Hacker News: KajMagnus

New comment by KajMagnus in "Software is made between commits"

KajMagnus — Fri, 12 Jun 2026 15:04:16 +0000

That's interesting, so you keep the branches from before the squash -- but do you also rename them somehow, to show that they're now "frozen historic versions"?

New comment by KajMagnus in "The Website Specification"

KajMagnus — Mon, 01 Jun 2026 13:27:53 +0000

The whole website was apparently AI generated 3 days ago [0], leaves me wondering if this is partly a HN bots upvotes manipulation experiment. Or people here really think an AI gend docs website is top news nowadays? Has the HN demographics changed

When the website is AI generated anyway, why not ask Claude or Gemini directly instead of going to the specs website?

(Maybe it's useful to the author himself, but personally I don't have any reasons to trust the website more than asking an AI myself + asking for references)

[0] https://github.com/jdevalk/specification.website/commit/d8ec...

New comment by KajMagnus in "EY Canada published a cybersecurity report and most citations were hallucinated"

KajMagnus — Sun, 31 May 2026 05:09:06 +0000

I think the AIs don't have enough information about the problem. There's many things those who wrote the prompts forgot to mention. And some of it maybe is tacit knowledge?

Then, it doesn't matter if you add 1000 frontier models -- they still can't generate a good report.

But yes I suppose you can get rid of hallucinated citations though

New comment by KajMagnus in "Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue"

KajMagnus — Thu, 28 May 2026 19:54:54 +0000

Top 18%! I denied everything, unless I could see at a glance that it was safe (like Git diff)

New comment by KajMagnus in "Migrating from Go to Rust"

KajMagnus — Mon, 25 May 2026 12:16:53 +0000

Aren't you overlooking the main point of the article?, the reason they migrated:

> concurrency — eliminating data races essentially, which we had before. Really gnarly bugs

> this is the one teams report most enthusiastically. The classes of bugs that survive go test -race and reach production (data races, nil dereferences, missed error paths) just don’t compile in Rust. Oncall rotations are typically very boring after a Rust migration. ...

> I hadn’t had to chase down a crash, or some weird multi-threaded race condition, or some of these other things which actually consumed a huge amount of my time before.

(They say at InfluxDb)

That's not a Rust vs. Go slapfight? Instead, sounds like a good judgement to me

New comment by KajMagnus in "Google Declaring War on the Web"

KajMagnus — Thu, 21 May 2026 19:22:34 +0000

There's no metrics or KPIs that encourage more AI use? (In his team?)

(I guess you would have mentioned already)

New comment by KajMagnus in "I don't think AI will make your processes go faster"

KajMagnus — Sun, 17 May 2026 20:01:19 +0000

Saying the model failed to write a competitive C compiler makes more sense.

I don't think they tried to do that though.

> today's models are not yet able to produce production software without close supervision, even when uncharacteristically good specs and hand-written tests exist.

That's a good point anyway

New comment by KajMagnus in "Postmortem: TanStack NPM supply-chain compromise"

KajMagnus — Wed, 13 May 2026 05:05:33 +0000

Or when you find some old source code at your workplace, and you're like: "this looks pretty nice, I wonder who wrote this?"

New comment by KajMagnus in "Postmortem: TanStack NPM supply-chain compromise"

KajMagnus — Wed, 13 May 2026 05:02:23 +0000

Check out Qubes OS and vault VMs and (I haven't started using yet) split SSH / GPG.

New comment by KajMagnus in "Postmortem: TanStack NPM supply-chain compromise"

KajMagnus — Wed, 13 May 2026 04:47:09 +0000

If a package developer maliciously breaks everyone's builds,

isn't that pretty great?

Because now you have learnt that you can't trust them

New comment by KajMagnus in "Postmortem: TanStack NPM supply-chain compromise"

KajMagnus — Wed, 13 May 2026 01:51:07 +0000

How do you know the hash in advance?

New comment by KajMagnus in "AI slop is killing online communities"

KajMagnus — Thu, 07 May 2026 20:09:18 +0000

My impression is that they're sometimes unemployed people or students hoping to create a popular open source project, and use it to find a job.

They aren't going to care about any of the advice in the article about not posting slop -- finding a job is (of course?) more important to them.

Can't really say they are doing anything wrong, maybe I too would have? ... Just that large scale, doesn't work

New comment by KajMagnus in "Google's AI Overviews spew false answers per hour, bombshell study reveals"

KajMagnus — Fri, 10 Apr 2026 05:44:58 +0000

The number is 9

9% not accurate answers, for Gemini 3. (I think that's a lot!)

New comment by KajMagnus in "Moving from WordPress to Jekyll (and static site generators in general)"

KajMagnus — Fri, 10 Apr 2026 05:05:43 +0000

Have you seen Talkyard Blog Comments? It's open-source and based out of Europe. https://blog-comments.talkyard.io. (I'm developing it.)

> legacy WP blog ... users should be able to ...

(What's your blog about?)

New comment by KajMagnus in "Axios compromised on NPM – Malicious versions drop remote access trojan"

KajMagnus — Thu, 02 Apr 2026 12:33:55 +0000

> suddenly have 215 new files to check in!

How big is your repo, if I may ask?

Personally I store vendored dependencies in a submodule, where I can squash history, if it grows too large.

New comment by KajMagnus in "Axios compromised on NPM – Malicious versions drop remote access trojan"

KajMagnus — Wed, 01 Apr 2026 07:26:29 +0000

Good points. But what do you mean with 3: "lockfile poisoning attacks, by making them more complicated" — making the lockfiles more complicated?

Also, 4) Simpler to `git diff` the changes, when you have the source locally already :- )

New comment by KajMagnus in "Axios compromised on NPM – Malicious versions drop remote access trojan"

KajMagnus — Wed, 01 Apr 2026 06:07:11 +0000

Scala could be one example? When I upgraded to a newer version of the standard library (the Scala 2.13 or Scala 3 collections library), there was a tool, Scalafix [1], that could update my source code to work with the new library. Don't think it was perfect (don't remember), but helpful.

[1] https://scalacenter.github.io/scalafix/

Show HN: Talkyard, open-source forum software. StackOverflow Reddit Slack hybrid

KajMagnus — Sun, 28 Dec 2025 14:07:45 +0000

Chat "demo": https://forum.talkyard.io/-31/support-chat

Q&A demo: https://insightful.demo.talkyard.io/-6/asking-for-help-in-it...

If you want to self-host, I'd love feedback on the new installation instructions!

Installation repo: https://github.com/debiki/talkyard-prod-one/tree/ty-prod-one... — upcoming new version (feedback welcome). Docker Compose on Debian/Ubuntu.

Source code: https://github.com/debiki/talkyard, AGPL. React, Scala, Postgres.

Biz model: SaaS + Enterprise edition.

Backstory: Inspired by angry people saying silly things in debate programs on Swedish TV. I thought they needed time to think, before they spoke. But they couldn't stay in the TV studio for hours and days. They needed a place online where they could share their thoughts, later when done thinking. There wasn't any good software for this, so I started coding. (This was long ago.)

No investors (instead, independent, based out of Europe/Sweden). Hand coded.

Comments URL: https://news.ycombinator.com/item?id=46411161

Points: 2

# Comments: 0

New comment by KajMagnus in "I’ve removed Disqus. It was making my blog worse"

KajMagnus — Wed, 01 Oct 2025 02:48:38 +0000

Then you might find Talkyard interesting: https://blog-comments.talkyard.io — reminds of Disqus, in that it's threaded, best first (optionally). (I'm developing it.)

> showing some CORS error

In my case, I found it annoying when cookies gradually stopped working, and eventually I had to make the software use custom HTTP headers instead of cookies.

> Seems that mostly spammers comment

The more interesting the contents of the blog is, the more real humans will like it and post comments? (if they can find it)

But a "Our company posts something each day, even if nothing has happened" blog, or AI fluff, attracts only spammers?

New comment by KajMagnus in "Why language models hallucinate"

KajMagnus — Sun, 07 Sep 2025 06:52:59 +0000

Could one say that humans are trained very differently from AIs?

If we (humans) make confident guesses, but are wrong — then, others will look at us disappointedly, thinking "oh s/he doesn't know what s/he is talking about, I'm going to trust them a bit less hereafter". And we'll tend to feel shame and want to withdraw.

That's a pretty strong punishment, for being confidently wrong? Not that odd, then, that humans say "I'm not sure" more often than AIs?