Hacker News Reader

VoidWhispereron OpenAI "rogue" agent activities found on Wikimedia projects

Regarding that last bit, it feels like Florida is headed towards a point of trying to say 'minors should not be able to use the internet at all' since they are trying to force putting age verification infront of more and more things.

Don't get me wrong - while I disagree with making people fork over personal info just to access inappropriate websites - I can see the reasoning there a bit more than 'you shouldnt be able to use this ai chatbot until you are 18'

VoidWhispereron gpuvis: GPU Trace Visualizer

Looks like the issue is with the ?raw=true at the end of the URL

VoidWhispereron gpuvis: GPU Trace Visualizer

I dont think it is slop - Mike Sartain has a pretty lengthy history including working at Valve. The README file's last commit was from 5 years ago, which is likely why some of the links 404

VoidWhispereron Why don't more developers “use the platform”?

When I tried using <dialog> for the first time, there was one major thing that stuck out to me as a bit of a problem with how it is implemented:

It has become a norm to expect that if you click/tap on the backdrop of a modal/dialog, it will dismiss the modal/dialog. That isn't the case with <dialog> by default, and you need to use either use a hacky JS handler that checks the bounding box of the dialog (because the backdrop click events just end up fed to the dialog element), or use an attribute, `closedby`='any' that does not work on iOS and has spotty support at best in desktop Safari

VoidWhispereron Ask HN: How do you handle hitting AI coding agent usage limits?

I have not. Seems like that would help too, although im still hoping to get ideas on the agent-to-agent handoff part

VoidWhispereron America.gov

I understand that having the fingerprint unlock icon over the text about 'keeping your privacy protected' is supposed to represent protecting 'your privacy', but if you click it, it doesn't even go away, so it just becomes an annoying impediment to trying to read. Am I alone in thinking this or is that entire paragraph just generally poorly designed?

Edit: Also hope that they don't plan on having anyone using ancient software (specifically IE, which I'm sure there are probably some government agencies somewhere that probably do) having the website work - even if you use an IE user agent, it will use SSE.

VoidWhispereron Floci: Locally emulating any cloud service

Most likely a false positive, but worth noting for the people who run the project: Malwarebytes currently flags the site as 'potentially unsafe' when trying to visit it - not sure what the best avenue for them to get that fixed beyond reaching out to Malwarebytes might be

VoidWhispereron We got admin access to Baseten's production GitHub

I think that many other companies (especially larger ones, I suppose) don't respond as promptly to security issues.

VoidWhispereron Google stole open source code without crediting the authors (Artemis/Minitap)

If there is an innocent explanation, I'd love to hear it, because it kind of reads like the force push was done to move the commit with the attribution change out of the public eye so it wasnt clear what they had done.

Maybe it is possible the google engineer didn't understand how open source licenses work, or didn't care since maybe it was supposed to be an internal project first that eventually ended up open sourced?

VoidWhispereron Apparently CodePen 2.0 sends data to their servers as you type

Something like this would've been incredibly useful at my previous job - we often had to put together how a user triggered an issue using a combination of logs and analytics to track what actions they took..

VoidWhispereron It takes 5 cloud services to hear my doorbell

This seems way overkill. I understand that that the OP didn't want to pay a subscription, but a really quick google showed that Blink makes a $30 product that solves this exact problem (not being able to hear the doorbell inside), the Blink Chime, which plugs into an outlet and then connects to 2.4Ghz, not requiring a subscription.

I guess $30 for what is effectively a glorified chime for your door is a bit much, but considering the time it probably took to put together this (kind of over-engineered) and the (presumably) monthly cost of the VPS, it makes more sense.

Also, I feel like something like MQTT or another message broker could simplify this significantly, making the whole VPS /state endpoint unnecessary, without exposing your home mini pc to the internet, since the mini pc would connect to the MQTT (I think HA actually has a built in mqtt integration? although you'll still need to make something to process the message once the MQTT gets it) and the SmartThings API would also (assuming the processing after the SmartThings API is hit is customizable in some form)

VoidWhispereron Leak of Internal Valve Data

To save people a click, the data is from 2003 to 2013, not more recent.

VoidWhispereron Show HN: I built self-hosted deployment automation tool for Windows and IIS

It can also write good kubernetes GitOps files, although that doesnt necessarily make terraform or ansible unnecessary (especially if you have to set up a diverse set of resources at a cloud provider)

VoidWhispereron SugarTrack – an offline Android logbook for blood sugar (no account, no cloud)

No, he is correct. When I wrote this comment originally I was having trouble thinking of how exactly to describe the location

VoidWhispereron SugarTrack – an offline Android logbook for blood sugar (no account, no cloud)

Worth noting, if they are covered by the person's insurance, it may be worth looking into using a CGM (Continuous glucose monitor) and the self-hostable application Nightscout[0].

CGMs use the interstitial fluid in (usually, although people also use other spots) inside side of the upper arm to measure blood sugar. As long as they are placed in the right spot (i.e. in a fattier area instead of directly on top of muscle, hence why it is on the inside side of the upper arm and not the outside) and the sensor doesn't fail, they will measure blood sugar fairly accurately for 10-15 days depending on the CGM model (disclaimer: They do tend to run approximately 15 minutes behind the number that an actual finger poke would show you).

Nightscout is an awesome tool because it can be self-hosted so that you keep full control over your health data, but since it is a web application, you can still easily share it with other people too, like family or your endocrinologist.

On android, you can use the xdrip+ application to pair with most types of CGMs to completely keep your data out of the cloud, or you can also pair it with the API from Abbott or Dexcom (depending on the CGM model) to pull data from their 'share/link' applications, if you opt to pair with/use their official apps

[0]: https://nightscout.github.io/ [1]: https://github.com/nightscoutfoundation/xdrip

I personally use Dexcom G7 15 day sensors (because it is what my insurance covers) and use xdrip+ to upload the data to a nightscout instance hosted in my homelab

VoidWhispereron Asus Bike Booster

According to articles like this one[0], they haven't shared pricing yet - so I guess it can't be bought quite yet.

[0]: https://www.digitaltrends.com/outdoors/asus-made-an-e-bike-c...

VoidWhispereron SparrowMap – Cameras that watch government vehicles

Seconding this. I wonder if the server got hugged to death by the HN front page

VoidWhispereron White House Authorizes Private U.S. Companies to Hack Foreign Cybercrime Groups

With some of these cybercrime groups, being sued is probably the least of their worries..

VoidWhispereron Civilian plane crash in New Mexico tied to military GPS blocking

The final information on the crash almost reads like they hit the very top of the mountain - according to NTSB, they were about 200-250 ft from the summit, so it is possible they did still have visual with the airport until right before the impact. Whether or not GPS could've helped with this, I'm not sure - it might've allowed them to see where they were relative to the mountain better, since it was the middle of the night and so they probably couldn't see the mountain very well..

VoidWhispereron Online ad giant Adform was hacked, proving once again why ad blockers are needed

The bitcoin one has moved the bulk of the funds (minus like $500) to this address: https://www.blockchain.com/explorer/addresses/BTC/bc1qjekyd0...

VoidWhispereron Cisco FMC static credential vulnerability exploited as a zero-day

Is there an actual reason for this credential to exist, or did it just 'end up' there? (either an unfortunate artifact of testing in development work, or some other way)

VoidWhispereron Una GPS smart watch – Repairable, USB-C charging, developer-friendly

Part of the selling point of a smartwatch, atleast in my opinion, is its ability to run apps that aren't developed by the manufacturer - for example, ones that help me be able to see my blood sugar from my CGM on my watch. They have a whole section of their site for developers, but I can't seem to find a link to any kind of store, even though they specifically say developers should register on their portal

VoidWhispereron Celestrak adds catalog digit, fixes Y2K bug

Next they should fix their SSL certificate

VoidWhispereron I used Claude Code to get a second opinion on my MRI

Serious question: If the bones specifically show up as black on ultrasound but the surrounding (muscle, etc) don't, wouldn't that be an option that could be used to try to determine a broken/fractured bone without the radiation from an xray? Or are the gaps in those cases usually too small to pick up?

VoidWhispereron Rio de Janeiro's city government model Rio3.5 beats Qwen3.7 in recent benchmarks

https://github.com/nex-agi/Nex-N2/issues/4

Seems that they didn't make/train a new novel model, they did a mix of two existing models and then gave it an instruction to say it was 'Rio, trained by Rio AI Labs'

VoidWhispereron I was recently diagnosed with anti-NMDA receptor encephalitis

> Thank you to my friends, family and doctors as well. Their support during this time was unwavering and I’m not sure what would have happened without them. “Nothing good” is what a nurse said when I posed that question to her.

I've always been told (and this has been true over the 4 or 5 times I've been hospitalized in my life) that having someone there for you, to support you and also to serve as your 'patient advocate' (so helping making sure all of the questions are asked of the doctors and stuff like that) has a definite positive effect on medical outcomes. In my cases, it was my family filling this role.

VoidWhispereron Cloudflare Turnstile requiring fingerprintable WebGL

I think the idea is that they have the functionality that cloudflare is using to generate the fingerprint (like webGL in this case) disabled in their non-cloudflare profile and only use the cloudflare profile to do things they have to that are behind cloudflare

VoidWhispereron Google employee charged with $1M Polymarket insider trading bet on search term

I think the point the grandparent comment is trying to make is that at a staff level, and having been at google for 12 years, he was likely being paid pretty well, and that he could've made that same money longer term just by continuing to work at google

VoidWhispereron Shira: Anti Phishing Training Platform

So is the idea for Shira is that it is quizzes and other tools to teach people how not to be phished? Whereas I know some enterprise anti-phishing tooling I've seen lets IT/Security send a 'phishing email', where you are told good job if you report it and it is noted down on your employee record if you do fall for it

VoidWhispereron Waymo pauses Atlanta service as its robotaxis keep driving into floods

> No one should be driving in a hurricane.

I agree, but there are a number of people here in Florida who will do it or die trying (emphasis on the die trying)