HNHacker News
TopNewBestAskShowJobs

ryanisnan

2,029 karma · joined June 10, 2013

submissionscomments
ryanisnan··on Pi 1.0
Human judgement is a thing.
ryanisnan··on Meta takes down a critical video about meta AI Glasses after filming at Meta
https://en.wikipedia.org/wiki/Streisand_effect

https://southpark.fandom.com/wiki/Barbra_Streisand

ryanisnan··on DoorDash Spent $1.4M Trying to Stop Mamdani from Becoming Mayor. Now We Know Why
Money influencing politics again exposes flaws in our democracies. Shocking.
ryanisnan··on I don't like passkeys
I haven't articulated my thoughts about passkeys nearly as eloquently, but you did an amazing job here. This really sums up a latent problem I've had with passkeys.

Do you have a blog?

ryanisnan··on North Korean nuclear test sets off years of earthquakes
Yeah, I mean, I understand the words you wrote. I don't think it's a good analogy.

It is entirely feasible that the same amount of potential energy, delivered either in small, successive amounts, but spaced out, proves to be tolerable, while a single large amount would be fatal.

ryanisnan··on North Korean nuclear test sets off years of earthquakes
I don’t think this is a good analogy.
ryanisnan··on Stallman: Thousands Dead, Millions Deprived of Liberties (2001)
> “Given that the human face recognition performed by the check-in agents did not keep the hijackers out, there is no reason to think that computer face recognition would help.”

Even though I agree with the premise of the essay, this is absurdly false today. Computers are really good at this type of thing now, scarily so.

ryanisnan··on How Climate Resilient Are the Largest Cities?
This is far outside of my wheelhouse, but I have some serious questions about the methodology here.

I dug into what they call a "resiliency checklist", which is what looks to be a set of questions that have qualitative answers which are subjective at best. This information looks like it is fed into the CRRI, the data set that substantiates the city-wide scores used to power this report.

I am very skeptical that these 2 things happened:

  - They captured a representative set of key assets that go into making a "city"
  - The answers they received are calibrated or are meaningful enough to make these large conclusions
ryanisnan··on Launch HN: Salem Robotics (YC S26) – Software for industrial inspection robots
Awesome - thank you for the detailed response.
ryanisnan··on Htmx 4.0.0
Sure but it's a spectrum. Surely some choices will age much more poorly than others.
ryanisnan··on Htmx 4.0
Congratulations on the release!

I have enjoyed working with htmx very much.

I'm still skeptical of htmx being the foundation for a 100-year web service, but I think this is a really worthwhile goal. I'll add that aside from static HTML, I don't have a better option.

ryanisnan··on Engineered yeast for converting plastic and biomass compounds to food additives
Reminds me of the Taumoeba escaping the Xenonite enclosures.
ryanisnan··on Launch HN: Salem Robotics (YC S26) – Software for industrial inspection robots
What about container registries do robotics companies need that are different from other industries?
ryanisnan··on The Tariff Cost: analysis of the costs to Americans from new tariffs on Canada
I like the idea behind the site, but I have some nits.

First, when you list something like a financial figure, you must also include the relevant time period. E.g. you say 16.0B in taxes collected by Canada from American exporters. But you don't list the time period.

Second, you say 313 are taxed today. What is this in reference to? Goods? People? Companies? Percentage?

The labels need some serious love.

ryanisnan··on The August 17 outage
Interesting - There's a couple of things that I disagree with here, but I do think this resonates: "We all agree with the diagnosis and strategy: stop building new things, bring stability."

Where I have a problem with the positioning of their GitHub profile is, he's the CTO of GitHub, arguably the defacto standard for open-source version control systems. His GitHub profile is linked to as the author for the post, and his GitHub profile simply tells me: "this guy doesn't code."

I don't care if this guy doesn't work on GitHub itself, I hardly would expect that, but IMO, any CTO of a company like GitHub should eat, breathe, and sleep code. He might, but his profile, which is being published as if it means anything, tells me he doesn't.

ryanisnan··on The August 17 outage, and the work ahead
Don't contributions to private repositories simply show as: "N contributions in private repositories"?

Here's me: https://github.com/ryanisnan

In other words, I think his private contributions should still manifest on the contribution graph. And for being the CTO of an organization like GitHub, with no open-source contributions... Not a great look.

ryanisnan··on The August 17 outage
Here's Vladimir Fedorov's GitHub contribution graph, as linked to as the author of this post:

https://imgur.com/a/zIbT0Gi

It shows zero contributions in the past year, on this account. This is a huge, huge red flag.

ryanisnan··on Show HN: Huzzah – a novel approach to coding with AI
I like the direction of capturing the human intent as a durable artifact, but I dislike how you've gotten there.

Let's look at your fizzbuzz example. Unfortunately, if you wanted to have the agent implement fizzbuzz for you, it looks like, in your example, you would have to already know how to effectively write fizzbuzz. Specifically, you call out the use of the modulo.

In your prompt, for the traditional agentic development path, you already declared the intent. There is some imperative language in there, sure, "Create a function that ...", but also there is the declarative state, that doesn't require knowledge of specific programming syntax or semantics.

What I've relied on is a more formal location/syntax for acceptance criteria are in code. These are then used to generate tests, and implementations. It isn't perfect, and more investment is needed, but it starts getting at the root of the problem.

ryanisnan··on Companies promote incompetent employees to management to limit damage they do
Yeah, this is so off-base. Or, OP has only ever worked at terribly bad companies.
ryanisnan··on Field measurements of neighborhood-scale air temperature impacts of data centers
What a weird line to draw. Data centres do a lot more than what you report. E.g. they might host your electronic health records. They might host census data, or weather data, or your kid's school learning management system.
ryanisnan··on Apple defeats liability for not scanning iCloud for CSAM
As the creator of mediaden.ca[1] I’ve thought about this. Client side scanning is maybe marginally better than server side scanning, but both paths lead to privacy rot.

Governments need to catch criminals, but they shouldn’t do it at everyone else’s expense.

1. https://mediaden.ca

ryanisnan··on Show HN: One More Letter
Fun, but I don't like trivia.
ryanisnan··on Cursor 0day: When Full Disclosure Becomes the Only Protection Left
Uh, I don't think people typically associate downloading a repository, and viewing the source, as being synonymous with activating a malicious payload. That is the bit that's concerning.

I'm also so tired of people groaning about AI writing, yes, it's annoying, but attack the message, not the messenger.

ryanisnan··on Ask HN: What Are You Working On? (July 2026)
Kubernetes is really powerful, but IMHO, it is the wrong tool here.

It might be the thing you use to power this system, but the benefits of Heroku were precisely that it didn't need you to think about the guts of a system like Kubernetes.

The magic was in the incredibly concise API, and the fact that it "just worked".

ryanisnan··on Ask HN: What Are You Working On? (July 2026)
Amazing, do you have some example images of what the product looks like?
ryanisnan··on Ask HN: What Are You Working On? (July 2026)
I made Media Den, a privacy-by-design iOS photo and video vault.

I launched in April, and I've been steadily updating it as time allows. Really happy with how far it's come. Here are the notable privacy-by-design features I've led with:

  - Bring-your-own-storage
  - End-to-end encrypted media (config stored encrypted in the secure enclave, cached data gets stored encrypted -- one exception is videos, which require on-disk passing to the native video player -- data gets stored on your cloud provider's system encrypted)
  - Multi-cloud replication (and promotion from a replica to a new primary)
  - Proximity-based no-internet local file sharing using ephemeral keys, with man-in-the-middle protection
  - All the other typical non-shady features of a good vault (metadata removal, PIN auto-lock, privacy blur on app-switching)
  - Zero telemetry, tracking, etc. There in fact no servers at all in the loop.
https://mediaden.ca
ryanisnan··on The security checks in every Lionshead PR
This is pretty nice. How often are your PRs held back by these checks failing?

Nice work.

ryanisnan··on Decrypting View State Messages
Same, Firefox. Curious.
ryanisnan··on The Sneakerweb
How does this differ from just, say, giving someone an HTML dump of a static site? I don't quite understand what this protocol offers.

How exactly is it peer-to-peer if it's essentially an offline, transfer via hardware?

ryanisnan··on Africans Are Turning to Starlink
As a former SAR technician, connectivity is a massive, massive game changer.
Page 1 of 21Next →