Hacker News: connor4312

New comment by connor4312 in "Zero-Touch OAuth for MCP"

connor4312 — Fri, 19 Jun 2026 02:22:01 +0000

It's as frugal as your harness makes it. It's just a bunch of tools and a description of how to use them. Most mature harnesses do some kind of tool search and/or progressive disclosure. Many harnesses have some smarts to page out overwhelming results to a file so a model can grep/jq them easily. Some harnesses expose tool schema to models so their results can be directly transformed or even chained in [code mode](https://blog.cloudflare.com/code-mode/).

New comment by connor4312 in "Google Antigravity exfiltrates data via indirect prompt injection attack"

connor4312 — Tue, 25 Nov 2025 22:03:35 +0000

Copilot will prompt you before accessing untrusted URLs. It seems a crux of the vulnerability that the user didn't need to consent before hitting a url that was effectively an open redirect.

New comment by connor4312 in "Directory of MCP Servers"

connor4312 — Sat, 17 May 2025 23:15:12 +0000

@ VS Code we've been collaborating on this and plan to ship initial support for registries in our next release.

New comment by connor4312 in "Study finds that budget cuts to public R&D would significantly hurt the economy"

connor4312 — Wed, 30 Apr 2025 15:35:12 +0000

For the same reason government in general (e.g. the US military) isn't funded by one big GoFundMe. The marginal value any individual actor gains from their investment in public research or services is almost zero. It only works when it's prescriptive on a large scale. See: the tragedy of the commons.

New comment by connor4312 in "Global IT outage shows dangers of cashless society, campaigners say"

connor4312 — Sat, 20 Jul 2024 19:24:47 +0000

Crowdstrike could have deployed the same broken code in their Linux or macOS agents. Nothing much for Windows to do if a kernel driver is segfaulting (when disabling it could be dangerous for users.)

New comment by connor4312 in "Debugging tricks in the browser"

connor4312 — Sat, 11 Nov 2023 15:44:12 +0000

That should work fine in the vscode debugger, you just want to make sure that the transpiler you're using is generating sourcemaps. Generally they do by default. If you have issues, open a github issue and I'll fix it :)

New comment by connor4312 in "Evading JavaScript anti-debugging techniques"

connor4312 — Tue, 01 Aug 2023 22:53:59 +0000

In the VS Code JS debugger, there's an option to "exclude caller" on a call frame that which prevents stacks with the given caller from pausing at a location. As mentioned elsewhere, browser devtools have something similar with "Never pause here." Do you think there's more than tools can do to make your process easier?

I maintain the vscode debugger and found both the article and your comment interesting--there's a large overlap between "programs with anti-debugger techniques" and "programs that are hard to debug."

New comment by connor4312 in "JavaScript and TypeScript features of the last 3 years"

connor4312 — Thu, 09 Mar 2023 16:48:36 +0000

Because your example is a breaking change, and breaking changes are hard to make in a runtime that needs to reasonably support two decades worth of web content.

For example, if you have a `binarySearch` function that returns -1 if an element isn't found, a developer might do something. `const result = arr[index]; if (result !== undefined) { ... }`. This would then start returning the last element instead of undefined at that index.

New comment by connor4312 in "Health effects of the use of non-sugar sweeteners: a review and meta-analysis"

connor4312 — Sun, 24 Jul 2022 04:42:23 +0000

Is your microbiome not "you"? It's as active a participant in your hormone balance as any other organ in your body.

You might say "I'm hungry", but it's not your rational brain deducing it's time to be hungry. Is an "I'm happy" triggered from the gut any less valid?

New comment by connor4312 in "Riot Games: Artificial Latency for Remote Competitors"

connor4312 — Tue, 17 May 2022 20:54:09 +0000

As I understand the blog post, the difficult (and buggy) part is not the addition of latency, but calculating how much latency to add and where to add it. I'm not sure how tc would help much here, and actually don't see anything to indicate they weren't using tc already.

New comment by connor4312 in "Shaving is an example of how consumer products extract more money"

connor4312 — Sat, 07 May 2022 15:43:09 +0000

I made the switch to a projector a couple years ago and advocate highly for them. The screen can disappear when not in use, and they're "dumb by default". New LED projectors have bulbs rated to last 10k hours or more.

New comment by connor4312 in "Jack Dorsey’s $2.9M NFT dropped 99% in value"

connor4312 — Mon, 18 Apr 2022 15:52:54 +0000

Wow, amazing ASCII art! Are you selling an NFT of it?

New comment by connor4312 in "I’m porting the TypeScript type checker tsc to Go"

connor4312 — Tue, 25 Jan 2022 20:52:41 +0000

Additionally, the language server used to power editors is long lived. TypeScript isn't just the compiler.

New comment by connor4312 in "Git.io no longer accepts new URLs"

connor4312 — Fri, 21 Jan 2022 17:21:47 +0000

This is a sad day for me. The obscurity of git.io, along with its nested obscurity of the ability to create vanity links, let me grab https://git.io/8. It looks like that'll go away one day, I wonder what will become of the domain itself; it's certainly a six figure property.

New comment by connor4312 in "Smartbolts"

connor4312 — Fri, 31 Dec 2021 16:18:58 +0000

When you said "some crazy canuck", I immediately knew it must be AvE

New comment by connor4312 in "Why thieves love to steal catalytic converters"

connor4312 — Sun, 21 Nov 2021 15:43:35 +0000

I recently bought a new Prius. Toyota even has bolt holes to allow easy installation of a "cat shield", and could install a nice steel plate there with minimal additional cost, but instead it was on me to buy and install an aftermarket product. Maybe it's a question of liability?

Vscode.dev

connor4312 — Wed, 20 Oct 2021 15:52:21 +0000

Article URL: https://code.visualstudio.com/blogs/2021/10/20/vscode-dev

Comments URL: https://news.ycombinator.com/item?id=28932206

Points: 803

# Comments: 260

New comment by connor4312 in "1700 Cascadia Earthquake"

connor4312 — Thu, 06 May 2021 01:32:23 +0000

This is a little pessimistic.[1] As a percentage, few people are expected to die, and modern buildings are unlikely to collapse. At least in the Puget Sound region, buildings codes have been seismically sound for several decades, and old buildings and infrastructure have gradually been retrofitted[2]. There is _already_ preparation being made with the aforementioned programs, and notably the Cascadia Rising simulation excercise carried out between the Washington and Oregon governments and FEMA.[3]

This will be a huge disaster, but our government and institutions are not apathetic to it.

1. https://www.newyorker.com/tech/annals-of-technology/how-to-s...

2. https://www.seattle.gov/Documents/Departments/Emergency/Plan...

3. https://www.fema.gov/press-release/20210318/emergency-manage... (a 2022 exercise is planned)

New comment by connor4312 in "Daisugi, the 600-year-old Japanese technique of growing trees out of other trees"

connor4312 — Thu, 29 Apr 2021 06:46:20 +0000

I noticed this as well visiting several years ago. For instance, even though the process for hotel check-in and most other services was automated with these fancy kiosks, they still had two people behind the desk in case you needed help.

In the west, humans are becoming less employable as they're displaced by automation--https://www.youtube.com/watch?v=7Pq-S557XQU is a good video if you haven't seen it, and it's from before AI/ML took off! Japan seems to have mitigated it by making automation an addition, instead of a replacement, in many cases. It's certainly not the efficient, capitalist thing to do, but maybe it's the better thing to do.

New comment by connor4312 in "Mighty Makes Google Chrome Faster"

connor4312 — Tue, 27 Apr 2021 23:22:51 +0000

Clicking the "security" tab on their website scrolls down at around 3 fps in Firefox running on a Ryzen 5900X and GTX 3080. (https://memes.peet.io/img/21-04-ed2a915e-f3cb-4372-ba3a-4a37...)

The solution to that problem is clearly to subscribe to their service so that I can stream from a less-anemic machine.