HNHacker News
TopNewBestAskShowJobs

pphysch

5,035 karma · joined February 1, 2018

submissionscomments
pphysch··on Google, Microsoft and xAI agree to share early AI models with U.S.
> I'm afraid of the potential to move in the direction of what we see in China where queries to LLMs referencing things like Tianenmen Square are censored (at best).

We are already there.

"Canva admits its AI tool removed 'Palestine' from designs: https://gizmodo.com/canva-admits-its-ai-tool-removed-palesti...

pphysch··on Russia Poisons Wikipedia
We need to erase the Cold War term "whataboutism". It's cold war boomer brain poison that disabled the critical thinking capacities of an entire generation.

Context and understanding the situation to make better decisions? WHATABOUTISM!

The West has suffered enormously from this deliberate myopia.

pphysch··on Maladaptive Frugality
There's a substantial difference between "reducing what you would otherwise spend" and "not spending / defaulting to the minimum". The latter mindset is less about active money management and more about completely avoiding unnecessary consumption.
pphysch··on For Linux kernel vulnerabilities, there is no heads-up to distributions
The public disclosure page has a big blue "Get the exploit" button.

It's an advertisement for an unpatched critical exploit and apparently some kind of infosec company.

pphysch··on For Linux kernel vulnerabilities, there is no heads-up to distributions
The Venn diagram of mainstream distros and individual Linux users is virtually a circle.

Ubuntu/RHEL is vulnerable and so are most Linux users by extension.

pphysch··on Postgres's lateral joins allow for quite the good eDSL
Not a good look to accuse others of AI spam because you can't immediately grasp their point. Others clarified it well.

ORM has substantial utility beyond just abstracting across different backends (I personally think that is one of the worst reasons to use an ORM, migrating or joining across entire production database systems is not something you ever take lightly).

> So I'd stick with my strategy of mastering raw SQL. I never felt the need of switching tool specifically for mildy difficult query.

FWIW this attitude reminds me of devs who insist Haskell or Emacs whatever is the one true technology that can do everything. Hard to work with. They build ivory towers, complicated systems that only the author can enter.

SQL is great but has its limits. Same for ORMs. Sweet spot is in the gray zone.

pphysch··on Postgres's lateral joins allow for quite the good eDSL
Raw SQL is great for simple queries, but gets old quick when you are dealing with "higher order" parameterized queries with lots of joins / optional clauses and you may end up creating an awful bespoke query builder to address these challenges. Or just piles of big similar queries that make it impossible to refactor your data model.

The sweet spot is an ORM that embraces dropping down into raw SQL where needed, instead of forcing bad half-complete DSL everywhere.

pphysch··on GitHub Copilot code review will start consuming GitHub Actions minutes
Slowly inching? GitHub Copilot announced 600%+ price increases for many workflows, with others being potentially 100x more expensive due to the change from request to token based billing.
pphysch··on GitHub Copilot is moving to usage-based billing
They are now charging per gallon instead of a flat rate per trip
pphysch··on Show HN: Turning a Gaussian Splat into a videogame
How practical would it be to include LIDAR in the initial real-world environmental scan to get (or at least seed/constrain with real data samples) an even better collision mesh?
pphysch··on Lute: A Standalone Runtime for Luau
Seems like mainly a way to write Roblox compatible applications that aren't locked in to the Roblox platform?
pphysch··on Palantir employees are starting to wonder if they're the bad guys
Is that how you rationalize Native American Tribal Reservations as well? Heaven on earth? A privileged gift from the white man?
pphysch··on US Department of Justice has officially reclassified cannabis as less dangerous
Cannabis is psychedelic to the extent that the term means anything. It's not a "classic" psychedelic like acid or shrooms, but there is no obvious category difference between microdosing shrooms vs. smoking a joint vs. having a proper trip vs. greening out, and so on. It's all spectrums of psychedelic experience caused directly by something you ingested.

The opposition to the term likely has more to do with proponents and lobbyists wanting to distance weed from the "harder" psychedelics that are known to fry people.

pphysch··on Palantir employees are starting to wonder if they're the bad guys
Yeah, we didn't want Iran to have nukes, so we rugpulled the JCPOA and murdered the guy who declared a fatwa against nukes.

We wanted to save the Iranian people from the regime that murdered 100,000 peaceful protestors (don't ask for evidence) so we butchered 170 school girls and didn't apologize.

We wanted to stabilize the region, so we greenlit Israel's rampage in Lebanon and directly induced Iran to close the Strait.

Yeah. Articulated.

pphysch··on US Department of Justice has officially reclassified cannabis as less dangerous
> Over time, cannabis has also allowed me to analyse and think on the past

There is danger in attributing something broad like this directly to drug use. Can you only reflect while high?

It may be that the initial psychedelic sessions helped break through some mental/emotional patterns you were suffering from (positive impact), but that continued regular use has an overall negative impact on mental health. That's been my experience with psychedelics and how I've seen them work on those around me, at least.

pphysch··on Scoring Show HN submissions for AI design patterns
Ironically this is perhaps the main motivation why a lot of companies force accessibility requirements internally. "We don't want an ADA lawsuit"

Now if only there were an ADA for website performance...

pphysch··on The Vercel breach: OAuth attack exposes risk in platform environment variables
TFA cites "env var enumeration", likely implying someone got somewhere they shouldn't and typed 3 characters, as the critical attack that led to customers getting compromised.

My point is sensitive secrets should literally never be exported into the process environment, they should be pulled directly into application memory from a file or secrets manager.

It would still be a bad compromise either way, but you have a fighting chance of limiting the blast radius if you aren't serving secrets to attackers on an env platter, which could be the first three characters they type once establishing access.

pphysch··on The Vercel breach: OAuth attack exposes risk in platform environment variables
Security-by-obfuscation is ridiculed but I'm a firm believer that preventing yourself from getting owned when someone is able to type 3 letters `env` is a worthy layer of defense. Even if those same secrets are unencrypted somewhere else on the same system, at least make them spend a bunch of time crawling through files and such.
pphysch··on Notes from the SF peptide scene
Sure, this isn't a rigorous study. But it's clear that American society is in decay (specifically: education, science, healthcare, democracy) and meanwhile SV has been busily innovating in adtech/surveillance, miltech, fintech, porn, gambling, recreational drugs, addictive media, disruptive automation... Not that all those are the same type of vice but it's clear where SV priorities lie.
pphysch··on Notes from the SF peptide scene
> you've built something so useful that someone else will pay lots of money for it

"Useful" is quite the euphemism.

> Fundamentally, the vast vast majority of founders who exit successfully made society better somehow.

This is an extraordinary claim.

pphysch··on Notes from the SF peptide scene
Yeah, isn't the entire point of SF startup culture (for the last decade++) to build personal wealth through a successful exit rather than build a sustainable business that benefits society? It's a big speculative con game... Opposite of sincere.

Of course we can warp the semantics and argue that these people are "sincere" in their desire to defraud retail investors or something, but that doesn't seem to be the author's argument.

pphysch··on Reflections on 30 years of HPC programming
Agreed on all points and this captures the history well.
pphysch··on Reflections on 30 years of HPC programming
I promise you that the main reason HPC is behind on virtualization is not because of the little bit of overhead. There are a dozen other inefficiencies in the average HPC workload that are more significant.

Most centers don't even have good real-time observability systems to diagnose systemic inefficiencies, leaving application/workload profiling purely up to user-space.

The HP in HPC has really been watered down over the last couple decades, and "IT for computational research" would be a more accurate name. You can do genuinely high-performance computing there, but you'll be an outlier.

pphysch··on Claude Opus 4.7
Maybe there are literally 17 models in an initial MoE pass. Seems excessive though.
pphysch··on Claude Opus 4.7
The market here is extraordinarily vibes-based and burning billions of dollars for a ephemeral PR boost, which might only last another couple weeks until people find a reason to hate Codex, does not reflect well on OAI's long term viability.
pphysch··on The Case Against Gameplay Loops
Aimlabs has been significantly gamified, though the core is maybe more of a "toy"
pphysch··on The Case Against Gameplay Loops
Both games have gameplay loops that were ahead of their time. Relatively free exploration + combat + RNG "loot" constrained by needing to return to town to heal/restock.
pphysch··on I just want simple S3
Diverse competition is the best way to identify a winning formula, which can then be perfected by a fewer number of players.
pphysch··on The economics of software teams: Why most engineering orgs are flying blind
The point of a rewrite is to safely delete most of that arcane knowledge required to operate the old system, by reducing the operational complexity of it.
pphysch··on The economics of software teams: Why most engineering orgs are flying blind
Big business LLMs even have the opposite incentive, to churn as many tokens as possible.
← PreviousPage 7 of 34Next →