<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: dwheeler</title><link>https://news.ycombinator.com/user?id=dwheeler</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 14 Apr 2026 22:44:18 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=dwheeler" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by dwheeler in "They're made out of meat (1991)"]]></title><description><![CDATA[
<p>I suggest this vocal performance:
<a href="https://youtube.com/watch?v=GggK9SjJpuQ" rel="nofollow">https://youtube.com/watch?v=GggK9SjJpuQ</a></p>
]]></description><pubDate>Wed, 08 Apr 2026 23:50:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47697651</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=47697651</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47697651</guid></item><item><title><![CDATA[New comment by dwheeler in "AI is not a coworker, it's an exoskeleton"]]></title><description><![CDATA[
<p>I prefer the term "assistant". It can do some tasks, but today's AI often needs human guidance for good results.</p>
]]></description><pubDate>Thu, 19 Feb 2026 21:46:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=47079959</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=47079959</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47079959</guid></item><item><title><![CDATA[New comment by dwheeler in "How to effectively write quality code with AI"]]></title><description><![CDATA[
<p>I also made a list of tips on writing code with AI, with a special focus on security. Others may find the tips useful. Here they are:
<a href="https://openssf.org/blog/2026/01/05/ai-software-development-security-tips-and-the-future-part-2/" rel="nofollow">https://openssf.org/blog/2026/01/05/ai-software-development-...</a></p>
]]></description><pubDate>Sat, 07 Feb 2026 00:19:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=46919964</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=46919964</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46919964</guid></item><item><title><![CDATA[New comment by dwheeler in "MongoBleed Explained Simply"]]></title><description><![CDATA[
<p>This has many similarities to the Heartbleed vulnerability: it involves trusting lengths from an attacker, leading to unauthorized revelation of data.</p>
]]></description><pubDate>Mon, 29 Dec 2025 04:19:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=46417432</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=46417432</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46417432</guid></item><item><title><![CDATA[New comment by dwheeler in "In Defense of Matlab Code"]]></title><description><![CDATA[
<p>Many people use Octave <a href="https://octave.org/" rel="nofollow">https://octave.org/</a> which is compatible (generally) with Matlab, supports this simple syntax, and is open source software. Indeed, I've taken at least one class where the instructor asked people use Octave for these kinds of calculations.</p>
]]></description><pubDate>Mon, 15 Dec 2025 20:06:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=46279784</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=46279784</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46279784</guid></item><item><title><![CDATA[New comment by dwheeler in "HipKittens: Fast and furious AMD kernels"]]></title><description><![CDATA[
<p>That's only true if future improvements are easy to create as past ones, that customers care as much about those improvements, and there are no other differentiators.<p>For example, many companies do well by selling a less capable but more affordable and available product.</p>
]]></description><pubDate>Sat, 15 Nov 2025 18:47:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=45939607</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45939607</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45939607</guid></item><item><title><![CDATA[New comment by dwheeler in "I think nobody wants AI in Firefox, Mozilla"]]></title><description><![CDATA[
<p>I <i>love</i> having built-in <i>local</i> natural language translation implemented by AI, which Firefox provides. Local models have different properties than remote properties, and natural language translation is a <i>useful</i> thing. AI should be added when it solves a real need, and the risks can be minimized (or at least controlled). The goal shouldn't be to use AI, the goal should be to solve problems for humans.</p>
]]></description><pubDate>Fri, 14 Nov 2025 17:20:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=45929071</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45929071</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45929071</guid></item><item><title><![CDATA[New comment by dwheeler in "Secure AI/ML-Driven Software Development (LFEL1012) – Free Online Course"]]></title><description><![CDATA[
<p>The Linux Foundation's Open Source Security Foundation (OpenSSF) has released a free online course "Secure AI/ML-Driven Software Development (LFEL1012)". It discusses protecting your software development environment, creating more secure software, and reviewing changes.</p>
]]></description><pubDate>Thu, 23 Oct 2025 15:31:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=45683021</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45683021</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45683021</guid></item><item><title><![CDATA[Secure AI/ML-Driven Software Development (LFEL1012) – Free Online Course]]></title><description><![CDATA[
<p>Article URL: <a href="https://training.linuxfoundation.org/express-learning/secure-ai-ml-driven-software-development-lfel1012/">https://training.linuxfoundation.org/express-learning/secure-ai-ml-driven-software-development-lfel1012/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=45683020">https://news.ycombinator.com/item?id=45683020</a></p>
<p>Points: 1</p>
<p># Comments: 1</p>
]]></description><pubDate>Thu, 23 Oct 2025 15:31:10 +0000</pubDate><link>https://training.linuxfoundation.org/express-learning/secure-ai-ml-driven-software-development-lfel1012/</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45683020</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45683020</guid></item><item><title><![CDATA[New comment by dwheeler in "AI tools churn out 'workslop', but 'the buck' should stop with bosses"]]></title><description><![CDATA[
<p>Yes, you need training if you want something good instead of slop. For example, when asked to write functions that can be secure or insecure, 45% of the time they'll do it the insecure way, and this has been stable for years. We in the OpenSSF are going to release a free course "Secure AI/ML-Driven Software Development (LFEL1012)". Expected release date is October 16. It will be here: <a href="https://training.linuxfoundation.org/express-learning/secure-ai-ml-driven-software-development-lfel1012" rel="nofollow">https://training.linuxfoundation.org/express-learning/secure...</a><p>Fill in this form to receive an email notification when the course is available: <a href="https://docs.google.com/forms/d/e/1FAIpQLSfWW8M6PwOM62VHgc-YyogzT-eK_scJVk21BtezFUnJmMx6DQ/viewform" rel="nofollow">https://docs.google.com/forms/d/e/1FAIpQLSfWW8M6PwOM62VHgc-Y...</a></p>
]]></description><pubDate>Sun, 12 Oct 2025 22:25:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=45562584</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45562584</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45562584</guid></item><item><title><![CDATA[New comment by dwheeler in "Celebrating Five Years of OpenSSF: A Journey Through Open Source Security"]]></title><description><![CDATA[
<p>Summarizes what's happened in the Open Source Security Foundation (OpenSSF) since its founding five years ago.</p>
]]></description><pubDate>Tue, 23 Sep 2025 15:37:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=45348567</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45348567</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45348567</guid></item><item><title><![CDATA[Celebrating Five Years of OpenSSF: A Journey Through Open Source Security]]></title><description><![CDATA[
<p>Article URL: <a href="https://openssf.org/blog/2025/08/01/%f0%9f%8e%89-celebrating-five-years-of-openssf-a-journey-through-open-source-security/">https://openssf.org/blog/2025/08/01/%f0%9f%8e%89-celebrating-five-years-of-openssf-a-journey-through-open-source-security/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=45348566">https://news.ycombinator.com/item?id=45348566</a></p>
<p>Points: 1</p>
<p># Comments: 1</p>
]]></description><pubDate>Tue, 23 Sep 2025 15:37:10 +0000</pubDate><link>https://openssf.org/blog/2025/08/01/%f0%9f%8e%89-celebrating-five-years-of-openssf-a-journey-through-open-source-security/</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45348566</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45348566</guid></item><item><title><![CDATA[New comment by dwheeler in "Vibe coding has turned senior devs into 'AI babysitters'"]]></title><description><![CDATA[
<p>Using AI assistants != Vibe Coding.<p>AI can be a helpful <i>assistant</i> but they are nowhere near ready for letting loose when the results matter.</p>
]]></description><pubDate>Sun, 14 Sep 2025 21:48:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=45243575</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45243575</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45243575</guid></item><item><title><![CDATA[New comment by dwheeler in "macOS Tahoe is certified Unix 03 [pdf]"]]></title><description><![CDATA[
<p>Citation needed.<p>I'm not sure what you mean by "Unix specification". But if you mean the international standard POSIX, yes, people care. Red Hat routinely participates in POSIX spec revision.<p>There are a very few deviations where you have to enable "POSIXLY_CORRECT". If that's what you mean, then you can turn that on. But in every area that matters, Linux distros implement the POSIX spec by default, and you can even turn on the POSIXLY_CORRECT mode to exactly follow it. They extend beyond it, but that is allowed and expected.<p>The people who build the tools in Linux distros care a lot. I know the implementors of dash and GNU make routinely refer to POSIX. The Linux distros don't have to as much with POSIX because that is generally a conpleted work and it's the maintainers of the tools who must address the updates to POSIX.</p>
]]></description><pubDate>Sun, 14 Sep 2025 15:01:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=45240271</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45240271</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45240271</guid></item><item><title><![CDATA[New comment by dwheeler in "Action was the best 8-bit programming language"]]></title><description><![CDATA[
<p>Action! is a cool language.<p>However, by design it did not support recursion, directly or indirectly:
<a href="https://atariwiki.org/wiki/Wiki.jsp?page=Action" rel="nofollow">https://atariwiki.org/wiki/Wiki.jsp?page=Action</a>
Variables were assigned constant locations, which made things easier for the cpu, but that's a harsh limitation.<p>It was only available on Atari and for a while you had to have a cartridge to run its programs. For many, these were deal-breakers, as you couldn't release your programs to many.<p>As always, trade-offs, but pretty big ones.</p>
]]></description><pubDate>Sun, 07 Sep 2025 22:44:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=45162876</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45162876</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45162876</guid></item><item><title><![CDATA[New comment by dwheeler in "Everything from 1991 Radio Shack ad I now do with my phone (2014)"]]></title><description><![CDATA[
<p>Phones should include an AM/FM tuner. Then you can hear local stations, and if you're out of cell range or things go badly, receive broadcasts.</p>
]]></description><pubDate>Sun, 07 Sep 2025 22:32:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=45162784</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45162784</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45162784</guid></item><item><title><![CDATA[New comment by dwheeler in "AI’s coding evolution hinges on collaboration and trust"]]></title><description><![CDATA[
<p>I don't like the phrase "real coder". It's not clear what it means.<p>I really like the word "assistant" for what we have today. The AI code assistant tools available today, like Claude Code and GitHub Copilot, can't replace humans in doing software development. Not even close. But they <i>are</i> often useful to human developers, and today, that's the more important measure.<p>I've been spending time with various AI tools, especially Claude Code and GitHub Copilot. They're amazing one minute, and they make bone-headedly bad recommendations the next. It takes effort to learn how to create good prompts, and if you want the results to be good, you have to review and critique the results. I'm particularly concerned about security. They're definitely happy to write insecure code. If you know what you're doing, prompt them well, and review their results, you can get good results.<p>I don't know if they'll ever reach "full autonomy". They don't need to get there to be useful.</p>
]]></description><pubDate>Fri, 29 Aug 2025 23:26:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=45070528</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=45070528</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45070528</guid></item><item><title><![CDATA[New comment by dwheeler in "The current state of LLM-driven development"]]></title><description><![CDATA[
<p>> Learning how to use LLMs in a coding workflow is trivial. There is no learning curve. You can safely ignore them if they don’t fit your workflows at the moment.<p>I'm sprry, but I disagree with this claim. That is not my experience, nor many others. It's true that you can make them do <i>something</i> without learning anything. However, it takes time to learn what they are good amd bad at, what information they need, and what nonsense they'll do without express guidance. It also takes time to know what to look for when reviewing results.<p>I also find that they work fine for languages without static types. You need need tests, yes, but you need them anyway.</p>
]]></description><pubDate>Sun, 10 Aug 2025 15:08:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=44855704</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=44855704</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44855704</guid></item><item><title><![CDATA[New comment by dwheeler in "US Coast Guard Report on Titan Submersible"]]></title><description><![CDATA[
<p>> The thing that I find amazing about this sub, is that the final hull survived all those trips, and then before the final one let everyone know it was toast, and Stockton ignored it. He was careless with peoples lives, but his sub actually did what he set out to do, and if he listened to the instruments, he'd still be alive...<p>I disagree. In fact, I think that's quite unlikely.<p>First, unlike a metal hull, carbon fiber hulls accumulate subtle damage on compression that's hard to detect. Then, when they fail, they tend to fail catastrophically. So "this hull worked before" isn't evidence of success in this case, as it <i>normally</i> would be, it's evidence that you're getting closer & closer to the disaster.<p>Second, I think Stockton would have just kept diving, even if <i>this</i> event hadn't failed. He might have even gotten more reckless (though per the report he was already extremely reckless). If you keep playing Russian Roulette, and occasionally add another bullet, <i>eventually</i> the game will end. There is <i>no</i> evidence he was going to stop until he was killed by his own decisions.<p>None of this takes away the tragedy of it. It's sad, and will remain so.</p>
]]></description><pubDate>Tue, 05 Aug 2025 17:09:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=44800861</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=44800861</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44800861</guid></item><item><title><![CDATA[New comment by dwheeler in "US Coast Guard Report on Titan Submersible"]]></title><description><![CDATA[
<p>The report has many gems about the tragedy. Basically, there were clear physical causes, which in turn were caused by hubris:<p>PHYSICAL CAUSES<p>"4.2.4.4. American Bureau of Shipping (ABS) Classification Society Background" ... "The ABS Underwater Rules do not permit the use of carbon fiber composites for Pressure Vessels for Human Occupancy (PVHOs)"<p>"4.2.4.5. Det Norske Veritas and Germanischer Lloyd (DNV GL)" ... 4.2.4.5.3. According to a DNV Surveyor, carbon fiber has not been accepted as suitable material for the construction of submersible PVHOs, especially when subject to external pressure experienced at ocean depths. According to DNV GL, carbon fibers are not considered suitable for significant compressive loading conditions."<p>"5.1. Inadequacy of Structural Engineering Analysis.
OceanGate’s TITAN submersible design was a complex, high-risk, deep-sea submersible. The design and testing processes for TITAN did not adequately address many of the fundamental engineering principles that are considered crucial for ensuring safety and reliability for operations in such an inherently hazardous environment..."<p>"5.6 Insufficient Understanding of Carbon Fiber Material Properties for Deep-Sea Application.
The TITAN’s pressure hull was constructed using carbon fiber, a material chosen by Mr. Rush for its “impressive” strength-to-weight ratio. [However] the use of carbon fiber in deep-sea environments remains unproven—unlike the materials with established safety records. There are currently no recognized national or international standards that approve of the use of carbon fiber pressure hulls for submersibles. Carbon fiber has demonstrated its effectiveness in other applications where the material is primarily under tension (e.g., aircraft hulls where the pressure inside the passenger compartment is pressing outwards). However, in deep-sea conditions, the pressure hull experiences extreme compressive forces, a scenario for which carbon fiber has no established track record and is generally understood to be less effective."<p>* * *<p>HUMAN DECISIONS<p>The physics is just the physics. There was no law of nature that forced them to take the steps they took. Instead, we have points like these:<p>"5.12. OceanGate’s Toxic Safety Culture.
OceanGate’s operational and safety practices were critically flawed, which contributed to the catastrophic implosion of the TITAN submersible. At the core of these failures was a disconnect between the company's stated safety protocols and its actual practices. ... This highlighted systemic issues where submersible safety protocols were either egregiously inadequate or willfully disregarded, leaving critical risks unmitigated.
The analysis reveals a disturbing pattern of misrepresentation and reckless disregard for safety in OceanGate's operation of the TITAN submersible, with Mr. Rush seemingly using inflated numbers to bolster the perceived safety and dive count of the final TITAN hull...<p>Examples of OceanGate CEO’s disdain for traditional submersible safety protocols were abundant. For example... This dismissive approach to safety culture was not limited to engineering decisions. OceanGate’s management actively retaliated against employees who raised legitimate compliance related concerns..."<p>This was a tragedy, because people died and this was all completely avoidable. It's the only event like this in many, many decades. I hope others will leran and avoid making similar mistakes.</p>
]]></description><pubDate>Tue, 05 Aug 2025 17:02:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=44800759</link><dc:creator>dwheeler</dc:creator><comments>https://news.ycombinator.com/item?id=44800759</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44800759</guid></item></channel></rss>