HNHacker News
TopNewBestAskShowJobs

devy

10,656 karma · joined March 11, 2011

[ my public key: https://keybase.io/yewang; my proof: https://keybase.io/yewang/sigs/oqeIeIArRK13MRWPHemV_vmPEn1K4qClxSFpwQsTB5U ]

hnchat.com:3XTKnS6ltyuLoPtjZlYF

Opinions and views expressed here are my own.

submissionscomments
devy··on Deno Desktop
> At this point the only OS with a consistent look and feel at all is Mac.

Apparently, NOT! Apple's controversial Liquid Glass UI disrupted their long-standing Human Interface Guidelines by prioritizing cinematic aesthetics (transparency, refractions, and blur) over core tenets like readability, contrast, and content deference. Critics highlight that transparent, light-bending panes frequently clash with underlying wallpapers or videos, causing text and buttons to become illegible. This is a HOT topic in recent WWDCs and amongst UI designers.[1]

[1] https://blog.prototypr.io/why-apples-liquid-glass-design-is-...

devy··on The Birth and Death of JavaScript (2014)
Gary Bernhardt's Wat lightning talk [1] was my favorite of all time.

It's only 2 years predates this talk in the title.

[1]: https://www.destroyallsoftware.com/talks/wat

devy··on Please don't spam people looking for employment. It's just cruel
AI and their armies of agents has been making the job search much much worse for both employers and employees - the reason is simply, spamming becomes extremely cheap and easy - sometimes it's literally one prompt away.

Find offline channels to connect with potential employers in person is your best bet, IMO. Good luck job search!

devy··on Google Cloud fraud defense, the next evolution of reCAPTCHA
I can't believe promoting the QR code-based challenge as the agentic way of fraud defense. Having non-human readable data input is dangerous if somehow the QR code is comprised with a zero-day URL, it's game-over.

Note: I know QR code is ubiquitous these days, but still blinding scanning a QR code to go to accessing an URL is like running a binary downloaded from the internet.

Note2: yes, the `curl $URL | bash` installation approach is essentially just that, yet somehow became popular.

devy··on Red Squares – GitHub outages as contributions
We need one for Anthropic's Claude: https://status.claude.com/

IMO, Claude is not fairing any better than Github.

devy··on Ghostty is leaving GitHub
I am an early GitHub user with low 6 digit user ID (joined around 2011 with a two letter handle). I approve Mitchell's message.

It's been painful to use GitHub these days, user experience practically went down the toilet with ridiculous pains like CVEs [1][2], slow and ineffective and expensive GitHub Actions that doesn't allow local execution instead a "push & pray" workflow leading to repetitive "commit-push-wait" cycles to debug CI errors or bugs and then the absolutely horrendous Arkose Lab's Octocaptcha[3][4]. Note that only new users are encountering the Octocaptcha at account creation time, the amount of the time I wasted on solving these ridiculous visual or audio captchas are insane. I happened to need to create 3 separate accounts for the orgs that I am consulting for recently, each time it was at least 20-30 minutes to go through the account creation process. Sure it blocks some AI bots, but can't GitHub team create something that doesn't hinder the user experience?! Oh, if you have uBlock Origin or Privacy Guard on (which I did), it will take longer because each failed answer will set you back for another 5-10 mins of puzzle time!

Plus the reliability issues that Mitchell mentioned. Mona the Octocat jumped the shark in 2026. RIP.

[1] https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-38... [2] https://thehackernews.com/2026/03/trivy-security-scanner-git... [3] https://octocaptcha.com [4] https://share.google/aimode/2KOowSozTuZJVhBLw

devy··on I ported Mac OS X to the Nintendo Wii
This reminds me the 2008-2009 era where Mac OS X Leopard was running Hackintosh on Dell Mini 9 and some other netbooks.

At $349, it was almost a fully functional laptop that runs on Mac OS X (comparing to over $1000+ MacBooks or $1599 MacBook Pros)

Two friends of mine literally working remotely in an Africa trip with Dell Mini 9 and mobile hotspots and were doing video conferencing with Skype (on Wi-Fi).

[1] https://en.wikipedia.org/wiki/Dell_Inspiron_Mini_Series

[2] https://en.wikipedia.org/wiki/Hackintosh

devy··on The cult of vibe coding is dogfooding run amok
> Bad code works fine until it doesn't.

Who is to judge the "good" or "bad" anyway?

devy··on DRAM pricing is killing the hobbyist SBC market
The high cost of high end DRAM (4GB+) cost skyrocketing has caused some interesting shifts:

1. Shifting Hobbyist Focus: Because hobbyists typically prefer parts under the $100 mark (so they don't "fret over breaking them"), the community is shifting away from modern, high-powered SBCs. Instead, people are moving toward:

2. Older SBC models (like the Pi 3 or 4 with lower RAM).

3. Microcontrollers (like the RP2040) which remain cheap. So Used hardware and "repurposing" old tech is retro trending again.

IMO, perhaps there will be push to make software/firmware more RAM efficient with AI assisted coding?

devy··on LinkedIn is searching your browser extensions
> To broaden my point, I think we’d find that many websites we use are doing this.

Your point of "I think we’d find that many websites we use are doing this" doesn't make LinkedIn's behavior ok!

By your logic, if our privacy rights are invaded which is illegal in most jurisdiction, and then it become ok because many companies do illegal things??

devy··on LinkedIn is illegally searching your computer
LinkedIn has been a weirdest social network for a long time.

https://hn.algolia.com/?q=linkedin+weird

devy··on Claude Code runs Git reset –hard origin/main against project repo every 10 mins
Yep. False report.

https://github.com/anthropics/claude-code/issues/40710#issue...

devy··on Malus – Clean Room as a Service
LOL. Same here. But the footer disclaimer and testimonials gave it away immediately:

> "We had 847 AGPL dependencies blocking our acquisition. MalusCorp liberated them all in 3 weeks. The due diligence team found zero license issues. We closed at $2.3B." - Marcus Wellington III, Former CTO, Definitely Real Corp (Acquired)

> © 2024 MalusCorp International Holdings Ltd. Registered in [JURISDICTION WITHHELD].

> This service is provided "as is" without warranty. MalusCorp is not responsible for any legal consequences, moral implications, or late-night guilt spirals resulting from use of our services.

devy··on Florida judge rules red light camera tickets are unconstitutional
NYC government has thought about the legality of red light cameras. What they made it legal is to have human law enforcement officers review ever single computer flagged speeding footages with zoom out license plates, putting enforcement officer's signature into the tickets mailed out. In the same ticket they also provided a signed affidavit from the red light camera technology vendor's technician who performs weekly technical maintenance to certify that the red light camera is functional proper at the designed technical specifications (violation speed was far exceeds the margin of errors of reported speed etc.) Thus, both signatures satisfied the legal due process in NY state law. And the red light camera tickets mailing out are legal and enforceable.

Sources:

1. yes I got them before when I was driving a lot in Queens, New York City had legal counsel regarding fighting these red light camera tickets.

2. NYC government is quadrupling those cameras as it's a really cheap way to increase municipal revenue and reduce traffic speed. It's working if you drive in Queens NYC you will notice most traffic obey to the speed limits. https://www.reddit.com/r/nyc/comments/1q8fm89/nyc_to_quadrup...

devy··on 10% of Firefox crashes are caused by bitflips
I wonder if Chrome dev team can corroborate on this finding in their crash reporting.
devy··on I found a useful Git one liner buried in leaked CIA developer docs
I needed that exact functionality and Claude code and ChatGPT consistently showing this same exact combo CLI receipt with the simple prompt "how to do use CLI to remove merged branch locally."
devy··on Another GitHub outage in the same day
They were talking about prioritizing migration into Azure for a long while now. Not sure this incident today is related.

https://thenewstack.io/github-will-prioritize-migrating-to-a...

And coincidentally, an early CircleCI engineer wrote an article about GitHub Action (TLDR: don't use GitHub Action for CI/CD!)

https://www.iankduncan.com/engineering/2026-02-05-github-act...

https://news.ycombinator.com/item?id=46908491

devy··on Claude's new constitution
In my current time zone UTC+1 Central European Time (CET), it's still January 21st, 2026 11:20PM.

Why is the post dated January 22nd?

devy··on The highest quality codebase
> Read and summarize the project

> Implement a fresh project based off of this description

Genuine question, if we were to ask AI to do those two steps to generate a different code base from scratch entirely, does it qualify for a "clean room" design legally speaking?

devy··on Cloudflare outage should not have happened
Author's real cause prevention notes.

> 1. No nullable fiels.

Is that a typo there? fiels should be fields?

devy··on OpenAI Needs $400B In The Next 12 Months
Ed Zitron the author of the article talked about this in an earlier podcast:

https://youtu.be/_wStScmT748

devy··on I almost got hacked by a 'job interview'
This is a optional/invite only feature. LinkedIn doesn't provide that work email validation feature for all employers on their platform. Why did I know that? Because my past startup was requesting LinkedIn to enable that so that we can enable that feature but they said it's an invite only feature. Internally, I think they are only invite those employers who has certain amount of employees and/or revenues to turn it on.

Apple / Google developer program uses Dun&Bradstreet to verify company and developer identities. That's another way. But LinkedIn doesn't have that feature (yet).

devy··on I almost got hacked by a 'job interview'
> Seasoned accounts are a positive heuristic in many domains, not just LinkedIn.

Yep. This is how the 3 major credit bureaus is the United States to verify your identity. Your residence history and your presences on the distributed Internet is the HARDES to fake.

devy··on I almost got hacked by a 'job interview'
The pseudonym "Mykola Yanchii" on LinkedIn [1] doesn't look real at all.

Click "More" button -> "About this profile", RED FLAGS ALL OVER.

-> Joined May 2025 -> Contact information Updated less than 6 months ago -> Profile photo Updated less than 6 months ago

Funny things, this profile has the LinkedIn Verified Checkmark and was verified by Persona ?!?! -> This might be a red flag for Persona service itself as it might contain serious flaws and security vulnerabilities that Cyber criminals are relying on that checkmark to scam more people.

Basically, don't trust any profile who's been less than 1yr history even though their work history dated way back, who has Personal checkmark, that should do it.

[1] https://www.linkedin.com/in/mykola-yanchii-430883368/overlay...

devy··on Software update bricks some Jeep 4xe hybrids over the weekend
Someone correct me if I am wrong, we've haven't heard that Tesla OTA updates bricking people's cars.

They implemented a dual redundant system similar like the dual BIOS for motherboard since 1999.

devy··on Introducing tmux-rs
Wonder if anyone has tried these over flourishing AI code assist tools to supercharge the speed these porting projects? If so, what's the experience has been?
devy··on Double is winding down
Re: License for https://github.com/doublehq/oracle

The README.md says it's MIT licensed on the very last line (https://github.com/doublehq/oracle/blob/b69ef4c940217a2fbf52...).

However, LICENCE file (not LICENSE.md file, which doesn't exist, https://github.com/doublehq/oracle/blob/b69ef4c940217a2fbf52...) says it's GPL 3.0 license.

Which one is it?

devy··on T-Mobile employees across the country receive cash offers to illegally swap SIMs
SMS based OTP has been known to be unreliable way to authenticate someone because exactly this type of social engineering hacks.

All software providers and the industry should ban SMS based OTPs as a standard practice. Either leapfrogging to a Passkey implementation or just time based OTPs.

devy··on Toyota cuts 2023 EV sales forecast by nearly 40%
Toyota and Japanese auto manufacturers in general (except Nissan, which is crossed owned by French automaker Renault S.A.) are legging behind in EV development either because they chose the Hydrogen fuel cell route when investing R&D money in the past few decades, probably 10s of billions USD by now. It was a catastrophic strategic mistake. Because of heavy bet on non-EV and the decades of R&D on a dead-end on fuel cell technologies, they have always been wishy-washy about EV investments and productions. The further they delayed their investment in EV technology, the more they are lagging behind in battery tech and EV drivetrain and infotainment systems, as evidently as bZ4X etc.

But the report accurately pointed out the main reason for sales decline is due to the fierce competition in Chinese market where Chinese domestic EV brands are rising rapidly - just as how it was developed for the smartphone in the early 2010s. The iteration speed of product development and governmental support in EV transportation shift drives the huge recent sales success in Chinese EV brands like BYD.

devy··on REI is Laying Off 275 Employees
REI stands for Recreational Equipment, Inc. (https://www.rei.com/) Unless that was a rhetorical question.
← PreviousPage 3 of 34Next →