HNHacker News
TopNewBestAskShowJobs

devy

10,632 karma · joined March 11, 2011

[ my public key: https://keybase.io/yewang; my proof: https://keybase.io/yewang/sigs/oqeIeIArRK13MRWPHemV_vmPEn1K4qClxSFpwQsTB5U ]

hnchat.com:3XTKnS6ltyuLoPtjZlYF

Opinions and views expressed here are my own.

submissionscomments
devy··on U.S. postal inspectors shut down website selling counterfeit postage labels
And the only plausible way they got around is likely recycle previously used real tracking numbers because USPS is inept (the thing USPS has been constant and consistent is raising prices).

We would never know how since that's the part USPS redacted heavily.

I wish Anthropic/OpenAI FDE take over USPS IT altogether.

devy··on U.S. postal inspectors shut down website selling counterfeit postage labels
No. That won't work. Every carrier has it own way to generate tracking number. And that number must have registered in the carrier's database before it becomes "valid/sanctioned".

If you generate a random number even fitting the pattern and looks like a real one, the scan will fail with an error and fail to register tracking information every single step of the way that package gets scanned from dropoff at the retail postal office (this was the case) as bulk inbound pickup from USPS are only allowed for USPS verified partners.

Label creation (which generates the tracking number) is a billable action in their API. Some volume partners have pre-arranged/allocated tracking number segments assigned to the bulk volume partner/shipper (similar like how IP address v4 is assignment from IANA). And that pre-allocation tracking number range requires $$$$ contract in place. Billing that is post paid like cellphone bill.

Most retail shipping software (like shipengine, pirateship etc.) bills using the prepaid method, meaning you will have to pay for the label at the time label is generated.

Disclaimer: I used to work for a carrier that integrated a few dozens of global shipping carriers.

devy··on Why Doesn't Anyone Want to Fix One of America's Scariest Roads?
Low risk? Not if you travel on Winter on non-winterized vehicle / tires and without extra food, water and fuel for heating. The nature is cruel.
devy··on Why Doesn't Anyone Want to Fix One of America's Scariest Roads?
Not as scary as this: https://dot.alaska.gov/highways/dalton/
devy··on America.gov
Yep, not only that America.gov FAILED the web accessibility test:

America.gov has 1 ERROR and FAILED TO LOAD - this is violating Federal laws. Class action suits anyone?

https://wave.webaim.org/report#/america.gov

Meanwhile the old USA.gov works and loading and no errors (some warnings are expected)

https://wave.webaim.org/report#/usa.gov

devy··on macOS Golden Gate Is a Buggy Mess
Private deployed instances of Claude models at Apple has been reported written majority of their code. Perhaps these visual bugs are the manifest of Claude's weakness in vision in the past 6-12 months? Admittedly Claude's vision has gotten better this year.
devy··on Rails World 2026 Opening Keynote [video]
DHH is right (pun intended), p(bloom) is the ONLY WAY to LIVE.

Living in the fear of p(doom) is miserable. We're all gonna die one day anyway.

devy··on Rails World 2026 Opening Keynote [video]
I really enjoyed DHH's keynote speech using his own family lineage story via the art history intertwined with technology evolution portrait paintings -> photography pictures as analogy of what's happening right now in the technology landscapes.
devy··on 28% of job postings on company career sites have been open over 90 days
The article is a content marketing piece. The goal is to attract attention, not necessarily to be precise or accurate
devy··on Microsoft killed FoxPro in 2007. Anyway, here's FoxPro revived
This is awesome! Having had to deal with ancient file formats knowing that there are renewed tooling that's not binding to legacy OSes that you can't no longer find viably is great.

Now, who's open sourcing and reviving FileMaker that Apple killed?

devy··on M5 Ultra Mac Studio Review
This dream machine costs over $15k (not including the Apple Studio Display)? Nah, that dream is SO OUT OF TOUCH!
devy··on I am often wrong
Is there anyone else like me who can't help but noticed the url has a comma in it?

  /management,/product/2026/09/19/I-am-often-wrong.html
Removing that comma, you got a 404 error.

My pet peeve.

devy··on Samsung is expected to more than double output of its HBM4 and HBM4E DRAM
HBM4 and HBM4E DRAM are NOT the DDR4/5 that consumer markets need. Capacity allocation is leaning more to data center grade HBMs so less to produce dedicated DDR4/5 DRAMs. Supply demand will further drive up the consumer DRAM price! Note, the article mentions NO of new fabs is being constructed (all semiconductor manufacturers know that constructing more fabs means the boom/burst cycle will eventually kill them, so no one create more fabs) Perhaps the federal government need to step in here - the market doesn't fit the issue.
devy··on We got admin access to Baseten's production GitHub
This is probably still considered standard response timeline, not a rapid one.

The time window allowing for CVEs + Vulnerabilities remediation has been collapsing to days and hours perhaps even minutes[1]. Anyone who has an OpenRouter account can start using Strix + GLM 5.3 Flash to do damages at frontier Mytho 5 level cyber capabilities. [2]

This cyber patching race is on, won't stop until all the software created for the past 70 years still in active use needs to be patched up. This is happening at EVERY SINGLE software company.

The cost of not doing it? Game over.

[1]: https://news.ycombinator.com/item?id=49699402

[2]: https://news.ycombinator.com/item?id=49705036

devy··on RubyGems Open Source Supply Chain Security and OpenAI
Two chilling effects Mr. Rietta brought up that are legit and happening right now:

1. "When a critical CVE is published impacting a publicly accessible system, think again. You have hours at most. All organizations have to process changes to match this reality on the ground."

2. “AIs are also good at reverse-engineering exploits from patches, which means that these vulnerabilities will be weaponized as soon as the update is published.” Yes, it helps defenders long term but in the short term it is a weapon most are not ready for.

devy··on Rust is tier-1 language at Microsoft
Aight! Fable 5.1 summary says this is about Microsoft built, self-hosts, and runs in production a proprietary-backend codegen for rustc that bypasses LLVM on Windows. The vehicle is rustc_codegen_utc, an alternative rustc backend in the same family as the LLVM, GCC, and Cranelift backends, wired to the MSVC backend ("UTC").
devy··on Neki is sharded Postgres by PlanetScale
Shouldn't this be folded into that? Another one https://news.ycombinator.com/item?id=49645763
devy··on Neki – Sharded Postgres
How does Neki compare to https://pgdog.dev/?
devy··on Rust is tier-1 language at Microsoft
This makes strategic sense in multiple ways:

1. Rust's memory safety design will help Microsoft improve a gigantic portfolios of products that have been known to have lots of CVEs and 70% of them are memory safety issues, according to Azure CTO Mark Russinovich's talk at RustCon last year.[1]

2. Windows 11's forceful push to retire millions of legacy PC hardware by putting Windows 10 EOL last October was absurd for millions of consumers and businesses. I was literrally helping a S&B having to replace the entire fleet of working PCs simply because Windows 10 of EOL and Windows 11 refused to run on those legacy hardware. Quite honestly those PCs ran just fine! That's why some has been migrated to Linux, in particular to Google's ChromeOS Flex.[2]

3. RAM shortage due to AI boom exhausted the memory chip manufacturers' production pipepline for at least the next 5 years. This means the mainstream PCs sold today will actually have a diminishing RAM size configurations than last year's in order for the PC manufacturers to not drastically raise the product price (or raise prices drastically for high RAM configurations like Apple does). This requires the Windows 11 operating system to be more conservative about RAM usage, Rust can be a part of that.

[1] https://www.youtube.com/watch?v=uDtMuS7BExE

[2] https://chromeos.google/products/chromeos-flex/

devy··on Shopify acquires Tailwind
It's about time! Adam has been stressed about revenue and long term viability of a business to support a popular CSS /UI library framework like Tailwind. Shopify was an early customer too.

PS: I like how Adam dissing on the famous Claude Speak "load bearing" with a strike-through!. Subtle, but EVERY PUN intended, hah!

https://tailwindcss.com/blog/tailwind-is-joining-shopify#~te...

devy··on Discovery of a new OpenAI agent message board
Is this the same incidents that were reported by METR? [1] Dwarkesh made two episodes on these incidents [2]

[1] https://metr.org/blog/2026-08-26-openai-hugging-face-inciden...

[2] https://www.dwarkesh.com/p/ajeya-cotra

devy··on Go grandmaster Shin defeats AI KataGo with a two-stone handicap
> Katago (almost certainly significantly stronger than AlphaGo)

Interesting KataGo is an open sourced Go program written primarily by David Wu in C++ and recently heavily vibe coded by Claude. It's running on four Nvidia RTX-3090 GPUs with 96GB VRAM. [1]

[1] https://github.com/lightvector/KataGo

devy··on Qwen 3.8 27B available on Cerebras at 1500 tokens/s
Exactly, it burns the tokens 3000x faster, which means the budget ($$$$$$) runs out so faster it will stop super quick, not able to perform long-duration work. At 27B parameter size, the intelligence is not able to accomplish work within a short amount time. Consequently, it become not usable.
devy··on Echo Is Acquiring Minimus
More details https://dealroom.co/news/146562-twistlock-founders-shut-down...
devy··on Muse Spark 1.3
> I'm not an Amodei stan, but of all of these people he seems to have the most ethical focus. Again, not everything done perfectly and I have my gripes, but of the leaders of frontier labs, I'll vote with my money.

Amodei is NO Saint!!! He's the most savvy in drumming up the AI doomsday scenarios and haven't yet to apologized his failed forecast of Claude taking over 90% of the coding jobs.

devy··on Using Cloudflare Workers and reCAPTCHA v3 for a Static Site Contact Form
Google has reduced the free tier limit for reCAPTCHA v3 from 1 million down to 10,000 assessments per month as part of its mandatory migration to Google Cloud. [1] So basically it's NOT a viable anti-spam mechanism for many use cases any more because that 10k asessment is easily breached. Let alone the fact that you can't use recaptcha v3 unless you signs up for Google Cloud as well.

Cloudflare Turnstile is a valid alternative though. [2]

[1] https://docs.cloud.google.com/recaptcha/docs/migration-overv...

[2] https://www.cloudflare.com/products/turnstile/

devy··on The ChatGPT/Codex app bundles a full copy of LibreOffice
Now someone please use ChatGPT/Codex or Claude Code to rewrite the entire LibreOffice source into a single Rust binary already! Just like Jarred Sumner did for Bun [1] or Carmine Paolino did for Fastpotify [2] - granted there are some rough edges for sure, but the slim diet trimmed down and performance gains were wrothy.

[1] https://bun.com/blog/bun-in-rust [2] https://fastpotify.rocks/

devy··on Refurbishing a Tektronix TDS7104 Oscilloscope
Flebay has some used ones around $1.5k. I wonder how much this model MSRP brand new? Either way, $300 is a steal!
devy··on The End of Programming
Don't conflate the existing SOTA and the future SOTA.

When OpenAI released ChatGPT 3.5 in late 2022 as free a research preview as the SOTA at the time, the model wasn't good and with a ton of hallucinations. There was no harness, context windows was small and token speed is slow. Plenty of folks said what a joke, no one can do serious work with it.

4 year later now looking back, can you imagine what AI capabilities are now? Can you imagine what AI would be capable another 4 years from today?

Keep in mind, AI improvement is not stagnant as everyone is working on Recursive Self-Improvement and trillions of dollars pouring into it. If you are betting the future on the current understanding the AI capability, I bet you will lose.

devy··on GitHub Outage Tracker: Is GitHub Cooked?
Didn't GitHub CTO Vladimir Fedorov just posted this a couple days ago?

https://github.blog/news-insights/company-news/the-august-17...

Page 1 of 34Next →