HNHacker News
TopNewBestAskShowJobs

superasn

9,361 karma · joined June 2, 2011

All we had to do was follow the damn train cj

sanchitbh # gmail

submissionscomments
superasn··on Maximizing the value of your Claude Code sessions
Recently I came across the /handoff skill, which I've been using a lot. I find it much better than /compact.

Basically:

- /handoff file creates a short document with the important context from your current session and maybe next steps as checklist.

- You can then start a fresh session with /continue file

- You can also hand the work from Claude to ChatGPT, or the other way around. Very useful at time of session limits.

- Plus your handoff files becomes a useful piece of project memory that you can reference later.

I find this much more useful than /compact or /clear because the context is saved in something portable instead of being tied to one session and i've seen better results doing this every 20 messages or so than running long sessions.

superasn··on Marfa Public Radio Puts You to Sleep
One trick that makes me sleepy really fast: After I close my eyes, I imagine someone throwing black paint on them. The first coat is kinda gray and has lots of blob and not fully black. Then another coat. And another. Each one gets darker until it's just pure black and I'm usually asleep by then.

For some reason, my brain follows it, and I fall asleep much faster. It works way better for me than box breathing or most other sleep tricks I've seen. Sharing in case someone else finds this useful.

superasn··on DeepSeek V4: The Open-Source Model Frontier Labs Feared
I think that is sale pricing at 75% discount till end of May only.
superasn··on Show HN: TikTok but for scientific papers
This is against the Show HN rules from what i can see:

> If your work isn't ready for users to try out, please don't do a Show HN. Once it's ready, come back and do it then. Don't post landing pages or fundraisers.

https://news.ycombinator.com/showhn.html

superasn··on CPanel and WHM Authentication Bypass – CVE-2026-41940
Oh you're right to push back. I just love saying this nowadays :P Anyway, I haven't used these languages in a long time but the code looked like php to me, though I did notice the .pm file extension and wondered where I've seen it before.
superasn··on CPanel and WHM Authentication Bypass – CVE-2026-41940
Everytime I read one of these it always boils down to the same thing..Don't solve solved problems. And the best code in this case is code you didn't write as PHP's session handler is battle-tested but every line you write to roll your own is a line you have to secure, maintain, and eventually patch at 2am when someone finds the bug.

Session handling, auth, crypto, password hashing etc - all these are the exact areas where you should be the most allergic to rolling your own. Not because you're not smart enough, but because a simple bug like sanitizing in the wrong place and the failure is catastrophic like in this instance.

Use boring, proven, widely-audited solutions. Save your creativity for the actual problem you're solving.

superasn··on You can now play Grand Theft Auto Vice City in the browser
This works amazing well. I started playing and just 5 minutes in, I was completely hooked and ended up playing for almost half hour.

It could be that I'm a bit old-school, but this really seemed to confirm that ready to play fun gameplay trumps realistic graphics any day!

superasn··on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack
This is a pretty scary exploit, considering how easily it could be abused.

Imagine just one link in a tweet, support ticket, or email: https://discord.com/_mintlify/static/evil/exploit.svg. If you click it, JavaScript runs on the discord.com origin.

Here's what could happen:

- Your Discord session cookies and token could be stolen, leading to a complete account takeover.

- read/write your developer applications & webhooks, allowing them to add or modify bots, reset secrets, and push malicious updates to millions.

- access any Discord API endpoint as you, meaning they could join or delete servers, DM friends, or even buy Nitro with your saved payment info.

- maybe even harvest OAuth tokens from sites that use "Login with Disord."

Given the potential damage, the $4,000 bounty feels like a slap in the face.

edit: just noticed how HN just turned this into a clickable link - this makes it even scarier!

superasn··on Show HN: Helium Browser for Android with extensions support, based on Vanadium
Great job on this release! I've been waiting for something like it since my favorite browser, Kiwi, stopped getting updates.

Without updates, many sites will likely stop working with it soon.

Kiwi had some great features, like disabling AMP mode, rearranging the Chrome Store for mobile, and customizable tab layouts, etc. These features might interest others as well.

superasn··on Helium Browser
Yes I'd be interested too. I'm still using Kiwi browser but afraid it will stop working anytime soon.

I did recently see this browser is unsafe when trying to open Gmail in it, so any chromium based update to date alternative there would be amazing!

superasn··on Product Hunt is dead
I agree with this take, Product Hunt felt like it was chasing short term goals instead of building something sustainable They also allowed and sometimes encouraged behavior that undermined the quality of the site

The last time I used it one of the common hacks was adding 50 makers to a single app launch PH also openly condoned mass email blasts and tweets to drive votes which just rewarded whoever could push the hardest on promotion

In contrast Hacker News discourages asking people for upvotes and even treats it as a negative if you do That longterm focus on signal over hype is probably why HN still feels useful today while PH lost its way

superasn··on Ask HN: How can ChatGPT serve 700M users when I can't run one GPT-4 locally?
Thanks for the helpful reply! As I wasn't able to fully understand it still, I pasted your reply in chatgpt and asked it some follow up questions and here is what i understand from my interaction:

- Big models like GPT-4 are split across many GPUs (sharding).

- Each GPU holds some layers in VRAM.

- To process a request, weights for a layer must be loaded from VRAM into the GPU's tiny on-chip cache before doing the math.

- Loading into cache is slow, the ops are fast though.

- Without batching: load layer > compute user1 > load again > compute user2.

- With batching: load layer once > compute for all users > send to gpu 2 etc

- This makes cost per user drop massively if you have enough simultaneous users.

- But bigger batches need more GPU memory for activations, so there's a max size.

This does makes sense to me but does this sound accurate to you?

Would love to know if I'm still missing something important.

superasn··on Cerebras Code
Pretty sure this is there to prevent this[1] from happening to them

[1] https://www.viberank.app/

superasn··on Show HN: An AI agent that learns your product and guides your users
I like the concept but the landing page is not good and too heavy.

My browser just froze after scrolling half-way. Not sure if this is something to do with the scroll fx but i really don't understand why this simple site is maxing out my CPUs.

superasn··on Stop selling “unlimited”, when you mean “until we change our minds”
I'm not a fan of usage caps either, but that Reddit post [1] (“You deserve harsh limits”) does highlight a perspective worth considering.

When some users burn massive amounts of compute just to climb leaderboards or farm karma, it’s not hard to imagine why providers might respond with tighter limits—not because it's ideal, but because that kind of behavior makes platforms harder to sustain and less accessible for everyone else. Because on the other hand a lot of genuine customers are canceling because they get API overload message after paying $200.

I still think caps are frustrating and often too blunt, but posts like that make it easier to see where the pressure might be coming from.

[1] https://www.reddit.com/r/ClaudeAI/comments/1lqrbnc/you_deser...

superasn··on How to make websites that will require lots of your time and energy
Always use ORMs and then spend the next year debugging N+1 queries, bloated joins, and mysterious performance issues that only show up in prod.

Migrations randomly fail, schema changes are a nightmare, and your team forgets how SQL works.

ORMs promise to abstract the database but end up being just another layer you have to fight when things go wrong.

superasn··on A media company demanded a license fee for an Open Graph image I used
This is the new source of income and a lot of media orgs are getting paid - take ANI in India.

Theyve been hitting YouTubers like Mohak Mangal, Nitish Rajput, Dhruv Rathee with copyright strikes for using just a few seconds of news clips which you would think is fair use.

Then they privately message creators demanding $60000 to remove the strikes or else the channel gets deleted after the third strike.

It s not about protecting content anymore it's copyright extortion. Fair use doesn't matter. System like Youtube makes it easy to abuse and nearly impossible to fight.

It s turning into a business model: pay otherwise your channels with millions of subs get deleted

[1] https://the420.in/dhruv-rathee-mohak-mangal-nitish-rajput-an...

superasn··on Preliminary report into Air India crash released
Not sure why something so important isn't included.

Heck they can make a back up directly to the cloud in addition to black box considering I'm able to watch YouTube in some flights nowadays.

superasn··on Preliminary report into Air India crash released
Is there a video feed of the cockpit inside the black box?

If not there should be one as even my simple home wifi camera can record hours of hd video on the small sd card. And If there is, wouldn't that help to instantly identify such things?

superasn··on Show HN: TalkNotes – A site that turns your ideas into tasks
It just takes me to the pricing page after signup and I can't access anything.

Pretty sure this is against the Show Hn guidelines.

superasn··on Tell HN: Impassable Cloudflare challenges are ruining my browsing experience
I appreciate you bringing up this issue about the Cloudflare challenges making it hard to browse. I had a similar experience where I couldn't access jsfiddle even without using a VPN. As a result, I switched to a different platform for my coding experiments.

JsFiddle used to be my favorite for quickly testing out code snippets. It's a shame that due to Cloudflare hurdles, I've stopped using it and don't plan on going back.

It may not be much but as more websites and businesses lose genuine web traffic like this, Cloudflare might eventually listen and fix this mess.

superasn··on I am rich and have no idea what to do
While I can't totally relate to this scenario I feel something like this playing video games. I'm happiest when I'm working towards the goal and once you defeat the big boss / get the best gems, etc you're just standing there wondering what now.

I think the most exhilarating part is before you are about to beat the big boss (which in this case would be the offer for acquisition i suppose).

superasn··on Cloud Efficiency at Netflix
Yes it's the only way to watch documentaries at 2x speed but the quality becomes crap
superasn··on Show HN: App that asks ‘why?’ every time you unlock your phone
Have you tried RescueTime? It's a similar app that prompts you to log your activities every time you unlock your phone.

It's surprising to see how much time can slip by unnoticed each day. Using it can really make you more mindful of how you're spending it.

superasn··on Show HN: I built a chatbot to converse with 3M SaaS product reviews
Here is some feedback. Your landing page needs samples. After spending 30s I do have some idea about what you're trying to do but some real life samples of input and output will show me exactly what to expect and how good the quality is and eventually if it's worth my time to sign up for it.
superasn··on Ask HN: What are some essays that profoundly changed the way you think
Keep Your Identity Small (1)

This essay has saved me from wasting away so much time in general.

(1) https://paulgraham.com/identity.html

superasn··on Show HN: I'm making an AI scraper called FetchFox
I remember there was something called readability for chrome which is just what browsers have incorporated as reader view. And mozilla even had a stand-alone version of it (1). Might be of interest to you.

[1] https://github.com/mozilla/readability

superasn··on Meta cancels high-end mixed reality headset after Apple Vision Pro struggles
You're right and I think it would make sense to have a feature that allows you to do a 3d recording.

If I could watch my daughter's first step in full 3d, I would be happy to pay the $3k and more.

I know you can do it right now with insta360 or whatever but I think there is a bit of a learning curve and it just isn't it that seamless.

Being able to record directly from the headset and play it back exactly how you saw it would make things much simpler and WYSIWYG and may be the reason for mass adoption

superasn··on Newpipe/yt-dlp stops working
This will also disable a lot of caching I guess.
superasn··on Show HN: ThreadQuilt: AI-Free Thread Aggregator
It would be great to have a sorting feature by date, popularity, # comments, etc.
Page 1 of 34Next →