HNHacker News
TopNewBestAskShowJobs

danso

168,452 karma · joined June 14, 2011

Amateur data scientist and photographer in Chicago.

Formerly: teaching at Stanford and programming+newsing at ProPublica.

Blog: http://www.danwin.com

Twitter: https://twitter.com/dancow

[ my public key: https://keybase.io/dnguyen; my proof: https://keybase.io/dnguyen/sigs/69iS-DQno44YqjgaowUD_Zze660k3fojXZmHob-bgxA ]

submissionscomments
danso··on Archive.today links going forward
That's been my nagging fear about them too. Obviously it's not an option they'd want to exercise frequently, but it could be devastating to individual targets.

(ofc this is a risk with the Wayback Machine, who also has a policy for honoring takedown request. But the Internet Archive's board and executives are known people with reputations)

danso··on Kentucky man becomes the first humanist granted religious exemption from AI
Yeah but you realize that religious exemptions aren’t just automatically rubber stamped? That employers can deny them on the basis of lack of sincerity? How realistic is it that someone can have a career with computers, and then on the first day of the job, prove that they’ve gone all-in on an anti-computer religion?
danso··on Kentucky man becomes the first humanist granted religious exemption from AI
How would this person who hasn’t touched a computer for years, end up in the candidate pool for computer-using engineers?
danso··on Hacking attempts against US Federal Election Commission system triggered outage
> NEW YORK, Oct 27 (Reuters) - The US Federal Election Commission's website has been targeted by a hacker or hackers, disrupting the agency's electronic filings system a week before the November 3 elections, according to an email seen by Reuters.

> In a statement, the FEC said that, "at this time, the FEC’s electronic filing system is currently offline and our IT staff are actively working to restore service." The FEC, which tracks the spending of candidates and political committees, said that users could still search the website for past reports. It declined further comment on the outage.

> The hacking attempts come a week before the midterm elections, which will determine whether President Donald Trump's Republicans maintain their majorities in Congress for the next two years.

> The FEC does not play a role in administering US elections and the outage should have no effect on voters' ability to cast ballots.

Just to reiterate that last graf of the excerpt: The FEC's site is where people file and search for federal campaign finance reports. It does not touch voting (which is managed at the state and county/city levels).

danso··on New 14‑inch MacBook Pro with M6
Just now realizing there's a difference between "MacBook Pro with M# chip" and "MacBook Pro with M# Pro chip". Was curious to see how my MBP with M4 Pro compared, and I saw it has 273 gb/s memory bandwidth compared to the MBP M6 (sans Pro)'s 170gb/s. Makes sense that "Pro" in the laptop model doesn't also describe the chip, but only if you remember that the non-pro "Macbook" line stopped in 2017 (which was the last time I went shopping for Apple laptops until buying the MBP4)

https://www.apple.com/mac/compare/?modelList=MacBook-Neo-A18...

danso··on She Worried About Cutting Her Medication Dose. ChatGPT Told Her to Push On
Gift link: https://www.nytimes.com/2026/10/27/well/ai-chatgpt-medicatio...

Summary: a lawsuit [0] was filed this week by the Chinese parents of an Amazon engineer who died in February 2026, blaming OpenAI for how GPT-4o assisted their daughter in devising a deadly prescription regimen for her epilepsy medication.

[0] https://schenklawfirm.com/wp-content/uploads/2026/10/wan-v-o...

danso··on Researchers at cybersecurity startup Cathedral got inside Anthropic
> Its researchers got inside Anthropic systems by exploiting vulnerabilities in business software used by the AI firm and many other companies for administrative and sales tasks, according to the report.

Reminds me of a decade ago, when a pentester essentially got access to all the keys to the kingdom of Instagram because Instagram had installed an admin panel that re-used a hardcoded Rails token from a public github repo.

https://news.ycombinator.com/item?id=10754194

danso··on CVE Tracker
The CVE system is far, far from perfect and NIST has faced increasing criticism (even before 2025) about its ability to triage and process the backlog. But I don't think their role is limited to simply posting what’s sent to them?

https://www.securityweek.com/cve-and-nvd-a-weak-and-fracture...

danso··on CVE Tracker
It’s impressive that the number of CVEs issued the last two years has skyrocketed, given how badly DOGE gutted the cybersecurity [0] agencies. Unfortunately we don’t know how huge the backlog may have since grown

[0] https://www.securityweek.com/mitre-signals-potential-cve-pro...

danso··on Zeabur is shutting down: what happens next
This shutdown notice comes a week after an Oct 14. security breach:

> On October 14, 2026 (UTC), an external attacker gained unauthorized access to Zeabur's internal systems and some customer services. We began our emergency response as soon as we detected the unusual activity. We have confirmed that this incident affected a broader scope than the incident in late August...Having another security incident in such a short time has let down the people who trusted us. Protecting your services and data is our responsibility, and we have fallen short.

danso··on I told people I'm a convicted felon after 20 years of hiding it
I read the first chapter of your autobiography, looking forward to reading the rest. For the current audience reading this, do you mind spoiling/summarizing how you got into software engineering? Had you dabbled in it before your conviction, and did you study it while serving your prison sentence?
danso··on Electronic Arts to Cut 400 Jobs, Shut Down BioWare
> EA Chief Operating Officer David Tinson and Chief Studios Officer Cam Weber wrote that “over the past several months, we’ve taken a hard look at our business” and will cut some projects, including the next Mass Effect game, which was in early development at BioWare.

Devastating news for fellow elder millennial gamers. That was one of the most interesting game universes conceived in the past 2 decades.

danso··on Rust off Rails: The opinionated web stack for the AI era
> Rust off Rails is a set of Markdown files that tell coding agents how to build a full-stack Rust web app: one blessed stack, one layout, one way to do each thing. The convention lives in the prose. The agent writes the code...Other frameworks ship a library. Rust off Rails gives your agent the judgment

I suppose I wrongly infer "deterministic" from "opinionated". But this approach still doesn't particularly opinionated other than "AI agents are sophisticated and reliable enough nowadays to build a stable Rust app from Markdown instructions"

danso··on Today's PHP security release, and how we're strengthening security
That same user wrote a followup tweet last night asserting that their POC wasn't ready to do an exploit in the wild https://x.com/J4ck3LSyN/status/2112753673235501137
danso··on Today's PHP security release, and how we're strengthening security
The person who wrote the widely-referred-to tweet last night (claiming to "have recreated & lab/field tested CVE-2026-109618 / CVE-2026-109619") followed up a couple hours later and said that their POC had not been proven to work "in the wild"

[0] https://x.com/J4ck3LSyN/status/2112703096443097263

[1] https://x.com/J4ck3LSyN/status/2112753673235501137

danso··on PHP 8.2.35
FWIW this is the most mainstream vulnerability in the new era where everyone has access to AI agents that have the potential capability to find and widely exploit the vulnerability far faster than the past timeframes for disclosure and patching.
danso··on California is building a $400M shield for Yosemite's most dangerous highway
https://archive.is/PGZKw
danso··on In an $80 motel room, a discovery to shed light on the origins of life
Non-paywall: https://www.nytimes.com/2026/09/26/science/motel-science-dis...
danso··on [dead]
The Science article in question has now been replaced with a retraction:

https://www.science.org/content/article/your-heartbeat-quiet...

Editor’s note, 16 September, 3:05 p.m.: Although no specific errors in this story have so far been identified, we have removed it after determining the author was impersonating the identity of an established science journalist, both with the News editors at Science and with sources in the story. Furthermore, two of the quotes provided by the author have since been found in previously published stories by other writers.

Not sure if Linkedin has a login-wall, here's the first grafs:

(author: Caroline Williams)

The person who was impersonating me managed to get an article published in Science, under my by-line. And they got paid for it!

I've seen the pitches (bad), and the email chain between editors who weren't all that impressed, but googled me and decide to take a punt. When the article came in it was dry, clunky and badly written, but after several rounds of editing they managed to get it into a publishable state. It went online in June and was up until yesterday when it became clear they (and I) had been scammed.

The whole thing makes me feel sick. I know from my work as an editor that the reputational damage is real. Had I pitched a story to them afterwards they would very understandably have said "Hell no!". Who has the time to do someone else's job? They tried "me", "I" didn't deliver, so no thank you.

I have no idea how many more editors out there have me on their 'do not commission' list because of this person's actions. There may also be several scientists who will not want to talk to me because they've had a bad experience with the fake one.

More broadly, if this is a wider scam (and based on what others have told me, I think it is), it is potentially a serious issue for science journalism and journalism in general. And I'm not sure what we can do about that.

danso··on Norway should buy OpenAI
Just came back from traveling through Norway, and from my perspective as a Chicagoan, Oslo and Bergen definitely did not look or feel homogeneous.
danso··on What If America Went Dark?
Non-paywall link: https://www.nytimes.com/2026/08/18/magazine/national-blackou...
danso··on A Driver's Fatal Spiral After a Police Officer's Typo
Gift link: https://www.nytimes.com/2026/08/12/us/san-francisco-police-t...

Excerpt:

Two San Francisco police officers thought they had spotted a stolen car one night in July 2024. After stopping the vehicle, they smashed in a window, dragged out the driver and then tackled, pepper sprayed and handcuffed him.

They had the wrong man.

The officers had typed the car’s license plate number incorrectly into their patrol car’s computer system.

A city agency that investigates complaints against the police said on Tuesday that the officers had used “excessive force” during the mistaken arrest of Matthew Ludwig, the driver. They violated multiple policies, the agency said in a report, including spraying him at close range and drawing a firearm without cause.

Despite the case of mistaken identity, prosecutors spent over a year seeking to convict Mr. Ludwig for reckless driving and resisting arrest. Fourteen months after the traffic stop, he was found dead in Kentucky, of an apparent suicide…

According to the complaint, the officers realized only after Mr. Ludwig was handcuffed that they had entered the license plate number incorrectly. But they proceeded to arrest him anyway.

The public defender’s office said that Mr. Ludwig could not afford the impound fee necessary to recover his car and that the city had sold it at auction. Prosecutors then charged him with reckless driving and resisting arrest.

danso··on Grok 4.6
SpaceXAI has huge incentives for not reneging on its commitments to the U.S. government, and those incentives do not exist for entities that lack the power of the purse and guns of the U.S. government.

Furthermore there are plenty of examples of the Trump administration contracting for millions/billions of dollars with companies that aren’t at the top of their game. Are Intel’s fabs best in class because the U.S. bought 10% equity? Are Trump hotels and resorts the best in class because the government expenses for its employees to stay there?

danso··on The “mechanical miracle” that ruined Mark Twain’s life
That’d be nice, as a news nerd and pagemaker monkey myself. But school curriculums don’t even have the space to teach touch typing anymore. Or huge chunks of U.S. history (nevermind histories of countries far older).
danso··on Elevators
Oh wow, this is perfect reading for me. One of my first college career fair questions was "Tell me how you would program an elevator". Forgot what sad attempt at an answer I gave, but I pretty much thought about that algorithm every time I've ever waited for the elevator. Which was pretty much daily when living in NY.
danso··on About the security content of macOS Tahoe 26.6
Yes, the high ranking employee at the center of the accusations is not Ive, but Tang Tan, former VP of product design

https://www.bbc.com/news/articles/cy8w379e091o

danso··on Ask HN: Is it just me, or is software buggier across the board?
I don't know about just the past 6 months, but past 10-20 years, sure? I think software today has to handle much more varied and complicated I/O at a much bigger scale than it did in the past. Website UI/UX has to accommodate not only numerous browsers, but numerous devices with different viewing spaces. Think of how much broke when Python was rejiggered to not implicitly typecast unicode data. Think about all the legacy databases that can't handle spaces or various non-alphanumeric characters.

The userbase for software in the early 2000 was built for a much, much smaller audience than it is today. And I'm not sure the huge improvements in testing/debugging and general software development would totally mitigate that, in the same way modern military defense systems is still way behind modern offensive weaponry.

danso··on SpaceX bond worth 10% less than issue price – heading for junk bond status
How often do companies issue a $25B bond the same month that they IPO?
danso··on A Second-Grade Teacher Revived a Beloved Video Game
Deck: Backyard Baseball, a favorite game for 1990s kids, had been off the market for years. But Lindsay Barnett was determined.

Non-paywall: https://www.nytimes.com/2026/07/13/style/backyard-baseball-v...

danso··on Bryan Johnson: I have an autoimmune disease. My stomach is eating itself
First part of the very long tweet:

Bad news #1:

I have an autoimmune disease. My stomach is eating itself.

Bad news #2:

2–5% of people have this, too. Likely more, because it hides.

Good news:

I'm going to try and solve it. Will share all.

As a kid, I ate sugar cereal, drank sugary soda, and gobbled down fast food. I had a few healthy years in my early 20s but then became a young father of three and began building a business.

Juggling that stress and grind, I let my health slip and gained 40 lbs. Within a few years I’d fallen into a deep, chronic depression.

Somewhere in that timeline, my body began developing an autoimmune process affecting my thyroid and then my stomach lining.

It’s called Autoimmune Gastritis (AIG).

My hypothyroidism got diagnosed when I was 21 years old with a routine blood draw. That enabled me to begin proactive management, supplementing levothyroxine and Armour Thyroid. They are the hormones my body should be producing on its own but wasn’t.

By taking these pills daily, my body was able to operate as though my thyroid was functioning properly. What I didn’t know was that something else was going on inside my body: my stomach had begun attacking itself. But there was no routine test to find out and I didn’t have any symptoms.

I just discovered it in May. I'm unsure how long I've had it. AIG causes irreversible damage: nutritional deficiency, anemia, and over a long horizon, elevated cancer risk. When AIG is discovered today, standard medical care concedes defeat, stating that nothing can be done except managing the condition, no matter how awful or lethal the effects.

Looking back over the past few years, I can now see the early signals we were picking up in measurement but hadn’t connected the dots. For 11 years, I’ve had low ferritin, without anemia. We continually tried to raise my iron levels with food and supplementation but nothing would work.

We chased the obvious solutions first. A plant-based diet means all my iron is the hard-to-absorb, non-heme kind. Hard training, sauna, and hyperbaric oxygen all raise the body's demand for iron. But none of them explained the core failure: despite me taking iron orally, trialing every formulation, and using every timing trick, none of the iron would stick.

What I didn’t fully appreciate until recently is how many stones my previous providers had left unturned. The low ferritin kept getting explained away but not fixed.

Page 1 of 34Next →