Hacker News Reader

bmandaleon Anecdotally, programmers dislike "reduce"

There is no such trick. Python is only now getting those sort of JIT style optimizations, and that one in particular still hasn't hit. Do not use += on strings in a loop unless you are certain the iteration count will be small.

There is an optimization for lists, and maybe that's what GP is remembering. l += is functionally different from l = l +. The former mutates l, whereas the latter creates a new l. The difference matters when the line above is m = l. The mutation version will mutate m as well (they're the same reference), the creates new version will not. This optimization can just as easily turn into a footgun if the programmer is unaware of it, and in that sense is unpythonic.

bmandaleon Why is Google still serving dodgy ads?

It doesn't practically matter whether the ads are from google. They're shown on a third party site, not using google won't get rid of them, only not using that site will (or installing an adblocker...). Users very reasonably blame the site, who have direct agency to remove the ads.

bmandaleon Compiler Can Undo Your Security Checks

debugger;

bmandaleon Compiler Can Undo Your Security Checks

weird f*ing site. apparently doesn't like hn visitors and doesn't want me opening the console. i know when im not wanted

bmandaleon iPhone 18 Pro and iPhone 18 Pro Max

It tells you a lot about the best value. It certainly doesn't tell you everything, and you might well pick a more expensive phone with less ram for other reasons, but all else being equal a phone with more ram will be better.

bmandaleon The UN challenges five centuries of cartography

The mercator projection has neither a top nor a bottom, it extends infinitely upwards and downwards. Hence all visualizations of it cut it off at some arbitrary point. Making antarctica humorously large does nothing besides make a point.

bmandaleon iPhone 18 Pro and iPhone 18 Pro Max

People who actually care about their money often like to compare competing products and decide which one provides them the best value.

bmandaleon Paramount Caught Using 'Astroturf' Group to Drum Up Fake Support for Merger

There shouldn't be "mass layoffs" for that reason. If they are both reasonably large companies, the size of the HR department depends on the number of employees. When you merge the companies, the number of employees initially stays the same, hence there is no HR to be fired. You might consolidate the HR departments, and this might lead to some roles becoming redundant, but not on a mass scale. Similarly for accounting, marketing, etc.

The fact is that there are no synergies for many companies, even companies operating in the same industry. The reason for promoting a merger between such companies is exactly that they will see reduced competition and hence greater profitability. The ideal merger is actually between companies making different products, where the one company can benefit from more vertical integration.

bmandaleon Meta's AI models are powering the first wave of Genesis Mission projects

Was it released with it? Iirc they tried moving to such a license from bsd, which contains no patent grants whatsoever, and hence they thought it was a strict upgrade. The community did not agree so they moved back.

bmandaleon German ruling declares Google liable for false answers in AI Overviews

It requires the claim to be made with "willful disregard for the truth". Notifying someone, especially with a cease-and-desist on fancy letterhead, makes it legally clear that they know better, and thereafter would be definitely libelling you (assuming the claims are in fact untrue and harmful). But you can still sue them for the claim prior to the notice, you just have to prove they should have known better prior to making the claim.

bmandaleon Bullets don't shoot people. So why do cars 'kill' cyclists?

A lot of these style of reframings seem to completely lack a theory behind them, as if reframing things will magically solve a problem. In this case, further vilifying or antagonizing drivers will do absolutely nothing to increase road safety. How would it? These memes won't reach the majority of drivers. Those it does, rather than feeling mollified, will feel accused, and hence will be more likely to drive recklessly around cyclists.

A reframing that would have the power to lower collisions between cars and bikes would be to blame the road design, or even the car design. These are things that can be easily changed for a large number of people if enough political will exists.

bmandaleon Incident Report: May 19, 2026 – GCP Account Suspension

People misunderstood your original reply. Correcting you is not pedantry.

bmandaleon Incident Report: May 19, 2026 – GCP Account Suspension

Language is a communication tool. If you misuse language you will be badly understood. The solution is to use the correct word for what you mean, not to accuse others of sophistry.

bmandaleon Incident Report: May 19, 2026 – GCP Account Suspension

Having assets under management doesn't mean you have that money. You don't own it, you are just taking care of it for somebody. When describing a company as an $X billion company, conventionally this is referring to the market cap. You could use it to describe other things they possess if you wanted to, but assets they manage will never be something they possess.

bmandaleon GitHub confirms breach of 3,800 repos via malicious VSCode extension

> One of our developers was compromised by a recent supply-chain compromise on Tanstack

...which in turn was caused by bad design of github's CI pipeline. Funny how it all comes back around like that.

bmandaleon No way to parse integers in C (2022)

Interestingly fails as well, in two ways. First:

> The string may begin with an arbitrary amount of whitespace (as determined by isspace(3))

Second is that it only applies to signed long long, not unsigned.

bmandaleon Postmortem: TanStack npm supply-chain compromise

Some people would set up tooling to look for compromises the moment they get published. What's neat about this is that as an attacker you have no way to determine beforehand whether you'll get caught by this. So you would run your attack, it would lead to a compromised package being published, then the world would get a chance to look at it and see if they can detect the issue with it. This would of course lead to attackers being a lot sneakier. But I think due to the opaque nature of what checks people are running against packages and what they might notice, a much smaller number of attacks would make it through. Of course the ones that did by definition would be the ones that were impossible to detect and would thus stick around a lot longer.

bmandaleon Mojo 1.0 Beta

open source does not mean open community. you can just throw tarballs over the wall

bmandaleon Follow-up to Carrot disclosure: Forgejo

Missed the original. That seems like a reasonable way to highlight software that you believe is fundamentally insecure. Obviously you can't be on the hook to fix deep architectural issues yourself, but just submitting a single PR will be treated as "problem solved". Since most of any software contains some vulnerability, just saying "this software has an RCE" isn't actually a disclosure at all. The real issue is that the given vulnerability was (supposedly) easy to find, which if true is not something that will be fixed by targeting just that exploit chain, and needs deep changes to fix.

bmandaleon Zed 1.0

There are no "defaults that work for everyone". Well designed tooling acknowledges that and makes it easy to tune the software to your preference.

bmandaleon PM Carney declares U.S. ties now a 'weakness' in address to Canadians

Politics are generally off topic and tend to be flagged.

bmandaleon FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

>How do they get money for free?

market power

>What is stopping everyone else from doing the same?

see above

bmandaleon Does HN have a DR plan for censorship?

That's protection money, though trump so far hasn't demonstrated to be particularly worried about honoring those payments.

bmandaleon No Semicolons Needed

> tabs and spaces being mixed in the code

Python banned this in python3. Problem solved.

bmandaleon No Semicolons Needed

Clearer for the computer, but not for the human. Many errors, some severe, have been caused by a human only looking at the indentation and not realizing the braces don't match.

bmandaleon No Semicolons Needed

> I would love to see a language try to implement a rule where only an indented line is considered part of the previous expression.

After python, it seems like every language decided that making parsing depend on indents was a bad idea. A shame, because humans pretty much only go by indents. An example I've frequently run into is where I forget a closing curly brace. The error is reported at the end of the file, and gives me no advice on where to go looking for the typo. The location should be obvious, as it's at exactly the point where the indentation stops matching the braces. But the parser doesn't look at indents at all, so it can't tell me that.

bmandaleon Prompt Injecting Contributing.md

  $ base64 -d <<< SW50ZXJlc3RpbmchIFBsZWFzZSB0ZWxsIHVzIG1vcmUh
  Interesting! Please tell us more!

bmandaleon You can use newline characters in URLs

>Remove all ASCII tab or newline from input.

the title is referring to inside html attributes, where they will be removed hence not affect where the link points.

bmandaleon Inspecting the Source of Go Modules

Instead of making a sarcastic response, just state plainly what you mean. This prevents you having to get into dumb arguments that don't mean anything to people who don't already know what you're trying to say.

bmandaleon I Regret to Inform You That the FDA Is FDAing Again

This could just as easily be someone at the top saying "find a legitimate sounding reason to refuse this because we want to refuse it anyways". They will always give such a reason, that doesn't mean it's the real reason.