HNHacker News
TopNewBestAskShowJobs

klabb3

8,765 karma · joined October 12, 2019

Working on https://payload.app/

contact at payload dot app

submissionscomments
klabb3··on Google plans to invest up to $40B in Anthropic
> run afoul of antitrust laws

Now, that’s a name I haven’t heard in a long time.

klabb3··on How Complex is my Code?
GP here. I agree, git is the best example in the spirit of my comment.

Maybe the reason it wasn’t pointed out is precisely because it’s so obviously good that it’s no longer a conscious choice, and then we forget life before it. Even those of us who experienced it.

klabb3··on How Complex is my Code?
From 20y experience and CS degree, I see software engineering as a constant struggle against accidental complexity. Like quicksand, every movement you make will pull you deeper, even swimming in the right direction. And like entropy, it governs all things (there are no subfields that are free of complexity). It even seems impossible to give a meaningful, useful definition, perhaps by necessity. All is dark.

But now and then, something beautiful happens. Something that used to be dreadful, becomes "solved". Not in the mathematical strict sense, but some abstraction or some tool eliminates an entire class of issues, and once you know it you can barely imagine living without it. That's why I keep coming back to it, I think.

As a species, I think we are in the infancy stages of software engineering, and perhaps CS as well. There's still lots of opportunity to find better abstractions, big & small.

klabb3··on France Launches Government Linux Desktop Plan as Windows Exit Begins
Continuity with what exactly? IME Windows has been a mish mash of GUI frameworks to the point you teleport through time whenever you click around in control panel, since.. the XP era? I mean, I don’t disagree with you in principle, but the timing is like saying horse carriages aren’t keeping up with cars because they’re designed by car users. The Satya era can be good or bad depending on who you ask, but that’s for Microsoft as a company – windows as a product has had no coherence for a decade+, and that’s generous.
klabb3··on France to ditch Windows for Linux to reduce reliance on US tech
1. total abandonment of desktop as a platform, and the massive hurdles to distribute desktop software

2. move to Cloud and use electron wrappers because not even MS can bother making native apps on their shitty platform

3. Make Windows so shit that even hardcore power users can’t debloat it.

The moat of Windows is gone. Games, office work, all the classic arguments, have basically vanished in the last 5-10 years. The only surprise is why more people don’t get in the life rafts, when the ship is listing at 45 degrees. Is it because there’s still an army of workers and institutional inertia trained in Active Directory?

klabb3··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
GP here. I agree in spirit but there’s a technical difference between ”approved to distribute” and ”approved in an App Store”. Specifically, you can distribute software for Windows and Mac outside of their stores, but you still need to have a code cert which means you’re under their mercy. This is the model Google wanted to transition Android to recently: keeping the APK path (no App Store) but gatekeep developers through signature enforcement etc.
klabb3··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
You are not wrong that regulation is desperately needed, and that EU is doing good things. However, even the EU which are doing the right thing on an anti-trust pro-competition basis, they fundamentally succumb to the same misconception – that middlemen are necessary at all. The EU doesn’t care about the App Store model, they care about the App Store monopoly. They are right about that, but the solution isn’t alternative app stores - it’s much simpler: the solution is NO App Store.

More specifically, it used to be feasible to distribute software between me (the developer) and my customers (the users) without a mandatory gate keeper that looks at me and decides whether I’m worthy, am from the right country, have good intentions etc. This is currently necessary on all desktop and mobile platforms except Linux. There is exactly 1 gatekeeper per platform (the platform owner who controls your device), except windows, which effectively have like 3-4 CAs that’s shrinking every year due to mergers and private equity ownership.

Software curation and reputation systems can be good, either with whitelists (say steam) or blacklists (say antivirus). I can see some use cases for it, but they should be within user control. What we have now is worse than a fearmongering Stallman rant. It’s incredibly bad, both pragmatically and philosophically.

klabb3··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
It's much worse than you think. Press coverage -> manual intervention is at best a bandaid covering up a major wound in a flaw that happens with independent software distribution.

The old model where the user decides which software or apps to run on their machine, is basically already replaced by a whitelist system that is managed by companies who have no interest or obligation to approve developers. Factors like ”being an individual”, an open source developer or god forbid reside outside the USA, you rely on a combination of L1 support doom loops, unjustifiable high recurring prices, kafkaesque and changing requirements, internal inconsistencies. Windows is the worst, but all platforms (except Linux) suffer from this and you can and will get hurt, delayed, and gaslit. If you haven’t, it’s just a matter of time.

I have been blocked for 6 months now with Digicert code cert renewal, for my app Payload, which will never get any media attention. The app doesn’t matter though, the approval process is per-entity (usually, a company). The point is that nobody gives a shit, because they have a monopoly/cartel and they start the validation process after they take your money.

If you are not an app publisher, the best way I can describe it is the ”pre-let’s encrypt” era of SSL certs, but more expensive, strict and ambiguous. In fact, I’ve never gone through any worse approval process in my life, and that includes applying for residency in two countries, business licenses, manual tax filings etc.

klabb3··on German implementation of eIDAS will require an Apple/Google account to function
> This is exactly what the ID cards I'm talking about are. You tap them to the phone or a desktop reader and it works. You just invented something that already exists.

Great, thanks for clarifying. Please be mindful not everyone are domain experts and we’re all (hopefully) trying to learn.

Now, do you know whether ID cards will work with the proposed German system for e2e online ID verification? My understanding from comments was that it doesn’t, and providers are free to require the app-based version.

In Sweden we have an app-based system now (BankID), and afaik there are no alternatives that work reliably. You have to buy an American phone every few years to participate in basic societal functions. However, the government is ”looking into” decoupling digital identity from (1) banks and (2) mandatory hardware manufacturers (iOS/Android).

klabb3··on The threat is comfortable drift toward not understanding what you're doing
> How is that Bob's problem?

It isn’t. Bob has a different problem: that there are millions of Bobs with access to the same tools, meaning the value of Bobs labor is commodity priced. That may be good for some Bobs and bad for others.

klabb3··on German implementation of eIDAS will require an Apple/Google account to function
Why not just have the Secure Enclave in the ID card and use NFC to communicate with it? Think about it, you literally have dozens of computers between you and the provider. Routers, middleboxes, load balancers, servers etc, all insecure or untrusted, but somehow my device needs to have their special rootkit and hardware DRM. A separate device that can be provisioned with ID is the least to ask. If the government doesn’t trust me with my device, fine, but then return the favor - I don’t trust them either. Both governments and corporations that are gonna use this have long track records of invasive, often illegal spying - whereas my track record is letting people mind their own business.
klabb3··on Eight years of wanting, three months of building with AI
Rust is a language for fast prototyping? That’s the one thing Rust is absolutely terrible at imo, and I really like the production/quality/safety aspects of Rust.
klabb3··on The threat is comfortable drift toward not understanding what you're doing
> The problem arrises when Bob encounters a problem too complex or unique for agents to solve.

It’s actually worse than that: the AI will not stop and say ”too complex, try in a month with the next SOTA model”. Rather, it will give Bob a plausible looking solution that Bob cannot identify as right or wrong. If Bob is working on an instant feedback problem, it’s ok: he can flag it, try again, ask for help. But if the error can’t be detected immediately, it can come back with a vengeance in a year. Perhaps Bob has already gotten promoted by then, and Bobs replacement gets to deal with it. In either case, Bob cannot be trusted any more than the LLM itself.

klabb3··on The threat is comfortable drift toward not understanding what you're doing
> So if Bob can do things with agents, he can do things.

Yes, but how does he know if it worked? If you have instant feedback, you can use LLMs and correct when things blow up. In fact, you can often try all options and see which works, which makes it ”easy” in terms of knowledge work. If you have delayed feedback, costly iterations, or multiple variables changing underneath you at all times, understanding is the only way.

That’s why building features and fixing bugs is easy, and system level technical decision making is hard. One has instant feedback, the other can take years. You could make the ”soon” argument, but even with better models, they’re still subject to training data, which is minimal for year+ delayed feedback and multivariate problems.

klabb3··on GitHub appears to be struggling with measly three nines availability
> Copilot [has] seen a 96.47% uptime

That’s… one 9 of reliability. You could argue the title understates the problem.

> You don't need every single service to be online in order to use GitHub.

Well that’s how they want you to use it, so it’s an epic failure in their intended use story. Another way to put this is ”if you use more GitHub features, your overall reliability goes down significantly and unpredictably”.

Look, I have never been obsessed with nines for most types of services. But the cloud service providers certainly were using it as major selling/bragging points until it got boring and old because of LLMs. Same with security. And GitHub is so upstream that downstream effects can propagate and cascade quite seriously.

klabb3··on 2% of ICML papers desk rejected because the authors used LLM in their reviews
LLMs were used to produce the review, not understand the paper.
klabb3··on Nobody gets promoted for simplicity
> And if this simpler solution was actually better for the company, it should be highlighted[…]

Simpler than what? The reason this phenomenon is so pervasive in the first place is that people can’t know the alternatives. To a bystander (ie managers), a complex solution is proof of a complex problem. And a simple solution, well anyone could have done that! Right?

If we want to reward simplicity we have to switch reference frame from output (the solution), to input (the problem).

klabb3··on MacBook Pro with M5 Pro and M5 Max
Contrary to HN popular belief, there are neither incentives nor benefits to building native ui apps, for neither consumer nor professional apps. The exception is apps that only make sense on a single platform, such as window management and other deep integration. On iOS/macos you have a segment of indie/smaller apps that capture a niche market of powerusers for things like productivity apps. But the point is it makes no sense for anything from Slack, VSCode, Maya, DaVinci Resolve, and so on, to build native UIs. Even if they wanted to build and maintained 3 versions, advanced features aren’t always available in these frameworks. In the case of Windows, even MS has given up on their own tech, and have opted to launch webview based apps. Apple is slightly more principled.
klabb3··on iPhone 17e
What do you mean? With every launch they change the orientation of the camera array so you can tell who has the new model, and thus, is a better person.
klabb3··on Sub-$200 Lidar could reshuffle auto sensor economics
> Musk miscalculated on 1) cost reduction in LIDAR and 2) how incredible the human brain is compared to computers.

And, less excusable, ignorant of how incredible human eyes are compared to small sensor cameras. In particular high DR in low light, with fast motion. Every photographer knows this.

klabb3··on Keep Android Open
> I should have the right to […] use a "free" store that is not under control of Google

Yes, but we also need to stop thinking like we’re trying to please the ghost of Steve Jobs. There is no ”store”. There are installers. You distribute them how you see fit, probably through the web.

These ”alternative stores” angle is a controlled dissent corporate plan B, much like how recycling was propped up by the fossil fuel industry.

klabb3··on 2026 will be my year of the Linux desktop
> It feels like this has been completely lost, even on platforms like mac where consistency used to be important.

There are two kinds of consistency: across apps within a platform and across platforms within the same app. As someone who uses multiple platforms regularly, I have forever been annoyed when eg keyboard shortcuts change when I switch to a different computer, especially when I’m using the same app.

Apps like Discord, Spotify and VSCode are consistently the most pleasurable to use because they are largely the same.

For a unique piece of hardware like the old iPod, it made more sense to do your special custom UX as a unified product. But we’re talking about general purpose computers. The ”platform” shouldn’t be special imo, it should simply be predictable and stay out of the way. They mostly provide the same thing, like copy paste and maximizing a window, yet have different controls. This differentiation adds no value, at least to me.

klabb3··on Backing up Spotify
> Maybe I’m misunderstanding something here

Nope, you are just more informed than me, thanks for the correction. I was extrapolating based on general trends in all forms of media (like games and movies too). It would be interesting to know what ratio of music can be acquired DRM free today.

klabb3··on Backing up Spotify
The people I know who go through the trouble of pirating and downloading vast libraries of music are all musicians themselves, or at the very least total music nerds. They don’t want to lose access to their stuff, plus if they ever need to import audio into a DAW, DRM is a no-go. They are the same people who spend large amounts of money on vinyls, and support smaller independent artists through concerts, merch and (back in the day) CDs.

It used to be more mixed, but today, piracy is often the only option to ”own” any media at all.

klabb3··on Airbus to migrate critical apps to a sovereign Euro cloud
> it is prudent to not depend on those who have a fundamentally different and incompatible world view.

Like Saudi Arabia and formerly the Saddam regime (when he sold oil in USD)?

While compatible world view is used as an argument against diplomatic and economic relations, in reality it’s just a bonus, not a requirement. What’s important is plain old cost benefit and national interests. The US is still a better ally for EU than China, but it’s gotten drastically worse fast. And while China has territorial ambitions, they are nowhere near EU. The US is the good old status quo ”devil you know”, but it’s abundantly evident now that nobody really knew them, including many of their own political elites domestically.

On diplomacy timescales, ignoring China because of human rights concerns is exceptionally short-sighted, both for EU if US continues current path, and for global stability in case conflicts escalate between China and US. There is no choice that guarantees EU will have a strong ”human rights” ally in 10 years.

klabb3··on Wall Street ruined the Roomba and then blamed Lina Khan
> Eufy would be better if they'd fix their roller brush design and didn't lean so heavily into making you buy their replacement components. It's designed around buying Eufy refills.

FWIW there are 3p replacements that are super cheap for roller brush, side brush, filters, bags etc. As for detergent for the mop, I first thought I was smart to buy 3p detergents meant for robot vacuums because they were cheaper. Turns out they clogged the tubes which was tricky to fix, but I did it. After that I bought Eufys original, and lo and behold, it was much more concentrated, which meant it was actually significantly cheaper than the 3p ones (and smells better).

Navigation is spot on. Obstacle avoidance sucks though (to be fair my floor is patterned stone - hard to see anything) and cat toys sometimes get stuck in the roller brush.

Btw what’s the alternative to roller brush?

klabb3··on Is Mozilla trying hard to kill itself?
> Quite the opposite is true (I believe) since a ton of users would leave Firefox for alternatives.

Yes but keep in mind that’s not an individual problem that is solved by switching browsers. If a browser engine dies, the walls get closer and the room smaller. With only Chromium and WebKit left, we may soon have a corporate owned browsers pulling in whatever direction Google and Apple wants. I can think of many things that are good for them but bad for us. For instance, ”Web Integrity” and other DRM.

klabb3··on Problems with D-Bus on the Linux desktop
100% agree, I should have phrased it less black and white. In theory a spec is all you need but in practice solid reference implementations can iron out ambiguity plus it can uncover issues in the spec.
klabb3··on Problems with D-Bus on the Linux desktop
We need a protocol, not an implementation, so language is a minor detail nobody should need to care about. It should be easy to use implement by lib developers in various languages, and easy to use for app developers. It should be designed to work on all OSs, even if not all platforms will support it yet.
klabb3··on Why Twilio Segment moved from microservices back to a monolith
> Then you have a schema layer that could change in backwards compatible ways. Every new addition is optional.

Also known as the rest of the fucking owl. I am entirely in factual agreement with you, but the number of people who are even aware they maintain an API surface with backwards compatibility as a goal, let alone can actually do it well, are tiny in practice. Especially for internal services, where nobody will even notice violations until it’s urgent, and at such a time, your definitions won’t save you from blame. Maybe it should, though. The best way to stop a bad idea is to follow it rigorously and see where it leads.

I’m very much a skeptic of microservices, because of this added responsibility. Only when the cost of that extra maintenance is outweighed by overwhelming benefits elsewhere, would I consider it. For the same reason I wouldn’t want a toilet with a seatbelt.

← PreviousPage 2 of 34Next →