HNHacker News
TopNewBestAskShowJobs

fg137

1,467 karma · joined April 4, 2026

submissionscomments
fg137··on The Agent SDK
I see people spending so much time creating "workflow" skills that have no benchmark whatsoever to prove they are any more effective than plain one sentence prompts.
fg137··on About the compromised eMudhra intermediate CAs
There are so many "likely" in this comment that I don't know if I should care about a single word at all. Looks pure speculation if not fiction to me.

Looking forward to a comment that is much more grounded than substantial than this.

fg137··on Ten days later, Git on macOS still trusts the compromised eMudhra certificates
Security practice was generally very, very bad two decades ago, by today's standards, across the industry.

I don't see the point of being so fixated on that.

fg137··on New iMac with M6
Most people, i.e. people that are not on HN, can't tell the difference between 27" 1440p vs 4k monitors, unless you ask them to look really carefully.

Lots and lots of people use 15.6" laptop with 1080p screen and are perfectly happy.

Every time I see people talk like this, I have to wonder who it is for.

fg137··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
Not what I am seeing. not sure if there is A/B testing here.
fg137··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
They could have removed GLM 5.3 from the title, and the title and the body would still make perfect sense.
fg137··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
What's the point of even mentioning GLM-5.3? That's a detail that only belongs in the body.

Did you ever given any thought about how confusing the title may be?

Did AI write this title and you just use it without ever wondering if it makes sense at all?

fg137··on Roblox downloaded 145GB models from us (including adult content) without asking
That fight was already lost back in 2024.
fg137··on Somebody please stop the spam texts
I don't know I should feel good or bad, but I have not received a single political campaign message over the past few election cycles. Never.

Says something about the political climate of where I live.

fg137··on Meta Employees Denounce Interference in Brazilian Elections
Maybe check how twitter/X is doing these days.
fg137··on New iPad mini
Since when have we established "thinner and lighter" equals "better"?

In the case of iPhone Air and Galaxy Edge phones, there were notable compromises to achieve a thinner body, for which many people don't consider an improvement.

Granted, I have not seen or used the new iPad mini, and I don't know if any such compromise has been made. But probably should leave it open until we conclude this is a plus.

fg137··on Meta Employees Denounce Interference in Brazilian Elections
Even if 500 employees refuse to show up to work because of this, Meta will easily replace them within a month if not a week.

If Meta keeps those positions at all.

fg137··on New iPad mini
> in an even thinner and lighter design

Never once did I hold my iPad mini with a case and think, "damn this thing is heavy"

fg137··on IBM CEO says open weight models are now good and cheap on-prem
I once overheard someone in a coffee shop saying that she needed GPU to run inference. But gaming laptops are too heavy with short battery life, while MacBooks are expensive.

I really wanted to tell her -- what she needed was compute, not hardware. Her best bet was to rent GPU which is easily available from many services. If she was paid to run inference, cost is not a concern. If she did it for her own work, she wouldn't need to shell out a ton of money initially and then be left with hardware that she no longer needs when the work is done. In any case, she wouldn't need to worry about purchasing hardware or battery life. ssh to a remote machine is simply way superior than running inference on a laptop she carries around by any means except in a few rare occasions (e.g. no Internet access).

Same thing for a company. Why would any company who has a business to run get themselves burned in acquiring GPUs, setting up racks, load balancing etc when Bedrock/Azure Foundry etc is right there with tons of both open and closed models and ZDR? And then see hardware depreciate in just a few years?

fg137··on Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm off-key
I doubt you'll get an answer here, and people in "type 1" don't want to talk about type 2.

My take, without directly addressing your questions: "have fun" doesn't go very far, and you'll discover that if you want to be good at anything, you'll need to put in many hours of practice with endless repetition and go through setbacks and self doubt, none of which is fun. And for sure there are singers and musicians that never go through formal training, including at the highest levels, they are few, when most musicians you know have been learning music since they were kids.

fg137··on Show HN: OnKey – I'm a bad singer, so I built an app to show where I'm off-key
This.

As an amateur musician who can afford private lessons, I cannot understate how important a teacher is in music learning. You can try to learn things on your own and mess with these stuff, but a teacher goes a long way. They spot your mistakes instantly and help you progress efficiently.

I understand that it is not financially viable to everyone, but seriously, if you are able to, get some professional guidance.

fg137··on Today's PHP security release, and how we're strengthening security
> Calif, one of the security firms that had reported the issues mistakenly published a video.

> Chainguard unilaterally broke the embargo and published built images ...

Won't be the last time this happens. If there is no consequence of breaking the rules, people will keep doing that.

fg137··on Security advisory: Critical remote code execution vulnerabilities, update now
Years ago I migrated all my personal sites to being statically generated, since they don't have actual dynamic content anyway. That was a good decision.
fg137··on Tsrs: A Port of TypeScript to Rust
What does that prove?

I can vibe code my own CMS with one major version update everyday but that means nothing.

fg137··on Tsrs: A Port of TypeScript to Rust
Which language do you write to run code in browsers, especially that can manipulate DOM?

You need a quick reality check.

fg137··on Tsrs: A Port of TypeScript to Rust
How is EmDash doing?

Never heard the name again after the initial hype.

fg137··on Facebook Pages require paid subscription to post more than two links per month
I think they can afford to pay $50 a month.
fg137··on Facebook Pages require paid subscription to post more than two links per month
I mean, this isn't really a surprise. On many social media platforms, you get instantly banned/shadowbanned if you post an external link, if you can publish that post in the first place at all. From the platform's perspective, there is almost no incentive to allow external links (spam, leakage etc). There is no law to mandate that third party links must be allowed.

I don't like this but also don't see how this can be different in the real world.

fg137··on There is no official XScreenSaver GitHub repository
A link to a .tar.gz file published on someone's personal website serving as the only way to access source code also seems a centralized solution.
fg137··on There is no official XScreenSaver GitHub repository
Having spent (way too much) time on HN, I have come to realize that there are people in this industry -- in fact quite a few of them -- who cares nothing about being nice/cooperative/helpful/pragmatic and getting things done, but just want to show off their ego/opinion and make a statement.

Many names come to mind but I am too scared to post that list.

fg137··on There is no official XScreenSaver GitHub repository
I haven't seen a site that hurts my eyes this much for a very, very long time.
fg137··on I never authorized an integration that scans my secrets
I guess it never occurred to you that the "why" doesn't matter here.

Tons of people avoid buying certain consumer products because there is a camera/mic in it, even if it's not always on/can be turned off etc.

The fact password scanning is out of its scope and the potential that it can do harm are enough to drive people away.

fg137··on I never authorized an integration that scans my secrets
If you tell me a piece of software that is not a password manager wants to send the first five characters of the hashes of my password to a third-party, without my explicit opt-in, I will say no without hesitation and without the need to hear more details. Not even if it's a random bit in the hash.

Most of people here probably would say the same.

So it should be clear if you look back at this.

fg137··on I never authorized an integration that scans my secrets
> he has every right to ask for it

Who says so?

If it's not in legal text, it doesn't exist, or matters.

If you don't want to support it, make it clear in license or README. Lots of projects work like that. Companies put "source available" or "open source but no external contribution" projects on GitHub and make it very clear what's the expectation. Nobody has any issue about that.

Somehow this guy thinks he is special.

If someone doesn't understand how licenses work, they should keep their work close sourced.

fg137··on I never authorized an integration that scans my secrets
If I were setting up HA it is exactly because I don't want the shenanigans of Google Home and Alexa.

Seeing this, I don't think I'm going to touch it. Alexa might be more respectful of user data.

Page 1 of 22Next →