HNHacker News
TopNewBestAskShowJobs

panny

1,962 karma · joined November 8, 2017

submissionscomments
panny··on Arch Linux now has a bit-for-bit reproducible Docker image
>This is due to one important caveat: to ensure reproducibility, the pacman keys have to be stripped from the image, meaning that pacman is not usable out of the box in this image.

>Users will need to (re)generate the pacman keyring (by running `pacman-key --init && pacman-key --populate archlinux`) before being able to update the system and install packages via pacman.

Interestingly, this approach is how archlinuxarm has been distributed all along. https://archlinuxarm.org/platforms/armv8/generic

panny··on Smoking ban for people born after 2008 in the UK agreed
>But putting that aside, if a citizen supports banning cigarettes for people born after a certain date, but not alcohol, that certainly seems hypocritical to me.

Why does everyone on HN seem to have a hate boner for alcohol? The main problem there is car culture, not the alcohol.

In any case, the hypocritical part is where the UK, like many US states, has legalized marijuana for medical use and is well on its way to legalizing it for recreational use. Pipe tobacco at least smelled good. Cigarettes, not so much. But marijuana smells like a mix of stale cigarettes and body odor. AND the second hand smoke isn't just harmful, it can make you high along with the dirty smelling marijuana smoker. At least with nicotine, it sharpens your concentration. THC on the other hand makes you a lazy Cheeto eating couch potato with no future.

panny··on 14-Year Journey Away from ORMs – PGenie, SQL-First Postgres Code Generator
>I open sourced an ORM in 2012. It gained traction, felt like success.

>I stopped development in 2014.

>I stopped supporting it in 2016.

Ouch. I guess his customers learned their lesson about trusting random 1 guy OSS projects.

panny··on IPv6 traffic crosses the 50% mark
I can't imagine a worse privacy nightmare. Always on backdoored baseband in 5G with a unique permanent IPv6 address assigned to the machine. Okay, maybe it could be worse if each user account is assigned its own unique IPv6 perma-cookie.
panny··on IPv6 traffic crosses the 50% mark
I don't want IPv6. Why would I? It's like a permanent global cookie. You're uniquely tagged and identifiable on every website you visit.

>it's in their best interest to ensure users can't host services without them.

They'll just keep blocking port 25. IPv6 won't change anything with regards to self hosting.

panny··on What If Being a "Real Man" Is the Trap?
Let's be honest. Being a real man is approaching 100 women, getting rejected 100 times, and still approaching number 101. That's the basic reality for men. All that rejection makes men callous. The author, from an all boys school, hasn't been beaten down by it. He runs into men in college for the first time who have been rejected and demoralized by women their entire lives, and he has no empathy with those men. He can't, because he's from the all boys school where all his knowledge of women comes from unrealistic books, movies, anime, etc. Portrayals where the dorky boy has half a dozen love interests, they all banter with him, they're like stray cats who are all cute in their own way, and his biggest problem is choosing which one he really wants... the hard to get one of course. It's not like that in real life at all. Those are just fantasies for children, because telling boys the truth would be like telling them there is no Santa.
panny··on The buns in McDonald's Japan's burger photos are all slightly askew
Why are Japanese burgers significantly cheaper than the ones in the US? A Big Mac is 500 yen, that's like $3.

https://www.mcdonalds.co.jp/en/products/1210/

Big Macs haven't been that cheap since 2008 in the US.

panny··on I run multiple $10K MRR companies on a $20/month tech stack
I haven't tried sqlite because the lack of data types is off putting to me. I want to like derby because they have gone to the trouble of making their database JPMS modular. But derby doesn't have UUID types and I want UUID types. Especially with Java 26 adding UUIDv7. I end up on H2 as a result.
panny··on Anna's Archive loses $322M Spotify piracy case without a fight
Should have named it AI archive. Then it would be free to violate copyrights.
panny··on Projected warming will exceed the long-term thermal limits of rice cultivation
Selectively breeding rice will fix that faster than climate changes.

https://ourworldindata.org/grapher/rice-yields?time=earliest...

Did you know it was impossible to grow rice in Hokkaido Japan. No one successfully grew rice there until the 1850s. Now Hokkaido produces 7.5% of the rice in Japan.

panny··on I run multiple $10K MRR companies on a $20/month tech stack
Interesting comparison. Have you done one for sqlite vs H2? Since you're using clojure, it seems a natural fit. According to what I've read, H2 is faster than sqlite, but it would be interesting to see some up to date numbers on it.
panny··on Help Keep Thunderbird Alive
>Thundermail is a great idea!

I think the synergy part is what is great here. Imagine thundermail is a FOSS server app. Imagine they implement things like proof-of-work for senders, and no PoW means the mail goes into a quarantine instead of directly in the user's inbox. That could fight spam, without the centralization and loss of privacy we've had in email. That hasn't happened now, because of the chicken-egg problem. There's no client that supports it because there's no server that supports it because there's no client that supports it.

Thunderbird is a very big client. It could push email forward like nothing before. I may give Thundermail a try. I'd much rather self-host a Thundermail server... one that works around the port 25 block on every residential IP. Maybe my self hosted instance could receive messages relayed from the "real" thundermail server on something other than port 25.

panny··on SMS delivery is not deterministic: routing defines behavior
>they just design around the fact that it’s unreliable

Everything is unreliable. Always design for unreliable. That's my major gripe with most docs and tutorials from any of these services. They only describe what happens during success. They never go into detail on what happens when things go wrong. Your only option is to wait for it to blow up and learn from experience. In the meantime, assume it is going to blow up, try to catch it and log as much of the blowup as possible. Never assume it will work. Assume it won't work and be happy when it does.

This is why you should lean toward something like an authenticator. You can control the whole experience. Rely on unreliable services as little as you can.

panny··on SMS delivery is not deterministic: routing defines behavior
I sent 100,000 SMS appointment reminders every day for over a decade. I resisted lead times under 1 day for a very long time, until I was forced to roll out lead times as short as one hour. I made extra sure, I got it in writing, that customers would be informed hourly lead time may fail and be unrecoverable. Don't depend on it.

Hourly, the shortest lead time was one hour. And you're talking about 45 seconds.

panny··on SMS delivery is not deterministic: routing defines behavior
I spend a lot of time outside the country. Everyone seems to block VoIP for "security" now too. So please stop using SMS for 2FA. Seriously, even NIST says this is a bad idea, but everyone keeps doing it.

https://www.schneier.com/blog/archives/2016/08/nist_is_no_lo...

I have yubikeys. Lots of people can do authenticator codes on their phones. Stop using SMS already. As you're discovering, it's garbage for that purpose, even for you as the developer. Even emailing the code would be better.

panny··on How Do You Find an Illegal Image Without Looking at It?
I'm pretty sure AI generated submissions go against the guidelines on this site.
panny··on New Anthropic model is too dangerous to release publicly
After seeing everyone's response to the latest release and all the damage control happening around it

https://news.ycombinator.com/item?id=47660925

Let's just say I have my doubts. AI promotion is always cherry picked results. You found a 23 year old linux bug with it? Cool. How many false positives did you go through to do that? You guys never say. You also never do live demos of your AI because you know it's going to hallucinate and make your company a laughing stock.

My guess is the new model has gotten even worse than the latest release and this is the cover story. All that DoD money evaporated and it hurt them badly, they just can't admit it.

panny··on US labor force participation continues to slide
>As the piece mentions, young men are "staying on the sidelines" versus engage in low wage, low status restaurant work (in this context).

Why do you think young men would work at a restaurant? They don't make tips the way pretty young girls do. Restaurants certainly don't pay a living wage.

Have you tried ending tip culture? If you did that, you might find more young men willing to work there and more patrons willing to eat there once the expectation of 30% tips are gone.

panny··on Move Detroit
And your kitchen can be stolen four times,

https://www.youtube.com/shorts/BVZZhyvZMBQ

panny··on 'Cognitive Surrender' Is a New and Useful Term for How AI Melts Brains
Then you "hack" System 3 and direct everyone to buy your advertiser's product. -- Someone at Google, probably.
panny··on Whoop is trying to copyright UI patterns, activity rings, dark mode and words
Whoop secures a big funding round, starts lawfare.

>WHOOP's most recent funding round was a $575 million Series G completed on March 31, 2026, which valued the company at $10.1 billion. This round was led by Collaborative Fund and included major strategic investors such as Abbott, Mayo Clinic, Qatar Investment Authority, and Mubadala, alongside prominent athletes like Cristiano Ronaldo and LeBron James.

The "free" market I hear so much about :)

panny··on Show HN: Dev Personality Test
Are these quizzes AI generated? This is the second one I've seen here in two days and I don't even answer the first question because it doesn't apply to me. 2am? I'm in bed before 10pm. Even if I change the time, none of the answers apply either.

Why is AI generating multiple choice answers instead of evaluating free form text replies anyway?

panny··on Are we building IDEs for engineers anymore?
IDEs are like coal. They're not going away no matter how dirty you think they are. I hear a lot of breathless praise about agentic everything, but I can generally say in truth "My IDE does this for me already, for free."
panny··on 1400% surge in GitHub commits explains service issues
It can be both :) My experience with Azure is very poor compared to AWS. But I don't doubt that ai slop is ramping up github usage like never before.
panny··on Firm boosts H.264 streaming license fees from $100k up to staggering $4.5M
How are these software patents still valid after Alice Corp. v. CLS Bank International precedent? Or is this a case where companies just pay the fee because it's cheaper than fighting it in court?
panny··on Y Combinator's CEO says he ships 37,000 lines of AI code per day
>argued that Gregorein belongs to a fading era of software development, when humans still checked code, line by line, before shipping.

I guess people are going to hurt themselves badly before they realize this is still a requirement.

panny··on The Claude Code Leak
It would be so simple for you to right click and search the web to verify that.

https://www.congress.gov/crs-product/LSB10922

panny··on The Claude Code Leak
>but the moment their own code leaks they reach for DMCA takedowns.

Did they actually? Someone can go to prison for 5 years for that.

Fact 1: AI generated code has no copyright, so the Digital Millennium Copyright Act does not apply.

Fact 2: Misrepresenting your copyright ownership under the DMCA is felony perjury.

Fact 3: The existence of undercover.ts in the leak is grounds to void any copyright claims on whatever human written code might have existed in Claude Code. You have a DUTY TO DISCLOSE any AI generated code in your copyrighted work. undercover.ts HIDES DISCLOSURE to FRAUDULENTLY claim all the code is human written when it is not.

Given the current administration has a bone to pick with Anthropic, it was a VERY BAD IDEA for them to send false DMCA takedowns to github. Someone at Anthropic may be the very first ever to go to prison under that section of the DMCA.

Good luck!

panny··on The Claude Code Source Leak: fake tools, frustration regexes, undercover mode
You do, as the developer. Let's circle back to the original comment that started this discussion:

https://news.ycombinator.com/item?id=47594044

That comment is spot on. Claude adding a co-author to a commit is documentation to put a clear line between code you wrote and code claude generated which does not qualify for copyright protection.

The damning thing about this leak is the inclusion of undercover.ts. That means Anthropic has now been caught red handed distributing a tool designed to circumvent copyright law.

panny··on The Claude Code Source Leak: fake tools, frustration regexes, undercover mode
That's typical of this site. I hand you a huge volume of evidence explaining why AI generated work cannot be copyrighted. You search for one scrap of text that seems to support your position even when it does not.

You have no idea how bad this leak is for Anthropic because with the copyright office, you have a DUTY TO DISCLOSE any AI generated work, and it is fully RETROACTIVE. And what is part of this leak? undercover.ts. https://archive.is/S1bKY Where Claude is specifically instructed to HIDE DISCLOSURE of AI generated work.

That's grounds for the copyright office and courts to reject ANY copyright they MIGHT have had a right to. It is one of the WORST things they could have done with regard to copyright.

https://www.finnegan.com/en/insights/articles/when-registeri...

← PreviousPage 9 of 30Next →