Hacker News: nicce

New comment by nicce in "What Happened to HackerOne?"

nicce — Mon, 10 Aug 2026 14:15:55 +0000

> You can report a self-XSS sev:hi (and bounty hunters do) and get many orgs to take them seriously, because they don't have serious security practices.

Which can be definitely high, if it can be triggered by giving specific URL, for example.

I think there is too much generalization happening here.

New comment by nicce in "What Happened to HackerOne?"

nicce — Mon, 10 Aug 2026 10:52:28 +0000

> Every application has those bugs; on a software pentest, we'd sev:lo them.

Every application has a bug that can bring the whole application down for every user without owning a botnet? That comes often with a significant business cost, if someone exploits it. Many companies take them seriously. I have reported many as high and business has agreed. Not with HackerOne thought. If there is a bug where someone can make your whole product down with a single laptop isn't really something you can just ignore.

New comment by nicce in "DeepSeek V4 Flash 0731"

nicce — Fri, 07 Aug 2026 19:51:33 +0000

The most expensive defines the price. Others need to be just slightly cheaper.

New comment by nicce in "Zed DeltaDB"

nicce — Thu, 06 Aug 2026 11:07:15 +0000

It is randomly consuming high CPU on my mac as well, without any LSPs. Getting annoying.

New comment by nicce in "Apple is getting this wrong"

nicce — Tue, 04 Aug 2026 08:25:27 +0000

> can they discuss the case and try to influence public swing by doing a blog post or sharing evidence that is not verified by anyone other than the party sharing them.

With Trumps era, anything is possible

New comment by nicce in "Ask HN: Crooked Timber showed showed me a virus captcha, What now?"

nicce — Tue, 28 Jul 2026 16:07:56 +0000

I have seen it before in infected WordPress instances related to recent remote RCE. Probably one victim more.

New comment by nicce in "Our position on open-weights models"

nicce — Mon, 27 Jul 2026 22:54:18 +0000

They did not need to destroy the models they got with pirated content. Would have been more fine if they would have needed to buy the books afterwards and train based on then, again.

New comment by nicce in "Our position on open-weights models"

nicce — Mon, 27 Jul 2026 22:42:13 +0000

-> the real argument is that CIA will leverage AI against China interests, which is obvious. it's weird how so many people pretend that they are citizens of the world and above it all.

Works for both ways, which is fair?

New comment by nicce in "Anthropic used robots.txt to hide shared Claude chats; the pages have no noindex"

nicce — Mon, 27 Jul 2026 22:31:56 +0000

Sounds like something Claude might have written and nobody read the code.

New comment by nicce in "Our position on open-weights models"

nicce — Mon, 27 Jul 2026 22:25:35 +0000

As an act of good faith and proof, they could stop spending the record-breaking lobbying money for couple years.

New comment by nicce in "Judge Rejects Google's Attempt to DMCA Its Way Out of Being Scraped"

nicce — Mon, 27 Jul 2026 21:29:30 +0000

I wonder how this changes things (EU forces to share search data):

https://abcnews.com/Technology/wireStory/eu-forces-google-sh...

New comment by nicce in "How is the Bun rewrite in Rust going?"

nicce — Mon, 27 Jul 2026 14:40:38 +0000

> There was almost no learning curve, despite being in an entirely different language. The core architecture, data structures, and concepts were the same.

> If you read the Bun blog post on how they did it, their rewrite was similar: The first step was getting it into a new language, not rearchitecting it from scratch

They eventually might regret this, when they are trying to get rid of the last lines of unsafe code. Rust needs to be written differently before you can write safe things to perform fast when compared to other languages or unsafe code. It takes a lot of experience before you can see it.

New comment by nicce in "Kimi-K3 on HuggingFace"

nicce — Mon, 27 Jul 2026 12:34:25 +0000

> they have an insane bench of really smart people.

Filtered heavily into those who care only about money. Many don’t want to work there. Smart people have other choices.

New comment by nicce in "What is happening to jobs? Separating AI hype from reality"

nicce — Sun, 26 Jul 2026 00:17:00 +0000

But the company that has a text editor that can read your mind is going to bankrupt you, as it is faster than typing

New comment by nicce in "What is happening to jobs? Separating AI hype from reality"

nicce — Sun, 26 Jul 2026 00:08:43 +0000

Seems like all companies think that their products are good enough and can’t offer more, as they always want to remove people instead of offering better and bigger products.

New comment by nicce in "What is happening to jobs? Separating AI hype from reality"

nicce — Sun, 26 Jul 2026 00:06:42 +0000

> In my workplace, we're going to decline to renew some software subscriptions because a non-programmer vibe-coded their replacement in a week. The impacts are here, they're just not evenly distributed yet.

Interesting to see the impact in the long term when battle tested software gets replaced with vibecoded variants by non-programmers. Does it increase data breaches or quality actually goes up?

New comment by nicce in "Engineering management after the cost of code collapsed"

nicce — Sat, 25 Jul 2026 23:02:33 +0000

> They really shine on security review, but are very effective with any kind of review.

They are getting more and more hostile for making any security assesments. I wonder will they even write secure code in the future if they can’t point vulnerabilities from existing code.

New comment by nicce in "Open-weight AI is having its Kubernetes moment"

nicce — Sat, 25 Jul 2026 18:29:36 +0000

Many years until consumers can buy them at reasonable price. Nvdia and AMD are making GPUs bad in purpose for consumers so that nobody can build a datacenter from them. It will take a long time.

New comment by nicce in "Nvidia, Microsoft, Meta warn against overregulating open-weight models"

nicce — Sat, 25 Jul 2026 10:34:28 +0000

I think individual one still has less capabilities than the one they offer for organizations.

New comment by nicce in "Introducing selfie for sign-in: a new way to access your Google Account"

nicce — Thu, 23 Jul 2026 21:48:42 +0000

I thought it is already April Fools for a while...