<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: josephg</title><link>https://news.ycombinator.com/user?id=josephg</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 15 Jun 2026 12:40:49 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=josephg" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by josephg in "Twenty One Zero-Days in FFmpeg"]]></title><description><![CDATA[
<p>Its 21 issues. And they've been human validated, as far as I can tell.</p>
]]></description><pubDate>Sat, 13 Jun 2026 01:30:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48511442</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48511442</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48511442</guid></item><item><title><![CDATA[New comment by josephg in "The Future of Email"]]></title><description><![CDATA[
<p>We'll see. I think mass JMAP adoption is really waiting for either apple (mail.app) or google (gmail) to jump on it.<p>My favorite feature of JMAP is that it gives you a single, consistent API endpoint that works for native clients, webmail and programmatic clients (like, backup scripts and things like that). JMAP means you don't have to invent your own REST API for webmail. Unfortunately, gmail, yahoo mail and all the rest predate JMAP. So it doesn't really help them in the same way.<p>It'd be lovely to get thunderbird working with JMAP!</p>
]]></description><pubDate>Fri, 12 Jun 2026 13:55:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=48504124</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48504124</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48504124</guid></item><item><title><![CDATA[New comment by josephg in "AI agent runs amok in Fedora and elsewhere"]]></title><description><![CDATA[
<p>> I don't really think it's actionable.<p>How is it not actionable? "Hey, you seem keen on feature X but I don't care about that. Just maintain X in your own fork. Thanks!" -> Close issue / PR.<p>Is this an illegal move? I've done it plenty of times. And other people have said the same to me, too!</p>
]]></description><pubDate>Fri, 12 Jun 2026 04:13:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=48499836</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48499836</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48499836</guid></item><item><title><![CDATA[New comment by josephg in "The RCE that AMD wouldn't fix"]]></title><description><![CDATA[
<p>The list of preinstalled CAs is long. I think its a safe bet that many nation-states have covert control over at least one CA on that list. (Or they have one of the root signing certs). HTTPS is way better than HTTP. But I'd personally rather if these random organisations didn't have RCE on my computers.<p>I've never heard of most of them. AAA Certificate Services? AC RAIZ FNMT-RCM? ACCVRAIZ1? Actalis? AffirmTrust? Even Godaddy is in there. I <i>know</i> I don't trust those guys.<p>Trust has gotta start somewhere. But its much better to TOFU, then pin signing keys in the updater.</p>
]]></description><pubDate>Fri, 12 Jun 2026 03:18:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48499506</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48499506</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48499506</guid></item><item><title><![CDATA[New comment by josephg in "AI agent runs amok in Fedora and elsewhere"]]></title><description><![CDATA[
<p>A maintainer recently told me to “Fork baby, fork!” in response to a large patch set.<p>I was delighted.</p>
]]></description><pubDate>Thu, 11 Jun 2026 10:38:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=48488557</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48488557</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48488557</guid></item><item><title><![CDATA[New comment by josephg in "Building an HTML-first site doubled our users overnight"]]></title><description><![CDATA[
<p>Claude is remarkably good at performance engineering and ports. It only takes one person on your team to ask claude to do a round of performance profiling and tuning. Or ask claude to take your react site and set up a server to render parts of your site as static, cache friendly HTML.<p>You barely need domain expertise any more. Just ask claude to make it go faster and it will.</p>
]]></description><pubDate>Thu, 11 Jun 2026 06:04:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=48486759</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48486759</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48486759</guid></item><item><title><![CDATA[New comment by josephg in "AI agent runs amok in Fedora and elsewhere"]]></title><description><![CDATA[
<p>> telling maintainers how to act will not fix anything.<p>I'm just saying its ok to ignore overly enthusiastic contributors and tell them to just fork your project.<p>I think this does help, actually. In my early days of maintaining opensource software I felt burdened by open PRs - like I was letting someone down by ignoring their work. "Its ok, let them do whatever in their own fork" is advice I wish someone had given me.</p>
]]></description><pubDate>Thu, 11 Jun 2026 05:57:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=48486704</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48486704</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48486704</guid></item><item><title><![CDATA[New comment by josephg in "AI agent runs amok in Fedora and elsewhere"]]></title><description><![CDATA[
<p>Please, everyone - don't let yourself be pestered into accepting PRs that you don't care for. Since the xz attack, the security of all our computers depends on maintainers not letting this stuff in.<p>If someone really wants a feature in a project you wrote, but you don't care about the feature, just let them fork. Its fine.</p>
]]></description><pubDate>Thu, 11 Jun 2026 03:29:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=48485906</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48485906</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48485906</guid></item><item><title><![CDATA[New comment by josephg in "Building an HTML-first site doubled our users overnight"]]></title><description><![CDATA[
<p>Better than a lot of web dev teams at least.</p>
]]></description><pubDate>Thu, 11 Jun 2026 01:25:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=48485151</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48485151</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48485151</guid></item><item><title><![CDATA[New comment by josephg in "Farmer donates land for a park, city sells it for $10M as data center land"]]></title><description><![CDATA[
<p>> "French setting fire to things" is a popular American trope, but things really don't work like that.<p>They worked like that when I was in Paris ~3 years ago! At the time, people were rioting over the retirement age changes. I walked around the city the day after the protests. The city smelled like burned plastic. There were burned out rubbish bins and the husks of melted lime bikes & scooters all over the place.<p>I've never seen anything like it.</p>
]]></description><pubDate>Thu, 11 Jun 2026 01:24:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=48485144</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48485144</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48485144</guid></item><item><title><![CDATA[New comment by josephg in "A Farmer Donated Land to Turn into a Park. The City Is Building a Data Center"]]></title><description><![CDATA[
<p>I saw a clip the other day of an American comedian doing crowd work in Paris. He asked the audience what America should do, and the French said - something like - they should punch the police more and light things on fire.<p>To me that sounds crazy! But, I can see how it works for the French. They protest all the time, and the government is very responsive to the needs of the people. Much more so than the American government sees to be.</p>
]]></description><pubDate>Wed, 10 Jun 2026 21:43:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48483139</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48483139</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48483139</guid></item><item><title><![CDATA[New comment by josephg in "Building an HTML-first site doubled our users overnight"]]></title><description><![CDATA[
<p>Heh this is one nice thing about doing engineering work in Australia. Our round-trip time to US data centers is often about 200ms. There’s no hiding from sloppy choices in the performance panel.<p>I had an argument a few weeks ago because our page took 4 serial requests before content appeared. I argued - with solid data - that it should be 1. If we could manage that, cold load time would ~ halve.</p>
]]></description><pubDate>Wed, 10 Jun 2026 21:36:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48483056</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48483056</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48483056</guid></item><item><title><![CDATA[New comment by josephg in "Building an HTML-first site doubled our users overnight"]]></title><description><![CDATA[
<p>I’m curious if - and when - LLMs change this. They’re very good at web apps. And they’re great at rewriting existing stuff. Just give them a well scoped /goal and go get coffee.<p>Theres lots of open questions about the future of our profession in the age of AI. But, playing with opus and fable, I think the future will be bright for our users. There is no reason any more for teams to put out junk that’s worse than what an LLM can do.</p>
]]></description><pubDate>Wed, 10 Jun 2026 21:29:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=48482982</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48482982</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48482982</guid></item><item><title><![CDATA[New comment by josephg in "Claude Desktop spawns 1.8 GB Hyper-V VM on every launch, even for chat-only use"]]></title><description><![CDATA[
<p>I really like Fastmail. It’s just - clean and lightweight. It loads much faster. Has all the features you actually need. No mystery meat. And the UI doesn’t churn every few years for no reason.</p>
]]></description><pubDate>Wed, 10 Jun 2026 21:18:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=48482865</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48482865</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48482865</guid></item><item><title><![CDATA[New comment by josephg in "Claude Desktop spawns 1.8 GB Hyper-V VM on every launch, even for chat-only use"]]></title><description><![CDATA[
<p>> but I'd like to request that you give examples of what competing products are categorically better<p>Personally I much prefer Fastmail to Gmail. The site is way faster and more cohesively designed. Fastmail supports jmap, and way more imap extensions (including push support on Apple mail). They have helpful humans handling support requests. And they do all of that with what seems like 1/10th or less the number of employees.<p>The only thing I like more about Gmail is their native mobile apps. Fastmail’s official mobile app is a web view.</p>
]]></description><pubDate>Wed, 10 Jun 2026 21:13:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48482800</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48482800</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48482800</guid></item><item><title><![CDATA[New comment by josephg in "Claude Fable 5"]]></title><description><![CDATA[
<p>Yeah, you've certainly been able to get Opus to write a CRDT. It just needs a lot of hand-holding to make it correct. Opus always seems pretty bad at coming up with invariants and using them to make a piece of software correct. Without invariants, you end up with lots of hacky workarounds to avoidable problems.<p>So far at least - and its been less than a day - Fable seems better at this.<p>I think I also do my CRDTs differently from others. I've grown to like the pure-oplog approach after making eg-walker. LLMs are much worse at this!</p>
]]></description><pubDate>Wed, 10 Jun 2026 13:27:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48475999</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48475999</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48475999</guid></item><item><title><![CDATA[New comment by josephg in "Claude Fable 5"]]></title><description><![CDATA[
<p>I’d be fascinated to hear more if you’re willing to share. What is special about your document model which makes existing tools like automerge a bad fit?</p>
]]></description><pubDate>Wed, 10 Jun 2026 06:14:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48472153</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48472153</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48472153</guid></item><item><title><![CDATA[New comment by josephg in "Claude Fable 5"]]></title><description><![CDATA[
<p>I’ll ask it for a formal proof when I get home and see how it goes.<p>I’ve read plenty of papers with “formal proofs of correctness” that turned out to have huge flaws. Machine verifiable proofs I trust. But I’ve personally found more bugs with fuzzing than I have via proofs.</p>
]]></description><pubDate>Wed, 10 Jun 2026 06:13:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=48472143</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48472143</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48472143</guid></item><item><title><![CDATA[New comment by josephg in "Claude Fable 5"]]></title><description><![CDATA[
<p>I'm having the same experience. I'm in the process of implementing a new CRDT for realtime collaborative editing. There just aren't a lot of implementations of CRDTs kicking around online for opus or any of the other models to have good design instincts.<p>Fable is doing - so far - a great job. I just had one big question around how part of it should work. I had a design sketch, but with some big unknowns. I asked fable to figure it out via reasoning and prototyping, and it did - it even, under its own initiative, wrote a fuzzer for its prototype which explored and verified that its reasoning was correct. It absolutely nailed it. And it found, and fixed, a couple bugs that I'd missed.<p>I'm sure its weaknesses will become apparent in time. But, wow this thing is a beast. Its the first time I'm reading the work of an LLM without spotting obvious weaknesses in its reasoning and code. I'm really impressed.</p>
]]></description><pubDate>Wed, 10 Jun 2026 02:43:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=48470716</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48470716</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48470716</guid></item><item><title><![CDATA[New comment by josephg in "Siri AI"]]></title><description><![CDATA[
<p>Does apple's own siri need to pass requests through their gatekeeper AI? I bet it doesn't. Personally, I'm generally happy with any answer apple comes up with so long as they're bound by the same set of restrictions as 3rd party companies. I feel like that's the only way to make sure apple won't "accidentally" hobble their competitors. (Like they did with their ridiculous 50c per app install fee for 3rd party app stores).<p>I want Claude and OpenAI to be able to compete with Siri on an equal footing. Just like Apple maps has to compete with google maps. Competition pushes companies to make better products.</p>
]]></description><pubDate>Tue, 09 Jun 2026 01:10:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=48454840</link><dc:creator>josephg</dc:creator><comments>https://news.ycombinator.com/item?id=48454840</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48454840</guid></item></channel></rss>