Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

As someone who knows perfectly well that MS and Apple don't have the best track record of building the best utility tools (which is why there are thousands of incredibly useful 3rd-party utility applications), I wish end-users would understand that giving them a choice is more important than forcing them to use only OS-provided functionality.

You aren't required to use anything that you don't like. The fact that you are complaining about a non-problem is odd.

Lastly, incremental improvements generally come from outside the OS. If FF ends up adding something novel/interesting to their emoji picker, the major OS's will probably adopt it at some point. That would never happen in your world, where only the biggest companies get to innovate.


I’ve had to learn that a frugal mindset doesn't always scale to Corporate IT. As a budget holder, I once passed on a superior paid product for a 'free' OSS alternative that didn't actually fit our needs.

I fell into the trap of spending the company’s money as if it were my own. Looking back, the paid version would have saved the project and boosted my professional growth far more than the cost savings did.


In what way is it "not a special bug"? It's a publicly known root access from RCE exploit. Those cannot be a dime a dozen. I'm sure it's especially interesting for any shared hosting services which might be affected, and could be delayed.

What constitutes "special" for you?


I have no idea why people still even attempt to believe anything that comes out of Altman's mouth. Do we not learn from the past?

@dang Not that it really matters, but why is this not a duplicate of my post? https://news.ycombinator.com/item?id=47962269

The members of the kernel security team are not allowed to tell their employers anything that happens on the security list. They are there as individual members, not as employees.

And try to define "major distros" in a way that actually means anything viable.

If you just want to count users, then that would only be Android (everything else is a rounding error.) After Android, that would be Yocto, and then Debian. All distros after that are mere fractions of overall users compared to those 3 by number of running systems alone.

If you want to count it as "$ spent on Linux" then that cuts out Android and Yocto and Debian as those distros are free, and would focus purely on the tiny installed base of paid Linux systems, and cut everyone else out.

So what is a fair way to do this other than "we notify no one, and tell everyone to always update their systems to the latest stable releases that we support."

Especially as there is no way for us to determine your use case (i.e. if a specific bug is a vulnerability for you or not.)


I don't like that word, which was previously a common part of my vocabulary, being forever ruined?

The prize is a great book, you just have to keep the author's point of view in mind. (He's got a few blind spots with respect to the downsides of oil.)

The book does an amazing job of explaining the strategic structure of WWII in a simple and clear and way.

If you want to understand modern history, you can't skip it. It's also a just a riveting read full of wild characters.


Any plans to support installations through Homebrew?

Not more stupid IMO, but significnatly less token efficient or they have decreased tokens for subscription users, difficult to know.

Might have to trade it in for the new Mac Studio.

That doesn’t matter. The LLM will still answer based on what it knows about Satoshi Nakamoto, rather than just based on the writing style.

We have been over the politically motivated slander many times; it's boring.

The user above you could have explained what uncensored models he believes are more capable than Grok. Maybe the Chinese open-weights models are superior to Grok at the moment.


My blog posts have a reasonably unique writing style. When I asked opus to work out who wrote an unpublished paragraph, all it did was select the decent insults and search the web for them.

After that it gave up and said it didn't know.

So either, Kelsey writes in such a unique style that its really obvious, or they repeat themselves with goto phrases that give them away.


So I pasted in a long-ish letter that I'd written to my pastor about a theological topic, and asked it to guess who I was. Nailed it. Then cut it in half. Nailed it again. Lowest it correctly ID'd me at was 700 words.

Pretty sure there's very little theological stuff with my name on it; the majority if its named data on me should come from open-source development.


The second mortgage is to pay for the first mortgage

1) You're missing the point. Overseer can do this, yes. AI model can work with ANY REST API.

2) How does Overseerr help? I've never really understood it if I could give my family access to Overseerr over a VPN I could just give them sonarr / radarr directly.


Yeah I guess two companies who would otherwise be considered going for bankruptcy have models too expensive to run. As they don't see themselves making money any time soon, they have to turn every future model into a weird fascination.

I'm guessing it ultimately comes down to the legal / financial / career incentives.

My impression is that the market currently rewards visible software functionality with little concern for invisible risk.

If we flipped the script, and investors were personally, criminally, and civilly liable for computer breaches, I imagine this problem would disappear almost overnight.


Openclaw uses the API key for Sonarr / Radarr, no secrets management (yet).

Though egress is heavily restricted for OpenClaw and everything is behind a FW.


Geekbench is basically trash. People keep using it for comparing Mac performance because many of the things people usually benchmark don't run on Macs.

But single-number outputs like that are useless. Is the number ~10% higher because it's consistently ~10% faster at everything, or because it's 100% faster on a minority of things and slower at everything else? The first one is pretty unlikely when comparing processors with different designs, and indeed that isn't it:

https://www.phoronix.com/review/apple-m4-intel-amd-linux/4

https://www.phoronix.com/review/apple-m4-intel-amd-linux/5

https://www.phoronix.com/review/apple-m4-intel-amd-linux/6

https://www.phoronix.com/review/apple-m4-intel-amd-linux/7

The CPU in those charts with a similar TDP to the M4 is the Ryzen HX 370. You can see that the M4 is ahead of it in a few of the tests (C-Ray, DuckDB, PyBench, FLAC) but in even more of them it's at the bottom of the stack.

And the ~20W TDP is a nice parlor trick (the HX 370 is the only one on the list that competes with it there) but in a desktop CPU that's pretty irrelevant. Whereas if you compare it to the CPUs that can be had for a similar price (e.g. Ryzen 9700X, 65W), it's only ahead in C-Ray and FLAC while losing quite badly in most of the others and subjecting you to unupgradable soldered memory that the PC hardware doesn't.


> 1. Stuff happens in the wrong order. […] You don't want the feedback loop after the commit you want it before. Let me do an enforced pre-commit hook to run the jobs remotely on the forge and provide the feedback to the user before they push.

My approach is to utilize https://pre-commit.com/ to have all checks available to run locally during commit (or push), but leave it to contributors whether they want to run it or not. If they don't, the checks still run on the forge after pushing. The upside of this approach is that it still allows contributors to commit without internet access or the forge being down.

> 3. PRs are too inflexible. I don't need 4 eyes on every change, especially in a universe where LLMs exist. The global GDP lost annually to senior engineers staring at a four-line PR waiting for someone — anyone — to type 'LGTM' could fund a moon mission.

Well, that's possible with Github and is just a matter how permissions to merge PRs are configured. Just let every contributor merge changes without explicit approval. And if you want LLM approval, make that a Github Action with mandatory success for merging.

> 4. Stacked PRs are just better. […]

Seems like Github is working on this: https://github.github.com/gh-stack/

> 8. On the flip side, since I need to be online all the time to really work with a team […]

Sure, for communication you need internet access, but working on code can be much more efficient if you can do so without relying on internet access and the forge being available.

I'd even argue working on issues and reviewing PRs should be available entirely offline too with just the state getting synced whenever internet connectivity to the forge is available.


Maybe, but I can see why people don't want to deal with red tape to do someone a favour.

Once I tried to help an open source project with a bug and was rejected because I didn't agree to support the Ukraine, that all sexual orientations are equal, or whatever else the long winded contributor rules were.

The issue isn't that I don't support those things, it's more that it's like someone handing me a 3 page form to fill out for picking their keys up for them.

There also may be conventions on disclosure and exploits, but they're not based on the law or rules of society.


It also “hits different” when you’re the group paying for the bureaucracy.

I really feel I have to shill for Fastpanel (www.fastpanel.direct) when it comes to graphical web server UIs.

A couple of years ago I got really sick and tired of cPanel, and started trying all these alternatives. I'm not an Arch Linux SSH freak, I need a GUI. And none of the panels had old school functions like setting up FTP and such.

So good luck to the Estonian (I think?) developers of Fastpanel and good riddance to that bloated slug cPanel.


"my model is the most dangerous"

"No mine is the most dangerous"

"Nuh uh mine is"

"Mine could kill everyone!"

"Mine could do it faster!"

"Prove it!!!"

This is where we are


If they do that, they lose market share to their competitors, which kills their ability to raise investor capital, which kills the company, because they are almost entirely funded by investor capital.

I think the main reason people are buying mac minis is because of how much user friendly it is.

You can expect a software engineer or a devops guy to run stuff in a VPS but a slightly less technical person won't ever go there. In contrast, people are familiar with macOS and that's way less scary to setup.

The added benefit of the mac mini is that it can also double down as a second device one could use for something else too


I remember seeing a recent analysis where the vast majority of cables from Amazon misreported their capabilities. Is this tool going to be able to catch those, or blindly report what the chip advertises?

In the UK they have this issue called "TV pickup" (https://en.wikipedia.org/wiki/TV_pickup). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity demand and leads to real outages. It was a mystery at first but now is accounted for.

I suspect the global internet is facing a "agent pickup" problem where significant changes (e.g., releases of new frontier models or new package versions) puts unpredictable pressure on arbitrary infrastructure as millions of distributed agents act to address the change simultaneously.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: