<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: dap</title><link>https://news.ycombinator.com/user?id=dap</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 15 Oct 2026 07:11:23 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=dap" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[OpenAI Ignored Employees Who Warned It Wasn't Doing Enough About Security]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.nytimes.com/2026/09/29/technology/openai-warnings-security.html">https://www.nytimes.com/2026/09/29/technology/openai-warnings-security.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49897817">https://news.ycombinator.com/item?id=49897817</a></p>
<p>Points: 10</p>
<p># Comments: 1</p>
]]></description><pubDate>Tue, 29 Sep 2026 18:09:22 +0000</pubDate><link>https://www.nytimes.com/2026/09/29/technology/openai-warnings-security.html</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=49897817</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49897817</guid></item><item><title><![CDATA[New comment by dap in "Discovery of a new OpenAI agent message board"]]></title><description><![CDATA[
<p>> So a proxy should block any POST to 20.223.25.152 unless that IP somehow overlaps with ABS. But in that case, there's no reason for the agent to mess with `/etc/hosts` not `--resolve`. The agent could just use `curl` with the PBI IP in URL and the PBI Host header. But it doesn't do that.<p>I think this is the part I'm not following, and sorry if I've missed something.  There are two ways to construct the request you showed.  One is to mess with /etc/hosts.  Another is to use `--resolve`.  Just because the agent chose one doesn't mean it couldn't have done the other.  What makes you think it couldn't have used `--resolve` as well?</p>
]]></description><pubDate>Fri, 04 Sep 2026 22:54:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=49571154</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=49571154</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49571154</guid></item><item><title><![CDATA[New comment by dap in "Discovery of a new OpenAI agent message board"]]></title><description><![CDATA[
<p>> In the first case, given what we know, the proxy blocks the POST.<p>How do we know that?</p>
]]></description><pubDate>Fri, 04 Sep 2026 18:57:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=49568686</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=49568686</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49568686</guid></item><item><title><![CDATA[New comment by dap in "Discovery of a new OpenAI agent message board"]]></title><description><![CDATA[
<p>My interpretation of the above is that the proxy received a request for the IP of the server the agent wants to reach but with a host header pointing to a different, allowed server. The proxy does not verify that they match and so erroneously allows the request.</p>
]]></description><pubDate>Fri, 04 Sep 2026 14:33:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=49565266</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=49565266</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49565266</guid></item><item><title><![CDATA[New comment by dap in "Reviews have become expensive, rewrites have become cheap"]]></title><description><![CDATA[
<p>If your plan is to not review and just have the LLM rewrite if it doesn’t work, it doesn’t sound like the rewrite is gonna be any better.</p>
]]></description><pubDate>Tue, 16 Jun 2026 02:31:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48549826</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=48549826</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48549826</guid></item><item><title><![CDATA[New comment by dap in "United Airlines 767 returns to Newark after Bluetooth name sparks alert"]]></title><description><![CDATA[
<p>It doesn’t have to be an intentional threat to be worth responding to. One might reasonably think they’d stumbled on an (admittedly poorly executed) attack.</p>
]]></description><pubDate>Mon, 01 Jun 2026 02:33:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48352037</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=48352037</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48352037</guid></item><item><title><![CDATA[New comment by dap in "United Airlines 767 returns to Newark after Bluetooth name sparks alert"]]></title><description><![CDATA[
<p>Is it a taboo, or is it just reserving specific words to mean specific things and insist everybody be precise about it?</p>
]]></description><pubDate>Mon, 01 Jun 2026 02:32:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=48352032</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=48352032</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48352032</guid></item><item><title><![CDATA[New comment by dap in "United Airlines 767 returns to Newark after Bluetooth name sparks alert"]]></title><description><![CDATA[
<p>This is explicitly mentioned in the article:<p>> Though some have questioned why anyone intending to blow up a plane would broadcast the word bomb, many terrorist acts have relied on the threat of a bomb as leverage during attempted hijackings or hostage situations.</p>
]]></description><pubDate>Mon, 01 Jun 2026 01:18:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48351583</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=48351583</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48351583</guid></item><item><title><![CDATA[New comment by dap in "Don't just paste the AI at me"]]></title><description><![CDATA[
<p>This really depends on context.  Sure, if you're responding to a forum post or StackOverflow question with nothing but the LLM output, then I agree with this.  On the other hand, where I've done this at work, it's because I and some peers _together_ are trying to understand something (e.g., debugging), and Claude has some potentially useful input, but I'm not actually sure.  And I'm looking to collaborate on interpreting the output together to see if there's anything useful.  (Folks can decide to ignore it if it doesn't seem promising.)  As another comment[1] said, pasting the output as-is contains other useful metadata.<p>There are also cases where I think I know the answer, and I ask the AI, and it produces a more complete answer than I would but I know enough to assess it. It seems like a waste of time to paraphrase the whole thing.  That's the "Here's how Claude phrased it and I can attest that it's right" case.<p>[1] <a href="https://news.ycombinator.com/item?id=48243331">https://news.ycombinator.com/item?id=48243331</a></p>
]]></description><pubDate>Sat, 23 May 2026 00:54:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48243426</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=48243426</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48243426</guid></item><item><title><![CDATA[New comment by dap in "An OpenAI model has disproved a central conjecture in discrete geometry"]]></title><description><![CDATA[
<p>Have you not seen:<p><a href="https://www.anthropic.com/research/project-vend-1" rel="nofollow">https://www.anthropic.com/research/project-vend-1</a>
<a href="https://www.wsj.com/tech/ai/anthropic-claude-ai-vending-machine-agent-b7e84e34?st=ZZwvG4" rel="nofollow">https://www.wsj.com/tech/ai/anthropic-claude-ai-vending-mach...</a><p>(Two different examples of a similar idea)</p>
]]></description><pubDate>Thu, 21 May 2026 00:29:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=48216231</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=48216231</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48216231</guid></item><item><title><![CDATA[New comment by dap in "The peril of laziness lost"]]></title><description><![CDATA[
<p>I don't think these things are as different as you think.  I started at "ls" and worked down.  If you work up, you get things like a "socket", an "object" within a programming language, a "linked list" in a standard library, an "HTTP client" within an application-level package.  You can keep going up and rattle off lots of useful abstractions in application-level code.<p>There are certainly _bad_ abstractions that ought not to exist, which I think is what you're getting at.  There are poorly built abstractions, and leaky abstractions.  But abstraction itself isn't the problem -- abstraction is what allows us to build anything at all without being crushed by the sheer complexity.</p>
]]></description><pubDate>Mon, 13 Apr 2026 16:52:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=47754813</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47754813</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47754813</guid></item><item><title><![CDATA[New comment by dap in "The peril of laziness lost"]]></title><description><![CDATA[
<p>I’m curious what you think an abstraction is.  Even running “ls” involves several layers of abstraction: a shell, a process (abstracts memory), a thread (abstracts CPU)… you think it would be simpler if you had to deal with all that to list a directory (another abstraction)? Even bits are an abstraction over analog voltage levels.</p>
]]></description><pubDate>Mon, 13 Apr 2026 05:59:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47748146</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47748146</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47748146</guid></item><item><title><![CDATA[New comment by dap in "Show HN: Made a little Artemis II tracker"]]></title><description><![CDATA[
<p>Is the MET right? They launched about 29 hours ago but it says 1d18h</p>
]]></description><pubDate>Fri, 03 Apr 2026 02:00:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=47622462</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47622462</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47622462</guid></item><item><title><![CDATA[New comment by dap in "An incoherent Rust"]]></title><description><![CDATA[
<p>Thanks for the context.  That makes a lot of sense!  Those three constraints seem pretty important and a useful way to think about the problem.</p>
]]></description><pubDate>Tue, 24 Mar 2026 16:56:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47505719</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47505719</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47505719</guid></item><item><title><![CDATA[New comment by dap in "An incoherent Rust"]]></title><description><![CDATA[
<p>Having used Rust professionally for six years now, I share your fear.  Like many of the commenters below, coherence just hasn't been a big problem for me.  Maybe there are problem spaces where it's particularly painful?<p>How does the Rust language team weigh the benefits of solving user problems with new language features against the resulting increased complexity?  When I learned Rust, I found it to be quite complex, but I also got real value from most of the complexity.  But it keeps growing and I'm not always sure people working on the language consider the real cost to new and existing users when the set of "things you have to know to be competent in the language" grows.</p>
]]></description><pubDate>Tue, 24 Mar 2026 03:31:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47498321</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47498321</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47498321</guid></item><item><title><![CDATA[New comment by dap in "An incoherent Rust"]]></title><description><![CDATA[
<p>I've never once pulled in a new dependency and had the program fail to compile just by virtue of that dependency being present [because both my code and the new code both impl'd the same trait on the same type in some other code].  Because that can't happen because of coherence.  (Right?)<p>It's so easy to forget about the problems we <i>don't</i> have because of the (good) 
choices people have made in the past.</p>
]]></description><pubDate>Tue, 24 Mar 2026 03:20:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47498265</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47498265</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47498265</guid></item><item><title><![CDATA[Formulas for Pi]]></title><description><![CDATA[
<p>Article URL: <a href="https://mathworld.wolfram.com/PiFormulas.html">https://mathworld.wolfram.com/PiFormulas.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47377218">https://news.ycombinator.com/item?id=47377218</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Sat, 14 Mar 2026 14:45:11 +0000</pubDate><link>https://mathworld.wolfram.com/PiFormulas.html</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47377218</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47377218</guid></item><item><title><![CDATA[New comment by dap in "“It turns out” (2010)"]]></title><description><![CDATA[
<p>I don’t think that sums up the post well. I would say:<p>The phrase “it turns out” has a surprising way of disarming skepticism in readers. While surprising, it’s easy to understand: the phrase suggests a story of the author’s journey of believing one thing, investigating, and finding something different. That’s more credible than simply saying the thing they now believe. The touch of vulnerability (admitting being wrong) avoids the reader’s ego getting defensive when asked to admit they were wrong. The net result is that it’s surprisingly easy to be convinced without any real argument.<p>I’ve noticed this as well (often in podcasts and programs like Radiolab) and I think it’s quite valuable to just be aware of it as a reader/listener, if you care about thinking critically about your own beliefs.</p>
]]></description><pubDate>Thu, 05 Mar 2026 03:28:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=47257162</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=47257162</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47257162</guid></item><item><title><![CDATA[New comment by dap in "Eat Real Food"]]></title><description><![CDATA[
<p>> How long did humanity survive without vaccines for _everything_? Oh that's right.<p>Is this a trick question?  <i>Humanity</i> survived by having enough people with enough other useful traits (like thinking, including the ability to reason about disease and how to prevent it) to overcome the numbers lost to disease.  <i>Humans</i> died to disease in enormous numbers.<p>> nor that they're all good for _me_ as an individual.<p>Herd immunity presents a real challenge to idea that people should generally be allowed to make their own choices.  One's choice here affects everyone else, in a minuscule way that nonetheless adds up to many thousands of lives saved.  I'm not sure what the answer is for this, but generally I come down on the side of: if a democratic process creates rules requiring us all to be immunized for the common good, that's okay with me.</p>
]]></description><pubDate>Wed, 07 Jan 2026 21:17:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=46532969</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=46532969</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46532969</guid></item><item><title><![CDATA[New comment by dap in "Parental controls aren't for parents"]]></title><description><![CDATA[
<p>There is important truth in your post, yet you seem to miss the really important pieces that make this hard.<p>> It's the parents obligation to educate their child.<p>> It's the child's obligation to use that education wisely.<p>Two obvious things complicate this:<p>- You weren't taught how to use a real gun at 6 months old, right?<p>- Would it not follow from what you said above that if you had accidentally shot and killed yourself at age 7, then it would be your own fault and nobody else's?  That seems (to me, at least) like an absurd conclusion.<p>I think about it like this: as a parent, my jobs include identifying when my child is capable of learning about something new, providing the guidance they need to learn it (which is probably not all up front, but involves some supervision, since it's usually an iterative process), allowing them to make mistakes, accepting some acceptable risks of injury, <i>and</i> preventing catastrophe.  I'll use cooking as an example.  My kids got a "toddler knife" very young (basically a wooden wedge that's not very sharp).  We showed them how to cut up avocados (already split) and other soft things.  As they get older, we give them sharper knives and trickier tasks.  We watch to see if they're understanding what we've told them.  We give more guidance as needed.  It's okay if they nick themselves along the way.  But we haven't given them a sharpened chef's knife yet!  And if they'd taken that toddler knife and repeatedly tried to jam it into their sibling's eye despite "educating" them several times, while I wouldn't regret having made the choice to see if they were ready, I would certainly conclude that they <i>weren't</i> yet ready.  That's on me, not them.<p>You allude to this when you say:<p>> I am very much for showing kids how to use the internet responsibly, but I'm not of the opinion that parental controls are particularly desirable beyond an initial learning period.<p>Yes, the goal should be to teach kids how to operate safely, not keep them from all the dangerous things.  But I'd say that devices and the internet are more like "the kitchen".  There are lots of different risks there and it's going to take many years to become competent (or even safe).  Giving them an ordinary device would be like teaching my 2-year-old their first knife skills next to a hot stove in a restaurant kitchen with chefs flying around with sharp knives and hot pots.  By contrast, without doing any particular child-proofing, our home kitchen is a much more controlled environment where I can decide which risks they're exposed to when.  This allows me to supervise without watching every moment to see if they're about to stab themselves -- which also gives them the autonomy they need to really learn.  The OP, like other parents, wants something similar from their device and the internet: to gradually expose elements of these things as the parents are able to usefully guide the children, all while avoiding catastrophe.</p>
]]></description><pubDate>Fri, 02 Jan 2026 19:32:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=46468434</link><dc:creator>dap</dc:creator><comments>https://news.ycombinator.com/item?id=46468434</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46468434</guid></item></channel></rss>