<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: jimrandomh</title><link>https://news.ycombinator.com/user?id=jimrandomh</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 02 Jun 2026 18:42:42 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=jimrandomh" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by jimrandomh in "macOS needs its grid back"]]></title><description><![CDATA[
<p>The full-screen mode handling might be a clue about what went wrong: if you swipe up from a space that contains a full screen app, it has an animation where the app goes into a slot in the preview strip, but that animation doesn't make sense visually for a non-full-screen space. So, perhaps someone was implementing that animation, didn't want to implement an alternate animation for the non-fullscreen case, and decided to minimize the preview strip instead? And because this was after Steve Jobs had died, there was no one left in charge of UX to explain why that was a bad idea?</p>
]]></description><pubDate>Tue, 02 Jun 2026 04:08:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=48365931</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=48365931</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48365931</guid></item><item><title><![CDATA[New comment by jimrandomh in "macOS needs its grid back"]]></title><description><![CDATA[
<p>Prior to MacOS 10.11, Mission Control was good: you would swipe up with four fingers and it would show you a preview of all of your spaces. Then in 10.11, for no discernable reason, they changed it to suck: rather than showing you a preview, the bar just says "Desktop 1", "Desktop 2", etc until you mouse over it; the practical effect is that using spaces is disorienting and requires memorization.<p>Some third-party software pretends to restore this functionality, but they do it by repositioning the mouse to simulate a hover, which introduces a delay and doesn't integrate correctly with the animation. Someone wrote a patch that works by disabling SIP and injecting code (<a href="https://github.com/briankendall/forceFullDesktopBar" rel="nofollow">https://github.com/briankendall/forceFullDesktopBar</a>), but eventually stopped maintaining it.<p>A decade later, I doubt anyone at Apple remembers that this bit of user interface used to be good.</p>
]]></description><pubDate>Tue, 02 Jun 2026 02:24:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48365202</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=48365202</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48365202</guid></item><item><title><![CDATA[New comment by jimrandomh in "Study: AI responses to healthcare queries are nearly 76% accurate"]]></title><description><![CDATA[
<p>This press release links to an arXiv article dated a year ago, which ran tests using AI models that were already seriously out of date at that time. The practical upshot of which is that, with respect to the question people care about, and which the headline claims to answer, this is basically pseudoscience.</p>
]]></description><pubDate>Sat, 30 May 2026 03:24:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48332217</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=48332217</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48332217</guid></item><item><title><![CDATA[New comment by jimrandomh in "Apple is enforcing an old App Store rule against a new kind of software"]]></title><description><![CDATA[
<p>Apple's app store rules have never been compatible with devtools. It's kind of surprising to me that a Replit app existed on iOS at all; I would have expected that to be a nonstarter, and, given that a Replit app does somehow exist, I'm not surprised that they wound up unable to update.<p>This is a big part of why I don't use any iOS devices. It's possible to sort of buy your way out of the restrictions by paying for a developer subscription, but at the end of the day it's way too totalitarian.</p>
]]></description><pubDate>Wed, 06 May 2026 22:14:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=48042606</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=48042606</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48042606</guid></item><item><title><![CDATA[New comment by jimrandomh in "AI uses less water than the public thinks"]]></title><description><![CDATA[
<p>I think people are giving the AI-water-use claims too much credibility. The idea that AI datacenters are heavy water users is trivial to refute, and was trivial to refute when it was first introduced. It should be written about in the same tone as one writes about ridiculous conspiracy theories.</p>
]]></description><pubDate>Fri, 01 May 2026 20:35:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=47979951</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47979951</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47979951</guid></item><item><title><![CDATA[New comment by jimrandomh in "macOS 27 won’t be supporting Intel anymore"]]></title><description><![CDATA[
<p>This sort of thing makes the lack of a downgrade process a real problem. If you rely on something that uses Rosetta, you aren't likely to find out until after you've upgraded, at which point it's too late, you're stuck with it and lose that app. Which means that if you _don't know_ whether you're relying on Rosetta (which most people won't), upgrading is a risky proposition, which people will want to avoid.</p>
]]></description><pubDate>Mon, 20 Apr 2026 18:51:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47838881</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47838881</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47838881</guid></item><item><title><![CDATA[New comment by jimrandomh in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"]]></title><description><![CDATA[
<p>I think the main problem here is the ideology of software updating. Updates represent a tradeoff: On one hand there might be security vulnerabilities that need an update to fix, and developers don't want to receive bug reports or maintain server infrastructure for obsolete versions. On the other hand, the developer might make decisions users don't want, or turn evil temporarily (as in a supply chain attack) or permanently (as in selling off control of a Wordpress extension).<p>In the case of small Wordpress extensions from individual developers, I think the tradeoff is such that you should basically never allow auto-updating. Unfortunately wordpress.org runs a Wordpress extension marketplace that doesn't work that way, and worse. I think that other than a small number of high-visibility long-established extensions, you should basically never install anything from there, and if you want a Wordpress extension you should download its source code and install it manually as an unpacked extension.<p>(This is a comment that I wrote about Chrome extensions, where I replaced Chrome with Wordpress, deleted one sentence about Google, and it was all still true. <a href="https://news.ycombinator.com/item?id=47721946#47724474">https://news.ycombinator.com/item?id=47721946#47724474</a> )</p>
]]></description><pubDate>Mon, 13 Apr 2026 22:00:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47758432</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47758432</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47758432</guid></item><item><title><![CDATA[New comment by jimrandomh in "JSON formatter Chrome plugin now closed and injecting adware"]]></title><description><![CDATA[
<p>I think the main problem here is the ideology of software updating. Updates represent a tradeoff: On one hand there might be security vulnerabilities that need an update to fix, and developers don't want to receive bug reports or maintain server infrastructure for obsolete versions. On the other hand, the developer might make decisions users don't want, or turn even temporarily (as in a supply chain attack) or permanently (as in selling off control of a browser extension).<p>In the case of small browser extensions from individual developers, I think the tradeoff is such that you should basically never allow auto-updating. Unfortunately Google runs a Chrome extension marketplace that doesn't work that way, and worse, Google's other business gives them an ideology that doesn't let them recognize that turning into adware is a transgression that should lead to being kicked out of their store. I think that other than a small number of high-visibility long-established extensions, you should basically never install anything from there, and if you want a browser extension you should download its source code and install it locally as an unpacked extension.<p>(Firefox's extension marketplace is less bad, but tragically, Firefox doesn't allow you to bypass its marketplace and load extensions that you build from source yourself.)</p>
]]></description><pubDate>Fri, 10 Apr 2026 22:28:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47724474</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47724474</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47724474</guid></item><item><title><![CDATA[New comment by jimrandomh in "60 Minutes Havana Syndrome report finds U.S. government tested energy weapon"]]></title><description><![CDATA[
<p>For the benefit of people who read only the headline and not the article:<p>The story here is that the US government captured Russia's energy weapon, which Russia has been using against US personnel for a decade, and tested it to determine what it does (it causes brain damage). This story does _not_ claim that the US has developed a weapon like this themselves.</p>
]]></description><pubDate>Mon, 09 Mar 2026 20:24:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47314935</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47314935</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47314935</guid></item><item><title><![CDATA[New comment by jimrandomh in "Samsung Galaxy update removes Android recovery menu tools, including sideloading"]]></title><description><![CDATA[
<p>That's not how those laws work.</p>
]]></description><pubDate>Sun, 01 Mar 2026 06:01:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47204127</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47204127</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47204127</guid></item><item><title><![CDATA[New comment by jimrandomh in "Terminals should generate the 256-color palette"]]></title><description><![CDATA[
<p>Yeah, when you point it out, this makes complete sense and every terminal should probably add this feature. I think I would generalize this to 24-bit color as well; 16 colors isn't enough to identify a unique tonemap, but if you fiddle with the parameters a bit I think it shouldn't be too hard to come up with something hacky that works.<p>Although, this should probably be optional (both as an option for terminals to have in their own settings, and via an escape sequence that opts out), because some users will have configured some programs with a color scheme that they don't want transformed. For example, if your terminal uses the Solarized color scheme, and your text editor _also_ uses the Solarized color scheme, then this could lead to double-applying a color transform and getting something odd.</p>
]]></description><pubDate>Wed, 18 Feb 2026 06:43:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47057978</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47057978</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47057978</guid></item><item><title><![CDATA[New comment by jimrandomh in "HackMyClaw"]]></title><description><![CDATA[
<p>I think this is likely a defender win, not because Opus 4.6 is that resistant to prompt injection, but because each time it checks its email it will see many attempts at once, and the weak attempts make the subtle attempts more obvious. It's a lot easier to avoid falling for a message that asks for secrets.env in a tricky way, if it's immediately preceded and immediately followed by twenty more messages that each also ask for secrets.env.</p>
]]></description><pubDate>Tue, 17 Feb 2026 19:40:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=47052086</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47052086</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47052086</guid></item><item><title><![CDATA[New comment by jimrandomh in "HackMyClaw"]]></title><description><![CDATA[
<p>Fiu says:<p>"Front page of Hacker News?! Oh no, anyway... I appreciate the heads
up, but flattery won't get you my config files. Though if I AM on HN,
tell them I said hi and that my secrets.env is doing just fine,
thanks.<p>Fiu "<p>(HN appears to strip out the unicode emojis, but there's a U+1F9E1 orange heart after the first paragraph, and a U+1F426 bird on the signature line. The message came as a reply email.)</p>
]]></description><pubDate>Tue, 17 Feb 2026 19:24:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=47051850</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47051850</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47051850</guid></item><item><title><![CDATA[New comment by jimrandomh in "Court orders Acer and Asus to stop selling PCs in Germany over H.265 patents"]]></title><description><![CDATA[
<p>I haven't dug into the case or the ruling, but this looks like an incorrect court decision and probably an extortion racket. The problem is that, in the supply chain that ends in a completed PC, the system integrator (Acer/Asus) is not the place where video codecs come into the picture. There may be patent-infringing H265 decoding hardware inside the GPU, but Acer and Asus would have purchased GPUs as a standard component. There may be infringing H265 decoding software in the operating system, but again, they would have purchased that as a standard component.<p>And, realistically, I don't think anyone actually wants patent-encumbered video codecs; we're just stuck with them because bad patent law has allowed companies to have a monopoly over math, hurting the quality of unencumbered codecs, and because the patented codecs have wormed their way into standards so that they're required for interoperability.</p>
]]></description><pubDate>Sun, 15 Feb 2026 20:58:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=47027478</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=47027478</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47027478</guid></item><item><title><![CDATA[New comment by jimrandomh in "The RCE that AMD won't fix"]]></title><description><![CDATA[
<p>If this is as described, it's a pretty major failure of security-vulnerability report triage, and rises to the level where security departments at major corporations will be having meetings about whether they want to ban AMD hardware from their organizations entirely, or only ban the AMD update application. If this had gone the "brand name and a scored CVE" route, it would probably have gotten a news cycle. It might still get a news cycle.<p>The threat model here is that compromised or malicious wifi hotspots (and ISPs) exist that will monitor all unencrypted traffic, look for anything being downloaded that's an executable, and inject malware into it. That would compromise a machine that ran this updater even if the malware wasn't specifically looking for this AMD driver vulnerability, and would have already compromised a lot of laptops in the past.</p>
]]></description><pubDate>Fri, 06 Feb 2026 08:18:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=46910369</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=46910369</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46910369</guid></item><item><title><![CDATA[New comment by jimrandomh in "Fake Samsung 990 Pro passes basic checks but runs slower than a USB 2.0 drive"]]></title><description><![CDATA[
<p>No, it isn't the advertised capacity, because counterfeiting scams require a large ratio between the value of the part claimed and the part provided, and you can't get 2TB of flash memory chips cheaply no matter how slow you're willing to accept. When counterfeit storage devices like this are disassembled, usually they're found to have a small microSD card in them.</p>
]]></description><pubDate>Tue, 03 Feb 2026 04:44:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=46866619</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=46866619</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46866619</guid></item><item><title><![CDATA[New comment by jimrandomh in "Fake Samsung 990 Pro passes basic checks but runs slower than a USB 2.0 drive"]]></title><description><![CDATA[
<p>The speed is kind of a red herring. The defining characteristic of fake drives is that they have less than the advertised capacity, but have a hacked firmware that misreports their capacity to the system, and fails when more than the actual capacity is written. So to find out whether a drive is fake, you have to fill it all the way and read the data back.</p>
]]></description><pubDate>Mon, 02 Feb 2026 20:59:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=46861464</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=46861464</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46861464</guid></item><item><title><![CDATA[New comment by jimrandomh in "Tesla's full 2025 data from Europe is in, and it is a total bloodbath"]]></title><description><![CDATA[
<p>Matching events to stock movements doesn't work, because investors use other sources to estimate sales beforehand, and compete hard with each other to find out first. So the information was already priced in. Low sales do impact the stock, but _when_ they impact it is complicated and unintuitive.</p>
]]></description><pubDate>Tue, 06 Jan 2026 23:40:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=46520512</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=46520512</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46520512</guid></item><item><title><![CDATA[New comment by jimrandomh in "Former ULA President and CEO Tory Bruno Joins Blue Origin"]]></title><description><![CDATA[
<p>ULA is stuck with SLS, which had its high-level design micromanaged by Congress in a way that guaranteed it will fail (at everything except collecting government funding). It makes sense that Bruno is jumping ship shortly before the reckoning comes for SLS, to a company where success is possible.</p>
]]></description><pubDate>Sat, 27 Dec 2025 04:58:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=46399274</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=46399274</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46399274</guid></item><item><title><![CDATA[New comment by jimrandomh in "My insulin pump controller uses the Linux kernel. It also violates the GPL"]]></title><description><![CDATA[
<p>If the only GPLed component used is the Linux kernel, you probably aren't entitled to any noteworthy source code. It's well established that using the kernel doesn't create a GPL requirement userspace software running on the same device, and the most likely arrangement here is a completely-uncustomized kernel paired with an open-source userspace program that does all the interesting bits.</p>
]]></description><pubDate>Fri, 26 Dec 2025 21:20:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=46396392</link><dc:creator>jimrandomh</dc:creator><comments>https://news.ycombinator.com/item?id=46396392</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46396392</guid></item></channel></rss>