Hacker News: thunderfork

New comment by thunderfork in "I never authorized an integration that scans my secrets"

thunderfork — Mon, 19 Oct 2026 12:23:51 +0000

It's fascinating that you feel that way, but "I feel this is a threat" isn't really explaining why you feel it's a threat, especially when the purpose is to identify passwords whose full cleartext is exposed, which I'd rate as a far more substantial concern

New comment by thunderfork in "I never authorized an integration that scans my secrets"

thunderfork — Fri, 16 Oct 2026 21:35:13 +0000

So, wait, these are secrets that are already given to h-a, hashed, and just the first five characters of the hash sent up..?

Yeah, I agree with the maintainer, this strikes me as outrage theater over any actual problem, no?

New comment by thunderfork in "11 year old unsoundness bugs found in Rust borrow checker"

thunderfork — Fri, 16 Oct 2026 14:37:16 +0000

>Good codebases already do what rust is doing with the borrow checker, it's not rocket science.

Rust allows you to achieve with syntax what these good codebases achieve through diligence. You're right that it isn't rocket science, but it's demonstrably challenging, given that plenty of people get it wrong.

People are certainly trying to bring more safety to existing languages (in various ways), and that's only a good thing.

New comment by thunderfork in "'500-hour' Order of the Sinking Star is as complex and exhausting as it sounds"

thunderfork — Fri, 16 Oct 2026 14:22:35 +0000

The moments of player-antagonism are the most interesting parts of Braid/Witness, imo.

New comment by thunderfork in "11 year old unsoundness bugs found in Rust borrow checker"

thunderfork — Thu, 15 Oct 2026 14:37:08 +0000

Tools can enable diligence, and tools can discourage negligence. There's an all-or-nothing fallacy at work in the suggestion that tools must be perfect at both of these things to be useful in advancing the craft.

A great deal of Rust code need not ever involve the unsafe block, and in these cases there is no great temptation to stray off this path. This is pretty good, imo.

New comment by thunderfork in "11 year old unsoundness bugs found in Rust borrow checker"

thunderfork — Tue, 13 Oct 2026 16:14:25 +0000

A gun in a glass case with a warning label reading "do not aim at foot"?

New comment by thunderfork in "Cloudflare acquires Deno"

thunderfork — Fri, 09 Oct 2026 15:26:48 +0000

"which runtime" is a separate discussion from "which package manager"; there's nothing in Node requiring you to use npm (or to rely on external dependencies at all)

New comment by thunderfork in "The death of web development education"

thunderfork — Thu, 01 Oct 2026 22:53:52 +0000

People have been using chatbots to cheat on schoolwork for a few years now

New comment by thunderfork in "Responsible Release of AI-Generated Mathematics"

thunderfork — Thu, 01 Oct 2026 17:58:22 +0000

Centralization of what, though? It could centralize operations while (through, eg, democracy) decentralizing power

New comment by thunderfork in "Git 3.0's upcoming SHA-256 default will be a costly mistake"

thunderfork — Thu, 01 Oct 2026 17:27:51 +0000

A lot of replies here seem to be asserting that this "isn't that hard" without addressing the thing that makes it most hard: submodule compatibility and the breadth of tooling

New comment by thunderfork in "DraftKings is using AI to behaviorally target chronic gamblers"

thunderfork — Tue, 29 Sep 2026 21:53:52 +0000

We do this with laws already

New comment by thunderfork in "Optimizing x264 settings and per-title ladders"

thunderfork — Tue, 29 Sep 2026 17:23:42 +0000

Some clients only take H264, depends on what you're delivering to. Often for web media you end up having to serve [h264, h265, av1], which is a real pain

New comment by thunderfork in "One Month Without AI"

thunderfork — Sat, 26 Sep 2026 15:57:33 +0000

If you're not doing anything that matters, 2FA is easy. If you're doing something people actually care about, you're going to have to answer real world questions like "how do we provide support for this", "do we force certain roles to set up 2fa", "what if someone loses their phone", etc

New comment by thunderfork in "Unknown number of Texas voter registrations went unprocessed due to DPS error"

thunderfork — Fri, 25 Sep 2026 06:18:31 +0000

>How could it be otherwise?

I feel like acting like things are impossible which are done in other regions without issue is a losing argument, no?

New comment by thunderfork in "Unknown number of Texas voter registrations went unprocessed due to DPS error"

thunderfork — Fri, 25 Sep 2026 06:15:21 +0000

The Canadian comparison is apples to oranges when you look at and compare the ease of identification and registration (can register at the polls; a massive number of verification methods - vs - sometimes can't, very few verification methods)

New comment by thunderfork in "AI-generated posters don’t have to be horrible"

thunderfork — Mon, 21 Sep 2026 18:39:25 +0000

I do exactly this all the time, and know many who also do this all the time, yes.

So, this refutes the bailey:

>None of the AI haters (or haters in general) are willing to put money where their mouths are.

New comment by thunderfork in "Meta bans ads for Virginia Woolf play in Spain"

thunderfork — Mon, 21 Sep 2026 18:35:14 +0000

It's their choice among other viable choices, so the "problem" is on their end.

If the law mandated exactly one thing, then it'd be the law's problem. Since it doesn't, of course the choice of how to comply can be criticized.

New comment by thunderfork in "I am often wrong"

thunderfork — Sun, 20 Sep 2026 20:27:57 +0000

I disagree, on the principle of "slow is smooth, smooth is fast"

New comment by thunderfork in "AI-generated posters don’t have to be horrible"

thunderfork — Sat, 19 Sep 2026 20:55:46 +0000

Motte and bailey; "none" -> "vast majority"

I know plenty of people (including myself) who pay for good human artwork :)

New comment by thunderfork in "EU chief opens door for Canada to become 'associate member'"

thunderfork — Wed, 16 Sep 2026 14:09:08 +0000

You can't be reddit-posting and then complaining about replies being reddit, man