HNHacker News
TopNewBestAskShowJobs

codethief

5,853 karma · joined September 17, 2010

submissionscomments
codethief··on Will you heed my warnings now?
> Sounding the alarm while presenting no data or science

One needs to read OP's blog post in the context of his other posts from the last couple months (many of which have been discussed here on HN in one way or another), where he does discuss the science.

codethief··on Will you heed my warnings now?
N=1 sample size.

I talked to another guy with the same degree in the same field and he was concerned.

codethief··on Will you heed my warnings now?
> I am very cautious about the "modulo engineering scaling" carve-out

As OP said elsewhere[0, 1]:

> Once you understand quantum fault-tolerance, asking “so when are you going to factor 35 with Shor’s algorithm?” becomes sort of like asking the Manhattan Project physicists in 1943, “so when are you going to produce at least a small nuclear explosion?”

In other words (IIUC): Some problems (here: scaling fault tolerance) seem to be easier than others.

[0]: https://scottaaronson.blog/?p=9665#comment-2029013

[1]: See also https://news.ycombinator.com/item?id=47959531 for a very similar quote.

codethief··on Talkie: a 13B vintage language model from 1930
No idea how I could have missed that! Thanks so much!
codethief··on Talkie: a 13B vintage language model from 1930
Is everyone here testing the model on their own machine or is there some web interface y'all are using? I'm on my phone right now but would love to ask the model about Einstein and General Relativity / cosmology / quantum mechanics.
codethief··on Three constraints before I build anything
> The core tech must be separable from the product

Won't this lead to premature abstraction and application of design patterns everywhere? I mean, sure, of course you should do separation of concerns, keep your business domain layer clean of persistence/network/UI/… concerns etc. But your domain layer will still be very much tied to your product. There is no way around that.

codethief··on An AI agent deleted our production database. The agent's confession is below
> This is not me speculating about agent failure modes. This is the agent on the record, in writing.

> The pattern is clear.

> In our case, the agent didn't just fail safety. It explained, in writing, exactly which safety rules it ignored.

> This isn't a story about one bad agent or one bad API. It's about an entire industry building AI-agent integrations into production infrastructure faster than it's building the safety architecture to make those integrations safe.

Sigh.

Yes, the pattern is very clear. If the author spent less time writing the article than it would take me to read it, why should I even bother?

The agent deleting their prod database is a direct result of this careless "let me just quickly…" attitude.

codethief··on OpenAI Privacy Filter
It's a nice approach – if only Intel SGX were more trustworthy.
codethief··on Statecharts: hierarchical state machines
It does if you click on "What is a statechart?", https://statecharts.dev/what-is-a-statechart.html .

> The primary feature of statecharts is that states can be organized in a hierarchy: A statechart is a state machine where each state in the state machine may define its own subordinate state machines, called substates. Those states can again define substates.

codethief··on How Hard Is It to Open a File?
> https://github.com/flatpak/flatpak/security/advisories/GHSA-...

Just yesterday I was thinking about a related attack vector on AI agents: Many harnesses "sandbox" (at the application level) file reads/writes and shell commands by checking whether a given path has been whitelisted. However, I bet there are cases where the agent could simply create a symlink to somewhere else and thus trick the "sandbox" into thinking the agent is authorized?

codethief··on Show HN: Browser Harness – Gives LLM freedom to complete any browser task
Fair, so let's do

  s/has the ability to/is meant to
Then again, I don't think your statement is entirely correct: It assumes you've given the agent the permission to edit his source autonomously, which would normally seem unusual for an agent that's just supposed to connect to the browser.
codethief··on Show HN: Browser Harness – Gives LLM freedom to complete any browser task
IIUC the point is that the agent has the ability to modify itself? So one possible term could be "self-evolving" or "self-modifying agent".
codethief··on Arch Linux Now Has a Bit-for-Bit Reproducible Docker Image
Use https://github.com/reproducible-containers/repro-sources-lis...
codethief··on Arch Linux Now Has a Bit-for-Bit Reproducible Docker Image
…unless you use https://github.com/reproducible-containers/repro-sources-lis... . I've been using it for a while and it's worked really well for me!
codethief··on Highlights from Git 2.54
> I understand there's a security reason for this

While I understand the security concerns, too, wouldn't this be solved by including a `trust` command like in direnv and mise? (I.e. have the user review the hooks before executing them for the first time.)

codethief··on I am building a cloud
Ah, for some reason I didn't make the connection between your VM setup and your agent sandbox setup and thought those were two separate things. Sorry about that!
codethief··on I am building a cloud
> My agents work inside sandboxes

Out of interest, what sandboxing solution do you use?

codethief··on I am building a cloud
> because they seem to completely not support making ACL rules based on the identity of the device rather than a part of the address space

Could you rephrase that / elaborate on that? Isn't Tailscale's selling point precisely that they do identity-based networking?

EDIT: Never mind, now I see the sibling comment to which you also responded – I should have reloaded the page. Let's continue there!

codethief··on How does GPS work?
Yup, it was also posted in the other thread on GPS the other day and it is quite a bit better than OP's article, particularly because it doesn't give a false account of the involved relativistic effects:

> Satellites at the GPS altitude travel at the speed of about 2.4 mi/s relative to Earth, which slows the clock down, but they’re also in weaker gravity which causes the clock to run faster. The latter effect is stronger which in total results in a gain of around 4.4647 × 10−10 seconds per second, or around 38 microseconds a day.

> Unfortunately, this is where many sources make a mistake with their interpretation of that result. It’s often erroneously claimed that if GPS didn’t correct for these relativistic effects by slowing down the clocks on satellites, the system would increase its error by around 7.2 mi per day as this is the distance that light travels in those 38 microseconds.

> Those assertions are not true. If relativistic effects weren’t accounted for and we let the clocks on satellites drift, the pseudoranges would indeed increase by that amount every day. However, as we’ve seen, an incorrect clock offset doesn’t prevent us from calculating the correct position.

(Nevertheless there are of course relativistic effects to account for, which Ciechanow proceeds to mention and which are explained in more detail in the other link I shared here: https://news.ycombinator.com/item?id=47861535 )

codethief··on How the Heck Does GPS Work?
For anyone interested in a more detailed account of (general-)relativistic effects in GPS and other positioning systems, I really liked this article: https://pmc.ncbi.nlm.nih.gov/articles/PMC5253894/
codethief··on I don't want your PRs anymore
Great article! Two aspects I haven't seen addressed so far:

If people will no longer contribute to the source code directly, this means fewer people will be familiar with the code, meaning that:

- The bus factor becomes more significant. (Yes, this could partly be addressed by LLMs. But if the single maintainer disappears, this will still cause disruption until someone else takes over/forks the project.)

- Fewer people eye-ball the code for security issues (and for malicious changes by the maintainer). This, too, could be addressed by LLMs but are we all going to set up agents in the future that review all our 3rd-party dependencies' code?

codethief··on Framework Laptop 13 Pro
Thanks!

> We're keeping the SKU stack simpler and just having a single display option that has touch. You can disable touch in your OS though if you don't want to use it.

The reason I asked was mostly that, in my experience, touch displays tend to be glossier / less matte than non-touch ones.

codethief··on Edit store price tags using Flipper Zero
Might have been a marketing strategy. :-)
codethief··on Framework Laptop 13 Pro
Hi nrp, what's the battery life like on the more high-end CPUs (Ultra X7 358H, Ultra X9 388H)? Are you also planning to offer a non-touch display?
codethief··on Framework Laptop 13 Pro
> will there be a 15 inches version ? ( I’m not getting any younger I like bigger screens )

Seconding this question, though I would also be very interested in learning whether they're planning a 14" version.

codethief··on California has more money than projected after admin miscalculated state budget
Related: In the German state of Baden-Württemberg they were miscalculating the number of active teachers for 20 years due to a software error, causing the state to employ 1440 fewer teachers than actually intended.

https://www.spiegel.de/panorama/bildung/baden-wuerttemberg-s...

codethief··on Jujutsu megamerges for fun and profit
> If using a tool doesn't speak to you, git is adding more support for stacking every day. The new --update-refs option lets you update a stack with fewer rebases; however, parts of the stacking process are still tedious (i.e. opening PRs on GitHub or any other provider).

This doesn't seem to be entirely up-to-date: http://github.github.com/gh-stack

codethief··on Figma's woes compound with Claude Design
> A lot of their recent product development has been to enable further expansion in organisations - "Dev Mode" for developers (which now looks incredibly quaint against LLMs), […] all are about expanding their TAM out of "pure" design.

I don't think this is correct. In my experience no one buys Figma because of Dev Mode only. Dev Mode just makes it easier/faster to go from an existing design to working code. So it is/was a means to increase Figma's moat, not to get new customers or users. (Devs already needed access to Figma before the introduction of Dev Mode.)

codethief··on Why Japan has such good railways
and of https://news.ycombinator.com/item?id=47762060 which is the same article under a different URL.
codethief··on Why Japan has such good railways
> In 1982, Prime Minister Yasuhiro Nakasone started to privatize the railways. Unlike other countries, Japan simply returned to the traditional private railway model of the nineteenth and early twentieth centuries: tracks, trains, stations, and yards were owned by vertically integrated regional conglomerates. There are substantial advantages to vertical integration. Railways are a closed system that has to be planned as a single unit. […]

This is a very interesting point, especially in light of another article discussed here a couple days ago[0] about why Switzerland has 25 Gbit/s internet and why the US and Germany don't. One of the main points of the article was that the fiber optics infrastructure is (or should be treated as) a natural monopoly:

> The rational solution is to build the infrastructure once, as a shared, neutral asset, and let different companies compete to provide the service over that infrastructure. That’s how water works. That’s how electricity works in most places. And in Switzerland, that’s how fiber optic internet works.

[0]: https://news.ycombinator.com/item?id=47652400

EDIT: Turns out the Japanese railway infrastructure is not truly owned by the railway companies but instead leased from a government-owned institution, see https://news.ycombinator.com/item?id=47773556 and https://news.ycombinator.com/item?id=47766873

← PreviousPage 7 of 34Next →