HNHacker News
TopNewBestAskShowJobs

rvz

10,598 karma · joined May 25, 2019

An unexpected error occurred whilst loading this profile. Please try again later.
submissionscomments
rvz··on Amp is the best thing since sliced bread
No it is not.
rvz··on Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
Vibe coders in open source proudly don't read the (slop)code and place all their agents in autonomous loops without them knowing that Claude leaked their passwords and environment variables on GitHub.

This incident would have been caught in an open source harness. This one is closed source malware, and you don't know what Claude Code does internally to behave like this.

Yet another reason why you cannot trust a closed harness.

rvz··on Tell HN: HN Is Wrong
Of course HN is wrong. Don't listen to anyone (including me) or copy whatever everyone else is doing.

What worked for someone else a week ago does not mean it will also work for you next week.

The "HackerAnything" hype were just flashes in a pan fads that will be forgotten in a long list of slop projects.

rvz··on Running a law firm on Free software
Interesting.

To the lawyers, they can use software being available for free both as in for $0 and freedom as in libre (including choosing to not pay for it and not being obligated to pay developers at all) while their service of legal advice is not free and always costs money.

Guess who wins here? (Hint: It isn't the volunteer open source developer)

rvz··on Text.js: Build full-stack React apps that render inside console.log
Why do that when not only an AI agent will find it easily, but AI agents have clearly replaced these web developers?
rvz··on Google Described Its Agent Sandbox. I Built One with Firecracker and Measured It
The page doesn't even load, but I can tell by the claudish title that it will be total AI slop.
rvz··on Text.js: Build full-stack React apps that render inside console.log
Useless but ok.
rvz··on Alex Stamos thinks we're entering a cybersecurity dark age – Decoder
He is correct.
rvz··on Need for Speed Underground 2 online in the browser
> why are big name businesses wasting money on litigating against small sites that dont actually impact them anyway? perhaps if they knew that their lawyers were wasting time chasing frivolous suits and actually costing their company's good will, while not actually giving their business impact...

Because the lawyers can for example, argue that their current games can be future targets of unauthorized recomp'd redistributions that will impact the sales of the business.

Nintendo also sells and offers old games digitally and they have the correct rights in redistributing them which this still counts as a "actively commercial game" even if it is old.

These companies don't care about ripped and recompiled games if it is done for private use. They only care if the game and its assets are redistributed in an unauthorized manner.

rvz··on Need for Speed Underground 2 online in the browser
> Huge fan of bringing back older games and updating.

Just because this game is old, does not mean they (nfsu2 [dot] xyz) own the rights to redistributing it which is what they are doing. Both the copyright for this game and the company is still live.

Even asking for donations is going to get them into trouble as well as inviting the rights holders to contact them directly.

So I don't think this site will survive for long. EA's lawyers have access to insurmountable funds which make this cat-and-mouse game disadvantageous to projects like this who are even showing the intention of asking for some form of financial contribution of support (money through donations).

rvz··on Need for Speed Underground 2 online in the browser
> But that’s not the world we live in. Personally I think that even projects like SPT-AKI are okay.

It costs EA nothing and their owners have funds from sources that make the cat-and-mouse game expensive for the reuploaders.

rvz··on Need for Speed Underground 2 online in the browser
As long as lawyers love money, that will not change.
rvz··on Libghostty 1.0
Many common ways for the financing of an free and open source project to be sustainable (The main keyword) in the mid to long term:

1) A non-profit company that has full-time employees but supported via sponsorships: (gnu project, mastodon, omarchy, zig)

2) Multiple for-profit companies that each have full-time employees contributing to an open source project that they all use: (ocaml, linux, rust)

3) An ultra high net worth individual that has full-time contributors to open source and supported via a non-profit (signal, ghostty)

4) A for-profit company that has dedicated full-time employees that have full support and own the direction of the open source project (go, swift, java)

5) VC funded open source projects (Herdr, Bun, Deno, Burno, Atuin)

All other options such as low donations like "buy me a coffee", ko-fi, are completely unsustainable, now that AI agents exist.

rvz··on Tell HN: You can have separate agent account on GitHub
This is the end of GitHub.
rvz··on Paraguay Freezes millions of bank Accounts
That is a cryptocurreny exchange. Not a self-custody crypto wallet.

The crickets here goes to show that if millions of peoples bank accounts (or business accounts) could not withdraw their money in the US, well it will be a massive problem.

The last time that a major event like this happened was SVB, and First Republic Bank all failed and people could not withdraw their money.

But of course in this case (Paraguay) no-one cares.

rvz··on Firecracker VM Escape: PwnEscape Part 2
Thanks to frontier reasoning agents, Linux is completely riddled in ways you can discover 900+ LPE vulnerabilities. [0]

Another wave of vulnerabilities like this are yet to be discovered in Linux. We are just seeing how weak C and C++ based OSes and kernels are when put under hundreds of AI agents.

[0] https://openai.com/index/a-thousand-fewer-paths-to-root/

rvz··on Paraguay Freezes millions of bank Accounts
Can't do that with a crypto wallet.
rvz··on No CVE Today, Please
Yes.

There will be at least ONE critical CVE every week.

rvz··on Devvm.dev: One VM for every project
There are yet thousands of these so-called "sandbox" projects that exists. This one sounds rather really wasteful on resources?

Bubblewrap would just be a better alternative for this.

rvz··on Rune: A native GPU-rendered Rust UI framework for macOS, Windows, Linux and web
This is what a vibe coded UI framework looks like.

Have a read of the clean documentation that they never wrote or read. [0]

All the clean code, architecture principles thrown out of the window in favour of hundreds of code smells, anti-patterns, zero tests, and tons of unmaintainable slop.

[0] https://github.com/anomalyco/rune/blob/dev/crates/rune/READM...

rvz··on Promethevs: Full DeepSeek-v4.1-Flash-1017, locally, on 12GB of VRAM
If you were wondering:

> Up to 7.4 tokens/s.

It's not really "Flash" if it is 7 tokens per second.

Also don't bother with any GPU lower than an RTX 5080 or even a DGX Spark (it is a scam) if you are seriously considering running frontier local models.

rvz··on Anthropic IPO buyers see valuation as low as $1.1T
Still overvalued.
rvz··on Claude Code sends your email address to websites
After all these ridiculous blunders with this closed source harness this incident should tell you why you should never use Claude Code.
rvz··on Claude Code sends your email address to websites
According to vibe coders, the future is never reading what the code actually does. You just trust coding agents with everything and "give into the vibes" even when it "says" its correct.

Offshoring understanding is the trend that many companies will pay in the form of comprehension debt.

rvz··on Nasdaq Sinks 5% as Investors Retreat from AI Trade After Election
That is not a moat. (and it is not theirs either) It just means that their models are highly inefficient that it requires a lot of compute to run them.

Open weight models such as Deepseek, GLM are just as good as the frontier closed models and already we have bank such as Revolut migrating off of frontier closed models and self-hosting. [0]

[0] https://x.com/guilleflorvs/status/2117379073785696395

rvz··on Nasdaq Sinks 5% as Investors Retreat from AI Trade After Election
I already called it right.

Just like the last time before the 2022 market crash [0] and that was before you created your account.

[0] https://news.ycombinator.com/item?id=29508238

rvz··on Nasdaq Sinks 5% as Investors Retreat from AI Trade After Election
The beginning of the AI bubble's dotcom-style crash.

Accurate. [0]

[0] https://news.ycombinator.com/item?id=45960032

rvz··on Discord is ditching Electron and its new app uses less RAM
This is textbook whataboutism.
rvz··on OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability
Just do no password at all.
rvz··on sshole
Related discussion: [0]

[0] https://news.ycombinator.com/item?id=50377221

Page 1 of 34Next →