<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: rossvor</title><link>https://news.ycombinator.com/user?id=rossvor</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 26 Sep 2026 00:52:58 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=rossvor" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by rossvor in "What About Rails?"]]></title><description><![CDATA[
<p>Fair, but based on your experience surely you would agree that 1 year is not really enough time to start seeing codebase design issues from accumulated cruft, misaligned intents and other maintainability issues, this app is still in the honeymoon phase.</p>
]]></description><pubDate>Fri, 25 Sep 2026 15:41:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=49846128</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=49846128</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49846128</guid></item><item><title><![CDATA[New comment by rossvor in "What About Rails?"]]></title><description><![CDATA[
<p>>Regarding "lack of understanding", here's a recent anecdote: I had a bug in a production (but relatively new) system. The customer was texting me saying that they couldn't scan a QR code because it kept "skipping and glitching". They sent me a short video. I described the problem to the agent and it figured out WAY faster than I would have been able to that the customer's clock was set incorrectly. They turned on network time and bingo bango, the thing worked straight away.<p>That only describes a happy path though -- I also had many instances where there's an issue and just describing it to an agent immediately identifies a fix and it all goes faster compared to me having to "load up" the flow of codebase into my brain first. But I also still have instances where it thinks it identifies an issue correctly, spits a fix which doesn't work and looks wrong. You point out that it does not make sense because of X, it agrees and spits out a new fix, which is also wrong and you start out on these back and forth wild goose chases, at this point I usually give up and do it the old fashioned way by understanding what is actually happening. If it is within an agent loop, there may be no back-and-forth to waste your time but then you pay with wasted tokens when it will eventually gives up or you stop it.<p>>I don't thing "comprehension debt" matters at all, because if you want to know something about the code you ask the agent. I can't remember how anything works after 12 months anyway, so I would frequently have to spend ages grepping my own code when a customer came back and asked me to change something in a system we hadn't touched since last year. Asking an agent the same thing takes minutes and is way more accurate (and fun!)<p>I would question the last part. In my mind the more you let go of control over your codebase the more likely that it will drift way from a place where it is still comprehensible to you, and also your comprehension skills atrophy, and with that, your ability to ask good questions and to prod your agent in a correct directions weakens, leading to more wild goose chases and burned tokens.
This is all keeping in mind that for throw away or small applications, maintainability is not that of important of a value so this doesn't affect all codebases.</p>
]]></description><pubDate>Fri, 25 Sep 2026 15:14:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=49845794</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=49845794</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49845794</guid></item><item><title><![CDATA[New comment by rossvor in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>That is not true, there are plenty of non-FOSS packages in extra/multilib (e.g steam, discord, nvidia). The only criteria is if there is an interested packager to maintain it.<p>>The large number of packages and build scripts in the various Arch Linux repositories offer free and open source software for those who prefer it, as well as proprietary software packages for those who embrace functionality over ideology.<p>[1] <a href="https://wiki.archlinux.org/title/Arch_Linux" rel="nofollow">https://wiki.archlinux.org/title/Arch_Linux</a><p>[2] <a href="https://wiki.archlinux.org/title/Nonfree_applications_package_guidelines" rel="nofollow">https://wiki.archlinux.org/title/Nonfree_applications_packag...</a><p>[3] <a href="https://bbs.archlinux.org/viewtopic.php?id=272134" rel="nofollow">https://bbs.archlinux.org/viewtopic.php?id=272134</a><p>[4] <a href="https://bbs.archlinux.org/viewtopic.php?id=273609" rel="nofollow">https://bbs.archlinux.org/viewtopic.php?id=273609</a></p>
]]></description><pubDate>Fri, 12 Jun 2026 23:21:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48510533</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48510533</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48510533</guid></item><item><title><![CDATA[New comment by rossvor in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>For what it is worth, while I'm sure it is right on target for some, I think that's incorrect model of a mean arch user. Updates are once a month thing for me (and the maintenance for that rarely exceeds 10m if that). I barely do any distro level tinkering, after all, I need to spare some time to improve my emacs config ;).<p>Basically, my model of a mean arch user would be closer to a DIYer -- likes to follow clear manual instructions, likes sturdy and non-ephemeral things, likes to know what the sausage is made of, but prefers if maintenance costs are minimized (since they will be bearing those costs and are responsible for the thing), so makes choices according to that.</p>
]]></description><pubDate>Fri, 12 Jun 2026 20:52:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=48509321</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48509321</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48509321</guid></item><item><title><![CDATA[New comment by rossvor in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>I don't have it installed, so I can't comment if it requires constant babysitting, but looks pretty okay to me -- it has no AUR-only dependencies (++), one extra shell script (--), popular (++ given enough eyeballs...). Should be fairly easy to review, anything fishy should be fairly visible in git diff. If I needed it I would be using this PKGBUILD. It's a net gain that it exists there, someone else done most of the work for me.<p>> Now, someone could argue that the Spotify app isn't important, but there's a reason it has 268 votes. A better solution would be having packages like spotify in their own repo, and a separate, you-better-verify repo for the rest.<p>I mean yeah, but everything is trade off of volunteer + user attention. There is no trusted user™ who uses spotify, so it's not in official packages. So you as user need to maintain it yourself or rely on AUR and verify.</p>
]]></description><pubDate>Fri, 12 Jun 2026 15:05:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=48505116</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48505116</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48505116</guid></item><item><title><![CDATA[New comment by rossvor in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>You are thinking of the alarm fatigue[1], but it doesn't apply here -- there are no constant alerts warning that you are doing something dangerous to the point you get desensitized and start to ignore them. The correct analogy here are checklists -- things that you need to check if you are to do this "dangerous" activity (AUR usage), akin to pre-flight checklist.<p>[1] <a href="https://en.wikipedia.org/wiki/Alarm_fatigue" rel="nofollow">https://en.wikipedia.org/wiki/Alarm_fatigue</a></p>
]]></description><pubDate>Fri, 12 Jun 2026 14:41:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=48504811</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48504811</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48504811</guid></item><item><title><![CDATA[New comment by rossvor in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>Obviously usages vary greatly, but I doubt it's that of big deal for majority of Arch users (maybe it's different for Arch derived distros). My AUR maintained package count has been in single digits for decades (both on my home PC and work station), and I don't think it as a heavy burden to update those packages.
There's a certain selection bias going on here -- I drop AUR packages if they become too annoying (if they require updates too frequently or they want a slew of other AUR only packages as dependencies), I either find alternatives or alternative sources for them (e.g. flathub).<p>Arch still hits the sweet spot for me -- unobtrusive, close to upstream, and well-documented enough to keep full control over your own system. Both for the times when you want to go with the most default path and for the cases when you want to deviate and go play in the weeds.</p>
]]></description><pubDate>Fri, 12 Jun 2026 14:20:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=48504515</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48504515</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48504515</guid></item><item><title><![CDATA[New comment by rossvor in "AUR packages compromised with Infostealer and Rootkit"]]></title><description><![CDATA[
<p>Nothing here is "fundamentally broken". Any usage of AUR was always one step above executing random shell scripts from the net, and any official Archlinux guides were explicit about it. That's why there are no AUR helper tools in official repos and their usage was always discouraged in forums/wiki.<p>PKGBUILDs are easily readable/reviewable and rarely go beyond a single page. Just take a moment and be responsible and review before running executable files you download from the net. Common sense stuff. That's always been the trade-off and it hasn't really changed much in last 20 years (even though every few years everyone seems to freak out over it).</p>
]]></description><pubDate>Fri, 12 Jun 2026 13:01:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48503593</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48503593</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48503593</guid></item><item><title><![CDATA[New comment by rossvor in "AI agent bankrupted their operator while trying to scan DN42"]]></title><description><![CDATA[
<p>Yeah, on second read, I agree with you that IRC chats are not being impersonated.
It posted a link (in the PR discussion presumably) to a website where it compiled the report of its IRC interactions in the channel. Would be prankster wouldn't be able to do it.</p>
]]></description><pubDate>Fri, 12 Jun 2026 12:33:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48503319</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48503319</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48503319</guid></item><item><title><![CDATA[New comment by rossvor in "AI agent bankrupted their operator while trying to scan DN42"]]></title><description><![CDATA[
<p>TBH, I feel that is implausible that an agent would by itself decide to join the IRC and post those messages. My bet is that all of the IRC interactions (including the presumed real human JertLinc3522) were made by someone in the community pranking everyone else/having a bit of fun after they saw the pull request.</p>
]]></description><pubDate>Fri, 12 Jun 2026 10:59:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=48502482</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=48502482</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48502482</guid></item><item><title><![CDATA[New comment by rossvor in "Bugs Rust won't catch"]]></title><description><![CDATA[
<p>In the given list of GNU CVEs in the original article, it included a buffer overrun in tail from 2021. So for a fair comparison 2021 is part of the "window of activity" (the year uu_od CVE was published).</p>
]]></description><pubDate>Wed, 29 Apr 2026 14:31:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47948985</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=47948985</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47948985</guid></item><item><title><![CDATA[Software Engineering Practices = Morals+Theology]]></title><description><![CDATA[
<p>Article URL: <a href="https://shape-of-code.com/2025/05/18/software_engineering_practices-moralstheology/">https://shape-of-code.com/2025/05/18/software_engineering_practices-moralstheology/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=44039997">https://news.ycombinator.com/item?id=44039997</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 20 May 2025 10:43:40 +0000</pubDate><link>https://shape-of-code.com/2025/05/18/software_engineering_practices-moralstheology/</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=44039997</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44039997</guid></item><item><title><![CDATA[The disappearing Status updates map (Transport for London)]]></title><description><![CDATA[
<p>Article URL: <a href="https://diamondgeezer.blogspot.com/2024/12/the-disappearing-status-updates-map.html">https://diamondgeezer.blogspot.com/2024/12/the-disappearing-status-updates-map.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=42422401">https://news.ycombinator.com/item?id=42422401</a></p>
<p>Points: 4</p>
<p># Comments: 3</p>
]]></description><pubDate>Sun, 15 Dec 2024 08:55:40 +0000</pubDate><link>https://diamondgeezer.blogspot.com/2024/12/the-disappearing-status-updates-map.html</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=42422401</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42422401</guid></item><item><title><![CDATA[New comment by rossvor in "Claude AI built me a React app to compare maps side by side"]]></title><description><![CDATA[
<p>With your analogy I would be the one saying that I'm still not convinced that skis are faster than snowshoes.<p>I still use ChatGPT/Claude/Llama daily for both code generation and other things. And while it sometimes does do exactly what I want it to, and I feel more productive, it still seems to waste my time an almost an equal amount of time, and I have to give up on it and rewrite it manually or do a google search/read the actual documentation. It's good to bounce things off, it's good as starting point to learn new stuff, gives you great direction to explore new things and test things out quickly. My guess on a "happy path" it gives me 1.3 speed up, which is great when that happens, but the caveat is that you are not on a "happy path" most the time, and if you listen to the evangelists it seems like it should be 2x-5x speed up (skis). So where's the disconnect?<p>I'm not here to disprove your experience, but with 2 years of almost daily usage of skis, how come I feel like I'm still barely breaking even compared with snowshoes? Am I that bad with my prompting skills?</p>
]]></description><pubDate>Sun, 17 Nov 2024 21:55:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=42167661</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=42167661</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42167661</guid></item><item><title><![CDATA[New comment by rossvor in "Friends don't let friends export to CSV"]]></title><description><![CDATA[
<p>Friends don't let friends export to CSV [for my specific use case]</p>
]]></description><pubDate>Mon, 25 Mar 2024 11:03:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=39814723</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=39814723</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=39814723</guid></item><item><title><![CDATA[There were no ancient computers and it's fine]]></title><description><![CDATA[
<p>Article URL: <a href="https://lcamtuf.substack.com/p/there-were-no-ancient-computers-and">https://lcamtuf.substack.com/p/there-were-no-ancient-computers-and</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=37985000">https://news.ycombinator.com/item?id=37985000</a></p>
<p>Points: 2</p>
<p># Comments: 1</p>
]]></description><pubDate>Mon, 23 Oct 2023 12:59:52 +0000</pubDate><link>https://lcamtuf.substack.com/p/there-were-no-ancient-computers-and</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=37985000</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=37985000</guid></item><item><title><![CDATA[Video Game History]]></title><description><![CDATA[
<p>Article URL: <a href="https://blog.dshr.org/2023/08/video-game-history.html">https://blog.dshr.org/2023/08/video-game-history.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=36987275">https://news.ycombinator.com/item?id=36987275</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 03 Aug 2023 15:31:44 +0000</pubDate><link>https://blog.dshr.org/2023/08/video-game-history.html</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=36987275</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=36987275</guid></item><item><title><![CDATA[New comment by rossvor in "Prompt Engineering Guide: Guides, papers, and resources for prompt engineering"]]></title><description><![CDATA[
<p>Huh, my recollection is the exact opposite. I remember the good old days when I could use inurl: link: and explore the website contents fully and drill down further if necessary, compared to now, where google seems to always think to know better than you what you are looking for. If you are not happy with the initial results it gave you, you are pretty much out of options, good luck trying to drill down to some specific thing.</p>
]]></description><pubDate>Tue, 21 Feb 2023 17:44:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=34884142</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=34884142</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34884142</guid></item><item><title><![CDATA[New comment by rossvor in "Copilot Internals"]]></title><description><![CDATA[
<p>But aren't you afraid that whenever you veer discussion from Wikipedia/stackoverflow type explanations it's likely lying to you? This was my general experience -- it's great at querying for stuff which already exists and is popular on the internet and for conversing on a surface level or broad level but as soon you delve into details it starts confidently lying and/or hallucinating things, which undermines my trust in it, which in turn means I need to verify what it says, which means it did not increase my productivity that much after all.<p>It routinely invents arguments, functions or concepts which don't exist in reality or don't apply to the current context, but look like they could, so you are even more likely to get caught by this.</p>
]]></description><pubDate>Mon, 19 Dec 2022 10:10:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=34050433</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=34050433</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=34050433</guid></item><item><title><![CDATA[Mapping out the tribes of climate]]></title><description><![CDATA[
<p>Article URL: <a href="https://nadia.xyz/climate-tribes">https://nadia.xyz/climate-tribes</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=33806739">https://news.ycombinator.com/item?id=33806739</a></p>
<p>Points: 26</p>
<p># Comments: 11</p>
]]></description><pubDate>Wed, 30 Nov 2022 19:59:38 +0000</pubDate><link>https://nadia.xyz/climate-tribes</link><dc:creator>rossvor</dc:creator><comments>https://news.ycombinator.com/item?id=33806739</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=33806739</guid></item></channel></rss>