<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: nevon</title><link>https://news.ycombinator.com/user?id=nevon</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 12 Sep 2026 08:30:47 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=nevon" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by nevon in "RTK reports token savings, but our cost benchmarks disagree"]]></title><description><![CDATA[
<p>I did the same with another project that does the same thing, called ck, and wasn't able to wring out any improved performance over just plain grep.</p>
]]></description><pubDate>Fri, 11 Sep 2026 14:09:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=49658720</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=49658720</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49658720</guid></item><item><title><![CDATA[New comment by nevon in "Please stop flooding our projects with AI slop to furnish your CV"]]></title><description><![CDATA[
<p>Having seen this happening in the past, pre-AI, the answer is usually that they don't. They just stay on that version forever. Or it's maintained until the original author moves on, after which it's someone else's problem to figure out how to move back to the upstream, which has now had years of changes.</p>
]]></description><pubDate>Fri, 28 Aug 2026 06:31:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=49475067</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=49475067</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49475067</guid></item><item><title><![CDATA[New comment by nevon in "New MCP Roadmap"]]></title><description><![CDATA[
<p>This is how I'm doing it as well, for an internal enterprise platform for agentic workflows. Let's me implement as fine-grained access rules as I want, and gives me somewhere that can hold credentials without exposing them to the agent.</p>
]]></description><pubDate>Sun, 23 Aug 2026 08:59:44 +0000</pubDate><link>https://news.ycombinator.com/item?id=49407190</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=49407190</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49407190</guid></item><item><title><![CDATA[New comment by nevon in "If coding has been solved, why does software keep getting worse?"]]></title><description><![CDATA[
<p>Yes! Few things piss me off more. It boggles the mind that this behavior is the norm, and it happens all the time! There are practically 0 situations in which I want something to automatically steal focus.</p>
]]></description><pubDate>Fri, 24 Jul 2026 21:42:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=49041961</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=49041961</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49041961</guid></item><item><title><![CDATA[New comment by nevon in "A Second-Grade Teacher Revived a Beloved Video Game"]]></title><description><![CDATA[
<p>That seems to be a new game. Backyard Baseball '97 is listed at around $10</p>
]]></description><pubDate>Sun, 19 Jul 2026 16:10:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48969363</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=48969363</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48969363</guid></item><item><title><![CDATA[New comment by nevon in "A brewing battle: More IT workers want unions. The industry doesn't"]]></title><description><![CDATA[
<p>To my knowledge, there isn't a single definition of a union. In America, it seems to mean something wildly different than what I'm used to in my part of Europe.<p>To me, it is simply an organization by workers to collectively bargain with capital (who have their own equivalent to unions). The unions also typically offer unemployment insurance as well as income replacement in case of strikes, which are a possible measure that can be organized by the unions to force capital to come to the negotiation table. An employer has no right to know if you're in a union or not, so it would be quite impractical to try to hire only non-union members, and most companies don't mind either way, because the collective bargain agreements go both ways and can make it simpler than negotiating individual agreements with each employee.<p>In the US, it seems like unions are what I would call a guild - very highly coupled to a particular profession. Where I'm from they typically accept anyone who works in a general sector (say medical, government, transportation, etc.), as typically most workers in the same sector would have similar challenges and goals.</p>
]]></description><pubDate>Wed, 08 Jul 2026 20:38:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=48837129</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=48837129</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48837129</guid></item><item><title><![CDATA[New comment by nevon in "The CEO of Mullvad is the main financer of the Swedish Örebro party"]]></title><description><![CDATA[
<p>I did the same, except I'm paying for Mullvad through the Tailscale partnership, so I reached out to them and expressed my desire for them to partner with other privacy focused VPN providers like Njalla, Airvpn and others. I don't feel great about my money funding ethno-fascists in my country.</p>
]]></description><pubDate>Mon, 29 Jun 2026 17:48:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48722545</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=48722545</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48722545</guid></item><item><title><![CDATA[New comment by nevon in "Show HN: Kyushu – A self-hostable WASM sandbox for JavaScript workers"]]></title><description><![CDATA[
<p>Firecracker launches small, but otherwise general purpose virtual machines. Containers, at least the standard implementations that most of us use, use kernel features like namespaces to isolate workloads, but still share a kernel so the sandboxing is not as strong.<p>Wasm is a virtual machine, just like for example the jvm is, that is designed around only allowing the executed program access to the host runtime via specific apis that are subject to security policies. It does not run arbitrary software, but rather only software built to target specifically wasm.<p>The software this post is about is just bundling a wasm runtime with other software for convenience.</p>
]]></description><pubDate>Tue, 09 Jun 2026 06:17:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=48457202</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=48457202</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48457202</guid></item><item><title><![CDATA[New comment by nevon in "Bun: cgroup-aware AvailableParallelism / HardwareConcurrency on Linux"]]></title><description><![CDATA[
<p>Anyone have ideas about what to do when using cgroup weights rather than max?<p>I'm currently in the process of removing cpu.max from our clusters, to allow applications to better utilize the available cpu time which currently is just being wasted. We will use cpu weights to make sure that cpu time is fairly allocated during contention, and to not oversubscribe the hosts, but I'm sure that among the thousands of applications that are running on those clusters today, many will be relying on cpu.max to size threadpools etc.<p>On the one hand, we do want applications to use the available cpu time, but at the same time they need to not kill themselves by running out of memory.</p>
]]></description><pubDate>Sun, 05 Apr 2026 07:51:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47647153</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=47647153</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47647153</guid></item><item><title><![CDATA[New comment by nevon in "Show HN: Optio – Orchestrate AI coding agents in K8s to go from ticket to PR"]]></title><description><![CDATA[
<p>Network policies controlling egress would be one thing. I haven't seen how you make secrets available to the agent, but I would imagine you would need to proxy calls through a mitm proxy to replace tokens with real secrets, or some other way to make sure the agent cannot access the secrets themselves. Specifically for an agent that works with code, I could imagine being able to run docker-in-docker will probably be requested at some point, which means you'll need gvisor or something.</p>
]]></description><pubDate>Thu, 26 Mar 2026 07:21:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47527552</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=47527552</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47527552</guid></item><item><title><![CDATA[New comment by nevon in "Ghostty – Terminal Emulator"]]></title><description><![CDATA[
<p>The next release includes a way to use a command palette to search for and jump between surfaces (windows, panes), which sounds like it partially addresses your third point. I had a small hand in it, by building the initial UI for the Linux version.</p>
]]></description><pubDate>Sun, 01 Mar 2026 16:47:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47208318</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=47208318</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47208318</guid></item><item><title><![CDATA[New comment by nevon in "Show HN: AgentReady – Drop-in proxy that cuts LLM token costs 40-60%"]]></title><description><![CDATA[
<p>There's zero percent chance that I would proxy all my LLM calls with my API key through some third party service. However, if it was self-hostable, so that I can ensure it is only able to reach the LLM providers, I could see deploying this behind an LLM provider router. If it actually achieves the kind of token use reduction that is advertised, that would be worth paying for - especially in the enterprise. I'm skeptical of using it for product integrations, where prompts are tuned for effectiveness and efficiency, but for ad-hoc usage it probably doesn't matter too much if the phrasing affects the results a bit.</p>
]]></description><pubDate>Mon, 23 Feb 2026 16:36:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47124674</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=47124674</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47124674</guid></item><item><title><![CDATA[New comment by nevon in "Show HN: I built a fuse box for microservices"]]></title><description><![CDATA[
<p>How does it deal with partial failures like the upstream being unreachable from one datacenter but not the other, or from one region but not another? Or when the upstream uses anycast or some other way to route to different origins depending on where the caller is?<p>Making your circuit breaker state global seems like it would just exacerbate the problem. Failures are often partial in the real world.</p>
]]></description><pubDate>Thu, 19 Feb 2026 09:52:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=47071998</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=47071998</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47071998</guid></item><item><title><![CDATA[New comment by nevon in "GitHub discusses giving maintainers control to disable PRs"]]></title><description><![CDATA[
<p>You can find the forks by looking in the "network" part of the UI.<p>I do agree that GitHub could do more to highlight forks and their relationship to one another. But I don't think the current way - having an open pull request - is the only way to do that.<p>As a former maintainer, I am very in favor of this move. After having spent 10 years or so being hounded with "Any update on this?" and "Can we get this merged?", I don't think I would ever do it again as long as there aren't controls in place to be able to set the expectation that the code is free to do with as you will, and please go ahead and fork if you want it to do something different.</p>
]]></description><pubDate>Tue, 03 Feb 2026 05:40:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=46866954</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46866954</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46866954</guid></item><item><title><![CDATA[New comment by nevon in "Show HN: Netfence – Like Envoy for eBPF Filters"]]></title><description><![CDATA[
<p>Cool! While in Kubernetes you have cilium that does basically the same thing, outside of Kubernetes I've been using explicit proxies to do this kind of thing, which requires applications to support http proxy. I could definitely see transitioning those workloads to using ebpf filters instead.<p>Any fundamental reason you can't allow/block individual ports, or just a design choice?</p>
]]></description><pubDate>Mon, 26 Jan 2026 07:33:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=46762837</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46762837</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46762837</guid></item><item><title><![CDATA[New comment by nevon in "EmuDevz: A game about developing emulators"]]></title><description><![CDATA[
<p>That is correct. The emulator is implemented in JavaScript using OOP, and the tests that the game runs to validate your progress has certain expectations on what you export and what methods are available.</p>
]]></description><pubDate>Wed, 21 Jan 2026 17:43:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=46708859</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46708859</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46708859</guid></item><item><title><![CDATA[New comment by nevon in "Kagi releases alpha version of Orion for Linux"]]></title><description><![CDATA[
<p>Been a Kagi subscriber for a while, and am supportive of a more diverse browser ecosystem. However, I won't be using this browser as long as it is closed source. Honestly, the arguments made by the founder (I believe he's the founder anyway. I may be wrong) in the related feedback thread kind of soured me a little bit on Kagi. The arguments were essentially:<p>1. It's a lot of work to maintain an open source project accepting community contributions. Absolutely true, but that's not what's being asked for. Providing a tarball under an open source license doesn't add any significant work.
2. No one has asked for the Kagi backends to be open sourced, so why is the browser different? Obviously because I run the browser on my machine. Your backend runs on your machine.
3. We need to protect our IP. Then release it under a copyleft license. Or if you absolutely must, release your proprietary bit under a non-open source license.
4. You don't need the source because we send 0 telemetry, which you can verify using a network proxy. That's hardly the only thing to be worried about with a binary blob. Even if you kept the code completely closed source, by just releasing a tarball with the source under a proprietary license, I can build my own binary from source and eliminate this threat.</p>
]]></description><pubDate>Fri, 09 Jan 2026 19:06:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=46557741</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46557741</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46557741</guid></item><item><title><![CDATA[New comment by nevon in "Stranger Things creator says turn off “garbage” settings"]]></title><description><![CDATA[
<p>I'm sure part of it is so that marketing can say that their TV has new putz-tech smooth vibes AI 2.0, but honestly I also see this same thing happen with products aimed at technical people who would benefit from actually knowing what a particular feature or setting really is. Even in my own work on tools aimed at developers, non-technical stakeholders push really hard to dumb down and hide what things really are, believing that makes the tools easier to use, when really it just makes it more confusing for the users.</p>
]]></description><pubDate>Tue, 30 Dec 2025 09:40:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=46431351</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46431351</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46431351</guid></item><item><title><![CDATA[New comment by nevon in "CloudFlare is ruining the internet (for me) (2016)"]]></title><description><![CDATA[
<p>I have almost the same experience. I'm not running my own ISP and I'm not in a country known for originating DDoS attacks (Sweden), yet just using Firefox on Linux seems to be enough to be forced to click on traffic lights many times an hour. If I'm using Mullvad VPN that accelerates to almost every minute. CloudFlare claims to support privacy pass, but their extension implementing it seems to do absolutely nothing.</p>
]]></description><pubDate>Sat, 27 Dec 2025 10:57:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=46400884</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46400884</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46400884</guid></item><item><title><![CDATA[New comment by nevon in "8M users' AI conversations sold for profit by "privacy" extensions"]]></title><description><![CDATA[
<p>That's great! They should put that on the website.</p>
]]></description><pubDate>Tue, 16 Dec 2025 11:27:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=46287308</link><dc:creator>nevon</dc:creator><comments>https://news.ycombinator.com/item?id=46287308</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46287308</guid></item></channel></rss>