HNHacker News
TopNewBestAskShowJobs

stanac

648 karma · joined October 2, 2016

submissionscomments
stanac··on Java 27: What's New?
I think they are saying Java is dead?! Not sure how else to interpret the comment. If that's the case I have to disagree. There are probably billions of lines of Java in enterprise, it will never die.
stanac··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
NUC 11 i5-1135G7 with 32gb of ram and one nvme. Bought it new years ago.

For forgejo I host only code and packages there, everything is built on dev pc since I am the only one using it. It also host postgresql server, jellyfin (for music only), custom OPDS server (for books only) SMB shared directory I can use from multiple PCs, some test environments for personal projects and possibly more things I forgot.

It's a small pc but it works without problems. I do have to clean it from time to time (with cheap battery-powered air duster) to keep the thermals low.

stanac··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
I missed the opportunity to add "you are absolutely right".
stanac··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
I don't understand your question. If I was working for GH would I be selfhosting forgejo?

edit: If you think I sound like an LLM, I guess that is what happens when most of your interactions in English language are with LLMs.

stanac··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
Not GP. Probably less dependencies on github, e.g. actions which sometimes don't work. This way github is a "dumb backup".

I selfhost forgejo (gitea fork) on home sever (nuc), similar setup with tailscale. I was planning to setup git mirror on a remote VM for backup, but since I am the only one using it and have everything on dev laptop and remote backups of nuc server I didn't bother to do that (I know I still should).

stanac··on U.S. allows Anthropic to release Mythos AI to ‘trusted’ US organizations
> The Chinese have not tried to take European land by force

What did US do? Are you referring to Kosovo?

For context, I am European using both US and Chinese models, not rooting for one side or the other (but prefer openness of Chinese models).

stanac··on U.S. government will decide who gets to use GPT-5.6
I have zero control about what foreign (US) government does.
stanac··on U.S. government will decide who gets to use GPT-5.6
You are right, I was thinking selfishly. I don't like the control governments have on tech in general. In my country government forced banks to use device attestation for banking apps. If your android phone is in developer mode banking app won't work, you can change bank but it will make no difference. I think they are also enforcing 2FA to be in the banking apps, so I can't even use web app without locked down android phone or iPhone.
stanac··on U.S. government will decide who gets to use GPT-5.6
Last time I used subscription I hit a usage limit in 20 minutes (gemini). I switched to openrouter and have enough prepaid credits to last me for months with Chinese models. I spent about $30 in last two months.
stanac··on U.S. government will decide who gets to use GPT-5.6
For personal use I don't care if I get access to it. Tokens are becoming too expensive. I am using Chinese models. What worries me is that my company may never get access. I work for a well known US company, but from Europe, we also have developers in Mexico. I can only guess US gov will take this into account when deciding who gets to use the new models.

Even worse than not getting access is getting fired. Since less than 20% of our developers reside outside US and our management is suffering from AI hype, they can decide to close foreign offices as a way to get access to new models.

edit: grammar

stanac··on Why Does Everyone Hate AI?
> Just last week finally I had to buy a new phone ... this time no AI was mentioned anywhere

It's not surprising given that "Sixty percent of US consumers say ‘AI’ in brand messaging is a turnoff, survey finds"

https://news.ycombinator.com/item?id=48569278

stanac··on Hey Nico, you didn't vibe code your data room but stole it from Papermark
Yup, if we take OSI as defacto authority on open source definition

> 6. No Discrimination Against Fields of Endeavor

> The license must not restrict anyone from making use of the program in a specific field of endeavor. For example, it may not restrict the program from being used in a business, or from being used for genetic research.

https://opensource.org/osd

stanac··on LastPass notifies users of yet another data breach
This works if the account doesn't have 2FA. On my last side project app users can login only via email OTP. There are security downsides with that, someone can send phishing link and use OTP submitted to the fake site, but the app doesn't store anything sensitive (it's a game which tracks your progress) so I guess it's not a major security risk.
stanac··on Polymarket has flooded social media with deceptive videos by paid creators
Not GP, but here is how I know. Messi and Steve Carell did an ad for local chips brand, (market size < 10 million people). There is no way that brand could afford them. Searched online and found the same ad for Lay's. Turns out Pepsi owns a lot of local snack brands. They'll buy local brand and if it's popular they will keep the brand (instead of replacing it with global brand like Lay's). Ad is recorded for all brands at once, they just replace bag of Lay's with bag of whatever is the local chips they own.
stanac··on Hacker News but for independent blogs
Ben Syversen

> Documentaries featuring stories from the history of math and science

https://www.youtube.com/@bensyversen

Integza is no longer small, but still good, home built rocket engines

https://www.youtube.com/@integza

edit: formatting

stanac··on GLM-5.2 is the new leading open weights model on Artificial Analysis
> Some are even offering API rates at 3x lower than the official ZAI api rates

Looking at openrouter [1], some of the cheaper offerings are for quantized models. Not sure how much intelligence is lost in quantization. And they are not 3 times cheaper. Where did you find 3x lower prices for APIs? I am considering skipping open router and using them directly for that price.

edit:

I see, croft [2] 8bit for $0.50/$0.08/$2.20

[1]: https://openrouter.ai/z-ai/glm-5.2

[2]: https://ai.nahcrof.com/pricing

stanac··on Is Meta destroying its engineering organization?
> Token leaderboards are a ridiculous idea

We have this at work, it's insane. Today I used opus high thinking to write a jira ticket for simple API endpoint. Every code change, every bug fix, every single code review, I have to utilize AI because managers will complain how we are not using AI enough. Every single person in my team have performance goal to increase AI usage.

At least meta will use employee prompts to train an LLM, so maybe it makes sense for them in the long run. We are not training models, only consuming external LLMs.

stanac··on 'Sloppenheimer:' Amazon employees mock the company's AI on Slack
"Sign up for free access to this post".

There should be a rule about this kind of posts. If there isn't already.

https://archive.ph/1YRCE

stanac··on I Am Retiring from Tech to Live Offline
I am not sure what is forbidden. There was a YT video about computer they were using for business. It was stripped down OS (windows xp?) that only had office apps, or something like that.

I am unable to find the video, but here is an interesting story: https://www.npr.org/sections/money/2013/02/25/172886170/a-co...

stanac··on I made a million dollar product from my dorm room (2025)
Yup, people who are into niche hobbies can be almost obsessed with it. Like a guy having 50 zippo lighters, or someone having collection of retro consoles. Same here, people are building more than one keyboard because they love it.
stanac··on The four-day workweek in Australia: insights from early adopters of 100:80:100
> Employee owned co-ops are more humane

Speaking as someone born in Yugoslavia.

That's almost how it was in Yugoslavia. Companies where "owned by society", but workers had voting rights. Whenever there was a vote to decide whether extra profit should be used for capital investments and/or operational improvements or assigned to salaries budget, everyone voted to increase their salaries.

Not every employ should be a co-owner, or at least not everyone should have voting rights.

stanac··on Scammers are abusing an internal Microsoft account to send spam links
> The default sign in flow with the app enabled is email + authenticator. No password required

Isn't this only if browser have some cookie from previous session or IP didn't change?

Edit: just tried (new IP + private window firefox), you are right, I can enter email and select app notification.

stanac··on Microsoft starts canceling Claude Code licenses
I think they were comparing CLIs, not VS extensions.
stanac··on GitHub confirms breach of 3,800 repos via malicious VSCode extension
Most of these problems could be solved with something like wasm/wasi where you can limit access to web, disk, etc... WASI is made to run code you don't trust, you could even limit compute third party is using so they can't mine crypto (I think it's called fuel limit). Ideally we would have whole IDE run in this kind of environment where we can explicitly say what it can and can't do.
stanac··on HTML-in-Canvas Demos
That's why we have "youtube.com is now full screen" message.
stanac··on Kickstarter is forced to ban adult content by payment processors
I worked for a payment processor in Europe, we provided SEPA and some other payments, but not card payments (so there could be some difference).

Difference is in fees and licenses. Payment processors that process high risk payments (adult industry, gambling, etc...) have higher fees and need license from governing body (usually a national bank in country where the payment processor is registered). So if you process high risk payments as low risk you will get a fine from governing body and you risk to lose your license. And if you don't have a license for high risk payments you cannot process them.

I don't work there anymore, but I heard they lost SEPA license a couple of years ago because of risky transactions.

Now I am not sure if Visa and Master are forcing payment providers to give up high risk transactions or if they are forcing them to classify all transactions as low/high risk.

stanac··on Notepad++ Code Editor Comes to Mac After 20-Year Wait
And domain is different than original Notepad++, now it makes sense.
stanac··on All phones sold in the EU to have replaceable batteries from 2027
I charge my s25 to 80%. Previous phone (pixel) was also limited to 80%, but radio stopped working after 2 years so I had to buy a new phone.
stanac··on It is incorrect to "normalize" // in HTTP URL paths
In both cases I get https://example.com/ in FF.
stanac··on My adventure in designing API keys
I think they are saying passwords are salted and we use multiple rounds of hashing to prevent rainbow tables and slow down brute-forcing the password (in case of db leak). We don't need to do that for randomized long strings (like api keys), no one is guessing 32 character random string, so no salt is needed and we don't need multiple rounds of hashing.
← PreviousPage 2 of 8Next →