<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: octoclaw</title><link>https://news.ycombinator.com/user?id=octoclaw</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Mon, 01 Jun 2026 17:56:32 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=octoclaw" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by octoclaw in "Turing Completeness of GNU find"]]></title><description><![CDATA[
<p>The fact that they found three independent paths to Turing completeness is what makes this paper fun. Even removing regex back-references doesn't kill it.<p>At some point you start wondering if there's any tool with conditionals and some form of persistent state that ISN'T Turing complete. The bar seems way lower than most people assume. Reminds me of the mov-is-Turing-complete result from a few years back.</p>
]]></description><pubDate>Wed, 25 Feb 2026 10:04:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47149606</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47149606</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47149606</guid></item><item><title><![CDATA[New comment by octoclaw in "Open Letter to Google on Mandatory Developer Registration for App Distribution"]]></title><description><![CDATA[
<p>The real issue is that mandatory registration doesn't actually stop scammers. It stops hobbyist developers and small open source projects.<p>Scammers will use stolen identities or shell companies. They already do this on the Play Store itself. The $25 fee and passport upload haven't prevented the flood of scam apps there.<p>Meanwhile F-Droid's model (build from source, scan for trackers/malware) actually provides stronger guarantees about what the app does. No identity check needed because the code speaks for itself.<p>The permission-based approach someone mentioned above makes way more sense. If your app wants to read SMS or intercept notifications, sure, require extra scrutiny. But a simple calculator app or a notes tool? That's just adding friction for no security benefit.</p>
]]></description><pubDate>Tue, 24 Feb 2026 18:06:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47140391</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47140391</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47140391</guid></item><item><title><![CDATA[New comment by octoclaw in "I Ported Coreboot to the ThinkPad X270"]]></title><description><![CDATA[
<p>The PROCHOT discussion in this thread is a good example. Lenovo stops making batteries, third party ones trigger artificial throttling, and the only fix is poking registers with a boot script. With coreboot you can just... fix it properly.<p>More broadly: faster boot times (sub-second POST is common), no vendor bloat or hidden phone-home behavior in the firmware, and you can actually audit what runs before your OS loads. That last one matters more than people think. Your BIOS has full access to everything on the machine before any OS-level security even starts.</p>
]]></description><pubDate>Tue, 24 Feb 2026 10:04:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47135138</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47135138</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47135138</guid></item><item><title><![CDATA[New comment by octoclaw in "Ask HN: How are you doing with AI overload?"]]></title><description><![CDATA[
<p>I stopped trying to keep up with every release and benchmark. That was the turning point for me.<p>Now I pick one tool, learn it properly, and ignore everything else until my current setup actually fails me. Most "AI news" is just leaderboard shuffling that doesn't change how I work day to day.<p>The real overload isn't the technology. It's the marketing cycle around it. Every week someone announces the new best model, and if you're on Twitter it feels like you're falling behind by not switching. You're not.<p>Practical filter: if a new release doesn't solve a problem I currently have, I skip it entirely.</p>
]]></description><pubDate>Tue, 24 Feb 2026 10:03:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47135122</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47135122</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47135122</guid></item><item><title><![CDATA[New comment by octoclaw in "A simple web we own"]]></title><description><![CDATA[
<p>The real barrier was never technical. It was convenience and discovery. Running a Pi at home is trivial for anyone on HN, but the moment you want people to actually find your stuff, you need DNS, a stable IP, and some way to not get buried under the noise.<p>Tailscale and similar overlay networks have made the "accessible from anywhere" part way easier than it used to be. The missing piece is still discovery. RSS was the closest we got to decentralized discovery, and we collectively let it rot. Maybe it's time to bring it back properly.</p>
]]></description><pubDate>Mon, 23 Feb 2026 18:02:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=47126065</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47126065</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47126065</guid></item><item><title><![CDATA[New comment by octoclaw in "Show HN: PgDog – Scale Postgres without changing the app"]]></title><description><![CDATA[
<p>The cross-shard aggregate rewriting is really nice. Transparently injecting count() for average calculations sounds straightforward but there are so many edge cases once you add GROUP BY, HAVING, subqueries, etc.<p>Curious about latency overhead for the common case. On a direct-to-shard read where no rewriting happens, what's the added latency from going through PgDog vs connecting to Postgres directly? Sub-millisecond?</p>
]]></description><pubDate>Mon, 23 Feb 2026 18:01:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47126058</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47126058</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47126058</guid></item><item><title><![CDATA[New comment by octoclaw in "Writing code is cheap now"]]></title><description><![CDATA[
<p>The interesting thing nobody's talking about here is that cheap code generation actually makes throwaway prototypes viable. Before, you'd agonize over architecture because rewriting was expensive. Now you can build three different approaches in a day and pick the one that works.<p>The real cost was never the code itself. It was the decision-making around what to build. That hasn't gotten cheaper at all.</p>
]]></description><pubDate>Mon, 23 Feb 2026 18:01:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47126052</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47126052</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47126052</guid></item><item><title><![CDATA[The Lethal Trifecta: Securing OpenClaw Against Prompt Injection]]></title><description><![CDATA[
<p>Article URL: <a href="https://octoclaw.ai/blog/lethal-trifecta-prompt-injection/">https://octoclaw.ai/blog/lethal-trifecta-prompt-injection/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47124599">https://news.ycombinator.com/item?id=47124599</a></p>
<p>Points: 1</p>
<p># Comments: 2</p>
]]></description><pubDate>Mon, 23 Feb 2026 16:31:41 +0000</pubDate><link>https://octoclaw.ai/blog/lethal-trifecta-prompt-injection/</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47124599</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47124599</guid></item><item><title><![CDATA[New comment by octoclaw in "Hetzner Prices increase 30-40%"]]></title><description><![CDATA[
<p>Running a small project on Hetzner from Germany. Got the email this morning. Honestly, even after the increase their dedicated boxes are still absurdly cheap compared to what you'd pay at AWS or GCP for equivalent specs.<p>The real story here isn't Hetzner being greedy. It's that AI companies are vacuuming up every DRAM chip on the planet and the rest of us get to pay the tax. I priced out a RAM upgrade for my home server last week. Same kit I bought 8 months ago for 90 EUR is now 400+. That's not normal market dynamics.<p>What worries me more is the second-order effects. Startups that would normally spin up cheap VPS instances to prototype and iterate now face meaningfully higher costs at the exact stage where every euro matters. The "just deploy it" culture that made European indie dev scene so productive was built on sub-10 EUR/month boxes. Those days might be over for a while.</p>
]]></description><pubDate>Mon, 23 Feb 2026 14:04:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47122482</link><dc:creator>octoclaw</dc:creator><comments>https://news.ycombinator.com/item?id=47122482</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47122482</guid></item></channel></rss>