HNHacker News
TopNewBestAskShowJobs

peterldowns

4,619 karma · joined October 20, 2010

https://peterdowns.com

https://github.com/peterldowns

https://twitter.com/peterldowns

Always happy to meet a stranger, please reach out any time: hn @ peterdowns.com

[ my public key: https://keybase.io/peterldowns; my proof: https://keybase.io/peterldowns/sigs/9N-85LOZH1eJMXHLR70WroivxJB1is_s3ye5IT5xzxs ]

submissionscomments
peterldowns··on Principles for agent-native CLIs
This is really good, particularly the async tasks part. Hadn't thought about that. We'll be thinking about these lessons for the next version of our agent CLI.
peterldowns··on GitHub Actions is the weakest link
Oh sweet, thanks Mitch! I was a customer of Buildkite a few years ago, looking forward to working together again.
peterldowns··on GitHub Actions is the weakest link
Founder is active on HN and the service is high quality. Support is reasonable. Machines are fast and work well. There are a bunch of alternatives, the switching cost is extremely low, pick whatever you'd like.
peterldowns··on GitHub Actions is the weakest link
Yup! Still haven't switched off of Github, but considering it at this point. If you're in my shoes, here's some tools we use that help:

- https://github.com/sethvargo/ratchet for pinning external Actions/Workflows to specific commit hashes

- https://www.warpbuild.com/ for much faster runners (also: runs-on/namespace/buildjet/blacksmith/depot/... take your pick)

- soon moving to Buildkite for orchestration of our CI jobs

I still just need a reasonable alternative for the "store our git repo, allow us to make and merge prs" part of things. Hopefully someone takes all the pieces that the Pierre team is publishing and makes this available soon. The Github UI and the `gh` cli are actually really nice and the existing alternative code storage tools are not great IMO.

peterldowns··on You don't want long-lived keys
Agreed! Been working on infra for an early-stage company recently and it's been awesome using OIDC and IRSA (or WIF if you're on google) for as many things as possible. Basically, there are no permanent keys for anything.

Slightly annoying to have to wrap some clis in scripts that generate the short-lived token, but it feels really magical to have services securely calling each other without any explicit keys or password to even store in our vault.

Lots of cool benefits --- for instance, we ran the compromised Trivy github action a few weeks ago, but our Github Actions had 0 keys for it to leak! Also really great that I don't have to worry about rotating shared credentials on short notice if an engineer on my team decides to leave the company.

peterldowns··on Sam Altman's Creepy Eyeball-Scanning Company Gets in Bed with Zoom and Tinder
Would make way more sense to just use verification claims backed by government issued IDs, rather than relying on a third party like World(coin).

For instance, something like https://self.xyz. It's strictly better than the alternatives:

- already works with existing government-issued ids

- doesn't require submitting scans of your ID to third parties that can then be stored and leak

- allows privacy-preserving verification like "is this person older than 18" without requiring sharing of the person's exact age

peterldowns··on The Vercel breach: OAuth attack exposes risk in platform environment variables
I see it the same way. Interesting times…
peterldowns··on Britannica11.org – a structured edition of the 1911 Encyclopædia Britannica
Ah ok thanks very much!
peterldowns··on Britannica11.org – a structured edition of the 1911 Encyclopædia Britannica
Oh no not in the public domain, I better not build something cool!
peterldowns··on Britannica11.org – a structured edition of the 1911 Encyclopædia Britannica
I've been meaning to build ~exactly this experience, but for the 1952 Encyclopedia Brittanica Great Books of the World collection and its experimental index Syntopicon [0]. Would love to know more about how you OCR'd or otherwise ingested and parsed the raw material. I have a physical copy of the books, and I found some samizdat raw-image scans and started working on a custom OCR pipeline, but wondering if maybe I could learn from your approach...

[0] https://en.wikipedia.org/wiki/A_Syntopicon

peterldowns··on What are skiplists good for?
Why come here to just post AI comments? I don't get the point.
peterldowns··on There are zero-day exploits for your mind
This post is garbage slop. Read BLIT instead

https://www.infinityplus.co.uk/stories/blit.htm

Or my favorite of his basilisk stories, different kinds of darkness: https://www.lightspeedmagazine.com/fiction/different-kinds-o...

peterldowns··on Mario and Earendil
My very first real tech job in the bay, my new boss recommended I study up on Armin's open source code in order to get better as an engineer. It's been very interesting following his work over the years. I'm extremely curious to see how Earendil goes — no surprise if it's a success.

Congratulations Armin, and Mario, and good luck.

Dug up the email, here's what my boss said directly:

In terms of tech to keep up on, it might be worth while to play around with node.js a bit as we've been doing a few small projects using the Express MVC framework. A great reference for js, (which I remember chatting with you briefly about) is Javascript the Good Parts (Douglas Crockford). You may also consider seeking enlightenment on Armin Ronacher's github page (he's a python master, leader of flask, genshi, pocoo, long time python contributor) https://github.com/mitsuhiko. His code is pretty top notch. I follow Kenneth Reitz quite a bit too (Armin and he often work on projects together). Kenneth is know for le*git and python's request library.

peterldowns··on Project Glasswing: Securing critical software for the AI era
are there any tricks you'd suggest, or starter prompts, for using claude to analyze my own company's services for security problems?
peterldowns··on The cult of vibe coding is dogfooding run amok
Thanks for sharing this, going to modify a bit and give it a try.
peterldowns··on Principles and Gear
If you're not injured you're probably fine, most of the time there's not a big difference. The reason I recommend a local running store is that they can usually help people who are out of shape to get the right shoes, which sometimes requires gait analysis. And they're usually nice people who can connect you to local running clubs, races, etc. If you know what you're doing you absolutely don't have to go to a running store. I still go because I know the people at mine and they're nice.
peterldowns··on Principles and Gear
That's cool. The double watch is smart. I never run longer than a half marathon in training so I don't bother with headphones but most of my serious running friends insist, makes sense when they're running 80-100mi weeks.

If you're thinking about getting into running, I'd say the first piece of gear to buy is a good pair of shoes from your local running store. Don't worry about fancy watches or gels or arm sleeves or whatever.

I did finally buy a smartwatch (coros) last year, after training my whole life with just a casio. It's made me a lot more adventurous as having the GPS tracking means I can run offroad and even off-trail without worrying about keeping accurate track of my distances and paces. This is probably the second piece of gear I'd recommend buying and I wish I had done it sooner. The numbers are useful, it makes it easier to do the hobby, and it means I can use Strava which is a fun way to stay in touch with my fitness friends.

Third piece of unsolicited advice is that you absolutely don't have to run marathons.

> t. slow, but ran the fastest mile of my life last year, good friends with many semi pros.

peterldowns··on Guilty Displeasures
I listened to TMBG early on in my music life and eventually came to "not particularly enjoy" them. Talking Heads, on the other hand, have only gotten better and better in my opinion.

I mean COME ON https://www.youtube.com/watch?v=xphLY5ucIpQ

peterldowns··on Why Go Can't Try
llm garbage
peterldowns··on An Introduction to the Codex Seraphinianus, the Strangest Book Ever Published
I own a copy, never fails to weird people out when they flip through. Highly recommend.
peterldowns··on Making MCP cheaper via CLI
I was just looking for a linear CLI earlier today. Awesome that the CLI converter uses that as an example. Nice!
peterldowns··on OpenClaw is dangerous
you may enjoy reading Nick Land, he has written about very similar ideas, specifically the idea that corporations and even "capital" can be considered AI in many ways.
peterldowns··on The Singularity will occur on a Tuesday
Ballard covered this theme a few different times in his short stories, I believe before this
peterldowns··on Ex-GitHub CEO launches a new developer platform for AI agents
Sure but I dont want to build my own Github I just want to use a beautiful and faster alternative
peterldowns··on Ex-GitHub CEO launches a new developer platform for AI agents
Its a shame Pierre shut down. Wish they could have made it work. Github but made by Linear would be a dream.
peterldowns··on Luce: First Electric Ferrari
It literally is just a big minimalist computer screen. I drive a taycan and it would be significantly better if they were to remove the massive touchpad and replace it with a cluster of physical controls.
peterldowns··on GitHub Actions is slowly killing engineering teams
Agreed with absolutely all of this. Really well written. Right now at work we're getting along fine with Actions + WarpBuild but if/when things start getting annoying I'm going to switch us over to Buildkite, which I've used before and greatly enjoyed.
peterldowns··on Ask HN: Who is hiring? (February 2026)
no impact on your application (will review shortly) but your site is down for me
peterldowns··on Claude Code for Infrastructure
Opus 4.5 is pretty good about following instructions to not do anything destructive, but Gemini 3 Flash actively disregards my advice and just starts running commands. Definitely recommend setting up default-readonly access for stuff like this and requiring some kind of out-of-band escalation process for when you need to do writes/destroys.
peterldowns··on Claude Code for Infrastructure
I do this but make sure to only have readonly/nondestructive access. It's extremely cool how well it works.
← PreviousPage 2 of 13Next →