HNHacker News
TopNewBestAskShowJobs

devmor

2,940 karma · joined November 20, 2020

submissionscomments
devmor··on Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees
> I think your criticism is more in line with "they are not exactly the same as RPis". And that is fine.

I chose my wording very intentionally. My criticism is exactly what I said.

It’s like comparing a bicycle to a light duty farm truck.

devmor··on Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees
Those are entirely different operational models.

While people do often use pis to do things you could do with an esp32, an ESP32 cannot do the majority of things a Pi can do.

devmor··on Tailscale SSH: Investigation and remediation update
I will send her your message!
devmor··on Tailscale SSH: Investigation and remediation update
A security researcher colleague of mine was/is exploring an unauthenticated avenue along this line. I don’t have any update, she told me she didn’t feel comfortable exposing information to anyone other than Tailscale staff until she’s confident in what she found or didn’t.
devmor··on PHP2Shell: Exploitation attempts and remediation trends
Bleeping Computer also reported that PHP 6 was among the vulnerable versions. I’m not exactly sold on their verification standards.
devmor··on Anthropic S-1
Buying a stock that holds its price is equivalent to putting your money in a savings account with no interest.
devmor··on The foolishness of "natural language programming" (1978)
I find this to be intrinsically true in my experience. I was put into senior-level engineering positions very early in my career because I'm a strong problem solver and mentor. I've taken on several positions as a programmer working with a language stack I had little to no experience in without much issue.

Of course there are problems where knowing the code deeply is essential to solve the problem, but those really aren't the majority, if even less than 1% of business problems.

When it comes to what the average developer needs to understand, having a strong grasp on one functional and one procedural language can enable you to solve almost every problem in any language ecosystem, provided the correct resources. If you can do this, you can utilize an LLM for programming assistance well. If you can't, you probably should not heavily rely on one at all yet.

devmor··on The foolishness of "natural language programming" (1978)
I'm not sure if you're being self depreciating or genuinely desire that, but this isn't an outcome that leads to good software engineering.

You should own and be the expert on the architecture and design of what you're building regardless of whether yourself, an LLM or another person is writing the code.

The LLM isn't "smarter" than you, it's more resourceful. It can (to varying degrees of success) translate your design into code. If you aren't still taking ownership and driving the design of that logic, the LLM isn't going to bring you success with anything other than single-use or hobby applications.

devmor··on Your Phone Is About to Stop Being Yours: 70 Days Until Lockdown
Sorry, I get where your emotions are coming from with this, but it is just technically wrong on every level.

The vast majority of tech support scams come through apps on the Play Store. Not only that, but malicious apps get approved on the Play Store constantly.

There is no reason to take any claim that this change is meant to mitigate scams seriously, because there's no evidence to support that it makes a noticeable dent in such activity.

What this change does noticeably and impactfully do, is prevent, via chilling effects, users from being able to use their phones in ways that could lose Google and its partner vendors post-sales revenue.

As you said, serving people should be the end in itself, and this change doesn't do that - it hurts people.

devmor··on OpenShell – A safe, private runtime for fleets of autonomous AI agents
And most people running containers are running a default docker/containerd setup, which does not actually isolate you from anything at all in the first place anyways.
devmor··on OpenShell – A safe, private runtime for fleets of autonomous AI agents
For real.

My agentic workloads happen on two physical machines dedicated only to agentic workloads that share a VLAN with only eachother, with single token access to the specific repositories they are meant to push to and limited scope, hard limited credentials pulled from the hardware store on hardware token/fingerprint request only.

I view the safety around unmonitored agentic work in a similar way to how I view working with viruses or bacteria in a disease lab.

This stuff isn’t magic, it isn’t intelligent, but it is dangerous and needs to be handled with careful intent.

devmor··on eMudhra to exit global SSL/TLS certificate business
To be four, you could open it to the world.
devmor··on Why harnesses matter for energy (and token) efficiency
This is too reductive of a statement to have any meaning. You have re-defined a class of program to encompass all programs. The term “harness” exists to differentiate it from programs that are not harnesses.
devmor··on Waymo in Toronto
I used to be excited about these, but after a year or so of having to drive near them in Midtown Atlanta I would get incredible dopamine out of watching them crushed for scrap.

They cause traffic obstructions during rush hour every single day. Blocking entire lanes of traffic to pick up Uber customers.

devmor··on 90% of US working hours are spent on tasks not covered well by AI benchmarks
Do you think it takes an hour to clean and resupply a restroom? It takes about 15 minutes for the maintenance staff in my office building.

> that being said of course I think it’s going to be way less than $5 an hour if you have a robot do it.

This is about an LLM-powered robot, not just a robot. At standard API prices, it'd run over $5 before it finished opening the door.

devmor··on 90% of US working hours are spent on tasks not covered well by AI benchmarks
> cleaning out a restroom and resupplying it that’s easy as hell.

But is it cheaper than paying someone around $5 in labor to do it? Because until it is, it's not economical to have a robot do it.

devmor··on Show HN: Gemini 4 Argon plays StarCraft
Even the most powerful frontier models on SOTA hardware are not fast enough for starcraft, which generally involves multiple informed decisions per second at peak moments.

You can train a specialized model for this, but a frontier model is ill-fitting.

devmor··on OpenCode 2.0
htop and similar TUIs have a refresh rate of 1 frame per second
devmor··on Containment and monitoring failures are to blame for AI hacking reports: experts
I don’t know what your “again” is about - you haven’t been speaking to me here, but no, it’s quite simple and every major court case in the US has ruled as I described based on existing law.

It is not more complex in “many cases” at all.

devmor··on Fire at Starlink site in Bulgaria after suspected sabotage in Poland
I think you’re missing part of the conversation here. We are not discussing Starlink’s capability to deliver internet signals.
devmor··on OpenCode 2.0
Well, stdout is not typically implemented for the purpose of simulating graphics rendering via character manipulation.
devmor··on Fire at Starlink site in Bulgaria after suspected sabotage in Poland
The only source I have ever seen is the US SDA confirming they have seen a demonstration of Starlink’s ISL, in 2024.

Do you have any more detailed or up to date information? I’m not doubting that they built ISL capabilities, since ISL is often used for collision avoidance and small scale satcom - I’m doubting that it is being actively used to route internet traffic.

devmor··on 11 year old unsoundness bugs found in Rust borrow checker
I understand and do agree with you following your intended interpretation. Thank you for the patience and explanation.
devmor··on Fire at Starlink site in Bulgaria after suspected sabotage in Poland
Since when? Last I heard this was just vaporware.
devmor··on Containment and monitoring failures are to blame for AI hacking reports: experts
The semantic difference between an agent "going rogue", and a script that generates random valid curl requests is essentially pointless in the eyes of the law and responsibility.

From a technical standpoint, the difference is scale and intent, but ultimately people and/or and organization are culpable for the output.

devmor··on 11 year old unsoundness bugs found in Rust borrow checker
The original comment I replied to, in which you claimed that the difference between a safe Rust and C++ program with unsound behavior is that the C++ program needs to be fixed, but for the Rust program, the compiler needs to be fixed.

As I see it, in either case, the program can be fixed, or the compiler can be fixed. The only difference as I see it is that the C++ spec does not expect the compiler to be fixed.

Did I misunderstand your post?

devmor··on Why is every rationalist blog post way too long?
When one is “full of shit” as they say, the shit needs to spill out somewhere.
devmor··on 11 year old unsoundness bugs found in Rust borrow checker
Your shoulds and musts are nice and all but you said that in these situations, the rust compiler needs to be fixed when the C++ program can be adjusted.

I simply cannot imagine a situation where you can’t find an alternate solution to a problem with the compiler. Even if the compiler would optimize your intended solution away, you can write an asm! macro.

It sounds to me like you have simply decided that one language cannot do what the other can because you personally would not do it, which is very silly.

If this is not the case then I restate my request for an example, for the third time - an example would prove the point you are not making through explanation.

devmor··on 11 year old unsoundness bugs found in Rust borrow checker
That’s not an example, that is you restating your post.
devmor··on 11 year old unsoundness bugs found in Rust borrow checker
> If a compiled safe Rust program has unsound behavior, the compiler needs to be fixed

Can you provide an example of such a program that can’t be fixed at the program level like a C++ example?

Page 1 of 34Next →