HNHacker News
TopNewBestAskShowJobs

curuinor

2,260 karma · joined December 5, 2011

I am a person

It is not the case that I am not a person

submissionscomments
curuinor··on Deep dive into Turso, the “SQLite rewrite in Rust”
metabase.com, but metabase is intended for business analyst types and is AGPL, with shenanigans for embedding and an enterprise edition thing
curuinor··on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
https://www.coderabbit.ai/blog/our-response-to-the-january-2...
curuinor··on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
CodeRabbit response -

https://www.coderabbit.ai/blog/our-response-to-the-january-2...

curuinor··on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
hey, this is Howon from CodeRabbit. We use a cloud-provider-provided key vault for application secrets, including GH private key.
curuinor··on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
hey, this is Howon from CodeRabbit. We use a cloud-provider-provided key vault for application secrets, including GH private key.
curuinor··on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
hey, this is Howon from CodeRabbit. We use a cloud-provider-provided key vault for application secrets, including GH private key.
curuinor··on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
hey, this is Howon from CodeRabbit here. we wish to note that this RCE was reported and fixed in January. it was entirely prospective and no customer data was affected. we have extensive sandboxing for basically any execution of anything now, including any and every tool and all generated code of any kind under the CodeRabbit umbrella.

if you want to learn how CodeRabbit does the isolation, here's a blog post about how: https://cloud.google.com/blog/products/ai-machine-learning/h...

curuinor··on Quantum computing's reality check
they didn't say or give the implicature that it was in one sitting. might be months
curuinor··on My mental model of Clojure transducers
It seems folks want a working example. Here's one in prod:

Metabase is a BI tool, backend written mostly in Clojure. Like basically all BI tools they have this intermediate representation language thing so you write the same thing in "MBQL (metabase query language)" and it theoretically becomes same query in like, Postgres and Mongo and whatever. End user does not usually write MBQL, it's a service for the frontend querybuilding UI thing and lots of other frontend UI stuff mainly in usage.

Whole processing from MBQL -> your SQL or whatever is done via a buncha big-ass transducers. There's a query cache and lots of other stuff, you need state, but you also need it to be basically fast. Metabase is not materially faster than other BI tools (because all the other BI tools do something vaguely similar in their langs and because the limiting factor is still the actual query running in most cases) but it's pretty comparable speed and the whole thing was materially written by like 5 peeps.

https://github.com/metabase/metabase/blob/master/src/metabas...

(nb: I used to work for Metabase but currently do not. but open core is open core)

curuinor··on Ask HN: Why hasn't the deep learning community embraced Julia yet?
'language created by academicians' is like, an anti-selling point (in fact, python was created when von rossum was in grad school so it's still created by academicians, just got lots of development in the 30 years after)

julia also has weird behaviors scattered all over the place

curuinor··on Ask HN: If I build it, will you pay? (CRM for home buyers)
Also, wrt the specific domain, multiple real estate markets throughout the world are choking to death by the very specific method of no transactions happening, chiefly mainland china but also all throughout the west.
curuinor··on Ask HN: If I build it, will you pay? (CRM for home buyers)
People do not actually tell you the answer to a question like this. "Would you pay to use this new thing I made?" gets parsed into "are you a polite person and not inclined to shit on a complete stranger's work?" and you will never get a straight answer, in the same general vein as corporate feasibility studies basically seldom ever returning a 'no, this isn't feasible'. I recommend r. fitzpatrick's book "the mom test" about that subject.

After people reply (if they reply) to this thing, you will have learned nothing about whether people would actually pay for it. Go and learn that fact in actual viable ways.

curuinor··on Many researchers were not compliant with their published data sharing statement
that just means that you need to hire half disgruntled scientists and half disgruntled PR folks, journos, attack dogs, muckrakers, etc, doesn't it, then?
curuinor··on Walking the World: Seoul
it's stereotypes about jews being rich, i'm afraid.
curuinor··on Walking the World: Seoul
they had a campaign a decade back to get people to walk on the right side and put stickers everywhere in the subways for it. didn't work out 100% because the previous direction was left. when the ad campaign finished, some people reverted
curuinor··on Walking the World: Seoul
seoul has city planners, hell, my cousin applied to be one. it's just that unlike in the us, city planners are empowered to get nimbys to shut the hell up and go and build things
curuinor··on American tech giants are making life tough for startups (2018)
Slack's gotten bought. It's bought. SFDC bought it. come on...
curuinor··on U.S. task force recommending anxiety screening in kids 8 and older
as one of the sibling comments noted, the king's father was kinda a little shit too, so you really don't know on that rolling of the dice, basically
curuinor··on U.S. task force recommending anxiety screening in kids 8 and older
thats just bhutan

bhutan's an absolute autocratic kingdom, it's just that the king is oxford-educated and does a lot of the usual enlightened monarchy stuff and seems a decent enough man. if his son is a little shit or he gets a stroke or something, that all goes down the toilet

curuinor··on Bolt Financial's loans come due
daily wtf, which is stiiiill going, was also materially part of that sorta thing, but they were successfully paranoid enough not to get lawsuit threats until it wasn't worth it anymore like fuckedcompany was. so sidling into the thing worked the last turbomega tech crash
curuinor··on Teach your kids bridge, not poker
whereas east asia mostly has a drinking age intermediate between the two and, in turn, get absolutely turbo-sozzled, mega-crunked even more than americans. only comparable to east europeans, really.

more the state of society than the number

curuinor··on I'm an addict
I wrote a dealio a bit back which was pretty popular here on reducing addiction to the internet by diluting it via latency, like it's harder to get addicted to small beer than to liquor. People thought when they were voting for prohibition a century ago that they were voting for banning liquor and leaving beer alone: I tend to think _that_ idea wasn't so incredibly bad, actually

https://howonlee.github.io/2020/02/12/I-20Add-2020-20Seconds...

I've been annoyed for a good while that online videos seem to be pretty resistant because of their variable lengths to the per-request futzing I've been doing. I probably need to get a pihole and inject latency at network level on streaming stuff, too, but this is pretty complicated and I have flatmates

curuinor··on Twitter CEO fires two top executives, freezes hiring
i mean, when's that ever stopped this guy?
curuinor··on Flutter 3
they got clojuredart now, which is still kind of a fly-by-night thing but those Roam Research peeps are apparently using it in production

https://github.com/Tensegritics/ClojureDart

(and in turn, clojure itself is a highly opinionated thing which isn't gonna turn into a blub that everyone uses...)

curuinor··on So You Wanna Be a Chef (2010)
ticket machine for short-order line cooks is the strongest pure example of operant conditioning in work today, I feel.
curuinor··on Emerging evidence that mindfulness can sometimes increase selfish tendencies
best to go read reschauer's book, cited in the wiki page
curuinor··on Emerging evidence that mindfulness can sometimes increase selfish tendencies
and seneca the stoic had 300 million sestertii total net worth, compared to the ordinary yearly wage of 200 sestertii, give or take!

lots of rich religious folks out there in history. when they expropriated the buddhists in the huichang expropriation during the tang, they took tens of millions of acres of arable land and liberated 150,000 temple slaves

curuinor··on Apple's director of machine learning resigns due to return to office work
he's had a decades-long tendency to just say that stuff has been invented before, sometimes by him, sometimes by obscure russians, that one time by Gauss. sometimes he's right, more of the time he's materially wrong, all of the time he's got no social sense.
curuinor··on When is a ‘tank’ not a tank?
this guy put the fact that he's a gigantic pedant right up front in the blog title, what'd you expect? let him go and do the pedantry thing, it's instructive
curuinor··on When is a ‘tank’ not a tank?
they're working on the drone tanks

https://www.thedefensepost.com/2020/12/21/us-army-drone-tank...

← PreviousPage 3 of 17Next →