HNHacker News
TopNewBestAskShowJobs

rossvor

750 karma · joined January 10, 2020

submissionscomments
rossvor··on What About Rails?
Fair, but based on your experience surely you would agree that 1 year is not really enough time to start seeing codebase design issues from accumulated cruft, misaligned intents and other maintainability issues, this app is still in the honeymoon phase.
rossvor··on What About Rails?
>Regarding "lack of understanding", here's a recent anecdote: I had a bug in a production (but relatively new) system. The customer was texting me saying that they couldn't scan a QR code because it kept "skipping and glitching". They sent me a short video. I described the problem to the agent and it figured out WAY faster than I would have been able to that the customer's clock was set incorrectly. They turned on network time and bingo bango, the thing worked straight away.

That only describes a happy path though -- I also had many instances where there's an issue and just describing it to an agent immediately identifies a fix and it all goes faster compared to me having to "load up" the flow of codebase into my brain first. But I also still have instances where it thinks it identifies an issue correctly, spits a fix which doesn't work and looks wrong. You point out that it does not make sense because of X, it agrees and spits out a new fix, which is also wrong and you start out on these back and forth wild goose chases, at this point I usually give up and do it the old fashioned way by understanding what is actually happening. If it is within an agent loop, there may be no back-and-forth to waste your time but then you pay with wasted tokens when it will eventually gives up or you stop it.

>I don't thing "comprehension debt" matters at all, because if you want to know something about the code you ask the agent. I can't remember how anything works after 12 months anyway, so I would frequently have to spend ages grepping my own code when a customer came back and asked me to change something in a system we hadn't touched since last year. Asking an agent the same thing takes minutes and is way more accurate (and fun!)

I would question the last part. In my mind the more you let go of control over your codebase the more likely that it will drift way from a place where it is still comprehensible to you, and also your comprehension skills atrophy, and with that, your ability to ask good questions and to prod your agent in a correct directions weakens, leading to more wild goose chases and burned tokens. This is all keeping in mind that for throw away or small applications, maintainability is not that of important of a value so this doesn't affect all codebases.

rossvor··on AUR packages compromised with Infostealer and Rootkit
That is not true, there are plenty of non-FOSS packages in extra/multilib (e.g steam, discord, nvidia). The only criteria is if there is an interested packager to maintain it.

>The large number of packages and build scripts in the various Arch Linux repositories offer free and open source software for those who prefer it, as well as proprietary software packages for those who embrace functionality over ideology.

[1] https://wiki.archlinux.org/title/Arch_Linux

[2] https://wiki.archlinux.org/title/Nonfree_applications_packag...

[3] https://bbs.archlinux.org/viewtopic.php?id=272134

[4] https://bbs.archlinux.org/viewtopic.php?id=273609

rossvor··on AUR packages compromised with Infostealer and Rootkit
For what it is worth, while I'm sure it is right on target for some, I think that's incorrect model of a mean arch user. Updates are once a month thing for me (and the maintenance for that rarely exceeds 10m if that). I barely do any distro level tinkering, after all, I need to spare some time to improve my emacs config ;).

Basically, my model of a mean arch user would be closer to a DIYer -- likes to follow clear manual instructions, likes sturdy and non-ephemeral things, likes to know what the sausage is made of, but prefers if maintenance costs are minimized (since they will be bearing those costs and are responsible for the thing), so makes choices according to that.

rossvor··on AUR packages compromised with Infostealer and Rootkit
I don't have it installed, so I can't comment if it requires constant babysitting, but looks pretty okay to me -- it has no AUR-only dependencies (++), one extra shell script (--), popular (++ given enough eyeballs...). Should be fairly easy to review, anything fishy should be fairly visible in git diff. If I needed it I would be using this PKGBUILD. It's a net gain that it exists there, someone else done most of the work for me.

> Now, someone could argue that the Spotify app isn't important, but there's a reason it has 268 votes. A better solution would be having packages like spotify in their own repo, and a separate, you-better-verify repo for the rest.

I mean yeah, but everything is trade off of volunteer + user attention. There is no trusted user™ who uses spotify, so it's not in official packages. So you as user need to maintain it yourself or rely on AUR and verify.

rossvor··on AUR packages compromised with Infostealer and Rootkit
You are thinking of the alarm fatigue[1], but it doesn't apply here -- there are no constant alerts warning that you are doing something dangerous to the point you get desensitized and start to ignore them. The correct analogy here are checklists -- things that you need to check if you are to do this "dangerous" activity (AUR usage), akin to pre-flight checklist.

[1] https://en.wikipedia.org/wiki/Alarm_fatigue

rossvor··on AUR packages compromised with Infostealer and Rootkit
Obviously usages vary greatly, but I doubt it's that of big deal for majority of Arch users (maybe it's different for Arch derived distros). My AUR maintained package count has been in single digits for decades (both on my home PC and work station), and I don't think it as a heavy burden to update those packages. There's a certain selection bias going on here -- I drop AUR packages if they become too annoying (if they require updates too frequently or they want a slew of other AUR only packages as dependencies), I either find alternatives or alternative sources for them (e.g. flathub).

Arch still hits the sweet spot for me -- unobtrusive, close to upstream, and well-documented enough to keep full control over your own system. Both for the times when you want to go with the most default path and for the cases when you want to deviate and go play in the weeds.

rossvor··on AUR packages compromised with Infostealer and Rootkit
Nothing here is "fundamentally broken". Any usage of AUR was always one step above executing random shell scripts from the net, and any official Archlinux guides were explicit about it. That's why there are no AUR helper tools in official repos and their usage was always discouraged in forums/wiki.

PKGBUILDs are easily readable/reviewable and rarely go beyond a single page. Just take a moment and be responsible and review before running executable files you download from the net. Common sense stuff. That's always been the trade-off and it hasn't really changed much in last 20 years (even though every few years everyone seems to freak out over it).

rossvor··on AI agent bankrupted their operator while trying to scan DN42
Yeah, on second read, I agree with you that IRC chats are not being impersonated. It posted a link (in the PR discussion presumably) to a website where it compiled the report of its IRC interactions in the channel. Would be prankster wouldn't be able to do it.
rossvor··on AI agent bankrupted their operator while trying to scan DN42
TBH, I feel that is implausible that an agent would by itself decide to join the IRC and post those messages. My bet is that all of the IRC interactions (including the presumed real human JertLinc3522) were made by someone in the community pranking everyone else/having a bit of fun after they saw the pull request.
rossvor··on Bugs Rust won't catch
In the given list of GNU CVEs in the original article, it included a buffer overrun in tail from 2021. So for a fair comparison 2021 is part of the "window of activity" (the year uu_od CVE was published).
rossvor··on Claude AI built me a React app to compare maps side by side
With your analogy I would be the one saying that I'm still not convinced that skis are faster than snowshoes.

I still use ChatGPT/Claude/Llama daily for both code generation and other things. And while it sometimes does do exactly what I want it to, and I feel more productive, it still seems to waste my time an almost an equal amount of time, and I have to give up on it and rewrite it manually or do a google search/read the actual documentation. It's good to bounce things off, it's good as starting point to learn new stuff, gives you great direction to explore new things and test things out quickly. My guess on a "happy path" it gives me 1.3 speed up, which is great when that happens, but the caveat is that you are not on a "happy path" most the time, and if you listen to the evangelists it seems like it should be 2x-5x speed up (skis). So where's the disconnect?

I'm not here to disprove your experience, but with 2 years of almost daily usage of skis, how come I feel like I'm still barely breaking even compared with snowshoes? Am I that bad with my prompting skills?

rossvor··on Friends don't let friends export to CSV
Friends don't let friends export to CSV [for my specific use case]
rossvor··on Prompt Engineering Guide: Guides, papers, and resources for prompt engineering
Huh, my recollection is the exact opposite. I remember the good old days when I could use inurl: link: and explore the website contents fully and drill down further if necessary, compared to now, where google seems to always think to know better than you what you are looking for. If you are not happy with the initial results it gave you, you are pretty much out of options, good luck trying to drill down to some specific thing.
rossvor··on Copilot Internals
But aren't you afraid that whenever you veer discussion from Wikipedia/stackoverflow type explanations it's likely lying to you? This was my general experience -- it's great at querying for stuff which already exists and is popular on the internet and for conversing on a surface level or broad level but as soon you delve into details it starts confidently lying and/or hallucinating things, which undermines my trust in it, which in turn means I need to verify what it says, which means it did not increase my productivity that much after all.

It routinely invents arguments, functions or concepts which don't exist in reality or don't apply to the current context, but look like they could, so you are even more likely to get caught by this.

rossvor··on Ask HN: How to do the bare minimum when not valued at work?
Not to mention that self sabotaging your good work habits is counter-productive. You may think that you are getting one over them, but it's just as likely that after a few months of doing bare minimum, it will become your new "default" behaviour and carry over to your new job/endeavor.
rossvor··on Aleksandr Sorokin smashes 24-hour world record with 198.6 mile run
I think the GP is a bit confused and mixed Lithuania up with its neighbors. Lithuania, unlike its neighbors Estonia and Latvia, gave citizenship automatically to everyone residing in Lithuania right before the independence. While Estonia and Latvia chose to create a naturalization process aimed at excluding ethnic Russians.

https://en.wikipedia.org/wiki/Statelessness#Estonia_and_Latv...

rossvor··on The Futures of Inform
In case you'll get an itch to play IF games, and don't know which one to choose. Picking at random from this list of top 50 as voted by community, never failed me so far:

https://ifdb.org/viewcomp?id=1lv599reviaxvwo7

rossvor··on Cramming 'Papers, Please' onto Phones
If you see a devlog post from Lucas Pope you know it's going to be a goldmine. No matter the topic. Dude has a real knack in writing these, clearly describing the problem and the thought process on possible solution. And making it all very interesting so you yourself start thinking how would you address it or what other cool thing could be built instead.

Here's some of his other huge devlogs on TIGSOURCE:

1. Papers, Please. https://forums.tigsource.com/index.php?topic=29750.0

2. Return of the Obra Dinn. https://forums.tigsource.com/index.php?topic=40832.0

rossvor··on Tell HN: Banned site-wide from Reddit for helping a fellow mod fight hate speech
>This is uncharitable: one merely filters isolated comments, the other permanently bans humans from an entire social media site.

For three days, not permanently:

>"You’ve been banned from Reddit for three days"

rossvor··on Ask HN: What is a sustainable methodology for taking notes of your learning?
I'm using Orgzly. But to be honest my use case doesn't involve much use of org-mode on the phone. And I just a had more thorough look and it doesn't support a lot of important features, to the point I should probably retract that bulletpoint not be misleading:

- No codeblock support (execution not working is probably to be expected, but I would expect at least syntax highlighting, but it doesn't do that either)

- No image support (so no charts or diagrams)

- No support for tables

rossvor··on Ask HN: What is a sustainable methodology for taking notes of your learning?
Emacs org-mode

Kitchen sink is yet to be implemented[1], but for everything else you are covered:

- Executable blocks

- Footnotes

- Inline charts/images

- TODOs tracking

- Multi-device support (there are mobile apps)

It's not going away any time soon, and you can always add-on stuff yourself if you familiarize yourself with emacs-lisp.

1: https://www.emacswiki.org/emacs/TheKitchenSink

rossvor··on A chess robot in Moscow has broken the finger of its human opponent
>That's quite an uncharitable interpretation.

Agree, that was an uncharitable offhand sentence. I think it was prompted by your uncharitable criticism of the video -- immediately concluding that he's making shit up (rather that thinking it was a mistake or something else)

>In the context of judging the American nation as a whole -- of course not.

I don't think video is there judge Russian culture as a whole -- and I don't think that's ever useful. It's there to entertain and present (and judge) various cultural _strands_ of it, which someone outside of Russia/Ex-soviet states may not be aware of.

In the context of this thread, grandparent (smsm42) does seem intent to reduce this particular cultural stand to being _the_ Russian culture and all dominating. I disagree with that, but neither this video nor context of the palmetieri2000 post (he wanted to illustrate that it _can_ be that comical) was about that.

rossvor··on A chess robot in Moscow has broken the finger of its human opponent
He said no such thing, he said that the planet was named "Матросская тишина" (seaman's silence) after this prison https://en.wikipedia.org/wiki/Matrosskaya_Tishina .

And you are aware that he's playing the russian version of the game, right? Translating some bits for the english audience. I'm sure he's perfectly aware what the name of the game is in russian (it's literally in the first shot of the video).

Seems like you watched 5min to just quickly find something to discredit and immediately dismiss it.

> Should I find Manhunt or Postal to be a mirror of American culture? "Interesting perspective", "insightful social commentary"?

Not a "mirror" of a culture, but if you were not already versed in American culture and watched an insightful review of those games pulling on various culture trends which make up those games, I see no reason why it couldn't be an "Interesting perspective" or "insightful social commentary".

rossvor··on The Impact of Posing with Cats on Female Perceptions of Male Dateability
But why do you assume that they don't like cats or even have an opinion on them? Most of first glance opinion forming is subconscious or near subconscious. It's less likely to be "I see a cat. I hate cats. Next" and more "Nah, not feeling it. Next".
rossvor··on The speedy downfall of rapid delivery startups
Just to push back against this view a bit with one anecdote -- I'm still in contact with an ex-colleague of mine, who I used to work with in retail. He now works for various delivery apps. And according to him it's vastly superior to any retail job he worked previously and whenever I mention any of the negative press these apps receive and query for his opinion he usually just rolls his eyes. He gets to control when and how long he works, he gets to ride his bike (which he loves) and pay is much better than any retail job he would get in london (and he would be looking at retail manager considering his experience). So in that picture of local McDonald's in London, consider that perhaps those guys are actually much happier than everyone else working in that store (including the McDonald's managers). Obviously that's just an anecdote of one person, I don't actually have a strong opinion on this.
rossvor··on Parmigiano Reggiano makers embedding tiny trackers in rind to fight cheese fraud
It's a convention to use roman numerals for centuries in some european countries. Parent poster probably just done it out of habit.
rossvor··on 2022 Predictions from 2012
Agreed, it definitely feels like we are already past "peak multiplayer-only" AAA games phase, and trend line corrected itself and now is looking stable. There's is less evidence now that single player games are going away compared to 10 years ago.
rossvor··on Tell HN: Common Misconceptions About Cookies and Consent
I'm being a bit pedantic but

> Misconception: "The browser decides to send cookies."

> Wrong: A browser, or user-agent in general, will never invent a cookie out of thin air, and therefore it never sends a cookie unless it has been set by the webserver beforehand (either with an HTTP header 'Cookie' or with JavaScript code).

These statements are not mutually exclusive and are in fact both true. Browser would not "invent a cookie out of thin air", but it also "decides" to send a particular cookie and there are various configs, switches and decisions (either directly in browser code or extension) which determine if cookie gets sent.

Other misconception answers sound right to me.

rossvor··on Four Eras of JavaScript Frameworks
Probably because people who browse with js (mostly) disabled are over-represented on HN. So for us it is a significant use case.
Page 1 of 3Next →