HNHacker News
TopNewBestAskShowJobs

r_lee

1,400 karma · joined May 22, 2023

submissionscomments
r_lee··on Credit where credit is due
you can get a scalable clone of IG up way faster than you could before AI, like absolutely you can

point is, there is 0 demand for an "IG clone". nobody is out there wishing there was a clone of ig

it's one of the simplest kinds of projects as well, it's literally mostly about the CDN

r_lee··on Vite+ an excellent toolchain for AI agent development
so the AI wrote it using a Czech prompt?
r_lee··on Vite+ an excellent toolchain for AI agent development
how is this 3rd on the front page? a claude slop blog post with 1 comment?
r_lee··on Credit where credit is due
yeah, I don't see how people say that but then don't understand that fighting against the system almost never goes well.

I feel like same thing is happening to software. some people saying how they barely use AI, or how you can just do 10-100x more yet nobody seems to know where that demand will come from

r_lee··on Verisign .com Domain Name Registry Consumer Class Action
doesn't mean much when you're forced to use their namesevers. this only applies if you're willing to be tied to CF
r_lee··on Verisign .com Domain Name Registry Consumer Class Action
they're a nightmare to deal with if you ever have problems. I'd transfer out
r_lee··on OpenCode has a security breach last that impacted 1.4% of console users
wow, I didn't even see it
r_lee··on Ledger confirms spy chip implant behind wallet crypto thefts
planting some very cheap microchips in a hw wallet that is mostly used by those who want to protect their wealth is a whole different thing from what you're suggesting

I would've not dismissed the esim thing

like you do realize the Apple store scenario isn't on the same level, at all? like, you'd have to bascially stalk your target figure out when they're gonna go buy an iphone at some specific store and have all the SKUs ready, all for that one job vs. this where you can buy and resell these things and the cost is materials + labor for implanting the thing and shipping costs, and you don't really have to even identify your victims because your customers are likely wealthy (to a degree at least)

r_lee··on Namecheap just seized and disabled all my domains
this is one of the worst trends in modern time - "AML" and "KYC" being shoved into everything, requiring you to attach your own identity into everything and send your ID/passport to vendors left and right, no right to privacy at all.
r_lee··on Chrome and Edge are removing XSLT: what breaks and what does not
yet people will say that HTML5 is all you need or something
r_lee··on Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
if you mean as in Windows phoning home in normal installations, a Windows Enterprise install stripped of most unneeded components with Group policy won't really "phone home"

and you can always just airgap the thing

r_lee··on Linus Torvalds's first LLM-assisted patch series
what is this belief based on?
r_lee··on Strafe: A new open-source, E2E Encrypted, and federated alternative to Discord
yes, because most HNers are already old so none of that applies to them, thus it's either no internet, no phone or you have to have all kinds of spyware watching what your kids (right up until 18) do 24/7

I bet everyone would've loved to live like that when they were younger. right?

r_lee··on Strafe: A new open-source, E2E Encrypted, and federated alternative to Discord
Zulip definitely is the worst naming if you don't go off of what the name means literally

slack and discord are very good household names, same with twitter (rip) and google etc.

nobody's gonna say "hop on Zulip"

r_lee··on Why Sweden is abandoning its cashless society
same thing goes for taxis
r_lee··on Ledger confirms spy chip implant behind wallet crypto thefts
right, so you'd have to know the store with your victims upfront, know which ones to give these highly expensive implanted iPhones to (or have a lot of units), be able to always bring enough for the specific colors the customers want....
r_lee··on A plea not to use uv-build
I'm pretty sure that is the entire purpose of Gentoo
r_lee··on Firefox Enterprise
yyyyeeeaaaa..... I can see why they wouldn't wanna use that lol. I don't see how that would "drive you crazy"?
r_lee··on Apple's Minions: A virtual GPU cloud built from idle Apple Silicon Macs
because their entire thing is to focus on a few product lines... I'm not surprised at all
r_lee··on Codex CLI installs a persistent, self-updating background daemon by default
that's what I'm also wondering about.

in the last 2 weeks or so: - scrolling stopped working - subagents no longer work (main agent doesn't get notified when they finish) - subagents don't work (a subagent can't make its own agent even if instructed to do so)

what's going on? I thought coding was solved?

r_lee··on Theranos.world
it's just kinda awkward, but worse than just "X" is the fact that now you're supposed to call tweets "posts on X" or "X posts"

like come on... it was so good before

r_lee··on The value of not getting to the point (2015)
I'd imagine that would be infinitely more risky to rely on, plus probably nobody (figuratively) would actually migrate
r_lee··on Man discovers his parents' coffee machine used 1TB of data in 10 days
big thing is to be able to serve ads more effectively

so if you know that a user is having an affair, you might want to serve divorce lawyer ads (I'd imagine those are very expensive) or something.

this kind of data though is just like a cog in the machine, but it can e.g. give enough info to know how many people likely are in that household, and so on. useful when combined with other signals

r_lee··on Classic PC demoscene productions running natively in the browser
AI-induced brainrot
r_lee··on Forever Junior: The Skills AI Can't Develop for You
> I can't help but wonder if it's part of a scheme to convince people to unblock them

what could possibly make you think that?

really? a scheme so that people will go: "oh I'm so curious about this technical blog, better unblock the entire domain on unblock!"

and that's their scheme for evading adblockers?

what?

r_lee··on Shipping JPEG XL in Chrome
is that a bad thing?
r_lee··on Vibecoding Photoshop: Time and pressure
probably the amount if tokens multiplied by whatever price GLM 3.5 or 4.1 flash etc are going for
r_lee··on Vibecoding Photoshop: Time and pressure
yeah it would. an SPA is exactly what you'd want for a "webapp" like this, where you want everything loaded upfront so that you're mostly interacting with stuff offline. it's also very cache friendly so, really no benefit to using SSR.

SSR only really makes sense when you either want to optimize for fast page loads, or do PHP-style conditional rendering or whatever

r_lee··on LLMs may have helped my RSI
I'm so confused at how people think that this will be a reality, like, what kind of boss would look at this and go: yep sure my people will only work for a few minutes here and there, let's keep paying them their huge 6 figure salaries ??

am I missing something here..?

r_lee··on Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped
> Insisting about something when I openly and honestly said it's not is not very nice.

I'm not insisting anything, I'm just saying that I don't think your arguments are purely objective, but rather from a matter of principle, which is fine, but to frame it as some kind of established fact that it's being "Weaponized" even though I'd say it's a bit extreme.

I don't like Windows, especially Windows 11, but I can understand why they exist and what markets they serve.

> but I don't understand why Windows Team or Microsoft doesn't use function multi versioning

because otherwise they'd have to support systems for a really long time and they'd be unable to support newer features that *they* think are important.

> I'm not saying that Windows would be dead if it was open source, but we'd have versions where ads and telemetry are straight up ripped from every possible part of it.

this is what I mean. your views are incompatible with closed-source software. not saying all closed-source software needs to have telemetry, but for the average user, this stuff probably helps catch bugs and things.

local accounts, I agree, I've never bothered with Windows 11 for that reason.

it's enshittification, not weaponization.

> You can always make it sense, if you decide to do that. There's SQLite for example.

this is just not a very good point. we're talking about paid products, paid OS that is paid by an OEM or an end-user.

> Not with hardware requirements primarily, but how it herds the user and siphons data out of the computer in the name of telemetry.

what data specifically? I'm not a fan of this either and I'd always disable everything, but it might again be something that people would really not care about. and for an organization like Microsoft, telemetry is probably very useful because otherwise they'd have to rely on user reports or test everything themselves

> Ha, no. A small anecdote

I really think you're dismissing this just because of your principles like "security through obscurity isn't security"

yet security through obscurity literally works. it's not foolproof, but a lot of bugs are never found because of it. and a big part of finding bugs is to get enough information to know where to look

like you saying "look my friend got a bug 15 years ago" doesn't disprove what I claimed.

> Also, with the leaks we have learnt that NSA had a truckload of zero days to infiltrate Windows systems. Great for security, right?

and what are you saying with this? the fact that only NSA (and some others probably) had the ability to find bugs is proof that the security failed?

> Finding, fixing and evading the introduction of vulnerabilities are a lot easier if the source is open.

yes, that is why I said "in fact it can be less so if people don't have eyes on it".

> Do we know that there's no universal backdoor in Windows? I don't.

that's right. we can't know there isn't one in MacOS either.

and yes, I do know about DUAL_EC_DRBG and Crypto AG.

"Closed source something can't be audited to be secure or anything. It doesn't make it harder to attack"

It literally does. the only argument against it is that with it being open you'd have others that would catch bugs and report them to the vendor, vs. keeping it to themselves, which I think is fair, but it doesn't make it harder to attack, at least historically when you had to put a lot of effort into security research which of course the intelligence agencies could leverage. I think this is changing with LLMs.

"Security through obscurity never stopped anyone from infiltrating anything. With enough persistence, ..."

it has stopped tons of attempts. literally.

there simply isn't an infinite amount of "persistence" available to people/orgs. it takes a huge amount of time to meticulously reverse engineer and find security holes in an OS like Windows, it's like games with DRM like Denuvo, it works. it's security through obscurity, but it works, it has held off games for like 6+ months after release.

"security" doesn't mean impenetrable, there's always going to be new bugs even in Linux, Chromium and others even though they're open.

but with closed source software, it is much harder to comb through it and find bugs.

> Please, we have gone through this 30 years ago. These arguments doesn't hold water anymore.

like, I don't understand what you mean with this.

you're talking like this is a settled argument and that you're just absolutely right, closed-source software is not harder to attack and it's just propaganda from the NSA or something?

like, we can be objective and point out the flaws of closed-source software and security through obscurity, but we also have to be realistic. things may be changing now, but at least up until very recently, only the most determined actors (usually organized groups) would be able to conduct sophisticated attacks against these systems

but also remember that a lot of the major vulnerabilities against Windows have been through leaks from the CIA and etc. that is not Windows being "breached yesterday and today". and Microsoft has the resources to hire very well-paid engineers who work on security around the clock, unlike with many FOSS projects

← PreviousPage 3 of 25Next →