<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: hirsin</title><link>https://news.ycombinator.com/user?id=hirsin</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 01 Jun 2026 18:40:30 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=hirsin" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by hirsin in "Scammers are abusing an internal Microsoft account to send spam links"]]></title><description><![CDATA[
<p>Microsoft.com is also owned by the marketing org, not the engineering org, for various reasons that predate the existence of many employees at Microsoft now.<p>This is why with rare, rare exceptions nothing "real" is on Microsoft.com including even the login page, with one exception (the passkey domain).<p>The new cloud.microsoft domain for Office will possibly help, but it's still a heck of a long list - <a href="https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide" rel="nofollow">https://learn.microsoft.com/en-us/microsoft-365/enterprise/u...</a><p>And IIRC this is just for office and windows, not azure.</p>
]]></description><pubDate>Sun, 24 May 2026 17:02:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=48259017</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=48259017</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48259017</guid></item><item><title><![CDATA[New comment by hirsin in "Trade Dollars with other startups. Book it as revenue"]]></title><description><![CDATA[
<p>Not quite. At least the one I found is some trickle down economics myth.<p>The one op is referencing is more like the dollar is used to pay off the waitstaff, who pay their rent to the landlord, who pay their over due taxes, so that the government can issue a refund to the cafe owner. The dollar ends up back in the hands of the cafe owner, who puts it back down on the table with all the debts paid off.</p>
]]></description><pubDate>Fri, 15 May 2026 16:22:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48150519</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=48150519</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48150519</guid></item><item><title><![CDATA[New comment by hirsin in "Claude for Legal"]]></title><description><![CDATA[
<p>It definitely looks like the old tale come true - at Microsoft people would warn against using Google because then Google could figure out what we're working on, since it was pretty easy to tell where a query was coming from.<p>Sounded far fetched back then, and on the face of it illegal, but now it's just common sense I imagine.</p>
]]></description><pubDate>Thu, 14 May 2026 22:52:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48142325</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=48142325</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48142325</guid></item><item><title><![CDATA[New comment by hirsin in "What I'm Hearing About Cognitive Debt (So Far)"]]></title><description><![CDATA[
<p>That's the success case.
In the failure case you have emboldened, pressured teams jumping in to make a "quick fix" or "that feature we needed" in a codebase for a team they've never heard of, and leaders cheering it on in the name of progress.<p>Not every company is going to see those boundaries and stakeholders as features, and they'll be under pressure to "mitigate those blockers to execution". That's where the cognitive debt skyrockets.</p>
]]></description><pubDate>Tue, 05 May 2026 04:56:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=48018214</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=48018214</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48018214</guid></item><item><title><![CDATA[New comment by hirsin in "Opus 4.7 knows the real Kelsey"]]></title><description><![CDATA[
<p>I have no idea how you read a statement about how nazis and flame baiters should be able to speak their mind and then concluded that the author only cares about some minorities.<p>Given that the author didn't say any of the things you claimed, and indeed said the opposite, it leads one to conclude you have a problem with the example used.</p>
]]></description><pubDate>Fri, 01 May 2026 00:25:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47970053</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47970053</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47970053</guid></item><item><title><![CDATA[New comment by hirsin in "SI Units for Request Rate (2024)"]]></title><description><![CDATA[
<p>Is there some obvious reason not to measure requests per minute rather than second? Or is it an offhand joke?<p>Some systems I've worked on had APIs that averaged less than one per second, but I don't think we want to be measuring in millibecquerels. Some have measured on millions of requests per hour, because the hourly usage was a key quantity, as rate limits were hourly as well.</p>
]]></description><pubDate>Sun, 19 Apr 2026 05:49:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47822095</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47822095</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47822095</guid></item><item><title><![CDATA[New comment by hirsin in "Type systems are leaky abstractions: the case of Map.take!/2"]]></title><description><![CDATA[
<p>Right - it feels like going skin deep on types and then complaining they didn't solve for very deep problems.<p>Like yes, it would be nice for Map(ICar[] cars, keys).wingspan to throw a type error because cars is typed and we know keys can't include things not in ICar.<p>But to say that Map(Any[] things, keys) should have ahead of time type checking seems like you're not really using types except when inconvenient. Which might be taken as a no true scotsman or "holding it wrong" argument but... Maybe they are holding it wrong.<p>(Speaking as a former Windows/CLR PM now working in a Ruby monolith... It's hell and indeed trying to add types via sorbet has been miserable and useless)</p>
]]></description><pubDate>Mon, 16 Mar 2026 03:03:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47394742</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47394742</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47394742</guid></item><item><title><![CDATA[New comment by hirsin in "The Appalling Stupidity of Spotify's AI DJ"]]></title><description><![CDATA[
<p>To torture the metaphor further - it's also a personal dj, with an audience and customer of 1. Somewhat by definition there can be no outlandish requests, certainly not "play this entire piece".<p>If I told the DJ at my wedding to play an album front to back, and they transitioned to Aerosmith, I'd be tapping a friend to run the music the rest of the night.</p>
]]></description><pubDate>Sun, 15 Mar 2026 16:39:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47389064</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47389064</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47389064</guid></item><item><title><![CDATA[New comment by hirsin in "Privacy-preserving age and identity verification via anonymous credentials"]]></title><description><![CDATA[
<p>I'd review the setup here. You're missing the critical distinction that the cryptography supports - separating entirely (in time and space) the issuance of the cred to the user and the use of that cred with a website.<p>Unless you're getting the device logs from the users device (in which case... All of this is moot) there is no timing attack. Six months ago you got your mobile drivers license. And then today you used it to validate your age to a website anonymously. What's the timing attack there.</p>
]]></description><pubDate>Tue, 03 Mar 2026 17:32:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47235771</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47235771</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47235771</guid></item><item><title><![CDATA[New comment by hirsin in "Privacy-preserving age and identity verification via anonymous credentials"]]></title><description><![CDATA[
<p>Which is why you separate the credential issuance from the credential use, per the standard mentioned.</p>
]]></description><pubDate>Tue, 03 Mar 2026 15:09:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47233568</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47233568</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47233568</guid></item><item><title><![CDATA[New comment by hirsin in "Privacy-preserving age and identity verification via anonymous credentials"]]></title><description><![CDATA[
<p>It can't be quite that simple because you have a couple additional problems to solve - (effectively restating bits of the article poorly and partially)<p>1. You don't want these to be replayable (give your JWT to someone else to use) so they need to be bounded in some ways (eg intended website, time, proof it came from you and not someone else).<p>2. You don't want the government to know which website you're going to, nor allow the government and the website to collaborate to deanonymize you (or have the government force a website to turn over the list of tokens they got). So the government can't just hand you a uuid that the website could hand back to them to deanonymize.<p>The SD JWT and related specs solve for these, which is how mDL and other digital IDs can preserve privacy in this situation.</p>
]]></description><pubDate>Tue, 03 Mar 2026 13:45:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=47232223</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47232223</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47232223</guid></item><item><title><![CDATA[New comment by hirsin in ""That Shape Had None" – A Horror of Substrate Independence (Short Fiction)"]]></title><description><![CDATA[
<p><a href="https://qntm.org/mmacevedo" rel="nofollow">https://qntm.org/mmacevedo</a>, for those unfamiliar, not the namesake of that story from digital graphics.</p>
]]></description><pubDate>Mon, 02 Mar 2026 21:09:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47224109</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47224109</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47224109</guid></item><item><title><![CDATA[New comment by hirsin in "A new California law says all operating systems need to have age verification"]]></title><description><![CDATA[
<p>So does Google send a header for each search result when you look up "Ron Jeremy" so that some results get hidden, or does the browser just block the whole page?<p>Sending all the "bad" data to the client and hoping the client does the right thing outs a lot of complexity on the client. A lot easier to know things are working if the bad data doesn't ever get sent to the client - it can't display what it didn't get.</p>
]]></description><pubDate>Sat, 28 Feb 2026 00:08:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=47187964</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47187964</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47187964</guid></item><item><title><![CDATA[New comment by hirsin in "Layoffs at Block"]]></title><description><![CDATA[
<p>I can't think of a more quintessential crash out of a major brand than Twitter from the past couple years. For a significant percentage (>10% publicly, I'm confident much more than that internally) of users it became unattractive.<p>If Microsoft did something that resulted in 300 million users leaving it would be considered crashing and burning, but I guess when Elon does the same proportion someone will show up to explain why losing half your revenue is better than losing all of it.<p>I just want to know who those people are so that I can pitch them on my next investment fund.</p>
]]></description><pubDate>Fri, 27 Feb 2026 07:13:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47177519</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47177519</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47177519</guid></item><item><title><![CDATA[New comment by hirsin in "Layoffs at Block"]]></title><description><![CDATA[
<p>That would be the good argument, yes.</p>
]]></description><pubDate>Fri, 27 Feb 2026 00:58:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=47174822</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47174822</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47174822</guid></item><item><title><![CDATA[New comment by hirsin in "Layoffs at Block"]]></title><description><![CDATA[
<p>The Twitter layoffs being used as proof of _anything_ is misguided no matter what you're trying to say.<p>If success is losing half their revenue, reverting to revenue numbers from a decade ago, I gotta know what failure looks like. You might argue that the revenue losses aren't correlated to their headcount changes and probably make a good argument, but I mean... It's not a great one</p>
]]></description><pubDate>Fri, 27 Feb 2026 00:45:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47174696</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47174696</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47174696</guid></item><item><title><![CDATA[New comment by hirsin in "Bus stop balancing is fast, cheap, and effective"]]></title><description><![CDATA[
<p>As someone on the great, late 8 (<a href="https://fixthel8.com/" rel="nofollow">https://fixthel8.com/</a>) in Seattle, I'd happily give up my stop to help it be on time more often. I have three other stops I can walk to within ten minutes of me.<p>SF is another good example of too many stops. It's honestly comical and I stopped riding the bus in SF at times because the stop count was painful.</p>
]]></description><pubDate>Wed, 25 Feb 2026 19:10:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=47156272</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47156272</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47156272</guid></item><item><title><![CDATA[New comment by hirsin in "Bus stop balancing is fast, cheap, and effective"]]></title><description><![CDATA[
<p>Which of the cities used as examples in the articles are "sparse"? LA? Pittsburgh is one of the smaller ones listed and while the bus network there is very hub and spoke, it's also still semi usable.<p>But to call NYC, LA, Philly, Chicago, Minneapolis, Houston, etc sparse doesn't seem very accurate. Yes, LA is vast, but I wouldn't call it sparse.</p>
]]></description><pubDate>Wed, 25 Feb 2026 19:02:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47156154</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=47156154</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47156154</guid></item><item><title><![CDATA[Meanings of the Colors in the NYC Subway]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.untappedcities.com/secret-meaning-behind-colors-nyc-subway/">https://www.untappedcities.com/secret-meaning-behind-colors-nyc-subway/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=46912076">https://news.ycombinator.com/item?id=46912076</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Fri, 06 Feb 2026 12:38:49 +0000</pubDate><link>https://www.untappedcities.com/secret-meaning-behind-colors-nyc-subway/</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=46912076</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46912076</guid></item><item><title><![CDATA[New comment by hirsin in "The Color of Safety"]]></title><description><![CDATA[
<p>The observation that the colors were meant to be absorbed over time rather than explicitly set out reminds me of the old NYC Metro mosaics. <a href="https://www.untappedcities.com/secret-meaning-behind-colors-nyc-subway/" rel="nofollow">https://www.untappedcities.com/secret-meaning-behind-colors-...</a><p>While no one would ever navigate by learning what the mosaics mean, it's a fantastic setup for the expected audience of commuters. Give it a month and your brain would associate a given color with your stop coming up soon, and make navigation easier.</p>
]]></description><pubDate>Fri, 06 Feb 2026 12:36:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=46912061</link><dc:creator>hirsin</dc:creator><comments>https://news.ycombinator.com/item?id=46912061</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46912061</guid></item></channel></rss>