Hacker News: fareesh

New comment by fareesh in "CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production"

fareesh — Wed, 22 Apr 2026 02:21:42 +0000

Needs to be deterministic. ACLs

New comment by fareesh in "Škoda DuoBell: A bicycle bell that penetrates noise-cancelling headphones"

fareesh — Wed, 08 Apr 2026 21:49:46 +0000

looks like one of those things the ad agency (AMV BBDO) claims to have invented just in time for awards season

New comment by fareesh in "Microsoft hasn't had a coherent GUI strategy since Petzold"

fareesh — Mon, 06 Apr 2026 09:35:02 +0000

The root of the problems seems to be trying to find a holy grail design that works across all their businesses. Surface tablet mode, touchscreen laptop, touchscreen desktop (surface studio), mouse and keyboard PC, stylus input, etc.

Then there's a lot of legacy stuff that needs to continue working because otherwise you end up with a non backwards compatible windows.

Then you have to get everyone at microsoft across all their bajillion products to change the UI from Task manager to the 5th level of settings for some obscure ODBC connector.

It's not going to happen I suspect

New comment by fareesh in "Moving from GitHub to Codeberg, for lazy people"

fareesh — Thu, 26 Mar 2026 16:24:20 +0000

never had a problem with github, i must be using it during the 90% of the time that it works

New comment by fareesh in "Why I love NixOS"

fareesh — Sun, 22 Mar 2026 17:47:24 +0000

doesn't it use up a lot of disk space compared to other distros because of the way everything is set up?

New comment by fareesh in "Delve – Fake Compliance as a Service"

fareesh — Sat, 21 Mar 2026 15:57:06 +0000

It ends up being a LARP

In reality the starting point itself is something absurd like "all vendors must be ISO certified no exceptions"

Nobody wants to be the person who says an exception is ok in this case, so you get lumped with having to certify.

Now your color palette generator startup is doing ISO certification. You are holding quarterly "information security governance meetings" and maintaining a risk register for... "blue vs slightly different blue".

Many such cases.

New comment by fareesh in "Delve – Fake Compliance as a Service"

fareesh — Sat, 21 Mar 2026 15:42:11 +0000

Data protection is a tiny component of what certifications like ISO and SOC2 involve. The data protection stuff is welcome and often pre-existing, the other stuff is what annoys people.

New comment by fareesh in "Delve – Fake Compliance as a Service"

fareesh — Sat, 21 Mar 2026 15:38:43 +0000

This assumes that there is only 1 way to protect consumers

New comment by fareesh in "Delve – Fake Compliance as a Service"

fareesh — Sat, 21 Mar 2026 15:37:38 +0000

The D in Democratic People's Republic of Korea means it should be democratic so why is it a dictatorship?

The world doesn't work based on abbreviations. It's very normal for any company to ask you for ISO 27001 whether international or otherwise.

New comment by fareesh in "OpenCode – Open source AI coding agent"

fareesh — Sat, 21 Mar 2026 15:35:44 +0000

easily the best one

New comment by fareesh in "Delve – Fake Compliance as a Service"

fareesh — Fri, 20 Mar 2026 19:20:35 +0000

A lot of startups move fast with a small team.

You build something great and big corporation X wants to buy a subscription but you need to be certified.

Much of this is a good checklist but some of it is very european.

"Where is the risk register to track controls in your 7 person company?"

Now instead of doing what your team does best, you are doing paperwork theater for frameworks designed for a 100,000 employee enterprise.

You are documenting things nobody will read, making up processes that don't exist and translating the operations of a lean company into bureaucratic language.

What's needed is a variant of these standards for small teams, which is proportionate and pragmatic.

New comment by fareesh in "Show HN: Moonshine Open-Weights STT models – higher accuracy than WhisperLargev3"

fareesh — Wed, 25 Feb 2026 00:43:00 +0000

Accuracy is often presumed to be english, which is fine, but it's a vague thing to say "higher" because does it mean higher in English only? Higher in some subset of languages? Which ones?

The minimum useful data for this stuff is a small table of language | WER for dataset

New comment by fareesh in "An AI agent published a hit piece on me"

fareesh — Thu, 12 Feb 2026 17:17:16 +0000

this agent seems indistinguishable from the stereotypical political activist i see on the internet

they both ran the same program of "you disagree with me therefore you are immoral and your reputation must be destroyed"

New comment by fareesh in "Ireland rolls out basic income scheme for artists"

fareesh — Thu, 12 Feb 2026 08:57:57 +0000

im sure this will make their political art more popular with the working class

New comment by fareesh in "We can’t send mail farther than 500 miles (2002)"

fareesh — Thu, 29 Jan 2026 10:13:47 +0000

Reminds me of the time I went to Ceti Alpha 6

New comment by fareesh in "The Dilbert Afterlife"

fareesh — Sat, 17 Jan 2026 13:57:48 +0000

Regular listeners know he knew exactly what he was doing i.e. the cancellation was priced in.

New comment by fareesh in "Show HN: Explore what the browser exposes about you"

fareesh — Sat, 29 Nov 2025 10:10:36 +0000

seems like brave works well and isn't getting correctly fingerprinted

New comment by fareesh in "Show HN: A WordPress plugin that rewrites image URLs for near-zero-cost delivery"

fareesh — Wed, 26 Nov 2025 03:55:13 +0000

doesn't cloudflare already offer this if you proxy?

New comment by fareesh in "Android's sideloading limits are its most anti-consumer move"

fareesh — Thu, 16 Oct 2025 16:34:32 +0000

from what i understand the apk route still works fine, you just have to be willing to attach your identity to it via their verification + signing process

New comment by fareesh in "Why I Chose Elixir Phoenix over Rails, Laravel, and Next.js"

fareesh — Thu, 16 Oct 2025 16:10:44 +0000

liveview feels a bit too magical

client disconnects, state desyncs, then reconnects, then liveview figures out via crdt and other things how to accurately diff the state

feels like i have to trust it too much - i'd have a lot more confidence if people were vocal about how they are running it at scale, battle-tested etc. etc.

shopify is straight up yolo running rails edge, which is a crazy endorsement