HNHacker News
TopNewBestAskShowJobs

ryanisnan

2,051 karma · joined June 10, 2013

submissionscomments
ryanisnan··on Security Disclosure
Honest question, what do you use to manage your containers that you durably trust to stay online?
ryanisnan··on Security Disclosure
They're actively firefighting an incident, and are likely going to make some mistakes along the way. In this case, they've erred on the side of security over availability, which in some cases is the better outcome. I know not in all, but some.
ryanisnan··on The Tao of Backup
Woops, missed that!
ryanisnan··on Norway Eyes Partial Ban of Smart Glasses
Pun intended?

Laws will seldom work 100% of the time, but I profoundly disagree with your implied attitude. "They don't cover this future case, so we shouldn't do anything now".

ryanisnan··on The Tao of Backup
It's 2026. Use TLS everywhere.
ryanisnan··on Our AI Midwife
You don't understand. They were only able to feed in information that they obtained with their human medical team. So the AI was heavily constrained in what it knew.
ryanisnan··on Our AI Midwife
> AI can create some efficiencies, but it almost certainly solves fewer healthcare or education problems than most AI maximalists believe.

Do you have any information to back this claim up?

ryanisnan··on Pi 1.0
Human judgement is a thing.
ryanisnan··on Meta takes down a critical video about meta AI Glasses after filming at Meta
https://en.wikipedia.org/wiki/Streisand_effect

https://southpark.fandom.com/wiki/Barbra_Streisand

ryanisnan··on DoorDash Spent $1.4M Trying to Stop Mamdani from Becoming Mayor. Now We Know Why
Money influencing politics again exposes flaws in our democracies. Shocking.
ryanisnan··on I don't like passkeys
I haven't articulated my thoughts about passkeys nearly as eloquently, but you did an amazing job here. This really sums up a latent problem I've had with passkeys.

Do you have a blog?

ryanisnan··on North Korean nuclear test sets off years of earthquakes
Yeah, I mean, I understand the words you wrote. I don't think it's a good analogy.

It is entirely feasible that the same amount of potential energy, delivered either in small, successive amounts, but spaced out, proves to be tolerable, while a single large amount would be fatal.

ryanisnan··on North Korean nuclear test sets off years of earthquakes
I don’t think this is a good analogy.
ryanisnan··on Stallman: Thousands Dead, Millions Deprived of Liberties (2001)
> “Given that the human face recognition performed by the check-in agents did not keep the hijackers out, there is no reason to think that computer face recognition would help.”

Even though I agree with the premise of the essay, this is absurdly false today. Computers are really good at this type of thing now, scarily so.

ryanisnan··on How Climate Resilient Are the Largest Cities?
This is far outside of my wheelhouse, but I have some serious questions about the methodology here.

I dug into what they call a "resiliency checklist", which is what looks to be a set of questions that have qualitative answers which are subjective at best. This information looks like it is fed into the CRRI, the data set that substantiates the city-wide scores used to power this report.

I am very skeptical that these 2 things happened:

  - They captured a representative set of key assets that go into making a "city"
  - The answers they received are calibrated or are meaningful enough to make these large conclusions
ryanisnan··on Launch HN: Salem Robotics (YC S26) – Software for industrial inspection robots
Awesome - thank you for the detailed response.
ryanisnan··on Htmx 4.0.0
Sure but it's a spectrum. Surely some choices will age much more poorly than others.
ryanisnan··on Htmx 4.0
Congratulations on the release!

I have enjoyed working with htmx very much.

I'm still skeptical of htmx being the foundation for a 100-year web service, but I think this is a really worthwhile goal. I'll add that aside from static HTML, I don't have a better option.

ryanisnan··on Engineered yeast for converting plastic and biomass compounds to food additives
Reminds me of the Taumoeba escaping the Xenonite enclosures.
ryanisnan··on Launch HN: Salem Robotics (YC S26) – Software for industrial inspection robots
What about container registries do robotics companies need that are different from other industries?
ryanisnan··on The Tariff Cost: analysis of the costs to Americans from new tariffs on Canada
I like the idea behind the site, but I have some nits.

First, when you list something like a financial figure, you must also include the relevant time period. E.g. you say 16.0B in taxes collected by Canada from American exporters. But you don't list the time period.

Second, you say 313 are taxed today. What is this in reference to? Goods? People? Companies? Percentage?

The labels need some serious love.

ryanisnan··on The August 17 outage
Interesting - There's a couple of things that I disagree with here, but I do think this resonates: "We all agree with the diagnosis and strategy: stop building new things, bring stability."

Where I have a problem with the positioning of their GitHub profile is, he's the CTO of GitHub, arguably the defacto standard for open-source version control systems. His GitHub profile is linked to as the author for the post, and his GitHub profile simply tells me: "this guy doesn't code."

I don't care if this guy doesn't work on GitHub itself, I hardly would expect that, but IMO, any CTO of a company like GitHub should eat, breathe, and sleep code. He might, but his profile, which is being published as if it means anything, tells me he doesn't.

ryanisnan··on The August 17 outage, and the work ahead
Don't contributions to private repositories simply show as: "N contributions in private repositories"?

Here's me: https://github.com/ryanisnan

In other words, I think his private contributions should still manifest on the contribution graph. And for being the CTO of an organization like GitHub, with no open-source contributions... Not a great look.

ryanisnan··on The August 17 outage
Here's Vladimir Fedorov's GitHub contribution graph, as linked to as the author of this post:

https://imgur.com/a/zIbT0Gi

It shows zero contributions in the past year, on this account. This is a huge, huge red flag.

ryanisnan··on Show HN: Huzzah – a novel approach to coding with AI
I like the direction of capturing the human intent as a durable artifact, but I dislike how you've gotten there.

Let's look at your fizzbuzz example. Unfortunately, if you wanted to have the agent implement fizzbuzz for you, it looks like, in your example, you would have to already know how to effectively write fizzbuzz. Specifically, you call out the use of the modulo.

In your prompt, for the traditional agentic development path, you already declared the intent. There is some imperative language in there, sure, "Create a function that ...", but also there is the declarative state, that doesn't require knowledge of specific programming syntax or semantics.

What I've relied on is a more formal location/syntax for acceptance criteria are in code. These are then used to generate tests, and implementations. It isn't perfect, and more investment is needed, but it starts getting at the root of the problem.

ryanisnan··on Companies promote incompetent employees to management to limit damage they do
Yeah, this is so off-base. Or, OP has only ever worked at terribly bad companies.
ryanisnan··on Field measurements of neighborhood-scale air temperature impacts of data centers
What a weird line to draw. Data centres do a lot more than what you report. E.g. they might host your electronic health records. They might host census data, or weather data, or your kid's school learning management system.
ryanisnan··on Apple defeats liability for not scanning iCloud for CSAM
As the creator of mediaden.ca[1] I’ve thought about this. Client side scanning is maybe marginally better than server side scanning, but both paths lead to privacy rot.

Governments need to catch criminals, but they shouldn’t do it at everyone else’s expense.

1. https://mediaden.ca

ryanisnan··on Show HN: One More Letter
Fun, but I don't like trivia.
ryanisnan··on Cursor 0day: When Full Disclosure Becomes the Only Protection Left
Uh, I don't think people typically associate downloading a repository, and viewing the source, as being synonymous with activating a malicious payload. That is the bit that's concerning.

I'm also so tired of people groaning about AI writing, yes, it's annoying, but attack the message, not the messenger.

Page 1 of 21Next →