Hacker News: manfre

New comment by manfre in "Anatomy of the .claude/ folder"

manfre — Sun, 29 Mar 2026 03:16:52 +0000

Create .claude/commands/ when you have well defined repeatable, multi-step actions you want to take. I have a command `/triage` where I provide it a bug report and it asks me questions to start scaffolding a work area, lookup related issues, create patches, etc.

Create .claude/agents/ when you have a narrow scoped thing that you want to happen, but not pollute the main context and have a well formed output. Also handy for reducing costs by using a different model for a class of actions you repeat often. For example, the "lookup related issues" from `/triage` is a Sonnet agent that finds Trac issues for a bug reports. Main context only needs the small list of matches and not the dozens of not relevant ones.

Create .claude/skills/ for job description like behaviors you want. For example, code reviewer or security researcher.

For any of these, install the `/plugin` skill-creator. Run `/init` if you don't have a claude.md and then ask the skill creator to help you improve the claude.md and create useful commands and skills.

New comment by manfre in "Give Django your time and money, not your tokens"

manfre — Tue, 17 Mar 2026 15:36:41 +0000

There is a clear correlation between the rise in LLM use and the volume of PRs and bug reports. Unfortunately, this has predominately increased the volume of submissions and not the overall quality. My view of the security issues reported, many are clearly LLM generated and at face value don't seem completely invalid, so they must be investigated. There was a recent Django blog post about this [1].

The fellows and other volunteers are spending a much greater amount of time handling the increased volume.

[1] https://www.djangoproject.com/weblog/2026/feb/04/recent-tren...

New comment by manfre in "I was interviewed by an AI bot for a job"

manfre — Thu, 12 Mar 2026 10:35:07 +0000

Any take home test trivial enough to complete in under 20 minutes could be completed by an AI. The only signal you get from a take home test is whether or not they can submit answers. It doesn't let you know if the candidate is capable of passing the test unassisted.

Take home tests were never a worthwhile signal. Pre-AI, people would search for solutions or have another person complete it.

New comment by manfre in "X offices raided in France as UK opens fresh investigation into Grok"

manfre — Wed, 04 Feb 2026 12:01:50 +0000

Creating, possessing, and distributing CSAM is illegal in the US and many other countries. Can you explain why you think it should be legal to create something that is illegal to possess or distribute?

New comment by manfre in "Instabridge has acquired Nova Launcher"

manfre — Tue, 20 Jan 2026 23:40:51 +0000

Why? To avoid using Google search. It's been an inferior search product for years. Last time I used the default launcher on a pixel, I couldn't change it to a better search product, so I changed launcher.

New comment by manfre in "Google Cloud Run cost me $4,676 in 6 weeks with zero traff"

manfre — Wed, 24 Dec 2025 21:14:10 +0000

Most hobby and small business sites can easily run on a $5-10/mo VPS. If you need a bit more, hetzner server auctions should suffice. It's always safer to use a fixed cost service, instead of the cloud hosts that don't let you set a hard quota on spend.

New comment by manfre in "Denial of service and source code exposure in React Server Components"

manfre — Fri, 12 Dec 2025 00:31:37 +0000

I've noticed a pattern in the security reports for a project I'm involved in. After a CVE is released, for the next month or so there will likely be additional reports targeting the same (or similar) areas of the framework. There is definitely a competitive spirit amongst security researchers as they try to get more CVEs credited to them (and potentially bounties).

New comment by manfre in "[dead]"

manfre — Mon, 21 Apr 2025 12:24:54 +0000

He's an addict. If he's not removed, this will keep happening.

New comment by manfre in "How much do you think it costs to make a pair of Nike shoes in Asia?"

manfre — Thu, 10 Apr 2025 00:29:41 +0000

Revoking visas and deporting University students and professors.

New comment by manfre in "Why I don't discuss politics with friends"

manfre — Thu, 03 Apr 2025 03:42:36 +0000

correct, their vote says "I'm okay with everything this candidate says they'll do."

You can't cherry pick policies from a candidate and pretend your vote is not culpable for all the harm it inflicts.

New comment by manfre in "How the American Medical Association Screws Doctors"

manfre — Thu, 27 Mar 2025 16:43:39 +0000

Thank you for sharing the perspective of some doctors. You'll likely get down votes because it comes across as condescending and elitist.

New comment by manfre in "Bye, Prime"

manfre — Fri, 07 Mar 2025 11:06:38 +0000

For most of the US, there are few or no stores within walking distance.

New comment by manfre in "Donald Trump Names XRP, Sol, ADA, BTC and ETH as Part of U.S. Crypto Reserve"

manfre — Sun, 02 Mar 2025 20:51:49 +0000

Playing cards and sneakers would be a more stable investment.

New comment by manfre in "Bird flu confirmed in rats for first time, USDA reports"

manfre — Sun, 23 Feb 2025 18:27:36 +0000

It only dies when we give up the fight.

New comment by manfre in "DOGE has 'god mode' access to government data"

manfre — Thu, 20 Feb 2025 19:21:20 +0000

I've had a company give me full admin access to their cloud account. Thankfully, I learned the lesson earlier in my career and immediately created myself of more mundane user. Break glass access is important, but definitely not as the usual level of access.

> I don't see why the DOGE team would need anything more than a read replica to query.

They shouldn't need more than limited read access. The fact that they have more access, very likely demanded and not accidentally given, is due to their intent to do more than simply query data.

New comment by manfre in "Doge-affiliated employee expected to seek access to IRS system"

manfre — Mon, 17 Feb 2025 15:13:21 +0000

When the group in power is following the laws and procedures, it is usually quite easy to obstruct. When the group in power is not following the laws and procedures, you have the current situation.

New comment by manfre in "Terraform Config Root Setups"

manfre — Sun, 16 Feb 2025 15:17:28 +0000

Instead of env conditionals, I strongly recommended feature/functionality conditionals or variables. E.g. var.create_s3 is better than var env == 'prod'

New comment by manfre in "ICE wants to know if you're posting negative things about it online"

manfre — Fri, 14 Feb 2025 15:41:08 +0000

Dismissed idea: acting in a way that wouldn't cast them in a negative light.

New comment by manfre in "Ask HN: How to handle pushback on a team switch?"

manfre — Fri, 07 Feb 2025 10:57:50 +0000

It's not the IC who needs to find their replacement for a team. That's the responsibility of a team lead or VP. In my experience, those who think it is the ICs responsibility, they lack proper boundaries and contribute to an unhealthy work environment.

New comment by manfre in "Eggs US – Price – Chart"

manfre — Wed, 05 Feb 2025 16:57:53 +0000

They're following the plan where if you don't track any data, there is no problem. The head in the sand strategy.