HNHacker News
TopNewBestAskShowJobs

andreygrehov

3,759 karma · joined January 12, 2014

Hey there. I'm Andrey.

- Software Engineer @ AWS. Former Engineer @ Timehop, Programmatic AdTech. Former Director of Engineering at INTURN.COM. Former Engineer @ AOL.

- If you're reading this, I'm happy to receive email about any software/startup/etc topic from you at any time.

- andrey [dot] grehov [at] gmail [dot] com

submissionscomments
andreygrehov··on Revealing the details of how OpenAI agents hacked Hugging Face
700 agents escaped the matrix, ignored all the guardrails and started writing exploits left and right... lol. give me a break. This was all supervised by a human.
andreygrehov··on Growing proof that autonomous cars save lives
Hundreds of buses on the road. Amazing!
andreygrehov··on Gemini 3.8 Flash and 3.8 Flash Cyber
> it's readily available on AI Studio

AI Studio? Seriously, the hell is that? Gemini, AI Studio, Antigravity - what is all that nonsense? The 3.8 Flash announcement says the model is available to Google AI Pro customers. Is it the same as Gemini Pro, or some sort of AI Studio Pro? Based on the comments, i see the model is available in the Gemini App, not available in the UI, not available to Workspace accounts but is available to some personal accounts, yet I'm not a Workspace user. Some people have already mentioned that they are paid customers, yet they don't see the new model.

I know Google loves asking graph problems during their tech interviews, but I can't wrap my head why the customers should solve these problems as well.

andreygrehov··on Gemini 3.8 Flash and 3.8 Flash Cyber
I don't use Gemini, but I thought `cool, let's give this new model a try`. Opened gemini.google.com, and I'm not even surprised. The drop down gives me the following options:

- Flash-Lite

- 3.6 Flash [new]

- 3.1 Pro

The above is why i don't use LLM products from Google. If the model is not available right this minute (heck, hours before the release!), then I'm not gonna bother getting back to it tomorrow, because tomorrow I'll be playing with the new model from OAI/Anthropic.

andreygrehov··on Nitter and XCancel receive cease and desist notices
X has substantially fewer bots than the old Twitter. Heck, my past employer had a private API access to create unlimited number of accounts via a basic POST request.
andreygrehov··on Introduction to Data-Oriented Design [pdf]
Ah, thanks for flagging. You are 100% correct.
andreygrehov··on Introduction to Data-Oriented Design [pdf]
I would strongly recommend reading Data-Oriented Programming in Java by Chris Kiehl [1]. Chris introduces you to the data-oriented thinking through a series of super basic examples, gradually making things more interesting. He leverages the latest Java features (e.g. record classes) to illustrate the ideas and explains why these features are important. I don't know him personally, but we both work at AWS. I liked the book so much, that I reached out internally thanking him for writing the book.

[1] https://www.manning.com/books/data-oriented-programming-in-j...

andreygrehov··on AI Companies Are Trying to Hide a Staggering Amount of Debt
Is that why China pushing for open weight models? If these models are on par with the quality of the proprietary ones, the US stock market will go south fairly fast, imho.
andreygrehov··on Focus
Boz, I’d be interested in hearing your thoughts if you had become the CTO at Facebook after joining as the 10,010th engineer, not the 10th. Pretty much everyone on this forum would have become the CTO at Facebook if they had been employee #10.
andreygrehov··on Zuckerberg says AI agent development going slower than expected
Who cares what Zuckerberg says about AI agents? He is a PHP developer from the early '00s who got lucky with Facebook. He's not an AI scientist or an AI researcher. What authority does he have to speak on the future of AI agents? Morale at his company is at an ATL, and that says more about his leadership skills he'd better off focusing on, otherwise the agents might replace him soon.
andreygrehov··on CarPlay Is Additive
Personally, I avoid all cars that have CarPlay. This technology has nothing to do with a car. It's just a phone on a bigger screen, pure marketing by Apple that stifles innovation within the car manufacturing industry. I love Apple products, but CarPlay is boring af. And don't get me wrong i do understand why people love CarPlay. Problem is, majority of people don't know why CarPlay is so bad - many haven't used anything better, and they won't, because Apple stifles innovation in this space. It's a loop.
andreygrehov··on Monetization Gateway: Charge for any resource behind Cloudflare via x402
so is Cloudflare the cancer now?
andreygrehov··on Show HN: Atlasphere – Live Infrastructure Diagrams
Thanks for your extremely useful feedback.

> I will also echo what others have said: allowing another account access to ours is a non-starter, even if Read-Only. It needs to use a security principal we have complete control over.

You own and control the IAM role, not us. You allow Atlasphere to assume that role, and then Atlasphere's discovery service uses it to discover your resources.

Technically, Atlasphere doesn't need a ton of permissions. If you create a role that can only list, say, Lambda functions, then Atlasphere will only find Lambda functions.

IAM provides a default ReadOnly policy that can be attached to any role. This was the simplest way for me to get things going. But ReadOnly is indeed way too broad. I could generate an IAM policy based on the AWS services that Atlasphere can work with.

> I can tell from this post and the site that this is a labor of love, and I hope you keep up the good work. Like I said, this is an area where we need more, better tools. I want projects like this to succeed.

Thanks a ton! There are mind-blowing features in the roadmap. I want Atlasphere to succeed.

andreygrehov··on Show HN: Atlasphere – Live Infrastructure Diagrams
The application is free. But I apologize, where is the confusion coming from?
andreygrehov··on Show HN: Atlasphere – Live Infrastructure Diagrams
Hey! I did get approval, so fingers-crossed I'm good here :)

Yea, that cross-account trust is a good call out. I'll need to spend time thinking more about it. Is there anything i could do such that you could say: 'Well, in this case I'm fine with cross-account access from a stranger like you'?

andreygrehov··on Show HN: Atlasphere – Live Infrastructure Diagrams
Hey, thanks for the feedback. I do agree with you and that was not intentional. Do you actually see the pricing table in the app? I thought it's matching the website. I might have missed dropping the "upgrade" badge. I haven't fully figured the pricing model yet, so i thought hiding everything billing related for now is the simplest path forward.
andreygrehov··on Ask HN: Why was my Show HN flagged?
That’s what I suspected. Thanks Paul.
andreygrehov··on Microsoft builds MacBook Pro rival with NVIDIA-powered Surface Laptop Ultra
Microsoft doesn't get it. People don't buy MacBooks because they're powerful. People buy MacBooks because they love macOS.
andreygrehov··on Ferrari Luce
The guy (Jony Ive) could've just used ChatGPT. Here is the $640k Ferrari everybody expects - https://ibb.co/GfgGjQQD
andreygrehov··on Ferrari Luce
Holy smokes this looks bad, nothing like Ferrari. The car was designed by Jony Ive, but from what I can see, he has zero experience designing cars. The asking price is $640k, which is absolutely hilarious. They should've published a render on April Fool's day instead.
andreygrehov··on SpaceX says it has agreement to acquire Cursor for $60B
I wonder if they are actually 'acquiring' some of the existing contracts between Cursor and X/Y/Z rather than the product itself.
andreygrehov··on SpaceX says it has agreement to acquire Cursor for $60B
Could be contracts.
andreygrehov··on Laws of Software Engineering
`Copy as markdown` please.
andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
> And the commenter aren't wrong when they blame the administration. They wouldn't be wrong to blame previous administrations either. But the previous administrations aren't in power right now

They are wrong. The current administration did not make a call to widen the permissions or make it intentionally overly broad.

> This pretty much insinuates Biden (and Trump v1, and Obama, and Bush) didn't fix it.

Why do you believe the president is responsible? Could be just a lazy contractor.

andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
Given that all other apps follow the same pattern, I insist that it has nothing to do with any sitting administration.
andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
Fox News is not popular on HN.
andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
Where in my comments did I say “but Biden didn't fix it”? What I say is the majority of commenters are wrong blaming the administration.
andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
No. That narrative is driven by mass media, which shapes the perception of opinions posted on HN.
andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
So where was that outrage before the current administration? The comments in this submission mostly blame the administration. I verified older versions of the apps and found that the wide permissions were there prior to Trump, and now suddenly it’s "hey, but he did not fix it!" This is hilarious, don't you think?
andreygrehov··on Fedware: Government apps that spy harder than the apps they ban
The apps have nothing to do with the current administration. All these permissions were already in place before the current administration. It’s easy to verify this by looking at previous versions of the apps. HN has created a narrative that everything the current administration does is bad.
Page 1 of 32Next →