HNHacker News
TopNewBestAskShowJobs

lukax

943 karma · joined January 11, 2012

submissionscomments
lukax··on Xiaomi MiMo-v2.5 Series API Permanent Price Reduction Up to 99%
Huawei Ascend AI Accellerators. DeepSeek V4 model architecture was optimized for Chinese hardware.
lukax··on What color is your function? (2015)
That's just not true. Let's say you have a form validation library with a public api that supports custom validators Validate(name string, value string) bool. Then you decide that your validator now needs to make an HTTP request. This request needs context so that tracing is propagated and needs to return (bool, error) so that error is propagated up instead of silently ignoring it or logging it and returning false. This is coloring. You can use context.Background the same way you can use blocking in other languages. It just doesn't feel right and it breaks things.
lukax··on Antigravity 2.0 Tops the OpenSCAD Architectural 3D LLM Benchmark
I wonder what would happen if they used Kimi 2.5 directly instead of Cursor Composer 2.5. Composer is a fine tune of Kimi. Probably they didn't want to test "Chinese" models.
lukax··on GitHub is having issues now
It looks like migration to Azure is not going very well

https://news.ycombinator.com/item?id=45517173

lukax··on GitHub is having issues now
They are migrating from their own datacenters to Azure
lukax··on It's OK to compare floating-points for equality
See the implementation of Python's math.isclose

https://github.com/python/cpython/blob/d61fcf834d197f0113a6a...

lukax··on It's OK to compare floating-points for equality
You generally want both relative and absolute tolerances. Relative handles scale, absolute handles values near zero (raw EPSILON isn’t a universal threshold per IEEE 754).

The usual pattern is abs(a - b) <= max(rel_tol * max(abs(a), abs(b)), abs_tol) to avoid both large-value and near-zero pitfalls.

lukax··on Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them
Do you really need to roll your own NIO HTTP server? You could just use Jetty with virtual threads (still uses NIO under the hood though) and enjoy the synchronous code style (same as Go)
lukax··on Someone bought 30 WordPress plugins and planted a backdoor in all of them
Rust wasm ecosystem also needs a lot of crates to do anything useful, a lot of them unmaintained.
lukax··on Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket
Combine that with CVE-2025-24010 and any website was able to read any file on developers' computers.

https://github.com/advisories/GHSA-vg6x-rcgg-rjx6

lukax··on WSL Manager
Looks nice but still a bit sad that Flutter is used instead of something native given that they don't need the app to be cross-platform.

Well, even Microsoft uses React Native for a lot of Windows-only apps.

lukax··on Show HN: I built a sub-500ms latency voice agent from scratch
Sorry, I commented too soon. Did you also try Soniox? Why did you decide to use Deepgram's Flux (English only)?
lukax··on Show HN: I built a sub-500ms latency voice agent from scratch
Or you could use Soniox Real-time (supports 60 languages) which natively supports endpoint detection - the model is trained to figure out when a user's turn ended. This always works better than VAD.

https://soniox.com/docs/stt/rt/endpoint-detection

Soniox also wins the independent benchmarks done by Daily, the company behind Pipecat.

https://www.daily.co/blog/benchmarking-stt-for-voice-agents/

You can try a demo on the home page:

https://soniox.com/

Disclaimer: I used to work for Soniox

Edit: I commented too soon. I only saw VAD and immediately thought of Soniox which was the first service to implement real time endpoint detection last year.

lukax··on Web Components: The Framework-Free Renaissance
Wow, XSS just waiting to happen.

  <h3>${this.getAttribute('title')}</h3>
lukax··on Audio is the one area small labs are winning
Never any mention of Soniox and they are on the Pareto frontier[1]

https://www.daily.co/blog/benchmarking-stt-for-voice-agents/

lukax··on Soniox: Real-time transcription in 60 languages
Also see how it compares to other providers:

https://soniox.com/compare

lukax··on Nano-vLLM: How a vLLM-style inference engine works
Not really in the PagedAttention kernels. Paged attention was integrated into FlashAttention so that FlashAttention kernels can be used both for prefill and decoding with paged KV. The only paged attention specific kernels are for copying KV blocks (device to device, device to host and host to device). At least for FA2 and FA3, vLLM maintained a fork of FA with paged attention patches.
lukax··on Another user's pCloud setup is visible in my pcloud drive
pCloud has been leaking files between users

https://www.reddit.com/r/pcloud/comments/1qhpr4k/vault_got_a...

https://www.reddit.com/r/pcloud/comments/1qhibbe/pcloud_sudd...

https://www.reddit.com/r/pcloud/comments/1qhxuco/followup_to...

https://www.reddit.com/r/pcloud/comments/1qhibbe/comment/o18...

lukax··on Vibecoding #2
Maybe AWS ParallelCluster which is a managed SLURM on AWS.
lukax··on CVEs affecting the Svelte ecosystem
It's not that simple to safely parse HTTP request form. Just look at Go security releases related to form parsing (a new fix released just today).

https://groups.google.com/g/golang-announce/search?q=form

5 fixes in 2 years related to HTTP form (url-encoded and multipart).

- Go 1.20.1 / 1.19.6: Multipart form parsing could consume excessive memory and disk (unbounded memory accounting and unlimited temp files)

- Go 1.20.3 / 1.19.8: Multipart form parsing could cause CPU and memory DoS due to undercounted memory usage and excessive allocations

- Go 1.20.3 / 1.19.8: HTTP and MIME header parsing could allocate far more memory than required from small inputs

- Go 1.22.1 / 1.21.8: Request.ParseMultipartForm did not properly limit memory usage when reading very long form lines, enabling memory exhaustion.

- Go 1.25.6 / 1.24.12: Request.ParseForm (URL-encoded forms) could allocate excessive memory when given very large numbers of key-value pairs.

Probably every HTTP server implementation in every language has similar vulnerabilities. And these are logic errors, not even memory safety bugs.

lukax··on Locating a Photo of a Vehicle in 30 Seconds with GeoSpy
You can buy a totaled car for cheap and use its VIN.
lukax··on VSCode rebrands as "The open source AI code editor"
I guess there's a lot of pressure from Cursor and Google's Antigravity. Also with Zed you can bring your own API key which VS Code didn't support for a long time.
lukax··on I program on the subway
17 years ago I went to a summer vacation with my family (still a teenager). That meant 10 days without any internet connectivity. I just got my first laptop and I was allowed to take it with me. I was reverse engineering MSN Messenger's user to user and profile picture exchange protocol from TCP dumps. MSN Messenger did not use any encryption. Before I went to the vacation I recorded a bunch of sessions with Wireshark (maybe it was still Ethereal back then). Then for 10 days I was just trying to figure out from the dumps how the binary protocol worked and was writing the code without any way to test it. When I came back I just had to fix some minor bugs and it worked. Fun times.
lukax··on Build Android apps using Rust and Iced
I've done business logic sharing where the engine was written in Rust, WASM for web with React for UI, uniffi-rs for Android and iOS with Kotlin Compose for Android and SwiftUI for iOS, Tauri for desktop.

There were no good examples for how to do this but once it was set up it worked extremely well.

It uses tokio for Android/iOS/desktop and even embeds a web server for fake API for end to end testing (even on mobile)

https://github.com/koofr/vault

lukax··on A2UI: An Open Spec for Agent-Generated User Interfaces (Google)
They made this transport agnostic so it's compatible with A2A and AG-UI.
lukax··on LLM Year in Review
Google is doing that with A2UI. LLM will be able to decide how to present info to the user.
lukax··on GPT-5.2-Codex
Will it also remove the whole D:\?
lukax··on Ask HN: How can I get better at using AI for programming?
Spokenly on macOS with Soniox model.
lukax··on Structured outputs on the Claude Developer Platform
In OpenAI and a lot of open source inference engines this is done using llguidance.

https://github.com/guidance-ai/llguidance

Llguidance implements constrained decoding. It means that for each output token sequence you know which fixed set of tokens are allowed for decoding the next token. You prepare token masks so that in the decoding step you limit which tokens can be sampled.

So if you expect a JSON object the first token can only be whitespace or token '{'. This can be more complex because the tokenizers usually allow byte pair encoding which means they can represent any UTF-8 sequence. So if your current tokens are '{"enabled": ' and your output JSON schema requires 'enabled' field to be a boolean, the allowed tokens mask can only contain whitespace tokens, tokens 'true', 'false', 't' UTF-8 BPE token or 'f' UTF-8 BPE token ('true' and 'false' are usually a single token because they are so common)

JSON schema must first be converted into a grammar then into token masks. This takes some time to be computed and takes quite a lot of space (you need to precompute token masks) so this is usually cached for performance.

lukax··on When Tesla's FSD works well, it gets credit. When it doesn't, you get blamed
Kind of similar to Agentic coding. The code works? Yay, well done, AI. It't doesn't? You didn't prompt it correctly.
← PreviousPage 2 of 5Next →