<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: ajross</title><link>https://news.ycombinator.com/user?id=ajross</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 13 Jun 2026 00:09:03 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=ajross" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by ajross in "US Consumer Price Index up 4.2%"]]></title><description><![CDATA[
<p>This kind of deliberate both-sides-ist ignorance is <i>PRECISELY</i> why those arguments work.  You aren't being smart, you are giving your overlords permission to lie to you.<p>These are tractable (if complicated) questions with real (if imprecise and inevitably debatable) conclusions.  Ignoring them because you don't like argument and are confused by the talking heads on the news is, to be blunt, destroying society.</p>
]]></description><pubDate>Thu, 11 Jun 2026 15:05:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48491362</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48491362</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48491362</guid></item><item><title><![CDATA[New comment by ajross in "Mercedes‑Benz starts large‑scale production of electric axial flux motor"]]></title><description><![CDATA[
<p>> The Chinese EV industry is actually lead by development of batteries<p>This is the core point, but it applies for the whole of the industry.  Motors just don't matter.  An electric motor is an almost vanishing component of the weight and complexity of an electric vehicle.  Cut the mass of the thing *in half* and you're looking at 100kg savings, tops.  You could do that with a Model Y by just changing the roof material to something boring and not glass.  You could almost do it by shrinking the oversized-as-is-the-fashion wheels.<p>So... it's great that Mercedez-Benz is producing these, I guess.  But it won't make their cars anything more than incrementally better.  Which is why we're seeing them crow about it in a press release and not a spec sheet.</p>
]]></description><pubDate>Wed, 10 Jun 2026 16:06:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48478425</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48478425</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48478425</guid></item><item><title><![CDATA[New comment by ajross in "Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot"]]></title><description><![CDATA[
<p>> But when humans handled it, this was not as much as a problem.<p>In fact it's arguably a feature.  The ability of support staff to short-circuit nitpicky rules when there's an obvious external validation happening (e.g. you're on the phone with a user who's presenting ID in real time and correlating it with previous use of the account, etc...) makes for better data quality and happier customers.<p>Obviously, yes, you can then human-engineer an authentication breach.  But that was very difficult, because people are "common-sense careful" in a way we haven't been able to tease out of AI yet.</p>
]]></description><pubDate>Sat, 06 Jun 2026 20:53:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=48428908</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48428908</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48428908</guid></item><item><title><![CDATA[New comment by ajross in "Google to pay SpaceX $920M a month for compute capacity at xAI data centers"]]></title><description><![CDATA[
<p>> So maybe long term this isn't a great business, but _right now_<p>Exactly!  "Maybe not a long term great business" is exactly the opposite of what you want to buy in an IPO.<p>This is a "private equity can squeeze out a ton of cash from this asset portfolio" situation, and very much <i>not</i> a "in a few years this will be a trillion dollar business competing with the biggest companies in the world" bet.</p>
]]></description><pubDate>Sat, 06 Jun 2026 19:21:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48428062</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48428062</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48428062</guid></item><item><title><![CDATA[New comment by ajross in "Google to pay SpaceX $920M a month for compute capacity at xAI data centers"]]></title><description><![CDATA[
<p>> Google renting infra from xAI, I did not see that coming.<p>Actually that seems to be fairly logical?  Hardware is what xAI <i>has</i>, and it's in great demand.  So sell what makes you money.  The real story here is that that xAI hardware is going to be running Gemini and not Grok.  Which is to say: Grok basically failed as a frontier AI and they need to pivot to a business model which makes money.<p>Obviously not everything Musk did was wrong.  xAI bought a ton of compute when it was possible to get it.  But the product they were going to build with it failed and so now they're deciding to be a landlord.<p>This IPO is just insane.  No way do you justify a $trillion+ valuation based on what amounts to a bunch of commoditized rent seeking endeavors.  Datacenters are buildings and chips, and everyone can build those.  Starlink is just an ISP with lots of competition at scale (they have the high bandwidth mobile market cornered, but that's a very small market!).  Mars is at best a grift on public funding.  Even satellite launch services are commoditized and competetive these days.</p>
]]></description><pubDate>Sat, 06 Jun 2026 13:31:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48424935</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48424935</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48424935</guid></item><item><title><![CDATA[New comment by ajross in "Wind and solar generated more power than gas globally in April 2026"]]></title><description><![CDATA[
<p>To be fair (and, somewhat ironically, rationally detached libertarian) that's the way it's <i>supposed</i> to be.  We don't develop and deploy technology to make a bunch of too-online nerds rich.  We develop and deploy technology to make everyone's lives better by providing goods at lower expense and lower externalized cost.</p>
]]></description><pubDate>Thu, 04 Jun 2026 15:08:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=48399815</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48399815</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48399815</guid></item><item><title><![CDATA[New comment by ajross in "Gmail thinks I'm stupid, so I left"]]></title><description><![CDATA[
<p>> [Stupid Other People] enjoy pissing away their own time ingesting the [LLM] output<p>Stop.  Yes yes, you are a fine writer with excellent communication skills.  You would never stoop so low as to allow a mere machine to write for you, and no such device is going to have anything but the most banal suggestions you would accept (I mean, even the most elite of us make the occasional typo, amirite?).<p>Many people (most, really) hate writing.  It's just difficult, for the same reason that you probably avoid, I dunno, dancing or public performance.  People have different skills.<p>And people who hate writing and know they aren't that great at it still know that their email is likely to land in the inbox of a snob like you.  So... they ask for help where they can get it.<p>To wit: be nice.  You're letting your ego drive you to some unpleasant places.  There's a fine line between chuckling at inappropriately-AI-enhanced communication and just being an asshole.</p>
]]></description><pubDate>Tue, 02 Jun 2026 21:14:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=48376404</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48376404</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48376404</guid></item><item><title><![CDATA[New comment by ajross in "Adafruit receives demand letter from Fenwick legal counsel on behalf of Flux.ai"]]></title><description><![CDATA[
<p>> nobody [wants to use AI] to augment already working solutions<p>Plenty of people do, but that only produces a blog post that will get you to the front page of HN.  If you want VCs to drop $40M on your head, you need to pretend to reinvent the world.<p>Then, to further appease the rain gods, you need to sue the bloggers on the front page of HN who are challenging your world-changing narrative.  Which will, heh, drop you on the front page of HN.<p>Our community is, literally, eating itself at this point.  There was a time when we actually took "make something people want" literally.  Now it's just part of the fiction.</p>
]]></description><pubDate>Tue, 02 Jun 2026 13:19:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=48369913</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48369913</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48369913</guid></item><item><title><![CDATA[New comment by ajross in "Malicious npm packages detected across Red Hat Cloud Services"]]></title><description><![CDATA[
<p>> Mandating that the final binary is compiled without having any access to any test file<p>It would, but I'm not seeing that as a suggestion?  That was a very clever side channel for hiding the build-time payload.  It wasn't remotely the "root cause" of the exploit, which was that a malicious actor got write access to the release process of trusted software.  I mean, if you can do that, you can surely find other clever ways to hide your junk.<p>To wit: you're not wrong, you're just stuck on minutiae.  By all means make the case, but at best you're proposing a small constant factor optimization.</p>
]]></description><pubDate>Tue, 02 Jun 2026 01:52:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=48364957</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48364957</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48364957</guid></item><item><title><![CDATA[New comment by ajross in "Malicious npm packages detected across Red Hat Cloud Services"]]></title><description><![CDATA[
<p>>  they very frequently get malicious npm packages taken down within a day of publishing<p>If I'm reading the secondarily-linked blog post correctly, this was live for 12 days before discovery.</p>
]]></description><pubDate>Mon, 01 Jun 2026 23:23:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48363887</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48363887</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48363887</guid></item><item><title><![CDATA[New comment by ajross in "Malicious npm packages detected across Red Hat Cloud Services"]]></title><description><![CDATA[
<p>> Certainly it's only by pure luck that no malefactors have infiltrated the [pinko commie Linux hippy commune]<p>Yeah... no.  Sorry, that's a wild misunderstanding of the economics of the Linux ecosystem, modern libertarian thought <i>and</i> the employment status of people with write access to the packaging layers.</p>
]]></description><pubDate>Mon, 01 Jun 2026 18:14:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=48360573</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48360573</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48360573</guid></item><item><title><![CDATA[New comment by ajross in "Malicious npm packages detected across Red Hat Cloud Services"]]></title><description><![CDATA[
<p>IMHO those are both lipstick on a pig solutions.  Ultimately all this stuff is just a variation of "make releases harder to publish", which isn't going to do anything but train people to evade them.  Notably, neither would have prevented the xz-utils backdoor from reaching package distribution, which remains the gold standard for sophisticated upstream compromise.<p>The bug here isn't that we need to better authenticate already-trusted upstreams for packages, it's that the upstreams <i>cannot be trusted as the sole source for security</i> at all.  Upstreams are a bunch of hackers[1] who aren't really interested in, nor will ever be good at, solid release engineering practices.<p>But some people are!  The solution in the Linux world (and the one that saved us from xz-utils) is that there is a <i>second level of human beings</i> responsible for reviewing, auditing, packaging, and customizing those hacker-generated upstreams for the benefit of their users.  These people have different eyes, different consumer requirements and different quality metrics.  And they catch bugs and malfesance that the upstreams aren't prepared to do.<p>NPM (and cargo/PyPI et. al.) continues to think it can short circuit this requirement for human labor.  It can't.<p>[1] In NPM's particular ecosystem, a bunch of web jockeys used to extremely fast release processes, loose compatibility requirements, and extreme reliance on reuse.  This really explains why we see this with node packages more than Python or Rust: older and more conservative programmers just don't have as many rakes to step on.</p>
]]></description><pubDate>Mon, 01 Jun 2026 17:52:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=48360266</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48360266</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48360266</guid></item><item><title><![CDATA[New comment by ajross in "Malicious npm packages detected across Red Hat Cloud Services"]]></title><description><![CDATA[
<p>While true, tarring Arch here is a little unfair.  AUR isn't enabled by default.  It can't even be used via the same package front end, and in fact the "official" usage model requires that you clone the source yourself.<p>Indeed, AUR is bad as a software distribution mechanism (really it's best understood as a proving ground for baby packages before they get real maintainers and distro blessing), but it's less bad than NPM which puts the malware in the trusted/default/automated path.</p>
]]></description><pubDate>Mon, 01 Jun 2026 13:50:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48356854</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48356854</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48356854</guid></item><item><title><![CDATA[New comment by ajross in "Malicious npm packages detected across Red Hat Cloud Services"]]></title><description><![CDATA[
<p>PyPI and Cargo are, 100%, vulnerable to this same class of compromises.  That NPM sucks isn't a statement that everyone else doesn't.</p>
]]></description><pubDate>Mon, 01 Jun 2026 13:47:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=48356823</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48356823</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48356823</guid></item><item><title><![CDATA[New comment by ajross in "Chuwi Minibook X"]]></title><description><![CDATA[
<p>AI can't make the Mandalorian or The Last of Us play, though.  This may have been fixed or worked around now, but for sure Disney+ and HBO were holdouts that refused to work on a Linux Chrome, Widevine be damned.<p>I mean, sure, I can torrent a copy or whatever.  But there's a point at which you just don't want to deal with that nonsense.  ChromeOS <i>is Linux</i>, in all the ways I care to measure.  But it codes as "not Linux" to all the corporate overlords afraid of the nerds and hippies, and that has value too.</p>
]]></description><pubDate>Mon, 01 Jun 2026 11:53:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=48355636</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48355636</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48355636</guid></item><item><title><![CDATA[New comment by ajross in "Chuwi Minibook X"]]></title><description><![CDATA[
<p>ptrace works fine on crostini.  The guest kernel has Yama enabled, which restricts it to root for boring security reasons.  You can do your debugging at a root shell or turn the setting (yama/ptrace_scope) off via sysctl.</p>
]]></description><pubDate>Mon, 01 Jun 2026 04:50:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=48352726</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48352726</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48352726</guid></item><item><title><![CDATA[New comment by ajross in "Chuwi Minibook X: the netbook we deserve"]]></title><description><![CDATA[
<p>You're losing me.  Your first reply says "A computer that meets my needs must provide a choice of OSes", your second says "A computer that meets my needs must run one specific OS".  To be blunt: your reasoning here is simply bunk and I don't understand it.<p>If you must use windows, then you must use windows and you don't have a choice.  None of that has anything to do with the nonsense about Chromebooks not being "real computers" or whatever, that's just the rationalization you've decided on.  <i>Obviously</i> they are real computers.</p>
]]></description><pubDate>Mon, 01 Jun 2026 03:18:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48352251</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48352251</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48352251</guid></item><item><title><![CDATA[New comment by ajross in "Chuwi Minibook X"]]></title><description><![CDATA[
<p>That works great until you inevitably need to launch some streaming service that doesn't work on Linux Chrome or whatever.  The needs of "general consumer junk we all deal with" are real.  I spent decades on the "I don't actually need that stuff" hamster wheel too, and... yeah, it sucks and I'm too old for that.<p>A Chromebook is a first class consumer device backed by a Big Threatening Tech Giant that works on all sites everywhere because no one wants to piss off Google. And it's still Linux and runs great.  I'll take it.</p>
]]></description><pubDate>Mon, 01 Jun 2026 02:54:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=48352131</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48352131</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48352131</guid></item><item><title><![CDATA[New comment by ajross in "Chuwi Minibook X"]]></title><description><![CDATA[
<p>> The key here is your needs.<p>Well... yeah.  Likewise your post is clearly about your needs, which are different.  But that's not what you said, you said it "wasn't a computer" and you couldn't use it "like a normal computer".  Which is obviously wrong.  But I guess "normal computer" means "windows" to you, which (especially given the forum you posted on!) is a little surprising.<p>So what you wrote (but apparently not meant) seemed mistaken to me, thus the correction.  But if you want windows then just buy windows.  Your market is well served.</p>
]]></description><pubDate>Mon, 01 Jun 2026 02:50:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=48352116</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48352116</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48352116</guid></item><item><title><![CDATA[New comment by ajross in "Chuwi Minibook X: the netbook we deserve"]]></title><description><![CDATA[
<p>That sounds like an opinion baked in 2013 and never revisited.  A modern chromebook with Crostini can run basically any Linux desktop stack you want.  Like, what exactly are the tasks you need from a "<i>computer</i> that you could use like a normal <i>computer</i>" that you aren't getting today?<p>As a data point: I'm 100% converted personally.  A Chromebook is what goes into my backpack and the device I use for all my general day-to-day UI clickery, and it's a <i>better</i> fit for my needs than Windows (not nearly as bad as it used to be but still sort of a PITA to make work as a Linux-focused dev environment) or Linux (not nearly as much of a PITA for a connected consumer network device but still has the occasional wart trying to get something weird to run).</p>
]]></description><pubDate>Mon, 01 Jun 2026 00:21:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48351252</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=48351252</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48351252</guid></item></channel></rss>