<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: nirvdrum</title><link>https://news.ycombinator.com/user?id=nirvdrum</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 16 May 2026 08:18:06 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=nirvdrum" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by nirvdrum in "'No way to prevent this,' says only package manager where this regularly happens"]]></title><description><![CDATA[
<p>Part of the point the article makes is that most other popular languages have a comprehensive standard library. JS has an astonishingly small on. Rather than have one vetted set of libraries that ship with the language, applications either need to roll it themselves or pull from a 3rd party package repository. We've drilled NIH into people, so they tend to reach for packages. That's not necessarily a bad thing, but it often means they're pulling in more code than they need. The JS ecosystem has also favored smaller modules, so you need many of them. And everyone builds on top of that, leading to massive growth in dependency graphs. It's a huge surface area for things to go wrong, intentionally or not.<p>With many other languages, you have a lot of functionality out of the box. Certainly, there have been bugs and security issues, but they're a drop in the bucket compared to what you see in the JS ecosystem. With other languages, you have a much smaller external dependency graph and the core functionality is coming from a trusted 3rd party.</p>
]]></description><pubDate>Sat, 16 May 2026 02:25:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48156244</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=48156244</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48156244</guid></item><item><title><![CDATA[New comment by nirvdrum in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"]]></title><description><![CDATA[
<p>The lack of a comprehensive standard library for JavaScript also results in projects pulling many more third party dependencies than you would with most other modern environments. It’s just a bigger attack surface. And if you can compromise a module used for basic functionality that you’d get out of the box elsewhere, the blast radius will be enormous.</p>
]]></description><pubDate>Thu, 23 Apr 2026 22:19:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47882906</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47882906</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47882906</guid></item><item><title><![CDATA[New comment by nirvdrum in "SpaceX says it has agreement to acquire Cursor for $60B"]]></title><description><![CDATA[
<p>They’re definitely playing catch up, but the IDE integration makes interactive development really nice. Claude is good for one-shotting things, but I find JetBrains AI integration really useful for working with large codebases where I may be unfamiliar with things.<p>I think they’ve been caught in a bad spot. They’re a profitable company, but nowhere on the scale of Microsoft. And they don’t have billions of VC to effectively price dump. Other tools that can focus on one thing and burn cash are advancing quickly and some of them don’t really need an IDE at all.<p>The semi-recent introduction of ACP integration in the JetBrains IDEs has been a nice bridge. But now it’s confusing how everything comes together. I really hope they can survive.</p>
]]></description><pubDate>Wed, 22 Apr 2026 03:57:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=47858793</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47858793</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47858793</guid></item><item><title><![CDATA[New comment by nirvdrum in "Want to Write a Compiler? Just Read These Two Papers (2008)"]]></title><description><![CDATA[
<p>Based on another reply I can’t tell if there’s a clever window-based pun that I’m missing. If not, I think you want “shudder” and not “shutter” here. I’m sorry if I just ruined the joke.</p>
]]></description><pubDate>Wed, 15 Apr 2026 10:19:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=47777030</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47777030</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47777030</guid></item><item><title><![CDATA[New comment by nirvdrum in "Americans still opt for print books over digital or audio versions"]]></title><description><![CDATA[
<p>CheapCharts is really nice. I find discovery in the Apple TV store pretty bad otherwise. They earn their affiliate revenue.<p>I do wish we had DRM-free purchases like we have with MP3s. But this is a big step up over streaming services. The Movies Anywhere integration is handy as well.</p>
]]></description><pubDate>Sun, 12 Apr 2026 04:31:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=47736175</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47736175</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47736175</guid></item><item><title><![CDATA[New comment by nirvdrum in "Ex-Meta worker investigated for downloading 30k private Facebook photos"]]></title><description><![CDATA[
<p>After getting scammed on Facebook Marketplace, I look at the profiles of sellers, particularly if they don’t have much in way of reviews. That seems more prudent than creepy to me. I’m not stalking anyone and I’m not looking to be their friend.<p>Is there a better way to do seller verification? It does seem like an information leak to me. Craigslist and eBay don’t share my identification as a potential buyer. I don’t love the marketplace being tied to a social network, but it’s what many people are using these days.</p>
]]></description><pubDate>Wed, 08 Apr 2026 03:51:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=47684951</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47684951</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47684951</guid></item><item><title><![CDATA[New comment by nirvdrum in "TruffleRuby"]]></title><description><![CDATA[
<p>In case anyone's wondering, the TruffleRuby project is still going strong. It undoubtedly would be going stronger were Chris still with us. But, some of us that worked with Chris in the early days of the project and others that joined later are still pushing the project forward.<p>If you're interested in the project, please give it a try. Or, if you just want to chat Ruby compilers, feel free to drop into one of our community channels (Slack or GitHub Discussions).<p><a href="https://github.com/truffleruby/truffleruby" rel="nofollow">https://github.com/truffleruby/truffleruby</a>.</p>
]]></description><pubDate>Wed, 01 Apr 2026 14:49:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47601718</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47601718</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47601718</guid></item><item><title><![CDATA[New comment by nirvdrum in "TruffleRuby"]]></title><description><![CDATA[
<p>I'd imagine you don't want to look like you're self-promoting, but I'd really love to read more about the JPEG project. I think it could be quite good for the community. As a whole, I believe Rubyists need to stop reaching for native extensions so quickly. Whether on YJIT, ZJIT, JRuby, or TruffleRuby, all of them will benefit from having more code in Ruby. Incidentally, Chris's final conference talk¹ made the case for moving to a Ruby-based implementation for the Ruby core library.<p>For those cases where you're writing a native extension to primary bridge over to a native library, you may find either FFI or Fiddle handle your use case quite well.<p>¹ -- <a href="https://youtu.be/-iVh_8_J-Uo?si=8uVFLiF3NtjWgfR1" rel="nofollow">https://youtu.be/-iVh_8_J-Uo?si=8uVFLiF3NtjWgfR1</a></p>
]]></description><pubDate>Wed, 01 Apr 2026 14:28:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47601424</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47601424</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47601424</guid></item><item><title><![CDATA[New comment by nirvdrum in "TruffleRuby"]]></title><description><![CDATA[
<p>Just in case you were unaware, there is and was a 100% open source variant of the GraalVM referred to as the "Community Edition (CE)"¹. RedHat built their own distribution based on that source tree called Mandrel². The closed source version is faster in many cases, but the CE release in very capable.<p>¹ -- <a href="https://github.com/graalvm/graalvm-ce-builds" rel="nofollow">https://github.com/graalvm/graalvm-ce-builds</a><p>² -- <a href="https://github.com/graalvm/mandrel" rel="nofollow">https://github.com/graalvm/mandrel</a></p>
]]></description><pubDate>Wed, 01 Apr 2026 14:20:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47601324</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47601324</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47601324</guid></item><item><title><![CDATA[New comment by nirvdrum in "AI overly affirms users asking for personal advice"]]></title><description><![CDATA[
<p>For anyone else unfamiliar with the term:<p>RLHF = Reinforcement Learning from Human Feedback<p><a href="https://en.wikipedia.org/wiki/Reinforcement_learning_from_human_feedback" rel="nofollow">https://en.wikipedia.org/wiki/Reinforcement_learning_from_hu...</a></p>
]]></description><pubDate>Sat, 28 Mar 2026 15:04:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=47555234</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47555234</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47555234</guid></item><item><title><![CDATA[New comment by nirvdrum in "Panasonic, the former plasma king, will no longer make its own TVs"]]></title><description><![CDATA[
<p>What makes plasma the obvious worse choice? I have a 50” plasma that still looks better than just about any non-OLED TV I’ve seen. I understand price was a concern, but OLED TVs sit in that price category now.<p>The only real downside with the TV is that uses more power than I’d like and, consequently, throws off more heat than I’d like. Otherwise, it’s been very reliable and looks fantastic. I’m curious what I’m missing.</p>
]]></description><pubDate>Tue, 24 Feb 2026 04:17:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=47132800</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=47132800</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47132800</guid></item><item><title><![CDATA[New comment by nirvdrum in "Apple introduces new AirTag with longer range and improved findability"]]></title><description><![CDATA[
<p>My experience with small police departments in the US is that they either don’t have the time or the inclination to deal with small property claims. If you’re a business they’ll be there in 10 minutes, but individuals aren’t afforded the same courtesy. Eventually, citizens realize it’s just not worth the cost or the hassle to report a crime unless it helps with an insurance claim.</p>
]]></description><pubDate>Tue, 27 Jan 2026 02:26:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=46774751</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46774751</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46774751</guid></item><item><title><![CDATA[TruffleRuby 33 Is Released]]></title><description><![CDATA[
<p>Article URL: <a href="https://truffleruby.dev/blog/truffleruby-33-is-released">https://truffleruby.dev/blog/truffleruby-33-is-released</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=46607891">https://news.ycombinator.com/item?id=46607891</a></p>
<p>Points: 6</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 13 Jan 2026 20:58:49 +0000</pubDate><link>https://truffleruby.dev/blog/truffleruby-33-is-released</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46607891</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46607891</guid></item><item><title><![CDATA[New comment by nirvdrum in "Can I start using Wayland in 2026?"]]></title><description><![CDATA[
<p>It doesn’t have to be like X11. Presumably, it’d be something you could disable if you’d like.<p>It’d be very handy if we had a performant remote desktop option for Linux. I could resume desktop sessions on my workstation from my laptop and I could pair program with remote colleagues more effectively.<p>In the past I’d boot into Windows and then boot my Linux system as a raw disk VM just so I could use Windows’s Remote Desktop. Combined with VMware Workstation’s support for multiple monitors, I had a surprisingly smooth remote session. But, it was a lot of ceremony.</p>
]]></description><pubDate>Sun, 04 Jan 2026 16:54:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=46489741</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46489741</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46489741</guid></item><item><title><![CDATA[New comment by nirvdrum in "Pre-commit hooks are broken"]]></title><description><![CDATA[
<p>I'd encourage you to read the HN guidelines, linked in the site footer:<p><a href="https://news.ycombinator.com/newsguidelines.html">https://news.ycombinator.com/newsguidelines.html</a><p>Repeatedly, you've been dismissive and insulting. It's not conducive to productive conversation. Your characterization of what I do or how I work is wrong. You latched on to some small part you thought would let you "win" and ran with it. If you actually care, I do a lot of open source work so you can find exactly how I work. Naturally, you can't see what I do in private, but I assure you it's not significantly different.<p>I aim to ship reasonably complete functionality. The "V" in "MVP" means it needs to be viable, not just minimal. Shipping some part that doesn't work standalone isn't useful to anyone. Yes, the PR is smaller, but now the context for that work is split over multiple PRs, which may not be reviewed by the same people. No one really has the full picture beyond me, which I guess is a good way to get my PRs rapidly approved, but a terrible way to get feedback on the overall design.<p>I don't work with you so I don't particularly care how you work. Again, I was offering up other solutions than running "git commit" every 15 minutes. If you want to manually simulate filesystem snapshots, that's your prerogative. But, you're incorrect that any model other than the one you employ is niche an not how software is written. Elsewhere you dismissed the examples of large, open source projects as being unique. But, you'll find substantially smaller ones also employ a model closer to what I've described.</p>
]]></description><pubDate>Fri, 02 Jan 2026 16:38:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=46466521</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46466521</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46466521</guid></item><item><title><![CDATA[New comment by nirvdrum in "Why I think Valve’s retiring the Steam Deck LCD"]]></title><description><![CDATA[
<p>When the news hit that the entry model was being retired I thought it might not be so bad because there’s probably a deluge of used models available, either because the owner doesn’t really use it or because they upgraded to the OLED. I was astounded by how many blatant scam postings there are on Facebook Marketplace. I can’t imagine that Meta can’t detect these since every post title ends in some random four character alphanumeric string. I’m concerned now that we’re going to see an uptick in people being scammed because they want a Steam Deck but can’t afford the OLED models.<p>I don’t have any data to support this, but I suspect a sizable segment of PC gamers aren’t going to view this as the impetus they needed to splurge on the OLED. I doubt very many of those people see this as a double-edged sword. It doesn’t particularly matter to them what Valve’s confidence in the product is if they can’t afford to buy one. While some may buy the step-up model, many won’t. Valve loses out on the sale of the hardware and on the sale of the software to run on it. And I’d be concerned that ceding the lower end of the market is going to poison the well like video game consoles in the early 80s.<p>With that said, Valve almost certainly has the data and would know better than me. It seems like a gamble to me. Maybe the post is correct and this is all about price anchoring for the new Steam Machine and Frame.</p>
]]></description><pubDate>Mon, 29 Dec 2025 08:39:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=46418649</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46418649</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46418649</guid></item><item><title><![CDATA[New comment by nirvdrum in "Pre-commit hooks are broken"]]></title><description><![CDATA[
<p>I clean up commits locally as well. But, I really only commit when I think I have something working and then collapse any lint or code formatting commits from there. Sometimes I need to check another branch and am too lazy to set up worktrees, so I may create a checkpoint commit and name it a way that reminds me to do a `git reset HEAD^` and resume working from there.<p>But, if you're really worried about losing 15 minutes of work, I think we have better tools at our disposal, including those that will clean up after themselves over time. Now that I've been using ZFS with automatic snapshots, I feel hamstrung working on any Linux system just using ext4 without LVM. I'm aware this isn't a common setup, but I wish it were. It's amazing how liberating it is to edit code, update a config file, install a new package, etc. are when you know you can roll back the entire system with one simple command (or, restore a single file if you need that granularity). And it works for files you haven't yet added to the git repo.<p>I guess my point is: I think we have better tools than git for automatic backups and I believe there's a lot of opportunity in developer tooling to help guard against common failure scenarios.</p>
]]></description><pubDate>Sun, 28 Dec 2025 03:28:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=46408112</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46408112</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46408112</guid></item><item><title><![CDATA[New comment by nirvdrum in "Pre-commit hooks are broken"]]></title><description><![CDATA[
<p>> But this would require hand curation? No development proceeds that way, or if it does then I would question whether the person is spending 80% of their day curating PRs unnecessarily.<p>It's not really hand curation if you're deliberate about it from the get-go. It's certainly not eating up 80% of anyone's time.<p>Structuring code and writing useful commits a skill to develop, just like writing meaningful tests. As a first step, use `git add -p` instead of `git add .` or `git commit -a`. As an analog, many junior devs will just test everything, even stuff that doesn't make a lot of sense, and then jumble them all together. It takes practice to learn how to better structure that stuff and it isn't done by writing a ton of tests and then curating them after the fact.<p>> I think you must be kind of senior and you can get away with just insisting that other people be less efficient and work in a weird way so you can feel more comfortable?<p>Your personal productivity should only be one consideration. The long-term health of the project (i.e., maintenance) and the impact on other people's efficiency also must be considered. And efficiency isn't limited to how quickly features ship. Someone who ships fast but makes it much harder to debug issues isn't a top performer. At least, in my experience. I'd imagine it's team, company, and segment-dependent. For OSS projects with many part-time contributors, that history becomes really important because you may not have the future ability to ask someone why they did something a particular way.</p>
]]></description><pubDate>Sat, 27 Dec 2025 22:20:00 +0000</pubDate><link>https://news.ycombinator.com/item?id=46405914</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46405914</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46405914</guid></item><item><title><![CDATA[New comment by nirvdrum in "Pre-commit hooks are broken"]]></title><description><![CDATA[
<p>> Why do you care about the history of a branch?<p>Presumably, a branch is a logical segment of work. Otherwise, just push directly master/trunk/HEAD. It's what people did for a long time with CVS and arguably worked to some extent. Using merge commits is pretty common and, as such, that branch will get merged into the trunk. Being able to understand that branch in isolation is something I've found helpful in understanding the software as a whole.<p>> Caring about the history of a branch is weird, I think your approach is just not compatible with how people work.<p>I get you disagree with me, but you could be less dismissive about it. Work however you want -- I'm certainly not stopping you. I just don't your productivity to come at the expense of mine. And, I offered up other potential (and IMHO, superior) solutions from both developer and system tools.<p>I suppose what type of project you're working on matters. The "treat git like a versioned zip file" using squashed merges works reasonably well for SaaS applications because you rarely need to roll anything back. However, I've found a logically structured history has been indispensable when working on long-lived projects, particularly in open source. It's how I'm able to dig into a 25 year old OSS tool and be reasonably productive with.<p>To the point I think you're making: sure, I care what changed, and I can do that with `diff`. But, more often if I'm looking at SCM history I'm trying to learn why a change was made. Some of that can be inferred by seeing what other changes were made at the same time. That context can be explicitly provided with commit messages that explain why a change was made.<p>Calling it incompatible with how people work is a pretty bold claim, given the practice of squash merging loads of mini commits is a pretty recent development. Maybe that's how your team works and if it works for you, great. But, having logically separate commits isn't some niche development practice. Optimizing for writes could be useful for a startup. A lot of real world software requires being easy to maintain and a good SCM history shines there.<p>All of that is rather orthogonal to the point I was trying to add to the discussion. We have better tools at our disposal than running `git commit` every 15 minutes.</p>
]]></description><pubDate>Sat, 27 Dec 2025 22:09:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=46405810</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46405810</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46405810</guid></item><item><title><![CDATA[New comment by nirvdrum in "Pre-commit hooks are broken"]]></title><description><![CDATA[
<p>If you’re just committing for your own sake, that workflow sounds productive. I’ve been asked to review PRs with 20+ commits with a “wip” or “.” commit message with the argument: “it’ll be squash merged, so who cares!”. I’m sure that works well for the author, but it’s not great for the reviewer. Breaking change sets up into smaller logical chunks really helps with comprehension. I’m not generally a fan of people being cavalier with my time so they can save their own.<p>For my part, I find the “local history” feature of the JetBrains IDEs gives me automatic checkpoints I can roll back to without needing to involve git. On my Linux machines I layer in ZFS snapshots (Time Machine probably works just as well for Macs). This gives me the confidence to work throughout the day without needing to compulsively commit. These have the added advantage of tracking files I haven’t yet added to the git repo.</p>
]]></description><pubDate>Sat, 27 Dec 2025 19:30:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=46404441</link><dc:creator>nirvdrum</dc:creator><comments>https://news.ycombinator.com/item?id=46404441</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46404441</guid></item></channel></rss>