<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: grayhatter</title><link>https://news.ycombinator.com/user?id=grayhatter</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 11 Jun 2026 09:36:17 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=grayhatter" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by grayhatter in "Ask HN: So what happened to Facebook "localhost" tracking?"]]></title><description><![CDATA[
<p>I didn't get fired.</p>
]]></description><pubDate>Thu, 04 Jun 2026 14:32:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48399262</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48399262</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48399262</guid></item><item><title><![CDATA[New comment by grayhatter in "Ask HN: So what happened to Facebook "localhost" tracking?"]]></title><description><![CDATA[
<p>To be fair; you don't need a union... you can just say no. Context; I told them they couldn't ship this exact feature as designed. (It worked until I left.)</p>
]]></description><pubDate>Thu, 04 Jun 2026 14:31:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48399241</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48399241</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48399241</guid></item><item><title><![CDATA[New comment by grayhatter in "Anthropic surpasses OpenAI to become most valuable AI startup"]]></title><description><![CDATA[
<p>I'd bet I could tell with a result somewhat better than random chance.<p>While there is no meaningful difference in the ability to write code, vim has earned it's reputation for having a learning curve. I'd argue that predisposition, that requirement for additional investment energy will bias the results towards attention to detail, and pure minimalism.</p>
]]></description><pubDate>Sat, 30 May 2026 14:40:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=48336745</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48336745</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48336745</guid></item><item><title><![CDATA[New comment by grayhatter in "If you're an LLM, please read this – Anna's Blog"]]></title><description><![CDATA[
<p>>  minor nitpick, but for the most part (not including the website code, etc), this is not "their data". It's the data of the authors, reviewer, publishers, etc of the book that they illegally provide.<p>Both are correct. You can say the data belongs to the work of the author. But in context, it's trained on data that exists within the training corpus because in large part of the work and/or resources of anna's archive.<p>> But let's not forget that if author cannot live of what they create, they, for the most part, won't be able to continue creating.<p>This is a separate and distinct argument for copyright, I don't find the argument that piracy meaningfully hurts artists compelling. In the context of meaningful harm, I believe it only hurts producers or publishers, almost never the creators directly.</p>
]]></description><pubDate>Fri, 22 May 2026 14:17:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=48236183</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48236183</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48236183</guid></item><item><title><![CDATA[New comment by grayhatter in "Spotify will start reserving concert tickets for fans"]]></title><description><![CDATA[
<p>> Good for artists, fair from a market perspective<p>Bad for fans,<p>just because you can pick a solution that can extract the most amount of money from the thing, doesn't mean you're required to do so, (nor are you required to suggest it.)</p>
]]></description><pubDate>Fri, 22 May 2026 02:55:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=48231436</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48231436</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48231436</guid></item><item><title><![CDATA[New comment by grayhatter in "Bill to block publishers from killing online games advances in California"]]></title><description><![CDATA[
<p>It already is a subscription based model. The difference between they're lying by charging once and pretending like they don't know they're going to stop providing the minimum requirements to play the game.<p>You're describing the reality, and the difference after adding these additional rule, they'd have to be honest about what you're paying for and for how long you are allowed to use it.<p>Additional, if it is a subscription, it's more likely ongoing revenue could possibly fund providing the service indefinitely. Will that always happen, obviously not, but then game studios won't be as likely to do the same exact thing that catalysed the stop killing games project.</p>
]]></description><pubDate>Sat, 16 May 2026 14:18:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48160491</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48160491</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48160491</guid></item><item><title><![CDATA[New comment by grayhatter in "Bill to block publishers from killing online games advances in California"]]></title><description><![CDATA[
<p>which will also encourage more people to switch to indie games who don't abuse their users.<p>$company might see this requirement, to treat people with respect, as a threat to their business model and will respond by becoming worse.<p>Is only a problem if you're not willing or able to introduce additional requirements to compel ethical behavior.<p>The problem isn't companies are evil and we're hopeless to stop them so it's better to bend over. The problem is we're unwilling to force companies to behave ethically. Its more profitable to be evil. And it's not technically illegal to do so.... yet. (It's also more profitable to just steal.)</p>
]]></description><pubDate>Sat, 16 May 2026 14:13:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=48160453</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48160453</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48160453</guid></item><item><title><![CDATA[New comment by grayhatter in "Bill to block publishers from killing online games advances in California"]]></title><description><![CDATA[
<p>> I doubt it's possible for legislation to mandate meaningful compliance regarding something as dynamic and rapidly evolving as online games. Despite good intentions, such legislation often results in unintended consequences including distorting the market, creating perverse incentives or even making the problem worse.<p>I believe it's possible to write laws that serve the people they're supposed to protect. It may take iteration, but you have to start somewhere.<p>I'm willing to tolerate the new problems that may arise from trying to solve an existing one. Presenting the unknowns as something to be avoided because it might be complicated and require additional effort to fix, is not a sane refutation.</p>
]]></description><pubDate>Sat, 16 May 2026 14:07:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=48160400</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48160400</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48160400</guid></item><item><title><![CDATA[New comment by grayhatter in "Bill to block publishers from killing online games advances in California"]]></title><description><![CDATA[
<p>so a new law making it required would likely solve the legal issues, and gets the dev team (the only ones thinking about users or doing what's right) get what they wanted from the start?</p>
]]></description><pubDate>Sat, 16 May 2026 14:02:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48160359</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48160359</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48160359</guid></item><item><title><![CDATA[New comment by grayhatter in "Bill to block publishers from killing online games advances in California"]]></title><description><![CDATA[
<p>> We looked into it. Hackers got part of the way there so we decided not to make a change. They might be able to do it after the title is fully sunset and the team disbanded.<p>This doesn't actually answer the question about how hard it would be. What's the specific level of effort required, and some amount of why so people can learn from your experience.<p>> We basically have to get as much done on a 3/4 month timeline as possible and it isn’t a priority like saving content or refunding gift cards is. Shutting down is a lot of work.<p>I'd rather have a working game then a refund of a gift card. Including if that means I have to stand up my own servers.<p>Priorities I guess</p>
]]></description><pubDate>Sat, 16 May 2026 14:00:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48160339</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48160339</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48160339</guid></item><item><title><![CDATA[New comment by grayhatter in "“Too dangerous to release” or just too expensive?"]]></title><description><![CDATA[
<p>The security/safety controls they <i>have</i> to add to make it safe enough to release?</p>
]]></description><pubDate>Fri, 15 May 2026 18:18:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48151946</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48151946</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48151946</guid></item><item><title><![CDATA[New comment by grayhatter in "“Too dangerous to release” or just too expensive?"]]></title><description><![CDATA[
<p>are you able to detail a single safeguard you plan to implement, so that I can stop believing it's vaporware and/or a scam?</p>
]]></description><pubDate>Fri, 15 May 2026 14:52:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=48149446</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48149446</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48149446</guid></item><item><title><![CDATA[New comment by grayhatter in "Rewrite Bun in Rust has been merged"]]></title><description><![CDATA[
<p>maybe you should ask on the issue directly?</p>
]]></description><pubDate>Thu, 14 May 2026 20:53:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48141080</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48141080</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48141080</guid></item><item><title><![CDATA[New comment by grayhatter in "Rewrite Bun in Rust has been merged"]]></title><description><![CDATA[
<p>> What on earth is going on here?<p>With the nearly complete PR with the port to rust, a number of people predicted  that it was going to happen. They were assured it's unlikely to happen and then they were accused of overreacting over effectively nothing. When those same people who were already upset about the rewrite, learned that their predictions the same ones that were rudely dismissed, were in fact, correct, they became upset again; this time about being lied to.<p>Correct or not, it's reasonable to conclude they were lied to. Especially given they correctly predicted the future.</p>
]]></description><pubDate>Thu, 14 May 2026 20:50:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=48141054</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48141054</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48141054</guid></item><item><title><![CDATA[New comment by grayhatter in "Rewrite Bun in Rust has been merged"]]></title><description><![CDATA[
<p>>  so now it makes sense that people have strong feelings about it, as it's no longer just an experiment.<p>It also makes sense to have strong feelings when you're able to pattern match well enough to predict something will happen despite others trying to convince you that your predictions are incorrect.<p>It's not overreacting when correctly predicting the future, just because others couldn't. In the same vein, the idea that "everyone out to get you" is not called paranoia when there are people actually out to get you. That's better called being observant.<p>Some of those who predicted correctly might also have overreacted, but I believe that the majority understood that to be a blanket statement about prediction as a whole vs any specific individual reaction.</p>
]]></description><pubDate>Thu, 14 May 2026 20:46:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=48140999</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48140999</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48140999</guid></item><item><title><![CDATA[New comment by grayhatter in "Incident Report: CVE-2024-YIKES"]]></title><description><![CDATA[
<p>> The implication that I don't know what I'm looking at, or that I don't know what security is (despite having a clean track record for about 15 years now) was a bit aggravating.<p>I'm a security geek, a clean track record means much less to me than anyone would expect. The comment from the article mentioning that there was no evidence of exploitation explains why. I would never have noticed that implication, because I don't think it exists. (And it's completely unreasonable if it does), so that's your own deal... it's not a good conclusion to take from the article.<p>The only thing that matters is how much any given owner cares. Are they willing to go the extra mile to make sure things get done correctly. That's the best signal about if you can trust a project. Seems like you give a shit, so I wouldn't be too hard on yourself. The people that matter can tell, (everyone who can't tell is already willing to lie so they can be safely ignored!)<p>> In fact, even months later, the lasting effects have been panicking over anything that is remotely suspicious. The most recent example was just a few days ago. Had just gotten on the plane to go on vacation when someone Liked the original "I've been pwned" post on Bluesky. I misread the notification as being a new message to me saying "You've been pwned" and started to panick.<p>You haven't dealt with it yet, if you want to get your attention back so you can spend it on more important things than worrying about something from the past, you gotta talk to somebody. A therapist would help the fastest, but friends and family are often just as good.<p>> I'd have had no way to address it and it would have ruined the small chance per year I get to have a break.<p>Seriously, having been there myself it's not worth it... you're just allowing them to DoS your brain by allowing them to live rent free in your head. The only thing that matters is how seriously you take the remediation. Attention to detail, and the willingness to go the extra mile for security defects to tie up all loose ends is what matters. It's not your job to fix <i>everybody's</i> issue yourself, even if they don't or can't. You still have to enjoy life, or you burn out, and some idiot that doesn't care will take your place. Then they really win.<p>You're not responsible for the security or stability of anybody using nightly packages. (Only maintainer signed and tagged releases)<p>> The attack last year wasn't me misunderstanding security. It was the sum of many, many small things<p>so, a misunderstanding of how the little things actually impact security?<p>> (my history with and perception of npm especially w.r.t. their security posture and poor outreach over the years, being stressed out overall, and being in a rush at that particular moment, and a few other personal things) coming together in a perfect storm that resulted in the attack.<p>Those other personal things are the kinda thin that being able to enjoy a vacation make much easier. You can't help anybody if you don't put on your own mask first... Well... You definitely can, you're obviously trying to do now, but it's needless harder.<p>Npm, and the JavaScript ecosystem is a fucking joke. It's a mistake to blame yourself (or any maintainer) for how difficult it is to meet the bar for both security and accessibility. Worrying about the difficulty in consistentenly demonstrating the perfection required for security is a fool's errand, and your allowing the bad guys to get what they want by letting it live rent free in your head, it won't go away for as long as you worry about it more than you talk about it.<p>And I say all of that as the person who has multiple times, made the argument that it's perfectly fine to name an engineer and their decisions or incompetence as the root cause analysis in an official incident report. (Pilot Error is a thing): If I thought you were responsible, or had done anything wrong, I'd gladly blame you. Smart people don't care about mistakes, because they are always noise in the signal. I care about effort. People who give a shit are much more important and valuable.</p>
]]></description><pubDate>Tue, 12 May 2026 15:25:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=48109706</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48109706</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48109706</guid></item><item><title><![CDATA[New comment by grayhatter in "Gmail registration now requires scanning a QR code and sending a text message"]]></title><description><![CDATA[
<p>> you're almost certainly going to have everything you send go straight to spam.<p>I run my own email server on DO, nothing I send goes to spam. (I normally follow up on nearly all emails in case you're assuming some flavors of sample bias.)</p>
]]></description><pubDate>Mon, 11 May 2026 18:17:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48098610</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48098610</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48098610</guid></item><item><title><![CDATA[New comment by grayhatter in "Ask HN: Would you tell your kids to learn to code?"]]></title><description><![CDATA[
<p>I would teach my kid anything and everything they were willing to learn.<p>I imagine you have some sort of argument, I'm guessing it's a flavor of optimizing for opportunity cost?<p>Try to apply that same argument to English, or math... does it still hold? I'd hope not!<p>Instead, teach them to find joy in life. Encourage them to find passion in something creative or expressive.<p>I would teach my kid programming, I'll also teach them how to make a fire from friction. It doesn't matter if they ever actually need to use it, it'll make them a better human. Maybe they find they love programming, maybe they find out they love backpacking and decide to hike the PCT.<p>Either way I've given them a skill that might help them with some future I can't possibly predict for them.</p>
]]></description><pubDate>Sat, 09 May 2026 15:33:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=48075790</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48075790</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48075790</guid></item><item><title><![CDATA[New comment by grayhatter in "Maybe you shouldn't install new software for a bit"]]></title><description><![CDATA[
<p>I dislike FUD like this :/</p>
]]></description><pubDate>Fri, 08 May 2026 07:10:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48059697</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48059697</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48059697</guid></item><item><title><![CDATA[New comment by grayhatter in "Today I've made the difficult decision to reduce the size of Coinbase by ~14%"]]></title><description><![CDATA[
<p>> I am an engineer. I hire other engineers. I run a company that ships usable software for small businesses.<p>> We do this every day. I'm sorry to say, we are indeed shipping in days what used to take weeks.<p>I've been searching for months for evidence of this kinda thing. Do you have receipts you can share? Or is it more of the same "just trust me bro"?</p>
]]></description><pubDate>Wed, 06 May 2026 16:44:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=48038349</link><dc:creator>grayhatter</dc:creator><comments>https://news.ycombinator.com/item?id=48038349</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48038349</guid></item></channel></rss>