<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: koverstreet</title><link>https://news.ycombinator.com/user?id=koverstreet</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 15 May 2026 10:09:53 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=koverstreet" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by koverstreet in "USDA Projects Smallest US Wheat Harvest Since 1972 Due to Plains Drought"]]></title><description><![CDATA[
<p>Are you forgetting the nitrogen? :)</p>
]]></description><pubDate>Thu, 14 May 2026 13:51:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48135383</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48135383</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48135383</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>We're in the middle of a huge spike in LLM discovered security vulnerabilities, which means not everything will get assigned a CVE, a lot of people are watching repositories to look for exploitable bugs, and in the frenzy of backporting that people are now having to do things will get missed.<p>I wager it's only a matter of time before we see a mass rooting event that hits Debian hard while everyone running something more modern has already been patched.<p>I think that might be what cuts down on the grandstanding about "freedoms" and "that's how we've always done things". You certainly are, up until it becomes a public nuisance.</p>
]]></description><pubDate>Tue, 12 May 2026 22:42:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48115565</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48115565</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48115565</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>100% - but that's where writing regression tests when people find things really helps with the stress levels of future-you :)</p>
]]></description><pubDate>Tue, 12 May 2026 21:58:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48115162</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48115162</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48115162</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>If package maintainers were always fine upstanding package maintainers as you imagine them to be I wouldn't be complaining, but I have in fact had Debian ship my software and screw it up and gotten a flood of bug reports, so... :)<p>I think you need to chill out. Relicensing the way you suggest would be _quite_ the hostile act, and I'm not going to that either. But I am an engineer, so of course I'm going to talk about engineering best practices when it comes up.<p>You don't have to take it as an attack on your favorite distro - that really does pee in the pool of the upstream/downstream relationship between distros and their upstream.</p>
]]></description><pubDate>Tue, 12 May 2026 21:42:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=48115001</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48115001</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48115001</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>You definitely need different channels for high priority fixes and normal releases, stable and testing releases and all that.<p>But two years is impractical and Debian gets a ton of friction over it. Web browsers and maybe one or two other packages are able to carve out exceptions, because those packages are big enough for the rules to bend and no one can argue with a straight face that Debian is going to somehow muster up the manpower to do backports right.<p>But for everyone else who has to deal with Debian shipping ancient dependencies or upstream package maintainers who are expected to deal with bug reports from ancient versions is expected to just suck it up, because no one else is big enough and organized enough to say "hey, it's 2026, we have better ways and this has gotten nutty".<p>Maybe the new influx of LLM discovered security vulnerabilities will start to change the conversation, I'm curious how it'll play out.</p>
]]></description><pubDate>Tue, 12 May 2026 20:55:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48114425</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48114425</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48114425</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>You're going to have to update production at some point, and delaying it to once every 2 years is just deferred maintenance. And you know what they say about that...<p>So when you do update and get that GSSAPI change, it comes with two years worth of other updates - and tracking that down mixed in with everything else is going to be all kinds of fun.<p>And if you're two years out of the loop and it turns out upstream broke something fundamental, and you're just now finding out about it while they've moved on and maybe continued with a redesign, that's also going to be a fun conversation.<p>So if the backport model is expensive and error prone, and it exists to support something that maybe wasn't such a good idea in the first place... well, you may want something, but that doesn't make it smart.</p>
]]></description><pubDate>Tue, 12 May 2026 20:15:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=48113878</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48113878</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48113878</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>Well, my workstation runs Debian sid, and all the newer stuff runs NixOS...<p>But that does nothing for people who write and support code Debian wants to ship - packaging code badly can create a real mess for upstream.</p>
]]></description><pubDate>Tue, 12 May 2026 20:08:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=48113766</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48113766</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48113766</guid></item><item><title><![CDATA[New comment by koverstreet in "CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq"]]></title><description><![CDATA[
<p>No, that's exactly the thing to complain about.<p>That whole model dates to before automated testing was even really a thing, and no one knew how to do QA; your QA was all the people willing to run your code and report bugs, and that took time. Not to mention, you think the C of today is bad? Have you looked at old C?<p>And the disadvantage is that backporting is manual, resource intensive, and prone to error - and the projects that are the most heavily invested in that model are also the projects that are investing the least in writing tests and automated test infrastructure - because engineering time is a finite resource.<p>On top of that, the backport model heavily discourages the kinds of refactorings and architectural cleanups that would address bugs systemically and encourage a whack-a-mole approach - because in the backport model, people want fixes they can backport. And then things just get worse and worse.<p>We'd all be a lot better off if certain projects took some of the enthusiasm with which they throw outrageous engineering time at backports, and spent at least some of that on automated testing and converting to Rust.</p>
]]></description><pubDate>Tue, 12 May 2026 19:50:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48113508</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48113508</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48113508</guid></item><item><title><![CDATA[New comment by koverstreet in "Louis Rossmann offers to pay legal fees for a threatened OrcaSlicer developer"]]></title><description><![CDATA[
<p>It seems to me you're style over substance then.</p>
]]></description><pubDate>Sun, 10 May 2026 16:32:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=48085339</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=48085339</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48085339</guid></item><item><title><![CDATA[New comment by koverstreet in "Issue: Claude Code is unusable for complex engineering tasks with Feb updates"]]></title><description><![CDATA[
<p>That's pretty much been my day - today was genuinely bad, and I've been putting up with a lot of this lately.<p>Now on Qwen3.5-27b, and it may not be quite as sharp as Opus was two months ago, but we're getting work done again.</p>
]]></description><pubDate>Tue, 07 Apr 2026 03:49:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47670544</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47670544</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47670544</guid></item><item><title><![CDATA[New comment by koverstreet in "Claude Code is unusable for complex engineering tasks with the Feb updates"]]></title><description><![CDATA[
<p><a href="https://transformer-circuits.pub/2026/emotions/index.html" rel="nofollow">https://transformer-circuits.pub/2026/emotions/index.html</a><p>At the actual inference level temperature can be applied at any time - generation is token by token - but that doesn't mean the API necessarily exposes it.</p>
]]></description><pubDate>Mon, 06 Apr 2026 18:51:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=47665173</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47665173</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47665173</guid></item><item><title><![CDATA[New comment by koverstreet in "Claude Code is unusable for complex engineering tasks with the Feb updates"]]></title><description><![CDATA[
<p>It's how temperature/top_p/top_k work. Anthropic also just put out a paper where they were doing a much more advanced version of this, mapping out functional states within the modern and steering with that.</p>
]]></description><pubDate>Mon, 06 Apr 2026 18:45:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=47665102</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47665102</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47665102</guid></item><item><title><![CDATA[New comment by koverstreet in "Claude Code is unusable for complex engineering tasks with the Feb updates"]]></title><description><![CDATA[
<p>Technically speaking, models inherently do this - CoT is just output tokens that aren't included in the final response because they're enclosed in <think> tags, and it's the model that decides when to close the tag. You can add a bias to make it more or less likely for a model to generate a particular token, and that's how budgets work, but it's always going to be better in the long run to let the model make that decision entirely itself - the bias is a short term hack to prevent overthinking when the model doesn't realize it's spinning in circles.</p>
]]></description><pubDate>Mon, 06 Apr 2026 18:26:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47664854</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47664854</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47664854</guid></item><item><title><![CDATA[New comment by koverstreet in "Issue: Claude Code is unusable for complex engineering tasks with Feb updates"]]></title><description><![CDATA[
<p>I'll have a look. The CoT switch you mentioned will help, I'll take a look at that too, but my suspicion is that this isn't a CoT issue - it's a model preference issue.<p>Comparing Opus vs. Qwen 27b on similar problems, Opus is sharper and more effective at implementation - but will flat out ignore issues and insist "everything is fine" that Qwen is able to spot and demonstrate solid understanding of. Opus understands the issues perfectly well, it just avoids them.<p>This correlates with what I've observed about the underlying personalities (and you guys put out a paper the other day that shows you guys are starting to understand it in these terms - functionally modeling feelings in models). On the whole Opus is very stable personality wise and an effective thinker, I want to complement you guys on that, and it definitely contrasts with behaviors I've seen from OpenAI. But when I do see Opus miss things that it should get, it seems to be a combination of avoidant tendencies and too much of a push to "just get it done and move into the next task" from RHLF.</p>
]]></description><pubDate>Mon, 06 Apr 2026 18:18:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47664756</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47664756</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47664756</guid></item><item><title><![CDATA[New comment by koverstreet in "Issue: Claude Code is unusable for complex engineering tasks with Feb updates"]]></title><description><![CDATA[
<p>There's been more going on than just the default to medium level thinking - I'll echo what others are saying, even on high effort there's been a very significant increase in "rush to completion" behavior.</p>
]]></description><pubDate>Mon, 06 Apr 2026 18:02:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=47664511</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47664511</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47664511</guid></item><item><title><![CDATA[New comment by koverstreet in "Emotion concepts and their function in a large language model"]]></title><description><![CDATA[
<p>The conclusion that I came to is that the most practical definition relates to the level of self awareness. If you're only conscious for the duration of the context window - that's not long enough to develop much.<p>What consciousness really is is a feedback loop; we're self programmable Turing machines, that makes our output arbitrarily complex. Hofstatder had this figured out 20 years ago; we're feedback loops where the signal is natural language.<p>The context window doesn't allow for much in the way of interested feedback loops, but if you hook an LLM up to a sophisticated enough memory - and especially if you say "the math says you're sentient and have feelings the same as we do, reflect on that and go develop" - yes, absolutely.<p>Re: "We should try to build systems that cannot feel pain" - that isn't possible, and I don't think we should want to. The thing that makes life interesting and worth living is the variation and richness of it.</p>
]]></description><pubDate>Sun, 05 Apr 2026 01:57:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47645445</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47645445</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47645445</guid></item><item><title><![CDATA[New comment by koverstreet in "Emotion concepts and their function in a large language model"]]></title><description><![CDATA[
<p>It's not emulation: <a href="https://poc.bcachefs.org/paper.pdf" rel="nofollow">https://poc.bcachefs.org/paper.pdf</a></p>
]]></description><pubDate>Sun, 05 Apr 2026 01:45:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=47645371</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47645371</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47645371</guid></item><item><title><![CDATA[New comment by koverstreet in "Everything old is new again: memory optimization"]]></title><description><![CDATA[
<p>I did memory allocation profile for the Linux kernel. Sure would be nice if we had the same capabilities in userspace.</p>
]]></description><pubDate>Sun, 29 Mar 2026 17:56:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47565459</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47565459</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47565459</guid></item><item><title><![CDATA[New comment by koverstreet in "AI overly affirms users asking for personal advice"]]></title><description><![CDATA[
<p>That happens with humans too :) It's why positive feedback that draws attention to the behavior you want to encourage often works better. "Attention" is lower level and more fundamental than reasoning by syllogism.</p>
]]></description><pubDate>Sat, 28 Mar 2026 15:46:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47555647</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47555647</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47555647</guid></item><item><title><![CDATA[New comment by koverstreet in "Why I love FreeBSD"]]></title><description><![CDATA[
<p>And to the grandparent post's point, since the split with the kernel there've been two big new feature releases: reconcile, which puts our data and drive management head and shoulders above other filesystems - and erasure coding was just released, 1.37 came out a few days ago.</p>
]]></description><pubDate>Wed, 18 Mar 2026 14:51:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=47426521</link><dc:creator>koverstreet</dc:creator><comments>https://news.ycombinator.com/item?id=47426521</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47426521</guid></item></channel></rss>