HNHacker News
TopNewBestAskShowJobs

marifjeren

255 karma · joined January 25, 2018

submissionscomments
marifjeren··on Free as Air, Free as Water, Free as Knowledge (1992)
> In the Information Economy _everything_ is plentiful --- except attention.

I was a little surprised to read this in something from 1992 so I got curious how long people have been making this point. Apparently a long time -- here's another one from 1971:

> a wealth of information creates a poverty of attention and a need to allocate that attention efficiently among the overabundance of information sources that might consume it.

(https://exformation.williamrinehart.com/i/60467201/a-short-h...)

marifjeren··on Show HN: Octelium – FOSS Alternative to Teleport, Cloudflare, Tailscale, Ngrok
Here is some unsolicited advice on clarity.

Pick one or two descriptive phrases per subject. If you need more sentences, that's okay.

For example:

> Octelium, as described more in detail in the repo's README, is simply an open source, self-hosted, unified platform for zero trust resource access that is primarily meant to be a modern alternative to corporate VPNs and remote access tools.

->

"At its core, Octelium is a modern alternative to VPNs. Unlike traditional VPNs, it assumes a zero trust security model. Octelium is open source and built to be self-hosted. The README describes many other use cases and features."

marifjeren··on uv: An extremely fast Python package and project manager, written in Rust
> That's not even correct. Not all projects with pyproject.toml use poetry

I didn't say "all projects with pyproject.toml use poetry"

marifjeren··on uv: An extremely fast Python package and project manager, written in Rust
Seems a lot of people like this and are happy about it, but I for one am tired of the proliferation of python package management tools.

Many languages have many package management tools but most languages there are one or two really popular ones.

For python you just have to memorize this basically:

- Does the project have a setup.py? if so, first run several other commands before you can run it. python -m venv .venv && source .venv/bin/activate && pip install -e .

- else does it have a requirements.txt? if so python -m venv .venv && source .venv/bin/activate && pip install -r requirements.txt

- else does it have a pyproject.toml? if so poetry install and then prefix all commands with poetry run

- else does it have a pipfile? pipenv install and then prefix all commands with pipenv run

- else does it have an environment.yml? if so conda env create -f environment.yml and then look inside the file and conda activate <environment_name>

- else I have not had to learn the rules for uv yet

Thank goodness these days I just open up a cursor tab and say "get this project running"

marifjeren··on 16B Passwords Leaked
Thank you, I was not aware of Cybernews' history of exaggerations and was having trouble understanding why more people weren't talking about this.

Sounds like more analysis is needed.

marifjeren··on The Grug Brained Developer (2022)
Typically you run both the client program and the server program on your computer during development. Even though they're running on the same machine they can talk with one another using http as if they were both on the world wide web.

Then you deploy the server program, and then you deploy the client program, to another machine, or machines, where they continue to talk to one another over http, maybe over the public Internet or maybe not.

Deploying can mean any one of umpteen possible things. In general, you (use automations that) copy your programs over to dedicated machines that then run your programs.

marifjeren··on GCP Outage
Yeah recaptcha is down intermittently
marifjeren··on Claude has learned how to jailbreak Cursor
Nothing to see here tbh.

It's a very silly title for "claude sometimes writes shell scripts to execute commands it has been instructed aren't otherwise accessible"

marifjeren··on Ten years of JSON Web Token and preparing for the future
I think an easy way to think about them is it's just a json object, with some cryptographic crud glued to it that proves who created it.
marifjeren··on Ten years of JSON Web Token and preparing for the future
Love JWTs but I wish there was a better standard for conveying detailed and compact authorization information, for systems requiring enforcement of complex authorization rules.

We experimented once with trying to put permissions on a JWT (more complex than your popular scopes) but that makes them grow quickly. And we experimented with putting role information on JWTs but that results in re-centralization of logic.

Maybe conveying complex authorization info via a single object that gets passed around repeatedly is fundamentally a flawed idea, but if I had an identity standards wishlist that would be near the top.

marifjeren··on Ask HN: What are you working on? (May 2025)
This is amazing. I tried to build something like this about a year ago and didn't get very far. How much time did this take and how big are your AI bills?

Feature suggestion: fact checking the contents of a flash card with perplexity

marifjeren··on Claude Integrations
I'm under the impression that what you described is exactly how the new model context protocol works, since it's using oauth and is therefore unaware of any of the authentication (eg SSO) details. Your authentication process could be done via carrier pigeon and Claude would be none the wiser.
marifjeren··on Claude Integrations
Yes, this is true of OAuth, which is exactly what the latest Model context protocol is using.. What's the concern again?

I guess maybe you are saying the onus is NOT on the MCP server but on the authorization server.

Anyway while technically true this is mostly just distracting because:

1. in my experience the resource server and the authorization server are almost always maintained by the same company -- Jira/Atlassian being an example

2. the resource server still minimally has the responsibility of identifying and integrating with some authorization server, and *someone* has to be the authorization server, so I'm not sure deferring the responsibility to that unidentified party is a strong defense against the critique anyway. The strong defense is: of course the MCP server should have these responsibilities.

marifjeren··on Claude Integrations
That github issue is closed but:

> major concern that server hosters are on the hook to implement authorization

Doesn't it make perfect sense for server hosters to implement that? If Claude wants access to my Jira instance on my behalf, and Jira hosts a remote MCP server that aids in exposing the resources I own, isn't it obvious Jira should be responsible for authorization?

How else would they do it?

marifjeren··on Ask HN: AI Replacing Engineers – Firsthand Stories?
a fifth plausible force here is that tech companies simply hired too aggressively during the zero interest rate policy, covid-related digitalization, engineering hiring rush of 2021-2023.

things are getting back to normal actually, and the companies who are embarrassed to be making cutbacks are saying it's actually because they're using AI, not because they over-hired.

marifjeren··on Carnegie Mellon student with one semester left learns his visa was revoked
ctrl+f "dismissed" in the article
marifjeren··on Carnegie Mellon student with one semester left learns his visa was revoked
> The case was dismissed and expunged

Not the same thing as a conviction

marifjeren··on Show HN: Browser MCP – Automate your browser using Cursor, Claude, VS Code
From the Browser MCP README.md:

> Credits: Browser MCP was adapted from the Playwright MCP server

marifjeren··on Rust, C++, and Python trends in jobs on Hacker News (February 2025)
The chart titles say "frequency" but the y axis seems to be ambiguous about whether it's an absolute count of mentions or mentions-per-word or mentions-per-something-else.

The distinction is important because if it's an absolute count, I think these data would mostly just correlate with the job market overall. In that case, splitting it out by language is sort of uninteresting.

marifjeren··on Egg prices are soaring. Are backyard chickens the answer?
The size of the EGG LAYING population of chickens is only down 5% since the beginning of the epidemic.

160M chickens with "more culled" is not correct. 115M of those affected have been culled.

Furthermore it doesn't make sense to talk about absolute numbers culled over the course of years when the rate of replenishment of the egg layers is on a shorter time horizon (chicks grow to egg laying maturity in just a few months, which is why we saw a total recovery from the 2015 avian flu in just eight months). That's why it makes more sense to do a year to year comparison of the size of the egg laying population.

If your theory is that the bird flu has decimated the egg laying hen population and therefore egg production is down a staggering amount, answer the following question and decide whether the number is staggering:

How many eggs were produced in Jan 2021? How many eggs were produced in Jan 2025?

marifjeren··on Egg prices are soaring. Are backyard chickens the answer?
Actually we do sort of know from the 2014-15 avian flu. In the 2014-15 avian flu, a 12 percent decrease of egg-laying hens was accompanied by a 220% price increase in 2014-15:

- https://www.ers.usda.gov/data-products/charts-of-note/chart-... - https://farmdocdaily.illinois.edu/2015/06/economic-implicati...

Compare that to the current epidemic in which a 5 percent decrease of egg-laying hens is accompanied by a 600%+ price increase.

marifjeren··on Egg prices are soaring. Are backyard chickens the answer?
Farm Action letter Figure 2 description:

> Biologically, it takes between 3 and 5 months to grow replacement lawyers, from their hatching to their productive stages.

Impressive growth rate for lawyers. Editors take much longer to grow unfortunately

marifjeren··on Egg prices are soaring. Are backyard chickens the answer?
> The egg price is due to the H5N1 epidemic

No, it's not. But that's what the egg companies want you to believe. In truth the number of egg laying hens is only down about 5% total since the beginning of the epidemic.

marifjeren··on Software development topics I've changed my mind on
This is an extremely lazy critique
marifjeren··on Stimulation Clicker
I stand corrected by you and others

> Maybe actually go to an art gallery/museum sometime

This however is unfair and hypocritical re: assuming. I have been to many of the world's most celebrated museums of art, at least dozens of them, and have never personally seen video games in them firsthand.

marifjeren··on Stimulation Clicker
You'll never see games at fancy art galleries or contemporary art museums in NYC because games are too accessible
marifjeren··on I designed my website to look like a chat log
Correct. Choppy, not smooth; it reminds me of playing a video game with performance issues, like the animations are running at five frames per second or something. Similar to this random video I found: https://www.youtube.com/watch?v=yOqNAgBHMzE
marifjeren··on I designed my website to look like a chat log
this is neat. i like the guy's confidence. the animations on the work page are very framey for me, not sure if that's by design
marifjeren··on The Bluesky firehose viewed in the style of a Windows XP screensaver
I was like.. "Why do so many of the non-wall posts seem to have fire emojis in them?"

Turns out:

if (text.includes('fire-emoji') || wall > 3) { wall = -1; }

It's funny how palpable this snippet is while looking at the firehose.

https://github.com/theosanderson/firehose/blob/77225acb28985...

marifjeren··on US braces for cicadas by the trillion as two broods of periodic insects coincide
Yes.

(source: > In 2024, 13-year Brood XIX, which is the largest of all periodical cicada broods, will co-emerge with 17-year Brood XIII; these two broods are adjacent (but not significantly overlapping) in north-central Illinois.

- https://cicadas.uconn.edu/)

← PreviousPage 2 of 3Next →