<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: mpeg</title><link>https://news.ycombinator.com/user?id=mpeg</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 20 May 2026 20:34:02 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=mpeg" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by mpeg in "Meta blocks human rights accounts from reaching audiences in Arabia and the UAE"]]></title><description><![CDATA[
<p>Or KSA</p>
]]></description><pubDate>Wed, 20 May 2026 14:18:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=48208262</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=48208262</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48208262</guid></item><item><title><![CDATA[New comment by mpeg in "Frontier AI has broken the open CTF format"]]></title><description><![CDATA[
<p>Yes but you can't compare some ollydbg script that would maybe be useful in a super specific challenge to LLMs which trivialise absolutely every challenge in a ctf and are de facto necessary to compete now</p>
]]></description><pubDate>Sat, 16 May 2026 17:48:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48162286</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=48162286</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48162286</guid></item><item><title><![CDATA[New comment by mpeg in "Agents can now create Cloudflare accounts, buy domains, and deploy"]]></title><description><![CDATA[
<p>On the tooling I've made? Feel free to ask here or via email, the Salesforce one was for a fairly large (50k+ employees) company that uses it very extensively but as it often happens they're stuck with a ton of legacy crap. They have some of the AI tooling from SFDC but barely use it (lack of training, or interest) so this solves their immediate problem.<p>I'm very keen to use their new dynamic workflows (cf's durable execution engine) which would let agents write workflow steps, that way my users can ask an agent to do stuff like "run this report daily and email it to me" and it can work with minimal setup (very basic example, but you get the idea)</p>
]]></description><pubDate>Thu, 07 May 2026 09:38:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=48047343</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=48047343</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48047343</guid></item><item><title><![CDATA[New comment by mpeg in "Agents can now create Cloudflare accounts, buy domains, and deploy"]]></title><description><![CDATA[
<p>Huh? Haha I swear I’m not a sockpuppet or getting paid by cloudflare (I wish!) I just like their products</p>
]]></description><pubDate>Wed, 06 May 2026 14:20:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48036611</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=48036611</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48036611</guid></item><item><title><![CDATA[New comment by mpeg in "Agents can now create Cloudflare accounts, buy domains, and deploy"]]></title><description><![CDATA[
<p>I think this post needs to be put in context, for months now Cloudflare has been releasing products that allow their whole platform to be usable by agents with the main objective of enabling their customers to dynamically write code using Cloudflare, this is just another step.<p>For example, you can now with Artifacts and Dynamic Workers make a lovable-style SaaS where your customers ask the AI agent to write software for them, the agent can run it in sandboxes with no build step, it can version it with a git-compatible API, and now you can even have it buy a domain for the end customer or set up their own cloudflare account when they want to move to production.<p>I personally have no use case for creating domains via agents, but some of the other features they're releasing around this area are extremely useful and I've started to ship internal tools for my clients where they are used, like giving them their own mini claude code that only does one thing – one I shipped last week was an agentic interface for Salesforce reports that understands their domain better (and all the undocumented tech debt) than the built-in Salesforce AI does and therefore manages the context better</p>
]]></description><pubDate>Wed, 06 May 2026 07:16:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48033259</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=48033259</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48033259</guid></item><item><title><![CDATA[New comment by mpeg in "Kimi K2.6 just beat Claude, GPT-5.5, and Gemini in a coding challenge"]]></title><description><![CDATA[
<p>If you look at the last 5 challenges (the ones Kimi was in) both Claude and Kimi have 1 DNF, chatgpt has 2<p>I'm not sure this is enough data to form an opinion, but going by what we have Kimi would be as reliable as Claude</p>
]]></description><pubDate>Sun, 03 May 2026 14:48:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47997464</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47997464</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47997464</guid></item><item><title><![CDATA[New comment by mpeg in "Kimi K2.6 just beat Claude, GPT-5.5, and Gemini in a coding challenge"]]></title><description><![CDATA[
<p>If you look at the ranking breakdown though, Kimi K2.6 has only participated in the last 5 challenges (claude dominated before then) and if you only count those it would be in first place</p>
]]></description><pubDate>Sun, 03 May 2026 07:06:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47994212</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47994212</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47994212</guid></item><item><title><![CDATA[New comment by mpeg in "GTFOBins"]]></title><description><![CDATA[
<p>You learn the most random ways to abuse program features, one I still remember because of how long it took to figure it out was an htb box that (after a long exploitation path) used NTFS ADS to hide the flag within the alternate stream in a decoy file; and of course the normal way to extract the stream was disabled so had to do some black magic with other binaries to get it</p>
]]></description><pubDate>Tue, 28 Apr 2026 07:54:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47931607</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47931607</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47931607</guid></item><item><title><![CDATA[New comment by mpeg in "GPT‑5.5 Bio Bug Bounty"]]></title><description><![CDATA[
<p>I was surprised at the low bounty too, considering the resources of openai<p>Last year I won a similar prompt injection challenge ran by a crypto startup against the latest claude and gpt (at the time) and it was considerably more money, from an org with maybe $5-10m in funding.<p>That and the restrictive NDA kinda tells me they're not looking for serious bounty hunters, who would either want a lot more money or, alternatively, to be able to publish their work; seems like a marketing stunt.</p>
]]></description><pubDate>Sat, 25 Apr 2026 18:29:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47903466</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47903466</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47903466</guid></item><item><title><![CDATA[New comment by mpeg in "XOR'ing a register with itself is the idiom for zeroing it out. Why not sub?"]]></title><description><![CDATA[
<p>This one would be a fun challenge in a ctf, or maybe more appropriate for a puzzle hunt – most people would look at the dissassembly and not at the actual bytes and completely miss the binary encoding</p>
]]></description><pubDate>Wed, 22 Apr 2026 15:36:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=47865120</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47865120</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47865120</guid></item><item><title><![CDATA[New comment by mpeg in "Claude Design"]]></title><description><![CDATA[
<p>Depends of what you prompt it... if you tell it to use react and shadcn, it will use that.</p>
]]></description><pubDate>Fri, 17 Apr 2026 16:34:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=47807759</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47807759</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47807759</guid></item><item><title><![CDATA[New comment by mpeg in "Claude Design"]]></title><description><![CDATA[
<p>It's generated, when you try it you can see this is mostly a harness around claude opus 4.7 that helps it create a good design plan, it also supports asking you questions as it goes along, letting you review and feedback on mockups, etc, but ultimately if you look at what it's generating as it does it – it's just code</p>
]]></description><pubDate>Fri, 17 Apr 2026 16:03:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47807404</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47807404</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47807404</guid></item><item><title><![CDATA[New comment by mpeg in "Claude Design"]]></title><description><![CDATA[
<p>It's rolling out progressively, it works for me – it actually seems very polished, the examples are really good; and it lets you create your design system from your codebase</p>
]]></description><pubDate>Fri, 17 Apr 2026 15:51:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47807258</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47807258</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47807258</guid></item><item><title><![CDATA[New comment by mpeg in "Forcing an inversion of control on the SaaS stack"]]></title><description><![CDATA[
<p>I don't have a horse in this race, but this seems the right way to me. As a developer, I do already inject custom scripts to provide extra functionality / automation on SaaS I use where APIs are not available or limited.<p>However, the thought of the non-technical users I work with doing that is scary, they have no idea if the code the LLM writes is correct, is it going to have a bug that causes a massive issue down the line?<p>I've seen fat finger errors cause financial loss, but at least in those cases the user always had a chance to realise their error and fix it, with something like this how would you even know?</p>
]]></description><pubDate>Wed, 15 Apr 2026 19:06:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47783709</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47783709</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47783709</guid></item><item><title><![CDATA[New comment by mpeg in "Tell HN: Fiverr left customer files public and searchable"]]></title><description><![CDATA[
<p>lots of admin credentials too, which have probably never been changed</p>
]]></description><pubDate>Tue, 14 Apr 2026 22:04:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47772082</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47772082</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47772082</guid></item><item><title><![CDATA[New comment by mpeg in "Show HN: CSS Studio. Design by hand, code by agent"]]></title><description><![CDATA[
<p>Sorry I'm blind! I completely missed the live demo. I think because it's on the top right corner I instinctively ignored it.<p>Maybe could have a "Try live" button that sort of nudges you to it (could open the sidebar with the page structure or something to make it obvious you're in "edit mode") if other people struggle to find it<p>Re. diff view, yes, I think it's the kind of thing that would give reassurance to users that they can play around with it without breaking anything, otherwise I feel I'd be a bit scared of accidentally touching something that shouldn't be changed (especially as you might experiment a bit before you land on the right style to change)</p>
]]></description><pubDate>Thu, 09 Apr 2026 12:56:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47703111</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47703111</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47703111</guid></item><item><title><![CDATA[New comment by mpeg in "Show HN: CSS Studio. Design by hand, code by agent"]]></title><description><![CDATA[
<p>Motion is an excellent library so I gave this a go on a prod site. Some feedback<p>- I LOVE the concept, no clunky SaaS, you add the package and start it on your dev server and it just works. It seamlessly did with my vite based build.<p>- Needs a diff view which tells me what the agent is going to change when I publish my changes, right now it's a bit scary to use without it (not sure if it does once you try to publish changes, I didn't get that far in the process)<p>- I don't see the point of the "draw" feature. Maybe it's because I envision this kind of tool being used so that non-technical members of the team can make small design changes without dev support, and not as a way to design from scratch, but maybe you have a use-case for it.<p>- Integration with tailwindcss would be a killer feature, this particular project uses tailwind so all the styles in the style view show as the default ones but of course they're being applied via classes. You could detect tailwind classes and either show them separately or resolve them and show what they do in the styles view, then on publish you'd tell the agent to edit using tailwind classes<p>I agree with what others have said, a video or even better a live demo would be great. A demo would be extra work but would be super cool, as a stopgap you could have a stackblitz demo maybe.<p>The client-side injected js -> mcp flow is brilliant though. I might have to steal that idea for some projects I'm working in, I can imagine a lot of scenarios where it would make a great interface</p>
]]></description><pubDate>Thu, 09 Apr 2026 12:50:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47703052</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47703052</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47703052</guid></item><item><title><![CDATA[New comment by mpeg in "EmDash – A spiritual successor to WordPress that solves plugin security"]]></title><description><![CDATA[
<p>Most of the time: no<p>But sometimes you do have clients in both sides of the atlantic and it's nice being able to cut their request times by a few hundred ms "for free". Personally, that's not the main reason I use cloudflare, but it can be handy!</p>
]]></description><pubDate>Thu, 02 Apr 2026 10:50:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=47612611</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47612611</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47612611</guid></item><item><title><![CDATA[New comment by mpeg in "EmDash – A spiritual successor to WordPress that solves plugin security"]]></title><description><![CDATA[
<p>Yes perhaps I should have specified you can't get much cheaper for serverless platforms.<p>You can certainly run a VPS like that for cheaper, you could probably even beat the raw request numbers from those 1€ a month vps from ovh or similar. The key difference is with cloudflare your site is globally distributed by default, and you get to buy into the whole ecosystem, if you want.</p>
]]></description><pubDate>Thu, 02 Apr 2026 10:16:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47612361</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47612361</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47612361</guid></item><item><title><![CDATA[New comment by mpeg in "EmDash – A spiritual successor to WordPress that solves plugin security"]]></title><description><![CDATA[
<p>Honestly, you'll struggle to find a cloud platform cheaper than cloudflare.<p>The $5/mo gets you 10 million dynamic requests (static assets are not included in this limit, so often a single pageview will be 1 dynamic request) and that would be across the whole workers product for your account, no extra pricing for extra websites, domains, or anything else like you'd see in most "wordpress hosting"<p>I run all my personal sites and client sites (one of them for a fortune 500 company) in the $5/mo plan, and the only time I went over that was when a client got hammered with malicious requests (and it was like $100)<p>Disclaimer: I have no relationship to cloudflare, I'm just a happy customer</p>
]]></description><pubDate>Thu, 02 Apr 2026 08:05:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47611382</link><dc:creator>mpeg</dc:creator><comments>https://news.ycombinator.com/item?id=47611382</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47611382</guid></item></channel></rss>