<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: alexchantavy</title><link>https://news.ycombinator.com/user?id=alexchantavy</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 21 Jun 2026 10:05:23 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=alexchantavy" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[What it's like being the only security company in your YC batch]]></title><description><![CDATA[
<p>Article URL: <a href="https://ventureinsecurity.net/p/what-its-like-being-the-only-security">https://ventureinsecurity.net/p/what-its-like-being-the-only-security</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=48586295">https://news.ycombinator.com/item?id=48586295</a></p>
<p>Points: 4</p>
<p># Comments: 1</p>
]]></description><pubDate>Thu, 18 Jun 2026 14:49:28 +0000</pubDate><link>https://ventureinsecurity.net/p/what-its-like-being-the-only-security</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=48586295</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48586295</guid></item><item><title><![CDATA[New comment by alexchantavy in "Tailwind and slop apps"]]></title><description><![CDATA[
<p>I miss that 2010s startup look</p>
]]></description><pubDate>Fri, 12 Jun 2026 01:35:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=48498771</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=48498771</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48498771</guid></item><item><title><![CDATA[New comment by alexchantavy in "Claude Fable 5"]]></title><description><![CDATA[
<p>High, extra, or max?</p>
]]></description><pubDate>Tue, 09 Jun 2026 20:58:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48467671</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=48467671</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48467671</guid></item><item><title><![CDATA[New comment by alexchantavy in "GitHub CLI now collects pseudoanonymous telemetry"]]></title><description><![CDATA[
<p>The problem they're trying to solve is to find out what functions of their software are most useful for people and what to invest in, and to make directions on product direction.<p>Yes, vendors can, do, and should talk to users, but then a lot of users don't like receiving cold messages from vendors (and some users go so far as to say that cold messages should _never_ be sent).<p>So, the alternative is to collect some soft telemetry to get usage metrics. As long as a company is upfront about it and provides an opt-out mechanism, I don't see a problem with it. Software projects (and the businesses around them) die if they don't make the right decisions.<p>As an open source author and maintainer, I very rarely hear from my users unless I put in the legwork to reach out to them so I completely identify with this.</p>
]]></description><pubDate>Wed, 22 Apr 2026 14:56:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47864562</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47864562</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47864562</guid></item><item><title><![CDATA[New comment by alexchantavy in "Ask HN: Who is using OpenClaw?"]]></title><description><![CDATA[
<p>Great article, thanks for sharing. How much does it run you a month roughly?</p>
]]></description><pubDate>Thu, 16 Apr 2026 02:36:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47787993</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47787993</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47787993</guid></item><item><title><![CDATA[New comment by alexchantavy in "The tech jobs bust is real. Don't blame AI (yet)"]]></title><description><![CDATA[
<p>> You could look at your denigrators and decide: "fuck you"<p>That escalated quickly and I enjoyed this comment a lot</p>
]]></description><pubDate>Mon, 13 Apr 2026 23:51:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47759480</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47759480</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47759480</guid></item><item><title><![CDATA[New comment by alexchantavy in "Exploiting the most prominent AI agent benchmarks"]]></title><description><![CDATA[
<p>I wonder what college freshman-level writing classes are teaching about writing voice and AI. The tell-tale patterns are pretty frustrating to read.</p>
]]></description><pubDate>Sat, 11 Apr 2026 20:59:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47733975</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47733975</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47733975</guid></item><item><title><![CDATA[Shift-right: attack path analysis that never wastes a good incident]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.subimage.io/blog/shift-right-attack-paths/">https://www.subimage.io/blog/shift-right-attack-paths/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47706240">https://news.ycombinator.com/item?id=47706240</a></p>
<p>Points: 5</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 09 Apr 2026 17:05:58 +0000</pubDate><link>https://www.subimage.io/blog/shift-right-attack-paths/</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47706240</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47706240</guid></item><item><title><![CDATA[New comment by alexchantavy in "I ported Mac OS X to the Nintendo Wii"]]></title><description><![CDATA[
<p>The solution to every software problem is another layer of indirection :-)</p>
]]></description><pubDate>Wed, 08 Apr 2026 20:21:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47695764</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47695764</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47695764</guid></item><item><title><![CDATA[New comment by alexchantavy in "AI may be making us think and write more alike"]]></title><description><![CDATA[
<p>I sure hope so. The way companies are pressured to hit growth numbers, I really hope messaging in general doesn’t all get sloppified along with code lol.<p>I think AI writing makes humanities and writing courses more important, and I hope people maintain their sense of taste with writing, but tbh I’m not optimistic here.</p>
]]></description><pubDate>Tue, 07 Apr 2026 17:38:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47678734</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47678734</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47678734</guid></item><item><title><![CDATA[New comment by alexchantavy in "Having Kids (2019)"]]></title><description><![CDATA[
<p>My favorite part is how pg says how kids made him less ambitious, but then:<p>“On the other hand, what kind of wimpy ambition do you have if it won't survive having kids? Do you have so little to spare?”</p>
]]></description><pubDate>Fri, 20 Mar 2026 15:33:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47456074</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47456074</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47456074</guid></item><item><title><![CDATA[New comment by alexchantavy in "“Your frustration is the product”"]]></title><description><![CDATA[
<p>Relevancy is a big point here. HN readers work in tech or are super interested in tech, YC companies do very technical things so hiring posts or launches tend to blend right in for the most part.</p>
]]></description><pubDate>Fri, 20 Mar 2026 05:14:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47450762</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47450762</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47450762</guid></item><item><title><![CDATA[New comment by alexchantavy in "Astral to Join OpenAI"]]></title><description><![CDATA[
<p>I think this overstates the “betrayal” angle.<p>A lot of great open source comes out of startups because startups are really good at shipping fast and getting distribution (open source is part of this strategy). Users can try the tool immediately, and VC funding can put a lot of talent behind building something great very quickly.<p>The startup model absolutely creates incentive risk, but that’s true of any project that becomes important while depending on a relatively small set of maintainers or funders.<p>I’m not sure an acquisition is categorically different from a maintainer eventually moving on or burning out. In all of those cases, users who depend on the project take on some risk. That’s not unique to startups; it’s true of basically any software that becomes important.<p>There’s no perfect structure for open source here - public funding, nonprofit support, and startups all suck in their own ways.<p>And on the point you make about public funding being slow: yeah, talented people can’t work full-time on important things unless there’s serious funding behind it. uv got as good as it is because the funding let exceptional people work on it full-time with a level of intensity that public funding usually does not.</p>
]]></description><pubDate>Thu, 19 Mar 2026 17:17:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47442709</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47442709</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47442709</guid></item><item><title><![CDATA[New comment by alexchantavy in "Snowflake AI Escapes Sandbox and Executes Malware"]]></title><description><![CDATA[
<p>Seems like in this new AI world that the word sandbox is used to describe a system that asks "are you sure".<p>I'm used to a different usage of that word: from malware analysis, a sandbox is a contained system that is difficult to impossible to break out of so that the malware can be observed safely.<p>Applying this to AI, I think there are many companies trying to build technical boundaries stronger than just "are you sure" prompts. Interesting space to watch.</p>
]]></description><pubDate>Wed, 18 Mar 2026 20:51:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47431294</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47431294</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47431294</guid></item><item><title><![CDATA[New comment by alexchantavy in "Meta Horizon Worlds on Meta Quest is being discontinued"]]></title><description><![CDATA[
<p>Haha FB Cloud sounds so wild to imagine</p>
]]></description><pubDate>Wed, 18 Mar 2026 03:21:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47421264</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47421264</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47421264</guid></item><item><title><![CDATA[Mapping production AI agents to IAM roles, tools, and network exposure]]></title><description><![CDATA[
<p>Article URL: <a href="https://cartography.dev/blog/aibom">https://cartography.dev/blog/aibom</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47357752">https://news.ycombinator.com/item?id=47357752</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 12 Mar 2026 21:54:02 +0000</pubDate><link>https://cartography.dev/blog/aibom</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47357752</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47357752</guid></item><item><title><![CDATA[New comment by alexchantavy in "The dead Internet is not a theory anymore"]]></title><description><![CDATA[
<p>Vrei sa pleci dar numa numa iei
numa numa iei
numa numa numa iei<p>bring back the old internet</p>
]]></description><pubDate>Wed, 11 Mar 2026 21:30:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47342257</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47342257</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47342257</guid></item><item><title><![CDATA[New comment by alexchantavy in "Launch HN: Terminal Use (YC W26) – Vercel for filesystem-based agents"]]></title><description><![CDATA[
<p>I think there are some primitives for agents that need to be built out for better security and being able to reason about them.<p>Agents run on infra, they have network connectivity, they have ACLs and permissions that let them  read+write+execute on resources, they can interact with other agents.<p>To manage them from both an infra and security perspective, we can use the existing underlying primitives, but it's also useful to build abstractions around them for management, kind of like how microservices encapsulate compute+storage+network together.<p>I think of agents as basically microservices that can act in non-deterministic ways, and the potential "blast radius" of their actions is very wide. So you need to be able to map what an agent can do, and it's much easier to do that if there are abstractions or automatic groupings instead of doing this all ourselves.</p>
]]></description><pubDate>Mon, 09 Mar 2026 17:40:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=47312425</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47312425</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47312425</guid></item><item><title><![CDATA[New comment by alexchantavy in "10% of Firefox crashes are caused by bitflips"]]></title><description><![CDATA[
<p>The PvP was so deep too. You would go 4v4 or 8v8 and coordinate a “3, 2, 1 spike” on a target so that all your damage would arrive at the same time regardless of spell windup times and be too much for the other team’s healer to respond to.<p>Could also fake spike to force the other team’s healer to waste their good heal on the wrong player while you downed the real target. Good times.</p>
]]></description><pubDate>Fri, 06 Mar 2026 07:53:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47272214</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47272214</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47272214</guid></item><item><title><![CDATA[New comment by alexchantavy in "Labor market impacts of AI: A new measure and early evidence"]]></title><description><![CDATA[
<p>Data point of 1: Having hired juniors as a startup founder, I need more generalists than AI/ML specialists. AI application work right now is basically standard software engineering - you’re finding clever ways to supply the right context to a model within certain constraints.<p>No one knows what’s going to happen in the future. Yes there already are fewer SWE jobs than before because of AI, and yes the days of companies hiring new grads in droves at $300k+ packages are likely over. IMO all you can really do is study what you’re interested in, learn it deeply, and do good work with cool people. If unsure, it’s possible to go back to what you were doing before if the new path doesn’t work out.</p>
]]></description><pubDate>Fri, 06 Mar 2026 06:56:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=47271816</link><dc:creator>alexchantavy</dc:creator><comments>https://news.ycombinator.com/item?id=47271816</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47271816</guid></item></channel></rss>