Hacker News: runningmike

New comment by runningmike in "Security Concerns in Generative AI Coding Assistants"

runningmike — Tue, 14 Apr 2026 08:03:22 +0000

Original title: Security Concerns in Generative AI Coding Assistants: Insights from Online Discussions on GitHub Copilot

"the sentiment expressed across all concern areas is generally skewed toward the negative end of the polarity scale."

Security Concerns in Generative AI Coding Assistants

runningmike — Tue, 14 Apr 2026 08:03:21 +0000

Article URL: https://arxiv.org/abs/2604.08352

Comments URL: https://news.ycombinator.com/item?id=47762692

Points: 1

# Comments: 1

New comment by runningmike in "Google has a secret reference desk"

runningmike — Tue, 14 Apr 2026 07:37:09 +0000

Nice article. But the warning can be stronger imho: Instead of: "Don’t assume your results are the same as anyone else’s."

"The results search you get from G*gle results are unique."

G*gle does not use the easy to use Lucene search syntax but has many 'magic' things, like:

Searching for high-quality Open Access content or solid technical answers on software challenges requires a rigorous scientific methodology, combined with creativity and extensive experience. Despite being a crucial competency, it is rarely taught in depth.

Even with the rise of LLMs, effectively navigating search results remains an unsolved problem.

New comment by runningmike in "How Complex is my Code?"

runningmike — Sun, 12 Apr 2026 06:23:50 +0000

To do a Simple Cyclomatic Complexity check, operating on the principle that secure systems are simple systems, you can use https://github.com/nocomplexity/codeaudit or try the wasm version on https://nocomplexity.com/codeauditapp/dashboardapp.html

Complexity directly impacts security. Simple systems are: Maintainable: Easier to change and manage. Reliable: Less prone to logic errors. Testable: Easier to validate and test.

New comment by runningmike in "Open source died in March. It just doesn't know it yet"

runningmike — Sat, 11 Apr 2026 15:15:04 +0000

100% click bait title indeed!

We are brainwashed by commercial vendors to advocate for complex, expensive cyber security solutions that are costly to implement and lack transparency.

Most (commercial) cyber security solutions are not future-proof and not maintainable in the long term. Most cyber security improvements programs end with more paperwork and more new fancy software tools, without increased security resilience.

New comment by runningmike in "I Quit. The Clankers Won"

runningmike — Wed, 01 Apr 2026 17:01:07 +0000

Love the one-armed code bandit on the home page of this blog! Nice UX experience! See: https://dbushell.com/

Can LLMs Hack Enterprise Networks?

runningmike — Tue, 17 Mar 2026 09:07:46 +0000

Article URL: https://github.com/andreashappe/cochise

Comments URL: https://news.ycombinator.com/item?id=47410198

Points: 3

# Comments: 1

Static Application Security Testing (SAST): Simplicity Matters

runningmike — Fri, 13 Mar 2026 16:32:47 +0000

Article URL: https://nocomplexity.substack.com/p/static-application-security-testing

Comments URL: https://news.ycombinator.com/item?id=47366580

Points: 2

# Comments: 0

New comment by runningmike in "Unlocking Python's Cores:Energy Implications of Removing the GIL"

runningmike — Fri, 06 Mar 2026 08:41:37 +0000

Title shortened - Original title:

Unlocking Python’s Cores: Hardware Usage and Energy Implications of Removing the GIL

I am curious about the NumPy workload choice made, due to more limited impact on CPython performance.

Unlocking Python's Cores:Energy Implications of Removing the GIL

runningmike — Fri, 06 Mar 2026 08:41:37 +0000

Article URL: https://arxiv.org/abs/2603.04782

Comments URL: https://news.ycombinator.com/item?id=47272531

Points: 132

# Comments: 103

New comment by runningmike in "Odido Security Breach – 6M Customers (Full Timeline and Analysis)"

runningmike — Thu, 05 Mar 2026 08:36:33 +0000

Odido’s Biggest Failures misses the key points, in my opinion: 1) a lack of "security by design" and 2) insufficient security monitoring.

By centralising and outsourcing all data to what appears to be a Salesforce Cloud solution, this was a disaster waiting to happen. If even minimal security monitoring had been active, someone should have noticed something. It is also possible that the security management department was competent, but senior management failed to understand or act upon the advice provided.