HNHacker News
TopNewBestAskShowJobs

cube00

7,394 karma · joined December 20, 2013

submissionscomments
cube00··on Roblox downloaded 145GB models from us (including adult content) without asking
> Those had to switch over to endpoint agents

No they didn't. https://news.ycombinator.com/item?id=32337698

cube00··on Roblox downloaded 145GB models from us (including adult content) without asking
Some companies don't split because they want all internet traffic to go through their internal MITM proxies to enforce acceptable internet use and data loss policies.
cube00··on Roblox downloaded 145GB models from us (including adult content) without asking
I initially thought this was a good idea too until another comment pointed out you'll lose most business or personal customers in offices because they connect through VPN gateways running on those cloud services (especially Azure)
cube00··on Behind the scenes at the NeXT Computer office
> I believe our current work environments will be romanticized one day

While I'd like to think so I can't see myself romanticising the open plan cattle pen we're in now.

I do romanticise when I had my own cube and desk, still loud but nothing compared to the cattle pen we're in now with long floor wide benches, having your opposite neighbour's face in your field of view all day and everyone yelling on zoom calls from all directions.

cube00··on Using Claude to reduce the attack surface of code
Considering they have access to infinite free tokens they should be the best.
cube00··on Upcoming critical PHP security release (CVE-2026-109618 / -109619)
I'd check this carefully and make sure you have the WAF enabled. I seemed to always have plenty of weird looking PHP and WP requests happily forwarded by CloudFlare to my servers.

Users on the Free plan have access to the Cloudflare Free Managed Ruleset, a subset of the Cloudflare Managed Ruleset.

https://developers.cloudflare.com/waf/get-started/

cube00··on DeepSeek just open-sourced its inference engine
Given how much the models like React and JavaScript I guess we should be thankful its Python.
cube00··on An ad-free Android TV
Remember? I'm still using it! As great as streaming is it's always an arms race with blocking the ads, sometimes it works, sometimes it doesn't. They're now streaming the actual content off pubads.g.doubleclick.net to make sure if you block ads you don't get to see anything. It also embeds ads in the stream that ffmpeg merges.

MythTV lets me record free to air and skip through the ads.

cube00··on An ad-free Android TV
It was very underhanded of Google to add advertising after the fact. When I have to factory reset the TV I'm reminded of how it used to be before it upgrades. Years later they still haven't [1] updated the screenshots in their Play store page to show the giant 1/3 full screen ads you get now.

Replacing the Google launcher (I used ATV Launcher Pro) was one of the best quality of life upgrades I've ever done, if you haven't already I highly recommend it.

Not only does Google show auto playing video ads for streaming services you don't subscribe to, it also shows pure auto playing video ads for things like fast food. It really lags while it tries to start up to show the ads.

I'm sure it's only a matter of time before Google closes the ADB backdoor when they realise all the sweet ad dollars they're losing.

[1]: https://play.google.com/store/apps/details?id=com.google.and...

cube00··on TV4 postpones show after AI agent erases edited material
As a new starter to the team I was flooded with alert emails every few minutes. When I asked what the deal was, was promptly given a bunch of mail rules every other team member used to dump them all into another folder they never looked at.
cube00··on I let an AI run my startup for a week
They're at https://m.youtube.com/@PromptBaseYT/shorts

You can match the thumbnails and titles from the article screenshot

cube00··on I let an AI run my startup for a week
> A few nights ago I instructed my project manager bot to ship one secret feature to PromptBase at 4am and deploy it whilst I was asleep - it just had to benefit the site in some way.

> I wanted to see what this felt like - which sounds weird - I know.

This is such a needlessly reckless thing to do on a 500k user production site that takes customer money.

cube00··on I let an AI run my startup for a week
> Amazing to see people going on a beautiful hike, while chatting with agents all the time to "do some work".

I disagree, enjoy the beautiful hike and give your brain a rest.

cube00··on Redesigning source control at Anthropic
Until the server goes down. Subversion going down at work stopped everything. At least with git you can still find work to continue on with even if you can't push.
cube00··on Redesigning source control at Anthropic
> attempting to build a public version that tries to please everyone wouldn’t actually be very useful.

What a weak response, just release the version you use and others will decide if it's useful.

cube00··on Redesigning source control at Anthropic
That my thought when I saw online only, we're back to Subversion.

You think you have it bad now when GitHub goes down, wait until you're stuck with an online only client.

cube00··on I posted to HN, and then my website was flooded with AI bot traffic
Most big services will just take the junk traffic. They're never going to block whole cloud providers.

Blocking cloud providers is strictly for us dirty self hosters who are sick of our logs becoming unreadable and our visitor metrics useless from all this malicious traffic.

cube00··on Firefox Enterprise
One less app to manage, audit and provide end user support.
cube00··on I posted to HN, and then my website was flooded with AI bot traffic
> These clouds must get the abuse happening under their own roof under control.

Similar to ad click fraud and scam ads, the cloud provider gets paid, why would they turn down the money?

cube00··on Apple HomeView
> Music in the kitchen, sure, but I run Plexamp.

As much as I like Apple hardware I know unless I'm willing to go full Apple on hardware and services (eg. Apple Music in this example) I'm always going to have a mid experience trying to be on the fence of their walled garden.

cube00··on Apple HomeView
> An issue with old iPads is getting OS updates.

I'd have the same concern with this device given Apple haven't committed to longer then usual support.

At least I already got my money's worth from the old iPad and being able to give it a new role on the kitchen bench was a bonus.

cube00··on Hackers activate automatic defrosting in supermarket fridges across Europe
> believe me, there's a reason the industry moves slowly.

No profit in security/dependency upgrades. Propriety SCADA protocols to enforce full stack manufacturer lock in.

cube00··on A Modern Web App in C
> Process forking isn't nearly as expensive as it was; modern kernels optimize it heavily.

When I start to dig into how complex async is to debug I'm really starting to come back around to regular forking.

cube00··on AI is a tool and using it well takes skill
> wave a re-hiring people

While they'll be some for the companies that cut too hard, I don't see a wave coming.

It seems the "kinda sorta" works level that AI vibing creates is seen as good enough by most companies.

While it's true they've always accepted mediocre software I feel AI vibed code is a step below that in terms of quality.

Of course if you're willing to put in the hard graft to carefully write detailed tests and then send your agents away until everything passes then you'll get a better result.

The automated tests I've seen the vibe tools pump out aren't there yet so you still need to put the effort in there.

cube00··on Shipping JPEG XL in Chrome
I doubt anyone that wants to keep their job in big tech would ever publish something like that.
cube00··on Device detection and occupancy monitoring for Airbnb hosts
Interesting that it can only count iOS devices considering Apple is more privacy focused. What's the secret sauce that prevents Android phones being counted in the same way?

I would have thought Android's constant Wi-Fi scanning that Google uses for improving their indoor location services would be an easy give away.

cube00··on State of Devs 2026
> A lot of companies exists as of today cause a lot of people were able to just focus on building without constantly worrying about the fear of lay off.

Depends on the company, plenty have been run on a culture of fear for decades.

cube00··on ASOS app users receive push notifications apparently sent by hackers
> Asos did not immediately respond to the BBC's requests for comment.

Amazing how companies think if they say nothing it'll somehow just go away. Couldn't even be bothered to reply to say they're looking into it.

cube00··on OpenAI "rogue" agent activities found on Wikimedia projects
If Joe average let their agents out like this they'd be in jail.

Interesting that Microsoft doesn't seem to have had a sandbox breach yet, you'd have to assume they're running similar agents, maybe a secure sandbox is possible.

cube00··on Apple Pass Designer
Careful with this, it's made to look like it's from Apple with links back to their developer docs but I don't think it is. Text alignment doesn't work, randomly throws up full screen modals asking you to upload, feedback link shows the same about page as the acknowledgements link so there's no feedback form, drop downs are light grey text on white backgrounds.

Edit: It's actually the commentator's undisclosed own vibed project https://news.ycombinator.com/item?id=49101586

Page 1 of 34Next →