Hacker News: nazcan

New comment by nazcan in "I believe there are entire companies right now under AI psychosis"

nazcan — Sun, 17 May 2026 01:44:38 +0000

Totally agree with one shotting GUI tools. I especially have liked it to create a single-file web app, and then open it with Chromium locally (no web server needed).

In my case, it built a tool for splitting sounds and a tool for defining hitboxes for a game. Tools made exactly for more workflow. Wild times.

New comment by nazcan in "Postmortem: TanStack NPM supply-chain compromise"

nazcan — Tue, 12 May 2026 01:32:23 +0000

To clarify, when does this run? Like you download malware A, run malware A and this function definition changes sudo for it, or sudo for other cases?

New comment by nazcan in "France moves to break encrypted messaging"

nazcan — Sun, 10 May 2026 13:33:42 +0000

Yeah, makes sense.

I wonder if for closed-source apps if governments can not just force the key collection the same way they would force decryption with centralized keys.

New comment by nazcan in "France moves to break encrypted messaging"

nazcan — Sun, 10 May 2026 01:59:26 +0000

I still don't understand the note that the companies can't decrypt the messages with e2e encryption. Isn't it as simple as a software update that says:

"If user = foo, then send the on device keys elsewhere"?

Or if those keys are part of a TPM, then a software update that just asks it to send in the decrypted messages?

Can judges not order this now, but can order decryption if the keys are stored centrally?

New comment by nazcan in "When everyone has AI and the company still learns nothing"

nazcan — Tue, 05 May 2026 18:04:07 +0000

The debugging improvements have been huge for me too. I was debugging some financial software, and while it took a few shots, just with access to my code and not to the database that showed the issue, it found a fairly complex problem.

New comment by nazcan in "When everyone has AI and the company still learns nothing"

nazcan — Tue, 05 May 2026 16:49:47 +0000

It may not be the biggest bottleneck, but if you can have a similar amount of time, but reduce the number of engineers by 30%, that's a huge win.

And having less people involved means there is much less communication and alignment.

Not to say it's a panacea.

New comment by nazcan in "Safari 26.4 Supports WebTransport"

nazcan — Tue, 05 May 2026 03:29:54 +0000

The recent is very recent, so not much uptake yet (https://caniuse.com/webtransport) - but hopefully can be used without fallback to WebSockets in a couple years.

Safari 26.4 Supports WebTransport

nazcan — Tue, 05 May 2026 03:29:54 +0000

Article URL: https://webkit.org/blog/17862/webkit-features-for-safari-26-4/

Comments URL: https://news.ycombinator.com/item?id=48017751

Points: 5

# Comments: 1

New comment by nazcan in "How ChatGPT serves ads"

nazcan — Wed, 29 Apr 2026 03:21:31 +0000

And that's why you gotta just use one domain. Or mix ads and important content on one domain.

New comment by nazcan in "Dear friend, you have built a Kubernetes (2024)"

nazcan — Tue, 28 Apr 2026 21:59:04 +0000

Agreed. Upgrading just one piece, and ensuring every committed write survives is critical in most commercial applications.

New comment by nazcan in "Localsend: An open-source cross-platform alternative to AirDrop"

nazcan — Tue, 28 Apr 2026 21:57:15 +0000

How does this work to discover things on the LAN from a browser?

New comment by nazcan in "Pgbackrest is no longer being maintained"

nazcan — Tue, 28 Apr 2026 00:52:51 +0000

The favourite model I've seen is the main branch is free, licensed MIT or whatever, but if you want release artifacts that are tested - then you pay for it. You can always compile your own.

New comment by nazcan in "Dear friend, you have built a Kubernetes (2024)"

nazcan — Sun, 26 Apr 2026 18:19:39 +0000

But if you want some redundancy, k8s let's you just say run 4 of this, 6 of this on these 3 machines. At least I find it quite straight forward.

The database is more complex since there is storage affinity (I use cockroachDB with local persistent volumes for it) - but stateful is always complicated.

New comment by nazcan in "You don't want long-lived keys"

nazcan — Sat, 25 Apr 2026 06:02:50 +0000

I find it interesting how this all comes down to what do you trust. Like.. why not <1 minute keys? Or 1-request?

New comment by nazcan in "My audio interface has SSH enabled by default"

nazcan — Sat, 25 Apr 2026 02:42:57 +0000

So both mics will pick up both people (at least somewhat, in the same room) - but because there is no, I assume 20-100ms latency going through the system, to discord, and back - it avoids a slight difference in timing of the two mics picking up the same sound slightly differently. Is that right?

Very cool!

New comment by nazcan in "Spanner Omni, a downloadable version of Google Spanner"

nazcan — Fri, 24 Apr 2026 22:54:23 +0000

I have not seen anything about pricing (when running on your hardware). Anyone else found anything?

New comment by nazcan in "Meta tells staff it will cut 10% of jobs"

nazcan — Fri, 24 Apr 2026 16:20:07 +0000

Positive EV for the employees vs. another company that pay less and has less lay-offs (assuming random)? I guess it depends on how much less pay the other company is...

New comment by nazcan in "Dropping Cloudflare for Bunny.net"

nazcan — Tue, 07 Apr 2026 19:05:57 +0000

It seems like having a feedback loop to the DDOS protector could help a lot - i.e. saying how busy you are.

At some level, it's like they become your edge router.

New comment by nazcan in "Axios compromised on NPM – Malicious versions drop remote access trojan"

nazcan — Wed, 01 Apr 2026 15:17:30 +0000

100% to libraries having permissions. If I'm using some code to say compute a hash of a byte array, it should not have access to say the filesystem nor network.

New comment by nazcan in "Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised"

nazcan — Tue, 24 Mar 2026 14:59:44 +0000

I'm supportive of going further - like restricting what a library is able to do. e.g. if you are using some library to compute a hash, it should not make network calls. Without sub-processes, it would require OS support.