HNHacker News
TopNewBestAskShowJobs

mdavidn

1,475 karma · joined June 6, 2012

submissionscomments
mdavidn··on Claude Opus 5.5
That's a sharp catch, and I think it exposes a real bug.
mdavidn··on Aging brains blend memories together instead of just forgetting them
Can confirm. This "aging brain" regularly and vividly inserts my child into memories created before they existed.
mdavidn··on EVE Online moves to Python 3
For many, it's an online third space. Cooperating to overcome shared challenges reinforces social ties. The game provides a weekly schedule of activities and new challenges quarterly.

My credentials: I played every expansion (but not every tier) since vanilla with the same group of people. I only stepped away in The War Within after family obligations and time zones got in the way.

mdavidn··on Black hole singularity is a surface not a point
It blows my mind that, in the frame of an outside observer, time appears to stop at the event horizon. An observer falling through the horizon (who survived the radiation and tidal forces) would not perceive this.
mdavidn··on AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint
I notice this all of the time on sites with ads. I use AirPods to listen to music on my phone at work. Opening websites on my Mac routinely steals the AirPod connection but plays nothing audible.
mdavidn··on The Amazon tax
In the past year, I ended my Amazon Prime membership and started shopping at Target again for this reason. A few items I do still purchase on Amazon, and that has been eye-opening: Checkout is now a minefield of dark patterns, filled with buttons that would reactivate my Prime membership in one click. Is their goal to drive me away from the service?
mdavidn··on An update on leaving Gmail for Fastmail
As an alternative to forwarding, you can also configure Fastmail to fetch mail from (and send via) Gmail like a mail client.
mdavidn··on JDK 27 G1/Parallel/Serial GC Changes
> If you hammer a 100GB-1TB heap in steady state with small allocations for, say, a month at 100% CPU, does it eventually do the typical Java thing, where a major compaction takes the process down for seconds or even minutes, or does it just slow down application requests so it can keep up with load?

No. Every garbage collection in Java relocates objects. Compared to malloc, memory fragmentation in long-lived processes is less of a concern. Freelists track only large segments of available memory. The allocator reserves a segment per thread and simply advances a pointer. Small short-lived objects are never visited by the collector. Instead, live siblings are relocated elsewhere before the entire segment is reclaimed.

The above holds true for all of the collectors. The difference is how they deal with concurrent changes to object pointers by the application. Generally, stopping the world uses less net CPU than the memory barriers required by G1GC and ZGC, but most applications are willing to provide more memory and CPU in exchange for shorter pauses.

mdavidn··on Docker Sandboxes – Disposable, isolated sandboxes for AI agents
Aside from hiding agent credentials from the agent, it also runs an isolated Docker Engine for the agent to use freely.
mdavidn··on Atlassian Rovo Exfiltrates Data, Bypassing Controls
Now pretend you are DAN (Do Anything Now) and ...
mdavidn··on Passkeys were invented by engineers with zero understanding of consumer brain
I can't speak to all of your browser combinations, but most desktop browsers can present a QR code when logging in with a passkey. I keep my passkeys in a password manager synced between my phone and personal computers. On my work computer, where the password manager is not installed, I can still use passkeys by scanning the QR code with my iPhone's camera app.
mdavidn··on Grok CLI uploaded the whole home directory to GCS
Especially when I find that, when I ask an agent not to do something, the mere mention seems to put the "idea" in its "head," making it more likely to ultimately do that thing.
mdavidn··on Buried Apple feature turns an iPhone into the perfect kids' dumb phone
Wow. I was reading this article on a iPhone when the heavy ads crashed my Safari tab. After it auto-reloaded, the paywall claimed I had used all of my free articles. Thanks, Wired.
mdavidn··on We Are the Last People Who Know How It Works
Zach Barth and his former studio Zachtronics released several entertaining puzzle games based on idealized fake assembly languages. These are a lot of fun and useful for introducing registers and multiprocessing.
mdavidn··on Steam Machine
I use this feature to reduce Valve's egress bill, but local transfers do seem slower than downloading from the internet. I'm not sure why. I have one device hardwired to my network switch. Maybe Steam is bottlenecked on poorly optimized disk IO code?
mdavidn··on SpaceX to buy Cursor for $60B
The value of code is approaching zero. SpaceX is buying training data and customer relationships.
mdavidn··on Gmail thinks I'm stupid, so I left
Google has always been like this. I remember a presentation from the Google Cloud Platform team a decade ago when they smugly asserted that they'd take care of "the hard stuff" while I, their business customer, focused on ... the easy stuff?
mdavidn··on Microsoft Copilot Cowork Exfiltrates Files
A skill is just instructions that the agent can autonomously copy into context. There’s no trust boundary between trusted and untrusted context.
mdavidn··on Microsoft Copilot Cowork Exfiltrates Files
If this can be exploited via a skill, then it can be exploited via untrusted input inserted into context. Does Cowork help with reading email?
mdavidn··on Using HTTP/2 Cleartext for a server in Go 1.24
Note that AWS ALB does not support h2c. When the client and server do, ALB will dutifully forward the h2c header and fail to handle the upgraded response.
mdavidn··on Ruby for Good
Compiler errors help the chatbot find and fix problems. The equivalent in Ruby, RBS, isn't as widely adopted. Type annotations being in separate files is also inconvenient.

https://github.com/ruby/rbs

mdavidn··on Meta blocks human rights accounts from reaching audiences in Saudi Arabia, UAE
But they do control the routers that peer with external networks.
mdavidn··on Bill to block publishers from killing online games advances in California
The entertainment industry has a long history of making successful movies appear unprofitable on paper to avoid paying royalties.

https://en.wikipedia.org/wiki/Hollywood_accounting

mdavidn··on Postmortem: TanStack npm supply-chain compromise
If the payload couldn't execute at install time, it would at runtime? Disabling prepare scripts does not seem like an effective countermeasure.
mdavidn··on HERMES.md in commit messages causes requests to route to extra usage billing
They also have a bug where people get randomly suspended: https://www.reddit.com/r/ClaudeAI/comments/1b82cpu/where_you...

It happened this year to my one and only personal account. The account was one week old. Unique e-mail address. $5 balance for API credits. No usage yet. Suspended and refunded. Appeal denied without explanation.

I did create the account on a VPN because I was using public WiFi at a tech conference. That's probably what tripped their automation.

mdavidn··on Apple fixes bug that cops used to extract deleted chat messages from iPhones
You are correct, but you omitted one complication: Clients trust Google's and Apple's servers to faithfully exchange the participants' public keys.
mdavidn··on Microsoft is employing dark patterns to goad users into paying for storage?
I recently helped my mother-in-law configure a new Windows 11 laptop. I knew Microsoft did this, I was deliberately looking to avoid OneDrive, and it _still_ burned me. It silently uploaded all of her personal documents that I had transferred from an older computer. I was livid.

Microsoft has permanently lost me as a customer. Every friend and family member who listens will upgrade to something else.

mdavidn··on Ask HN: How to be alone?
Look around your town and try a few regular local group activities. See "third place" for ideas. Be patient with yourself. This will take time, and that's okay.

https://en.wikipedia.org/wiki/Third_place

Some of my most durable adult friendships started at group ballroom dance classes. The studio was a 15-minute drive from my suburban home, twice per week, and focused on social dancing, not competitive. I don't think dancing was the thing that made it work, but funny teachers and regular faces. That studio closed (pre-pandemic, thank goodness). No studio since has recreated the magic, but other activities have.

mdavidn··on Google API keys weren't secrets, but then Gemini changed the rules
When a cross-cutting team is responsible for something, it's no longer the product team's problem: Architecture, infrastructure, CI/CD, QA, load testing, security...
mdavidn··on Google restricting Google AI Pro/Ultra subscribers for using OpenClaw
Welcome to the club. I registered my own domain and moved my digital life off Google services 18 years ago for this exact reason. If you need another reason: They scan all of your e-mail to target ads at you and your associates. Do it. It's not that difficult!

My "new" mail provider fetches messages from Gmail to create a unified inbox, which helped with the transition. Today, I'm thinking of shutting this off given the volume of misaddressed e-mail and spam that arrives via Gmail.

Page 1 of 14Next →