HNHacker News
TopNewBestAskShowJobs

__float

1,183 karma · joined October 9, 2011

submissionscomments
__float··on We pwned X, Vercel, Cursor, and Discord through a supply-chain attack
It's a bit surprising they did that, to be honest. I work at a similarly-sized, HN-popular tech company and our security team is very strict about less-trusted (third party!!) code running on another domain, or a subdomain at the very least, with strict CSP and similar.

But in the age of AI, it seems like chasing the popular thing takes precedence to good practices.

__float··on Pricing Changes for GitHub Actions
Jenkins Groovy is awful and full of footguns. Have you ever run into a serialization exception?

It's too powerful and there are too many of its implementation details exposed to the user.

__float··on Pricing Changes for GitHub Actions
This thread is largely commentary on the technical aspects of GitHub Actions.

The fact the business gives away free compute is irrelevant and more a discussion of their marketing budget.

__float··on More than 100 rally against data centers at Michigan Capitol
Three people could be a group of friends. More than 100 is clearly different.

Given that there are usually _zero_ people rallying in Lansing, this is notable enough for the local newspaper.

__float··on Quill OS: An open-source OS for Kobo's eReaders
What I don't really understand is why they've tied the reader app so tightly to the entire custom OS. It seems like it used to be more standalone, and these days that is essentially impossible?
__float··on We're losing our voice to LLMs
I've never heard of this, and I'm not seeing much on Google.

What spaces are you in that you see this??

__float··on Anxiety disorders tied to low levels of choline in the brain
This conversation has drifted very far from the original post, and it was only ever tangentially about anxiety anyway.

This is also simply not true: we have so many examples of horrific dog bites, with normally-well-behaved animals, well-meaning owners, etc.

__float··on The lazy Git UI you didn't know you need
I try to leave a good commit trail in my PRs. These are often _not_ the reality of how the code was written and originally committed, but a rough approximation of the intended steps with the benefit of hindsight.

A tool like https://github.com/tummychow/git-absorb has been on my to-try list for a while, but for now I do it by hand.

__float··on State of Terminal Emulators in 2025: The Errant Champions
There are a ton of people who _immediately_ open tmux/zellij/etc. when they're doing anything in the terminal. This means you use its backscroll and search feature, and you wouldn't notice.

@mitchellh seems to rely on the Ghostty feature to dump scrollback to a file, and edit/search over that.

I found it a bit too inconvenient when using remote systems frequently, though. (If I'm missing a trick, I'd love to use Ghostty! But I'm just not a fan of multiplexers.)

__float··on Reproducing the AWS Outage Race Condition with a Model Checker
A lot of people view model checking and similar tools as too theoretical, academic Stuff that can't be so easily applied to the real world.

Here we see the basic steps of modeling a complex system, and how that can be useful for understanding behavior even without knowing the details of every component.

__float··on Fallout from the AWS outage: Smart mattresses go rogue
This company has received this feedback (and claimed "it's coming soon") for actual years, now. This was raised in some of their earliest HN threads!
__float··on Codex Is Live in Zed
Okay, so what kind of solution are you looking for here? VS Code uses a closed-source LSP server for its C# extension. Rider is it's own custom stuff, of course.

So...where does that leave the Zed team? If existing LSPs aren't good enough, that's not a Zed problem: they're building an editor, not LSPs for your favorite language.

__float··on Ruby core team takes ownership of RubyGems and Bundler
What languages do you use that have adopted this well?

I'm not counting something like C++ where there's effectively no "packages" to speak of.

__float··on Uv overtakes pip in CI
Why not use a virtualenv in your container?
__float··on Rating 26 years of Java changes
As someone who has used Java pretty extensively for a few years (but in an environment where Spring was forbidden), why is that?
__float··on Rating 26 years of Java changes
That mis-feature has been present since Java 1.0, so (as with checked exceptions mentioned above) it's not entirely within the scope of this post.
__float··on Rating 26 years of Java changes
I'm wondering this, too.

There's Guava and its Preconditions class[0] that is approximately as terse and I find to be more helpful than everything-is-an-AssertionError.

[0] https://guava.dev/releases/14.0/api/docs/com/google/common/b...

__float··on Rating 26 years of Java changes
My experience using Dagger (2) was so unpleasant that it really soured me on the possible uses of this feature.

I understand the benefits of dependency injection, but to be totally honest I'm more likely to take the Go-style approach of wiring it all up manually, even if it's a bit of extra boilerplate. The indirection and abstractions built up in DI frameworks is rarely worth it IMO.

__float··on Sysco Is Not "Ruining Restaurants"
Ah, the cost of spreading bad information on cheap shared hosting.
__float··on You can't build tcc from Nixpkgs if you are in the UK
It's a bit hard to find, but going to the service's Mastodon account eventually leads one to https://repo.or.cz/uk-blocked.html
__float··on Decoding Netflix's AV1 Streams
Heh, didn't have to go far in this article to find this exact construction:

> The data shows it’s not just an incremental improvement; it’s a demolition.

Complete with extra bold to emphasize the second half, sigh.

__float··on What if I don't want videos of my hobby time available to the world?
This is drawing a very different line from the majority of conversations in this thread, I imagine.

"Sharing with a third party" because you have phone backups enabled is very different from streaming live or uploading to social media, like most are actually discussing here.

__float··on Learning Persian with Anki, ChatGPT and YouTube
That makes sense as a long-term goal, but if you're still in the earlier stages it's much more fun to learn a variety of words and focus on the most common ones. Get depth at first, and later you can fill in the holes with e.g. a cookbook.

I know you consider it pseudoscience to force creating your own cards, but I do find premade decks result in a lot more leeches. How do you avoid them when relying on these thousands of auto-generated cards?

__float··on Teardown of Apple 40W dynamic power adapter with 60W max
The website explicitly disables it; they have a viewport meta tag with:

    initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no
I think it's more likely Safari these days just ignores this, because of the very problem OP complained about.
__float··on Notes on Managing ADHD
> Some of us have to deal with the decision of a loved one taking meds and increasing their probability of a sudden cardiac death...

Why is this such a concern to you? At some point, everything has _some_ risk, and this feels like you're putting a lot of guilt on someone else for making a medical decision they deserve to make on their own.

__float··on Cloudflare incident on August 21, 2025
The way I read the blog post, it seems they're very aware of that.

I imagine Cloudflare and AWS were on a Chime bridge while this all went down, they both have a lot at stake here.

__float··on AI is different
That doesn't mean we _understand_ them, that just means we can put the blocks together to build one.
__float··on Claude Opus 4 and 4.1 can now end a rare subset of conversations
Maybe this suggests it's not such a simple feature?
__float··on GitHub was having issues
It is a _decision_ to put those assets in the same VCS as your source code. It's not one you are required to make.
__float··on Tin Can – The landline, reinvented for kids
Do these services have anything like the easy-to-use allowlist feature? There seems to be some value in the parent-friendly angle here.
← PreviousPage 3 of 16Next →