HNHacker News
TopNewBestAskShowJobs

striking

12,250 karma · joined February 22, 2014

h@robertstolarz.fastmail.com (no ads, please) https://github.com/robstolarz/

topcolor: 77dd44

[ my public key: https://keybase.io/striking; my proof: https://keybase.io/striking/sigs/QKCbMGAwCajv-YwVw78Vp00WB1YoOhCJyxc_nB-zW3U ]

I speak for the trees, for they have no tongues (unlike any of my employers; be they past, present, or future; for they have legal teams)

submissionscomments
striking··on Green card seekers must leave U.S. to apply, Trump administration says
I'm hoping you just misread my comment... Otherwise I've got a little more confidence about education in the US being a gap that needs filling :)
striking··on Green card seekers must leave U.S. to apply, Trump administration says
I'm not against tightening up the constraints to prevent what becomes indentured servitude dressed up in red, white, and blue. That doesn't help the American people or those who carry within them the American dream. But fixing that is not everyone's actual intent, and that does really bother me.
striking··on Green card seekers must leave U.S. to apply, Trump administration says
Who does the farming? Who does the cleaning? Who builds the buildings? Who are the line cooks? That should be obvious.

But it should be just as obvious that there are plenty of immigrants who are also necessary because they bring new ideas, their education, their incredible work ethic, to fill in the gaps that the US clearly has.

There is one thing that unites all of us (and I do mean us, as I am one of them). We all dream of a society where our hard work can become prosperity for ourselves and for everyone else, a plot of fertile soil that is worth sowing. We all come here with a dream.

And I personally don't mind so much that I'm uplifting people that don't agree with my existence. I just wish that they could stay out of our way so we could all benefit.

striking··on Minnesota becomes first state to ban prediction markets
I don't think that article supports your claim that bad bets in political markets aren't causing measurable increases in bankruptcy and domestic violence rates. It only tells us about online sportsbetting, and it was written in 2024 before prediction markets really took off. If anything, it provides evidence weakly in favor of the argument that bad bets in political markets would negatively affect the bettors.
striking··on Garry Tan, the CEO of YC, accused me of unethical reporting
User flags can weigh stories down. If you'd prefer a different sort, try https://news.ycombinator.com/lists ("active" is popular, though not my taste really)
striking··on Show HN: Statewright – Visual state machines that make AI agents reliable
The not-quite-Apache-2 "Fair Source License, Version 1.1, ALv2 Future License" (https://github.com/getsentry/fsl.software/blob/main/FSL-1.1-...) includes the Apache 2 patent grant. That grants you conditional permission to use the software in ways that would, without the grant, infringe upon their patent. One of the conditions is that you may not make a claim against any party that the software infringes upon any patent, or else your patent grant is terminated.

Unfortunately, the license actually in the repo is not even a not-quite-Apache-2 license. It doesn't appear to be FSL-1.1-ALv2 at all: https://github.com/statewright/statewright/blob/main/plugins.... This notably does not include the patent grant, which makes it unclear whether use of the software would infringe upon the patent.

striking··on I'm going back to writing code by hand
I'm currently working on the discovery phase of a larger refactor and have pretty quickly realized that AI can actually often be pretty useless even if you've encoded the rules in an unambiguous, programmatic way.

For example, consider a lint rule that bans Kysely queries on certain tables from existing outside of a specific folder. You'd write a rule like this in an effort to pull reads and writes on a certain domain into one place, hoping you can just hand the lint violations to your AI agent and it would split your queries into service calls as needed.

And at first, it will appear to have Just Worked™. You are feeling the AGI. Right up until you start to review the output carefully. Because there are now little discrepancies in the new queries written (like not distinguishing between calls to the primary vs. the replica, missing the point of a certain LIMIT or ORDER BY clause, failing to appropriately rewrite a condition or SELECT, etc.) You run a few more reviewer agent passes over it, but realize your efforts are entirely in vain... because even if the reviewer agent fixes 10 or 20 or 30 of the issues, you can still never fully trust the output.

As someone with experience in doing this kind of thing before AI, I went back to doing it the old way: using a codemod to rewrite the code automatically using a series of rules. AI can write the codemod, AI can help me evaluate the results, but actually having it apply all of the few hundred changes automatically led to a lack of my ability to trust the output. And I suspect that will continue to be true for some time.

This industry needs a "verification layer" that, as far as I know, it does not have yet. Some part of me hopes that someone will reply to this comment with a counterexample, because I could sorely use one.

striking··on Let’s Encrypt: Stopping Issuance for Potential Incident – Resolved
You have to opt in, and they are honest about the tradeoffs when discussing them:

> Short-lived certificates are opt-in and we have no plan to make them the default at this time. Subscribers that have fully automated their renewal process should be able to switch to short-lived certificates easily if they wish, but we understand that not everyone is in that position and generally comfortable with this significantly shorter lifetime. We hope that over time everyone moves to automated solutions and we can demonstrate that short-lived certificates work well.

https://letsencrypt.org/2026/01/15/6day-and-ip-general-avail...

striking··on GNU IFUNC is the real culprit behind CVE-2024-3094
Okay. You could see it that way. Or you could read what the author wrote about who is to blame:

> No one person or team really made a mistake here, but with the benefit of hindsight it's clear the attackers perceived that the left hand of Debian/Fedora SSH did not know what the right hand of xz-utils was doing.

with OpenBSD not even being mentioned here

striking··on GNU IFUNC is the real culprit behind CVE-2024-3094
The OP agrees with you... if you continue reading, they wrote

> These patches never went into Portable OpenSSH, because the Portable OpenSSH folks were ["not interested in taking a dependency on libsystemd"](link). And they never went into upstream OpenSSH, because OpenBSD doesn't have any need to support SystemD.

The language may have been harsher than it needed to and therefore could be more easily misunderstood, but I believe you are actually in agreement with them

striking··on I switched from Mac to a Lenovo Chromebook
Yeah, it's definitely possible. https://github.com/altreact/archbk shows how you might do this end to end on an older machine and this thread https://archlinuxarm.org/forum/viewtopic.php?f=65&t=17308 shows some progress in that direction on this particular device.

The real question is if you have enough patience to power through making it work.

striking··on DeepSeek V4 Pro at 75% off until 31 May
It's unlikely that you're special enough that someone will genuinely look through the massive amount of data produced by this system in order to target You Specifically. If you are that special you can just use another provider.

From this line of reasoning, my guess is that the huge discount is not so much intended to sell the data collection system as much as it is intended to sell the model. If you had to wring a geopolitical consequence from this, it would be that the US labs producing models would be impacted by a vastly less expensive competitor.

striking··on DeepClaude – Claude Code agent loop with DeepSeek V4 Pro
In those cases, OpenRouter just chooses providers that agree not to train / offer ZDR. Which sometimes means you start off without access to the model until some other providers start offering it.
striking··on Let's Buy Spirit Air
Listen, I'm the type of fella who'd gladly take the Amtrak from the East Bay to Portland, 18 hours each way, and I'm telling you even I'd do so only as a novelty. If I actually had somewhere to be, spending basically an entire day on a train would be a non-starter. And that's just on the same coast! If I had to take the Amtrak back east to see my family for the holidays I would probably just not go. My travel to the other coast (not to mention back to the country where I was born, an additional ocean's worth of distance) would only be worth the trip for like a life change or a death in the family.

I'm clearly not the only one who thinks so, judging by both Amtrak ridership statistics and the cost ineffective nature of my attempts to travel on it.

striking··on Let's Buy Spirit Air
Because the amount anyone would actually pay is substantially below cost for most routes, but it's still a service that many people depend on (either directly or by the indirect economic impact of travel). It's a genuine force multiplier that is unaffordable without being subsidized; making it a utility would just shift the subsidy from credit card points programs to the government.
striking··on Your phone is about to stop being yours
And I kind of buy the intent behind the cooling-off period anyway. IIRC it's to prevent people from being pressured into installing apps by scammers that could then take their phones hostage
striking··on The West forgot how to make things, now it’s forgetting how to code
Which country experiencing communism at any point in time didn't export any products?
striking··on Firefox Has Integrated Brave's Adblock Engine
Try Zen! Firefox fork with Arc-like UX.
striking··on Trusted access for the next era of cyber defense
A 5.4 spin with slightly different guardrails is not "access to the latest models". We know this to be true from the article because they have a section entitled "Looking ahead to our upcoming model release and beyond". I wonder if they didn't just feel like they were caught out by Mythos.
striking··on Order Granting Preliminary Injunction – Anthropic vs. U.S. Department of War [pdf]
I would love to hear your perspective of how the label "supply chain risk" and its definition aren't in accordance with the concept of being branded an enemy of the state. I'll reproduce the definition below:

> “Supply chain risk” means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252). (https://www.acquisition.gov/dfars/subpart-239.73-requirement...)

There's a little bit of leeway here, but this definition means either the company is an adversary (or an extension of one, e.g. Huawei/the CCP) or is under threat of being compromised by an adversary.

So which is Anthropic? Well, neither: the government's court filings and public comments in the media claim that Anthropic has an "adversarial posture". They want to simultaneously get away with bucketing Anthropic under the statute for adversaries, but without calling Anthropic an adversary directly in a court of law. They want to apply the statute without needing to follow the actual definition of an adversary.

From a CNBC interview:

> We can't have a company that has a different policy preference that is baked into the model through its constitution, its soul, its policy preferences, pollute the supply chain so our warfighters are getting ineffective weapons, ineffective body armor, ineffective protection. That's really where the supply chain risk designation came from. (https://www.cnbc.com/2026/03/12/anthropic-claude-emil-michae...)

That's why the judge rightly called this situation Orwellian: we're looking at linguistic sleight of hand designed to allow the government to turn what is a simple contract dispute into a company-threatening classification that threatens to uproot them entirely from any company that does business with the most powerful entity in the United States. Because Anthropic doesn't want to do the government's bidding despite being allowed to as a matter of freedom of speech, they are being threatened with a punishment that goes beyond just not being able to contract directly with the government. And that's not fair.

I would also love to understand why you keep going back to the literal events of the book. You don't need to be locked in a room and forced to claim that 2+2=5 for your situation to be Orwellian.

striking··on Order Granting Preliminary Injunction – Anthropic vs. U.S. Department of War [pdf]
There's no need to read it that literally, we're not making Borges' map here. 1984 is both about the visceral horror of the authoritarian state and the existential horror of being unable to fight an opponent who controls the very language you speak and the concept of truth. The former grounds the latter, turning an interesting philosophical treatise that might otherwise not land with readers into an approachable work of fiction.
striking··on Order Granting Preliminary Injunction – Anthropic vs. U.S. Department of War [pdf]
Being marked an enemy of the state for disagreeing with the state to me sounds like thoughtcrime, plain and simple. How much more Orwellian can you get?
striking··on Passengers who refuse to use headphones can now be kicked off United flights
Sure, but also you might be on a city bus for... half an hour? It's not pleasant to have someone blast noise but it's nothing like a multi-hour flight. Why bother?
striking··on An update on Steam / GOG changes for OpenTTD
The bundling might feel necessary from Atari's side because OpenTTD would compete with Atari's re-release on platforms like Steam and GoG (unlike on OpenTTD's website, where you're already at the end of the funnel for OpenTTD specifically and therefore Atari doesn't feel like they're losing a sale).
striking··on Gemini 3.1 Pro
> Today, we’re releasing a research preview of GPT‑5.3‑Codex‑Spark, a smaller version of GPT‑5.3‑Codex, and our first model designed for real-time coding.

from https://openai.com/index/introducing-gpt-5-3-codex-spark/, emphasis mine

striking··on The Singularity will occur on a Tuesday
I don't have much more to add to the sibling comment other than the fact that the transcript reads

> When you rotate ")" counterclockwise 90°, it becomes a wide, upward-opening arc — like ⌣.

but I'm pretty sure that's what you get if you rotate it clockwise.

striking··on The Singularity will occur on a Tuesday
It's pattern matching, likely from typography texts and descriptions of umbrellas. My understanding is that the model can attempt some permutations in its thinking and eventually a permutation's tokens catch enough attention to attempt to solve, and that once it is attending to "everyday object", "arc", and "hook", it will reply with "umbrella".

Why am I confident that it's not actually doing spatial reasoning? At least in the case of Claude Opus 4.6, it also confidently replies "umbrella" even when you tell it to put the parenthesis under the J, with a handy diagram clearly proving itself wrong: https://claude.ai/share/497ad081-c73f-44d7-96db-cec33e6c0ae3 . Here's me specifically asking for the three key points above: https://claude.ai/share/b529f15b-0dfe-4662-9f18-97363f7971d1

I feel like I have a pretty good intuition of what's happening here based on my understanding of the underlying mathematical mechanics.

Edit: I poked at it a little longer and I was able to get some more specific matches to source material binding the concept of umbrellas being drawn using the letter J: https://claude.ai/share/f8bb90c3-b1a6-4d82-a8ba-2b8da769241e

striking··on The Singularity will occur on a Tuesday
Even if interpretability of specific models or features within them is an open area of research, the mechanics of how LLMs work to produce results are observable and well-understood, and methods to understand their fundamental limitations are pretty solid these days as well.

Is there anything to be gained from following a line of reasoning that basically says LLMs are incomprehensible, full stop?

striking··on Rust Coreutils Continues Working Toward 100% GNU Compatibility
My guess is that the submitter is automated. It's not the first time their post title has been truncated by the text limit without their editing it.
striking··on Nintendo DS code editor and scriptable game engine
A DS set to Auto mode will boot to the cartridge (and you can reflash the firmware to skip the health and safety screen). From there the OS is replaced with whatever is on the cart. A flashcart with the right shell will boot right into whatever app you want (and you can soft reset the console with a key combination to switch apps).

3DSes require a little more work and have a longer boot chain, but it's been thoroughly broken all the way to the bootstrapping process so you can use whichever firmware version and whatever patches you like with enough effort.

← PreviousPage 4 of 34Next →