Hacker News: Ciantic

New comment by Ciantic in "OpenCode Hacked: User credentials leaked"

Ciantic — Sat, 17 Oct 2026 18:57:47 +0000

Only responsible thing in this case would have been for OpenCode people to invalidate all keys. But I guess it is not that straightforward if Anthropic/OpenAI etc don't have endpoint for it.

New comment by Ciantic in "OpenCode Hacked: User credentials leaked"

Ciantic — Sat, 17 Oct 2026 18:53:16 +0000

I think every API key system should have endpoint "invalidate_api_key" this way whitehat hackers or the party who stored them could invalidate all keys in the case they leak. Now it is race against the time, and everybody got email, and everyone must act themselves.

New comment by Ciantic in "I Know Why the Mathematicians Weep"

Ciantic — Thu, 15 Oct 2026 17:10:07 +0000

Article refers to Hugo Duminil-Copin, who also did a podcast with Brady Haran [1] about this subject, for him it isn't case of bruised ego, or gatekeeping. He realized that the way things were done were going to change, and it made him emotional, he is not pessimistic or against AI.

[1]: https://www.youtube.com/watch?v=omuJpoV-Ko4

New comment by Ciantic in "Cartesian – AI 3D Modeling for Design"

Ciantic — Tue, 15 Sep 2026 18:19:07 +0000

GPT-6 Astra with computer use has gotten some of architects and 3d modelers wondering what their future is. Astra does such a good work with SketchUp 2026 and computer use, here is video, but it is well worth it because the author actually knows his stuff:

https://www.youtube.com/watch?v=E-ECbD14g_8

New comment by Ciantic in "Big AI sets out its terms for regulatory capture"

Ciantic — Mon, 14 Sep 2026 14:42:05 +0000

> Openrouter is not ideal, because you don't know who they send your traffic to and there are rumours of vendors cheating by providing quantized models.

OpenRouter allows to make an API key locked to certain provider, I do that myself.

New comment by Ciantic in "IBM Bob"

Ciantic — Fri, 04 Sep 2026 13:35:10 +0000

This sounds a lot like Spotify's XIRP. They managed to vibe something useful for their own engineers, were super hyped, and decided to release it in public. However what are the odds this harness will stand the test of time against actual harness makers like OpenAI or Anthropic? Neither Spotify or IBM are focused on making models or harnesses, these are just side-products.

New comment by Ciantic in "Fastpotify"

Ciantic — Tue, 01 Sep 2026 08:41:26 +0000

Very cool. I'm cloning the repo, just in case it gets taken down. I've been using EGUI, but its biggest problem is that LLMs really struggle with it. There isn't enough good examples of it. This codebase seems to have a lot of good examples, so given this as a reference, one might make a lot of progress much faster.

New comment by Ciantic in "Better Batteries"

Ciantic — Fri, 21 Aug 2026 13:51:51 +0000

One thing would be shipping interfaces without implementations. Rust could try to ship more traits without implementations, I do see it could be problematic with Rust as they don't try to be opinionated on what you will build.

There is another alternative too, releasing interface only packages, then hoping everyone agrees to use those. JavaScript/TypeScript people actually did this already for one very tricky one, validation, see Standard Schema [1], which was great success. But I would hope to see more, for instance interfaces around typical building blocks like job queues, email sending etc.

[1]: https://standardschema.dev/schema

New comment by Ciantic in "DeepSeek v4 flash and cheap intelligence"

Ciantic — Wed, 05 Aug 2026 20:50:13 +0000

Intelligence and size of the model might not be that correlated after all. I for one feel like human level intelligence can be replicated with multiple small models, such as vision, language, logical reasoning, spatial understanding etc. It would be odd if this 1.2 l between my shoulders gets obsoleted with even old hardware and not by latest Nvidia supercomputer.

New comment by Ciantic in "Gemini Robotics 2 brings whole body intelligence to robots"

Ciantic — Thu, 30 Jul 2026 18:42:09 +0000

Did you look at 1X's artificial tendon driven hands?

New comment by Ciantic in "EU Exempts Apple Watch and AirPods from Battery Removal Requirements"

Ciantic — Mon, 20 Jul 2026 09:00:27 +0000

That is what I also wonder, who added that tootbrush statement there? Given that Oral-B has done replacable batteries for years, and they have dominant position, I'm thinkin that statement didn't come from lobbies. Maybe someone who are making the law is reasoning with itself or small group and didn't know that replacable batteries in toothbrushes are already a thing.

New comment by Ciantic in "Open Book Touch: open-source e-reader"

Ciantic — Sat, 18 Jul 2026 15:54:31 +0000

I also have Kobo Clara BW, and don't like swipe gestures, or any gestures whatsoever.

I (now) know why I don't like that, because regular book and magazines, you don't have to think about how you hold it. Your thumb isn't going to magically flick a page by accident if you take a firm grip on it. With gestures only e-ink books, I have to take extra caution how I hold it so that it doesn't trigger something.

New comment by Ciantic in "LG monitors silently install software through Windows Update without consent"

Ciantic — Sat, 18 Jul 2026 14:02:19 +0000

I also discovered that these days motherboards come with a payload in their chipset, which gets installed automatically in background unless you figure out to turn it off from BIOS before installing Windows. In my case it was bunch of ASUS useless stuff, not just drivers, some "Armoury Crate" etc. Which just keeps running in background. I've switched to KDE, that kind of solved itself.

New comment by Ciantic in "Prefer strict tables in SQLite"

Ciantic — Sat, 11 Jul 2026 19:21:26 +0000

SQLite has no date data type. Also SQLite has no way to call EXPLAIN on query and get the dummy type name either for arbitrary SELECT query, so you can't even infer it, if you were to use the dummy type name "DATE" or "DATETIME".

New comment by Ciantic in "LuaJIT 3.0 proposed syntax extensions"

Ciantic — Thu, 25 Jun 2026 09:40:11 +0000

Yeah, "?." as safe navigation operator even in JS where it already exists is eye-sore. They could use some other single character instead of two characters. Question mark is already doing a lot with ternaries etc.

Instead of obj?.:method?.(…) it would be like obj#:method#(…)

Replace # with your favorite extra character instead of questionmark.

New comment by Ciantic in "Zig Structs of Arrays (2024)"

Ciantic — Mon, 08 Jun 2026 16:40:51 +0000

Rust should (eventually) support arrays of structures via compile-time reflection: https://fnordig.de/2026/03/25/rust-reflection-and-a-multi-ar...

New comment by Ciantic in "Deno 2.8"

Ciantic — Fri, 22 May 2026 21:14:10 +0000

Node refuses to support TypeScript within node_modules, see https://github.com/nodejs/node/issues/58429 this means you can't do "Typescript-only npm packages".

They made that intentionally at the beginning:

> Currently there is consensus that Node.js should NOT run TypeScript files inside `node_modules. It is not supported to avoid package maintainers to release TS only package.

New comment by Ciantic in "Postmortem: TanStack NPM supply-chain compromise"

Ciantic — Tue, 12 May 2026 15:21:39 +0000

If I saw this in my CI script:

    curl -X POST $GITHUB_CACHE_URL < wololo.exe

It would make me pause, but now that it is a misfeature in YAML configuration it is more widely used. Point of bash scripts they are auditable, and understandable.

I didn't prescribe what the bash script would be, because it would differ on use case. If I wanted to share artifacts from other runs I would probably use podman and make sure I start new runs from known good condition, but because I understand that. Some other would use nix or whatever else.

New comment by Ciantic in "Postmortem: TanStack NPM supply-chain compromise"

Ciantic — Tue, 12 May 2026 09:50:32 +0000

What I want to focus on is mental model of your CI pipeline, and problem with too much YAML, consider this quote:

> Cache scope is per-repo, shared across pull_request_target runs (which use the base repo's cache scope) and pushes to main. A PR running in the base repo's cache scope can poison entries that production workflows on main will later restore.

This is very difficult to understand, and teach to new people, because everything is configured as YAML, yet everything is layed out in the background to directories and files.

What if your CI pipeline was old-school bash script instead? This would be far more obvious to greater amount of people how it works, and what is left behind by other runs. We know how directories and files work in bash scripts.

Could we go back to basics and manage pipelines as scripts and maybe even run small server?

New comment by Ciantic in "Bun's experimental Rust rewrite hits 99.8% test compatibility on Linux x64 glibc"

Ciantic — Sat, 09 May 2026 19:42:30 +0000

Wow, amazing work.

Pretty impressive that it is faster than the Go version already.