HNHacker News
TopNewBestAskShowJobs

jzebedee

932 karma · joined February 23, 2015

submissionscomments
jzebedee··on 1,208,577 business ideas. Free
I just watched him present it at Cloudflare Connect. He's quite serious.

It was a bit sad. Old man talks about existential risks of AI, gets scared, leans hard into "we'll use AI to save ourselves" as a gambit for hope.

jzebedee··on Forgejo <=16.0.3 Critical RCE
Relevant change:

   Security bug fixes

    PR: Critical: fix: prevent template expansion from interfering with git repo initialization. When generating a new repository from a template repository, Forgejo clones the template repository, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. During this process, variable template expansion could be misused in order to create a new .git folder, which git would adopt and incorporate during its initialization of a new git repository. A malicious template repository could be used to read arbitrary data from the Forgejo host, and to execute arbitrary processes on the Forgejo host, as a remote code execution attack. To address this issue, after variable expansion is completed, any existing .git folder is removed from the directory before the git repository is initialized.
jzebedee··on Finger: the 1971 social network that never died
I'm always curious where these moments of serendipity get their start. How'd you come to read Omar Khayyám's 11th-century poetry?
jzebedee··on The lost civic life of movie rental stores
> Then that crazy bastard started taking photos of people's menus.

I don't get the reference. Is this a startup origin story?

jzebedee··on How to Sell a Kettle
The whole article is satire, parodying the overwrought ad copy designed to sell a simple appliance (electric kettle) to different marketing segments.
jzebedee··on OpenAI and Anthropic unite against open-weight AI risks to their bottom line
I think you can realize how ludicrous it is to invoke 80 year old copyrights for a product whose main use case is coding. How much code from 1946 was it lawfully ingesting?
jzebedee··on ICE to Pay Thomson Reuters $125M to Find Voter Fraud
No, of course not. They have zero domestic police authority for US citizens.
jzebedee··on We rewrote our custom visualisation renderers from SVG to be in Canvas
I was interested in the approach as a way to reduce DOM bloat, but it's clearly Claude's writing and visualizations.
jzebedee··on Show HN: Hackney – Compare Uber, Lyft, Waymo, and Robotaxi Prices
Which is a competitive success story. It's much more profitable to avoid competition with abusive dynamic pricing and punish users for price-shopping.
jzebedee··on Better Auth is joining Vercel
It's a good reminder, because in the auth landscape I wish I had just picked up Keycloak and stuck with it. Commercial auth is a bad value proposition and not the kind of infrastructure where you want to have acquisition churn happening often.

The self-hosted space is another headache. I wasted so much time trying to make smaller self-hosted auth solutions work, since Keycloak has a reputation for being heavyweight.

I looked into the Ory stack extensively trying to actually use it as advertised for self-hosted / open-source auth. It's aggressively gimped and its SSO features are emphatically _not_ open-source and are gated behind licensing, with no way to find out until you're actually running it.

It's also just unfinished. Their "stack" is a lot of cobbled-together Go mixed with incompletely rebranded acquisitions like SAML Jackson (now "Polis"), which they managed to gut so completely it went from a best-in-class OSS library to unusable.

jzebedee··on .NET (OK, C#) finally gets union types
C# is strongly-typed, not stringly-typed. The point of the union is to list possible outcomes as defined through their respective types.

The idiomatic way to do this would be to parse, don't validate [1] each string into a relevant type with a record or record struct. If you just wanted to return two results of the same type, you'd wrap them in a named tuple or a record that represented the actual meaning.

[1] https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...

jzebedee··on FBI warns of '764' network: violent social engineering targeting kids in games
Previously covered by Ken Klippenstein:

[1] Pre-Teen Terrorists: FBI’s New Target: https://www.kenklippenstein.com/p/pre-teen-terrorists-fbis-n...

[2] FBI Echoes QAnon Pedophile Conspiracy: https://www.kenklippenstein.com/p/fbi-pushes-qanon-pedophile...

[3] What are "Nihilistic Violent Extremists"?: https://www.kenklippenstein.com/p/what-are-nihilist-violent-...

jzebedee··on Dav2d
Project description:

  dav2d is the fastest AV2 decoder on all platforms :)
  Targeted to be small, portable and very fast.
If you're out of the loop like me:

  AV2 is the next-generation video coding specification from the Alliance for Open Media (AOMedia). Building on the foundation of AV1, AV2 is engineered to provide superior compression efficiency, enabling high-quality video delivery at significantly lower bitrates. It is optimized for the evolving demands of streaming, broadcasting, and real-time video conferencing. 
- from https://av2.aomedia.org/
jzebedee··on Big Data on the Cheapest MacBook
Mins here being short for minutes, not minis.
jzebedee··on Bus stop balancing is fast, cheap, and effective
This is highly location dependent with how unequal the US transit infrastructure is. It'd help to add your city for anecdotes to mean much.
jzebedee··on Irish man with valid US work permit held in ICE detention for five months
If it surprises you, then you haven't paid attention to the blatantly unconstitutional actions of DHS in this administration. The purpose is terror and filling deportation quotas, not enforcing immigration law.
jzebedee··on Deep dive into Turso, the “SQLite rewrite in Rust”
It's covered in the article. The full SQLite test suite isn't open source, so you (the third party) don't have the same confidence in your modifications as the SQLite team does.
jzebedee··on Allow me to introduce, the Citroen C15
> Right now french people are obsessed with ecology and egalitarianism. Those who don't are not well seen in society, or left the country already.

While we're barreling toward climate catastrophe? That's not the criticism you think it is.

jzebedee··on Brave overhauled its Rust adblock engine with FlatBuffers, cutting memory 75%
That's amazing. I just assumed the ad lists were volunteer maintained like a wiki. I'll be sure to use Easylist now that I know they're also advocating for users while punishing bad advertisers.
jzebedee··on OpenGitOps
Interesting. I've used Pulumi but this is the first I've heard of Kusion.

From a quick look, it still requires all of the resource specification to be present in the AppConfiguration, and it's written in their own DSL called KCL. Is there more to the use case that I'm missing?

It seems like if I'm already specifying the details of the entire workload, I'd either use Terraform, where I probably already know the DSL, or Pulumi, where I could skip the DSLs entirely.

jzebedee··on Clair Obscur having its Indie Game Game Of The Year award stripped due to AI use
"Mostly" is doing some heavy lifting there. Even if you don't see a problem with reams of copyleft code being ingested, you're not seeing the connection? Trusting the companies that happily pirated as many books as they could pull from Anna's Archive and as much art as they could slurp from DeviantArt, pixiv, and imageboards? The GP had the insight that this doesn't get called out when it's hidden, but that's the whole point. Laundering of other people's work at such a scale that it feels inevitable or impossible to stop is the tacit goal of the AI industry. We don't need to trip over ourselves glorifying the 'business model' of rampant illegality in the name of monopoly before regulations can catch up.
jzebedee··on .NET MAUI is coming to Linux and the browser
> As far as I can tell, Windows 11 doesn't even have a toolkit with platform UI elements.

They do, it's called WinUI 3. It's barely used for all of the aforementioned.

jzebedee··on Noah, the Flood, Advertisements
Actually, that doesn't clear it up for me at all. The age of useless invasive advertising is over because, why?
jzebedee··on Knowledge Is Worth Your Time
It's an article that unintentionally reinforces the position it criticizes. Yes, knowledge is worth your time. But the author continuously conflates it with academia, before listing many, many reasons why that model is failing.
jzebedee··on What if tariffs?
Immigrants, residents, citizens, protestors, journalists...
jzebedee··on Novo Nordisk's Canadian Mistake
> Prof. Michael Hoffman from Toronto put me on to the Canadian Patent Database, where you can find that Novo did file a patent there for semaglutide. . .but the last time they paid the annual maintenance fee on it was 2018!

> You can even find a letter where their lawyers send a refund request for the 2017 maintenance fee ($250) because Novo apparently wanted some more time to see if they wanted to pay it.

> On the same date in 2019, the office sent a letter saying that “The fee payable to maintain the rights accorded by the above patent was not received by the prescribed due date. . .”

> By that time it was $450 with the late fee added, but that was apparently too much for Novo. They had a one year grace period to make it up, and apparently never did, so their patent lapsed in Canada. And as the Canadian authorities remind them, “Once a patent has lapsed it cannot be revived”.

Impressive failure for "the second-largest semaglutide market in the world."

jzebedee··on I almost got hacked by a 'job interview'
The article never really addresses if it was a totally fake setup or a real crypto company scamming interviewees. Does "Symfa" exist? Does the "Chief Blockchain Officer"?
jzebedee··on You won't believe what degrading practice the pope just condemned
Saving you the clickbait, since the title is in on the joke:

> The pope has condemned clickbait as a “degrading” part of journalism, at a private audience with global newswires.

> “Communication must be freed from the misguided thinking that corrupts it, from unfair competition and the degrading practice of so-called clickbait,” he said on Thursday.

jzebedee··on NeuTTS Air – On-device TTS model by Neuphonic
It's good to see more open models approaching on-device inference. We need more stops on the fast<>good quality spectrum than just piper and VITS.

My first impressions of it:

* The cloning was decent at imitating voices, but the prosody is quite bad

* There's noticeable crackling in the GGUF models and the quality drop from base model to Q8 was significant

* Q4 models are apparently bugged on platforms outside of Linux

* The speed is nowhere near realtime even using all the latency reductions (Q4 backbone, pre-encoding, ONNX codec decoder), it was still lucky to hit a real-time factor of 4x

> Optimised for on-device deployment - provided in GGML format, ready to run on phones, laptops, or even Raspberry Pis

All of this testing was on a beefy 24 core AMD with 64GiB of RAM. There's no way this model would even come close to realtime on any Pi I know.

jzebedee··on Starbucks: Location closures and elimination of roles
Interestingly, this was the marketing behind Koala Kare's rise to a monopoly over the bathroom baby changing station:

> Business owners just couldn’t see the use case for changing stations. Hilger says he was trying to sell the device to “men in their 50s who never changed a diaper in their life.”

> A new brochure — this one depicting a woman on her hands and knees changing her baby’s diaper on a disgusting bathroom floor– did the trick. “We had to make them feel guilty,” Hilger says.

https://fortune.com/2014/08/13/koala-baby-changing-station/

Page 1 of 5Next →