<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: kevincox</title><link>https://news.ycombinator.com/user?id=kevincox</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 10 Jun 2026 06:51:42 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=kevincox" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by kevincox in "Stop the Apple Music app from launching"]]></title><description><![CDATA[
<p>I think playing something when I hit the play button makes a lot of sense. (The headphones auto-play is a bit less obvious than the keyboard key, I would probably want that to do nothing in this case.)<p>The issue IMHO is that this is not configurable. Apple Music may even be a reasonable default (being the built-in music player). But it should provide options for Apple Music, whatever other apps I have installed, or nothing.</p>
]]></description><pubDate>Mon, 08 Jun 2026 21:33:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=48452466</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48452466</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48452466</guid></item><item><title><![CDATA[New comment by kevincox in "The Website Specification"]]></title><description><![CDATA[
<p>This is true but some sites handle it well. My browser auto-fills the email and password properly even though they are on separate "steps". Other sites the email field doesn't auto-complete in any way (but the password later usually does).<p>I don't know what the magic is here. If I had to guess they have both fields in the DOM but one is visually hidden. Then if your email is marked as SSO it is just never read.</p>
]]></description><pubDate>Mon, 01 Jun 2026 12:20:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48355865</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48355865</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48355865</guid></item><item><title><![CDATA[New comment by kevincox in "Cloudflare Turnstile requiring fingerprintable WebGL"]]></title><description><![CDATA[
<p>I can only assume that every time I back out of these sites because I don't want to check the box or just don't want to wait a few seconds that is marketed to the site owner as a GREAT VICTORY as I am clearly a EVIL BOT that they have defended the site from.</p>
]]></description><pubDate>Mon, 01 Jun 2026 10:30:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=48354949</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48354949</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48354949</guid></item><item><title><![CDATA[New comment by kevincox in "Exit IP VPN servers mitigation rollout"]]></title><description><![CDATA[
<p>I think the attack looks more like this:<p>1. I log into service X with account A1 via Mullvad from country C1.<p>2. I log into service X with account A2 via Mullvad from country C2.<p>If the service wanted they can calculate how likely it is that A1 and A2 are the same WireGuard key. If you only use one exit server this probability won't be very precise. But the more exits you use the more accurate it will be even if the sets of exits are distinct between the two accounts.<p>If the egress IPs were assigned randomly all that service X would know is that these were both Mullvad users but the IPs alone wouldn't allow them to correlate the two users further than that.</p>
]]></description><pubDate>Tue, 26 May 2026 19:03:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=48284333</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48284333</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48284333</guid></item><item><title><![CDATA[New comment by kevincox in "Uber president says AI spending is getting 'harder to justify'"]]></title><description><![CDATA[
<p>The logic is quite simple. Management thinks that AI can improve productivity, but knows that there will be some resistance and some learning curve. So they force people to use it so that people can 1. develop their skills and workflow and 2. find out where it is useful 3. find out what needs to be improved to make it useful.<p>As a more obvious example consider that cars were just invented and the post office management thinks that they could improve performance of letter carriers. But right now cars are slow, break down a lot and there isn't much infrastructure for them. Lots of letter carriers will (rightly) think that it is a waste of time because they need to get in, stop, park between every house and they break down so often it isn't worth it and half of their route is unsuitable for a car anyways. But if cars are forced for a while they will find out what routes work well for cars and which don't, improve the cars and related infrastructure to make cars more effective and other improvements to unlock more productivity.<p>So yes, right now management is wasting money on cars and gas for no increased productivity. And yes, measuring how much gas each employee uses and encouraging to use more is obviously stupid in isolation. But the idea is to force adoption to iron out the kinks and find out where it can improve productivity. It is basically funding a research project.</p>
]]></description><pubDate>Tue, 26 May 2026 14:37:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=48280468</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48280468</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48280468</guid></item><item><title><![CDATA[New comment by kevincox in "CopyFail: From Pod to Host"]]></title><description><![CDATA[
<p>The fundamental problem is that the kernel is just too huge of an attack surface. It is probably always going to have exploitable bugs. A VM (especially hardware assisted) is a relatively tiny attack surface and it shows in the amount of bugs found.<p>I typically say that containers (and any other isolation that shares a kernel) are good for "mostly trusted" workloads, like different teams at the same company. You want isolation against accidents more than intentional attacks.<p>VMs are good for just about everything if you are careful (for example what devices and hardware are exposed) but if you want ultimate isolation you want completely separate hardware. It is the only way to be sure against hardware bugs and side-channels or VM bugs.</p>
]]></description><pubDate>Wed, 20 May 2026 17:32:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48211168</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48211168</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48211168</guid></item><item><title><![CDATA[New comment by kevincox in "Bitwarden scrubs 'Always free' and 'Inclusion' values from its site"]]></title><description><![CDATA[
<p>It doesn't. All third-party contributions must assign copyright to Bitwarden.<p><a href="https://contributing.bitwarden.com/contributing/" rel="nofollow">https://contributing.bitwarden.com/contributing/</a><p><a href="https://cla-assistant.io/bitwarden/clients" rel="nofollow">https://cla-assistant.io/bitwarden/clients</a></p>
]]></description><pubDate>Fri, 15 May 2026 18:49:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48152332</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48152332</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48152332</guid></item><item><title><![CDATA[New comment by kevincox in "New arXiv policy: 1-year ban for hallucinated references"]]></title><description><![CDATA[
<p>That sounds like way less of a problem than science. If you take bad sources you hurt yourself financially. For science (especially anything medicine related) you can hurt many others physically.</p>
]]></description><pubDate>Fri, 15 May 2026 11:51:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48147458</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48147458</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48147458</guid></item><item><title><![CDATA[New comment by kevincox in "Hardware Attestation as Monopoly Enabler"]]></title><description><![CDATA[
<p>Yes, these are the most clearly corrupt laws that exist. It is like outlawing hammers because you may hit someone with it. It is just giving up freedom for the benefit of a few fortune 500 companies.</p>
]]></description><pubDate>Sun, 10 May 2026 23:57:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=48089420</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48089420</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48089420</guid></item><item><title><![CDATA[New comment by kevincox in "CVE-2026-31431: Copy Fail vs. rootless containers"]]></title><description><![CDATA[
<p>If any security relevant file from the host is mounted into the container this could be exploited quite easily. It is definitely a viable tool for escaping containers but it would require a bit of an attack chain and some containers may not be vulnerable.</p>
]]></description><pubDate>Tue, 05 May 2026 15:12:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=48023624</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48023624</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48023624</guid></item><item><title><![CDATA[New comment by kevincox in "Google Chrome silently installs a 4 GB AI model on your device without consent"]]></title><description><![CDATA[
<p>I find models of this size (not tested this one specifically) at being very good at simple data extraction from user input. Think about things like parsing date and time of an event from a description or parsing a human-typed description of a repeating event rule.</p>
]]></description><pubDate>Tue, 05 May 2026 14:10:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=48022776</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48022776</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48022776</guid></item><item><title><![CDATA[New comment by kevincox in "Automatic Brightness in Plasma"]]></title><description><![CDATA[
<p>I'm using LineageOS (which I assume is basically just ASOP) and the automatic brightness is great. I almost never touch it after about a week with the phone. I think it does some sort of basic learning. IDK if Samgsung did something worse somehow.</p>
]]></description><pubDate>Mon, 04 May 2026 17:22:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=48011787</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48011787</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48011787</guid></item><item><title><![CDATA[New comment by kevincox in "Introduction to Atom"]]></title><description><![CDATA[
<p>Kind of. It is now really just a caching proxy making it mostly useless.<p>Although I have found it occasionally useful for sites that have over-active bot-blocking on their feeds because Feedburner is often whitelisted.</p>
]]></description><pubDate>Mon, 04 May 2026 17:17:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48011702</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48011702</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48011702</guid></item><item><title><![CDATA[New comment by kevincox in "Introduction to Atom"]]></title><description><![CDATA[
<p>That's a good point. Podcasts are still (almost?) exclusively RSS 2.0. IDK if this is just momentum or Apple rules but I don't think I've ever seen an Atom podcast.<p>But many podcast clients actually still support Atom (probably using a feed library that supports various formats?) and basically all non-podcast feed readers support Atom.</p>
]]></description><pubDate>Mon, 04 May 2026 17:15:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48011679</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48011679</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48011679</guid></item><item><title><![CDATA[New comment by kevincox in "Introduction to Atom"]]></title><description><![CDATA[
<p>The channel pages still have auto-discovery links. So if you paste a channel URL into your feed reader it should find the feed easily.</p>
]]></description><pubDate>Mon, 04 May 2026 17:13:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=48011655</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=48011655</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48011655</guid></item><item><title><![CDATA[New comment by kevincox in "VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage"]]></title><description><![CDATA[
<p>Nah, they are both unacceptable spam. Don't put words in my mouth and don't hijack my communication for marketing.</p>
]]></description><pubDate>Sun, 03 May 2026 10:28:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47995496</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=47995496</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47995496</guid></item><item><title><![CDATA[New comment by kevincox in "Full-Text Search with DuckDB"]]></title><description><![CDATA[
<p>Thanks for the link. Good to know that they are at least signed by a key. But I really like my software not changing on me at all. I'd rather have all of the modules I need locally and static.<p>Also creates fun situations like getting on a plane then realizing that your extension isn't available!<p>It seems that nixpkgs at least fails to run the extension but more by luck than design. I hope they find a way to vendor the extensions locally.</p>
]]></description><pubDate>Thu, 30 Apr 2026 23:37:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=47969737</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=47969737</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47969737</guid></item><item><title><![CDATA[New comment by kevincox in "Full-Text Search with DuckDB"]]></title><description><![CDATA[
<p>It seems that DuckDB by default downloads and runs extensions at runtime when you use certain features? This seems unnecessarily risky.<p><a href="https://duckdb.org/docs/current/extensions/overview#autoloading-extensions" rel="nofollow">https://duckdb.org/docs/current/extensions/overview#autoload...</a><p>I would love to have more detail on this mechanism.</p>
]]></description><pubDate>Thu, 30 Apr 2026 21:40:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47968577</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=47968577</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47968577</guid></item><item><title><![CDATA[New comment by kevincox in "Claude Code refuses requests or charges extra if your commits mention "OpenClaw""]]></title><description><![CDATA[
<p>It can't be legal that they randomly charge extra usage with no user consent.</p>
]]></description><pubDate>Thu, 30 Apr 2026 19:52:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47967404</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=47967404</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47967404</guid></item><item><title><![CDATA[New comment by kevincox in "Warp is now open-source"]]></title><description><![CDATA[
<p>Yeah, it would have been a great job for an LLM. Although if you find something in the history you then need to make the annoying choice of history rewriting or just leaving it in.</p>
]]></description><pubDate>Tue, 28 Apr 2026 17:28:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47937630</link><dc:creator>kevincox</dc:creator><comments>https://news.ycombinator.com/item?id=47937630</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47937630</guid></item></channel></rss>