HNHacker News
TopNewBestAskShowJobs

merelydev

181 karma · joined October 9, 2020

submissionscomments
merelydev··on Oracle on the hook to pay data centre investors even if site has no electricity
How much to get your own domain like that?
merelydev··on Security through obscurity is dead, and AI delivered the fatal blow
This is why I said especially for server side code which does not ship binaries.
merelydev··on Security through obscurity is dead, and AI delivered the fatal blow
That may be true for popular projects with allot of contributers, but for small projects, being closed source in the age of LLMs is not a bad idea especially for server side code, it can be more secure simply because the bots don't have access to your code and can't do analysis on it.
merelydev··on Andreessen Horowitz is investing billions into a bleak future
That is how we find ourselves in this mess, we design systems thinking only of everything that can go right and not what can go wrong.
merelydev··on Andreessen Horowitz is investing billions into a bleak future
Yes. My point is that until you learn to lock your door, thief will enter and steal your property. You can hate them all you want, that wont change the facts or magically lock your door.
merelydev··on Andreessen Horowitz is investing billions into a bleak future
That is like hating a hacker who hacks into your vulnerable server that is outdated and allows ssh password login. If there is vulnerabilities in the system someone will eventually exploit them, sure not you or me but there is always someone out there that will.
merelydev··on Andreessen Horowitz is investing billions into a bleak future
TLDR: "Don't hate the player, hate the game".
merelydev··on Ask HN: GitHub employees what's going on? Why?
Allot of people claiming it's because of increased load from AI. If that's true why do their systems sometime take hours to come back online, just restart the servers and you're back online, it's not like a nuclear reactor.
merelydev··on AI fuels more than half of cybercrime in Africa as scams surge – Interpol
The main fuel is the internet , followed by mobile phones and social media.

AI definitely makes the scams more believable, a Nigerian Prince can now easily forge documents.

But at the same time AI is a double edged sword, it can be used for both offence and defense.

merelydev··on AI-Generated Images Discourage Me from Reading Your Blog
I think you misunderstood what I said. Let me rephrase.

Would you rather watch a chess tournament between two of the best human players in world, or between two of the best bots in the world?

I know that chess is deeper than this, its about the positions that are reached and what each game adds to the existing knowledge and in that case it doesn't matter if its a human or bot. I understand very well that there is allot a Grandmaster can learn from games between two strong bots.

But here I am talking about human nature on how we value things, if a human can do something that I can't do than I value that more, I know Usain Bolt is faster than me, I know he is extremly fast compared to myself and other humans.

I challenge you to a game of chess. Lets Go!

merelydev··on AI-Generated Images Discourage Me from Reading Your Blog
This is not surprising. Would you rather have handmade Italian shoes or factory made shoes sewn by a robot. Humans assign quality relative to themselves.

A chess game between to bots is boring, no matter how strong the bots are. Humans generally compare themselves to other humans and that's part of how they value.

merelydev··on Ten advances in mathematics and theoretical computer science
Great stuff. Wonder how many of the ten problems where solved by independent mathematicians not linked to OpenAI
merelydev··on GitHub has alternatives, but no replacement
There is a view where developers think of a forge as a place where they host their code.

Than there is another view where the forge is where you go to get code others have written, and this is where GitHub shines. Because of the collective audit.

merelydev··on Ask HN: Any tips for a college freshman enrolled in computer science?
Learn JavaScript/Dart and Rust/Zig. Have a mono repo of all your code modules, never rewrite code, as you switch between projects.

Because AI is trained on the web, expect the fundamental building blocks of Software Engineering to not change in the next decades. Git, Linux, HTML, JavaScript etc etc all the abondoned code on the web. Familiarize yourself with these fundamentals and you'll always be relevant.

merelydev··on Mark Zuckerberg is becoming the king of the 'side quest'
Why's this not the top comment?
merelydev··on Our position on open-weights models
Why should consumers care what Coca-cola thinks about Pepsi?
merelydev··on OpenAI and Hugging Face address security incident during model evaluation
This will be used as an argument to ban opensource models.
merelydev··on China's open-weights AI strategy is winning
There has always been room for both closed and open source software.

In this context, open source/self-host means do it yourself, closed source means you trust someone else to do it for you.

In the long run open source always wins because of the community effort, customization, network effects and price.

Internet protocols are open, anyone can setup a website, host their own email server..., but most people don't do that, they rely on someone else to do it for them.

People still pay for Windows rather than use Linux because most people and companies have better things to do.

The main threat to American AI companies is not that consumers will self-host, but it's that new hosting companies will appear that will host open source models and offer them (cheaper) to consumers. It'll be like the web hosting market before the era of cloud computing.

merelydev··on The Kimi K3 Moment
If they outlaw open source models that'll just handicap American companies, the rest of the world will be running open source and have an arbitrage against US companies.
merelydev··on Kimi K3: Open Frontier Intelligence
So what now? USA blocks Chinese AI. US companies use expansive closed source AI while the rest of the world use cheap self hostable open source AI from China?
merelydev··on Demis Hassabis has a plan to harness AI safely
How will this be enforced, at least with financial markets money is discrete, can largely be counted. This seems like a slippery slope to full blown surveillance of the internet and in general computing.

If AGI is truly imminent and will collectively effect all of us why not apply democracy to it, and vote for new AI models?

merelydev··on Nokia’s years of mobile-phone supremacy ended in an afternoon
I don't think that's their biggest mistake. Their downfall was because they where mainly a hardware company without any network effects. Customers could easily switch from Nokia to any other hardware without an issue.
merelydev··on Anonymous GitHub account mass-dropping undisclosed 0-days
Because of asymmetric differences, I don't have access to powerful LLMs but attackers might. And also the complexities of software dependencies (supply chain vulnerabilities), my software depends on packages not in my control and I don't have time to audit the entire stack.
merelydev··on Anonymous GitHub account mass-dropping undisclosed 0-days
"one ought to design systems under the assumption that the enemy will immediately gain full familiarity with them" - Claude Shannon

https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle

merelydev··on Anonymous GitHub account mass-dropping undisclosed 0-days
Fair point but it assumes we all have access to LLMs with the same capabilities.
merelydev··on Anonymous GitHub account mass-dropping undisclosed 0-days
Most of the exploits are for opensource/free software.

I don't know what methods where used to find these exploits but I am starting to think security through obscurity might not be a bad thing in this day and age, where someone can just let bots loose on your codebase.

merelydev··on DSpark: Speculative decoding accelerates LLM inference [pdf]
> The question is also what game they're playing. Deepseek came out of a hedge fund. I think it's no coincidence that their publications tend to have a large impact on AI stock prices.

Its revealing that they always seem to publish after some big announcement by American AI companies. But regardless, this is one of the benefits of a duopoly.

merelydev··on Micron locks in historically high memory prices for five years
> Yes exactly, and theoretically if there was a functioning market that should have driven prices way down, because the marginal cost to enter the market is so low. However, the non-functioning anti-trust laws as well as the expansion of ip laws as allowed a few enormous corporations to essentially control the market and keep prices up.

What? Software is not expansive, most of it is free. Its just that the same code can be used by more than one user, unlike hardware. The high profit margins come from economies of scale which is greater than whats possible with hardware.

> There are hardly any hardware companies where the hardware is ever complete. Disregarding the fact that many hardware products contain some form of software that needs to be updated. In pretty much any field hardware companies need to continue developing new revisions/improvements on the hardware to stay ahead of their competitors, however those revisions/improvements are significantly more complex to put into reality.

Most of the deployed hardware is complete. The RAM in my PC is complete but the software running on it needs to be updated every month or so.

merelydev··on Micron locks in historically high memory prices for five years
> It's funny how everyone (especially here on HN) accepted (and expected) extremely high profit margins from software businesses

Because software you build it once and can resell it as much as you want, a stick of RAM is only sold once.

> The same was reflected in engineering salaries, with software engineering salaries being often a multiple of hardware engineering ones.

Arguably software is much more difficult to build because it is never complete.

merelydev··on Hetzner Price Adjustment
Wiregaurd, postgres replication and load balancing can do the job?

Lets go: https://matrix.to/#/#hostpool:matrix.org

← PreviousPage 2 of 4Next →