<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: umvi</title><link>https://news.ycombinator.com/user?id=umvi</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 10 Jun 2026 00:56:32 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=umvi" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by umvi in "Having your insulin pump die while you're on vacation"]]></title><description><![CDATA[
<p>Just use insulin pens or even just vials + syringes to manage your BG? I'm T1D as well with a 5.7 a1c. You don't "need" a pump and in some ways pumps make you ignorant of your own disease, like people who "need" GPS to navigate their own towns.</p>
]]></description><pubDate>Sun, 31 May 2026 22:11:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=48350240</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48350240</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48350240</guid></item><item><title><![CDATA[New comment by umvi in "United Airlines 767 returns to Newark after Bluetooth name sparks alert"]]></title><description><![CDATA[
<p>Seems like an effective DoS attack - ground all planes in the US by sneaking cheap bluetooth speakers into people's luggage with provacative device names</p>
]]></description><pubDate>Sun, 31 May 2026 18:18:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=48348162</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48348162</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48348162</guid></item><item><title><![CDATA[New comment by umvi in "Texas woman arrested for Facebook post about town water quality"]]></title><description><![CDATA[
<p>Water is handled at the city level, not the federal level. If you have incompetent local leadership, this can happen. Incompetent local leaders can (and have!) bankrupted their cities.</p>
]]></description><pubDate>Sat, 23 May 2026 19:06:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=48250364</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48250364</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48250364</guid></item><item><title><![CDATA[New comment by umvi in "Bun support is now limited and deprecated"]]></title><description><![CDATA[
<p>I never said AI code should be "unreviewed". I'm saying that instead of pulling in axios or requests (as a contrived example) to make HTTP requests, just use AI to generate some vanilla JS/Python that has the exact subset of functionality you need. Your code has fewer dependencies, CVE surface area, etc, wins all around.</p>
]]></description><pubDate>Fri, 22 May 2026 22:40:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=48242529</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48242529</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48242529</guid></item><item><title><![CDATA[New comment by umvi in "Bun support is now limited and deprecated"]]></title><description><![CDATA[
<p>Assuming you disable CGO, yes, the binary is always self-contained. However, I want to clarify a few things.<p>The "self contained" part is only important in that it lets you use busybox or "from scratch" as your container runtime environment which has a very tiny cybersecurity surface area compared to, say, ubuntu or even alpine which has a bunch of system libraries your go binary isn't using, but which could still get flagged for having vulnerabilities.<p>Minimizing dependencies of the go binary is a separate, but equally important task that reduces the cybersecurity surface area of your go binary itself to just "the go standard library" instead of "go stdlib + a dozen github packages"<p>Whenever I am working with a NodeJS project I pity the fool who has to do SCA because the CVE surface area is enormous compared to go, which has a fairly batteries-included stdlib</p>
]]></description><pubDate>Fri, 22 May 2026 22:33:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=48242475</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48242475</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48242475</guid></item><item><title><![CDATA[New comment by umvi in "Bun support is now limited and deprecated"]]></title><description><![CDATA[
<p>"A little copying is better than a little dependency." - Go Proverbs [1]<p>Most complexity is unnecessary. Adding dependencies to your project exponentially increases your project's surface area, which in turn increases its regulatory/cybersecurity burden, especially if your software is a medical device, munition, etc. Why is Echo/Gin/Gorilla/etc better/more secure than vanilla Go's mux? Just anecdotal, but we use the Echo web framework for Go and it's caused nothing but headaches. It does magical XML parsing by default even though we don't deal with XML which gets us flagged in pen tests. Updating from v4 to v5 broke production for us because they made an undocumented server config change that makes all requests have a 30 second timeout. Meanwhile vanilla go has the ability to register routes and middlewares, so what value is Echo bringing to the table? Ditto for lots of other unnecessary dependencies. A lot of times we just need one little thing out of the whole package, and in those cases a little copying (or a little AI generation) is better than a little dependency.<p>A static go binary with minimal dependencies running in a busybox container has a tiny CVE footprint when run through grype/snyk, etc. Do the same for a NodeJS app with zillions of dependencies running in an ubuntu container and you'll spend all day triaging CVEs.<p>I'm not saying "roll your own crypto" but I am saying "axios-like packages don't make sense to use any more in a world where AI+vanilla accomplishes the same thing"<p>[1] <a href="https://go-proverbs.github.io/" rel="nofollow">https://go-proverbs.github.io/</a></p>
]]></description><pubDate>Fri, 22 May 2026 22:23:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=48242405</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48242405</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48242405</guid></item><item><title><![CDATA[New comment by umvi in "Bun support is now limited and deprecated"]]></title><description><![CDATA[
<p>Honestly I hope agentic AI ushers in a new age of minimal-SBOM software. I myself am moving all of my projects towards nearly 100% vanilla where possible. For example, golang. Why use [insert web framework] when you can just use vanilla for 99% of web apps?<p>There's something really satisfying about a go binary with minimal dependencies running in a busybox docker container.</p>
]]></description><pubDate>Fri, 22 May 2026 18:35:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=48239652</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48239652</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48239652</guid></item><item><title><![CDATA[New comment by umvi in "560-610 minutes of exercise a week needed for substantial heart benefits"]]></title><description><![CDATA[
<p>That's like 90 minutes of exercise a day if you take zero rest days... Not happening for most people. I think even marathon training requires less than 90 minutes a day on average.</p>
]]></description><pubDate>Wed, 20 May 2026 14:03:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48207989</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48207989</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48207989</guid></item><item><title><![CDATA[New comment by umvi in "Bill to block publishers from killing online games advances in California"]]></title><description><![CDATA[
<p>Better to just publish the protocols/APIs and let the community roll their own</p>
]]></description><pubDate>Sat, 16 May 2026 02:29:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=48156268</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48156268</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48156268</guid></item><item><title><![CDATA[New comment by umvi in "We are retiring our bug bounty program"]]></title><description><![CDATA[
<p>Honestly, depending on the repo, I would pay a reasonable fee to get issues or PRs I open seen. No different than paying a fee to add a new game to Steam - raises the barrier to entry and prevents a lot of garbage from entering the fray.</p>
]]></description><pubDate>Fri, 15 May 2026 18:14:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=48151900</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48151900</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48151900</guid></item><item><title><![CDATA[New comment by umvi in "GitHub is sinking"]]></title><description><![CDATA[
<p>Don't they inject malware/adware into your build artifacts?</p>
]]></description><pubDate>Sun, 10 May 2026 20:44:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=48087792</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48087792</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48087792</guid></item><item><title><![CDATA[New comment by umvi in "RaTeX: KaTeX-compatible LaTeX rendering engine in pure Rust"]]></title><description><![CDATA[
<p>We recently switched from Node.js + Mathjax for rendering latex to Goja (<a href="https://github.com/dop251/goja" rel="nofollow">https://github.com/dop251/goja</a>) + Mathjax, and surprisingly it worked really well. We did this because the app is already 99% golang, and this allows us to eliminate the remaining non-go pieces, greatly simplifying the SBOM. And yes, we tried go-latex, but it's not nearly as feature complete as Mathjax. Not to mention using goja + Mathjax adds 10MB to binary size while Node.js adds 200MB+</p>
]]></description><pubDate>Thu, 07 May 2026 13:27:02 +0000</pubDate><link>https://news.ycombinator.com/item?id=48049179</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=48049179</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48049179</guid></item><item><title><![CDATA[New comment by umvi in "The Zig project's rationale for their anti-AI contribution policy"]]></title><description><![CDATA[
<p>OP said "The next generation of developers will, for better or worse, grow up using AI assistance to write their code, but none of them will ever become a Zig contributor."<p>You rebutted with (paraphrasing) "no, you can't build compilers with LLMs because LLMs don't invent new things"<p>I used a lot of words to demonstrate that you <i>can</i> invent new things with LLMs, including compilers, as long as it's a human + LLM iterative loop and not an unsupervised LLM running in a vacuum.</p>
]]></description><pubDate>Thu, 30 Apr 2026 19:38:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47967240</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47967240</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47967240</guid></item><item><title><![CDATA[New comment by umvi in "The Zig project's rationale for their anti-AI contribution policy"]]></title><description><![CDATA[
<p>Ultimately code is an iterative refining process, like sculpting granite or spinning pottery. You start rough and iteratively shape and polish it. LLMs just rapidly speedup the iterative process. The next generation will be using LLMs to quickly setup the rough shape of new software and then iteratively refine them.<p>The "smarter/better" attributes you are worried about LLMs not having happen <i>between</i> iterative steps, when the human is inspecting the current state of the software and compares it to the desired state of the software (in their mind's eye). The human then course corrects for the next iteration.<p>This would be like if Michelangelo carved the David using a robotic 6-axis chisel. It takes him 1 month instead of 3 years because he can convey his initial vision to the robot and then iteratively refine the granite until it matches his vision.<p>You can try to claim LLMs don't invent new things, but humans using LLMs absolutely invent new things (source: myself).</p>
]]></description><pubDate>Thu, 30 Apr 2026 16:25:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=47964841</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47964841</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47964841</guid></item><item><title><![CDATA[New comment by umvi in "He asked AI to count carbs 27000 times. It couldn't give the same answer twice"]]></title><description><![CDATA[
<p>Food companies try every trick to make carb counting difficult. Companies will tout "zero sugar" in the label even though the first ingredient is maltodextrin or maltitol or some other thing that quickly turns into sugar the moment you ingest it. The only way to get good at it is to wear a CGM and then see how your body reacts to things and then keep a mental list after that. A company may claim some product only has 2 net carbs, but I've found those claims to be false a lot of the time, with bigger companies being the biggest offenders.</p>
]]></description><pubDate>Wed, 29 Apr 2026 14:22:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47948874</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47948874</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47948874</guid></item><item><title><![CDATA[New comment by umvi in "I am building a cloud"]]></title><description><![CDATA[
<p>Even the minimal SBOM part? It's hard to be more minimal than a busybox binary.</p>
]]></description><pubDate>Thu, 23 Apr 2026 13:51:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47875762</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47875762</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47875762</guid></item><item><title><![CDATA[New comment by umvi in "Jujutsu megamerges for fun and profit"]]></title><description><![CDATA[
<p>I don't get JJ. Every time it's posted people gush about how JJ enables some super complicated workflow that I can't wrap my head around. I have a simple feature branch/rebase workflow in git that has served me well for decades so I guess I don't understand why I would want to complicate things with (in this case) an "octopus merge/megamerge". Wouldn't that make it more difficult to reason about the repository/history?</p>
]]></description><pubDate>Tue, 21 Apr 2026 04:36:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=47844573</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47844573</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47844573</guid></item><item><title><![CDATA[New comment by umvi in "All phones sold in the EU to have replaceable batteries from 2027"]]></title><description><![CDATA[
<p>More replaceable batteries can have secondary effects that most people would probably like though - like the ability to by a used phone on ebay/FB marketplace that doesn't have an abysmal battery.</p>
]]></description><pubDate>Mon, 20 Apr 2026 17:24:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47837621</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47837621</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47837621</guid></item><item><title><![CDATA[New comment by umvi in "Game devs explain the tricks involved with letting you pause a game"]]></title><description><![CDATA[
<p>Seems like a solved problem for consoles, at least. On the Nintendo switch you can "pause" any game regardless of if the devs implemented it by pressing the home button which suspends the entire game at the OS level</p>
]]></description><pubDate>Sun, 19 Apr 2026 15:04:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=47824828</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47824828</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47824828</guid></item><item><title><![CDATA[New comment by umvi in "America will come to regret its war on taxes"]]></title><description><![CDATA[
<p>> Those changes alone, with absolutely no spending changes, balance the budget.<p>I tried out the calculator and put in all your changes, and the budget wasn't balanced, there was still a 1.4T deficit (as opposed to the current 1.9T deficit). The app only claims the budget is "sustainable" now because it assumes GDP keeps growing at the same rate (which might not be true), and if so we'll hit a 3%-of-GDP "deficit target" in 25 years. Also adjusting a negative tax rate kind of seems like it is, in fact, reducing spending (i.e. the federal government reduces the amount of tax credits it gives out). This also assumes the federal government will not introduce new programs, new spending, etc.  So really all you did was reduce the deficit by .5T along with a hope and a prayer that the economy will continue to grow at the same rate for the next 25 years (while at the same time the federal government does not increase spending). I personally think it's bad to have a deficit at all and that we should work towards zero deficit and eventually surplus (yes, I know there are all sort of growth hacks and such you can do with debt, but historically politicians have succumbed to slippery slope deficit increases and so for that reason alone I think holding politicians to a zero deficit standard is best -- do it for a few generations and now there's a precedent that protects us from getting into the situation we are currently in). To me a "balanced budget" is that your spending is <= your income.<p>Anyway, interesting calculator app. I do see the value in raising taxes for sure, but it's not easy politically to raise taxes and it's also not easy politically to cut spending (whichever group likes the thing you cut will scream), so ultimately it might have to be a hybrid solution where democrats increase taxes without increasing spending when they are in power and republicans cut spending without decreasing taxes when they are in power. When I say that out loud though it seems like a pipe dream, sigh...</p>
]]></description><pubDate>Sat, 18 Apr 2026 23:47:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47820529</link><dc:creator>umvi</dc:creator><comments>https://news.ycombinator.com/item?id=47820529</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47820529</guid></item></channel></rss>