HNHacker News
TopNewBestAskShowJobs

mpeg

3,206 karma · joined January 19, 2012

Marcos Perona

Tech & Product things

Ex: Experian, Salesforce

Email: mperona@gmail.com

[ my public key: https://keybase.io/mpeg; my proof: https://keybase.io/mpeg/sigs/_rF1YPWP7nnvj_MEQioqkQvf_IHCEkfpSqLnTkm4kHA ]

submissionscomments
mpeg··on AX – Google’s Open Agentic Orchestrator
The project that ax builds on top of does have that disclaimer, and sits on a non-google organisation https://github.com/agent-substrate/substrate
mpeg··on Devastated father says his 9-year-old son spent $118,000 on YouTube ads
sometimes you don't pay the whole amount back, say I went for food and drinks I might expense the food but pay the drinks out of pocket

plus, it was a neat way of having a company supplied line of credit and defer payment for a couple months with no interest

mpeg··on Devastated father says his 9-year-old son spent $118,000 on YouTube ads
Last time I worked corporate the card even allowed cash withdrawals, and would automatically mark them as personal expenses so I could pay them back.

Very handy when I don’t want to use my money for whatever reason but also don’t want the company to know everywhere I’ve been

mpeg··on We built our house for LAN parties (2024)
I recognised Kenton from his profile pic, he’s definitely doing well but also is a terrific principal engineer, and still somehow finds the time to answer questions on discord, I’ve had chats with him about DOs even though my spend on the cf platform is ridiculously low
mpeg··on Bun 1.4
Announcing that the SSR memory leak is gone as part of a product launch is wild.
mpeg··on Ask HN: If Social network is created today, what do you want to see?
I think the reason it feels that way (I agree) is that forums had real community; I met irl friends in forums, people I stayed close with for many years

The modern day equivalent is probably discord, there are servers with really close communities where everyone knows each other

mpeg··on Let's all meet up in the Y2K
I remember in the early 2010s we used to get so much food off deliverance to the office

We found out you could add a negative tip and it would discount it off the price, but no one exploited it too scared that if they banned our address we’d be eating Tesco meal deals instead.

mpeg··on OverpAId – Fire your CEO. Hire the future
Now please do one to replace the MBA executive that gets hired to restructure the engineering team, asking for a friend.
mpeg··on No Spanish reading crisis?
Spanish is certainly an easy language to learn, but it’s a very hard language to master.

I’m a native Spanish speaker and I find English poetry much easier to understand, English is more rigid and while technically it might have a larger vocabulary you can do less with it, while the flexibility of Spanish in terms of word order and suffixes makes it possible to craft some really labyrinthine verses

mpeg··on Codex starts encrypting prompts, uses ciphertext for inference instead
to be fair, the title is very misleading, it took me a minute to understand what they meant
mpeg··on Codex starts encrypting sub-agent prompts
The title is a bit confusing, they're not using ciphertext for inference – they're passing ciphertext around in cases where an agent calls into another agent without exposing the plaintext to the end-user

Inference is still done in plaintext after this multi-agent message gets decrypted in the server side

mpeg··on Ask HN: New employeer not providing equipment
As a counterpoint to all the negative comments here, it’s entirely possible the CTO knows it’s gonna take x time to get your company laptop, which precisely because it’s a regulated industry might mean days/weeks of you waiting around with nothing to do

In that situation it makes sense for you to bring a personal laptop which you can use to access non confidential stuff, you might not write any code in it and might just be given docs to read through

mpeg··on Monetization Gateway: Charge for any resource behind Cloudflare via x402
There are reliable ways of differentiating human from cheap, bulk scraping bots.

But if the bot is advanced / expensive enough, it gets a lot harder. Where this product's market sits is in giving a paid way to access content compared to having to spin up bots that run js, from real IP addresses, etc. all of which are more expensive

mpeg··on What happened after 2k people tried to hack my AI assistant
Yeah, to be fair is not the norm and was mostly due to the AI crypto craze which drove their token price up so they ended up adding very big rewards

Even in LLM jailbreak CTFs I've seen, it ends up feeling like underpaid work when it's sponsored by Microsoft and the prize pool is, say $10k (including stuff like azure credits) considering the salaries AI safety engineers command at big tech!

mpeg··on What happened after 2k people tried to hack my AI assistant
I saw this thing when it was launched, but IIRC the reward was tiny (like $100?) so it wasn't worth exposing a good prompt for

For comparison, I won a similar prompt injection challenge ran by a crypto company a while back where the total prize pool was over $100k... I didn't win every challenge though, but my team took home around half of that

The problem with good prompt injections is they have a very short half life once they are out in the wild (especially if they work against frontier models)

mpeg··on Datasette Apps: Host custom HTML applications inside Datasette
Data engineers hate this one simple trick
mpeg··on Datasette Apps: Host custom HTML applications inside Datasette
I've used that with companies I consult for, everyone thinks they should do what Google does, so sometimes I'll drop them the "your whole company data fits in my phone/laptop" line to make them understand the (lack of) scale
mpeg··on Show HN: Pagecast – Publish Markdown/HTML Reports to Cloudflare Pages
This is nice, but I don't see much of a difference between just asking claude to write a wrangler config to push to cf pages, which can be extremely simple

  name: my-cool-pages-project   
  pages_build_output_dir: ./html-files/
then npx wrangler deploy
mpeg··on How many of the 170k English words do you know?
Yeah I guessed that one right because xylophone player sounded like a trap.

I don't understand how they rank words though, some extremely common words like xenophobia were ranked as high as much more obscure ones.

mpeg··on How many of the 170k English words do you know?
Yeah I got 75k~ and did something similar ... most of the expert and grandmaster ones had at least 1 or 2 obvious incorrect answers, then it was a 50/50 so I usually went for the thing that sounded either closer to the root of the word or completely left-field

Anything up to expert was obvious

mpeg··on How many of the 170k English words do you know?
It'd also be a lot less awkward to go through 100 words if it had keyboard shortcuts (1-4 for the words, enter to submit) and if they fixed the layout shift jank
mpeg··on Datasette Apps: Host custom HTML applications inside Datasette
I disagree, a lot of the time people buy "serious BI tools" precisely because they think they need all that power and complexity.

In reality, what most people need is much simpler, a mini app with some curated datasets and simple filters, maybe some AI querying if we want to get fancy. There's some companies out there that work with big data, but for the rest of us small data is ok.

mpeg··on Ubiquiti: Enterprise NAS, Built on ZFS
I went with eero and really wish I'd gone with unifi

Apart from the shitty software and basic features either missing or locked behind a monthly cost, the network itself is not bad at all, I get 600-700mbps on wifi throughout the house and have my servers wired on 2.5gbe

But the one thing I really thought I was buying into by choosing an amazon brand was ease when it came to buying upgrades, and yet I ended up having to buy extra hardware (like the wired gateway) from ebay and sellers in the US as amazon does not sell their own hardware everywhere

mpeg··on Ubiquiti: Enterprise NAS, Built on ZFS
That seems reasonable, I don't buy NAS for datacenters (just run a modest 80tb one for my home lab) but equivalent rackmount 16-bay ones from other vendors would be more expensive (maybe $5k-6k?) and with less polish.
mpeg··on The $15,000 AI Bill. Your $20 Subscription is a DELUSION [video]
I think there are unknowns in the calculation:

- What are the margins of Anthropic over their API pricing? Without this, all we're saying is the API is more expensive for heavy usage

- How have their price margins changed over time? I imagine built into their commercial model is the expectation for inference to get cheaper over time

- They have tighter usage windows than they used to, now having both 5-hour and weekly limits, they also seem to experiment with their usage quite often, this probably affects user's average utilisation, do they have any other levers they can pull here? eg how does changing to an 8-hour window affect it, or limiting certain models to API-only usage based on capacity like Fable

I know there is a certain level of subsidised usage built into their subscriptions, the VC-funded company playbook, but I don't think anyone from the outside knows for sure how much it is and I imagine it's lower than most people think, and reducing over time.

mpeg··on The $15,000 AI Bill. Your $20 Subscription is a DELUSION [video]
This is true for a lot of subscriptions though: some people use 100% of their mobile plan data, some people use 10% – the price accounts for this.
mpeg··on HTML is a native image format, hear me out
I get that, but the drawbacks outweigh the benefits imho and the b64 overhead is not solved, just deferred.

Say I want to distribute an hmml file as a single file, I'd have to create an html with the embedded js runtime, and then embed the hmml file... as b64, therefore negating any benefits.

mpeg··on HTML is a native image format, hear me out
I don't understand the advantage of this vs an html file with embedded images, except the latter would work with no runtime.
mpeg··on macOS Container Machines
I like orbstack in theory, but I find it hard to justify a $96/yr license fee for something that has so many open source, free alternatives. As it is, I’d rather use podman or colima
mpeg··on Exif Smuggling (2025)
Back in the day I wrote a PoC exploit for my employers app that abused an image upload api by embedding a jar file inside an svg as XXE which then got me RCE. Fun times.
Page 1 of 32Next →