<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Yoric</title><link>https://news.ycombinator.com/user?id=Yoric</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 28 May 2026 20:15:46 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Yoric" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Yoric in "The VibeSec Reckoning"]]></title><description><![CDATA[
<p>The agent can disable the lints inline, so that's not sufficient.<p>Also, I haven't found a cross-platform + cross-agent mechanism to set permissions. Much less one that works.<p>Right now, I'm working on a hook that checks for changes in source files, but the plug-in system (at least of opencode) seems quite buggy.</p>
]]></description><pubDate>Thu, 28 May 2026 14:54:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=48309830</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48309830</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48309830</guid></item><item><title><![CDATA[New comment by Yoric in "The VibeSec Reckoning"]]></title><description><![CDATA[
<p>Anecdotally, a few weeks into a Rust agent-first project, we're still trying to get the agent to maintain a minimum of coding discipline (e.g. don't use sync Mutex in tokio code). So far, the agent seems more interested in deactivating the linters than in complying.<p>Security? At this stage, I'm a bit afraid that it's a joke more than anything else.</p>
]]></description><pubDate>Thu, 28 May 2026 07:03:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=48305612</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48305612</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48305612</guid></item><item><title><![CDATA[New comment by Yoric in "I think Anthropic and OpenAI have found product-market fit"]]></title><description><![CDATA[
<p>> Why on earth would AI labs be bragging about how little the product they sell actually costs them to make? You don't want to do anything that reduces it's perceived value to the user, that might make them less willing to pay for it.<p>Wouldn't they be bragging about it to investors? It feels like something that would matter a lot to them, and at least OpenAI kinda feels desperate to find them.<p>There's also the small question about whether a drop in inference cost would actually change anything about profitability, when training seems to get exponentially more expensive.</p>
]]></description><pubDate>Thu, 28 May 2026 06:55:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48305549</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48305549</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48305549</guid></item><item><title><![CDATA[New comment by Yoric in "The VibeSec Reckoning"]]></title><description><![CDATA[
<p>What do you mean about syntax mistakes and memory problems?<p>Something like incorrect SELinux configurations?</p>
]]></description><pubDate>Thu, 28 May 2026 06:50:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=48305513</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48305513</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48305513</guid></item><item><title><![CDATA[New comment by Yoric in "Bun's unreleased Rust port has 13,365 unsafe blocks"]]></title><description><![CDATA[
<p>It seems that this era is a marketing experiment for Mythos.<p>We're running forward without any idea of how we can get agents to write code that is even remotely safe or secure. It _will_ blow up with increasingly large blast radiuses.</p>
]]></description><pubDate>Fri, 22 May 2026 22:12:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48242325</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48242325</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48242325</guid></item><item><title><![CDATA[New comment by Yoric in "Show HN: KVBoost – chunk-level KV cache reuse for HuggingFace, 5–48x faster TTFT"]]></title><description><![CDATA[
<p>Go is pretty good at performance, but pretty bad at expressing domain-specific logics. Python is the opposite, but once you have isolated the parts that need to be optimized, it's quite easy to rewrite them in a native language (in particular, the Rust-Python bindings are really good, although in this project, it's C++).</p>
]]></description><pubDate>Fri, 22 May 2026 07:30:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=48233058</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48233058</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48233058</guid></item><item><title><![CDATA[New comment by Yoric in "Saying Goodbye to Asm.js"]]></title><description><![CDATA[
<p>Wasn't pepper the P in PNaCl?</p>
]]></description><pubDate>Wed, 20 May 2026 16:49:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=48210567</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48210567</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48210567</guid></item><item><title><![CDATA[New comment by Yoric in "The Power of a Free Popsicle (2018)"]]></title><description><![CDATA[
<p>When I was a manager in a start-up, ages ago, I argued the CEO against handing a (small) one-off bonus to one of my team members, and rather went shopping for a nice gift with the same sum. One of them was purely a transaction, the other one was a gift.<p>I believe that I was right.</p>
]]></description><pubDate>Fri, 15 May 2026 09:38:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48146507</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48146507</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48146507</guid></item><item><title><![CDATA[New comment by Yoric in "WinUI 3 Performance: A Leap Forward"]]></title><description><![CDATA[
<p>> WinRT is the Windows team final response to Longhorn, but lets do it with COM and C++, which started in Vista.<p>Not sure what you mean, I was using COM and C++ for Windows development in the late 90s.<p>> So there is no elision, it is AddRef/Release all over the place.<p>...and constructing an object is an insanely complex (and expensive) operation.</p>
]]></description><pubDate>Fri, 15 May 2026 09:17:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=48146356</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48146356</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48146356</guid></item><item><title><![CDATA[New comment by Yoric in "The Dating App Swipe Is Dying. What Comes Next May Be Worse"]]></title><description><![CDATA[
<p>Unless I'm missing something, this sounds awful.</p>
]]></description><pubDate>Thu, 14 May 2026 12:24:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=48134413</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48134413</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48134413</guid></item><item><title><![CDATA[New comment by Yoric in "GitLab announces workforce reduction and end of their CREDIT values"]]></title><description><![CDATA[
<p>> It's quite possible this is because they weren't making enough noise about their AI strategy.<p>That's how I interpret the move, too.</p>
]]></description><pubDate>Tue, 12 May 2026 06:08:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=48104786</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48104786</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48104786</guid></item><item><title><![CDATA[New comment by Yoric in "Hardening Firefox with Claude Mythos Preview"]]></title><description><![CDATA[
<p>When I worked at Mozilla, _everything_ was called a bug, whether it was a software issue, a problem in the office or some paperwork missing.<p>Much as GitHub calls everything an "issue" and GitLab a "work item".</p>
]]></description><pubDate>Fri, 08 May 2026 09:20:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48060660</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48060660</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48060660</guid></item><item><title><![CDATA[New comment by Yoric in "How Cloudflare responded to the “Copy Fail” Linux vulnerability"]]></title><description><![CDATA[
<p>At the very least, Cloudflare hosts web workers, which let a customer execute more-or-less arbitrary wasm code on their servers. If there's an exploit that lets you escape the wasm sandbox, copy.fail can be chained into (afaiu) an exploit against the Linux host. That's a pretty big risk.<p>Also, Cloudflare hosts some AI services, so it's possible that some consumers are running Python code in their containers, without the wasm sandbox.</p>
]]></description><pubDate>Thu, 07 May 2026 21:18:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=48055195</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=48055195</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48055195</guid></item><item><title><![CDATA[New comment by Yoric in "Why are there both TMP and TEMP environment variables? (2015)"]]></title><description><![CDATA[
<p>I remember the words "peeking" and "poking", but this may have been specific to basic.</p>
]]></description><pubDate>Sat, 02 May 2026 18:05:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=47988791</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47988791</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47988791</guid></item><item><title><![CDATA[New comment by Yoric in "Canonical/Ubuntu have been under DDoS"]]></title><description><![CDATA[
<p>Do they finally meet a human being with an explanation on the position on the 18th round?</p>
]]></description><pubDate>Fri, 01 May 2026 14:38:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47975307</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47975307</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47975307</guid></item><item><title><![CDATA[New comment by Yoric in "Canonical/Ubuntu have been under DDoS for more than 15h"]]></title><description><![CDATA[
<p>Well, that and the rush to upgrade for copy.fail.<p>Has Ubuntu published patches yet?</p>
]]></description><pubDate>Fri, 01 May 2026 11:22:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47973482</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47973482</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47973482</guid></item><item><title><![CDATA[New comment by Yoric in "The West forgot how to make things, now it’s forgetting how to code"]]></title><description><![CDATA[
<p>> > In software, for instance, it's exactly the opposite.<p>><p>> ??<p>During the last 30+ years, the trend has always been to increase hardware use to save on development/thinking time. AI is the latest and most extreme version of it.<p>> Argentina is hardly a free market country - <a href="https://borgenproject.org/hunger-in-argentina/" rel="nofollow">https://borgenproject.org/hunger-in-argentina/</a><p>Are you by any chance moving the goalposts?</p>
]]></description><pubDate>Mon, 27 Apr 2026 06:47:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47918455</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47918455</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47918455</guid></item><item><title><![CDATA[New comment by Yoric in "AI can cost more than human workers now"]]></title><description><![CDATA[
<p>Yup.<p>I think we have all heard of (or are living through) mandates to prove that AI makes us more productive, or else...<p>We'll see how many of these actually works out.</p>
]]></description><pubDate>Mon, 27 Apr 2026 06:44:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47918438</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47918438</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47918438</guid></item><item><title><![CDATA[New comment by Yoric in "The West forgot how to make things, now it’s forgetting how to code"]]></title><description><![CDATA[
<p>> Outsourcing happens when it is cheaper to build something somewhere else. Tariffs can compensate for that.<p>Is that free market?<p>> Where are the starving people in capitalist countries?<p>The first example from the top of my head is Argentina.<p>> A large part of profit maximization (i.e. optimizing) usually means reducing the amount of material needed. Isn't that a good thing?<p>This very much depends on the industry. In software, for instance, it's exactly the opposite.<p>> The people who "rough it" in the wilderness still seem to be backpacking in hi tech equipment. I read about the kit that Lewis & Clark carried. No thanks. (Even on that "Alone" show, they bring hi tech equipment.)<p>No idea what you're talking about.</p>
]]></description><pubDate>Sun, 26 Apr 2026 22:24:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47915367</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47915367</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47915367</guid></item><item><title><![CDATA[New comment by Yoric in "The West forgot how to make things, now it’s forgetting how to code"]]></title><description><![CDATA[
<p>I would argue that profit maximization has had very many effects.<p>On the one side, it has succeeded at reducing costs, which has indeed given rich societies unprecedented access to consumer goods.<p>On the other, it has outsourced from us both jobs and knowledge, which has resulted in higher unemployment and dissatisfaction, with as consequences the political dominoes we see falling internationally. That and the shoddy US health system (which the rest of the world seems to have decided to follow, for some reason).<p>And there is the small fact that we're in the process of optimizing the planet to death, and that not-so-rich countries (as well as formerly-rich ones) have starved to death for this high standard of living.<p>So, let's appreciate our standard of living, but not assume that it's necessarily a good thing in the grand scheme of things.</p>
]]></description><pubDate>Sun, 26 Apr 2026 20:22:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=47913893</link><dc:creator>Yoric</dc:creator><comments>https://news.ycombinator.com/item?id=47913893</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47913893</guid></item></channel></rss>