Hacker News: orf

New comment by orf in "Google's Beyond Zero: Enterprise Security for the AI Era"

orf — Tue, 28 Jul 2026 23:23:23 +0000

> That's a different attack vector

So you’re saying that the attack vector has… shifted.

New comment by orf in "The South Carolina town in turmoil over a $545,000 email phishing scam"

orf — Sun, 26 Jul 2026 06:54:55 +0000

> Surfside Beach Mayor Robert Krouse said the emailed payment request appeared genuine. “We don’t see where the town erred,” he said, so he didn’t see “why we should be paying double.”

If you didn’t err you’d only be paying single

New comment by orf in "The South Carolina town in turmoil over a $545,000 email phishing scam"

orf — Sun, 26 Jul 2026 06:53:25 +0000

How would that help, at all?

New comment by orf in "Postgres LISTEN/NOTIFY actually scales"

orf — Sat, 25 Jul 2026 08:52:08 +0000

It doesn’t necessarily follow that because Postgres is “fully utilised” it is hitting “hardware maximum”, or even that it’s not bottlenecked on contention.

As an example, spinlocks can push CPU usage very high whilst being an obvious symptom of contention.

New comment by orf in "Claude Code uses Bun written in Rust now"

orf — Sun, 19 Jul 2026 11:28:34 +0000

What specific technical issues are you experiencing with running Bun that would justify a change?

New comment by orf in "Goodbye, and Thanks for All the Bikesheds"

orf — Sat, 18 Jul 2026 18:45:54 +0000

> Please make my predictions come out wrong.

New comment by orf in "Goodbye, and Thanks for All the Bikesheds"

orf — Sat, 18 Jul 2026 18:34:05 +0000

Wow, you missed the entire point of the article.

New comment by orf in "The Lindy effect in software"

orf — Sat, 11 Jul 2026 10:37:01 +0000

> I've invoked it in my job mostly to explain to younger developers why learning vim keybindings+terminal git usage

Interesting - I see it as the opposite: learning the git CLI is pointless. It’s slow, clunky and it doesn’t teach you any of the very interesting inner-workings of Git.

There are much better things to spend time learning, especially if your editor has a native git integration.

New comment by orf in "Digital euro clears key hurdle as EU seeks to break free from U.S. credit cards"

orf — Tue, 23 Jun 2026 18:43:45 +0000

US card fraud rate is significantly higher than in the EU. In 2015 it was about 0.042% in the EU, vs 0.1388% for the US. The 2021 rates for the EU fell to ~0.028%.

You get nervous about giving your card to a waiter because you’re in a foreign place with a nonsense payment system worst than most developing countries and it’s not something you’re ever asked to do anywhere else.

New comment by orf in "AURpocalypse now: a look at the recent AUR attacks"

orf — Sat, 20 Jun 2026 08:43:35 +0000

I see that, but the adversary wasn’t a low effort one, and didn’t need millions of accounts.

New comment by orf in "AURpocalypse now: a look at the recent AUR attacks"

orf — Sat, 20 Jun 2026 07:47:26 +0000

> New user registration was stopped on June 11 and then re-enabled after the project added Anubis to try to foil the attacker's mass account registrations. That did not work

This confuses me - why would a proof-of-work anti-scraping system like Anubis prevent registrations?

New comment by orf in "How we run Firecracker VMs inside EC2 and start browsers in less than 1s"

orf — Thu, 18 Jun 2026 12:15:01 +0000

> As a discussion regarding if it’s ethical to ignore restrictions progresses, the probability of someone bringing up a famous case where someone ignored unethical restrictions approaches one

Seems reasonable to me. Substitute Rosa parks with another example of unethical restrictions if you wish - there are many.

New comment by orf in "How we run Firecracker VMs inside EC2 and start browsers in less than 1s"

orf — Wed, 17 Jun 2026 19:43:05 +0000

Was Rosa Parks unethical for sitting down on a bus?

The point is that the context matters: both the users context and the context of the restriction. It’s not as clear cut as “ignoring restrictions = bad”.

The restriction itself can be unethical, in the same way that bypassing a restriction can be unethical.

New comment by orf in "Running local models is good now"

orf — Wed, 17 Jun 2026 12:30:59 +0000

Are you making an honest attempt at stating your opinion that there is absolutely no reason to prefer a MacBook over your chosen device?

Or are you just being glib because you’ve got a misplaced superiority complex?

New comment by orf in "Running local models is good now"

orf — Tue, 16 Jun 2026 23:18:17 +0000

> how 99% of the population are not going to afford a setup like that

> could or will? much fewer than 1% are going to spend their money on that.

It’s ok to change your point, you don’t need to get combative.

Not that it makes any difference, given their ~10% market share.

New comment by orf in "Running local models is good now"

orf — Tue, 16 Jun 2026 22:32:48 +0000

That’s not at all what you said though, was it?

New comment by orf in "Running local models is good now"

orf — Tue, 16 Jun 2026 16:06:27 +0000

99% of the population don’t code using models, local or remote. So that’s a useless metric.

What % of developers could afford an older MacBook model, second hand? Far, far more than 1%.

New comment by orf in "Rift: Better Alternative to Git Worktrees"

orf — Mon, 01 Jun 2026 18:22:48 +0000

I wrote something similar with go, but MacOS only.

Creating a worktree became instant, but the bottleneck shifted from that to git needing to build its index. Claude code runs `git status` in the background, meaning any speed gains are instantly gone.

New comment by orf in "I found a seashell in the middle of the desert"

orf — Sat, 30 May 2026 21:18:07 +0000

Why? Calling a reasonable thing grim without any follow-up isn’t the hallmark of a good comment either.

New comment by orf in "SQLite is all you need for durable workflows"

orf — Fri, 29 May 2026 18:28:23 +0000

> postgresql also does not synchronously replicate

By default. Generally your primary database is in a completely different failure category than a kubernetes node running an ephemeral workflow pod.