HNHacker News
TopNewBestAskShowJobs

terseus

469 karma · joined May 1, 2019

submissionscomments
terseus··on Actively exploited sandbox RCE in all Chromium versions
> Unfortunately, it breaks about 30% of the web.

More like 99%

I use Firefox with Noscript and I'm _totally aware_ that almost no website works without allowing it JS.

Even using Noscript it's becoming more and more exhausting every year, it's plain impossible to browse the internet without JS at all.

terseus··on Software engineering may no longer be a lifetime career
> Why do we believe that LLMs are going to stop there?

Why do you believe they wont? I think it's reasonable to assume that we will hit a ceiling that current models will not be able to break.

> We have robots walking just fine now, by the way.

Walking and reasoning are unrelated abilities.

terseus··on I work in Hollywood. Everyone who used to make TV is now training AI
I understand that it is not easy to relate to the author who pays (or was paying) $150 for a house cleaner, I understand that this is a 1-person history and may be highly biased, I understand the author is motivated to create a story from it.

However, if you think that any of the conditions described in the article are acceptable or that this is a fair price to pay for having AI, I think you are a horrible human being and I hope you'll be expelled from civilized society.

terseus··on The 'Hidden' Costs of Great Abstractions
Oh of course, that's the current standard, but I doubt it will be considered acceptable for much longer.
terseus··on The 'Hidden' Costs of Great Abstractions
Is it, though? Can we really keep saying that "hardware will always be cheaper than human labour" when RAM prices are soaring, GPUs are becoming prohibitively expensive, and we're looking at a probably chip shortage?

I think the era of "poor software for fantastic hardware" is coming to an end.

terseus··on Agentic Coding Is a Trap
I don't know in other countries, but in Spain you definitely don't go to the doctor asking for anything more complex than a paracetamol.

You tell the doctor your symptoms, he explores you and perform any tests considered appropriate, and the doctor decides the prescription.

terseus··on Over-editing refers to a model modifying code beyond what is necessary
If the cost is subsidized by another cash source (e.g. VC money) when the source stops prices can definitely go up.
terseus··on We automated everything except knowing what's going on
AI may not be the source of the problem but can make it a hundred times worse.
terseus··on Plane got to top spot in project management on GitHub in less than a year
This one works: https://docs.plane.so/self-hosting/self-hosting
terseus··on Docker Compose best practices for dev and prod
Given that YAML it's a configuration language I'd say that not being turing complete it's a feature, not a bug nor a limitation; I always want my language files to be declarative to not suffer the perils of logic.

Edit: Also, I don't see the need for a turing complete language for something like docker compose, if you need something really complex you can always script a docker-compose.yml generator with all the logic and complexity you need.

terseus··on Using Rust Macros to exfiltrate secrets
I can't believe that people is comparing opening a project in a code editor with running a build script.

The PoC doesn't even open a file, it just opens the directory. It's a pretty big difference, when you execute a build script you _expect_ to run code, when you open a directory in your editor you don't expect any side effect _at all_.

My guess is that since the proc_macros returns a TokenStream, rust-analyzer have no way to know what it provides except running it.

I'm not sure there's a solution for this that doesn't cripple macros in Rust, apart from being able to configure rust-analyzer to ignore the macros, which clearly limit its usefulness.

terseus··on Google have declared Droidscript is malware
You don't need Termux for that, there are native clients for Android, I use this one: https://play.google.com/store/apps/details?id=dev.msfjarvis....
terseus··on Backblaze B2 Cloud Storage Now Has S3 Compatible APIs
Rclone is really a fantastic tool, its configurability based on backends allow for amazing combinations!

You can configure any cloud storage backend (B2, S3, GCS ...) and combine it with other utility storage backends, like "crypt" [1], "cache" [2] and "chunker" [3], I highly recommend it to anyone searching for a backup solution.

The only feature I miss from Rclone is automatic directory monitoring and mirroring, which I solved using Syncthing (but forces me to host an additional server for it).

[1] https://rclone.org/crypt/ [2] https://rclone.org/cache/ [3] https://rclone.org/chunker/