HNHacker News
TopNewBestAskShowJobs

kg

15,892 karma · joined June 7, 2009

Developer on Unity, .NET, WebAssembly, JSIL, Grim Fandango Remastered (PC/PS4/Vita), Escape Goat 2 (PC/PS4), Sully: A Serious RPG (Vita), Oh Deer (Vita), Mozilla Firefox, Escape Goat (Web), Soulcaster (Web), Guild Wars 2, IMVU, Guild Wars: Eye of the North, Guild Wars: Nightfall, Guild Wars: Factions, and others
submissionscomments
kg··on Building an AI-native engineering org
Software robustness, at least in terms of "has the app crashed on any client machines today", is achievable. It's just expensive enough to achieve that most people (rightly or not) don't prioritize it, and the more moving parts (like third party libraries or language runtimes) your application has the harder it is to achieve. Maybe AI will lower the cost of achieving that.

When I worked on Guild Wars every server or user crash went to a shared inbox and was bucketed so we could identify and act on new crashes. IIRC we maintained very, very low production crash rates and could prove that many of the crashes were due to hardware faults.

Similarly, Mozilla tries to analyze and act on every crash report they get in the field. If a webpage visited by even a small % of the customer base was causing crashes, the team worked to try and fix the crash to deliver stability. If it was a high-traffic webpage it got treated as a high-priority task - I remember Farmville breaking was basically a 3-alarm fire back when it was extremely popular.

"No bugs at all" is an even higher bar, but it probably is possible for simpler applications with the use of stuff like theorem provers. I'd love to see someone try it in production but I think the return on investment for that is probably super super negative.

kg··on Building an AI-native engineering org
This from that tweet stood out to me: "In general, we've seen that OpenAI's models game their own checks"

In the past when working on agentic stuff I've observed models gaming checks aggressively, to the point that when we were validating log files to see what the agent had done, the agent responded by editing the log files to pass validation. I can only imagine how bad that kind of behavior is at scale, and it sounds like they ran into it.

kg··on Breaking the open web won't stop the bad bots
What's the alternative? Invisible algorithmic fuzzy recognition on the server side that just randomly bans you if you look like a bad bot, with no recourse? At least if you solve a captcha and dismiss the cookie banner you can access the website.
kg··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
> No, I don't think network booting is even all that common outside of extremely niche scenarios.

It's incredibly common though? I've run across it and I work on games and client software, not server stuff.

kg··on PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch
You'd still need a spec for this because of cross-language considerations, but that doesn't make it a bad idea.

i.e. if an app is written in javascript and running on mac there are potentially 4 different languages all running inside the executable that need to cooperate to handle the BOM signal and report their deps - C/ObjC, Swift, C++ and JS. Presumably you'd want to report not only the native libraries being used in the process but also things like npm packages.

kg··on AI and the Enclosure of the Scientific Commons
> When you can equally reasonably make the opposite argument - that AI is going to open up scientific exploration and contribution to a wider range of participants than ever before

Is typing a prompt into ChatGPT "science"? It's an experiment, I guess, to find out whether you get a useful response out of it, and your hypothesis is that the model is able to answer your question correctly? How do you falsify that if you don't have the academic foundations to verify its answer?

kg··on PHP 8.2.35
I'm pretty sure this class of problem would exist in GC'd environments too unless they're configured to abort on OOM, in which case you'd still be dealing with denial-of-service.

In some environments OOM is a trappable exception, so it's possible that incorrectly authored code would trap the OOM and 'recover' with partially initialized data sitting on the heap. Hopefully it's a memory-safe language so that partially initialized data isn't RCE...

kg··on Tsrs: A Port of TypeScript to Rust
Ignored is a little unfair to the Wasm committee, the Wasm GC is constrained by what is possible to ship in existing Wasm runtimes and the stuff needed by many languages is way beyond what those existing runtimes have available to them.

I think it made sense for them to compromise, at least on the initial version of Wasm GC, to get it out the door. I say this as someone who wants the features that got left out, like interior references :)

kg··on NY announces game ownership bill requiring ownership rather than licensing
They're free, so I don't see how they're relevant. Do you mean the in-app purchases?
kg··on JDK 28
Doesn't Java have an AOT solution too? Is it not ready for prime time?
kg··on Steam Client is now faster than Epic's new vibe coded launcher
Most likely nobody complained and startup time isn't an important metric for them. The typical user may have Steam launch at startup or launch it once after booting their PC and then leave it running for days or weeks.
kg··on The Double Headed Stack Allocator
GC generally only results in the occasional missed frame, it doesn't negatively impact overall frametimes in a meaningful way if it's implemented correctly. GC malloc() and free() are both fast.

I think the average player would not appreciate hourly crashes, especially in games without aggressive autosave - that potentially means having to replay 10+ minutes worth of gameplay on a regular basis because your timing was bad, when you consider how a typical game is built. You could compensate for this in some game types I guess, like in a competitive FPS you'd restart the client software between matches and hope a match never lasts long enough to crash. But that's no substitute for real robustness, IMO.

kg··on Who Is Planting Backdoors in Ledger Crypto Wallets?
Though it's not what happened in this case, you could tamper with a crypto wallet to make it emulate a USB keyboard and once connected, send a series of keystrokes to download and run an exploit.
kg··on 500B tokens later: Letting AI agents decompile a first-person shooter
For anything with recorded replays or multiplayer you need to preserve known and unknown bugs for compatibility reasons, not just for cheating.
kg··on Everyone's Packing Up
I know a considerable number of people who abandoned Twitter for either Mastodon or Bluesky and haven't gone back. It probably depends on what circles you run in. There are some people I know who keep Twitter accounts because it's used for professional networking, for example, but they're in specific fields.
kg··on SpaceX's Starship launching to orbit for first time ever today
Is deploying starlink satellites the end goal of Starship?
kg··on SpaceX's Starship launching to orbit for first time ever today
It sold so well that Musk had to have SpaceX buy up millions and millions worth of unsold inventory.
kg··on GitHub has not removed malicious imitation software after 3 weeks
In the future just issue a DMCA takedown right away for cases like this, IMO.
kg··on US Revokes Limits on Power Plants' Climate Pollution
Some speculative answers based on what I know:

1. A lot of single family dwellings are occupied by renters. In this scenario, the renter has no ability to install rooftop solar, and the owner has no incentive to install rooftop solar because the renter is paying the energy bills. (The same goes for things like installing high-efficiency heat pumps etc.)

2. HOA regulations can block things like rooftop solar depending on where you live.

3. The up-front investment involved in rooftop solar can be prohibitive for many people. Things like tax incentives can help but we've been getting rid of those under the current administration, and tax incentives only go so far if your tax return is 6+ months away.

kg··on Nipple tattooist 'frustrated' by online censorship
Given how poorly companies like Meta police content in ads, that might actually work.
kg··on There's no point at which turning your brain off will work
I assume you're not saying it is but I just wanna call out that zoning out behind the wheel isn't a good thing. Drivers should be attentive at all times regardless of whether the route is familiar. So maybe something is going wrong there, even if it's not trauma?
kg··on There's no point at which turning your brain off will work
Is being compliance ablative armor uplifting, fulfilling work? Is there any way in which your personal competence and effort impacts whether the AI screws up or not? Do you have any way to build job security as ablative armor?

That sounds miserable.

kg··on There's no point at which turning your brain off will work
If screwing up gets me killed I want the person doing that job to be paid well and I want them to be held up to a high performance standard. I don't see how cutting pay for conductors is going to make anyone's lives better.

Or if we replace that well-compensated train conductor with automation I sure hope it's high quality stuff and not lowest-bidder slop.

kg··on When the fractional part of a float fixes your shader
The classic HLSL compiler is infamous for being full of bugs (and slow, for that matter) so I wasn't surprised to see it come up here...

Fantastic seeing the author lay out all the steps involved in getting a renderdoc capture of a browser and what's involved in debugging shader issues in a webpage.

It's interesting that the issue only manifested on the geforce 40xx if it was an fxc issue though... wonder if it's fxc combined with a driver issue and not just one or the other?

kg··on Microsoft exec called AI scraping 'the largest theft of labor in human history'
You're ignoring that there are options other than theft. Heard of buying things?
kg··on Performance Improvements in .NET 11
AoT uses the same codegen (mostly) as the JIT so if you see a JIT improvement it's possible NativeAOT/ilc picked up that improvement too.

Unless it's a runtime-only optimization, like guarded devirtualization... there's no straightforward way for an AOT compiler to do that without profiling data.

kg··on Performance Improvements in .NET 11
You can always just not use OOP. C#'s tooling for functional programming and C-style programming is really good, thanks to stuff like statics on interfaces or spans.
kg··on Vectorized and performance-portable Quicksort (2022)
(2022)

If you're curious why you would want a vectorized way to sort lists of numbers, one use case is building histograms - it's much easier to build a histogram if you've sorted all your samples first

kg··on An update on Wayback Machine access
Does xcancel scrape twitter? Isn't it more like a proxy for specific user requests to view tweets?
kg··on Iranian banks' SSL certificates are being revoked due to OFAC sanctions
I think you picked the wrong analogy. The US threatened unjustifiable acts targeting civilian population & infrastructure, and to a degree has followed through - for example bombing water facilities: https://www.yahoo.com/news/politics/articles/us-bombs-iran-w...
Page 1 of 11Next →