<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: zbentley</title><link>https://news.ycombinator.com/user?id=zbentley</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 11 Apr 2026 08:25:53 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=zbentley" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by zbentley in "AI assistance when contributing to the Linux kernel"]]></title><description><![CDATA[
<p>If a linter insists on a weird line of code, I’m probably commenting that line as “recommended by whatever-linter”, yes.</p>
]]></description><pubDate>Fri, 10 Apr 2026 21:06:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=47723679</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47723679</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47723679</guid></item><item><title><![CDATA[New comment by zbentley in "EFF is leaving X"]]></title><description><![CDATA[
<p>> groups that actively pursue the government for violating our constitutional rights<p>Could you share some examples?</p>
]]></description><pubDate>Fri, 10 Apr 2026 13:05:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=47717553</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47717553</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47717553</guid></item><item><title><![CDATA[New comment by zbentley in "Women are getting most of the new jobs. What's going on with men?"]]></title><description><![CDATA[
<p>Citation needed, bad faith suspected.<p>Even adjusted for maternity and career entry/exit differences, the gender pay gap is still big and real. And while there is overlap and outliers, many more women-dominated industries are at lower pay segments (and with fewer benefits) than industries dominated by men.</p>
]]></description><pubDate>Fri, 10 Apr 2026 12:55:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47717416</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47717416</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47717416</guid></item><item><title><![CDATA[New comment by zbentley in "Claude mixes up who said what and that's not OK"]]></title><description><![CDATA[
<p>Practically, the performance loss of making it truly repeatable (which takes parallelism reduction or coordination overhead, not just temperature and randomizer control) is unacceptable to most people.</p>
]]></description><pubDate>Thu, 09 Apr 2026 12:13:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47702661</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47702661</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47702661</guid></item><item><title><![CDATA[New comment by zbentley in "You can't cancel a JavaScript promise (except sometimes you can)"]]></title><description><![CDATA[
<p>I was always surprised that Python, of all languages, didn’t support a robust Thread.stop.<p>Before the removal of the GIL in recent years, Python seemed well-positioned to leverage the GIL to offer safe thread-cancellation points that didn’t leave interpreter internals in a corrupted state.<p>That’s not necessarily an endorsement of the <i>idea</i> of Thread.stop in many cases, since stopped user code can cause broken assumptions at a high level no matter what, but it has its uses. Erlang’s exit/2 is proof of that, though it is a very sharp and rarely-appropriate tool.</p>
]]></description><pubDate>Thu, 09 Apr 2026 03:15:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=47698910</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47698910</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47698910</guid></item><item><title><![CDATA[New comment by zbentley in "Are We Idiocracy Yet?"]]></title><description><![CDATA[
<p>Sumo?</p>
]]></description><pubDate>Tue, 07 Apr 2026 12:37:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=47674351</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47674351</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47674351</guid></item><item><title><![CDATA[New comment by zbentley in "AWS engineer reports PostgreSQL perf halved by Linux 7.0, fix may not be easy"]]></title><description><![CDATA[
<p>I'd say about 2/3 of the places I've worked started on Linux without a Windows precedent other than workstations. I can't speak for the experience of the founding staff, though; they might have preferred Ubuntu due to Windows experience--if so, I'm curious as to why/what those have to do with each other.<p>That said, Ubuntu in large production fleets isn't too bad. Sure, other distros are better, but Ubuntu's perfectly serviceable in that role. It needs talented SRE staff making sure automation, release engineering, monitoring, and de/provisioning behave well, but that's true of any you-run-the-underlying-VM large cloud deployment.</p>
]]></description><pubDate>Mon, 06 Apr 2026 15:00:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=47661821</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47661821</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47661821</guid></item><item><title><![CDATA[New comment by zbentley in "AWS engineer reports PostgreSQL perf halved by Linux 7.0, fix may not be easy"]]></title><description><![CDATA[
<p>I’ve seen more 5k+-core fleets running Ubuntu in prod than not, in my career. Industries include healthcare, US government, US government contractor, marketing, finance.</p>
]]></description><pubDate>Sun, 05 Apr 2026 16:46:27 +0000</pubDate><link>https://news.ycombinator.com/item?id=47651223</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47651223</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47651223</guid></item><item><title><![CDATA[New comment by zbentley in "Gone (Almost) Phishin'"]]></title><description><![CDATA[
<p>I interpreted the post as saying the support emails were legitimate, opened fraudulently (or at least some were) as pretext for the phishing phone call.</p>
]]></description><pubDate>Fri, 03 Apr 2026 01:59:18 +0000</pubDate><link>https://news.ycombinator.com/item?id=47622453</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47622453</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47622453</guid></item><item><title><![CDATA[Built-in workaround for applications hiding under the MacBook Pro notch (2024)]]></title><description><![CDATA[
<p>Article URL: <a href="https://flaky.build/built-in-workaround-for-applications-hiding-under-the-macbook-pro-notch/">https://flaky.build/built-in-workaround-for-applications-hiding-under-the-macbook-pro-notch/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47619995">https://news.ycombinator.com/item?id=47619995</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 02 Apr 2026 20:50:41 +0000</pubDate><link>https://flaky.build/built-in-workaround-for-applications-hiding-under-the-macbook-pro-notch/</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47619995</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47619995</guid></item><item><title><![CDATA[New comment by zbentley in "Why the US Navy won't blast the Iranians and 'open' Strait of Hormuz"]]></title><description><![CDATA[
<p>> pariah<p>Which recent foreign policy actions by Russia indicate that they care overmuch about soft power, or consider its loss to be a significant risk?</p>
]]></description><pubDate>Thu, 02 Apr 2026 12:20:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=47613452</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47613452</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47613452</guid></item><item><title><![CDATA[New comment by zbentley in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>All sorts of reasons, but this isn't a left-pad situation. Axios's functionality is something provided by a library in a lot of languages (C/C++ with libcurl and friends, Python with requests, Rust with reqwest, and so on).<p>That's not to say it's inherently necessary for it to be a third-party package (Go, Ruby, and Java are counterexamples). But this isn't a proliferation/anemic stdlib issue.</p>
]]></description><pubDate>Tue, 31 Mar 2026 15:43:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=47589084</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47589084</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47589084</guid></item><item><title><![CDATA[New comment by zbentley in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Pinning, escrowing, and trailing all help, but I'm not sure "this step will be eliminated" is inevitable.<p>Package manager ecosystems are highly centralized. npm.org could <i>require</i> MFA (or rate limit, or email verification, or whatever) and most packagers would gripe but go along with this. A minority would look for npm competitors that didn't have this requirement, and another minority would hack/automate MFA and remove the added security, but the majority of folks would benefit from a centralized requirement of this sort.</p>
]]></description><pubDate>Tue, 31 Mar 2026 15:39:54 +0000</pubDate><link>https://news.ycombinator.com/item?id=47589012</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47589012</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47589012</guid></item><item><title><![CDATA[New comment by zbentley in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Requiring a human-in-the-loop for final, non-prerelease publication doesn't seem like that onerous of a burden. Even if you're publishing multiple releases a day on the regular (in which case ... I have questions, but anyway) there are all sorts of automations that stay secure while reducing the burden of having to manually download an artifact from CI, enter MFA, and upload it by hand.</p>
]]></description><pubDate>Tue, 31 Mar 2026 15:36:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47588957</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47588957</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47588957</guid></item><item><title><![CDATA[New comment by zbentley in "Welcome to FastMCP"]]></title><description><![CDATA[
<p>This is right. It’s not about scoping auth, it’s about preventing secret misuse/exfil.<p>(Moved from wrong sub)</p>
]]></description><pubDate>Tue, 24 Mar 2026 21:46:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47509889</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47509889</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47509889</guid></item><item><title><![CDATA[New comment by zbentley in "Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised"]]></title><description><![CDATA[
<p>That's a good thing (disruptive "firebreak" to shut down any potential sources of breach while info's still being gathered). The solve for this is artifacts/container images/whatnot, as other commenters pointed out.<p>That said, I'm sorry this is being downvoted: it's unhappily observing facts, not arguing for a different security response. I know that's toeing the rules line, but I think it's important to observe.</p>
]]></description><pubDate>Tue, 24 Mar 2026 17:02:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47505813</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47505813</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47505813</guid></item><item><title><![CDATA[New comment by zbentley in "Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised"]]></title><description><![CDATA[
<p>This is the right answer. Unfortunately, this is very rarely practiced.<p>More strangely (to me), this is often addressed by adding loads of fallible/partial caching (in e.g. CICD or deployment infrastructure) for package managers rather than building and publishing temporary/per-user/per-feature ephemeral packages for dev/testing to an internal registry. Since the latter's usually less complex and more reliable, it's odd that it's so rarely practiced.</p>
]]></description><pubDate>Tue, 24 Mar 2026 16:49:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=47505576</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47505576</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47505576</guid></item><item><title><![CDATA[New comment by zbentley in "Microsoft's "fix" for Windows 11"]]></title><description><![CDATA[
<p>I like your dream. I think financial incentives make it unlikely, though. The writing's been on the wall for user-friendly general computing OSes for awhile, I think. So Microsoft's incentive is to treat Windows like a loss leader (even if it's not) and use it as a funnel for services/subscription revenue from their other products.<p>I hate that/wish it weren't so, but I think the last ~15y of M$ decisionmaking makes a lot of sense in that context.</p>
]]></description><pubDate>Tue, 24 Mar 2026 13:35:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=47502376</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47502376</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47502376</guid></item><item><title><![CDATA[New comment by zbentley in "Microsoft's "fix" for Windows 11"]]></title><description><![CDATA[
<p>> I suspect it's going to hurt iPad sales though, as a real Mac running MacOS is vastly more capable than any iPad.<p>Maybe, but I somewhat doubt it, for a few reasons:<p>- Kids like iPads for gaming/video watching, and the overhead of computer interfaces for them might discourage laptopping (understandable for littler kids; regrettable loss of tech familiarity for older ones, but true regardless).<p>- Parents/rough users like iPads 'cuz there aren't moving parts or gaps to get hammered and damaged, though the screen is a risk.<p>- Cellular iPads/huge phone-alikes are pretty popular, and the vast majority of users are unfamiliar with the idea of hooking a computer-shaped device up to cellular internet.<p>- iPads are easier to MDM-manage/lock down. You can do that on MacOS too, of course, but a lot of folks find it easier to regulate kid/employee/etc. use of an iPad because the management system is familiar and simpler.<p>- iPads feel like a big phone. That's a pretty intuitive switch for a lot of folks who either don't have keyboarded computers at all, or associate them with non-fun (work/school) computing. Silly distinction to draw, to be sure, but very significant in the minds of many users. The single-brick/touch aspect of iPads is desirable enough that a fold-out laptop isn't going to overlap with a lot of those users.</p>
]]></description><pubDate>Tue, 24 Mar 2026 13:29:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=47502305</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47502305</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47502305</guid></item><item><title><![CDATA[New comment by zbentley in "Google details new 24-hour process to sideload unverified Android apps"]]></title><description><![CDATA[
<p>That only grants market control so long as Microsoft keeps releasing new APIs, otherwise the people reimplementing them like valve/wine will catch up.<p>I think Valve’s play isn’t to steal tons of Microsoft’s gaming market share; their play is to just get enough of a market that game developers are incentivized to code to the APIs that work well in Proton, not whatever the latest and greatest in Windows is. If we cross that inflection point, Microsoft’s PC gaming chokehold will be on life support.</p>
]]></description><pubDate>Fri, 20 Mar 2026 12:30:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47453642</link><dc:creator>zbentley</dc:creator><comments>https://news.ycombinator.com/item?id=47453642</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47453642</guid></item></channel></rss>