HNHacker News
TopNewBestAskShowJobs

never_inline

897 karma · joined August 26, 2022

submissionscomments
never_inline··on Cursor IDE support hallucinates lockout policy, causes user cancellations
Amazon has such design, no?
never_inline··on How University Students Use Claude
> Using ChatGPT doesn't dumb down your students. Not knowing how it works and where to use it does.

LLMs can't produce intellectual rigour. They get fine details wrong every time. So indeed using ChatGPT for doing your reasoning for you produces inferior results. By normalising non-rigorous yet correct sounding answers, we drive down the expectations.

To take a concrete example, if you tell a student to implement memcpy with chatgpt, and it will just give an answer which uses uint64 copying. The student has not thought from first principles (copy byte by byte? Improve performance? How to handle alignment?). This lack of insight in return to immediate gratification will bite later.

It's maybe not problem for non-STEM fields where this kind of rigor and insight is not required to excel. But in STEM fields, we write programs and prove theorems for insight. And that insight and the process of obtaining it is gone with AI.

never_inline··on Ask HN: What books have been worth your time?
> What did you get from it?

Beside the obvious "deep work", its the ability to be bored, and shut down time.

> I read it, but like most self-help books - I felt like it could've been 1/4 the size. The book could've been 10-20 pages.

Have to agree. It can be summarized.

never_inline··on Ask HN: What books have been worth your time?
Deep work by cal newport.
never_inline··on The “S” in MCP Stands for Security
A. Implement guardrails (like already done against prompt injection).

Invariant blog post mentions this:

> Conclusion: Agents require extensive, highly-contextual guardrailing and security solutions

> As one of our core missions at Invariant, we absolutely cannot stress enough how important it is to rely on extensive guardrailing with AI models and their actions. We come to this conclusion repeatedly, as part of our research and engineering work on agentic systems. The MCP ecosystem is no exception to this rule. Security must be implemented end-to-end, including not only the tool descriptions but also the data that is being passed to and from the AI model.

B. Version the tool descriptions so that they can be pinned and do not change (same way we do for libraries and APIs).

C. Maybe in future, LLMs can implement some sort of "instruction namespacing" - where the developer would be able to say any instruction in this prompt is only applicable when doing X, Y, Z.

never_inline··on The “S” in MCP Stands for Security
Because it's not an encryption problem. It's a "you can override instructions from other servers" problem.
never_inline··on The “S” in MCP Stands for Security
This still does not seem to fix the OP vulnerability? All tool call specs will be at same privilege level.
never_inline··on BreezeWiki makes wiki pages on Fandom readable
IIRC it work when you disable Js
never_inline··on I genuinely don't understand why some people are still bullish about LLMs
My complaints with Deep Research LLMs is they don't go deeper than 2 pages of SERPs. I want them to dig down obscure stuff, not list cursorily relevant peripheral directions. they just seem to do breadth first than depth first search.
never_inline··on Xee: A Modern XPath and XSLT Engine in Rust
JQ is the most feature-rich of the bunch. It's defacto standard and I usually just default to it because it offers so much - assignment, various builtins such as base64 encoding.

The disadvantage is that it's not easily embeddable in your own programs - so programs use JSONPath / Go templates often.

never_inline··on Xee: A Modern XPath and XSLT Engine in Rust
I have used it when using scraping some data from web pages using scrapy framework. It's reliable way to extract something from web pages compared to regex.
never_inline··on The Pain That Is GitHub Actions
Doesn't include:component still require all your shell script to be written inside YAML? or is there a way to move the logic to a, for instance, .sh file and call it from YAML?
never_inline··on The Pain That Is GitHub Actions
I'd say write a Python CLI (or any language you're comfortable with) which does all the actions (setup, deploy), download it and use it in the CI (or install on the runner images if you control them). That way you can use same workflow (command) in local development and CI.

There is a gitlab CI feature `include`, but you pretty much have to write shell scripts inside YAML, losing on whole developer experience (shellcheck etc..). I would recommend this way only if you can't factor your code into a CLI in proper language.

never_inline··on The Pain That Is GitHub Actions
Python with click and PyYAML can go a long way - then you can build it as a CLI application and use the same from CI. In a java shop, picocli + graalvm probably. I wouldn't like Go for this purpose (against the conventional wisdom - because boilerplate and pretty bad debugging capabilities).

That said, if you absolutely need to use shell script for reasons, keep it all in single script, define logging functions including debug logs, rigorously check every constraint and variable, use shellcheck, factor the code well into functions - I should sometimes write a blog post about it.

never_inline··on Chrome disabling uBlock Origin is a serious security threat
Many people here install ublock for elders and / or children and leave it. Now they might become target of ads that download malware.
never_inline··on “Normal” engineers are the key to great teams
Hyperbolic space indeed.
never_inline··on A 10x Faster TypeScript
This is definitely AI, repetitive and reads in style of a marketing copy / sensational report.
never_inline··on Goravel: A Go framework inspired by Laravel
You can do that in every ORM including the infamous hibernate.
never_inline··on Ask HN: What less-popular systems programming language are you using?
The question is about systems programming.
never_inline··on I struggled with Git, so I'm making a game to spare others the pain
I use the following commands frequently

* pull

* push

* checkout / switch

* commit (ofcourse)

* merge

But I will end up needing

* log / log --stat

* stash

* diff

* show / show --stat

* blame

* revert

* cherry-pick

* reset

* git grep (can be replaced with rg / grep -rn)

I can't imagine not having these commands now.

If you use something frequently you should know it in-depth. It applies to tools (git, VSCode), frameworks (Spring, Django, whatever), infra (kubernetes, docker). otherwise you're missing out.

never_inline··on India: A billion people have no real money to spend, says report
Most graduates in this country needs to be trained from scratch for any serious programming work, due to how horrible the education system is. So it's not worth for the startups.
never_inline··on I put my heart and soul into this AI but nobody cares
I concur, I have seen videos of "Honda Unicorn 160 2025" motorcycle models which looked too much like high-end cruiser motorcycles then realized it was AI generated.
never_inline··on One year after switching from Java to Go
> So is calling abort(). (Which is the Unix way to do what you described.

But in gui applications and servers, you will need to catch and report the error in some intermediate boundary, not exit the application. That's where go falls short.

never_inline··on One year after switching from Java to Go
> heavyweight ecosystem

Try micronaut once. It does DI and even ORM mapping (with micronaut data jdbc) at compile time and avoids most reflection.

never_inline··on Go 1.24
Can someone dumb it down for me how the new runtime.AddCleanup is different from much-disliked finalizers in java?
never_inline··on We were wrong about GPUs
Core kubernetes (deployments, services etc..) is fairly easy to understand. lot of other stuff in the cncf ecosystem is immature. I don't think most people need to use all the operators, admission controllers, otel, service mesh though.

If you're running one team with all services trusting each other, you don't have problems solved by these things. Whenever you introduce a CNCF component outside core kubernetes, invest time in understanding it and why it does what it does. Nothing is "deploy and forget" and will need to be regularly checked and upgraded, and when issues come up you need some architecture-level of the component to troubleshoot because so many moving parts are there.

So if I can get away writing my own cronjob in 1000 lines rather than installing something from GitHub with a helm chart, I will go with the former option.

(Helm is crap though, but you often won't have much choice).

never_inline··on [dead]
Sadly these days when I see .dev domain I will think some SaaS company spam, that's the first thing that comes to my mind.
never_inline··on Go Data Structures (2009)
Usually the idiom is using the same variable on LHS.

``` a = append(a, elem) ```

If you assign it to anything else, `a` might still remain with the older slice memory which will cause worse problems than equality comparison.

So the kind of code you wrote is hardly ever written in production.

The advantage of having this is avoiding one more heap allocation for slice, which is a good tradeoff if you ask me.

never_inline··on The Language Construction Kit (1996, 2012)
I thought this was related to compilers, probably ocaml lisp or something.
never_inline··on So you wanna write Kubernetes controllers?
I'd please ask people to don't write operators unless absolutely necessary.

I used a certain tool which had its own config format, and it's "cloudnative" operator implemented CRDs of which multiple can exist and they would update the config file in some mounted volume. Such thing is a hell to debug. Why can't we just store the config file in configmap/ secret and listen to changes?

(If we had a better templating solution than helm, I think quite a few operators wouldn't need to exist.)

← PreviousPage 10 of 16Next →