HNHacker News
TopNewBestAskShowJobs

devmor

2,973 karma · joined November 20, 2020

submissionscomments
devmor··on We tracked down the 16-year-old WAL-reset SQLite bug
I have encountered this exactly once, and it was in fact a flaky SD card - running a small web service off of a raspberry pi, with the SQLite DB stored on the SD.
devmor··on Tracking down the 16-year-old WAL-reset SQLite bug
Their CEO is a very nice and personable guy too. Has given me and others advice on random topics of his interest with no nonsense plenty of times.
devmor··on My phone detects going on a run as “someone snatching my phone and running off”
Addressing the root of the issue needs to happen for sure, but I can tell you from here in the prison capital of the world, building more prisons does not help. Rehabilitation needs to be the core of the justice system, or all you do is create lifetime criminals.
devmor··on Go is an ideal language for AI-assisted software engineering
How do you propose to quantify the terms "elegant" and "easy to reason about"? What unit of measurement do you use for these?

This sounds like your personal feelings, not quantification.

devmor··on No one can afford to make Myst games anymore
Have you driven around them? Waymos have caused me more near misses in the last month than I can recall in a year of driving in Atlanta.
devmor··on My phone detects going on a run as “someone snatching my phone and running off”
Okay, that is a lot more understandable and I do agree. Sorry for the uncharitable take!
devmor··on My phone detects going on a run as “someone snatching my phone and running off”
So your stance is that it’s wrong, but you should be allowed to do it because it makes you very angry?

What exactly would you think of anyone else applying that reasoning to anything in society? Would you think that they belong in society?

devmor··on Herdr is joining Y Combinator. The runtime stays open
For me, Open Source is extremely important because the tools are rapidly changing, and for reasons unrelated to my productivity. I use Copilot CLI at work, but now have a daemon that monitors it for updates and monkeypatches in my own custom hook framework.

This came about after 3 separate incidents where I went to use the harness and found it now provided a degraded experience because Microsoft unanimously decided to change some part of it without my consent.

I am a staunch believer that the most important thing a tool can do, other than its job, is provide a static experience until the user opts to change it. I use AI like a tool, because it is. I need it to behave the way I expect, or it's not actually useful to me.

devmor··on Atlassian Rovo Exfiltrates Data, Bypassing Controls
Determinism is a terrifying word to people who want to believe their LLM has a little brain and can do anything they want it to.
devmor··on Where .env Went Wrong
The primary reason I am not convinced is because it (and several other tools) frequently classify my own writing as AI-generated. Especially my technical writeups.

Now, I could just assume I'm an outlier within that small false-positive rate. But I find it far more likely that the efficacy of these tools is much lower than advertised and they rely on confirmation bias.

devmor··on Where .env Went Wrong
I'm open to being convinced, but the study you've linked me is limited specifically to professionally written, proofread journalism from 8 publications over a span of a little over a single year.

It's not exactly a wide breadth of varied text for such an all-encompassing task.

devmor··on The Warp Agent CLI
I like the terminal emulator but I just don't see any use for the agentic stuff.

I've disabled it all because it gets in the way.

devmor··on "Clean" Code, Horrible Performance (2023)
Performance vs. Maintainability is the infinite debate, and it’s a mind numbing one because in the vast majority of professional roles you will have the opportunity to prefer neither.
devmor··on Where .env Went Wrong
I’m not saying whether I think you’re right or wrong, but AI text detectors don’t work and never will.
devmor··on Developers are attached to tools because tools encode trust
> This concept was betrayed far before agentic tools, with a much earlier concept: Automatic updates.

This is a huge complaint for me. I had to disable JetBrains from automatic updates because they wont stop trying to force their horrendous new UI on me, and the "Classic UI" plugin I have to use to keep my IDE working the way I have been used to for the past 15 years is never updated at the same time.

devmor··on Toot.community is shutting down
Well that's kind of understandable, isn't it? In the USENET era, internet users were a subculture.

In 2026, almost everyone is an internet user.

It's kind of like saying "As someone whose first car was a Model T, I don't really consider the bulk of mainstream drivers today to be in any way 'my people'".

devmor··on Show HN: Kedge – Full-stack cloud with forkable VM snapshots and global SQLite
This is also extremely interesting to me.

An instant, ephemeral cloud sandbox is pretty handy.

devmor··on The Rust on ESP Book
This is a constant issue for me in every facet of embedded development - with the sole exception of devices that can easily be tested in a qemu environment.

I would also love to hear that the authors of this book suggest.

devmor··on Codex Security
> Credit card entry

If you're handling credit card numbers yourself, you're in a shrinking subset of developer roles. I've spent the last 7 years of my career working at payment processors, so I do handle that stuff, but the majority of my industry has built an infrastructure that makes it so most developers don't have to think about that.

To your other examples, not everyone on the team needs to know these things up front. Someone in the review process does, and eventually that knowledge gets disseminated and more people know it to carry it forward in their career.

devmor··on Codex Security
I see where you're coming from, but as someone who regularly interviews engineers, I don't care about specific tech stacks when evaluating a candidate very much either. I can only think of two positions I've worked in where such a thing really mattered.

A good engineer can adapt and catch up without a lot of lead time. For a contractor, I'd be much more specific - but for someone who's going to join my team? I'm looking for a candidate that can demonstrate their problem solving ability, creative thinking and communication skills.

Other than having some kind of experience in the general domain we work in, those "soft skills" are far harder to find than specific tech experience.

devmor··on Codex Security
To be fair, for the vast majority of cases, no you don't.

It is extremely rare for companies to roll their own payment processing anymore, or even handle PCI scope at all.

devmor··on Astronauts describe persistent 'observer' sensation after 6 month missions
Thank you, that's extremely clarifying. There's so much confidence in these comments about apparently nothing.
devmor··on Astronauts describe persistent 'observer' sensation after 6 month missions
Thank you! I have heard of this before and did not know what it was called.
devmor··on Astronauts describe persistent 'observer' sensation after 6 month missions
I’m not sure what capitalization has to do with anything. You can answer my question without being a pedant.
devmor··on Astronauts describe persistent 'observer' sensation after 6 month missions
I think you all might be using the wrong terminology here. The Observer Effect is a part of quantum physics. I was shocked to learn there was a psychological phenomenon by the same name and went to read up on it, but there doesn't seem to be such a thing and I'm not really sure what you're referencing.

Is there another name you might know this by? Disassociation is the only thing I can find that sounds similar.

devmor··on OpenAI’s accidental attack against Hugging Face is science fiction that happened
This wasn't just capable last year, it was capable prior to ChatGPT existing entirely through specialized automation harnesses that predate the terminology of a "harness" for models. This is something you could have done in 2018 if you had a spare couple of billion dollars of compute to waste. It was a subject discussed at security conferences even before that.

Automated dynamic exploit chains and credential discovery has been something every red team worth their salt does at a lesser scale for 20 years, why would you ever think that the capability didn't exist until it only cost a few thousand dollars to do?

Existed does not mean was easy, or was cheap, or was thought of as reasonable to attempt.

Also, IQ is not a term that applies to language models, and the term you are looking for is "Long Horizon Coherence".

devmor··on Protecting our FLOSS commons from LLMs
Your meaning was not clear, which was why I made certain to explain why your two comments do not mean the same thing.

If that was not enough to explain why what you said was incredibly inaccurate and toes the line of fascist propaganda, I would be happy to have an amicable discussion with you one on one - as comment threads on HN only go so deep.

devmor··on Protecting our FLOSS commons from LLMs
Your phrasing in the post I replied to is not the phrasing you are using now.

People frequently do bad things to people that they think are the right thing and that they still know are not “for [the victim’s] own good”. For example, removing an entire group of people from society is often presented as “for the good of everyone else”.

This is an incredibly important distinction when talking about the horrific ways gay people have been treated in the past couple centuries.

devmor··on Over 400 Linux CVEs published in the last 24 hours alone
Coping with what? Your reply is too full of buzzwords and vague assumptions to understand what point you are trying to make or what you believe you have inferred from me.
devmor··on Protecting our FLOSS commons from LLMs
> they were sincerely meant to be for people's own good

That is an incredibly offensive bastardization of history.

← PreviousPage 6 of 34Next →