Hacker News: jdkoeck

New comment by jdkoeck in "Snowboard Kids 2 is 100% Decompiled"

jdkoeck — Sat, 30 May 2026 07:19:44 +0000

What a strange way to spell Zelda Ocarina of Time!

New comment by jdkoeck in "From Rust to Ruby"

jdkoeck — Wed, 27 May 2026 04:27:13 +0000

It’s short term happiness at best, and at the expense of every other possible architectural characteristic (maintainability, performance, reliability, scalability, you name it).

New comment by jdkoeck in "Pope Leo XIV’s first encyclical Magnifica humanitas to be published May 25"

jdkoeck — Tue, 19 May 2026 03:44:50 +0000

I suggest a look at the recent economic development of Bangladesh, if you want something less abstract to illustrate the point that the reduction in poverty is very noticeable.

You would think that a great reduction in extreme poverty would give people pause, but it is almost always barely acknowledged. The strange conclusion is that people who tell you they care the most about poverty do not actually care about it in the slightest. It is just a vehicle for their resentment.

New comment by jdkoeck in "Pope Leo XIV’s first encyclical Magnifica humanitas to be published May 25"

jdkoeck — Tue, 19 May 2026 01:42:34 +0000

A cursory look at the fall of extreme poverty across the world, over the last few decades, is enough to refute the idea that the world is largely based on exploitation.

New comment by jdkoeck in "Crystals found inside wreckage from the first nuclear bomb test"

jdkoeck — Mon, 18 May 2026 07:36:49 +0000

Interesting! Is it any good? Did it age well?

New comment by jdkoeck in "I am building a cloud"

jdkoeck — Thu, 23 Apr 2026 07:34:07 +0000

A nice bonus is that sysadmin tasks tend to be light in terms of token usage, that’s very convenient given the increasingly strict usage limits these days.

New comment by jdkoeck in "Parallel agents in Zed"

jdkoeck — Wed, 22 Apr 2026 23:37:37 +0000

No need for any AI-specific tool, this is exactly what devcontainer is for! Just tell your agent to use devcontainer up (and docker compose down the other way).

New comment by jdkoeck in "Over-editing refers to a model modifying code beyond what is necessary"

jdkoeck — Wed, 22 Apr 2026 22:58:09 +0000

Tell me you’re using Codex without telling me you’re using Codex :)

New comment by jdkoeck in "Over-editing refers to a model modifying code beyond what is necessary"

jdkoeck — Wed, 22 Apr 2026 19:47:58 +0000

The thing is, with manual coding, you spot a view in the distance, you trek your way for a few hours, and you realize when you get there that the view isn’t as great as you thought it was.

With LLM-assisted coding, you skip the trek and you instantly know that’s not it.

New comment by jdkoeck in "OpenClaw isn't fooling me. I remember MS-DOS"

jdkoeck — Tue, 21 Apr 2026 06:31:43 +0000

I have Hermes agent run a cron each hour to check if the Steam Controller if finally on sale. I don’t if that resonates with you, I quite like that use case personally :)

New comment by jdkoeck in "jj – the CLI for Jujutsu"

jdkoeck — Tue, 14 Apr 2026 21:03:50 +0000

Thanks for the explanation! I wish I could edit my comment to reflect the truth.

New comment by jdkoeck in "jj – the CLI for Jujutsu"

jdkoeck — Tue, 14 Apr 2026 12:37:36 +0000

Wow, that’s a total deal breaker to me. Using git may require a complex mental model, but at least it’s not doing anything I didn’t ask for.

New comment by jdkoeck in "The Last Quiet Thing"

jdkoeck — Mon, 06 Apr 2026 21:16:16 +0000

It sure looks like the author likes webpages coming alive too!

Thoughts on slowing the fuck down

jdkoeck — Wed, 25 Mar 2026 14:07:14 +0000

Article URL: https://mariozechner.at/posts/2026-03-25-thoughts-on-slowing-the-fuck-down/

Comments URL: https://news.ycombinator.com/item?id=47517539

Points: 1130

# Comments: 485

New comment by jdkoeck in "1M context is now generally available for Opus 4.6 and Sonnet 4.6"

jdkoeck — Sat, 14 Mar 2026 07:47:38 +0000

Undefined variable references? Did you not instruct it to run typescript after changes?

New comment by jdkoeck in "What I learned building an opinionated and minimal coding agent"

jdkoeck — Sun, 01 Feb 2026 18:36:58 +0000

That argument seems to assume a security model where the default prior is « no hostile agent ». But that’s the problem, any agent can be made hostile with a successful prompt injection attack. Basically, assuming there’s no hostile agent is the same as assuming there’s no attacker. I think we can agree a security model that assumes no attacker is insufficient.

New comment by jdkoeck in "What I learned building an opinionated and minimal coding agent"

jdkoeck — Sun, 01 Feb 2026 14:17:32 +0000

Internet access is required to install third party packages, so given the choice almost no one would disable it for a coding agent sandbox.

In practice, it seems to me that the sandbox is only good enough to limit file system access to a certain project, everything else (code or secret exfiltration, installing vulnerable packages, adding prompt injection attacks for others to run) is game if you’re in YOLO mode like pi here.

Maybe a finer grained approach based on capabilities would help: https://simonwillison.net/2025/Apr/11/camel/

New comment by jdkoeck in "What I learned building an opinionated and minimal coding agent"

jdkoeck — Sun, 01 Feb 2026 14:08:39 +0000

Code is not the only thing the agent could exfiltrate, what about API keys for instance? I agree sandboxing for security in depth is good, but it’s not sufficient and can lull you into a false sense of security.

New comment by jdkoeck in "What I learned building an opinionated and minimal coding agent"

jdkoeck — Sun, 01 Feb 2026 13:05:54 +0000

But even then, the agent can still exfiltrate anything from the sandbox, using curl. Sandboxing is not enough when you deal with agents that can run arbitrary commands.

New comment by jdkoeck in "OpenClaw – Moltbot Renamed Again"

jdkoeck — Fri, 30 Jan 2026 16:59:19 +0000

It is completely vibe coded. The author himself says he doesn't check the code.

https://x.com/Hesamation/status/2016712942545240203

Can't believe people are giving it full access to their MacOS user session. It's a giant vulnerability waiting to happen.

Sending an email with prompt injection is all it takes.

https://x.com/Mkukkk/status/2015951362270310879