<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: yellowapple</title><link>https://news.ycombinator.com/user?id=yellowapple</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 30 May 2026 20:30:37 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=yellowapple" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by yellowapple in "Incident Report: CVE-2024-YIKES"]]></title><description><![CDATA[
<p>Which then, inexplicably, pulls left-justify as a recursive dependency.</p>
]]></description><pubDate>Mon, 11 May 2026 02:31:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=48090433</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48090433</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48090433</guid></item><item><title><![CDATA[New comment by yellowapple in "Mythical Man Month"]]></title><description><![CDATA[
<p>The lessons in that book have broadly held true for nearly every single one of my employers throughout the entirety of my career.</p>
]]></description><pubDate>Sat, 09 May 2026 03:11:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=48071450</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48071450</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48071450</guid></item><item><title><![CDATA[New comment by yellowapple in "Utah data center: Projected daily heat equivalent to 23 atomic bombs"]]></title><description><![CDATA[
<p>A single datacenter having the requisite power to travel back to 1955 many times over seems pretty meaningful to me.</p>
]]></description><pubDate>Fri, 08 May 2026 05:53:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=48059108</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48059108</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48059108</guid></item><item><title><![CDATA[New comment by yellowapple in "Let's talk about LLMs"]]></title><description><![CDATA[
<p>Your word for “competent” seems to be my word for “irresponsible”.  A failure in that “line-of-business backoffice code” is exactly the sort of thing that'd cause irreparable damage in terms of regulatory compliance (and, you know, the tangible harms those regulations are meant to prevent).  An LLM hallucination introducing bugs that make ERP transactions spontaneously disappear or allow users to bypass permissions checks on sensitive documents is the sort of thing that's catastrophic for any business that's not actually just a money laundering front (and hell, even then).  Maybe you trust agentic AI to make fewer mistakes than humans, but I sure don't.<p>Like, I'm trying to avoid hyperbole here, but you're advocating for a wild-west sort of attitude that can, will, and <i>has</i> gotten people severely defrauded or outright injured/killed.  And I know you know better than this because you've written at length about what it took to achieve SOC compliance at your current employer.</p>
]]></description><pubDate>Fri, 08 May 2026 04:45:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=48058654</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48058654</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48058654</guid></item><item><title><![CDATA[New comment by yellowapple in "The map that keeps Burning Man honest"]]></title><description><![CDATA[
<p>When I was a kid my stepdad was big into amateur rocketry, so we'd go to a lot of launches, including at Black Rock.  One of them (could've swore it was LDRS, but given the timeline it would've had to have been XPRS or maybe BALLS) was at the same time that Burning Man's MOOP crew was doing their thing, and that was my exposure to how much work goes into preserving the playa for future users/visitors (including us).  It's impressive to watch, even from long distance via binoculars.  Of course the rocket launches have similar requirements, but they involve a lot fewer than 70,000 people (but on the other hand, a much larger area of potential litter, given that rockets fly far and sometimes don't come down in one piece).<p>I live in Reno nowadays, and the locals either love or absolutely despise Burning Man, in the latter case for good reason: while Burning Man as an organization clearly cares a lot about “leave no trace” (as I've gotten to see firsthand), the Burners themselves have a tendency to leave pretty giant traces throughout Reno.  A big one is bikes getting left behind (by people who don't want to deal with a bike caked in excruciating-to-fully-clean playa dust), and there's a whole supply chain of companies here that'll find those dumped bikes (or encourage Burners to bring them directly), clean 'em up, fix 'em up, and resell them (often back to Burners the following year; rinse and repeat).  A lot of other, less-lucrative-to-refurbish-and-resell stuff unfortunately ends up clogging up every dumpster in town.</p>
]]></description><pubDate>Thu, 07 May 2026 17:27:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=48052155</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48052155</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48052155</guid></item><item><title><![CDATA[New comment by yellowapple in "Let's talk about LLMs"]]></title><description><![CDATA[
<p>A joke or not, a lot of organizations take SOC compliance and auditing seriously.  Responding to someone requiring it with “who cares, the accountants doing the audits don't know anything anyway” is unlikely to go well.</p>
]]></description><pubDate>Thu, 07 May 2026 16:46:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48051620</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48051620</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48051620</guid></item><item><title><![CDATA[New comment by yellowapple in "Let's talk about LLMs"]]></title><description><![CDATA[
<p>Since when are SOC audits not a meaningful thing?</p>
]]></description><pubDate>Mon, 04 May 2026 23:14:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=48016182</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48016182</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48016182</guid></item><item><title><![CDATA[New comment by yellowapple in "Microsoft Edge stores all passwords in memory in clear text, even when unused"]]></title><description><![CDATA[
<p>> I doubt this is an Edge-specific issue.<p>It absolutely ain't Edge-specific.  Firefox (AFAICT) also keeps stored passwords in clear-text unless encrypted with a passphrase (which is not the default on desktop; on Android there's a fingerprint/PIN check to access them, but I don't know offhand if there's any encryption involved with that).<p>Really this is true of most credentials stored within applications; unless you're providing a decryption key on open (whether explicitly or on OS-level login using some keychain mechanism), the stored credentials are probably plaintext.</p>
]]></description><pubDate>Mon, 04 May 2026 22:37:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48015881</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48015881</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48015881</guid></item><item><title><![CDATA[New comment by yellowapple in "Securing a DoD contractor: Finding a multi-tenant authorization vulnerability"]]></title><description><![CDATA[
<p>Probably based on insider info to some degree; if you already do any sort of work for the DoD, then that tends to help narrow the scope of the search for vulnerable things to exploit.</p>
]]></description><pubDate>Mon, 04 May 2026 22:33:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=48015844</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48015844</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48015844</guid></item><item><title><![CDATA[New comment by yellowapple in "The text mode lie: why modern TUIs are a nightmare for accessibility"]]></title><description><![CDATA[
<p>I already do use tiling window managers and they don't really accomplish the “if you launch a graphical app in a terminal window it takes over that terminal window” flow.  Closest I've found is Niri's support for tabbed windows, but even that's just sticking the graphical app window on top of the terminal window instead of the terminal window itself becoming the app window.</p>
]]></description><pubDate>Mon, 04 May 2026 16:16:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=48010673</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48010673</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48010673</guid></item><item><title><![CDATA[New comment by yellowapple in "The text mode lie: why modern TUIs are a nightmare for accessibility"]]></title><description><![CDATA[
<p>I feel like the better solution here (than trying to shoehorn a GUI into an interface meant for text) is to make terminal windows graphically-aware, like how things work in Plan 9.</p>
]]></description><pubDate>Mon, 04 May 2026 02:13:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48003872</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=48003872</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48003872</guid></item><item><title><![CDATA[New comment by yellowapple in "USB for Software Developers: An introduction to writing userspace USB drivers"]]></title><description><![CDATA[
<p>Any keyboard can type “→” if you set up a compose key :)</p>
]]></description><pubDate>Wed, 08 Apr 2026 22:53:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47697249</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47697249</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47697249</guid></item><item><title><![CDATA[New comment by yellowapple in "USB for Software Developers: An introduction to writing userspace USB drivers"]]></title><description><![CDATA[
<p>Perfect timing.  I'm expecting to get my hands on a MOTU MIDI Express XT from my local Guitar Center within the next couple days (I paid for it when it arrived there a couple weeks ago, but they have a mandatory waiting period on used equipment to make sure it ain't stolen), which unfortunately uses some weird proprietary protocol instead of class-compliant MIDI-over-USB — so any use over USB from my PCs (nearly all of which are running Linux, OpenBSD, Haiku, or something other than Windows or macOS) is a no-go.  This is okay for my immediate use cases (I just need it to route between some synth modules and controllers, without necessarily needing the PC to do any processing in-between), but it'd be cool to get the PC side of things working, too.<p>There's an existing out-of-tree Linux driver¹ that looks promising, but AFAICT it only does the bare minimum of exposing the MIDI ports for use with e.g. JACK, and it's also unclear how stable it is and whether it really does support the XT (the README says the kernel panic got fixed, but there are open issues about it; the README says the XT's supported, but there are open issues about that, too).  I'd like to be able to create new routing presets and stuff like what the proprietary companion app can do, and I'd also like to be able to use the thing without needing to shove extra drivers into my kernel, and I'd also like to be able to use the thing on my OpenBSD and Haiku boxen, so I've been perusing LibUSB docs since a userspace USB driver that then presents the relevant MIDI ports <i>and</i> some tooling to reroute the MIDI ports as desired seems like something useful.  This article happens to be exactly what I've been looking for w.r.t. a starting point for such a userspace driver.<p>----<p>¹: <a href="https://github.com/vampirefrog/motu" rel="nofollow">https://github.com/vampirefrog/motu</a></p>
]]></description><pubDate>Wed, 08 Apr 2026 22:51:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=47697239</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47697239</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47697239</guid></item><item><title><![CDATA[New comment by yellowapple in "US and Iran agree to provisional ceasefire"]]></title><description><![CDATA[
<p>> but many of its refineries are tuned for processing oil with a chemical composition that isn't found in the US, or not found in sufficient quantity<p>How difficult would it be to retune those refineries to process domestic oil instead?  In a world where a heavy-handed extreme like “banning oil exports” is on the table, surely doubling down on the heavy-handedness wouldn't be out of the question.</p>
]]></description><pubDate>Wed, 08 Apr 2026 22:17:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47697011</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47697011</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47697011</guid></item><item><title><![CDATA[New comment by yellowapple in "US and Iran agree to provisional ceasefire"]]></title><description><![CDATA[
<p>>  One merely has to look at current US gas prices to see how utterly silly that notion is!<p>We could probably slash gas prices by banning oil exports, thus removing domestic oil supply from global market pricing (barring smuggling).  The oil industry would probably hate that, though, for obvious reasons.<p>Ultimately, though, this is yet another wakeup call for why an economy and society built around lighting a finite resource on fire is a bad idea, and hopefully this time around that wakeup call sticks.</p>
]]></description><pubDate>Wed, 08 Apr 2026 02:47:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=47684378</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47684378</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47684378</guid></item><item><title><![CDATA[New comment by yellowapple in "US and Iran agree to provisional ceasefire"]]></title><description><![CDATA[
<p>> But proxies aside (which is a big aside), they were fairly self contained until we started hitting them.<p>That “big aside” is an understatement, on par with ”but CIA-funded death squads aside the US has been pretty hands-off with Latin America”.</p>
]]></description><pubDate>Wed, 08 Apr 2026 02:39:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47684312</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47684312</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47684312</guid></item><item><title><![CDATA[New comment by yellowapple in "AI singer now occupies eleven spots on iTunes singles chart"]]></title><description><![CDATA[
<p>Not to mention vaporwave, which typically boils down to “take song, reduce bass, slow down”.<p>Or vaporwave's inverse, nightcore, which typically boils down to ”take song, increase bass, speed up”.</p>
]]></description><pubDate>Tue, 07 Apr 2026 09:00:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=47672462</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47672462</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47672462</guid></item><item><title><![CDATA[New comment by yellowapple in "AI singer now occupies eleven spots on iTunes singles chart"]]></title><description><![CDATA[
<p>Indeed, like toiling in factories and mines and farms.</p>
]]></description><pubDate>Tue, 07 Apr 2026 08:56:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=47672432</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47672432</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47672432</guid></item><item><title><![CDATA[New comment by yellowapple in "AI singer now occupies eleven spots on iTunes singles chart"]]></title><description><![CDATA[
<p>Finding those thousands of matching human-recorded tracks and curating them into playlists seems like a benign use of music-aware ML models.</p>
]]></description><pubDate>Tue, 07 Apr 2026 08:56:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=47672427</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47672427</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47672427</guid></item><item><title><![CDATA[New comment by yellowapple in "AI singer now occupies eleven spots on iTunes singles chart"]]></title><description><![CDATA[
<p>> We are not fine with mass-producing framed paintings that are "art".<p>Sure “we” are; we just call them “prints” or “posters” instead of ”paintings”.</p>
]]></description><pubDate>Tue, 07 Apr 2026 08:54:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47672412</link><dc:creator>yellowapple</dc:creator><comments>https://news.ycombinator.com/item?id=47672412</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47672412</guid></item></channel></rss>