his tweet will not hit the demographic of 9-to-5 developers working in maintenance of boring business systems.

So... XML is great I guess.

I am not aware of any Flock camera in Canada yet (and the map 'confirms it').

And I hope it stays like that

bingo

The point is not how much it made, it is how to transfer that wealth (whether 6B or 60B) out of a non-profit into someone else's account without looking like, or literally being, a criminal.

Infantino clearly wants to see FIFA making billions so he and many others can pocket millions legally. But the only way for this to happen in a non-corrupt way, given that FIFA is non-profit and therefore requires a lot of questionable operations, is to turn FIFA into a business like NFL / MLS.

The problem with that is that it then it is no longer a sport, rather a... business.

UEFA letter is spot on.

Note: I meant [newest]

Nah, this has way more to do with karma points than with "anything that gratifies one's intellectual curiosity".

I've seen submissions by original authors not trending, but then someone with enough karma points booming the same article in a second submission, and then folks having to adjust or point to the original submission to give the proper credit (and karma points) to the author.

Visiting [newest] always has a handful of entries that are genuinely interesting, but never trend. At all.

I challenge HN team to bring one to three random entries from [newest] into the [news] (trending) page as an exercise.

Amazing how an article from Wikipedia easily trends on HN for no good reason, while many posts go unseen under the [new] tab.

Choosing to do an app is quite often less about the capabilities (of an app on the phone, versus a website in a mobile browser) and more about discoverability and market reach. App Stores serve a "store window" purpose, where it is easy to search, easy to discover, easy to access new tools/solutions.

What annoys me is not that "this app could've been a webpage". It is that "this app should also have a web version".

TripIt comes to mind as the opposite way: they started as a website only, and quickly the need to have an app was obvious: GPS integration, offline access, contact list for sharing, and more.

> price is usually purely determined by the net inflows and outflows as decided by humans.

"as decided by humans", more than 90% of trades are led by bots, so no, price is not being determined by humans.

In fact, we have seen time and again how some weird companies get a huge inflow of purchases simply because of bots misinterpreting news articles.

It's time to forbid bots and HFT.

Want to buy/sell a stock?

Humans need to manually submit in the system.

"Help me help you" stands.

This is how tickets for sports and concerts should always be sold.

Entertainment tends to compare with airline tickets, except that with air travel, there are regular flights and competition. There is no such thing as a single flight from Paris to New York on one Saturday at 9pm on a window of a few years.

> Founding cannot be a commodity. If it is, you have no moat or point, meaning you instantly collapse again, because you are an interchangeable commodity.

With the recent AMD announcement [1], local models are likely the future indeed. Cloud will be the place for remote sessions, remote agents, continuous agents. But I foresee a place where phones, laptops, PCs, and even perhaps dedicated hardware just for AI, will be the place for most AI-related workloads.

If you get caught with illegal guns and illegal chemicals, well... there are consequences. Bad actors will always find a way, at the risk of getting caught.

However, the vast majority of people will rely on commercial AI models.

> But I think mostly it will be used to serve ads.

If only...

I do believe that access to commercial AI should be regulated, heavily taxed, and controlled just as much as access to dangerous chemicals and weapons. Only this way the best AI models are more likely to indeed be used for frugal purposes (sadly, however, including ads).

I wonder if there are discussions about POSIX standards on this.

Go to a store that sells fly fishing equipment and talk to a customer or a staff. You may as well end up with a new friend.

Give me the modern interior design with a vintage exterior design.

Sonatype allows "io.github.<username>" as a valid groupId and has a process to verify ownership. I am sure other providers like GitLab can work on this.

That is another important layer. Maven Central is not immune to credential theft. If a publisher token is stolen, an attacker may still be able to publish a malicious new version until the token is revoked or the account is suspended after reporting the problem to Sonatype.

But in the Maven/Gradle ecosystem, most projects pin exact dependency versions. Support for version ranges and dynamic versions exist, but they are generally avoided because they hurt reproducible builds. That means a malicious new release does not automatically flow into most consumers’ builds just because it was published.

I'd go as far to say that NPM should:

1. Enforce scope (namespace) requirement, and require external verification (reverse DNS for example).

2. Disable version range support out of the box. User must --enable this setting from the command line at all times.

3. Remove support for install scripts completely. If someone wants to publish a ready-to-run software, there are plenty of other mechanisms.

It is 100% up to the package manager's steward to control how ownership of packages and namespaces are granted.

Maven Central exists for decades the amount of incidents of people stealing namespaces is minimal.

One can't simply publish a package under the groupId "com.ycombinator" without having some way to verify that they own the domain ycombinator.com. Then, once a package is published, it is 100% immutable, even if it has malicious code in it. Certainly, that library is flagged everywhere as vulnerable.

It baffles me that NPM for so long couldn't replicate the same guardrails as Maven Central.

> Claude Code is really good at stuff like this.

A lot of "Claude Code is best at X" claims are probably user-selection bias.

The people saying it are often exclusively Claude Code users, not people who are actively benchmarking Claude Code against Gemini CLI, OpenAI Codex, GitHub Copilot, and other agent harnesses on the same tasks.

The claim may still be true for certain scenarios, but the evidence is usually anecdotal, not comparative.

Indeed, the fact that maintainers didn't have until only recently the control for disabling Pull Requests tab in a GitHub repo, is what drove a lot of issues in FOSS collaboration over the past decade.

FOSS and open source licenses never ever granted entitlement for contributors to have their proposals reviewed/merged by maintainers. Neither it ever offered entitlement for users to ask for free support.

FOSS is about giving people access to source code so they can do with it whatever they want, and maintainers/authors should have always had the ability to "publish and forget" the source code, without having to deal with those "entitlements".