HNHacker News
TopNewBestAskShowJobs

shelled

262 karma · joined December 28, 2021

submissionscomments
shelled··on Gravity seems holographic. What does that mean for reality?
Imagine we figure out that we are part of a simulation and that that simulation is nobody's, it just happened and keeps on happening, like the universe just happened and keeps on happening if we keep going back (or is it forth?) in time, and that we can't do anything to change that simulation. Would we lose all the purpose and meaning of life? Or will evolution, now simulated evolution, still manage to collectively pivot us into accepting that as the creation and move on? If we become capable of altering minds enough, this can be a very interesting and cruel experiment on human beings - a meeting of Westworld and MKUltra.
shelled··on Claude Opus 5.5
This is very helpful. Thank you!
shelled··on Claude Opus 5.5
> Cost-wise, a $200 subscription wasn’t enough to get through 20-30 tasks while $30 of DeepSeek was

Thank you. This alone helps! I think I should jump into it once and try it all out while I still have GLM access at old prices as a backup.

shelled··on Claude Opus 5.5
How much do you get out of these models for same amount (say $20 sub for claude/codex/zai-glm) - the equivalent amount of tokens? Also is deepseek as good as glm5.3? (if we don't compare it with frontier models from USA)
shelled··on Claude Opus 5.5
Hey. I am on a GLM Coding plan subscription (old price; their base coding plan) right now and share the key (this will go away soon).

I was thinking of going with a subscription of Claude or Codex. The reason (at least that's what I am assuming): with OpenRouter or any PAYG per token setup there will be the anxiety of using up all the tokens in days or maybe 1-2 weeks instead of a month (say I set myself a budget of 15-20 USD per month, average equivalent of a usual subscription price).

Now I don't really want the top-notch models for the coding work I do.

So how much worth of "work/tokens" will I reasonably get for ≈$20 USD if I use it a lot? How much does that equal to - or is equivalent to, say in the world of subscription based Claude, Codex, or even GLM (with their 5-hour and all those cooldowns/limits)?

I am looking for a mental model/framework to visualise this. Can you (or anyone else reading this) please point me to a source where I can get some idea about this? I know I can just add $5 on OpenRouter and try to test. But I don't really know what/how to test these spends. I also want to understand how all this works. (I am new to agentic/llm world/coding, 2-3 months, after a career break of ~3 years, that too after working for more than a decade. I know, not at all good timing!)

shelled··on There's no point at which turning your brain off will work
That temptation is akin to giving in to maladaptive (day)dreaming. The problem is the dreaming, the noticing, the getting annoyed, and the feeling drained - all of these are happening at one place - being done by one entity - your brain. So how to train it to not to do that? Well, again, that same brain has to do it. What I am saying here is - our brains are extremely good at getting "used to". Because it "feels good" to the brain - at least in that instant. So any work that's happening on its own, feels good for most people. More the time passed in that "got/getting used to" state unchecked, more difficult it is to try and bring it back to not getting used to. Or control it, in an attempt to strike a fine balance.
shelled··on Everyone should slow down AI development except for me
It's weirdly being dreamed/expected as some sort of alignment will be achieved. Or that that's the intention. This is just like the nuclear race that started in the 40s and 50s and prevention is ongoing! It's not about safety and danger and I am not saying whether more open nuclear access would have been safer (I don't think so). It's about being the only select few to possess and control this, possibly - very soon — unfathomably, dangerous and unsafe technology frontier. Few companies of a single country, or a few companies from a very few countries. Keeping everyone else decisively out. That's what it is about.

What's worse - in this case the "everyone else" is not just the every other nation or company, but pretty much literally everyone else.

shelled··on Ask HN: What default model do you use and why?
ZAI/GLM because a friend has generously shared an API key. They have other subscriptions and also a lot more from their employer.

A day ago I activated Google AI Pro free via Google's tie-up with a local company (I do pay for this company's product though and it's anything but costly). Now I will use this too.

No other reasons to pick these, or not picking anything else.

shelled··on Desert Ant Labs: local, fast models that run on device
I recently had to use dictation for a few weeks and I was pleasantly surprised that many of the apps (in use/vogue) did support models on my 2021 16GB M1 Pro mac (many of those even supported connecting to a remote or local model endpoint) and at the same time for any worthwhile STT enhancement the model size was hitting higher I would have comfortably wanted. Even though I don't necessarily need dictation any more I intend to keep a custom fully offline setup and try these models (not sure they support live/streaming STT).

If any of you are interested there are apps like https://github.com/altic-dev/FluidVoice (this one's a great app) and this https://sam-pop.github.io/WhisperDictation. The latter, even though it has just 7 stars right now, seems to be more "intuitive". I just hope they expose a way to "connect" to available models on the machine or remotely)

shelled··on We have a year to fix security everywhere
I see a lot of people focused on servers and production environments, and of course that's needed, because that's business after all — but the personal computer seems to be absent from this discourse. Not everyone can buy a spare mac studio, and they might still need to install these tools on their personal computing devices, like their personal/home laptops. At that point, it's not even about whether a Claude Code, an OpenCode, or a Pi will steal/sniff personal data, but whether it can — though I think saying "it's a matter of 'when'" might be hyperbole. As of now, it's just: keep giving access and permissions or struggle while working, or create another user, or use Docker, run inside sandbox-exec, a VM, etc. As an end user, I am really scared. Someone who has been very disciplined and vehemently privacy- and security-conscious feels the ground below has just shifted.

OEM/OSes don't seem to have woken up to it yet. A mild proof is Apple's own special folder access reporting. When you go to Privacy & Security > Files & Folders, for a certain app, "Full Disk Access" is shown greyed out and mentioned in both cases — whether you had given Full Disk Access to that app or not. This directory-level permission UX is itself broken — there's Full Disk Access, and there's Files & Folders, and Full Disk Access gets shown in Files & Folders as well. This is, for lack of a better word, such an undesirable mess.

As of now I am debating between: creating a new user and just move everything work/learning to that user. Or just run all of it inside sandbox-exec (and maybe even block it from the shell if it tries to run outside it). Or use a tool that makes the latter easier and better. I even came across such a tool here on hn few weeks ago. agent-safehouse, yet to try it.

shelled··on .name Termination
I understood by just looking at the title and after reading what is going on I am still concerned and not for some .name domains but I've .net and .com domains.

The main issue here is the way VeriSign and ICANN are operating. Unchecked, hostile, and without consequences (even the ombudsman okay the move). Someone might come along and say but you can always fight in the court - and that's the problem! Some company or entity claims one of those .net/.com domains I "use" and just gets us suspended and handed over, as someone not living in the USA I will literally be out of any option. This "then go to the court" is a very dangerous setting. We all know this but this squarely rigged to be in favour of the offenders with means and power.

shelled··on LLMs: Intelligence vs. Cost
Is there a case in which a heavy agentic coding user of mid or mid++ tier (remotely hosted) models is better off using PAYG/API pricing than just getting a subscription? (Assuming no easy access to high end local hardware and I've deliberately left the top tier/cutting edge models out becau).
shelled··on I were 17, I'd learn how to build LLMs from scratch
I have also noticed a general drop in fawning over and deification of 'made a billion, must be a visionary' figures, and a receding tolerance for every sundry kind of hot take and proclamation. Mustn't be related.
shelled··on Google has acquired the data of failed US airline Spirit
> A representative from that airline was asking internally if they could put me on the no-fly list.

These are the kinds of scary scenarios that people should fight and push back on opaque, unaccountable laws that other people and organisations in power try to enact in the name of safety and security, and we need to collectively fight back when someone is charged, or worse "taken away", without due process and visibility.

shelled··on An update on leaving Gmail for Fastmail
This is basically what my take has been after chasing everything else for way too long. Though I've not moved back and Gmail honestly isn't something I can now move back to (and no tracking/etc are not the reason). I just wrote a too long comment and I realise now most of that you've said in your short comment.

Email for me is just a communication tool that the world still uses. Nothing else.

shelled··on An update on leaving Gmail for Fastmail
Having started down this path of non-big-corp hosted email and my own personal domain (which is definitely not self-hosting, though I'd never want that inflicted upon me) almost a decade ago, I won't say it's been a rabbit hole. But there have been some learnings over the years — realisations, rather. The biggest: I went overboard with everything around moving my email away from Gmail. Almost like what I did with seedboxes over the years, until I realised I didn't need most of what a seedbox offers, and that I didn't need a seedbox in the first place.

Whenever this discussion comes up here, or say on Reddit, the focus immediately moves to privacy, anonymity, tracking. Those are valid points, no doubt. What takes a back seat, I suspect, are aspects like reliability and some sort of accountable customer support — and no, a smaller company doesn't need an army of support agents, just a few people and an intention to help and solve problems, delays being okay. Many utterly irresponsible hosted email providers get a pass just because they posture with an activist flag. The whole virtue signalling in this sub-industry muddles things.

Some are worse. Some deny you basic email access in the name of things like e2ee. Now e2ee is a fine idea, but enforcing it unilaterally — and yet not really enforcing it, because let's face it, you can't until you "move" your ecosystem, the way Signal has been "moving" it. Locked to the app, locked to the web app, yet your emails flow to other systems and addresses that aren't e2ee (as they should!). You just can't use IMAP, among other things. This has become such a toxic topic on certain forums that I start wondering if maybe I'm the one holding it wrong.

Another observation: bundling things that aren't email. This is another contentious topic. I wish there were more mainstream, custom-domain-hosted email providers that just did email, nothing else. I first started using disposable email designed to route to my domain via my mail host (a German one). It was as convoluted as it gets, and still is. Then came Apple's HME, with limitations I wouldn't wish on an enemy. Finally settled on SimpleLogin. Not the best, but what I like is that it gets out of the way — I can receive emails on those addresses and send from them easily. It's also a separate service, not hooked to my mail host, and I wouldn't want that now.

What would I do if I had to go back to when I was starting?

1. I wouldn't look for a "private" email provider — just get my own domain (which I did) and sign up with a better-priced, responsible, email-only provider (preferably something larger).

2. Never use the free email that comes with the mail host account.

3. Let go of privacy and tracking on email. It's almost painful to say, but I'm tired of that part.

And if Gmail hadn't done idiotic things like forcing "folders" on my account with no way to change or delete them (Important, and whatnot), I might have just stayed with them. At least my emails would have been delivered — unlike with my current host, which doesn't do "emailing" up to standard. For heaven's sake, just let my email through, and let senders get through to me as long as their ID is verified and they're not on any spam list.

Hell, I am thinking of moving a domain of mine to Zoho. A company I'd have never imagined thinking of in the same breath and it has not become "better" somehow. But here we go, a decade later. This is just a rant I guess. But I am really exhausted and yes switch mail providers even with your own domain is daunting! The apprehension of downtime, fear of losing emails, something breaking etc are just too much. But at least there's a possibility.

tl;dr: If I do it over and Gmail stayed what it was back then, I'd just go back to them, just with "my own domain." Not that Google got better; just shows how disillusioned I am with the personal-domain-hosting hype.

My own domain, nothing else. Not the rest of what I've done chasing for "this kind of" mail hosting.

shelled··on The other Sean Byrne doesn't exist
This scares me! Denial of service (in some cases you may not even have an alternative), in some cases custody, et cetera and that too based on a false positive or a flimsy match. And no one doubles checks it, no one bothers to make sure, and they are allowed to do that! All this is actual legal and no one pays for it once it's found out, and even if you have suffered. None.

And heaven's forbid if your actual ID and references (i.e you) have ended up in such places (or such list/s) by mistake or malice.

shelled··on As AI eats the web, the internet’s collective memory is disappearing
Very soon, everything easily accessible on the Internet will be a never-ending loop of AI slop. Will this push us back to analogue things? Not in an apocalyptic scenario, but in general, and by analogue, I don't mean no use of computers but use of computing with a firm and predictable human touch and control.

Will there be venues left (largely) unencumbered by AI to even turn analogue? The top-down control of our industries, financial systems, education, etc by a few mega corporations and fewer mega rich people, who also have vested interests in the advent of AI as AI corps are trying to be, means there's nothing left where AI is not inserted in every vein and nerve and nerve centre.

It is as if a few people in the world are trying to turn this world into something Frankensteinian because they think that then they will get the chance to be the only ones to control this Frankensteinian. They might as well succeed. To what end? I do not believe even they know that. Blindness of greed.

shelled··on Auto mode is now the default in Claude Code
Hey, thank you. Looks like a tool easy enough to use and start with the agentic world in a sandboxed and much safer manner.

Just clarifying a bit (haven't gone through details yet):

1. So, a harness gets installed within the bounds of this script via agent-safehouse? (I doubt this is the case)

2. Or they are installed as a normal app, but when I run them in the terminal within the bounds of "safehouse <harness>" (saw this) they are bound by the rules I set, right?

I feel it's the latter and I think it's good enough for the time being.

.....

Mac offers some controls at least for personal files and "Full Disk Access" etc. But it's so badly implemented and poorly shown that it's confusing.

Like I can see in "Privacy & Security > Full Disk Access" OpenCode is listed and and "Full Disk Access" toggled off. (I anyway remove OpenCode from here completely by the "-" button after selecting it, just to make sure).

Then I go back a step and in "Privacy & Security > Files & Folders > OpenCode" has "Full Disk Access" is listed there. Strange!

shelled··on Auto mode is now the default in Claude Code
What is an easy way to achieve this on a Mac?

tl;dr: if I run claude/harness inside "code" at "~/<some path>/work/code", it would be great if the harness can't even see "code" is inside "work" (and even I can't make it know that by some quick "Yes(y)")

I want something like: claude/opencode/pi/etc has no existence or capacity outside a file access boundary, say a given folder that (e.g.) lies here "~/<some path>/code". Even if I want, I can't run claude outside it, because it isn't installed outside it. Even if Claude wants it can't read/write/execute/install anything outside it.

Basically I want the harness(es) and my code folder(s) sandboxed [0] inside just one folder and below it in folder hierarchy at least for file access limitations.

Will this pose the challenge of using the system wide cli tools like ls, cd, git et cetera? If it gets a handle on those tools outside that sandboxed folder then pretty much can it execute it in any other folder? So should those tools also be part of that container?

I guess something like docker does that, but do I necessarily need a docker like app/tool? It will use a lot of system resources on its own. A different mac login won't be great either.

I do not want to use claude's /sandbox (or something like this), that will defeat the purpose. Because it's not about "it won't", but because "it can't".

https://github.com/apple/containerization doesn't sound like what I am looking for. So is docker, lima etc are my only options? Not to mention I will lose access to a lot of cli tools I use on mac.

shelled··on Discovery Loop
Agents have agency.
shelled··on I Have Thoughts on the iPhone Air
I will never stop yearning for iPhone Mini phone/screen sizes. But I've stopped asking for it because that would be pointless at this point.
shelled··on Delayed Gratification – Proud to Be 'Last to Breaking News'
I cancelled the subscription because I just couldn't connect its stories ever. such was their choices. Not just the subjects and how the stories were from physically so far that I felt it was an exercise in compulsion on my part. I wasn't a fan of the writing style either. Besides, at some point it started to feel like news and journalism were not centre stage, being "delayed" and different were.
shelled··on Tell HN: Our paid Claude AI subscription unavailable >1 week and no support
My account was wrongly billed as I had cancelled the subscription in time. So I reached out to support to get it rectified. It’s a bot called Fin. Fin became judge, jury, and executioner and closed my attempts to raise the issue with an automated response that the charge was good and I couldn’t escalate (tried multiple times). Wrote to two of their support emails, both attempts met the same fate, those were also handled by bots. Absolutely no way of reaching a human being at the paper trillion dollar company.

When I discussed this with a friend he suggested I should try AI coding plans via third party vendors (who at least offer bare minimum human support even with considerable delay) and also shared his personal grandfathered GLM API key (he’s not using that; and the plan is good for few more months; already paid). I really can’t complain. I have noticed zero quality or productivity dip. Even response time is very close to Claude, but less. I can live with that.

Anyone suggesting we should ask the AI to dig deeper, they haven’t met Fin.

shelled··on Stripe in talks to buy OpenRouter for about $10B
Such great time to be pets.ai.

Just a tangential thought from our times.

shelled··on Back to Kagi
Kagi, like DDG and a few others around the same/similar ideas, doesn't work as "fully" for certain geographies (I assume many) as fully and wholesomely (as I gather from such posts and comments) it works for certain other geographies (again, I assume not many; for obvious reasons). I gave it a shot, trial and then the Starter pack. In some cases, it turned out to be almost completely futile. Anyway, just like Google Maps, nothing even comes close, for coverage and usability of Internet search, to Google Search for my geography (yes, I asked others as well who tried), sadly.

Since then I've learnt to live with `udm=14` and some occasional/rare uBlock Origin tweaks (earlier I used an about:config setting, which might still work, for anyone looking) - in Firefox.

On Safari (which is kind of my secondary phone browser), I still keep it as it is, and I use it to actually use the quick AI feature when I might want it, which isn't often.

shelled··on Five US tech giants' hidden debts soar to $1.65T on opaque AI funding
> This usually means all of us are on the hook.

And since we are talking about USD (specifically "of" USA), it also means globally a hell lot more of "all of us" are on the hook than we would have been involved (even remotely) had (or would) this endeavour ever ended up in some sort of general success.

I don't know whether it'd be "tails I win, heads you lose" or "I reap the profits alone, you reap the losses alone". Maybe the latter and it becomes magnitudes more interesting when it expands (or rather engulfs) beyond the boundaries of the great nation.

shelled··on How to read more books
For me, reading books depends a lot on the space - the place, the setting. I can't read anywhere and everywhere.

I can regularly work in noisy places. I can even routinely sleep in such places. At least after adjusting for a while, or when I am too tired, or travelling. But I cannot routinely read if the place isn't calm and doesn't feel cosy. I say "routinely" because when I am travelling, I can read just fine even at the bus and train stations (both are mad noisy where I live) - the brain somehow knows or adjusts. But I just can't in a house that is near a traffic hell, or above a noisy market. I just can't read there. That's one of the reasons I my house hunts become so daunting and stressful in this godforsaken city where "older bachelors" are double-whammied.

Train journeys are very productive for my reading and sleeping.

And as the author notes, abandoning books helped my reading. Though most often I don't truly dump them - I skip-read them, I speed-read them, if I am sure I may never pick them again. Then there are books that I may find they are not worth "my" time (might be great books to others), I don't even bother to speed/skip read them. I just let go of them.

shelled··on Show HN: Ember, a native iOS Hacker News reader I built around accessibility
HN is quite nice inside a desktop browser, but mobile browsers are a different story altogether. But even there, it fares slightly better than old.reddit.com. So looks like I should dust off that xcode.
shelled··on If Claude Fable stops helping you, you'll never know
I was doing something with Claude today and it just told me "By the way Cowork is a separate desktop app" and it proceeded to explain to me how it is not part of the standard Claude desktop app and how the plugin I am exploring might not be a great fit for me. I actually ended up having to search around and see whether things had changed that much in last 24 hours. It hadn't.

It beats me how can their tool hallucinate at this level, that close to home? Do they really weaken their tools, do they perform a lot of painting job on their tools to hide the cracks? I am speaking generally of today's frontier AI scenery, not just Fable or Mythos or Cowork.

Page 1 of 4Next →