<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: blcknight</title><link>https://news.ycombinator.com/user?id=blcknight</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 21 Jun 2026 08:27:31 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=blcknight" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by blcknight in "Bun has an open PR adding shared-memory threads to JavaScriptCore"]]></title><description><![CDATA[
<p>I hear a lot of complaints about bun but nothing concrete about what broke in the migration.<p>You are also assuming one prompt, and then arguing against your assumptions with zero evidence. It is lazy arm chair criticism.</p>
]]></description><pubDate>Sat, 20 Jun 2026 22:33:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=48613613</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48613613</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48613613</guid></item><item><title><![CDATA[New comment by blcknight in "Hide Secrets from AI Agents and NPM install using Airgap"]]></title><description><![CDATA[
<p>How can an agent use these tokens then? If it sources the file can't it just read the env?<p>It also sounds like it is missing the important step of keeping the LLM credentials from the agents themselves.  For example my GCP creds have access to far more than Vertex. This is solved by OneCLI and OpenShell via MITM proxies which seems more elegant to me. The tools live in containers and can't see anything but can use everything.<p>It also allows finer grained access controls, rating limiting, and there's talk of scanning for destructive actions.</p>
]]></description><pubDate>Sat, 20 Jun 2026 01:02:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48605209</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48605209</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48605209</guid></item><item><title><![CDATA[New comment by blcknight in "Zero-Touch OAuth for MCP"]]></title><description><![CDATA[
<p>There's a new standard in progress for skills over MCP<p><a href="https://modelcontextprotocol.io/community/working-groups/skills-over-mcp" rel="nofollow">https://modelcontextprotocol.io/community/working-groups/ski...</a></p>
]]></description><pubDate>Fri, 19 Jun 2026 15:33:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48599774</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48599774</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48599774</guid></item><item><title><![CDATA[New comment by blcknight in "New way of making espresso with ultrasound"]]></title><description><![CDATA[
<p>I like my Nespresso thank you very much.</p>
]]></description><pubDate>Tue, 16 Jun 2026 09:26:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=48552689</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48552689</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48552689</guid></item><item><title><![CDATA[New comment by blcknight in "Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Packages"]]></title><description><![CDATA[
<p>"Review" them how? Read every single line of code before installing something? If it's a binary package, how do you do that? Make reproducible builds for everything you install? Move to from source distro? Putting this on users is not a tenable solution. There's room for common sense, but blaming the users for this is ridiculous</p>
]]></description><pubDate>Sat, 13 Jun 2026 15:47:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48518411</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48518411</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48518411</guid></item><item><title><![CDATA[New comment by blcknight in "Claude Fable is relentlessly proactive"]]></title><description><![CDATA[
<p>One bad npm package can really ruin your day. These things for me only run in their own VM with it's own GitHub account and basically nothing else</p>
]]></description><pubDate>Fri, 12 Jun 2026 02:24:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48499125</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48499125</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48499125</guid></item><item><title><![CDATA[New comment by blcknight in "Claude Fable 5"]]></title><description><![CDATA[
<p>The fallback doesn't seem to be working for me, I haven't scanned a project in it immediately booted me when it found a security bug even though I didn't ask for it</p>
]]></description><pubDate>Tue, 09 Jun 2026 19:13:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=48466131</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48466131</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48466131</guid></item><item><title><![CDATA[New comment by blcknight in "Codex just found a "workaround" of not having sudo on my PC"]]></title><description><![CDATA[
<p>Kube play and quadlets are cool</p>
]]></description><pubDate>Mon, 01 Jun 2026 01:41:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=48351717</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48351717</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48351717</guid></item><item><title><![CDATA[New comment by blcknight in "Kindle loyalists scramble as Amazon turns page on old e-readers"]]></title><description><![CDATA[
<p>The vast majority of kobo books are still ACSM protected.</p>
]]></description><pubDate>Sun, 24 May 2026 18:05:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48259589</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48259589</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48259589</guid></item><item><title><![CDATA[New comment by blcknight in "Kindle loyalists scramble as Amazon turns page on old e-readers"]]></title><description><![CDATA[
<p>It hasn't changed, and I don't know why people are saying that most books don't have DRM. It is only a small minority.<p>Tor books is the largest publisher without it (owned by Macmillan). Otherwise everything is truly hard DRM either ACSM with epub or Kindle's. They are both more or less easily defeated though.</p>
]]></description><pubDate>Sun, 24 May 2026 10:57:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48256246</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48256246</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48256246</guid></item><item><title><![CDATA[New comment by blcknight in "MCP Hello Page"]]></title><description><![CDATA[
<p>All kinds of tools make it really difficult to not make a URL clickable and even if it wasn't clickable they might still put it in address bar...</p>
]]></description><pubDate>Sun, 17 May 2026 00:04:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48164919</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=48164919</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48164919</guid></item><item><title><![CDATA[New comment by blcknight in "The agent harness belongs outside the sandbox"]]></title><description><![CDATA[
<p>I am not sure anyone knows what a harness is at this point. I've heard 17 different definitions of it at this point. It's almost like a buzzword in search of a problem.</p>
]]></description><pubDate>Sat, 02 May 2026 22:25:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=47991208</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47991208</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47991208</guid></item><item><title><![CDATA[New comment by blcknight in "IMF says America's $39T national debt is a global problem"]]></title><description><![CDATA[
<p>Trump just needs to mint a 39T coin with his face on it.</p>
]]></description><pubDate>Sat, 18 Apr 2026 19:10:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47818604</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47818604</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47818604</guid></item><item><title><![CDATA[New comment by blcknight in "Claude Code Routines"]]></title><description><![CDATA[
<p>That's why I mentioned `-p`.<p>`--continue` and `--resume` are broken from `-p` sessions for the last 2 weeks.  The use case is:<p>1. Do autonomous claudey thing (claude -p 'hey do this thing')<p>2. Do a deterministic thing<p>3. Reinvoke claude with `--continue`<p>This no longer works.  I've had this workflow in GitHub actions for months and all of a sudden they broke it.<p>They constantly break stuff I rely on.<p>Skill script loading was broken for weeks a couple months ago.
Hooks have been broken numerous times.<p>So tired of their lack of testing.</p>
]]></description><pubDate>Wed, 15 Apr 2026 01:11:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47773473</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47773473</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47773473</guid></item><item><title><![CDATA[New comment by blcknight in "Turn your best AI prompts into one-click tools in Chrome"]]></title><description><![CDATA[
<p>Fight enshittification. For whatever reason, many travel sites no longer send full details in the e-mail confirmation, they want you to click through to the site...which means I can't forward it to plans@tripit.com for automatic import.<p>Immediately after booking something,I tell Gemini to add it to my TripIt.  Works great.  I have a little prompt explaining how I like it formatted that I cut and paste, so I can just make this a one-click prompt. I could also have it add flights to my.flightradar24.com.<p>I also use Gemini in Chrome to add appointment confirmations to my calendar.  Or remember things in Google Keep.<p>There's lot of use cases for this kind of thing.</p>
]]></description><pubDate>Wed, 15 Apr 2026 00:07:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47773087</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47773087</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47773087</guid></item><item><title><![CDATA[New comment by blcknight in "Turn your best AI prompts into one-click tools in Chrome"]]></title><description><![CDATA[
<p>Lots of people are flocking to Claude and ChatGPT -- and making Gemini more useful in the browser everyone already has makes a lot of sense.<p>More Google use, more data they gather, more ads they can show you</p>
]]></description><pubDate>Tue, 14 Apr 2026 23:08:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=47772614</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47772614</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47772614</guid></item><item><title><![CDATA[New comment by blcknight in "Claude Code Routines"]]></title><description><![CDATA[
<p>For the love of god fix bugs and write some fricken tests instead of dropping new shiny things<p>It is absolutely wild to me you guys broke `--continue` from `-p` TWO WEEKS AGO and it is still not fixed.</p>
]]></description><pubDate>Tue, 14 Apr 2026 22:58:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47772534</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47772534</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47772534</guid></item><item><title><![CDATA[New comment by blcknight in "Apple's accidental moat: How the "AI Loser" may end up winning"]]></title><description><![CDATA[
<p>There is a cognitive ceiling for what you can do with smaller models. Animals with simpler neural pathways often outperform whatever think they are capable of but there's no substitute for scale. I don't think you'll ever get a 4B or 8B model equivalent to Opus 4.6. <i>Maybe</i> just for coding tasks but certainly not Opus' breadth.</p>
]]></description><pubDate>Mon, 13 Apr 2026 06:18:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=47748283</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47748283</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47748283</guid></item><item><title><![CDATA[New comment by blcknight in "Lay offs at Red Hat"]]></title><description><![CDATA[
<p>:-(</p>
]]></description><pubDate>Thu, 09 Apr 2026 19:19:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47708444</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47708444</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47708444</guid></item><item><title><![CDATA[New comment by blcknight in "The Claude Code Source Leak: fake tools, frustration regexes, undercover mode"]]></title><description><![CDATA[
<p>Yea this is the thing that makes no sense to me. Any frontier model can unmiminize minified JS pretty decently.  Obviously not everything comes through, comments and such, but I always assumed the reason it wasn't open source was to prevent an endless shitstorm of AI slop PR's, not because they were trying to protect secret sauce.</p>
]]></description><pubDate>Wed, 01 Apr 2026 00:59:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47595488</link><dc:creator>blcknight</dc:creator><comments>https://news.ycombinator.com/item?id=47595488</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47595488</guid></item></channel></rss>