HNHacker News
TopNewBestAskShowJobs

sgbeal

2,392 karma · joined August 19, 2013

https://wanderinghorse.net
submissionscomments
sgbeal··on For Linux kernel vulnerabilities, there is no heads-up to distributions
> “Shared hosting providers” These haven’t been a thing since VMs

That is unfortunately not true. i left my last one only a few years ago and they're still going strong without me.

sgbeal··on CopyFail was not disclosed to Gentoo developer
> Even with shared hosting, you generally have root in your VM or container

Lots of shared hosters don't use VMs or containers. It's some arbitrary number of people logging in to a shared system, each one with a home directory under /home/THE_USER_NAME. i've had several such hosters over the years (thankfully not right now, though).

sgbeal··on Show HN: Rip.so – a graveyard for dead internet things
Thank you! It's legible now!
sgbeal··on Show HN: Rip.so – a graveyard for dead internet things
That big flashing yellow bar near the top makes the page _literally impossible_ for me to read. Human eyes are built to follow the fastest/flashiest thing around, and that bar takes the provierbial cake in terms of eyeball distraction.
sgbeal··on Deep under Antarctic ice, a long-predicted cosmic whisper breaks through
Whereas i was thinking "it's about time a hero arrived!" ;)

i don't presume to know whether Cthulhu is the hero we need or the hero we deserve.

sgbeal··on Show HN: I remade my blog into a Windows 3.1 environment
Somehow disgusting but also lovely :). Now i want one styled after OS/2 Warp for my own site.
sgbeal··on Google announced that Chrome is becoming an agentic workplace platform
> The most consequential new feature is Auto Browse, powered by Gemini 3, which handles multi-step tasks autonomously: scheduling appointments, filling forms, collecting documents, filing expense reports, and managing subscriptions across websites without requiring the user to navigate each step manually.

What could _possibly_ go wrong?

> Google built a double-check safety system that independently reviews the AI’s actions before executing them, with strict boundaries limiting the agent’s access to specific relevant websites and explicit user confirmation required for sensitive actions such as purchases or social media posts.

Like how they double check Workspace accounts, auto-logging them out periodically and returning the user to the login screen saying "prove it's you!", with both the login name and password fields pre-populated? _That_ kind of double-check?

Hasn't Windows' "do you really want to run this .exe file?" dialog long-since taught the world that confirmation fatigue is more a vulnerability than security mechanism?

sgbeal··on Ask HN: Would you take a job programming VMS?
> I frankly don’t care about being on top of tech any more but I’m keen to use my years of experience being productive.

Preach it, brother! :-D

> In this situation would you do it?

FWIW, if it would keep me productive and keep a roof over my head, i'd not at all be averse to working on VMS or a similarly obscure system, provided they didn't require me to know anything about it going in (which would rule me out).

At some point in our lives we have to accept practicality over bling. Let the young'uns fight out the LLM Wars, then walk in (if necessary) once that dust has settled.

sgbeal··on Dutch central bank chooses Lidl for European Cloud
> The fact that the transition to European alternatives does not always go smoothly is evident in Schleswig-Holstein, where the local government is already struggling with the migration from Microsoft to an open-source environment.

It's somewhat disingenuous of them to not link to a citation for that.

sgbeal··on Ask HN: Does Syntax Highlighting Help?
i personally know only one developer (drh of SQLite fame) who does not like/use syntax highlighting. For most of us, it helps us quickly separate the noise from the code. Some brains don't need that, though, or they find it distracting. Like many around here, my intro to coding was back before syntax highlighting was a real thing, but i'd be loathe to go back to monochrome coding on a day-to-day basis.
sgbeal··on Haiku-ARM64-Build
IMHO a working ARM port would be a massive win for the project in terms of drawing in new users and developers.
sgbeal··on Show HN: A fake small claims court for petty complaints
This wins my internet today. Now to go file a claim against my dog for not allowing me the full five seconds of the five-second rule before it ate my dropped food...

Edit: <https://benlirio.com/petty-small-claims/?c=CD58qURM&k=7BW7zg...>

i'm gonna start using this for stress relief.

sgbeal··on Show HN: Dreamtime – A fresh bedtime story for your children every night
It's easy to imagine this being the basis of a role-playing gaming aid, creating party-appropriate encounters/scenarios automatically and illustrating them.
sgbeal··on Louis Zocchi, games industry pioneer, has died
> The internet reports that D100 is impractical to use...

It's a nice novelty but it's not terribly practical. Despite having a d100, 2d10s are invariably more comfortable to use and easier to read. My d100 was purchased back in 1998-ish for its novelty and nostalgia value, not its functional value.

sgbeal··on Louis Zocchi, games industry pioneer, has died
> but wouldn't you need 101 sides to get 0% and 100% for that?

There is no 0% in d100/d-percentile rolls. Every "how to interpret these dice" paragraph in games which use them will tell you to interpret 0-0 on 2d10 as 100, not 0. Or, hypothetically (but i don't recall having ever seen this), they'll have a stated range of 0 to 99 (inclusive). Either way, the numeric range spans precisely 100 digits.

sgbeal··on Louis Zocchi, games industry pioneer, has died
> More than just the d100 he was a pioneer of being very exacting when it came to making polyhedral dice.

Absolutely, but i couldn't fit all of that into the subject line ;) and he's best known for the d100. Many of us remember the articles and ads from the 1980s describing the effort he put into that particular die.

sgbeal··on Retrofitting JIT Compilers into C Interpreters
> Do you always make things about yourself?

That's an abrasive question but i dare say that we all do. It's our only constant point of reference.

> Have you written a parser or interpreter?

i have written many parsers, several parser generators, and a handful of programming languages. This article, however, covers a whole other level, way over my head (or well beyond any of my ambitions, in any case).

Pics or it didn't happen: fossil.wanderinghorse.net/r/cwal

sgbeal··on Cal.com is going closed source
> My strong hunch is they are moving to closed source because it is now trivial to copy a product with AI clean rooms. Which, tbf, is a totally valid reason to move closed source.

Since such "clean room" implementations ostensibly do not see the source, it's arguably irrelevant whether such sources are open are not. Such implementations will happen regardless of whether the sources they're reimplementing are opened or closed.

sgbeal··on Cal.com is going closed source
> Today, we are making the very difficult decision to move to closed source, and there’s one simple reason: security.

(Enter name of large software vendor here) has long-since proven that security through obscurity is not a real thing.

sgbeal··on Retrofitting JIT Compilers into C Interpreters
i tend to think of myself as a computing nerd, but posts like this one make me realize that i don't even rate on the computing nerd scale.
sgbeal··on Ask HN: Experience with switching to ARM to save on server costs?
While i have not had the opportunity to switch my web-facing system to ARM, i would jump at the chance to, if for no other reason than the likely power savings[^1]. i host several Pi (ARM) systems in my home network and have nothing but respect for them. For about six months i rented a RISC-V system from Scaleway, mostly to see how it compared to my beloved pi4 and pi5, but it was so very slow (took 96 hours to run sqlite's core release test suite).

Re. platform portability: i primarily write C code and have had very close to 0 issues regarding software portability (once one finally internalizes that unqualified "char" may be either signed or unsigned, depending on the platform, and codes accordingly, it's smooth sailing). On my home ARM servers i've had zero issues re. availability of tools which i'd expect to have on x86 systems. They "just work".

That is, i guess, to say: don't hesitate to try it out if you have the opportunity to do so.

[^1]: my current system is on loan to me from a generous colleague, so moving to an ARM hoster would be a new cost, which currently rules it out as an option. If i were paying full price for the current x86 box i'd have most definitely already looked for an ARM substitute.

sgbeal··on Supply chain nightmare: How Rust will be attacked and what we can do to mitigate
> So describing the situation as "nobody knows what 17% of the top crates.io packages do" is an overstatement.

Noting that you willfully cut the qualifying "virtually" from that quote, thereby transforming it to over-stated:

> Let me rephrase this, 17% of the most popular Rust packages contain code that virtually nobody knows what it does

sgbeal··on Ask HN: Am I disloyal for not wanting to share my system prompts?
> Am I thinking correctly

No, you're not. Company time + company resources = company property. Company project = company property. No code within any given company belongs to one person, but belongs to (spoiler alert!) the company.

If you want to develop voodoo to make you irreplaceable, do it in the context of your own projects, with your own resources, on your own time.

PS: there may well be legal reason that they require the prompts. e.g. to ensure that you're not injecting materials owned by someone else. They are perfectly justified in demanding access to every byte which goes into their software, documents, infrastructure, etc.

sgbeal··on Show HN: Linear RNN/Reservoir hybrid generative model, one C file (no deps.)
This file _really_ needs a license header. Anyone who's at least marginally license-conscience is not going to touch this without a license declaration in the source file.

Edit: i now see there's a separate LICENSE file in the github repo, but (A) that's not what this post directly links to, nor (B) is there any mention of that license in the source file.

sgbeal··on We simulate target market so you can ask anything ±4% vs. real surveys
> Most approaches in this space generate thousands of individual simulated personas, ask each one your question, and aggregate the answers. We think that's backwards. You're creating artificial noise and then averaging it out. The noise doesn't add information. We skip the personas entirely and estimate the aggregate directly.

Whoever it was who bet me 20 Euros that we already are already living in a dystopia, my opinion to the contrary notwithstanding, i owe you some money.

sgbeal··on Old habits die hard: Microsoft tries to limit our options, this time with AI
> We built our answer into Firefox 148, introducing a centralized AI Controls panel in your browser settings including a single “Block AI Enhancements” switch that turns off every AI feature at once.

TIL. Woot! Sure enough, it's right there in the sidebar - no deep searching of settings needed.

sgbeal··on Ask HN: Would you buy a red-pixel only screen?
> (no blue or green light)

Coincidentally, i saw several headlines yesterday (now long gone from my news feed) claiming that blue light filters are not nearly as effective as once believed. It may be worth researching the current status on that info before committing to a red-only screen. (There's no way i'd buy one, in any case.)

sgbeal··on Can a non – coder build a high tech product?
> But I’m unsure where the ceiling is.

The ceiling is effectively "wherever it first breaks beyond the maintainer's capability of fixing it." Once development can't get past a given problem, it's hit, at least temporarily, the ceiling.

i dare say, with nothing but the intuition gained through decades of practical experience (as opposed to studies and numbers) to back it up, that the ceiling for someone with zero coding experience is not very far from the floor.

Edit:

> Trying to separate hype from reality.

<https://news.ycombinator.com/item?id=47701971> just showed up in the feed and seems particularly applicable here.

One relevant snippet:

> Real products need experts and it is of extreme difficulty to become such an expert if you don’t possess the expertise from either your own effort or watching more skilled colleagues.

sgbeal··on LittleSnitch for Linux
> Microsoft are certainly doing their best to push people away right now

According to a speculative blog post by Eric S. Raymond in September 2020, Microsoft is literally moving towards replacing Windows' internals with Linux. Unfortunately, that post is now unreachable, but searching for "eric raymond article about windows being replaced with a linux kernel" finds many third-party references to it and summaries of it.

sgbeal··on Ask HN: We got 100 stars. A weekend project got 12k. What are we missing?
> We don't care about stars for vanity, more because star velocity is the primary signal GitHub uses for trending, which would drive discovery for us.

Spoken like a marketer, as opposed to a developer ;).

> I mean do you have any other better recommendations for reach?

Unfortunately no. All of my code gets posted on my own site (not github) and is left there to die, with no real concern for whether other folks make use of it. That's not a popular approach, nor does it lead to any popularity for me or my projects, so is not necessarily a model for others to follow.

> I just want to effectively convey what my product does to the right audience.

_That_ is entirely up to your docs, not the hosting platform. What you're asking about is more a function of (A) the hosting platform and (B) the various channels which drive people to that platform. i'm roughly 0% qualified to suggest any approaches to that than just "throw it over the wall" :/.

← PreviousPage 2 of 24Next →