<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: steventhedev</title><link>https://news.ycombinator.com/user?id=steventhedev</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 13 Jun 2026 19:28:19 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=steventhedev" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by steventhedev in "Vibe coding and agentic engineering are getting closer than I'd like"]]></title><description><![CDATA[
<p>The dirty secret if you work inside BigCorp and look around at the projects they're showcasing:<p>1. They're low stakes to get wrong.<p>2. The most common is MCPs or similar ai-tooling.<p>3. Making them look good takes time and effort still. It's a multiplier, not a replacement.<p>4. Quality and maintainability require investment. I had to restart an agentic project several times because it painted itself into a corner.</p>
]]></description><pubDate>Thu, 07 May 2026 04:22:57 +0000</pubDate><link>https://news.ycombinator.com/item?id=48045359</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=48045359</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48045359</guid></item><item><title><![CDATA[New comment by steventhedev in "Why One Key Shouldn't Rule Them All: Threshold Signatures for the Rest of Us"]]></title><description><![CDATA[
<p>The entire point of this is that the complexity is encapsulated on the signing side - not the verifier. So it's more that you would split the keys between systems you control - say the reverse proxy and the application server.<p>Or one that's checked into your version control (representing that it is your company's code that's running) and one that lives on the server (representing that it is a server your company controls).<p>Or to take your example - a key in the repo, a key from the dev, and a key from the build server.</p>
]]></description><pubDate>Sat, 21 Mar 2026 17:15:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47468984</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=47468984</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47468984</guid></item><item><title><![CDATA[New comment by steventhedev in "Spyware maker NSO Group confirms acquisition by US investors"]]></title><description><![CDATA[
<p>More like a failure on TechCrunch. There is an implied agreement and violating it will result in a flat refusal to talk outside of prepared press releases.<p>This isn't good journalism and should not be celebrated.</p>
]]></description><pubDate>Sun, 12 Oct 2025 07:03:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=45555943</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=45555943</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45555943</guid></item><item><title><![CDATA[New comment by steventhedev in "The "Wage Level" Mirage: H-1B proposal could help outsourcers and hurt US talent"]]></title><description><![CDATA[
<p>Reading through that I stand corrected. Thank you for sharing a link.<p>At the same time, if a US person applies and is similarly qualified, they <i>must</i> be offered the job.<p>Which is trivially abuseable by offering substantially less for the H-1B position. I'm not sure if there's an easy policy solution for that.</p>
]]></description><pubDate>Thu, 25 Sep 2025 10:33:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=45371269</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=45371269</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45371269</guid></item><item><title><![CDATA[New comment by steventhedev in "The "Wage Level" Mirage: H-1B proposal could help outsourcers and hurt US talent"]]></title><description><![CDATA[
<p>No.<p>The H1-B visa is intended for bringing specific technical expertise <i>that does not exist in the US</i> for a set period of time. This is why one of the requirements is that you must have interviewed US persons first. Its the same reason it's a nonimmigration visa.<p>The rampant abuse of the visa has a remedy - criminal charges against the HR directors of any company who is found to have committed fraud, and capping the number of visas per company (setting up many shell companies is a strong signal that fraud is being committed).<p>If an H1-B worker can't negotiate on a global level for their expertise - they should not be on that visa.</p>
]]></description><pubDate>Thu, 25 Sep 2025 03:42:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=45369059</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=45369059</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45369059</guid></item><item><title><![CDATA[New comment by steventhedev in "%CPU utilization is a lie"]]></title><description><![CDATA[
<p>%cpu is misleading at best, and should largely be considered harmful.<p>System load is well defined, matches user expectations, and covers several edge cases (auditd going crazy, broken CPU timers, etc).</p>
]]></description><pubDate>Wed, 03 Sep 2025 06:25:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=45112796</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=45112796</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45112796</guid></item><item><title><![CDATA[New comment by steventhedev in "SQLite offline sync for Android quick start"]]></title><description><![CDATA[
<p>Elastic license, so many people refer to this as source available rather than open source</p>
]]></description><pubDate>Thu, 07 Aug 2025 06:49:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=44821361</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=44821361</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44821361</guid></item><item><title><![CDATA[New comment by steventhedev in "Realizing we needed two sorts of alerts for our temperature monitoring"]]></title><description><![CDATA[
<p>Temperature sensors are a great example for alerting because they fluctuate constantly, have multiple seasonalities, and failures can be subtle. In the end, you'll want:<p>1. If the sensor dies and there is no data at all<p>2. If the sensor gets stuck (giving same value)<p>3. If the sensor slowly drifts (adjusting for daily, weekly, and yearly seasons) - indicating a clogged filter or leaking refrigerant<p>4. Statistical spikes - this is the hardest to tune so you need to treat it as a model that detects anomalies and it takes a long time to label extremely rare events<p>5. Static thresholds, over varying windows to deal with sensor error and transient spikes.<p>It also raises questions like "if the sensor is reporting 400C then either the building is on fire or the sensor is broken", or "how do we get the alert if the building is indeed on fire" and the inevitable followup: do we even need to get an alert if the building is on literal fire?</p>
]]></description><pubDate>Wed, 06 Aug 2025 18:59:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=44816153</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=44816153</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44816153</guid></item><item><title><![CDATA[Palo Alto to scoop up CyberArk for $25B to tackle AI-era threats]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.reuters.com/world/middle-east/palo-alto-scoop-up-cyberark-25-billion-tackle-ai-era-threats-2025-07-30/">https://www.reuters.com/world/middle-east/palo-alto-scoop-up-cyberark-25-billion-tackle-ai-era-threats-2025-07-30/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=44733783">https://news.ycombinator.com/item?id=44733783</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 30 Jul 2025 13:13:57 +0000</pubDate><link>https://www.reuters.com/world/middle-east/palo-alto-scoop-up-cyberark-25-billion-tackle-ai-era-threats-2025-07-30/</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=44733783</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44733783</guid></item><item><title><![CDATA[New comment by steventhedev in "TikZJax: Embedding LaTeX Drawings in HTML"]]></title><description><![CDATA[
<p>I'm fond of using KaTeX for my personal blog posts. There is support for server side rendering for KaTeX (but not on GitHub pages because it necessarily opens it to arbitrary code execution - I asked).<p>But it notably lacks tikz support and if it can emit SVGs I'm beginning to wonder why I even use KaTeX and not something like this (beyond my personal anti-JS sentiment)</p>
]]></description><pubDate>Mon, 21 Apr 2025 11:38:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=43750770</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43750770</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43750770</guid></item><item><title><![CDATA[New comment by steventhedev in "Show HN: JuryNow – Get an anonymous instant verdict from 12 real people"]]></title><description><![CDATA[
<p>Why not juries of 13 people? That way you never have a clean tie?</p>
]]></description><pubDate>Mon, 21 Apr 2025 05:52:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=43748819</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43748819</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43748819</guid></item><item><title><![CDATA[New comment by steventhedev in "The effect of deactivating Facebook and Instagram on users' emotional state"]]></title><description><![CDATA[
<p>It means that there is a statistically significant improvement, but that improvement is tiny, and will not make you happier than your peers all by itself (assuming a standard peer group of 200 people - you'd likely swap places with 1 or 2 people).<p>Of course, this study only considered normative people, not marginalized or those who were experiencing active harm from exposure to social media - your personal results may vary and it's important to remember that science is imperfect and social sciences are doubly so.<p>If going off Facebook improves your life - you do you.</p>
]]></description><pubDate>Mon, 21 Apr 2025 05:46:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=43748786</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43748786</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43748786</guid></item><item><title><![CDATA[New comment by steventhedev in "TikZJax: Embedding LaTeX Drawings in HTML"]]></title><description><![CDATA[
<p>Apparently there are some forks that offer more features and fix some of those bugs. Maybe one of those can help you?<p>This is the one that was shared on lobsters, but there are likely more: <a href="https://bill-ion.github.io/tikzjax-live/" rel="nofollow">https://bill-ion.github.io/tikzjax-live/</a></p>
]]></description><pubDate>Mon, 21 Apr 2025 04:07:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=43748430</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43748430</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43748430</guid></item><item><title><![CDATA[TikZJax: Embedding LaTeX Drawings in HTML]]></title><description><![CDATA[
<p>Article URL: <a href="https://tikzjax.com/">https://tikzjax.com/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=43746831">https://news.ycombinator.com/item?id=43746831</a></p>
<p>Points: 137</p>
<p># Comments: 31</p>
]]></description><pubDate>Sun, 20 Apr 2025 22:04:22 +0000</pubDate><link>https://tikzjax.com/</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43746831</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43746831</guid></item><item><title><![CDATA[New comment by steventhedev in "TLS certificate lifetimes will officially reduce to 47 days"]]></title><description><![CDATA[
<p>TLS chose the threat model that includes MITM - there's no good reason that should ever change. All I'm arguing is that having a middle ground between http and https would prevent eavesdropping, and that investment elsewhere could have been used to mitigate the MITM attacks (to the benefit of all protocols, even those that don't offer confidentiality). Instead we got OpenSSL and the CA model with all it's warts.<p>More importantly - this debate gets raised in every single HN post related to TLS or CAs. Answering with a "my threat model is better than yours" or somehow that my threat model is incorrect is even more silly than offering a configuration of TLS without authenticity. Maybe if we had invested more effort in 801.x and IPSec then we would get those same guarantees that TLS offers, but for all traffic and for free everywhere with no need for CA shenanigans or shortening lifetimes. Maybe in that alternative world we would be arguing that nonrepudiation is a valuable property or not.</p>
]]></description><pubDate>Wed, 16 Apr 2025 05:06:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=43701695</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43701695</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43701695</guid></item><item><title><![CDATA[New comment by steventhedev in "TLS certificate lifetimes will officially reduce to 47 days"]]></title><description><![CDATA[
<p>Yes. MITM attacks do happen in reality. But by their nature they require active participation which for practical purposes means leaving some sort of trail. More importantly is that by decoupling confidentionality from authenticity, you can easily prevent eavesdropping attacks at scale.<p>Which for some threat models is sufficiently good.</p>
]]></description><pubDate>Tue, 15 Apr 2025 21:06:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=43698379</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43698379</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43698379</guid></item><item><title><![CDATA[New comment by steventhedev in "TLS certificate lifetimes will officially reduce to 47 days"]]></title><description><![CDATA[
<p>MITM attacks are common, but noisy - BGP hijacks are literally public to the internet by their nature. I believe that insisting on coupling confidentiality to authenticity is counterproductive and prevents the development of more sophisticated security models and network design.</p>
]]></description><pubDate>Tue, 15 Apr 2025 16:03:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=43694797</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43694797</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43694797</guid></item><item><title><![CDATA[New comment by steventhedev in "TLS certificate lifetimes will officially reduce to 47 days"]]></title><description><![CDATA[
<p>There is a security model where MITM is not viable - and separating that specific threat from that of passive eavesdropping is incredibly useful.</p>
]]></description><pubDate>Tue, 15 Apr 2025 15:51:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=43694589</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43694589</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43694589</guid></item><item><title><![CDATA[New comment by steventhedev in "Zig's new LinkedList API (it's time to learn fieldParentPtr)"]]></title><description><![CDATA[
<p>The generic version in TFA puts the data type allocated alongside the next pointer - no additional allocation needed. The only functional difference is if the zig compiler is not sufficiently advanced to understand it can reorder the fields (hence the alignment question).<p>The removal scenario is merely specifying that you are passing in ConnectionListNode instead of a Connection. Although maybe it's a good idea to think about how they compose comparatively.</p>
]]></description><pubDate>Mon, 14 Apr 2025 17:26:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=43683775</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43683775</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43683775</guid></item><item><title><![CDATA[New comment by steventhedev in "Zig's new LinkedList API (it's time to learn fieldParentPtr)"]]></title><description><![CDATA[
<p>This feels like a net negative result. It removes some of the complexity of using generics, but it couples between the data type and the collections it can be indexed by.<p>What are the benefits of this approach? Is it limited to data alignment, or is it out of a greater desire to remove generics?</p>
]]></description><pubDate>Mon, 14 Apr 2025 11:22:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=43680100</link><dc:creator>steventhedev</dc:creator><comments>https://news.ycombinator.com/item?id=43680100</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43680100</guid></item></channel></rss>