Hacker News: divmain

New comment by divmain in "Show HN: Littlebird – Screenreading is the missing link in AI"

divmain — Mon, 23 Mar 2026 20:25:24 +0000

Is there any chance you might support a local-first version of this in the future? I've been interested in apps like this and Littlebird in particular seems very attractive. But I'm loathe to essentially send screenshots/summaries/etc of all my activity to a cloud solution, regardless of any claims you make about encryption. Any mistake you make could be catastrophic for me, which thoroughly dominates any upside to using your product. It's a non-starter.

New comment by divmain in "Agent Safehouse – macOS-native sandboxing for local agents"

divmain — Mon, 09 Mar 2026 03:39:19 +0000

Completely agree; my approach was not the most practical. I mostly wanted to know how hard it would be and, as I said, haven’t used it much since. Yes, macFUSE is messy to rely upon. I feel as though the right abstraction is simply unavailable on macOS. Something akin to chroot jails — I don’t feel like I need a particularly hardened sandbox for agentic coding. I just need something that will prevent the stupid mistakes that are particularly damaging.

New comment by divmain in "Agent Safehouse – macOS-native sandboxing for local agents"

divmain — Sun, 08 Mar 2026 21:51:37 +0000

This is what I was going for with Treebeard[0]. It is sandbox-exec, worktrees, and COW/overlay filesystem. The overlay filesystem is nice, in that you have access to git-ignored files in the original directory without having to worry about those files being modified in the original (due to the COW semantics). Though, truthfully, I haven’t found myself using it much since getting it all working.

[0] https://github.com/divmain/treebeard

New comment by divmain in "A Safer Container Ecosystem with Docker: Free Docker Hardened Images"

divmain — Wed, 17 Dec 2025 21:19:56 +0000

Docker Hardened Images integrate Socket Firewall, which provides protection from threats like Shai-Hulud during build steps. You can read our partnership announcement over here: https://socket.dev/blog/socket-firewall-now-available-in-doc...

New comment by divmain in "Shai-Hulud Returns: Over 300 NPM Packages Infected"

divmain — Mon, 24 Nov 2025 19:59:35 +0000

pnpm’s minimumReleaseAge can help a ton with this. There’s a tricky balance, because allowing your dependencies to get stale makes you inherently more vulnerable to vulnerabilities in your packages. And, critically, fixing a vulnerability in an urgent situation (i.e. you were compromised) gets increasingly harder to address the more stale your dependencies are.

minimumReleaseAge strikes a good balance between protecting yourself against emerging threats like Shai-Hulud and keeping your dependencies up-to-date.

Because you asked: you can get another layer of protection through Socket Firewall Free (sfw), which prevents dependencies known to be malicious from being installed. Socket typically identifies malware very soon after its is published. Disclaimer: I’m the lead dev on the project, so obviously biased — YMMV.

New comment by divmain in "Cerebras Code now supports GLM 4.6 at 1000 tokens/sec"

divmain — Sat, 08 Nov 2025 19:20:35 +0000

I’ve been using the crush TUI primarily. I like that I have the flexibility to switch to a smarter model on occasion - for awhile I hesitated to pick up AI coding at all, simply because I didn’t want to be locked into a model that could be immediately surpassed. It’s also customizable enough with sane defaults.

New comment by divmain in "Cerebras Code now supports GLM 4.6 at 1000 tokens/sec"

divmain — Sat, 08 Nov 2025 05:01:26 +0000

I have been an AI-coding skeptic for some time. I always acknowledged LLMs as useful for solving specific problems and making certain things possible that weren't possible before. But I've not been surprised to see AI fail to live up to the hype. And I never had a personally magical moment - an experience that shifted my perspective à la the peak end rule.

I've been using GLM 4.6 on Cerebras for the last week or so, since they began the transition, and I've been blown away.

I'm not a vibe coder; when I use AI coding tools, they're in the hot path. They save me time when whipping up a bash script and I can't remember the exact syntax, or for finding easily falsifiable answers that would otherwise take me a few minutes of reading. But, even though GLM 4.6 is not as smart as Sonnet 4.5, it is smart enough. And because it is so fast on Cerebras, I genuinely feel that it augments my own ability and productivity; the raw speed has considerably shifted the tipping point of time-savings for me.

YMMV, of course. I'm very precise with the instructions I provide. And I'm constantly interleaving my own design choices into the process - I usually have a very clear idea in my mind of what the end result should look like - so, in the end, the code ends up how I would have written it without AI. But building happens much faster.

No affiliation with Cerebras, just a happy customer. Just upgraded to the $200/mo plan - and I'll admit that I was one that scoffed when folks jumped on the original $200/mo Claude plan. I think this particular way of working with LLMs just fits well with how I think and work.

New comment by divmain in "Cerebras systems raises $1.1B Series G"

divmain — Tue, 30 Sep 2025 21:20:36 +0000

I experienced the same, but I think it is a limitation of OpenRouter. When I hit Cerebra’s OpenAI endpoint directly, it works flawlessly.

New comment by divmain in "Ask HN: Who is hiring? (January 2025)"

divmain — Sat, 04 Jan 2025 06:08:08 +0000

For anyone considering: I applied, didn’t get an offer, but had a fantastic experience. Authentic people, with the right mix of ambition and work-life balance. They respected the time required for me to engage in their hiring interviewing process, which was refreshing.

New comment by divmain in "Kagi search and Orion browser enter public beta"

divmain — Thu, 02 Jun 2022 00:40:02 +0000

This is great to hear! I tried Orion for awhile and Bitwarden was really flaky. I'll have to give it another go.

New comment by divmain in "Show HN: I'm building a non-profit search engine"

divmain — Sun, 26 Dec 2021 23:58:09 +0000

It is a bit above your price point, but I have been using Kagi.com (not affiliated, just impressed). They're in beta, but will charge ~$10 once they go GA. Like you, I tried DuckDuckGo for awhile, but resorted to g! so often that I started using it for everything out of habit.

In contrast, Kagi provides Google-quality results mosts of the time, better-than-Google semi-often, and worse-than-google rarely. They support g!, but I only use it a couple of times a week, usually for site-specific searches.

Additionally, I really like that I am their customer and not their product - incentives are aligned for them to continue respecting my privacy and preferences.

New comment by divmain in "Ask HN: Has Google search become quantitatively worse?"

divmain — Wed, 01 Dec 2021 05:25:33 +0000

After having used DuckDuckGo for a couple of years and habitually using g!, I switched to Kagi recently. Much better experience, I like that I’m a customer and not the product, great search results. I have been surprised and impressed.

Show HN: Maintainerd, taking the busy-work out of OSS maintenance

divmain — Wed, 05 Jul 2017 21:36:09 +0000

Article URL: https://github.com/divmain/maintainerd

Comments URL: https://news.ycombinator.com/item?id=14706327

Points: 3

# Comments: 0

New comment by divmain in "Ask HN: People who completed a bootcamp 3+ years ago: what are you doing now?"

divmain — Fri, 09 Jun 2017 05:49:00 +0000

I attended Code Fellows in October-December of 2013. I had held a handful of tech-heavy positions prior to that time, but had never worked as a software engineer/developer.

I originally saw three primary benefits to attending bootcamp, and I think they're still relevant:

1. It gave me some credibility. Before bootcamp, I had worked with children overseas for a couple of years, and as a care provider the year before that. I had considerable tech experience further back, but nothing related to software development. My resume would have been easy to discard without some way to get connected with employers.

2. It enhanced my motivation. I was paying a lot of money out of pocket, so it placed pressure on me to follow through. I also enjoy working with people, and the classroom setting exceeded self-study in a number of ways.

3. It provided people I could go to when I was stuck. This only happened a half dozen times over the course of the program, but any one of these times might've derailed my interest or motivation.

Overall, my experience was very positive and I was offered a position at Formidable Labs (now just Formidable) before graduating.

It has gone rather well since then. I started as a junior engineer on their Walmart project and progressed to a senior position on my team within the year. A few months in, I received a ~30% raise.

From there, I joined the Walmart Core Web team. That involved building foundational libraries, components, and patterns for the rest of the web teams, as well as a lot of broad architectural work. After a couple of months on that team and some significant successes, I took on additional responsibility, which coincided with another ~35% raise.

Since then, I've worked on Formidable projects for Microsoft and Starbucks, in senior and lead roles. Starting Monday, I'm joining the Edge browser team at Microsoft as a program manager.

Its hard to know what I should attribute my success to - I definitely went into bootcamp with the intention to make the most of every opportunity that came my way, and I continued in that mindset afterwards. I jumped at every chance to learn something new, and spent considerable amounts of time outside of work learning and doing OSS. A few of my projects [0][1][2] got relatively popular (others, not so much [3][4]). All of these were side projects that I pursued independantly, and I think that increased my desireability as a team member. A lot of it was probably timing and luck too!

It's worth noting, however, that my experience was atypical and not in line with the rest of my cohort. I know at least a handful that struggled to find positions.

[0] github.com/divmain/GitSavvy [1] github.com/FormidableLabs/rapscallion [2] github.com/FormidableLabs/freactal [3] interlockjs.com [4] github.com/divmain/recollect