<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: SteveVeilStream</title><link>https://news.ycombinator.com/user?id=SteveVeilStream</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 14 Apr 2026 12:38:55 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=SteveVeilStream" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by SteveVeilStream in "Seems like a bad idea: "One login to connect Glassdoor and Indeed""]]></title><description><![CDATA[
<p>I just received an e-mail indicating this may be required by April 20th. I can't think of two accounts that people would want to keep more separated than these two. I've never actually trusted GlassDoor enough to leave a review and have always been happy with my employers but I can imagine a lot of people would not feel comfortable with this mixing of accounts.<p>"Connect accounts for one easy login
Glassdoor is teaming up with Indeed to streamline your job search. We're introducing one login to connect Glassdoor and Indeed accounts.<p>When you connect accounts, your recent profile data will be synced, giving you access to better job matches and hiring employers across both sites.<p>Our commitment to anonymity
Your anonymous activity on Glassdoor, like company reviews or demographic information, won't be shared with Indeed and will remain anonymous.<p>What's next
For right now, you’ll need to connect accounts to apply to jobs on Glassdoor and get improved job matching. Starting on April 20th, 2026, you may be required to log in with a connected account to get full access to Glassdoor."</p>
]]></description><pubDate>Tue, 31 Mar 2026 02:54:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47582219</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47582219</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47582219</guid></item><item><title><![CDATA[Seems like a bad idea: "One login to connect Glassdoor and Indeed"]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.glassdoor.ca/about/onelogin/">https://www.glassdoor.ca/about/onelogin/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47582218">https://news.ycombinator.com/item?id=47582218</a></p>
<p>Points: 16</p>
<p># Comments: 2</p>
]]></description><pubDate>Tue, 31 Mar 2026 02:54:16 +0000</pubDate><link>https://www.glassdoor.ca/about/onelogin/</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47582218</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47582218</guid></item><item><title><![CDATA[Terms of use: What types of competition do model providers ban?]]></title><description><![CDATA[
<p>I thought it would be interesting to look at the terms of service of the frontier labs and there was more deviation than I expected when it comes to the issue of building competing offerings. Note that I am not a lawyer and none of this is legal advice. You should refer to the specific versions of the agreements that apply to you and consult with a lawyer.<p>It is very common for technology companies (particularly when providing data through an API,) to include a term that more-or-less says their customers can't build a product that will compete with them. These terms can become quite contentious and may be the subject of detailed negotiations on a customer by customer basis. An example is in the finance industry where a number of companies provide products to end users but also licsense data to other companies that also make products for end users.<p>Looking at the four big labs, I prefer the terms from OpenAI and Google (Gemini). Unless I am missing something, they are both relatively narrow in how they limit your use. As long as you aren't trying to use their model to build a competitive model, the term doesn't look that threatening.<p>OpenAI:
Consumer: you may not "Use Output to develop models that compete with OpenAI."
Business: will not "except for a Permitted Exception, use Output to develop artificial intelligence models that compete with OpenAI’s products and services;..."<p>Gemini:
"You may not use the Services to develop models that compete with the Services (e.g., Gemini API or Google AI Studio)."<p>xAI:
xAI is more problematic since it is more broad in what it covers. That said, it's probably not of a major immediate concern to most customers since the xAI product/service offering is quite narrow today. That may change meaningfully when Macrohard launches if the rumours are true.
Consumer: Prohibited uses... "Using the Service or any Output to develop models or services that compete with xAI,..."
Enterprise: shall not... "use any Service to help develop, or help provide to any third party, any product or service similar to or competitive with any Service;..."<p>Anthropic:
From my perspective, the Anthropic terms are the most challenging:
Consumer: may not use... "To develop any products or services that compete with our Services,..."
Enterprise: "Customer may not and must not attempt to (a) access the Services to build a competing product or service,..."<p>The challenge is that the Anthropic term is not limited to "models" like OpenAI and Gemini and your chances of overlapping with Anthropic may be higher depending on how exactly the definition of "competing product service" is interepreted.<p>If a software company uses Claude Code to build a legaltech startup, are they now in violation of this term after Anthropic announced the legal plugin for Claude Cowork? What about all of wealthtech companies using Claude (Claude Code, Claude Co-work, the models API) after the announcemen today that Claude is launching wealth management plugins? Perhaps the concern is a bit of a stretch but it feels messier than it should be.<p>At some point, I beleive the frontier labs need to decide if it is more important to win in the infrastructure layer or the application layer. They can play in both layers but the terms need to reflect their primary objective. That, or they need to be open to negotiationg and signing custom terms with smaller companies that are taking a long term view.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47144431">https://news.ycombinator.com/item?id=47144431</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 24 Feb 2026 22:43:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=47144431</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47144431</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47144431</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "Show HN: SlothSpeak: open-source BYO-API-K mobile chat with the best AI models"]]></title><description><![CDATA[
<p>Thanks. Adding memory is an interesting idea. I'd probably want to do it a little differently than what is done in the main apps to avoid overlap. I like the idea of being able to tag conversations and then use that "tag" to organize memory. E.g. You might want to have one set of conversations about fitness, another about travel, another about career, etc. with no overlap between them.</p>
]]></description><pubDate>Tue, 24 Feb 2026 19:57:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=47141994</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47141994</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47141994</guid></item><item><title><![CDATA[Show HN: SlothSpeak: open-source BYO-API-K mobile chat with the best AI models]]></title><description><![CDATA[
<p>Introducing SlothSpeak: An open-source, bring-your-own-API-keys, mobile app for voice chat with LLMs that prioritizes response quality over latency.<p>APK file available on GitHub in the releases. Currently only for Android. Is anyone interested in porting to iPhone?<p>My preferred way to interact with LLMs is talking and listening while I'm walking, biking, driving, etc. The problem with the apps from the frontier labs is that their voice mode prioritizes real-time interactions and so they use watered down models.<p>Even today with a paid subscription, ChatGPT Voice will tell you there are two r's in strawberry. The answers are also relatively brief and so there is a need to chain together a series of simpler requests when you want to do a deeper dive.<p>SlothSpeak goes to the opposite end of the spectrum. It might leave you hanging for a few minutes but when it gets back to you, it will be an answer from a state of the art model. You can even do deep research queries to get very long and comprehensive responses.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47136158">https://news.ycombinator.com/item?id=47136158</a></p>
<p>Points: 3</p>
<p># Comments: 2</p>
]]></description><pubDate>Tue, 24 Feb 2026 12:14:20 +0000</pubDate><link>https://github.com/JonesSteven/SlothSpeak</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47136158</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47136158</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "Show HN: enveil – hide your .env secrets from prAIng eyes"]]></title><description><![CDATA[
<p>Claude Code does it. Check out the JSONL files.</p>
]]></description><pubDate>Tue, 24 Feb 2026 07:23:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47133943</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47133943</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47133943</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "Show HN: enveil – hide your .env secrets from prAIng eyes"]]></title><description><![CDATA[
<p>Sometimes I need to give Claude Code access to a secret to do something. (e.g. Use the OpenAI API to generate an image to use in the application.) Obviously I rotate those often. But what is interesting is what happens if I forget to provide it the secret. It will just grep the logs and try to find a working secret from other projects/past sessions (at least in --dangerously-skip-permissions mode.)</p>
]]></description><pubDate>Tue, 24 Feb 2026 06:36:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47133599</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47133599</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47133599</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "Show HN: Search-sessions – Search all your Claude Code session history in <300ms"]]></title><description><![CDATA[
<p>If I am not mistaken, Claude sometimes pulls an API key out of a .env file and drops it into that folder. It might be neat for you to add a feautre specifically for identifying any keys that are in that folder.</p>
]]></description><pubDate>Mon, 23 Feb 2026 20:57:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47128701</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47128701</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47128701</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "Detecting and Preventing Distillation Attacks"]]></title><description><![CDATA[
<p>This is an exmaple of a potentially problematic prompt:
"You are an expert data analyst combining statistical rigor with deep domain knowledge. Your goal is to deliver data-driven insights — not summaries or visualizations — grounded in real data and supported by complete and transparent reasoning."<p>And they say:
"This includes detection of chain-of-thought elicitation used to construct reasoning training data."
...
"We are developing Product, API and model-level safeguards designed to reduce the efficacy of model outputs for illicit distillation, without degrading the experience for legitimate customers."<p>It's going to be very hard to generate outputs that people need but that also can't be used for distillation. For example, it's a good practice for many reasons including audibility to ask for the chain of thought. In fact, I'd argue it's essentially impossible to modify the outputs in a way that makes them less useful for distillation without degrading quality for legitimate users.<p>So then their only viable option is to try to identify the traffic. However, that is very hard because: "In one case, a single proxy network managed more than 20,000 fraudulent accounts simultaneously, mixing distillation traffic with unrelated customer requests to make detection harder."</p>
]]></description><pubDate>Mon, 23 Feb 2026 20:07:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47128012</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47128012</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47128012</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "BC Hydro call for AI, data-centre projects – Limited capacity"]]></title><description><![CDATA[
<p>This local legislation has been the subject of some discussion. Is it prudent or does it discourage tech investment? I'm personally not excited to see that AI and data-centre customers have to compete for MW under a fixed cap while other industries are exempt.<p>"Through Bill 31, the Energy Statutes Amendment Act, and a new regulation, there is now a requirement for prospective AI and data-centre projects to take part in a competitive selection process to access clean electricity.
This requirement does not apply to traditional industries, such as mining, liquefied natural gas (LNG), forestry, manufacturing or hydrogen for domestic use."
"The allocation targets for these projects are for as much as 400 megawatts for the first two years."</p>
]]></description><pubDate>Mon, 23 Feb 2026 19:22:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47127377</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47127377</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47127377</guid></item><item><title><![CDATA[BC Hydro call for AI, data-centre projects – Limited capacity]]></title><description><![CDATA[
<p>Article URL: <a href="https://news.gov.bc.ca/releases/2026ECS0005-000095">https://news.gov.bc.ca/releases/2026ECS0005-000095</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47127376">https://news.ycombinator.com/item?id=47127376</a></p>
<p>Points: 2</p>
<p># Comments: 1</p>
]]></description><pubDate>Mon, 23 Feb 2026 19:22:27 +0000</pubDate><link>https://news.gov.bc.ca/releases/2026ECS0005-000095</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=47127376</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47127376</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "I've been loving Claude Code on the web"]]></title><description><![CDATA[
<p>That's a fair point. I do think what's most interesting this time is the potential for new use-cases (users) vs the replacement of existing ones. I agree that there are better ways for serious developers to work than to be using Claude Code on the web. On the other hand, you can now set up someone in the marketing or product management departments with the tools in an afternoon and then they can create widgets, perform custom analysis on data, experiment with prototype ideas, etc. and they don't even need a laptop. All you need is a mobile phone with a browser. It could be neat for students as well. "Build me an app to help me study for X". Time will tell exactly how people use it.</p>
]]></description><pubDate>Wed, 29 Oct 2025 07:18:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=45743643</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=45743643</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45743643</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "I've been loving Claude Code on the web"]]></title><description><![CDATA[
<p>We've got a product in beta right now that lets's you spin up a review app by just commenting "deploy" on a PR in GitHub. When you combine that with Claude Code on the web, it is pretty fun. You can be anywhere (on a boat, train, lying on the couch, in a stadium watching 18 innings of baseball) and using Claude Code on the web on any mobile phone (in a browser.) As it builds stuff, it's instantly deploying a review app for each update and so you can see the changes and then give it another request. Also makes it easy to just drop that review app into a groupchat to get feedback from other people who are also not at their computers. I don't have a link to a video yet but I posted a few screenshots here. If you want to try the review app functionality, just send me a message. <a href="https://www.linkedin.com/posts/jonessteven_anthropic-claude-code-on-the-web-veilstream-activity-7386893867515756544-Woeb" rel="nofollow">https://www.linkedin.com/posts/jonessteven_anthropic-claude-...</a></p>
]]></description><pubDate>Wed, 29 Oct 2025 06:38:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=45743386</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=45743386</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45743386</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "I'm Peter Roberts, immigration attorney who does work for YC and startups. AMA"]]></title><description><![CDATA[
<p>If someone is coming from China or India and is equally interested in working in Canada or the US, which way would you point them?</p>
]]></description><pubDate>Fri, 18 Jul 2025 19:14:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=44608674</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=44608674</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44608674</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "DuckDuckGo now lets you hide AI-generated images in search results"]]></title><description><![CDATA[
<p>A risk is that it will give people a false sense of confidence that they are viewing real content. The only way out of this mess is cryptographic methodss (based on hardware in cameras) that can allow end-users to verify photos as real and then we assume every other photo may be AI.</p>
]]></description><pubDate>Fri, 18 Jul 2025 19:12:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=44608656</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=44608656</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44608656</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "Supabase MCP can leak your entire SQL database"]]></title><description><![CDATA[
<p>I don't want to sound promotional but this is the space we are living and breathing everyday at VeilStream.com so I do have some opinions. My suggestion to anyone using any type of AI (whether it be an AI coding tool like Cursor, an end-to-end AI application development tool like Lovable, or an additional agent anywhere in the process,) is to never allow access to your production database until you have done a very thorough security review (which would include testing for this type of vulnerability.) Our proxy server can sit in front of a database to filter/anonymize data so that you can do full end-to-end development and testing with no risk of data leakage and without needing to make any changes to the underlying database.</p>
]]></description><pubDate>Thu, 10 Jul 2025 09:38:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=44519094</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=44519094</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44519094</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "A Typology of Canadianisms"]]></title><description><![CDATA[
<p>Love to see Skookum in there.</p>
]]></description><pubDate>Thu, 10 Jul 2025 05:53:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=44517727</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=44517727</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44517727</guid></item><item><title><![CDATA[Ask HN: Is there any way to find an archive of search results pages?]]></title><description><![CDATA[
<p>Edit to add: At least one person now confirms that the maps have listed at least one of the parks as a state park for a number of years. So it may be an interesting case of "Things you don't notice until you are looking for them." For a variety of reasons, I'm still interested in knowing if there is a way to access an archive of previous search results. E.g. It would be interesting to see what a search for "Generative AI" would have returned five years ago.<p>Folks in Canada have noticed that when they search for provincial parks in Google Maps or Google Search (e.g. "Joffre Lakes Provincial Park") that in the description /smart summary, these provincial parks are now being labelled as state parks by Google. Everyone feels that they used to be described as provincial parks but they can't be sure and no one has any historical screenshots. It's possible no one ever paid attention before and it always attached the "state parks" metadata to these results. Of course, these types of pages are not archived by the WayBackMachine. It got me thinking that it is actually quite interesting to see how search results for specific terms change over time. Is there any service that archives search results pages over time?<p>Note: Of course, you are free to comment as you wish but my preference is to avoid a political debate about Canadian sovereignty. Despite the example, I am really just interested in the technical question at hand.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=43155509">https://news.ycombinator.com/item?id=43155509</a></p>
<p>Points: 3</p>
<p># Comments: 1</p>
]]></description><pubDate>Mon, 24 Feb 2025 03:20:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=43155509</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=43155509</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43155509</guid></item><item><title><![CDATA[Show HN: Time based tokens for confirming video authenticity]]></title><description><![CDATA[
<p>I made a tool that allows anyone to confirm if a video I am in is authentic or not.
<a href="https://videoverify.stevej.ca/stevejones" rel="nofollow">https://videoverify.stevej.ca/stevejones</a><p>The basic idea is that I read out a token when the video is recorded and then anyone can verify it by checking online. It's obviously redundant if I am sharing a video through my own channel but I think it could be interesting for celebrities and politicians that are often recorded by other people.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=43045193">https://news.ycombinator.com/item?id=43045193</a></p>
<p>Points: 3</p>
<p># Comments: 1</p>
]]></description><pubDate>Fri, 14 Feb 2025 05:33:08 +0000</pubDate><link>https://blog.stevej.ca/p/verifying-video-authenticity-using</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=43045193</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43045193</guid></item><item><title><![CDATA[New comment by SteveVeilStream in "The U.S. needs a shipbuilding revolution"]]></title><description><![CDATA[
<p>Canada as well. We have the longest coastline in the world but buy all or most of our ferries from other countries. It's silly.</p>
]]></description><pubDate>Mon, 03 Feb 2025 08:37:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=42916170</link><dc:creator>SteveVeilStream</dc:creator><comments>https://news.ycombinator.com/item?id=42916170</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42916170</guid></item></channel></rss>