HNHacker News
TopNewBestAskShowJobs

duckmysick

1,462 karma · joined June 26, 2014

submissionscomments
duckmysick··on Claude Code's source code has been leaked via a map file in their NPM registry
I'm not that familiar with TypeScript/JavaScript - what would be a proper way of handling complex logic? Switch statements? Decision tables?
duckmysick··on Tell HN: Firefox is being slowly deprecated by the industry
There's some irony in Chrome's user agent referencing Mozilla and Gecko for historical compatibility reasons: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
duckmysick··on Trivy ecosystem supply chain briefly compromised
> credential rotation was performed but was not atomic (not all credentials were revoked simultaneously).

How do you simultaneously revoke all credentials of all your accounts spanning multiple services/machines/users?

duckmysick··on Wayland set the Linux Desktop back by 10 years?
> Wayland flips this to isolation-by-default: explicit portals/APIs for screen capture, input, etc.

The problem is old (and even not so old) apps don't expose those APIs so interactions like UI automation on Wayland is limited, if not impossible. I'd love to grant a specific permission just for selected GUI apps, but I can't because they don't support it.

There's a reason why RPA software on Wayland is limited to web apps inside a browser. Or something extremely janky like taking screenshots of the entire desktop and doing OCR. But then you can't interact with unfocused apps.

duckmysick··on Have a fucking website
From what I've observed in different parts of the world, small restaurants, hair salons, beauty salons, boutiques, etc. all go straight to Facebook/Instagram. Opening hours and driving directions are already there, menus/offers are in the gallery - together with pictures of the meals or whatever they are selling. Contact forms are replaced with a WhatsApp number. Testimonials are the customers comments. If there are negative ones, either respond for bonus points or just outright delete them.

Restaurants don't even need a dedicated take-out ordering section since delivery apps cover that too.

I rarely see Squarespace or Wix.

duckmysick··on I was interviewed by an AI bot for a job
The above is specifically from a different LLM trained on the data with the knowledge cutoff of year 1913. Gemini has a cutoff date somewhere in 2025 from what I remember.

If you want to replicate, you should try the same question on the same custom LLM, not Gemini.

duckmysick··on Google closes deal to acquire Wiz
I thought it was WiZ of the lightbulbs fame. Figured they were going all in their smart home approach. But yeah, the other Wiz makes more sense.
duckmysick··on New accounts on HN more likely to use em-dashes
https://lobste.rs/ has a system like that.
duckmysick··on I found a vulnerability. they found a lawyer
That's a butterfly.
duckmysick··on I love the work of the ArchWiki maintainers
I wish there was a wiki like that for Windows.
duckmysick··on MinIO repository is no longer maintained
Most open source projects start small. The author writes code that solves some issue they have. Likely, someone else has the same problem and they would find the code useful. So it's published. For a while it's quiet, but one day a second user shows up and they like it. Maybe something isn't clear or they have a suggestion. That's reasonable and supporting one person doesn't take much.

Then the third user shows up. They have an odd edge case and the code isn't working. Fixing it will take some back and forth but it still can be done in a respectable amount of time. All is good. A few more users might show up, but most open source projects will maintain a small audience. Everyone is happy.

Sometimes, projects keep gaining popularity. Slowly at first, but the growth in interest is there. More bug reports, more discussions, more pull requests. The author didn't expect it. What was doable before takes more effort now. Even if the author adds contributors, they are now a project and a community manager. It requires different skills and a certain mindset. Not everyone is cut out for this. They might even handle a small community pretty well, but at a certain size it gets difficult.

The level of communication and collaboration required can only grow. Not everyone can deal with this and that's ok.

duckmysick··on AI agent opens a PR write a blogpost to shames the maintainer who closes it
We already have a "user agent" as a term for software (browsers, curl, etc.) that fetches web content on behalf of a user. It predates current AI agents by a few decades. I don't think it has much agency either, but here we are (were?).

As for anthropomorphizing software - we've been doing it for a long time. We have software that reads and writes data. Originally those were things that only humans did. But over time these words gained another meaning.

duckmysick··on FDA declines to review Moderna's mRNA flu shot
How am I supposed to research things myself? Let's say I want to research effectiveness and safety of a flu vaccine by myself.

I don't have resources to set up my own lab. I don't even know if the manufacturer will sell a dozen or so vaccines directly to me. So can't even do a basic stoichiometry on my own. And forget about me setting up a trial with actual people - I have no idea where I could begin to make it possible.

If by research you mean reading already published papers, that's literature review and I wouldn't call that a research. But because doing my own experiments and trials is out of question, I'm willing to settle for that.

Reviewing published papers comes with its own set of problems. A lot of papers are behind paywall and I don't have money for the ongoing journal subscriptions. I suppose I can rely only on open journals and pre-prints but that's not all of them. Messaging the authors directly is also an option but it's doesn't scale well and takes time.

Suppose I get my hands on a couple of relevant papers. How can I be sure what's written there is actually correct? It would be nice if I could double check against the raw data, but often that's not available. And at best all I can verify is that the paper's content matches the source data. I can't verify the data itself. At some point I have to trust the authors. Not to mention I don't have access to the data from research that wasn't published, for example because the experiments didn't show anything novel.

But that's fine. Nothing is perfect and after hours (if not days) of reading and playing with data I came to a conclusion that I'm happy with. Of course I have to review it again in a few years. The new research will be published by then. Maybe they will discover something different and I have to review that too.

Overall, I spent a lot of time and it was exhausting. Diligently reading and cross-referencing all that data is mentally taxing. I can't complain though because I've learned something.

There's one problem though. All of that effort was about just a single vaccine. But there's more of them. For other diseases too. And there are other problems I'd love to research. Windmills. Microplastics. Glyphosate. Dozens of types of food. Economic theories. How can I research all of that in a timely fashion?

I'm genuinely asking because I want to. I realize there will be trade-offs involved, but all of them are either relying on someone else (which we try to avoid) or won't be deep enough to form an informed opinion. And I'm not happy with either.

duckmysick··on It's 2026, Just Use Postgres
SQLite or DuckDB if your needs are more analytical than transactional.
duckmysick··on UK Government’s ‘AI Skills Hub’ was delivered by PwC for £4.1M
It's there in the The Model Services Contract, under Core Terms:

> Quality Plans

> 6.1 The Supplier shall develop, within [insert number] Working Days of the Effective Date, quality plans that ensure that all aspects of the Services are the subject of quality management systems and are consistent with BS EN ISO 9001 or any equivalent standard which is generally recognised as having replaced it ("Quality Plans").

The Short Form Contract also have optional ISO 27001 or Cyber Essentials (which is, uh, an adventure on its own). But there's also an option for no certification required. It depends on the contract.

But yes, you're right. Dealing with requirements takes time and experience and you likely need a dedicated person (or team) to deal with it.

duckmysick··on Amazon cuts 16k jobs
> i dunno how else to prove it to you

A prompt to generate similar output would be a good start.

duckmysick··on A few random notes from Claude coding quite a bit last few weeks
Is there anywhere where we can learn more about creating your own agents/skills? Maybe some decent public repos that you could recommend.
duckmysick··on How Markdown took over the world
I'm referring to the part where Mark was scraping the photos from the Harvard's houses face book pages.
duckmysick··on CLI agents make self-hosting on a home server easier and fun
I'd argue that no, managing your own VPN is not a basic skill - certainly not in the realms of software engineering (more like network engineering).
duckmysick··on CLI agents make self-hosting on a home server easier and fun
Software engineering is a broad spectrum where we can move up and down its abstraction ladder. Using off-the-shelf tools and even third-party providers is fine. I don't have to do everything from scratch - after all, I didn't write my own text editor. I'm also happy to download prepacked and preconfigured software on my Linux distro instead of compiling and adding them to PATH manually.

I could, I just choose not to and direct my interests elsewhere. Those interests can change over time too. One day someone with Tailscale can decide to explore Wireguard. Similarly, someone who runs their own mail server might decide to move to a hosted solution and do something else. That's perfectly fine.

To me, this freedom of choice in software engineering is not disheartening. It's liberating and exciting.

duckmysick··on How Markdown took over the world
That made me think - are there any depictions of Markdown in movies and tv shows? I've seen a fair share of C, Java, HTML, and (in newer works) JavaScript and Python. And Perl in The Social Network.

n.b.: the above quote is from The Matrix.

duckmysick··on Autoland saves King Air, everyone reported safe
GPWS = ground proximity warning system

TCAS = traffic alert and collision avoidance system

duckmysick··on Logging sucks
Me neither. When I deal with structured logs, I use Structured Query Language, typically with ClickHouse or DuckDB which are CLI tools too.

grep is all right, but sometimes I need to tease out a complex data relationship.

duckmysick··on Flock and Cyble Inc. weaponize “cybercrime” takedowns to silence critics
> no publicly available data that would demonstrate adherence to the rule.

What kind of data would satisfy you? I imagine any data coming directly from YC would be untrustworthy and third-party data would be incomplete (say, it wouldn't catch content removed before it's published).

Is there a similar data set for other private platforms?

duckmysick··on Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem
> have been reviewed by multiple security org/researchers

I imagine reviewing all the code for all the packages for all the published versions gets really expensive. Who's paying for this?

duckmysick··on Getting a Gemini API key is an exercise in frustration
Which models have you been using?
duckmysick··on All it takes is for one to work out
Sort of related - 10k pushups and other silly exercise quests that changed my life: https://news.ycombinator.com/item?id=45456188
duckmysick··on KDE Plasma 6.8 Will Go Wayland-Exclusive in Dropping X11 Session Support
On the other hand, #1 makes it extremely difficult (if not impossible at all) to have a decent UI automation on Wayland. Sure, you can still do it if you're not leaving the terminal or a web browser, but anything else (including Electron apps) is a no-go. All the existing tools are written for X11.

The last time I looked into it, I found out I would have to deal with each compositor separately. On top of that, the target apps would have to be written with the new API in mind.

duckmysick··on Solarpunk is happening in Africa
> Companies like SunCulture (who used to be a customer of ours) started maintaining all their customers on spreadsheets. But with high volume low-value sales, you need to have good software to manage this.

That's pretty interesting. Can you tell us more what kind of problems your software solved and how you convinced them to move from the spreadsheets?

I tried something similar (in another industry) and it's a mixed bag. Companies often straight up refuse to move past the spreadsheets even though it creates a significant backlog on their side.

duckmysick··on Cheap DIY solar fence design
Based on the photos it's a fence in a fairly private location. I assume it's not viable if the solar fence is right next to a street or a sidewalk, because of potential vandalism and obstructions from trees or street lights.
← PreviousPage 3 of 25Next →