Hacker News: harikb

New comment by harikb in "Rio de Janeiro's "homegrown" LLM appears to be a merge of an existing model"

harikb — Sun, 14 Jun 2026 17:08:43 +0000

It is only a problem if you claim it to be an independently developed OS with no attribution to base

New comment by harikb in "The newest Instagram “exploit” is the goofiest I've seen"

harikb — Mon, 01 Jun 2026 19:00:42 +0000

Why isn't there a middle man service to do IRL verification.

Like - account is locked, you must use 2FA backup codes.

Else go to western union / 7-eleven / super-market, show ID proof, pay $10 for recovery service.

Wait 2 days (of someone not clicking on this-was-not-me)

If account is already hacked - pay $100 for expert support

New comment by harikb in "AI Agent Guidelines for CS336 at Stanford"

harikb — Mon, 01 Jun 2026 17:20:32 +0000

Laptop without internet access, sure. Pencil and paper? that is brutal :)

New comment by harikb in "Canvas is down as ShinyHunters threatens to leak schools’ data"

harikb — Fri, 08 May 2026 00:09:13 +0000

Well, you don't know how many more would have died if doctors and hospital didn't care about their insurance going higher???

New comment by harikb in "Canvas is down as ShinyHunters threatens to leak schools’ data"

harikb — Fri, 08 May 2026 00:07:30 +0000

> It's interesting that it's the universities being ransomed, while the technical failure was Instructure's.

My guess would be they get likelihood of getting paid when blackmailing 9,000 schools (at least a few would pay up) than blackmailing Canvas/Instructure.

I don't think any SLA/terms would change who gets to feel the pain.

New comment by harikb in "Ask.com has closed"

harikb — Sat, 02 May 2026 05:26:44 +0000

The guy who bought friendster.com lurks here

New comment by harikb in "Flipdiscs"

harikb — Mon, 27 Apr 2026 05:11:22 +0000

Is the last photo on that page, describing the cabling, a screenshot of another photo displayed using flipdiscs? that is a whole lot of discs!!

New comment by harikb in "Over-editing refers to a model modifying code beyond what is necessary"

harikb — Wed, 22 Apr 2026 18:29:35 +0000

On the credentials point. Here is what I find.

Day 1: Carefully handles the creds, gives me a lecture (without asking) about why .env should be in .gitignore and why I should edit .env and not hand over the creds to it.

Day 2: I ask for a repeat, has lost track of that skill or setting, frantically searches my entire disk, reads .env including many other files, understands that it is holding a token, manually creates curl commands to test the token and then comes back with some result.

It is like it is a security expert on Day 1 and absolute mediocre intern on Day 2

New comment by harikb in "The Vercel breach: OAuth attack exposes risk in platform environment variables"

harikb — Tue, 21 Apr 2026 18:44:38 +0000

> with secrets possibly baked into source

please don't suggest this. The right way is to have the creds fetched from a vault, which is programmed to release the creds auth-free to your VM (with machine level identify managed by the parent platform)

This is how Google Secrets or AWS Vaults work.

New comment by harikb in "Show HN: GoModel – an open-source AI gateway in Go"

harikb — Tue, 21 Apr 2026 17:18:50 +0000

The providers themselves can't keep this straight even within their own ecosystem. Plus everyone is running at a million miles/hour.

For example `Claude code` used to set 2 specific beta headers with some version numbers for their Max subscription to be supported.

Oauth tokens for Max plan is different from how their API keys looked. They kind of look similar, but has specific prefix that these tool pre-validate.

It is barely working at this point even within a single provider

New comment by harikb in "10 years ago, someone wrote a test for Servo that included an expiry in 2026"

harikb — Mon, 20 Apr 2026 17:26:34 +0000

A comment from the PR

> Not a serious problem, but the weekdays are wrong. For example, 18-Apr-2127 is a Friday, not Sunday.

There is now many magical dates to remember - 2126 ( I think PR was updated after that comment) and 2177. There is also 2028 also somewhere.

New comment by harikb in "Project Glasswing: Securing critical software for the AI era"

harikb — Wed, 08 Apr 2026 05:46:19 +0000

The only people panicking are probably those state level actors who were using these for their own benefit.

New comment by harikb in "Sky – an Elm-inspired language that compiles to Go"

harikb — Mon, 06 Apr 2026 20:23:57 +0000

Somewhat unrelated to the language itself:

> The compiler bootstraps through 3+ generations of self-compilation.

I guess it applies to any language compiler, but f you are self-hosting, you will naturally release binary packages. Please make sure you have enough support behind the project to setup secure build pipeline. As a user, we will never be able to see something even one nesting-level up.

New comment by harikb in "Samsung Magician disk utility takes 18 steps and two reboots to uninstall"

harikb — Fri, 03 Apr 2026 18:46:26 +0000

Thank you for PartitionMagic!! I remember using it to undo whatever disk partitioning mistake I did when originally setting up a machine :)

New comment by harikb in "Tailscale's new macOS home"

harikb — Thu, 02 Apr 2026 22:03:15 +0000

I struggled with disappearing icons (like our company VPN client - which wasn't tailscale by the way) thinking the app was somehow "stuck". I would go kill the app, restart machine etc - during restart it would get fixed "automatically" by being an app earlier in the order!

Took me months to figure out it was running afterall and just hidden by the notch.

How hard is for apple to move the "least used icons" to a fold? (but still accessible)

New comment by harikb in "Good ideas do not need lots of lies in order to gain public acceptance (2008)"

harikb — Thu, 02 Apr 2026 21:15:59 +0000

Somewhat counter quote...

"Don’t worry about people stealing your ideas. If your ideas are any good, you’ll have to ram them down people’s throats." -- Howard Aiken

...to mean that, usually, the good ideas are the crazy sounding ones...

New comment by harikb in "Claude Code's source code has been leaked via a map file in their NPM registry"

harikb — Tue, 31 Mar 2026 14:10:20 +0000

Not everything done by claude-code is decided by LLM. They need the wrapper to be deterministic (or one-time generated) code?

New comment by harikb in "New Apple Silicon M4 and M5 HiDPI Limitation on 4K External Displays"

harikb — Mon, 30 Mar 2026 04:45:49 +0000

He was told, he had a call from Pope

New comment by harikb in "Go hard on agents, not on your filesystem"

harikb — Sat, 28 Mar 2026 02:04:09 +0000

I think the point would be that - some random upcoming revision of claude-code could remove or simply change the config name just as silently as it was introduced.

People might genuinely want some other software to do the sandboxing. Something other than the fox.

New comment by harikb in "If you don't opt out by Apr 24 GitHub will train on your private repos"

harikb — Fri, 27 Mar 2026 21:33:35 +0000

The UI options are also shady af. The setting reads

Enabled - "You will have access to this feature" as help text. Disabled - "You will not have access to this feature".

WTF does that mean?