Hacker News: weitzj

New comment by weitzj in "Satellite reveals immense scale of GPS signal tampering"

weitzj — Sat, 20 Jun 2026 13:43:12 +0000

JAM as a Service

New comment by weitzj in "What was nice about the UI of Windows 2000"

weitzj — Thu, 18 Jun 2026 16:30:10 +0000

I still use this background Color on my Mac or Linux.

New comment by weitzj in "Show HN: Continue? Y/N: A 60-second game about AI agent permission fatigue"

weitzj — Fri, 29 May 2026 21:31:42 +0000

Joshua

New comment by weitzj in "Nucleus: Enforced permissions for AI agents – policy+enforcement in one stack"

weitzj — Wed, 20 May 2026 06:40:27 +0000

There is also a Website https://coproduct-opensource.github.io/nucleus/architecture/...

I have stumbled on this project while dabbling around how to launch many firecracker VMs on a MacBook with >= M3 cpu to isolate agents.

What do others do to isolate agents?

Nucleus: Enforced permissions for AI agents – policy+enforcement in one stack

weitzj — Wed, 20 May 2026 06:38:07 +0000

Article URL: https://github.com/coproduct-opensource/nucleus

Comments URL: https://news.ycombinator.com/item?id=48203918

Points: 1

# Comments: 1

New comment by weitzj in "When Dawkins met Claude – Could this AI be conscious?"

weitzj — Sun, 03 May 2026 19:56:09 +0000

Maybe Roger Penrose has some meaningful Input https://youtu.be/iTVN6tFknCg

regarding …“One was the realization that a purely mechanical computer can, in principle simulate the laws …“

As far as I unterstood,there is no theory of quantum gravity and therefore this is not being simulated on a computer. I think he makes other arguments.

So you cannot say for sure that you can simulate a human brain on a computer

Roger Penrose – Why Intelligence Is Not a Computational Process (2025)

weitzj — Sun, 03 May 2026 19:54:25 +0000

Article URL: https://www.youtube.com/watch?v=iTVN6tFknCg

Comments URL: https://news.ycombinator.com/item?id=48000741

Points: 4

# Comments: 0

New comment by weitzj in "K3k: Kubernetes in Kubernetes"

weitzj — Sat, 02 May 2026 11:25:57 +0000

Thank you

New comment by weitzj in "K3k: Kubernetes in Kubernetes"

weitzj — Sat, 02 May 2026 09:07:37 +0000

I was thinking of people were to use an image…:$my_tag on the host cluster and some roughe pod on the child cluster (but same underlying physical nodes) somehow overwriting the local cached :my_tag, you could do something on the parent cluster.

But I don’t fully understand what you meant with content adressed :)

Maybe one has to ensure in the host cluster that the image pull policy is set to Always or all references to images have to be based on the shasum rather than Tags.

New comment by weitzj in "K3k: Kubernetes in Kubernetes"

weitzj — Sat, 02 May 2026 09:04:19 +0000

Thank you for your feedback.

I understood from the host cluster perspective you won’t see the child cluster pods. And what is the perspective on nodes?

Can you have like a host cluster spawning on host nodes and the host cluster has control over spawning separate physical nodes which contain the child cluster (api server) + workload pods ?

New comment by weitzj in "K3k: Kubernetes in Kubernetes"

weitzj — Sat, 02 May 2026 07:07:43 +0000

I don’t understand how they are separating security in the virtual mode as they only mention pods. It seems every workload still shares the underlying node, even when in virtual mode. Take for example the OCI cache on the nodes. What about cache poisoning?

New comment by weitzj in "Solod – A subset of Go that translates to C"

weitzj — Tue, 07 Apr 2026 06:20:29 +0000

Love it. And from my experience the need for Go Routines is not that urgent.

Sure when I started Go there were Go routines plastered everywhere. And now I think harder: “do I really need a go routine here?”

New comment by weitzj in "Show HN: Home Maker: Declare Your Dev Tools in a Makefile"

weitzj — Fri, 03 Apr 2026 14:39:43 +0000

I tried Nix. Worked. Then I forgot the syntax.

Therefore my middle ground is devbox.

It is like python vietualenv but backed by Nix. So I have a devbox.json file to define packages and devbox will do the Nix part for me.

I am getting a MacOS and Linux setup from this for aarch64 and x86

New comment by weitzj in "Hammerspoon"

weitzj — Fri, 13 Mar 2026 19:49:16 +0000

I love hammerspoon. That's it :D

It's lua, so you can get creative with https://fennel-lang.org/

New comment by weitzj in "EQT eyes potential $6B sale of Linux pioneer SUSE, sources say"

weitzj — Wed, 11 Mar 2026 06:22:06 +0000

Maybe for your personal workstation this might be the experience you have. But from my experience for enterprise there is RHEL, Suse and maybe Ubuntu Pro. If you are an AWS Enterprise customer you might justify Amazon Linux

New comment by weitzj in "RFC 9849. TLS Encrypted Client Hello"

weitzj — Wed, 04 Mar 2026 08:16:29 +0000

Will this have an impact on Loadbalancers? Like does one have to do client side load balancing like in gRPC?

New comment by weitzj in "Ask HN: How much PTO do you get?"

weitzj — Thu, 12 Feb 2026 23:48:21 +0000

30 days in Germany + Public Holidays

New comment by weitzj in "My AI skeptic friends are all nuts"

weitzj — Tue, 03 Jun 2025 05:57:47 +0000

I was quite happy and entlohntes when I dropped an HTML table Formates with Emojies into my prompt and told to turn it into a terraform module.

But how do you quality check this part? I am proofreading all these transformations and I am not sure if this is really faster than actually recording a VIM macro, which will do the steps I need.

New comment by weitzj in "Development on Apple Silicon with UTM"

weitzj — Thu, 17 Apr 2025 12:23:33 +0000

Love it. Also using UTM with Amazon Linux 2023 x64 on an M1 works, so you can create a local HashiCorp Packer Pipeline using the Packer UTM plugin (similar to the QEMU Packer plugin)

source "utm-cloud" "this" { iso_url = "${path.root}/dev_images/al2023-kvm-2023.6.20250303.0-kernel-6.1-x86_64.xfs.gpt.qcow2" iso_checksum = "sha256:0dc2797fe19847f6c75878dd344ab478ac0657077d9a15f2907bb2df41d8c3de" vm_arch = "x86_64" cpus = 2 memory = 4096 display_nopause = true boot_nopause = true export_nopause = true skip_nat_mapping = true communicator = "ssh" ssh_clear_authorized_keys = true ssh_private_key_file = data.sshkey.this.private_key_path ssh_host = "192.168.64.100" ssh_port = 22 ssh_username = "ec2-user" shutdown_command = "echo 'packer' | sudo -S /sbin/halt -h -p" use_cd = true cd_label = "cidata" cd_content = { "meta-data" = <

New comment by weitzj in "Some notes on Grafana Loki's new "structured metadata""

weitzj — Wed, 19 Mar 2025 06:45:40 +0000

From the Enterprise Perspektive at least for my use cases(fine grained permissions using extra id) , elasticsearch with kibana always had a solution available.

For grafana cloud and Loki you can close to a good usability with LBAC (label based access control) but you still need have many data sources to map onto each “team view” to make it user friendly.

What is missing for me is like in elastic a single datasource for all logs which every team member across all teams can see and you scope out the visibility level with LBAC