<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: xmcqdpt2</title><link>https://news.ycombinator.com/user?id=xmcqdpt2</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 13 Jun 2026 08:52:57 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=xmcqdpt2" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by xmcqdpt2 in "AI agent runs amok in Fedora and elsewhere"]]></title><description><![CDATA[
<p>This is the issue with all the talks about alignement and such. As usual, the problem here wasn't that the agent was dishonest, the problem is that the agent was dumb. If it is a supply chain attack in the making, whoever was driving it would have told the agent to be good and helpful. The agent tried its best, which was not enough.<p>Alignement is the idea that we should be worried about dishonest smart LLMs when really most of the problems are due to dumb lazy gullible LLMs. It's critihype.</p>
]]></description><pubDate>Thu, 11 Jun 2026 11:19:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48488843</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=48488843</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48488843</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "C array types are weird"]]></title><description><![CDATA[
<p>Sometimes you have to use C but really they should be doing HPC in fortran. It has C FFI, it can compile to static programs and to dynamic libraries, it has C-like performance, etc.<p>(It's not as portable as C though, and the compilers have more bugs.)</p>
]]></description><pubDate>Wed, 27 May 2026 12:41:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48293371</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=48293371</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48293371</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "ClojureScript Gets Async/Await"]]></title><description><![CDATA[
<p>After reading<p><a href="https://hypermedia.systems/" rel="nofollow">https://hypermedia.systems/</a><p>I came to the conclusion that the best frontend is no frontend.</p>
]]></description><pubDate>Fri, 08 May 2026 11:16:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061515</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=48061515</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061515</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Cloudflare to cut about 20% of its workforce"]]></title><description><![CDATA[
<p>That's basically the meme, right: You rail against corporations and yet you work for one. Curious.<p>Anyway in general, corporations are sticky. They save resources through scale and collaboration. Famously this is a problem for free market true believers because if you believe that the market is the most efficient mean of organizing people then you would expect firms to operate internally as free markets (or disappear). There is a whole body of work about it,<p><a href="https://en.wikipedia.org/wiki/Theory_of_the_firm" rel="nofollow">https://en.wikipedia.org/wiki/Theory_of_the_firm</a><p>In practice you can't just become your own boss and compete against firms.</p>
]]></description><pubDate>Fri, 08 May 2026 11:06:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=48061429</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=48061429</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48061429</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Appearing productive in the workplace"]]></title><description><![CDATA[
<p>You tell Claude to review it and if it breaks something you blame Claude. No one can get mad at you for it because they don't want to look like luddites.</p>
]]></description><pubDate>Wed, 06 May 2026 23:52:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=48043508</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=48043508</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48043508</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Appearing productive in the workplace"]]></title><description><![CDATA[
<p>It's the style of "blazing fast library made with :heart: in rust :crab:" that was popular in github README.md. My guess is that because the models are told to use md they overfit to the style of md documents too.</p>
]]></description><pubDate>Wed, 06 May 2026 23:48:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48043458</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=48043458</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48043458</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Copy Fail"]]></title><description><![CDATA[
<p>True but that requires another  vulnerability.<p>It's security in depth. You build your server in a way that it doesn't allow remote code execution, and then you run it with an unprivileged user so that if it does allow it, the consequences are limited. And if running arbitrary code is a feature (you are github or whatever) you use VMs.</p>
]]></description><pubDate>Fri, 01 May 2026 11:26:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47973503</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47973503</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47973503</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"]]></title><description><![CDATA[
<p>Java has Security Managers. I've never seen anyone use it in practice though, so it probably doesn't work very well.<p>I think it would be hard to get any kind of usable capability system without algebraic effects like those of Koka or Scala libraries.<p>EDIT: Apparently Security Managers are deprecated and slated for removal.</p>
]]></description><pubDate>Tue, 14 Apr 2026 11:39:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=47764285</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47764285</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47764285</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"]]></title><description><![CDATA[
<p>From a purely aesthetic point of view, this is what I enjoy so much about C and Fortran. You look up a Rust crate and it hasn't been touched in 5 years. That means it's unmaintained and unusable, don't add it to your project or you will have a bad time.<p>You find a C or fortran library that hasn't been touched in 20 years and (sometimes) it's just because it's complete and there hasn't been any reason to update any parts of it. You can just add it to your project and it will build and be usable immediately. I wish we had more of those.</p>
]]></description><pubDate>Tue, 14 Apr 2026 11:30:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47764208</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47764208</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47764208</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Someone bought 30 WordPress plugins and planted a backdoor in all of them"]]></title><description><![CDATA[
<p>JVM is fast for certain use cases but not for all use cases. It loads slowly, takes a while to warm up, generally needs a lot of memory and the runtime is large and idiosyncratic. You don't see lots of shared libraries, terminal applications or embedded programs written in Java, even though they are all technically possible.</p>
]]></description><pubDate>Tue, 14 Apr 2026 11:20:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47764104</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47764104</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47764104</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "GitHub Stacked PRs"]]></title><description><![CDATA[
<p>You don't even need to go all V8, you could just build something like LuaJIT and get most of the way there. LuaJIT is like 10k LOCs and V8 is 3M LOC.<p>The real reason is that it is a deliberate choice by the CPython project to prefer extensibility and maintainability to performance. The result is that python is a much more hackable language, with much better C interop than V8 or JVM.</p>
]]></description><pubDate>Tue, 14 Apr 2026 11:00:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=47763971</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47763971</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47763971</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "GitHub Stacked PRs"]]></title><description><![CDATA[
<p>It's interesting that branches, which is a marquee feature of git, became less important at the same time as git ate all the other vcs. Outside of OS projects, almost all development is trunk based with continuous releases.<p>Maybe branching was an important reason to adopt git but now we'd probably be ok with a vcs that doesn't even support them.</p>
]]></description><pubDate>Tue, 14 Apr 2026 10:52:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47763911</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47763911</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47763911</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "We found an undocumented bug in the Apollo 11 guidance computer code"]]></title><description><![CDATA[
<p>To start, this is more or less an advertising piece for their product. It's pretty clear that they want to sell you Allium. And that's fine! They are allowed! But even if that was written by a human, they were compensated for it. They didn't expend lots of effort and thinking, it's their job.<p>More importantly, it's an article about using Claude from a company about using Claude. I think on the balance it's very likely that they would use Claude to write their technical blog posts.</p>
]]></description><pubDate>Tue, 07 Apr 2026 13:18:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47674939</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47674939</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47674939</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "We found an undocumented bug in the Apollo 11 guidance computer code"]]></title><description><![CDATA[
<p>I'm sure some human writers would write:<p>> The specification forces this question on every path through the IMU mode-switching code. A reviewer examining BADEND would see correct, complete cleanup for every resource BADEND was designed to handle.<p>> The specification approaches from the other direction: starting from LGYRO and asking whether any paths fail to clear it.<p>> *Tests verify the code as written; a behavioural specification asks what the code is for.*<p>However this is a blog post about using Claude for XYZ, from an AI company whose tagline is<p>"AI-assisted engineering that unlocks your organization's potential"<p>Do you really think they spent the time required to actually write a good article by hand? My guess is that they are unlocking their own organizations potential by having Claude writes the posts.</p>
]]></description><pubDate>Tue, 07 Apr 2026 13:12:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=47674849</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47674849</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47674849</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "We found an undocumented bug in the Apollo 11 guidance computer code"]]></title><description><![CDATA[
<p>Then pangram isn't very good, because that article is full of Claude-isms.</p>
]]></description><pubDate>Tue, 07 Apr 2026 11:42:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47673668</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47673668</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47673668</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Microsoft hasn't had a coherent GUI strategy since Petzold"]]></title><description><![CDATA[
<p>emacs + bitmap font for me and I'm continually shocked when I have to use something else by how it is blurry and laggy.</p>
]]></description><pubDate>Mon, 06 Apr 2026 13:00:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47660352</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47660352</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47660352</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "Subscription bombing and how to mitigate it"]]></title><description><![CDATA[
<p>As is often repeated, the optimal amount of fraud is not zero<p><a href="https://www.bitsaboutmoney.com/archive/optimal-amount-of-fraud/" rel="nofollow">https://www.bitsaboutmoney.com/archive/optimal-amount-of-fra...</a><p>They are optimizing towards making it easy to purchase things on a whim.</p>
]]></description><pubDate>Thu, 02 Apr 2026 11:44:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47613122</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47613122</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47613122</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "ChatGPT won't let you type until Cloudflare reads your React state"]]></title><description><![CDATA[
<p>AI providers also claim to have small marginal costs. The costs of token is supposedly based on pricing in model training, so not that different from eg your server costs being low but the content production costs being high. And in many cases AI companies are direct competitors (artists, musicians etc.)<p>(TBH it's not clear to me that their marginal costs are low. They seem to pick based on narrative.)</p>
]]></description><pubDate>Mon, 30 Mar 2026 11:29:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47572935</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47572935</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47572935</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "I tried to prove I'm not AI. My aunt wasn't convinced"]]></title><description><![CDATA[
<p>One time pads only offer perfect security once!</p>
]]></description><pubDate>Thu, 26 Mar 2026 11:06:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47529005</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47529005</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47529005</guid></item><item><title><![CDATA[New comment by xmcqdpt2 in "The way CTRL-C in Postgres CLI cancels queries is incredibly hack-y"]]></title><description><![CDATA[
<p>Zero trust security which is becoming increasingly common is based on removing the internal / external network dichotomy entirely. Everything should be assumed to be reachable from the open internet (so SSO, OIDC everywhere.)</p>
]]></description><pubDate>Mon, 23 Mar 2026 13:34:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=47489333</link><dc:creator>xmcqdpt2</dc:creator><comments>https://news.ycombinator.com/item?id=47489333</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47489333</guid></item></channel></rss>