HNHacker News
TopNewBestAskShowJobs

devy

10,753 karma · joined March 11, 2011

[ my public key: https://keybase.io/yewang; my proof: https://keybase.io/yewang/sigs/oqeIeIArRK13MRWPHemV_vmPEn1K4qClxSFpwQsTB5U ]

hnchat.com:3XTKnS6ltyuLoPtjZlYF

Opinions and views expressed here are my own.

submissionscomments
devy··on Malus – Clean Room as a Service
LOL. Same here. But the footer disclaimer and testimonials gave it away immediately:

> "We had 847 AGPL dependencies blocking our acquisition. MalusCorp liberated them all in 3 weeks. The due diligence team found zero license issues. We closed at $2.3B." - Marcus Wellington III, Former CTO, Definitely Real Corp (Acquired)

> © 2024 MalusCorp International Holdings Ltd. Registered in [JURISDICTION WITHHELD].

> This service is provided "as is" without warranty. MalusCorp is not responsible for any legal consequences, moral implications, or late-night guilt spirals resulting from use of our services.

devy··on Florida judge rules red light camera tickets are unconstitutional
NYC government has thought about the legality of red light cameras. What they made it legal is to have human law enforcement officers review ever single computer flagged speeding footages with zoom out license plates, putting enforcement officer's signature into the tickets mailed out. In the same ticket they also provided a signed affidavit from the red light camera technology vendor's technician who performs weekly technical maintenance to certify that the red light camera is functional proper at the designed technical specifications (violation speed was far exceeds the margin of errors of reported speed etc.) Thus, both signatures satisfied the legal due process in NY state law. And the red light camera tickets mailing out are legal and enforceable.

Sources:

1. yes I got them before when I was driving a lot in Queens, New York City had legal counsel regarding fighting these red light camera tickets.

2. NYC government is quadrupling those cameras as it's a really cheap way to increase municipal revenue and reduce traffic speed. It's working if you drive in Queens NYC you will notice most traffic obey to the speed limits. https://www.reddit.com/r/nyc/comments/1q8fm89/nyc_to_quadrup...

devy··on 10% of Firefox crashes are caused by bitflips
I wonder if Chrome dev team can corroborate on this finding in their crash reporting.
devy··on I found a useful Git one liner buried in leaked CIA developer docs
I needed that exact functionality and Claude code and ChatGPT consistently showing this same exact combo CLI receipt with the simple prompt "how to do use CLI to remove merged branch locally."
devy··on Another GitHub outage in the same day
They were talking about prioritizing migration into Azure for a long while now. Not sure this incident today is related.

https://thenewstack.io/github-will-prioritize-migrating-to-a...

And coincidentally, an early CircleCI engineer wrote an article about GitHub Action (TLDR: don't use GitHub Action for CI/CD!)

https://www.iankduncan.com/engineering/2026-02-05-github-act...

https://news.ycombinator.com/item?id=46908491

devy··on Claude's new constitution
In my current time zone UTC+1 Central European Time (CET), it's still January 21st, 2026 11:20PM.

Why is the post dated January 22nd?

devy··on The highest quality codebase
> Read and summarize the project

> Implement a fresh project based off of this description

Genuine question, if we were to ask AI to do those two steps to generate a different code base from scratch entirely, does it qualify for a "clean room" design legally speaking?

devy··on Cloudflare outage should not have happened
Author's real cause prevention notes.

> 1. No nullable fiels.

Is that a typo there? fiels should be fields?

devy··on OpenAI Needs $400B In The Next 12 Months
Ed Zitron the author of the article talked about this in an earlier podcast:

https://youtu.be/_wStScmT748

devy··on I almost got hacked by a 'job interview'
This is a optional/invite only feature. LinkedIn doesn't provide that work email validation feature for all employers on their platform. Why did I know that? Because my past startup was requesting LinkedIn to enable that so that we can enable that feature but they said it's an invite only feature. Internally, I think they are only invite those employers who has certain amount of employees and/or revenues to turn it on.

Apple / Google developer program uses Dun&Bradstreet to verify company and developer identities. That's another way. But LinkedIn doesn't have that feature (yet).

devy··on I almost got hacked by a 'job interview'
> Seasoned accounts are a positive heuristic in many domains, not just LinkedIn.

Yep. This is how the 3 major credit bureaus is the United States to verify your identity. Your residence history and your presences on the distributed Internet is the HARDES to fake.

devy··on I almost got hacked by a 'job interview'
The pseudonym "Mykola Yanchii" on LinkedIn [1] doesn't look real at all.

Click "More" button -> "About this profile", RED FLAGS ALL OVER.

-> Joined May 2025 -> Contact information Updated less than 6 months ago -> Profile photo Updated less than 6 months ago

Funny things, this profile has the LinkedIn Verified Checkmark and was verified by Persona ?!?! -> This might be a red flag for Persona service itself as it might contain serious flaws and security vulnerabilities that Cyber criminals are relying on that checkmark to scam more people.

Basically, don't trust any profile who's been less than 1yr history even though their work history dated way back, who has Personal checkmark, that should do it.

[1] https://www.linkedin.com/in/mykola-yanchii-430883368/overlay...

devy··on Software update bricks some Jeep 4xe hybrids over the weekend
Someone correct me if I am wrong, we've haven't heard that Tesla OTA updates bricking people's cars.

They implemented a dual redundant system similar like the dual BIOS for motherboard since 1999.

devy··on Introducing tmux-rs
Wonder if anyone has tried these over flourishing AI code assist tools to supercharge the speed these porting projects? If so, what's the experience has been?
devy··on Double is winding down
Re: License for https://github.com/doublehq/oracle

The README.md says it's MIT licensed on the very last line (https://github.com/doublehq/oracle/blob/b69ef4c940217a2fbf52...).

However, LICENCE file (not LICENSE.md file, which doesn't exist, https://github.com/doublehq/oracle/blob/b69ef4c940217a2fbf52...) says it's GPL 3.0 license.

Which one is it?

devy··on T-Mobile employees across the country receive cash offers to illegally swap SIMs
SMS based OTP has been known to be unreliable way to authenticate someone because exactly this type of social engineering hacks.

All software providers and the industry should ban SMS based OTPs as a standard practice. Either leapfrogging to a Passkey implementation or just time based OTPs.

devy··on Toyota cuts 2023 EV sales forecast by nearly 40%
Toyota and Japanese auto manufacturers in general (except Nissan, which is crossed owned by French automaker Renault S.A.) are legging behind in EV development either because they chose the Hydrogen fuel cell route when investing R&D money in the past few decades, probably 10s of billions USD by now. It was a catastrophic strategic mistake. Because of heavy bet on non-EV and the decades of R&D on a dead-end on fuel cell technologies, they have always been wishy-washy about EV investments and productions. The further they delayed their investment in EV technology, the more they are lagging behind in battery tech and EV drivetrain and infotainment systems, as evidently as bZ4X etc.

But the report accurately pointed out the main reason for sales decline is due to the fierce competition in Chinese market where Chinese domestic EV brands are rising rapidly - just as how it was developed for the smartphone in the early 2010s. The iteration speed of product development and governmental support in EV transportation shift drives the huge recent sales success in Chinese EV brands like BYD.

devy··on REI is Laying Off 275 Employees
REI stands for Recreational Equipment, Inc. (https://www.rei.com/) Unless that was a rhetorical question.
devy··on Veles – A tool for binary analysis (2018)
Yep. There is banner in the repo reads:

   This repository has been archived by the owner on Sep 29, 2020. It is now read-only.
devy··on Conduit: Simple, fast and reliable chat server powered by Matrix
Has anyone implemented Conduit with other backend services via the Matrix API?

https://spec.matrix.org/latest/

Any reason why it's not a good idea to integration the API with server side (aka E2E or distributed drawbacks?)

devy··on Oregon finally legalizes pumping your own gas
After this, New Jersey (NJ) is the only state in the USA that still have laws to prohibit self pumping gasoline/diesel.
devy··on Xerox scanners randomly alter numbers in scanned documents (2013)
Is this a Xerox specific issue or industry wide problem? The author suspected that this is not an OCR issue What about out scanners? HP, Epson, Cannon, Ricoh, etc?
devy··on Toyota: Car location data and videos of 2M customers exposed for ten years
This sounds like there should be a massive class action lawsuit against Toyota.
devy··on Why does a plastic-wrapped turkey sandwich cost $15 at the NYC airport?
In my anecdotal experience Indianapolis International Airport (IND) is the best in terms of reasonable food pricing / affordability as well as comfortability in waiting area / seats and newness of the facility.

https://www.insideindianabusiness.com/articles/indy-airport-...

Even though IND doesn't nearly have the traffic like 3 NYC airports, it's still 24/7 airport and the self-served Farm Fridge food kiosk was super great in terms of prepackaged meals and pricing (half of the selections were under $10 - I flew to IND last month.) The Soda machine also charges $2 / bottle of Coca-Cola like other non-airport retailers instead of price gauging.

devy··on Nokia launches DIY repairable budget Android phone
I am talking about mobile phones. Unfortunately Microsoft exited Windows phone business. So what are you talking about gold standard?
devy··on Nokia launches DIY repairable budget Android phone
I don't see a 3-year security update as an irony. In fact, I see that as a great gesture for the budget price point android phone has a 3-year software warranty. Nokia probably have done research on this pricing segment to know that the averaging budget android device lifecycle is about 2.x years and guarantee a 3 year security update to make the device more worthy, comparing to other brands at this price point. By the way, NO ONE offer unlimited years of security updates, even Apple iPhone as the gold standard only provide security updates up to 6-7 years but Apple charges at least 2 times of the price.
devy··on Show HN: Portable Secret – How I store my secrets and communicate privately
About 10 years ago when I was working with American Express for a Payment Gateway project, all the internal bank too vendor communications were these encrypted emails with a self-contained HTML file that has the content encrypted inside of them, similar like Portable Secret. Sadly I don't recall the proprietary vendor's name or the name of the technology. Pretty sure I've received similar self-embedded HTML from Chase as well.
devy··on Westinghouse sees a tech disrupter in its eVinci microreactor
In 1960, there was a meltdown.

https://www.youtube.com/watch?v=PaGdJdXnagQ

https://en.wikipedia.org/wiki/Westinghouse_TR-2

devy··on What's so hard about PDF text extraction?
Yes, I saw the other submission and post this (as I read it a few months back).

It's a hard enough domain area that warrants a startup to solve the pain point.

devy··on PDF processing and analysis with open-source tools (2021)
Amazing share on the tooling side of thing for PDF processing.

More on PDF and why it's hard to do analysis [1]. TL;DR

     "PDF was never really designed as a data input format, 
      but rather, it was designed as an output format 
      giving fine grained control over the resulting document."
By the way, the PDF 1.4 (most widely used version) specification is over 1000 pages![2] To make it even harder, not everybody follow the spec :)

[1] https://news.ycombinator.com/item?id=33146364

[2] https://opensource.adobe.com/dc-acrobat-sdk-docs/pdfstandard...

← PreviousPage 4 of 34Next →