HNHacker News
TopNewBestAskShowJobs

Quothling

1,010 karma · joined January 27, 2024

submissionscomments
Quothling··on LLMs are eroding my software engineering career and I don't know what to do
With opus 4.8 we're frankly aproaching the 100% of the work, but only if tasked by the right people. A decade ago I worked as an enterprise architect and left it because I preffered coding. Now I'm an enterprise architect again, and we're at the point where I've setup a Microsoft Fabric and integrated a ADLS Gen2 with a Lakehouse building Dimension and Fact tables for our Business Intelligence people with Cowork. A month ago I didn't know what Dimension and Fact tables were in a datawarehouse and now I've not only setup a flow for it I've made it more accurate than what they had before because I understood how BC365 worked and the previous consultants didn't.

We had a PoC in place to get fabric, it had like 500 hours allocated for what I did in a week with cowork, and my product is actually on secure vnet network with Azure identity security with both a test and a production environment delivering actual data.

Cowork even made the damn powerpoint slideshows for decision makers.

The single saving grace right now is that it apparently isn't easy for everyone to do this yet. But I didn't use a whole lot of my knowledge on software engineering to make any of it happen, not even the pandas and arrow code that moves the data behind the scenes. I mainly used my knowledge of NIS2 compliance and general data architecture in a step-by-step process. To me anyone with common sense should be able of doing this, and I really don't think I'm special... but then I teach other people AI at our company and they can barely get it to create a running program. Which is fine for now, but I have to work another 20ish years before I retire, and by then a lot of young people will have grown up with AI, and like I said, I'm not special. I think the only thing that differentes me is that I mash the buttons until it works but also have decades of security and compliance hammered into me.

Quothling··on Introduction – Rust for Python Programmers
> Cargo vs pip/Poetry

I know this section is really just a comparrison of pyproject.toml and cargo.toml, but who on earth would use pip instead of UV as a drop-in replacement in 2026? Though calling it a comparrison is a bit of a stretch considering there is no text.

On top of that, I imagine that a lot of Python programmers who actually do use pip would also use requirements.txt and not pyproject.toml

Quothling··on 1-Click GitHub Token Stealing via a VSCode Bug
I heard that Zed came with a lot of integrated AI and team sharing features that phone home, so that's an issue for anyone working with stuff like NIS2 compliance. Not that VSCode isn't a compliance nightmare as well.
Quothling··on Microsoft Copilot Cowork Exfiltrates Files
Nice find. We're PoCing Cowork and I've personally been impressed with it so far, but it seems we'll have to wait with a wider rollout until Microoft give us more admin feature to turn off what users can do with it.

> Note: Admins have limited oversight of ‘Skills’, as Skills in Copilot Cowork are automatically loaded from a specific path in a user’s OneDrive.

I feel this part is a bit disingenuous. We have full control over the sharepoint containers which house users personal onedrives. We actively scan them and prevent a lot of files from getting in them. That being said, it's still a fair point, because a "skill" could basically be a text file.

Quothling··on Migrating from Go to Rust
Yes.

I think few people would want to use an ORM for the stuff you use Go for, but there are things like SQLC which can generate a lot of your "dynamic DB magic" without actually being a real dependency. You can set SQLC up to run in a container in a completely isolated environment, and then use the output, but you can frankly also just maintain the SQL which frankly isn't that different than using an ORM once you've set up the automation with ridicilously strict policies.

We use Go for some of our more vital backend parts. We mainly use Python for entirely different reasons, but since we're an energy company it's nice to have a standard library that can do everything without any sort of external dependencies. It's not because we have some sort of "not invented here" fetish, it's because we have to write and maintain a literal fuckton of complaince documents for every external dependency we use and it's already a full time job for just for Python in our information security department.

Quothling··on Microsoft starts canceling Claude Code licenses
I really dislike that I can't customize it with permanent config files, similar to how I can configure a regular GPT model agen. I guess it's probably because it's in the fancy word they use for "beta".

I haven't really used any other Copilot product in a while since they were so bad compared to our other corporate options, but I'm rather impressed with Cowork inside it. Exactly because we can actually use it without breaking any EU laws.

Quothling··on Microsoft starts canceling Claude Code licenses
Maybe it's just Microsoft moving to more model agnostic tech within their copilot. I recently started using Microsoft 365 Copilot because corporate added Cowork which runs on Opus 4.7 which was better than the alternative we have available. Unlike the "real" Claude Code or Cowork this only has access to files in a specific onedrive folder in your personal sharepoint container, so it's much more compliant to things like NIS2.

Technically we're using Copilot and we're playing for it through Microsoft licenses, but it's using Opus 4.7. Even before this, most of our custom agents within m365 copilot were one of the GPT models.

Or maybe you're right and they want their developers to use the copilot models.

Quothling··on Improving C# Memory Safety
Around here C# is only really used at stagnant middle sized companies with horrible code bases. The sort where the company follow Uncle Bob religiously, while completely misunderstanding everything Uncle Bob ever said. Doesn't mean the language (and it's runtime) can't be good.
Quothling··on We're testing new ad formats in Search and expanding our Direct Offers pilot
I doubt it'll be ruined the same way. It's already got features traditional search engines never really did for us in Europe. Every search engine will assume that I want to buy things from websites that are either in Danish or in English and even if I try to configure something like Google to understand that I'd rather buy from Germany or France than the UK it just doesn't seem to get it. With LLM's I can search for shops on all sorts of EU websites, which comes in rather handy when you're buying vintage blood bowl things since there are a lot of local "ebays" in Spain, Italy and similar that I'd never find without them.

I have no doubt that Renault could pay ChatGPT to get it to recommend people buying lunch boxes. For all I know there might be a bunch of eco friendly "European produced" lunch boxes with compartments and the LLM recommended me the three which fit the needs I described because those companies paid for it. I didn't find any of them on Google though, that was all Temu resales.

Quothling··on We're testing new ad formats in Search and expanding our Direct Offers pilot
I'm Danish so maybe that's part of it, but if I'm looking for something like kid's lunch boxes that aren't essentially from Temu resale sites I was already using LLM chat clients to find it.

I can search for google and find nothing, or I can use a non-login on chatgpt and get several options. It found me some French made lunchboxes that are being made by a car company (I think it was renault but I honestly can't remember) while every result on google was basically temu resales by "companies" that were basically registered to some private adress here in Denmark. I guess I'm an early adopter, and I'm sure LLM's will be ruined by advertising and hidden algorithms, but right now, I really don't see the point of traditional search engines.

Quothling··on The last six months in LLMs in five minutes
I think Claude Cowork through the Microsoft thing which was copilot but is now named M365 (or something?) is likely creating every powerpoint resentation within our organisation at this point.

We have whatever AI is in teams transcribe every meeting, and it's scaringly good at it. It's also extremely good at sumerizing or finding things from pervious meetings when tasked. One disadvantage in this, is that I can see how stupid I sound on writing. I'll go "yeah, hmm, yeah, that's, yeah", but it really is pretty good.

I assume we're going to see a massive increase in AI with this Cowork inside the Microsoft client. We actually have a better tool available through a librechat where you can create and configure your own agents with the same filesystem access to your one drive, and a lot more tools and models than just Claude. Almost nobody has been capable of figuring out how to use it though, so they've been using the regular office365 copilot and it sucks so bad that a lot of people stopped beliving in AI.

It's ironic that Microsoft fumbling the ball on AI, but being very good at enterprise customers (especially non-IT) means that they'll likely be the company which is going to sell us AI tools that people will actually use. I have no idea why it's so hard for people to pick up the Librechat tool we're given access to through our equity fund. It's quite litterally a copy of ChatGPT where you can point-and-click configure an agent, but we're seeing that even employees who use a lot of ChatGPT privately don't use this tool professionally. Meanwhile everyone has been capable of using the Microsoft thing (that I personally think is less user friendly since you will need to add your configuration files to every promt).

Quothling··on A recent experience with ChatGPT 5.5 Pro
I think it depends on what you mean by repeatable tasks. I reuse the critical handoff agents quite a lot since they are basically just set up to help spot bias and errors. I kind of reuse the top agent. I have a few "core" configurations that I can add to. So one will know our network, one will know our data architecture and so on, to keep them a little more focused. So for this specific agent that I described, I'll add a few lines on what I'm considering to the configuration, that I'll not reuse for anything unrelated to Microsoft Fabric. I've tried using these "core" agent configurations as hand-off agents in the past, but it doesn't seem to work well in our setup which is very isolated because we're NIS2 compliant.

I don't usually go back to the original prompt. I've actually done it a few times in regards to the presentation, to get some refined images but usually I'll start a new prompt.

Quothling··on A recent experience with ChatGPT 5.5 Pro
We've got a rather extensive AI setup through our equity fund and I've setup a group of agents for data architecture at scale. One is the main agent I discuss with and it's setup to know our infrastructure and has access to image generation tools, websearch, hand off agents and other things. I tend to use Opus (4-6 currently) and I find it to be rather great. As you point out it comes with the danger of making mistakes, and again, as you point out, it's not an issue for things I'm an expert on. What I rely on it for, however, is analysing how specific tools would fit into our architecture. In the past you would likely have hired a group of consultants to do this research, but now you can have an AI agent tell you what the advantages and disadvantages of Microsoft Fabric in your setup. Since I don't know the capabilities of Fabric I can't tell if the AI gives me the correct analysis of a Lakehouse and a Warehouse (fabric tools).

What I do to mitigate this is that I have fact checking agents configured to be extremely critical and non-biased on Opus, Gemini and GPT. Which are then handed the entire conversation to review it. Then it's handed off to a Opus agent which is setup to assume everything is wrong. After this, and if I'm convinced something is correct I'll hand the entire thing off to a sonnet agent, which is setup to go through the source material and give me a compiled list of exactly what I'll need to verify.

It's ridicilously effective, but I do wonder how it would work with someone who couldn't challenge to analytic agent on domain knowledge it gets wrong. Because despite knowing our architecture and needs, it'll often make conceptional errors in the "science" (I'm not sure what the English word for this is) of data architecture. Each iteration gets better though, and with the image generation tools, "drawing" the architecture for presentations from c-level to nerds is ridiclously easy.

Quothling··on The Zig project's rationale for their anti-AI contribution policy
I was just giving them an anecdotal example of what they were asking for. I think the answer is somewhere in the middle, but I'm not in a position to push any form of change on the C levels.
Quothling··on The Zig project's rationale for their anti-AI contribution policy
Around here C levels have AI adoption goals and are actively pushing it throughout organisations. Even when it doesn't exactly make sense.
Quothling··on The Zig project's rationale for their anti-AI contribution policy
> Any examples how you see some engineers being left behind?

I don't know where you live, but around where I live in Denmark you'd fail for not using AI at a senior interview in a lot of places. Even places which aren't exactly AI fans use AI to some extend.

The biggest challenge we face right now is figuring out how you create developers who have enough experience to know how to use the AI tools in a critical manner. Especially because you're typically given agents for various taks, which are already configured to know how we want things to be written.

Quothling··on HashiCorp co-founder says GitHub 'no longer a place for serious work'
It has an annoying bug where approving PR's from the cli won't delete branches when you squash commit, while clicking the button in the UI does it perfectly fine. It's been a bug for a while (as in several years), and if you find something like that, don't expect it to ever be fixed. As a whole it's not a bad tool though.

As you say it's limited, but that can be both good and bad.

Quothling··on Pgbackrest is no longer being maintained
How often are the consumers and users of tools like this also in positions to contribute financially? It's silly, but I can spin up $10000 worth of azure resources and nobody would mind (as long as they actally had a purpose etc). In contrast I doubt I'd ever get a decisionmaker to sign off on supporting an OSS project with even $50, even if we have tech that depends on it.
Quothling··on DeepSeek v4
It's a little sad that tech now comes down to geopolitics, but if you're not in the USA then what is the difference? I'm Danish, would I rather give my data to China or to a country which recently threatened the kingdom I live in with military invasion? Ideally I'd give them to Mistral, but in reality we're probably going to continue building multi-model tools to make sure we share our data with everyone equally.
Quothling··on I am building a cloud
Europe is already moving into the EU cloud. Hetzner, OGH Cloud and so on as well as local data centers where partner companies set up own cloud with various things to rival office 365. So far it's mainly the public sector. My own city cut their IT budget by 70% by switching from Microsoft.

The key point is the partner companies. Almost nobody is actually running their own clouds the way they would with various 365 products, AWS or Azure. They buy the cloud from partners, similar to how they used to (and still do) buy solutions from Microsoft partners. So if you want to "sell cloud" you're probably going to struggle unless you get some of these onboard. Which again would probably be hard because I imagine a lot of what they sell is sort of a package which basically runs on VM's setup as part of the package that they already have.

Quothling··on John Ternus to become Apple CEO
I've got the smallest version of the m1 macbook air when they came out. It's still my daily driver when I'm not on my corporate T14 gen 6 I7 with 32gb of ram, and while it no longer outperforms my corporate computer it keeps up well enough while being cold to the touch and noiseless. It's also significantly lighter and has better battery life despite being old, though corporate does kill a lot of that on the pc.

Not being able to feel that it's turned on is basically the primary feature of a laptop for me. I've wanted to switch my personal device to linux for a while, but there just... isn't... one. I know I could run linux on the macbook, but the point here is that there is nothing which compares, not even at higher prices.

Quothling··on Show HN: Is Hormuz open yet?
Kattegat where I live is probably double the width of Hormuz and if you're in a small ship you can probably sail most of those 140 km. Not without risk, but you'd be relatively safe for the most part. Big ships can't though, so even though there might be 50km on each side of them they could potentially have a shipping lane which is only a few hundred meters wide.

I can't say that I know anything about Iran, but if we were to close our straits off so you couldn't enter the north sea from the baltic sea then our navy would rapidly deploy various different mines that lay on the bottom on the shallower parts and control the shipping lanes with things like suicide drones. I imagine Iran would do something similar, only they've probably been preparing for it a lot more than we have.

Quothling··on Claude Code is locking people out for hours
We've got access to opus 4-6, gpt 5.4, gemini pro and a few others through corprate. I have customized agents on claude, gpt and gemini since we tend to run out of tokens for x model by the end of a month. Out of all of them I've consistently been using sonnet for most tasks. Opus functions mainly as hand-off agents and reviewer". In my anecdotal experience Claude is miles ahead of the other models and has been for a long while... when it comes to writing code the way we want it. Which eksplicit, no-abstraction, no-external packages, fail fast defensive programming. I imagine you'd get different milage with different models and different coding styles.

The rest of the organisation, which is not software development or IT related, mainly uses GPT models. I just wish I hadn't taught risk management about claude code so they weren't wasting MY tokens.

Quothling··on DRAM pricing is killing the hobbyist SBC market
You don't have to go that deep. 99% of the time our analytics or risk management teams have some really memory inefficient Python and they want me to write them one of our "magic C things" it turns out to be fixable by replacing their in-memory iterations with a generator.
Quothling··on Axios compromised on NPM – Malicious versions drop remote access trojan
We used to have some C# but we moved away from it to have fewer languages and because it was a worse fit for us than Go and Python. I'm not sure .NET would really give us any advantages though. Microsoft treats most major languages as first class citizens in Azure, and since we build everything to be sort of platform agnostic, we wouldn't have the tie-ins that you could have with .NET. I'm not saying it would be fun to switch cloud, but all our services are build so that there is a decoupled "adapter" between our core logic and Azure. We use a lot of Azure functions as an example, but they run in container apps on a managed k8s, so the Azure function part is really just an ingress that could be swapped for anything else.

It's been a while since I worked with an "actual" function app in Azure. We did have a few .NET ones that weren't using containers. At the time they were pretty good, but today I'm not sure what the benefit over a managed container envrionment with container apps would be. Similarily with sqlserver. We use it because of governance and how it ties into data factory and I guess fabric, but we don't use ORM's so something like Entity Framework wouldn't really be something we'd benefit from with .NET.

I think the only thing we couldn't realistically replace and get something similar is the governance, but that's more to do with how Management Groups, Policies, Subscriptions and EntraID works than anything else.

Eventuallyt everything will probably be Python and then C/Zig for compute heavy parts. Not because Python is great, it's terrible, but it's what everyone uses. We're an energy company and with the internal AI tools we've made widely available we now have non-SWE employees writing code. It's Business Intelligence, it's Risk analysys, it's powerplant engineers, it's accountants. They're all working with AI code in their sandboxed environments and it's all Python. Since some of it actually turns out to generate great value, it's better for us (and the business) if our SWE teams can easily take over when "amateur hour" needs to meet operational compliance for the more "serious" production envrionments. I put things in "'s because I'm still not entirely sure how to express this. A lot of what gets build is great, and would have never been build without AI because we don't have the man power, but it's usually some pretty bad software. Which is fine, until it isn't.

Quothling··on Axios compromised on NPM – Malicious versions drop remote access trojan
I work in a NIS2 compliance sector, and we basically use Go and Python for everything. Go is awesome, Python isn't as such. Go didn't always come with the awesome stllib that it does today, which is likely partly why a lot of people still use things like Gin for web frameworks rather than simply using the standard library. Having worked with a lot of web frameworks, the one Go comes with is nice and easy enough to extend. Python is terrible, but on the plus side it's relatively easy to write your own libraries with Python, and use C/Zig to do so if you need it. The biggest challenges for us is that we aren't going to write a better MSSQL driver than Microsoft, so we use quite a bit of dependencies from them since we are married with Azure. These live in a little more isolation than what you might expect, so they aren't updated quite as often as many places might. Still, it's a relatively low risk factor that we can accept.

Our React projects are the contrast. They live in total and complete isolation, both in development and in production. You're not going to work on React on a computer that will be connected to any sort of internal resources. We've also had to write a novel's worth of legal bullshit explaining how we can't realistically review every line of code from React dependencies for compliance.

Anyway, I don't think JS/TS is that bad. It has a lot of issues, but then, you could always have written your own wrapper ontop of Node's fetch instead of using Axios. Which I guess is where working in the NIS2 compliance sector makes things a little bit different, because we'd always chose to write the wrapper instead of using one others made. With the few exceptions for Microsoft products that I mentioned earlier.

Quothling··on Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gains
Having worked in non-swe enterprise for two decades I would argue that this is less true today than it was 10 years ago. It used to be that new hires would come with a basic knowledge of windows and office, but that's no longer the case. At the same time, you have things like Smartsheets and so on, which are more popular, at least with our employees, than Excel and everyone seems to hate Outlook these days. I don't think it was ever really the case though. What Microsoft sells to enterprise is governance, and they really don't have any competition in this area.

Being in the European energy sector we're naturally looking into how we can replace every US tech product with an EU/FOSS one. It's actually relatively easy to buy the 365 experience through consultants which will setup a NextCloud, Libre/Only Office, Proton and a teams replacement I can't for the life of me remember the name of. Beneath it there is a mix of Identity Management systems, often based around Keycloak, at least for now. It works, from what we've seen in Germany (specificlaly with their military) it's also possible to roll it out relatively quickly. It's all the "other" stuff that gets murky. There isn't a real alternative to AD/Entra, yet, from a governance perspective. There are great tech solutions which does the same thing, but they require a lot of IT man hours. Something the public sector is always going to be more willing to deal with than the private sector. If we collectively decided that trains in Denmark should be free for passengers, then that would happen. You can't do that in a private business, though security obviously does factor into it.

This is the general story really. Microsoft's copilot studio is relatively new, and it's probably been flying under the radar in a lot of tech circles because it's basically what power automate always wished it could be. Having used it to build a HR flow, where an AI model will receive the applications, read them, auto-reply to irrelevant ones, create a teams site with files and the relevant people for the relevant applications, and invite the applicant to their first appointment. Well... I gotta say that I'm not sure what we have that's an alternative to that. It took me a couple of hours to build it, and it frankly works better than I thought it would. Granted, I did know the tool because I had previously done a PoC where I build a teams agent which "took over" my teams interactions. Everyone noticed because it spelled correctly and wasn't capable of posting Warhammer 40k ORK meme's in any form of quality, but it was frightenly easy. What Microsoft sells in this area is again the governance of it all. You can do these things because of how EntraID lets you connect services seamlessly with a few clicks. While behind the scenes all of those clicks are only available to you because your IT department control them... Again... without hundreds of manhours.

I'm sure we'll eventually get there, but it'll likely come down to change management. Because even if you're willing to retrain your IT operations crew, it's not likely that they will want to leave the Microsoft world where they are well paid and job-secure. Well, maybe I'm in a cheese bell, but I've never met an Azure/Microsoft IT person who would want to work with something else, and having been forced to work a little bit with it behind the scenes, I sort of get it... well not really.

Which boils down to why Microsoft has always been good with enterprise customers. The decision makers in your organisation will listen to everything, but their own IT departments will often sort of automatically recommend Microsoft products and at the end of the day, it'll all boil down to risk. Which is what Microsoft really sells... risk-mitigation. Sure their licenses are expensive, but is it really more expensive than losing your entire IT staff? (this isn't an actual question I'm asking, it's what goes through the considerations.)

Quothling··on Denmark was reportedly preparing for full-scale war with the US over Greenland
I'm Danish. There are 56k people in Greenland and almost half of them live in Nuuk. The USA could frankly "take" greenland simply by putting a warship there and saying it was theirs. Not really sure why it was ever on the table though. The USA has basically free reign to expand it's military bases there, aside from the ban on nuclear weapons. Sure it would need approval by both Greenland and Denmark, but up until recently we were frankly more allied with the USA than the EU, and I doubt we've ever really said no before. We even bought the damn f35's despite them being so much more expensive than the alternatives, primarily because our history with the F16's. Which would probably have been a possiblity considering we're now debating whether or not to have french nuclear weapon carrying planes stationed on Danish soil in the fallout of the USA no longer being a trusty NATO ally.

If it was because of resources, then American companies are frankly free to extract them as long as they reach deals with Greenland about it. If the USA had waited a few years for Greenland to gain more independence then it would have been even easier.

Quothling··on Palantir CEO Makes Confession on Disrupting Democratic Power
I'm Danish and like every other western country Palantir want's to mass survailance us (and we apparently sadly want them to do it too despite the whole Greenland thing). I can't tell you how it'll shift power from the cultural elite to the working class because that's not what we're seeing. We're seeing AI shift power from the cultural elite, and, the working class to the technical/financial elite.

It does so with survailance and information. In a free democratic society you can jaywalk when no car is around and be ok. In a survailance state, you can't, because it'll hurt your social credit score. Similar to what we see in certain Asian countries, effectively making you a B class citizen. Jaywalking is just an example of course, because we've agreed that is technically illegal but basically every human when confronted with a situation like that outside of bureaucracy will think it's ok you crossed the completely empty road. They won't think it's ok if the road wasn't empty. Which is the nuance in the system, that the survailance bureaucracy doesn't have.

I like to think of it in dungeons and dragons alignments. Democracy is in the neutral zone, perhaps with a slight chaotic basis, but over all you don't want it to be either too lawful or too chaotic. If it goes too far either way the other side will suffer. The reason it can be a little biased toward chaotic is because chaotic people don't try to force their way on lawful people quite as much as the other way around.

I guess more working class men in America are lawful? Over all though, the people with the power will be the people with the information and the wealth to impact the bureaucracy.

Quothling··on Don't make me talk to your chatbot
Isn't part of why Apple's iPhone can be so expensive is because it's very easy to get actual human support for it when something goes wrong? You probably didn't make the mistake at Microsoft, but I've seen people look at the localized spreadsheet and miss the long term company wide spreadsheet completely. Often because the sales and support departments are so far from each other that they're basically two different companies working in different directions. Maybe Microsoft customer support is a bad place to measure these things because of the size, but around here quite a few banks have tried outsourcing their phone support to everything available and have come back because it cost them customers. Even customers who never phoned them.

That being said. Your example of customers calling for support on things they shpuld be capable of figuring out themselves in is probably where AI is going to shine as first line support. Once (if?) AI voice chat is good enough to replace chatbots we may not even realize we're talking with an AI unless it tells us.

← PreviousPage 4 of 11Next →