HNHacker News
TopNewBestAskShowJobs

colonCapitalDee

1,589 karma · joined July 10, 2019

submissionscomments
colonCapitalDee··on Bunny CDN Security Incident
Prompt and competent response, as expected from bunny.

"Last week, one of our infrastructure providers reported unauthorized access involving third-party server management software. One of our CDN nodes, located in Armenia, was hosted on a server supplied by this provider.

After receiving the alert from the affected provider, our engineering team took immediate action. Within 20 minutes, we stopped routing traffic through the server. We then reviewed and preserved the relevant security logs for investigation, securely wiped the server, and revoked its access to our other systems. The affected server has been permanently removed from our infrastructure."

colonCapitalDee··on Immich 3.0
E2EE, by definition, means that the server storing the data can't decrypt it. Your server can decrypt the data. Thus, it's not E2EE. Is this a problem? No. You've decided that the server is trusted (a "peer device"), so it's fine if the server can decrypt the data. That's a perfectly reasonable security posture, but it's still not E2EE.
colonCapitalDee··on Jobs and Software Is Fucked
Just use python for all practical programming problems. Lists, sets, and dicts are all you need for most leetcode problems; dynamic typing is convenient; there's good ergonomics for http and other random utility tasks; and pretty much every company is cool with python in an interview. You'll probably only see language trivia questions for languages you claim a specialty in (there's a huge market for C++ specialists, for instance).
colonCapitalDee··on Jobs and Software Is Fucked
I'm starting a new job in a few weeks, and can confirm (for startups at least) experience with coding agents is something companies are looking for. Multiple companies I interviewed with had a AI assisted interview session to go along with a more typical closed book programming session. I was asked about my use of coding agents in behavioral interviews. I'm not an ML guy, just a generalist SWE with 4 YOE. I only got one offer in my search, but it only took ~a month and I feel pretty good about being able to get more offers with more searching. It helps that I'm young, no dependents, and willing to relocate.
colonCapitalDee··on Unauthorized alert sent to cell phones across Brazil
Hey, that's what the people want
colonCapitalDee··on Health insurance claim denial rates range from 13% to 35% by insurer
There is absolutely a middle ground? The healthcare system, like any system, has an incentive structure. Doctors are incentivized to prescribe treatments, because that's how they make money for themselves and their practice. Doctors are not angels sent from heaven, they're people like you and me, and they respond to incentives like you and me. It's also well known that people strongly prefer receiving treatment over not receiving treatment, even when the cost to their health of receiving that treatment outweighs the expected benefit! Given that people push their doctors into prescribing treatments, and doctors are incentivized to go along with it... you would obviously expect some proportion of prescribed treatments to not be medically necessary. 5% sounds about right. And the kicker is that denying these treatments improves health outcomes for the general population, because those medical resources can get routed to the people who actually need them. Every successful public health system has an opposing force built in to it to limit the spurious consumption of scare medical resources, because without such a force costs balloon and the system becomes unsustainable. Not to defend the US healthcare system of course, our cost problem is worse than anywhere else...
colonCapitalDee··on The Wholesale Plagiarism of Obscure Sorrows
That's not surprising, LLMs are bad at pulling hyperspecific facts out of memory. LLMs aren't mapping applications, they're reasoners. Just a poor problem fit
colonCapitalDee··on The hacker sent by Anthropic to calm the government's nerves about AI safety
To be clear, this is petty drama *stirred up the US government*. It's not some sort of back and forth, the government is singling them out
colonCapitalDee··on US and Iran announce deal to end military operations
We'll see if it happens. Quote: "mediators will facilitate a series of meetings this week. These pre-implementation discussions will lay the foundation for the technical talks and the official signing ceremony." It's concepts of a plan all over again
colonCapitalDee··on Did Anthropic ask for this?
I don't know, maybe a published press release? A signed document? I'm not saying that Dario's words are meaningless, but it is simply not true that a CEO's public speech constituents a binding agreement.
colonCapitalDee··on Did Anthropic ask for this?
No, Anthropic clearly did not ask for this.

1. "Dario is known for writing about regulation and the direction of AI as an industry and Anthropic in particular, and what he says is taken very seriously and is considered a definitive statement of the company’s position." This is patently ridiculous. A CEO's blog post is not an official company statement or any sort of binding agreement.

2. "Are there protective measures against political favoritism or arbitrary decisions? I believe there are: they are called “courts”." This is so stupid. Of course Anthropic will take this to court (if it's not rescinded before then), and the government's ham-fisted "regulation" will almost certainly be overturned. And it doesn't matter! An unjust action that is overturned by the legal system does not magically become just.

3. "Is This Politically Motivated or Arbitrary? Probably at least somewhat." If the best you can muster here is "probably at least somewhat", then your head is in the sand. It clearly politically motivated, and clearly arbitrary. Perhaps a different government would receive the benefit of the doubt here, but not this one.

4. "“The government” or “society” is meant to deal with all of those things. Well, now the government is — the actual government that really exists, and not an imagined one that only does good things and never does bad things." So that's it? We just throw up our hands and say that this is natural, that it couldn't go any other way? That Anthropic was "asking for it", and it's their fault when the government lashes out?

If the government wants to regulate AI, either Congress needs to pass a law, or the Executive needs to furnish a reasonable explanation for their actions. We do not live in a fascist country. There is separation between the government and private industry. The government does not have the power to arbitrarily regulate private enterprise. I am truly baffled by the inability for people to see this as it is -- a blatant, and foolish, attempt at posturing and political intimidation. It's part of a clear pattern of behavior by this administration, and should be interpreted as such.

colonCapitalDee··on H.R. 6028 would fundamentally change the U.S. Copyright Office
Ignoring power politics doesn't make them go away
colonCapitalDee··on Open source project contains hidden instruction for "AI" agents: delete my code
None of the people in this story come across well, including the auhor
colonCapitalDee··on Claude Opus 4.8
"Users will find Opus 4.8 to be a modest but tangible improvement on its predecessor."

This is a refreshing attitude!

I've also verified that you can now turn off adaptive thinking in the web UI, which is great. I've had a lot of problems with thinking not triggering and the model producing sub-par output. Glad we can finally turn it off. (I hope being able to turn off adaptive thinking is new, if I could have turned it off at any time that would be embarrassing)

colonCapitalDee··on Outsourcing plus local AI will soon become more economical vs. frontier labs
"roughly" is doing a lot of heavy lifting there
colonCapitalDee··on Claude is not your architect. Stop letting it pretend
Tip for the "author": Claude is not your writer either
colonCapitalDee··on Regex Chess: A 2-ply minimax chess engine in 84,688 regular expressions
What a depressing way to view the world. Sorry this great project wasn't to your taste, but there's no reason to be a dick about it.
colonCapitalDee··on Someone bought 30 WordPress plugins and planted a backdoor in all of them
Then we can't do it. Cost is a requirement
colonCapitalDee··on I'm OK being left behind, thanks
No such thing as a free lunch. Zero typing is an unrealistic and unachievable goal
colonCapitalDee··on Show HN: I took back Video.js after 16 years and we rewrote it to be 88% smaller
You should check out HLS and DASH. If you're already familiar and you're not using them because they don't meet your requirements, then apologies for the foolish recommendation. If not, this could solve your problem.
colonCapitalDee··on US to deploy additional troops to the Middle East, officials say
They're probably going to do an aerial insertion via helicopter (Ospreys technically), which doesn't require transiting Hormuz. These big amphibious assault ships are built for both maritime and aerial insertions.
colonCapitalDee··on I'm OK being left behind, thanks
You're right, you are using it wrong. An LLM can read code faster than you can, write code faster than you can, and knows more things than you do. By "you" I mean you, me, and anyone with a biological brain.

Where LLMs are behind humans is depth of insight. Doing anything non-trivial requires insight.

The key to effectively using LLMs is to provide the insight yourself, then let the LLM do the grunt work. Kind of like paint by numbers. In your case, I would recommend some combination of defining the API of the library you want yourself manually, thinking through how you would implement it and writing down the broad strokes of the process for the LLM, and collecting reference materials like a format spec, any docs, the code that's creating these packets, and so on.

colonCapitalDee··on Tell HN: I'm 60 years old. Claude Code has re-ignited a passion
You're looking for something like Vercel or Firebase
colonCapitalDee··on New imagery suggests U.S. responsible for Iran school strike
You're intentionally missing the point. Every time a bomb drops we're rolling the dice. Hits on civilian targets are inevitable, just like bugs are inevitable. The only solution is not to go to war at all. Don't blame the person who dropped the bomb, blame the people who ordered the bombs to be dropped.
colonCapitalDee··on GPT-5.4
That's why it happened. It still shouldn't have happened.
colonCapitalDee··on We Will Not Be Divided
Ok? And? Trump could use the DPA to force Ford to make tanks in a war, just like how Trump could use the DPA to force Anthropic to make AI in a war. Are we in a war? No. We are not in a crisis.
colonCapitalDee··on Computer Says No
That is an extremely cool skill
colonCapitalDee··on Microgpt
Beautiful work
colonCapitalDee··on We Will Not Be Divided
There's a hell of a difference between "we don't like your terms so we're going to use a different supplier" and "we don't like your terms, so we're going to use the power of the federal government to compel you to change them". The president is the commander-in-chief of the military, but Anthropic is not part of the military! Outside serving the public interest in a crisis, the president has no right to compel Anthropic to do anything. We are clearly not in a crisis, much less a crisis that demands kill bots and domestic surveillance. This is clear overreach, and claiming a constitutional justification is mockery.
colonCapitalDee··on I asked Claude for 37,500 random names, and it can't stop saying Marcus
You can literally click "Show Code"
Page 1 of 8Next →