Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

im not sure people understand the security vectors. a user with docker permissions effectively has root permissions.

often, docker in docker is used to manage docker orchestration. putinng a user in a docker and peoviding docker access is security through obscurity.

on the flip side, i see people blindly installing tools and skills not understanding they are pushing context and capabilities without any significant security features.

Imagine mythos is actually exceptional hacker. if you give it a well crafted malicious prompt, its going to even more insecure.

the double edged sword is really fascinating to think about


Never to feed the trolls ... but, how does my carpenter deserve $100 an hour when he is using an electric drill and power saw I can get at Home Deepo for $100 bucks?

Most good developers are not employed because just because they can code well.

What is over is: fizzbuzz and trivial CS algorithm regurgitation as a gate.


This is great - fascinating to see the debris field and ISS paths crossing - prompted me to go check the altitude (between 190 and 680 mi).

Nice to get an insight into what's going up there without a full-blown ephemeris.


alternate futures where the 33bit versions of the i960 became the processor family of choice.

A lot of "hard" solutions are only hard until there is a legal/business requirement for them. Licensing is the poster child example for that.

> I feel AI and robotics are very important for progressing humanity

Why? And what does “progressing” mean, exactly? I’m not trying to be combative or flippant, I’m genuinely asking because the rest of your comment is a great argument for the opposite view.

I’d argue humanity will “progress” when we collectively learn to treat each other and our environment with respect and care. When we have a sense of community with our fellow people instead of placing undue value on individuals and personal gain.

Technological advance could be a boon for humanity if those were our shared values, but as it stands it seems pretty obvious that what it does instead is consolidate power in the hands of those who should never have it.

We already have the technology and resources to improve the lives of everyone, they’re just not fairly distributed.


I was disappointed that it didn't catch me editing the HTML when I tried changing the button's class to button2 or adding other classes. I wanted it to call me out when I clicked after that edit.

Maybe. A bad programmer is unlikely to get something even working so in that world nobody will depend on it because they can't even use it. A bad AI programmer (or non-programmer) can get the thing working so people will depend on it - the blast radius is now higher.

Not at the moment, but this is actually a good idea. Thanks

The big annoyance with Julian days/dates is that they start at noon, not midnight.

So?

A) This state is not inherent but a result of there being no general requirement to release the sources. Middle ware would use different licenses if that was required to have any customers.

B) Omitting the sound code did not stop the community from releasing source ports based on that release, with sound of course.


i run all my stuff in vm's built with nix

not as easy as docker, but i have a few bash scripts that simplify things for me a lot

i hope that this protects me from the sweep attacks at least


its weirdly endearing in the age of LLMs to see a word like company misspelled in a blog post

https://github.com/2b2tplace/1m_release has it at 24TB for overworldx2+end+nether

You could say they have a sort of anti-moat (drawbridge?) since you can use their product to create a competitor. But that's true of most dev tools, in a sense.

Or just use dependencies from 6 years ago and never update them like most companies i ever worked for.

In a serious creative tool you would also want a lot more creative input. At a minimum the ability to steer the animation with skeletons that feed into a control net, or something like that. And the ability to control the look and feel and create much more consistent characters. Both things that exist in good tooling, but both things that create work that will keep animators employed. But it will dramatically reduce the number of animators needed to reach a given level of "good enough".

And looking at the trajectory of the animation industry, I don't think increases in productivity will be used to raise the quality of the animation if the alternative is to just pay fewer animators


Given that you’re saying that in a discussion thread about HaikuOS, allow me to doubt it. I’ve been active with this account for more than 13 years now and do continue to find enough of the hacker ethos for me to engage with

The openclaw ban pushed me over to 5.5 for some daily usage. I feel like Opus and 5.5 are good at very different things. 5.5 can be too literal, and it does not have as much of a ‘creative’ bent whether that’s toward design, UI/UX, interpreting vague instructions, etc. So, in that way, Opus had sort of spoiled me.

On the other hand, this year I’ve been in the habit of using codex as a bug finder / audit layer, where it shines, and I can tell you, Opus makes a lot of mistakes, and as we all know struggles with laziness — and has gotten good at encoding that laziness into the codebase (// Per instructions, pass this test by default) where it can live for a long time. So, Opus had spoiled me, but more with its ability to sketch holistically than its ability to put out perfect codebases.

Upshot - it was good to switch horses for a while, as you mention. Slightly different skill sets there. And I still reach for claude especially for initial design. But right now the daily driver is 5.5 / xhigh fast mode, and it’s very capable.


> The code I get from LLM's is usually much better than what I get from my peers

Then you should seriously question for who you're working for imo.

> It also isn't lazy.

It is indeed lazy in my experience, as in being overly zealous when creating useless test cases and ignoring the important ones. I don't want it to test a sum I want to know a test that can "guarantee" me that a further change doesn't break existing code. And producing this high quality in tests is HARD, and requires a lot of steering with agents. This culture of tests code coverage is just wrong, the best code base I worked with had code coverage only on the net percent of code that matters, the rest is covered by for static type checking and integration tests


Nice, thanks for the link. It actually works, but lacks basic features as opening the whole folder with subfolders, pressing spacebar to play or loading large amounts of files, the app hangs immediately.

This does depend somewhat on your risk profile. For many folk it's pretty decent: you need to guard against online attacks, so keeping your passwords offline gives them excellent security. If you need to protect yourself against family members, it's not so good — and it also doesn't provide the level of phishing protection that an online password manager offers.

The Wapo headline is totally misleading:

"All of Musk’s claims in lawsuit against OpenAI rejected in federal trial"

https://archive.ph/LdcXN#selection-287.0-287.72


aube (npm/yarn/pnpm drop-in alternative) now has a "jailBuilds" flag that restricts access to network/filesystem access.

https://aube.en.dev/package-manager/jailed-builds.html

But this feels like a cat/mouse game.


"your job is to build the machine that will fire you"

> the victims are children and unable to make a criminal complaint.

I thought that children at any age can complain to the police. The filing side on the criminal case is "State" -- or "People", or "Rex/Regina" (and not the person complaining, regardless of the age.)


It can look like that in certain conditions. The question is why are you so eager to give critique on unrelated work appearing in a screencap, to someone who didn't produce it?

Claude Code will automatically "dumb" the TUI down a bit when it can't properly detect certain terminal capabilities, to avoid potential font rendering issues.

Likely there are some terminal caps that aren't being properly preserved inside of the sandbox. It's never bothered me since the agent itself works fine.


Technically most of their business is in packaging existing community-developed solutions to make the games run (dosbox, scummvm, compat shims and game-speficifc patches) into a nice installer. Not that that's a useless service.

So basically you said: build a successful startup. Mhm...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: