HNHacker News
TopNewBestAskShowJobs

pxc

6,499 karma · joined November 17, 2015

submissionscomments
pxc··on Ask HN: Who is using OpenClaw?
Could this be a bit of a Dropbox moment?

What it adds is making this kind of thing easy for normies, even if it's neither the best way to do things nor very difficult for hobbyists to do using existing tech.

Maybe it's the wrong approach, maybe what people really want is more deterministic software that they use agents to help write. But this kind of thing can maybe serve as a prototyping phase for that. Perhaps in the future, people's assistants will offer to "solidify" frequently used workflows into software that minimizes or eliminates the LLM's role. For existing Claude Code users, its like "please just skip to that step! its cheaper and more secure and more reliable". But to many people who are interested in automation, perhaps that seems out of reach as a first step.

pxc··on Ask HN: Easiest UX for Seniors
If you log in only by the code or magic link, it's not 2FA because there's only one factor
pxc··on Claude Code Routines
It does stuff like this all the time. It loves doing this with scripts with sed, so I'm not surprised to hear about it trying to do this with binaries. It's definitely wilder, though
pxc··on The AI revolution in math has arrived
The bigger problem for me is that the realtime voice modes lack tool use, so they can't look anything up or do anything. Model strength definitely also matters, but even dumb models can be helpful when they can look things up and try things out. And smart models that don't do those things kinda suck.
pxc··on Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It
It's not often presented as "we should be spending more", but it's absolutely true that cybersecurity is predominated by a reflexive "more is better" bias. "Defense in depth" is at least as often invoked as an excuse to pile on more shit as it is with any real relation to the notion of boundaries analogous to those in the context from which the metaphor is drawn.

The security industry absolutely has a serious "more is better" syndrome.

pxc··on Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It
Companies spend a ton of money on very sophisticated, powerful, invasive, and expensive software to protect themselves against ransomware.

But the best antidote to many forms of ransomware isn't security software at all— it's offline backups.

Like so much in cybersecurity, an analysis by spending categories like this feels like vendors and their marketing teams driving the discourse. Even if we accept that dollars provide the right lens through which to look at this problem, companies that spend more on making sure they have good backups and good restore procedures aren't going to show up as spending more on cybersecurity in this kind of analysis.

pxc··on Lean proved this program correct; then I found a bug
It's pretty easy to prove lots of negatives outside of mathematics, too. It's easy to prove there's no elephant in my living room at the moment.
pxc··on Tell HN: Docker pull fails in Spain due to football Cloudflare block
https://www.cloudflare.com/trust-hub/reporting-abuse/

Anyone can report illegal content on Cloudflare and Cloudflare will remove it. The pirate streaming sites pop up only in or just before the first few moments of the game, and LaLiga insists they must be removed instantly in order to prevent their losses. So what they actually want is preemptive removal without meaningful human review or anything else that could take 10 minutes.

That involves more than being responsive when someone reports abusive content or dropping bad customers. That requires becoming a censorship machine that preemptively treats all new customers as criminals, and probably having some unaccountable AI drive the censorship process. (That latter seems to be what LaLiga is pushing Fastly to do.)

That's beyond the legal obligations of infrastructure platforms, bad for the reliability of their service, and just a slice of what they'd have to do to rework their architecture to support this kind of preemptive censorship.

pxc··on Show HN: Claudraband – Claude Code for the Power User
Is that something anyone wants? It seems like being able to plug into other editors works well. What are the experiences people are trying to get but currently can't build because ACP sucks or whatever?
pxc··on Show HN: Claudraband – Claude Code for the Power User
Ah, ah, got it. So you get a kind of graceful degradation if the optional dependency is missing. Nice!

And, I guess, it's headless in the sense that you can't attach to it even if you want to. I get what you meant now.

pxc··on Tell HN: Docker pull fails in Spain due to football Cloudflare block
> No country ever won this fight short of total shutdown/disconnects.

Some countries also throttle pretty effectively. So you can connect but if you're trying to do more than read Hacker News it's not very usable.

pxc··on Tell HN: Docker pull fails in Spain due to football Cloudflare block
Cloudflare has not in fact refused to comply with any court orders! The very thing at issue is that LaLiga wants Cloudflare to do censorship on their behalf that Cloudflare, who has no contractual relationship with LaLiga, is not required to do by any legal framework in Spain or the US.

Cloudflare literally wasn't even a party to the ruling by which LaLiga has been compelling Spanish ISPs to do the IP-level blocking. They're just an affected third-party because the blocking scheme the courts have allowed LaLiga to impose on ISPs is on a per-IP basis.

Spain hasn't asked Cloudflare to do anything. Only LaLiga has acted like Cloudflare owes them a huge, expensive rework of their CDN's architecture for the purpose of censoring things for LaLiga purely as a favor to LaLiga. What LaLiga has over Cloudflare isn't a court order. It's a protection racket, or maybe a hostage situation, where court orders involving other parties are the gun held to the hostage's head.

pxc··on Tell HN: Docker pull fails in Spain due to football Cloudflare block
LaLiga isn't Cloudflare's customer. They have no relationship. So why would Cloudflare rework their infrastructure just to instrument rapid blocking at their own expense as a favor to LaLiga? And if they don't, ISPs just break the Internet for each soccer match? This is a kind of coercion that makes no sense. Cloudflare has no obligation like this to LaLiga (and neither would a Spanish domestic CDN!).
pxc··on Show HN: Claudraband – Claude Code for the Power User
If xterm.js is slower than tmux, why don't you just use tmux for the headless sessions as well? How is tmux not headless enough?
pxc··on The peril of laziness lost
What he prides himself in (in this context) is craft, which LLM use probably can enable, but definitely isn't commoditized by the kind of vibe coding that Garry Tan is doing.
pxc··on Pijul a FOSS distributed version control system
Pijul seems great and I really want it to flourish. I love reading the blog posts when there are major updates, and its approach seems fundamentally more right than Git's (as it should— while it gets its core theory elsewhere, its UX learns from Git pain).

What I'm waiting for before I switch is mainly a really good bridge to Git. At the first couple tech companies I worked at, I led efforts to switch from Subversion to Git, and I did it by experimenting and I eventually proving a viable path using Git's built-in, two-way SVN bridge, which is excellent.

Whenever I revisit Pijul, I play with importing a giant (pathological, tbh) Git repository. Unfortunately, it runs for days and has never successfully completed for me. But the moment that bridge is good enough, I'm in! (Performance is nice but reliability is obviously the essential thing, especially when it comes to one-time operations like the initial import.)

PS: pmeunier, if you're reading this: I love your work. When Pijul can reliably import Nixpkgs, write a killer blog post about it. I'm sure it'll blow up here on HN. :)

And thanks for your work to advance the state of the art in DVCS! :)

PPS: I wonder if Pijul's fundamentally better merging behavior could become especially salient for teams (or individuals) whose codebases are seeing a lot of churn with heavy LLM use, so that it can help make automatic resolution of merge queues cheaper or easier or more reliable.

pxc··on Exploiting the most prominent AI agent benchmarks
There's a difference between a reliable hunch and really knowing something. What is obvious is not always (or even usually) easy to prove. And the process of proving the obvious sometimes turns up useful little surprises.
pxc··on Pro Max 5x quota exhausted in 1.5 hours despite moderate usage
For short texts, the translation I usually want the most is fast translation, and local models are actually great for this.

But for high-ish quality translations of substantive texts, you typically want a harness that's pretty different from Claude Code. You want a glossary of technical terms or special names, a structured summary of the wider context, a concise style guide, and you have to chop the text into chunks to ensure nothing is missed. Even with super long context models, if you ask them to translate much at once they just translate an initial portion of it and crap out.

Are you using it for localization or short strings of text in an app? I wonder what you can do to get better results out of smaller models. I'm confident there's a way.

pxc··on Tell HN: Docker pull fails in Spain due to football Cloudflare block
> Heh, lucky you, at least you get a message. My ISP just drops traffic to the affected IPs. No ping, no traceroute, just a spinner in the browser until it says "page not found".

This is generally how the GFW works in China. Instead of an overbearing nanny like a school or corporation's DNS blocker, you're left with a sense that you're on a version of the Internet that is just intermittently and somewhat mysteriously broken.

And indeed, in China, a lot of things that probably aren't fully intended to be blocked are not reliably accessible. Implementation varies, so you get strange routing and peering issues. It feels like an Internet that isn't fully formed, that hasn't finished coming together yet.

Nation states and corporations obviously gain some things sometimes by having Internet censorship/blocking frameworks in place. Maybe, sometimes, ordinary people even benefit, too, if it helps shut down illegal and genuinely harmful businesses.

But it feels like the whole world is gradually trending towards more and more Internet censorship without realizing that we are un-building a miraculous thing that took enormous effort and cleverness and expense to build. I wish we could think about this not only in terms of freedom (and we absolutely should think about it in terms of freedom), but how we are disintegrating the infrastructure of communication and computing.

pxc··on AI Will Be Met with Violence, and Nothing Good Will Come of It
We often look back on earlier stages in world history like we're somehow more advanced, or inherently smarter, than past societies. But one of the things made clear by the way this problem lines up perfectly with conflict during the industrial revolution (including the innovators flagrantly violating the law in order to win their advantage) is that for all our technological sophistication, we haven't really gotten better at the hard, human things: social coordination, planning, democracy. (Perhaps that's because we're still living under the same system that the industrial revolution finally birthed.)
pxc··on Pro Max 5x quota exhausted in 1.5 hours despite moderate usage
I think the right way to think of it, from a self-protective perspective, is this: the real offer is the per-token pricing. Use that for a while, and iff you are consistently spending more than $20/mo, treat the subscription offering as a discount on some of that usage. So only on that condition, try the subscription and see if your monthly costs go down (because of the short term rate limits, they may not, depending on your usage patterns!).

But the opacity itself is a bit offensive to me. It feels shady somehow.

pxc··on Pro Max 5x Quota Exhausted in 1.5 Hours Despite Moderate Usage
Translation generally works well with very small models compared to the frontier LLMs. You can definitely run a model on your own hardware for this.
pxc··on Pro Max 5x quota exhausted in 1.5 hours despite moderate usage
It's a bit shocking to me how opaque the pricing for the subscription services by the frontier labs is. It's basically impossible for people to tell what they're actually buying, and difficult to even meaningfully report or compare experiences.

How is this normal?

pxc··on Cirrus Labs to join OpenAI
This is a huge deal! I secretly hoped for this. :)
pxc··on Productive Procrastination
I also sometimes like to use typing test pages to kinda warm myself up before I start a project. I want to do really well and race someone else or type faster than I usually can, then ride the high of victory to get something done or break procrastination. But this is a much better way to do things; this way I can make that activity help advance my other goals.
pxc··on Cirrus Labs to join OpenAI
Tart is really cool, impressive, and useful. Best of luck to the team!
pxc··on Productive Procrastination
Yes, please share it!
pxc··on Filing the corners off my MacBooks
It's a good move. I have a case on my MBP that helps with this because it means the edges are plastic for me, and not quite so sharp.

If you want to break more rules, you might consider chickenwing-ing your arms a bit. Deviate from the homerow and learn to feel your way around at other angles. Then you can hold the laptop closer to you without putting your wrists at a weird angle (though you may have to use a non-thumb finger for spacebar, as I do).

As I type this, my laptop is partly on my belly and partly on my chest, and my wrists are so far out to the sides that they completely miss the front edge of the laptop altogether. The angle is pretty favorable, too: my palms rest on the laptop on either side of the trackpad, and my wrists rest over the left and right sides of the bottom case but have little to no pressure on them.

No RSI here, either. Just make sure you're loose and comfortable and not forcing anything! That seems to help a lot.

pxc··on Filing the corners off my MacBooks
> weird keyboard mappings for things like "start of line", "end of line", "previous word"

Those are Emacs keybindings, and they're also present by default in Bash since they were copied by GNU Readline. They're one of the few things I really like about macOS. (But I'm an Emacs user and I'm also used to using them in my terminal.)

The window manager never stops sucking. Rectangle and Contexts or Witch help. Ice helps with the stupid menu bar design and problems with overflowing icons or oversized menus.

pxc··on US summons bank bosses over cyber risks from Anthropic's latest AI model
Imo that's a big deal primarily because the issue with automatically discerned vulnerabilities has long been a high volume of reports and a very bad signal-to-noise ratio. When an LLM is capable of developing PoC exploits, that means you finally have a tool that enables meaningfully triaging reports like this.
← PreviousPage 3 of 34Next →