Hacker News: cobbal

New comment by cobbal in "Claude: Elevated errors across all models – Resolved"

cobbal — Wed, 29 Jul 2026 20:21:20 +0000

AI is a technology for removing nines from uptime, and adding them to Sturgeon's law.

New comment by cobbal in "Now is the time to give LLMs access to the ACM digital library"

cobbal — Tue, 28 Jul 2026 17:31:12 +0000

ACM agrees I think: https://dl.acm.org/openaccess

> Beginning January 2026, all ACM publications and related artifacts in the ACM Digital Library will be made open access.

New comment by cobbal in "Claude Is Not a Compiler"

cobbal — Tue, 21 Jul 2026 16:17:41 +0000

Determinism isn't the main hurdle. It would be a moderate effort to engineer a deterministic claude that would be no more useful than the current one.

The key characteristic of a compiler is that it takes a source language with a well-defined meaning to a target language with a well-defined meaning.

The reason claude fails to be a compiler is that its input language (english) can't be precisely defined. (And even if that were possible, it would very often fail to preserve the meaning when "compiling")

New comment by cobbal in "FCC approves test of space mirror to light night sky"

cobbal — Sat, 11 Jul 2026 16:05:41 +0000

You may have been thinking of this one instead https://what-if.xkcd.com/141/ . Maybe we should put Randall on the supervillain watchlist.

New comment by cobbal in "Leaking YouTube creators' private videos"

cobbal — Sat, 04 Jul 2026 21:13:57 +0000

This is a case of lethal trifecta. This particular one can be fixed by either not giving the AI private data, or by removing the exfiltration opportunity. Why does the comment-summary bot need access to your private video ids? Why does it need to be able to output links?

Most cases of prompt injection are harder to fix, and the success of the products they occur in relies on engineers who should know better sticking their heads in the sand about security risks.

New comment by cobbal in "Statement on US government directive to suspend access to Fable 5 and Mythos 5"

cobbal — Sat, 13 Jun 2026 01:01:12 +0000

Sadly, I suspect this will be the best piece of marketing they could ever hope for. "It's so advanced the government made us add extra security* to stop hackers!"

*(ask it in a more stern voice)

New comment by cobbal in "Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue"

cobbal — Thu, 28 May 2026 17:53:04 +0000

Here's the threat model I (a luddite) use to evaluate these. The claude code harness can be mostly trusted, the model cannot be trusted because it is exposed to untrusted data from the internet, and there is no separation of data/code in an llm [0][1].

I want to avoid running untrusted code on my local machine, because it could steal secrets, install malware, etc.

Since the model is allowed to write without restriction (I think) to the project directory, anything in the project directory is also untrusted. Running standard commands from the system is fine, as long as you know what those commands are going to do. Running anything from the local directory should be avoided because the code is untrusted.

This is just one security model, there are many others! If a person is running claude in a stronger sandbox, that changes the model considerably. What threat model do you use to evaluate whether an agent's actions are safe?

[0]: https://www.schneier.com/essays/archives/2024/05/llms-data-c... [1]: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/

New comment by cobbal in "Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue"

cobbal — Thu, 28 May 2026 15:49:13 +0000

That's funny. It told me that blocking "npm run build" was the wrong answer. Maybe it doesn't really under The threat model.

New comment by cobbal in "Stop Advertising in Your Commits"

cobbal — Tue, 26 May 2026 19:54:44 +0000

If co-authorship implies holding rights, then what gives the "primary author" who just prompted for the code the right to add their own name?

New comment by cobbal in "AI has a multiplying effect on existing technical skills"

cobbal — Fri, 22 May 2026 17:25:54 +0000

It makes up for that by also multiplying the productivity and happiness of the people who have to review your code by 0.5 too.

New comment by cobbal in "What Do Gödel's Incompleteness Theorems Mean?"

cobbal — Thu, 21 May 2026 16:34:29 +0000

I think that's selling the theorems a little short. A math system with arithmetic is equal to, or more powerful than, a computer. For an example, even classical logic comes with the law of excluded middle that can say (internally) if a program halts or not. Incompleteness applies to all the stronger systems as well.

New comment by cobbal in "Union types in C# 15"

cobbal — Wed, 08 Apr 2026 18:24:19 +0000

Null doesn't. `union(Int?, String?)` will only have 1 type of null, unlike a proper discriminated union.

New comment by cobbal in "Show HN: Stop paying for Dropbox/Google Drive, use your own S3 bucket instead"

cobbal — Tue, 07 Apr 2026 15:50:36 +0000

Take your pick :) https://www.templatemaker.nl/en/

New comment by cobbal in "Google details new 24-hour process to sideload unverified Android apps"

cobbal — Thu, 19 Mar 2026 18:44:55 +0000

Can you set your clock forward or does this also require phoning home to a central server to install an app on your computer?

New comment by cobbal in "Don't post generated/AI-edited comments. HN is for conversation between humans"

cobbal — Wed, 11 Mar 2026 20:33:07 +0000

Here's a version from 2014 in the same style if you're curious: https://web.archive.org/web/20140702092610/https://news.ycom...

New comment by cobbal in "Google Workspace CLI"

cobbal — Thu, 05 Mar 2026 02:48:51 +0000

They're not doing so here, but shipping a wasm-compiled binary with npm that uses node's WASI API is a really easy way to ship a cross-platform CLI utility. Just needs ~20 lines of JS wrapping it to set up the args and file system.

New comment by cobbal in "AI makes you boring"

cobbal — Thu, 19 Feb 2026 21:46:30 +0000

We guarantee 5 nines of uptime, and 1 nine of not killing people

New comment by cobbal in "Show HN: Maths, CS and AI Compendium"

cobbal — Mon, 16 Feb 2026 20:57:20 +0000

It's just a regional thing. Neither is correct or wrong. You may as well yell at a french person that the word is "cheese", not "formage".

From the very article you linked:

> In English, the noun mathematics takes a singular verb. It is often shortened to maths or, in North America, math.

New comment by cobbal in "NanoClaw solves one of OpenClaw's biggest security issues"

cobbal — Wed, 11 Feb 2026 17:39:44 +0000

This is cutting off the "Access to private data" leg of the lethal trifecta. One of the few ways to actually make an agent secure.

New comment by cobbal in "Y Combinator will let founders receive funds in stablecoins"

cobbal — Tue, 03 Feb 2026 23:54:10 +0000

Ohhhh... So that's why it's called Y combinator.