<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: justonenote</title><link>https://news.ycombinator.com/user?id=justonenote</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 18 Sep 2026 14:05:43 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=justonenote" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by justonenote in "AWS says it can't restore some data from mideast facilities struck by Iran"]]></title><description><![CDATA[
<p>this is reductionist to the point of absurdism.<p>It can be true that using cloud storage, using managed services, and paying a premium is still worth it for a lot of people and organizations, and while not perfect, still a hell of a lot better compared to the fully in your control tape backups that you distribute to different physical locations every week.<p>I'm not a particular fan of relying on one provider or vendor lock in, but to pretend they don't provide a service with failure rates that are low enough to be very useful is a very short-sighted take.</p>
]]></description><pubDate>Wed, 16 Sep 2026 21:45:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=49733472</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49733472</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49733472</guid></item><item><title><![CDATA[New comment by justonenote in "Training a 4B model to produce 81% faster query plans than Postgres"]]></title><description><![CDATA[
<p>You'd be shocked at some of the punishments handed out from various empires over history for offences as minor as stealing an apple. Whether they can claim the moral high ground is not question of ethics but a question of power.</p>
]]></description><pubDate>Wed, 16 Sep 2026 21:35:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=49733364</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49733364</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49733364</guid></item><item><title><![CDATA[New comment by justonenote in "Small programming tricks"]]></title><description><![CDATA[
<p>and hook up a Bluetooth sensor so when you walk into the office it prints them off in individual sticky notes and assigns one of the humanoid robots to collect them and stick them on the monitor or cubicle walls of your chosen work desk.<p>what a time to be alive.</p>
]]></description><pubDate>Wed, 16 Sep 2026 21:29:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=49733277</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49733277</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49733277</guid></item><item><title><![CDATA[New comment by justonenote in "Fable 5.1 Solves the Cyphral Distich, a 370-year-old cipher"]]></title><description><![CDATA[
<p>Its all brute force. This was how the pyramids were built too. Verifiable goal and a lot of energy expended aiming toward it. It wasn't aliens then and its not super intelligence now.<p>All of these breakthroughs are in verifiable brute force domains, and some of them are probably wrong because of a typo in a lean specification or just a base level axiom being incomplete.<p>I think the better the way to think about LLMs is like they are new substances, like when we first discovered clay or bronze, but confined to the digital realm. Previously we were chipping away at stones trying to make to things as close to useful as possible, then we found a step change. LLMs are like clay but they have their limitations. Wake me up when they are proposing new, { conjecture: interesting|useful|new } and not as a side effect of trying to get to a goal.</p>
]]></description><pubDate>Mon, 14 Sep 2026 02:24:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=49691139</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49691139</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49691139</guid></item><item><title><![CDATA[New comment by justonenote in "Making Startups Powerful"]]></title><description><![CDATA[
<p>Religion<p>It doesn't need need to be tied to some mystical god, "music is my religion" is a phrase that has been used and is understood easily, and you can replace music with many other nouns, games, science, family, dog grooming, whatever.<p>You can kind of see this in the rise of weird internet cults around celebrities and obviously many IRL cults over the years, and I don't know if the frequency of weird cults has increased in the last 3 decades but I would take wild guess and say it has.<p>"Make religions cool again" is a bit of a hard sell considering worldwide events but unless we can come up with a better word for a shared value system where people sacrifice things they can gain, for the good of the group, I don't think there is a stronger word.</p>
]]></description><pubDate>Mon, 14 Sep 2026 00:49:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=49690449</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49690449</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49690449</guid></item><item><title><![CDATA[New comment by justonenote in "Astra and Fable still hack on simple variants of alignment evals from 2025"]]></title><description><![CDATA[
<p>Astra is incredibly dumb and annoying to work with on "high" reasoning, for doing fairly well known distributed systems things, nothing majorly exotic, it still makes absolutely braindead decisions like deciding to re-use a random nonce field which I've already discussed with it that has a very particular temporary purpose and will probably be removed later, but it still thinks its a great idea to re-use that field not only as a different id in the same message, but to re-use it as the only semantic id for one particular type of sub message. This is when I'm walking it through an api design document and it has plenty of documentation plans it can pull in and a very clear direction of the project. If it was a junior engineer I was trying to get to help out I would probably get brain damage from the amount of times I'm face palming myself and I definitely would not hire them, and this is a small greenfield project with me going through it step by step. I did try giving it longer horizon tasks and had to throw out the entre work.<p>I mean maybe its a skill issue on my part, and I'm sure astra will get much better at coding but at the moment its useful in that I don't have to write the code or setup the build scripts or test fixture boilerplate but there is absolutely no way I can just give a (fairly well specified) goal and let it run and expect it to make good design and implementation decisions. Fable probably better but doing something outside of their training distribution that's not the equivalent to cloning an example unreal project or whatever is pretty disastrous unless you are directing it very closely.<p>The exception of course is, cyber , and its very obvious why. Its trivial to create RL environments that create bugs and then have an isolated environment and let the models try break it. This is not at all surprising, finding vulns and exploits IS just brute force work. That's why so many (blackhat/hardcore/unicorn-colored/greyish alien) hackers are basement dwellers. Its just a matter of putting in the time and mashing every combination until you find something that looks weird, spending days on that and then rinse repeat. It's brutally exhausting work that requires a certain level of knowledge and a shitload of determination and stamina and for humans, almost always an external source of motivation to keep going.<p>For humans that has always been a respected thing, dedication, determination, persistence, these are words we use for humans brute-forcing solutions and not giving up until they find the solution or die trying.<p>Personally I'm yet to see any evidence of LLMs doing anything interesting but (heuristically) brute-force problems and be very good at text and natural language to a level that is very very useful. I've no doubt that what we discovered with Auto Regressive LLMs is incredibly important so I'm not a skeptic, but I think its very hard to measure where we are with so much subjective information around.</p>
]]></description><pubDate>Sun, 13 Sep 2026 19:43:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=49687886</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49687886</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49687886</guid></item><item><title><![CDATA[New comment by justonenote in "Making Startups Powerful"]]></title><description><![CDATA[
<p>I realize posting youtube videos that appear to be about 'creator beefs' at first glance may be considered low brow content for all the Jane Street or Palantir aspiring employees around here but such is life, you can lead a horse and all that. The world is made up of a bigger bubble than you are in but its still just a larger bubble with a lot of symmetries</p>
]]></description><pubDate>Sun, 13 Sep 2026 18:52:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=49687351</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49687351</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49687351</guid></item><item><title><![CDATA[New comment by justonenote in "Making Startups Powerful"]]></title><description><![CDATA[
<p>We really need a change in mindset around what success means. Concentration of power, concentration of resources, concentration of market share are some measures of success. Out competing your rivals until you grind them into dust is some measure of success. This is the Peter Thiel and Bezos and to a large extent the ycombinator and PG philosophy of success. It's dressed up as "just innovation bro" whereas the truth is, innovation in a rapidly increasing technological society is certainly both broadly useful to everyone, but also, left unchecked, just a tool to be successful in ways that are, sometimes extremely, detrimental to society as a whole. "Disruption and Innovation" could go well past the lines that AirBnb and Uber crossed and achieve a lot more success.<p>Just on PG as a persona, I was never a fan or non fan I've barely read his blogposts and only know of him incidentally from knowing this forum, but on the general area of "thought leaders" and the increasingly asymmetry one-to-many relationships we have been getting used to for decades I came across this very interesting and well put together video here: <a href="https://www.youtube.com/watch?v=Dqh17U3tymU" rel="nofollow">https://www.youtube.com/watch?v=Dqh17U3tymU</a> , give it 15 minutes if you do decide to watch it its a bit of a slow burn.</p>
]]></description><pubDate>Sun, 13 Sep 2026 18:15:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=49686924</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49686924</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49686924</guid></item><item><title><![CDATA[New comment by justonenote in "We found a division by zero bug in FFmpeg with a vibecoded fuzzer"]]></title><description><![CDATA[
<p>appreciate the input from someone who works in the codebase, but ok maybe tmux is openbsd secure, but it still has quirks and combined with agent harnesses not understanding them its a large attack surface Imo, what may be in inconsequential rendering artefact in tmux or inconsequential behavior on user input like scroll back or pane focus or whatever convinced with bad parsing from "acme client" program cant result in RCE, Id be more surprised if this _wasnt_ the case and tmux+acme clents have no bugs that can be chained, no matter how battle tested tmux itself is.</p>
]]></description><pubDate>Fri, 11 Sep 2026 00:08:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=49651825</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49651825</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49651825</guid></item><item><title><![CDATA[New comment by justonenote in "More questions about whether researchers can trust OpenAI with unpublished math"]]></title><description><![CDATA[
<p>that just furthers my point, i was vaguely aware that it wasn't a full proof, but I'm not a mathathician, and that detail just re-enforces my point we are proving against human made axiom (certainty of numbers) which are almost certainly not fully correct, if what you are saying is accurate its less of a proof of navier-stokes and more of a proof that our base axioma are not able the model the output of a real physical process and are therefore incomplete or wrong.<p>also realized i posted this under the wrong story since the OP/story is mostly about human politics.</p>
]]></description><pubDate>Thu, 10 Sep 2026 23:33:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=49651579</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49651579</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49651579</guid></item><item><title><![CDATA[New comment by justonenote in "More questions about whether researchers can trust OpenAI with unpublished math"]]></title><description><![CDATA[
<p>Who cares. the biggest thing about this is that its still brute force in a verifiable domain, and that it was still a human set goal.<p>I also don't believe it much practical use, unless I'm mistaken, approximations of Navier stokes have been available for a long time to whatever precision you need.<p>I'm not a complete disbeliever by any stretch , and also a complete amateur, but it was inevitable that these problems would be solved under the axioms that again, are human defined, under brute force. The real question is, are those axioms the bottom level, and if they are not, who is going to set the new aximons and can we understand them.<p>I've no doubt there's useful breakthroughs that will happen, but I think it should be remembered that the method being used is still a heuristic brute force approach is being very narrowly applied against axioms and math and physics which humans described in the first place, and almost undoubtably  has errors and/or is not complete.<p>Its a great example of the power of LLMs but its not 'we've solved science now just pour more tokens in'</p>
]]></description><pubDate>Thu, 10 Sep 2026 23:18:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=49651437</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49651437</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49651437</guid></item><item><title><![CDATA[New comment by justonenote in "We found a division by zero bug in FFmpeg with a vibecoded fuzzer"]]></title><description><![CDATA[
<p>as I mentioned in another sibling, its because it's a very common denominator in high value targets. I didn't know its legacy was from OpenBSD but I really doubt that that helps it much in this scenario, when I say LPE I'm not talking about user to root elevation, I'm talking parsed text/control sequences to arb code execution in the user context. These will slip past llm classifiers as safe and I'm fairly sure that they are extremely common in codebases like tmux, despite them having strong security posture its just a threat that was previously a bit outlandish and not accounted for.<p>persisted malicious code running in your tmux process that you don't know about is probably not where you want to be, for obvious reasons.</p>
]]></description><pubDate>Thu, 27 Aug 2026 22:56:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=49472344</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49472344</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49472344</guid></item><item><title><![CDATA[New comment by justonenote in "We found a division by zero bug in FFmpeg with a vibecoded fuzzer"]]></title><description><![CDATA[
<p>the point is tmux is being used by many developers working in high value targets to automate long running unsupervised agent tasks. you don't need the user to execute code, you need _their agent_ to stumble on the wrong search result or github repo and it wont be noticed for hours that they loaded a persistent threat into your environment.</p>
]]></description><pubDate>Thu, 27 Aug 2026 21:58:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=49471862</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49471862</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49471862</guid></item><item><title><![CDATA[New comment by justonenote in "We found a division by zero bug in FFmpeg with a vibecoded fuzzer"]]></title><description><![CDATA[
<p>Whatever about the specifics of this bug and whether its a useful vector, this is not surprising even in the slightest?<p>My current opinion on LLMs is that they are superhuman in that they lack fatigue, they have close to full knowledge across all subjects which are known to humans at least publicly, and the fact that you can vibe code a harness to look for bugs in a famously complicated C codebase is intern level stuff and hardly news.<p>Smart aspiring blackhats will be targeting tmux next, both with light llm jailbreaks, light supply chain attacks (web search results) and LPEs within certain environments which weren't particularly useful before but with agents running on auto mode for hours become a very valuable springboard. I'm not sure on the quality of tmux code but I know its written in C and is very complex and was not at all designed to defend against this type of threat.</p>
]]></description><pubDate>Thu, 27 Aug 2026 21:41:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=49471652</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49471652</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49471652</guid></item><item><title><![CDATA[New comment by justonenote in "On non-rooted Android 17, ADB uninstall of system apps fails"]]></title><description><![CDATA[
<p>If you are technical and want root its very easy to patch a build of GrapheneOS to include whatever mechanism you want. You can even automate this to continue to receive updates.<p>I think the decision of GrapheneOS to maintain the attestation features and not providing user root is what gives it a fighting chance of being accepted as legitimate 3rd choice. See: Revolut and others adding GrapheneOS keys and trusting their attestation<p>Like or not, for most users, having root access is a liability, especially with more and more important things being held on phones . Someone downloading a photo editing app and then having a rootkit installed in the background that waits to empty their bank account is not a workable situation.</p>
]]></description><pubDate>Thu, 06 Aug 2026 13:13:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=49196229</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49196229</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49196229</guid></item><item><title><![CDATA[New comment by justonenote in "Unraveling the mysteries of habit formation"]]></title><description><![CDATA[
<p>It's not circular, its just basic grammar, smooth, smoothly, spice, spicy.</p>
]]></description><pubDate>Sun, 02 Aug 2026 16:29:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=49145964</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49145964</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49145964</guid></item><item><title><![CDATA[New comment by justonenote in "Unraveling the mysteries of habit formation"]]></title><description><![CDATA[
<p>the examples I used were not generalized in any way at all. They were specifically picked examples that were at or approaching the limit of the definition, which is is a well known way of examining things in order to model them better.<p>if you want a more specific and narrow definition for certain classes of XYZ, you can do that, I wasn't trying to do that here.</p>
]]></description><pubDate>Sun, 02 Aug 2026 16:08:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=49145797</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49145797</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49145797</guid></item><item><title><![CDATA[New comment by justonenote in "Unraveling the mysteries of habit formation"]]></title><description><![CDATA[
<p>this is a willful misreading of the dictionary. you are pointing to habit being used colloquially as a short hand for addiction , which of course it is, as demonstrated through this thread, and is plainly obviously used that way to anyone who has lived in the last 50 years.<p>if you want to play pedant paddle, explain the relationship between the words habitual and habit, write an essay, and submit to webster, to oxford and any of your favorite dictionary and try and get them to change the the top definition of habit to be a synonym for addiction.<p>In the meantime I'll get on with my life because I know what I said was perfectly clear and accurate.</p>
]]></description><pubDate>Sun, 02 Aug 2026 15:50:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=49145650</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49145650</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49145650</guid></item><item><title><![CDATA[New comment by justonenote in "Unraveling the mysteries of habit formation"]]></title><description><![CDATA[
<p>it absolutely is a habit, the fact that it affects you physiologically via pharma does not make it not a habit. a habit is something you do habitually, that is the exact definition of the word, and the reasons people do them vary wildly. I used heroin as an an extreme example.<p>Going for a 5k jog every morning is also a habit that affects your brain chemistry, through different mechanisms, and can also be addictive. It's obviously much healthier, but its still a habit, that is reinforced via brain chemistry rewards etc (addictive in some people). It's not as widely seen or known but there is a small cohort of people who exercise becomes a problematic habit and ends up being detrimental to their health.<p>I suggest you check the definition of the words. I specifically wasn't talking about addiction because that is just one axis of what can make up a habit. Drinking water is a habit that is not addictive but pretty hard to quit. If you take a wider view there are tons of habits that are either harmful or positive, but have no addictive component, and have no chemical component, and are either hard or easy to pickup / drop.</p>
]]></description><pubDate>Sun, 02 Aug 2026 03:05:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=49140669</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49140669</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49140669</guid></item><item><title><![CDATA[New comment by justonenote in "Unraveling the mysteries of habit formation"]]></title><description><![CDATA[
<p>Agree with most everything and will check our that interview, that attitude is how I try and live, but the last sentence is obviously not true. Taking heroin is a habit, going to a gym is a habit, and obviously one is much easier to stop whether either willfully or not.<p>I'd say the ease which you can pick up habits or drop them is extremely variable across the specific habit and person. (as a different example, someone with less social awareness will find it harder to pick up the habit of being a hospitable host than someone it comes naturally to, but once learned its probably fairly easy to maintain)<p>One of my favorite quotes is, "first the man makes the habit, then the habit makes the man" , and it works both ways, good and bad. I really think this is something that should be taught much more explicitly in school to everyone, rather than leaving it only in places like sports and the military.</p>
]]></description><pubDate>Sun, 02 Aug 2026 01:49:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=49140295</link><dc:creator>justonenote</dc:creator><comments>https://news.ycombinator.com/item?id=49140295</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49140295</guid></item></channel></rss>