<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: danudey</title><link>https://news.ycombinator.com/user?id=danudey</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 17 Aug 2026 06:51:03 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=danudey" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by danudey in "Show HN: Git-knife – Edit commit messages, authors, and dates like a spreadsheet"]]></title><description><![CDATA[
<p>For what it's worth, I've used Claude to write a lot of smaller utility tools that I wouldn't normally have the time to sit down and implement, but which also solve straightforward problems.<p>One small example is an extension for the `gh` cli where I give it a PR number and multiple branches and it cherry-picks that PR to those branches, or lets me know if some of the branches don't work. For managing multiple release branches it's very handy, but not so handy that I would have spent a lot of time and energy doing a good job of it.<p>This seems like a similar sort of thing - a user friendly way to do something that most people don't need, and most people who need it probably don't need it very badly.<p>I haven't used claude to replace my actual skills - researching, solving problems, etc. - but I do use it to replace all the stuff which is essentially 'spend a few hours reading API docs and writing boilerplate code'.</p>
]]></description><pubDate>Tue, 11 Aug 2026 16:47:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49260984</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49260984</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49260984</guid></item><item><title><![CDATA[New comment by danudey in "Windows 11's built-in Weather app wastes more than 1 GB of RAM"]]></title><description><![CDATA[
<p>My Windows 98 install got ten times faster when I went from 32 MB of RAM to 48 MB of RAM.<p>A fresh boot of my Windows 98 install at the time, once everything was loaded and settled, used up 27 MB of RAM, meaning that after 5 MB of allocations someone was getting paged out somewhere. That extra 16 MB made a world of difference.<p>Do bear in mind, though, that we're dealing with a lot more than we were back then. Our hardware is more complex, with more and more complex drivers needed to manage more things. Accessibility is different, screens are larger (my monitor now has 27 times the pixels as my monitor then) meaning more memory required for larger textures which are now composited in hardware rather than re-rendered every frame.<p>I agree with others that things are ridiculous these days, but it's also easy to see that our expectations also need to adjust somewhat. Still, using a webview for displaying the weather... I get why they do it, but it's a scourge. It's emblematic of their care for the customer, which is nonexistent.</p>
]]></description><pubDate>Sun, 09 Aug 2026 22:05:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=49236586</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49236586</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49236586</guid></item><item><title><![CDATA[New comment by danudey in "New Mexico court orders Meta to pay $567m over harms to children’s mental health"]]></title><description><![CDATA[
<p>If only society paid the cost of mental health in increased counselling that money would go a lot further.</p>
]]></description><pubDate>Fri, 07 Aug 2026 17:18:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=49213517</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49213517</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49213517</guid></item><item><title><![CDATA[New comment by danudey in "Atlassian Rovo Exfiltrates Data, Bypassing Controls"]]></title><description><![CDATA[
<p>Knowing that our competitor is trying to poach one of our clients away by promising a new feature could be very useful to us. Likewise, knowing that a competitor is at risk of losing a customer because they won't implement a feature that we're willing to implement (or already have) is a qualified sales lead.<p>All of this would be illegal if discovered in this way, presumably, but it's not entirely accurate to say that information is not power.</p>
]]></description><pubDate>Thu, 06 Aug 2026 17:42:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199877</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199877</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199877</guid></item><item><title><![CDATA[New comment by danudey in "Humans missed 1 in 3 threats approving AI agent commands across 40k game runs"]]></title><description><![CDATA[
<p>In Firefly (as in Rust) you can define fields as Optional, so you can do Option[String]; that lets you say "this variable is a String but it might not be here". That lets you then check to see if something is set, rather than checking to see if it's null.<p>In Rust an Option is a separate thing that you need to disambiguate to use. For example:<p><pre><code>    match result {
        // The division was valid
        Some(x) => println!("Result: {x}"),
        // The division was invalid
        None    => println!("Cannot divide by 0"),
    }
</code></pre>
Likewise in Rust, you can't have a null pointer, but you can have an Optional pointer, which is either a pointer to something or is not anything.<p>Firefly seems to have a similar case structure, though the first example I could find is in the Exceptions section: <a href="https://www.firefly-lang.org/reference/exceptions" rel="nofollow">https://www.firefly-lang.org/reference/exceptions</a><p><pre><code>    grabOption[T](option: Option[T]): T {
        | Some(v) => v
        | None => throw(GrabException())
    }</code></pre></p>
]]></description><pubDate>Thu, 06 Aug 2026 17:34:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199776</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199776</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199776</guid></item><item><title><![CDATA[New comment by danudey in "Humans missed 1 in 3 threats approving AI agent commands across 40k game runs"]]></title><description><![CDATA[
<p>The way our Claude Codes are configured at work is pretty nice. There are directory patterns it can't access, like .local or .config, so when it needs to it creates a throwaway scratch pad and asks you to put stuff there; screenshots, text files, command output, etc.<p>I was having it diagnose a GNOME extension and had to get it a copy of the code to work on; it would then write out a Python script to do the patching (which I could inspect beforehand) and have me execute it.<p>Not having access to .local or .config can be irritating sometimes, but it's nice to know it's not just going to exfiltrate my docker or gcloud credentials.</p>
]]></description><pubDate>Thu, 06 Aug 2026 17:21:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199620</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199620</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199620</guid></item><item><title><![CDATA[New comment by danudey in "Humans missed 1 in 3 threats approving AI agent commands across 40k game runs"]]></title><description><![CDATA[
<p>This is a complex task, and I want to avoid blatant self-promotion, but there are solutions that people are building which allows you to give a degree of freedom to your agents but also lock them down as well. Our company has a product which is just one such example. At this point it's really geared towards orgs running agents in a cluster to handle tasks, rather than e.g. making sure your claude code doesn't post your GPG keys to the blockchain or something.<p>In essence, you lock down all the agents completely except for permitted use cases; X agent can talk to Y agent, Z agent can talk to Q MCP server.<p>You register your agents, define things around them, what they can and can't do, which LLMs they can actually talk to, what sites they can access, network controls, etc.<p>We call ours Lynx, and it's a pretty cool product. As I said, this isn't for people running coding agents or openclaw or whatever, though the technology could do that if you coupled it with e.g. some kind of MicroVM sandbox like docker's sbx. If you want to see the sort of controls that you can put on an agent we have demo videos and stuff that show how things work: <a href="https://www.tigera.io/tigera-products/lynx/" rel="nofollow">https://www.tigera.io/tigera-products/lynx/</a><p>The idea for Lynx is:<p>1. Your org has a bunch of scoped agents<p>2. You have a fixed list of what those agents should be doing and what they need to be accessing<p>3. They don't or won't need to access anything else<p>So for example, say you have an MCP server which gives you information about a kubernetes cluster. You create an agent that can query that MCP server and summarize information about it. You also have a database that associates kubernetes namespaces with the departments that use them, and an MCP server for that.<p>Now you can create an agent whose sole purpose is to generate usage analysis for the kubernetes cluster broken down by department.<p>Then maybe you have another agent with access to an MCP server which shows cloud spend in detail. That agent can query the first agent to get usage analysis and then cross-reference it with cloud spend to determine if any departments are showing sudden cost increases and generate a report for that.<p>The first agent gets locked down to only access those two MCP servers and whatever LLM. The second AI gets locked down to only access the first agent, the cloud MCP server, and whatever LLM.<p>The whole system is really neat. I think for a more open agent, like openclaw for example, you'd probably want to build out that sandbox with its own interactive permissions management; sort of like Little Snitch on macOS, where it pops up something asking if you're okay with program X doing network connection Y, you could have the sandbox say "agent is trying to access docs.foobar.io, is that okay?" or "agent is trying to run `gh pr list`, allow?" It's not realistic to pre-specify everything that Claude Code is allowed to do or access; even "raw.githubusercontent.com" could be the README for the program you're debugging or someone's sandbox-escaping exploit, but it's a good start.</p>
]]></description><pubDate>Thu, 06 Aug 2026 17:19:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199574</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199574</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199574</guid></item><item><title><![CDATA[New comment by danudey in "Humans missed 1 in 3 threats approving AI agent commands across 40k game runs"]]></title><description><![CDATA[
<p>"Uh oh, this is a problem. Welp, I'm outta here, good luck."</p>
]]></description><pubDate>Thu, 06 Aug 2026 16:59:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199318</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199318</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199318</guid></item><item><title><![CDATA[New comment by danudey in "Humans missed 1 in 3 threats approving AI agent commands across 40k game runs"]]></title><description><![CDATA[
<p>MySQL installed with skip-networking was very common, but as soon as you need to access it over the network (e.g. when you move from one box with MySQL and PHP to one for each) then you have to enable networking and everything falls apart.<p>Also, the number of times in my career that I've googled a problem and seen some forum post saying "Oh, just run chmod -R 777 /var/www/wordpress/uploads/ and it'll fix that" "Great it worked thanks!" tells me that it's the blind leading the blind out there and I'm sure there's tons of forum posts telling people how to disable authentication on their MySQL and disable iptables on their server so that their PHP app can connect to the DB without a password.</p>
]]></description><pubDate>Thu, 06 Aug 2026 16:58:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199309</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199309</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199309</guid></item><item><title><![CDATA[New comment by danudey in "Four simple rules behind Japan's most liveable cities"]]></title><description><![CDATA[
<p>All of your complaints sound like someone who is projecting American values and behavior onto another culture.<p>> Or new local businesses cannot start because they can't buy property limiting options for consumers?<p>Are a lot of new local businesses starting up in America's suburbs? Is it a problem to have the same shops operating in the community for decades if they serve the community's needs?<p>Even in Manhattan I saw 'shops' which seemed to have a similar square footage to my bathtub; if there's an opportunity people will find a way.<p>> And public transit stops become noise and litter parties.<p>If you have garbage cans at your transit stops and your populace are respectful towards each other then this is also not a problem. If your idea of a transit stop is somehow also some kind of rowdy social event then the problem is not urban planning.<p>Fundamentally though this is a common American attitude. Look at something that's new and different and say "This would be bad for these reasons", ignoring the fact that dozens of other Western and Eastern countries with dozens of different cultures and behaviors all do these things and it all works out fine.<p>It's the same as the argument about health care. Socialized medicine would be bad for reasons X, Y, Z, even though if you look at countries which have socialized medicine and a similar standard of living you'll see that not only do those countries not have those problems but also those countries have better health outcomes, longer life expectancy, and more efficient healthcare.<p>You say that none of this stuff would work in "a culture that isn't Japanese", but what you really mean is that it wouldn't work "in a culture which is American", so maybe that's a good place to start looking for things to change.</p>
]]></description><pubDate>Thu, 06 Aug 2026 16:38:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=49199041</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49199041</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49199041</guid></item><item><title><![CDATA[New comment by danudey in "Four simple rules behind Japan's most liveable cities"]]></title><description><![CDATA[
<p>Or come to downtown Vancouver. I live in a small apartment, but within four blocks I have a community centre with gym, a pharmacy, a post office, a grocery store, a small bakery, the best liquor store in the city, three banks, a hot pot restaurant, a physiotherapist/massage therapist office, a vet, a dispensary, multiple hairdressers, an optometrist, several restaurants, two places to get gelato, a public plaza with a weekly farmer's market, a walking/cycling route along the waterfront, a car wash, a sports bar with arcade machines, skeeball, and pinball, an enclosed pollinator meadow, a science museum/IMAX theatre, two separate public "subway" lines (though one is elevated and one is below-grade), and two private but inexpensive water taxi services.<p>I can leave my house at 6 AM and go get fresh bread or baked goods and go sit by the water, or I can leave the house at 7 AM to get groceries if I'm out of something and be back by 7:10.<p>American cities don't want this because having a huge empty house with a huge empty yard and having to drive 90 minutes to get to work or 30 minutes to get groceries is the American Dream and no one who's been sold this dream wants to believe that there are so many better and more efficient ways to live.</p>
]]></description><pubDate>Thu, 06 Aug 2026 16:11:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=49198674</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49198674</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49198674</guid></item><item><title><![CDATA[New comment by danudey in "Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery"]]></title><description><![CDATA[
<p>The article also mentions that a ton of <i>even worse</i> ads were posted between when they contacted Meta and when they were ready to go live with the article, and some of the offending ads which were taken down had just been re-uploaded again and automatically approved.<p>Not only are their AI tools ineffective at what they claim they should be doing, they can't even be bothered to prevent removed ads from being re-uploaded later on.</p>
]]></description><pubDate>Wed, 05 Aug 2026 21:09:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=49189049</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49189049</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49189049</guid></item><item><title><![CDATA[New comment by danudey in "RipGrep musl binaries occasionally segfault during very-large searches"]]></title><description><![CDATA[
<p>Is that memory increase seen in peak usage or average/idle usage?<p>For file servers, I could be willing to give up 350 MB of memory temporarily for large-scale indexing and thumbnailing operations if it doesn't happen often and makes the file serving/browsing more responsive.</p>
]]></description><pubDate>Sat, 01 Aug 2026 16:55:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=49136095</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49136095</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49136095</guid></item><item><title><![CDATA[New comment by danudey in "SpaceX bond worth 10% less than issue price – heading for junk bond status"]]></title><description><![CDATA[
<p>Yes, which means that we can easily see that capitalism does not optimize for a better world or a more practical market or a better product, but instead optimizes for extracting the maximum wealth possible from the market and consolidating it as much as possible.</p>
]]></description><pubDate>Fri, 31 Jul 2026 18:58:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=49127251</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49127251</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49127251</guid></item><item><title><![CDATA[New comment by danudey in "GrapheneOS Defends Data-Wiping Function That Blocked US Border Search"]]></title><description><![CDATA[
<p>Carrying a blank phone is much less suspicious than carrying a locked phone that you then trick border officers into wiping all the data off of.<p>I agree that it's legally irrelevant, but we've seen many court rulings lately where legally relevant things are ignored (e.g. 'the president is immune to any legal repercussions from committing crimes') so given the current political climate I think 'bad look' is still relevant in practice.</p>
]]></description><pubDate>Fri, 31 Jul 2026 18:57:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=49127237</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49127237</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49127237</guid></item><item><title><![CDATA[New comment by danudey in "Keychron announces first open-source firmware for gaming mice"]]></title><description><![CDATA[
<p>This works, thanks!</p>
]]></description><pubDate>Fri, 31 Jul 2026 18:50:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=49127156</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49127156</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49127156</guid></item><item><title><![CDATA[New comment by danudey in "A GTK4 SSH-askpass in Zig"]]></title><description><![CDATA[
<p>Noticed that when I build this it ends up with direct linking against a half-dozen libraries it doesn't actually use, at least on Ubuntu. Fixed it by replacing the linking commands with this:<p><pre><code>    exe_mod.linkSystemLibrary("gtk-4", .{ .use_pkg_config = .no });
    exe_mod.linkSystemLibrary("gobject-2.0", .{});
</code></pre>
In my case, at least, this doesn't change the full library tree because gtk-4 still links against all of the libraries that are removed from this binary's list, but it does mean that programs which calculate dependencies, like dpkg-shlibdeps, won't report spurious "required" dependencies when analyzing the binary.<p>When building on Ubuntu 26.04, the binary no longer directly links against lib{pango, cairo, pangocairo, cairo-gobject, harfbuzz, gdk_pixbuf, graphene, gio, vulkan}.<p>Can't create an account on the site so I figured I'd post this here. If you're going for absolute minimalism this seems like another step in the right direction for anyone building on a more 'gratuitous' GTK build (such as Ubuntu's)</p>
]]></description><pubDate>Fri, 31 Jul 2026 18:45:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=49127087</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49127087</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49127087</guid></item><item><title><![CDATA[New comment by danudey in "Keychron announces first open-source firmware for gaming mice"]]></title><description><![CDATA[
<p>My only complaint is that the backlight behavior has like a dozen different settings, none of which are "off". There's "on", "flicker", "blink when you hit the key", "ripple out when you hit the key", "move in waves regardless of input", etc., but there's no "don't be light" option.</p>
]]></description><pubDate>Wed, 29 Jul 2026 20:24:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=49102568</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49102568</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49102568</guid></item><item><title><![CDATA[New comment by danudey in "Turning a dumb AC unit smart (without losing my security deposit)"]]></title><description><![CDATA[
<p>It does feel hella jank, but it's pretty obvious from the tone of the text that the author is fully aware of that. He went through every available option in order from reasonable to jank and this is the first one that worked.<p>There's nothing wrong with jank as long as it's not going to burn your house down the way some of his other rejected ideas would have.</p>
]]></description><pubDate>Wed, 29 Jul 2026 20:23:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=49102547</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49102547</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49102547</guid></item><item><title><![CDATA[New comment by danudey in "Turning a dumb AC unit smart (without losing my security deposit)"]]></title><description><![CDATA[
<p>It always kind of blows my mind that I keep seeing "smart TVs" which have a bunch of integration options for high-end AV installations (rich people's houses, etc.) but no API that you can integrate with to just handle toggling channels/inputs/power states/volumes.<p>(I did get my last Sony Bravia integrated with Homekit so that I could control inputs, volume, etc. via the Home app, but that's not really what I'm looking for).<p>Give me an HTTPS API, require me to authenticate devices on the TV itself before it accepts their commands, and just let me do whatever. Default it to off and make it a hidden setting, but yeah just let me do the thing without having to pay tens of thousands of dollars for some professional installation to integrate with hardware I don't have and can't afford.</p>
]]></description><pubDate>Wed, 29 Jul 2026 20:21:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=49102523</link><dc:creator>danudey</dc:creator><comments>https://news.ycombinator.com/item?id=49102523</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49102523</guid></item></channel></rss>