HNHacker News
TopNewBestAskShowJobs

devttyeu

743 karma · joined July 30, 2017

me at magik dot net
submissionscomments
devttyeu··on FreeCAD in the Browser
(I made this port) Fwiw I personally had no reason to do this port beyond using it as a benchmark of the agentic capability of Fable, where something of this shape is IMO a way better gauge than those dumb X.com 'I oneshot game with models X/Y/Z this is how it compares'

I published the actual prompts, and you can see quite clearly that vs Opus which is ok at implementing one big feature, Fable was really able to push through a good chunk of the port. That said it definitely didn't one-shot the port, it also didn't figure out a broken docker sbx sandbox by itself, and also later needed some gaslighting into thinking that the port is not really that hard (by any human measure it was quite hard given the scope of code involved.. The nearly 200MB wasm binary is mostly code afaict..). So there are some clear patterns of how the model was trained and also roughly the scope of task visible in those traces. What I see is that it likes prompts that would take an L4/L5 2-4 weeks to do with Cursor ~2 years ago, more needs some direction and deliberate prompting.

devttyeu··on FreeCAD in the Browser
I will also note that it's possible to compile this with wasm asyncify, but the result iirc is a ~400MiB Wasm binary that will crash the browser tab before you will be able to do anything useful in it.
devttyeu··on FreeCAD in the Browser
I made the port, roughly ~one maxed out Claude Max 20x sub, at the bottom of the article I've shared the full claude code transcripts, so you can probably to some rough math on token usage with that.

Edit: to be precise 'maxed out' means one weekly limit on fable used over those 4 days

devttyeu··on FreeCAD in the Browser
Author of the port here, you need a browser with JSPI support, which means recent Chrome, or Firefox Nightly with the feature flag flipped, or Firefox from the future.
devttyeu··on LibreCAD in the Browser
Are you sure you created a new canvas first? Should be black, not grayish.
devttyeu··on LibreCAD in the Browser
Mmm FreeCAD you say, let's see.
devttyeu··on LibreCAD in the Browser
Just enabled, however note that I don't really intend to support this much more, but would happily get this repo to someone who would want to support wasm mode more properly / ideally upstream in longer term
devttyeu··on Uber's $1,500/month AI limit is a useful signal for AI tool pricing
If you believe a 128gb machine that is essentially DGX Spark in a laptop chassis can run models comparable to SOTA you either never ran open models on hard tasks, or you aren't scratching the surface of SOTA closed LLM capability in how you're using them.
devttyeu··on Norway's 2 petabytes of Huawei flash storage and LLM training
More like $1M at current prices at this scale / level of performance.

If you go with HDD arrays probably $50k

devttyeu··on Uber’s COO says it’s getting harder to justify money spent on tokenmaxxing
Well if you're a devshop just billing hours of mostly low impact work then hours are very much equal to productivity.
devttyeu··on An OpenAI model has disproved a central conjecture in discrete geometry
Fwiw if you trained an LLM in an RL sandbox that would require it to have goals, the output llm probably would "have goals"
devttyeu··on An OpenAI model has disproved a central conjecture in discrete geometry
That's here for anyone wondering - https://cdn.openai.com/pdf/1625eff6-5ac1-40d8-b1db-5d5cf925d...
devttyeu··on Postmortem: TanStack npm supply-chain compromise
For the stuff in more sensitive deployments it's really quite simple, just setup CORS etc properly and don't do anything overly fancy on the frontend. Worst case the user may force some internal function to eval some JS by pasting scripts into the browsers debug console.

Critical severity vulnerabilities are only critical when they are reachable, but are completely meaningless if your application doesn't touch that code at all. It's objectively more risky to "patch" those by updating dependencies than just let them be there.

devttyeu··on TanStack NPM Packages Compromised
If it runs in a harness that will alert me when something dodgy is detected I'm fine to stay at that level.

I don't read it in detail because reading in detail is precisely what I delegate to the harness. The alternative is that I delegate all this trust to package managers and the maintainers which quite clearly is a bad idea.

Whether the $$ pricetag is worth it is.. relative. Also in Go you don't update all that often, really when something either breaks or there is a legitimate security reason to do so, which in deep systems software is quite infrequent.

Funnily enough for frontend NPM code our policy was to never ever upgrade and run with locked dependencies, running few years old JS deps. For internal dashboards it was perfectly fine, never missed a feature and never had a supply chain close call.

devttyeu··on Postmortem: TanStack npm supply-chain compromise
Cargo is spiritually based on NPM so it's not much better.

Go Get is closer to always locking dependencies unless you explicitly upgrade them with a go get, so it's much much better in my view.

Yes, you can lock deps in NPM/Cargo/etc. but that's not the default. It is the default in Go.

In Go projects my policy for upgrading dependencies includes running full AI audit of all code changed across all dependencies, comes out to ~$200 in tokens every time but it gives those warm 'not likely to get pwned' vibes. And it comes with a nice report of likely breaking changes etc.

devttyeu··on 245TB Micron 6600 ION Data Center SSD Now Shipping
Enterprise NVMe on the high end is now starting to ship batches at $1000/TB with existing stock around $500/TB. No consumer is going to pay that.

But if you're buying a $500k GPU server putting 100TB of nvme in there for $50-100k is justifiable.

devttyeu··on $1,605: average annual ad value of a U.S. Google user
403 B is the revenues - https://www.sec.gov/Archives/edgar/data/1652044/000165204426...
devttyeu··on Tell HN: Claude Is Down
Also not able to access Gemini API.

At least our local GPU server still serves Kimi K2.5 to my team just fine.

devttyeu··on Qwen3-TTS family is now open sourced: Voice design, clone, and generation
Also like some popular youtubers and popular speakers.
devttyeu··on Get an AI code review in 10 seconds
Funny you mention that, I have very recently just came back from a one-shot prompt which fixed a rather complex template instantiation issue in a relatively big very convoluted low-level codebase (lots of asm, SPDK / userspace nvme, unholy shuffling of data between numa domains into shared l3/l2 caches). That codebase maybe isn't in millions of lines of code but definitely is complex enough to need a month of onboarding time. Or you know, just give Claude Opus 4.5 a lldb backtrace with 70% symbols missing due to unholy linker gymnastics and get a working fix in 10 mins.

And those are the worst models we will have used from now on.

devttyeu··on Gemini 3 Pro: the frontier of vision AI
Visual puzzle solving is a pretty easily trainable problem due to it being simple to verify, so that skill getting really good is just a matter of time
devttyeu··on Shai-Hulud Returns: Over 300 NPM Packages Infected
In Go you know exactly what code you’re building thanks to gosum, and it’s much easier to audit changed code after upgrading - just create vendor dirs before and after updating packages and diff them; send to AI for basic screening if the diff is >100k loc and/or review manually. My projects are massive codebases with 1000s of deps and >200MB stripped binaries of literally just code, and this is perfectly feasible. (And yes I do catch stuff occasionally, tho nothing actively adversarial so far)

I don’t believe I can do the same with Rust.

devttyeu··on A cryptography research body held an election and they can't decrypt the results
Cryptography is the science of turning any problem into a key management problem
devttyeu··on Ask HN: How to get funding for your product?
If you have Pro users why not leverage with debt without giving up equity for no good reason?

Maybe the value prop is not clear, the website talks a bunch about AI agent integrations, that sounds like a completely different product to a parser library, which however advanced it may be, investors will likely see as tangential bit of IP that a senior engineer can build for $10-20k in a few days.

devttyeu··on IKEA launches new smart home range with 21 Matter-compatible products
It does address quite a few reliability issues - you can have multiple gateways into the thread network so it is actually highly available.

It’s definitely complicated, but it’s a kind of usb-c of smart home - you only worry about the complex part when building a product. Just wish there was a better device reset/portability story.

devttyeu··on IKEA launches new smart home range with 21 Matter-compatible products
Both use 802.15.4 but iiuc zigbee does that with some incompatibilities.
devttyeu··on A P2P Vision for QUIC (2024)
It is halfway there arguably, and libp2p does make use of it - https://docs.libp2p.io/concepts/transports/webtransport/

Unlike websockets you can supply "cert hash" which makes it possible for the browser to establish a TLS connection with a client that doesn't have a certificate signed by a traditional PKI provider or even have a domain name. This property is immensely useful because it makes it possible for browsers to establish connections to any known non-browser node on the internet, including from secure contexts (i.e. from an https page where e.g. you can't establish a ws:// connection, only wss:// is allowed but you need a 'real' tls cert for that)

devttyeu··on WebDAV isn't dead yet
NFS is much slower, maybe unless you deploy it which RDMA. I believe even 4.2 doesn’t really support asynchronous calls or has some significant limitations around them - I’ve commonly seen a single large write of a few gigs starve all other operations including lstat for minutes.

Also it’s borderline impossible to tune nfs to go above 30gbps or so consistently, with WebDAV it’s a matter of adding a bunch more streams and you’re past 200gbps pretty easily.

devttyeu··on AWS multiple services outage in us-east-1
Can't update my selfhosted HomeAssistant because HAOS depends on dockerhub which seems to be still down.
devttyeu··on Modern iOS Security Features – A Deep Dive into SPTM, TXM, and Exclaves
And after all that hardcore engineering work is done, iMessage still has code paths leading to dubious code running in the kernel, enabling 0-click exploits to still be a thing.
← PreviousPage 2 of 4Next →