HNHacker News
TopNewBestAskShowJobs

dboreham

18,130 karma · joined March 2, 2015

[ my public key: https://keybase.io/dboreham; my proof: https://keybase.io/dboreham/sigs/lC9hM5haXXukH2rF_cFeB6gdtV0kXfHF7jZdZUdlkE4 ]

Verifying my Blockstack ID is secured with the address 1L7ikyCFhG5zyVSosrQYDs2ZG4ikEFqgBQ https://explorer.blockstack.org/address/1L7ikyCFhG5zyVSosrQYDs2ZG4ikEFqgBQ

submissionscomments
dboreham··on Binance-hacker-1029 – $5.6B stolen from Binance
All cryptocurrency is permissioned. This is because governments can make it illegal for someone to turn your cryptocurrency into real currency. You need their permission to turn it into pizzas and yachts.
dboreham··on IgE disruptor for food allergy with Claude-enabled antibody design [pdf]
Thanks. Always wanted to know what the secret Styrofoam material in US thermonuclear weapons was...
dboreham··on Chained PHP2Shell exploit roots 25 servers, including US Government servers
No, but MPTCP makes it more likely to be exploited, supposedly.
dboreham··on Google Search is now less than half of Alphabet’s revenue
About 80% of the time the AI overview is what I want anyway.
dboreham··on If-then-else had to be invented (2020)
Very not true.
dboreham··on Microsoft offers mass buyouts for roughly a quarter of its workforce
This is because nobody can say how many people are needed to develop or maintain some body of software. So companies hire however many employees they can afford. When the number they can afford changes they hire more or fire some. The number of staff has pretty much nothing to do with the actual work. AI introduces another factor to the equation: it allows one person to perform N times as much softy-work as before. So even if you have no idea how many people you need (as always, see above) you do know that you can get by with 1/N.
dboreham··on Show HN: Farol – a risk map of a pull request for the person who approves it
Well there's one at Google, one at Facebook...
dboreham··on No signs of AI payoff outside the tech sector
This is entirely untrue. Go ask ChatGPT a complex tax question and decide if you need to call your accountant and spend $500 to verify the answer.
dboreham··on No signs of AI payoff outside the tech sector
Seriously? Lawyers. Doctors. Civil engineering. Accountants. And that's just the fields I know of directly being significantly impacted that I could think of in 10 seconds. Oh, also: education.
dboreham··on Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more
Chat bot lol. It did all of those things including scanning the binary. I ran it after doing my own (albeit more limited, but maximal-human) investigation.
dboreham··on Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more
According to Claude when I asked it to audit one of our Python applications, there are scenarios where Brolti can be used only when some Python library detects that the C library is installed on the system. So your Brolti-ness can depend on which machine your code runs on. Ymmv, it didn't look to be a practical possibility in our code so I didn't probe further.
dboreham··on Mark Zuckerberg Pushed Meta to Shield Him from California's Proposed Wealth Tax
I understood 30 years ago (when a colleague suggested it as a plan) that "relocating to Tahoe" is something the California FTB views as a no-op.
dboreham··on Evolving Threat: http2shell is an RCE in Node, Python, and more
This is a better article: https://www.aikido.dev/blog/python-packages-vulnerable-node2...

and this is the actual CVE report, which doesn't say much: https://www.cve.org/CVERecord?id=CVE-2026-111497

dboreham··on Docker is weird
These days they may as well have the mental model of Docker when they start using a VM :)
dboreham··on Docker is weird
Never, ever, ever, write your own userland threading library.

(rule broken by almost every language in common use, unfortunately)

dboreham··on OpenShell – A safe, private runtime for fleets of autonomous AI agents
An abacus wouldn't have been a luxury in our day.
dboreham··on CVE-2026-111943: Compromised Intermediate Certificate Authority
Well, it's a check of a client, so obviously you have to run the client that you want to check.
dboreham··on Learning to live with Waymos
A family member lives on a street where a Waymo likes to park while waiting on the next ride. Initially we joked that "the Waymo is taking a cigarette break" but seeing it there led to the family using them quite often. It would never let us just walk down to its cigarette spot though -- always needed to stub out its light then drive down a narrow back alley behind the building where nobody would suspect it would decide to do its pickup.
dboreham··on Learning to live with Waymos
Balancing data set: I've been in many Waymo in Los Angeles and never had them do anything like this. Since you mentioned going to the airport presumably this was in Phoenix or San Antonio? Seems like the traffic on those places would be sub-LA level of difficult to navigate.
dboreham··on Learning to live with Waymos
Yes the "lack of a human" is a feature. That said I've learned many things from talking to Uber drivers in various parts of the world (and in the US from Uber drivers from various parts of the world) so YMMV.
dboreham··on Why do we have so many meetings?
The paper seems like a high school science project, but in my experience one common reason for having a meeting is this: Person A wants Person B (Person C's boss) to tell Person C to do something. That's it. So Person A slacks or emails Person B saying I need to get Person C to do this thing. Person B says oh we better have a meeting. The three get onto the meeting and Person B says "yeah so Person A was talking about this thing, I'm not really sure what it is...". And the meeting ends with Person C saying "ok I will do that".

All of this can be avoided in my experience by creating a culture of task assignment. Often I've seen the bug/issue tracking system used to facilitate this but you can use other applications. In this scenario Person A would open a bug detailing what they want done, and either assign it, or put it in the triage queue so Person B get assigned next. Person B reviews, makes any notes, then assigns to Person C. That's it. No meeting.

dboreham··on Ask HN: How to deal with shipping AI-written code you don't understand?
You should probably try it.
dboreham··on Ask HN: How to deal with shipping AI-written code you don't understand?
Replace "AI agents" with "a bunch of human coders" and you'll see the answer. Your product needs decent testing and it's your job as the responsible person in charge to make sure that's in place and working properly. So if anything you probably want to be reviewing the test code. But often that isn't necessary since you can do things like introduce bugs deliberately and see if tests fail; check test logs for information that confirms the tests were run as expected; try some manual testing once in a while; ask for new more advanced tests (e.g. test performance not just functionality); and so on.
dboreham··on Galois Finite Fields and the Advanced Encryption Standard (AES)
I don't know that "Weirdly" is right for the polynomial equivalence -- isn't that what Galois was trying to do in the first place (prove things about polynomials such as the impossibility of analytic solutions to higher order polynomials, and the impossibility of constructing a heptagon)?
dboreham··on Laptop Based on 6502 CPU
Quick note that bank switching does not in fact allow the CPU to "address" more than 64K. It allows the machine to "have" more than 64K but only 64K of it can be addressed by the CPU at any time.
dboreham··on Laptop Based on 6502 CPU
You have much to learn.
dboreham··on Maybe There Was an Egg Cartel After All
You can buy your eggs from Costco which iirc has their own egg operation these days.
dboreham··on I built a programming language that LLMs can't use
I was going to say the same thing. Claude built an Occam compiler for me, including many test and example programs.
dboreham··on How Quickly Can the DoD Rebuild and Recast the Munitions Industrial Base?
Or some elected government leader.
dboreham··on There's never been a better time to go into math (by: 3blue1brown) [video]
fwiw the fact that brains work fundamentally differently was my big penny dropping realization after digging into what LLMs are doing. Everything (I assert) a brain does (the function between inputs and outputs) is due to training data. There is no "instinct" and there is no "ROM-driven way to think" in any brain. It's training data all the way down. As a consequence different brains do indeed think in fundamentally different ways.
Page 1 of 34Next →