HNHacker News
TopNewBestAskShowJobs

tallclair

16 karma · joined May 12, 2017

submissionscomments
tallclair··on Gemini 3 Flash: Frontier intelligence built for speed
On your Omniscience-Index vs. Cost graph, I think your Gemini 3 pro & flash models might be swapped.
tallclair··on AI is already replacing thousands of jobs per month, report finds
It doesn’t need to be able to entirely automate a job to replace jobs though. If it enables one worker to be 10 times as productive, then the company can hire 9 fewer people (depending on how the productivity of the position scales)
tallclair··on Smartphones wiped out 97% of the compact camera market
You can also achieve it with multiple cameras spaced out. It’s computational, but not exactly faked.
tallclair··on Mortgage rates just hit 5%. Buying a home has become a lot more expensive
This doesn’t account for all the people who can afford to pay in cash. That will shift the equilibrium.
tallclair··on Optimizing Docker image size and why it matters
The best advantage I’ve found to the distroless static image is that it cuts down on the noise from container vulnerability scanners.
tallclair··on I want a better shell (2019)
Something that prevents me from adopting a lot of superior modern tools is that I need to SSH into a lot of servers and other machines that don't have the tools installed. I don't want to maintain the muscle memory and knowledge of 2 separate workflows & toolchains for the same tasks on different machines.

I'd like to see something that runs locally with my aliases, keyboard shortcuts, plugins, etc. and translates the commands to a remote backend, maybe similar to VS code's remote development.

tallclair··on XSS Attacks: The Next Wave
Why can't we tackle XSS in the browser, by preventing javascript from executing in the <body> (or anywhere other than <head> for that matter)? There is an old memory protection technique of designating the stack & heap (data portions of memory) as non-executable. It seems like a similar idea should apply to the web, where the DOM is effectively a "data" portion, and separate out all executable javascript into a separate section. I know this breaks things like `onclick=` attributes, but can't those be replaced with event listeners? Of course it would be opt-in by setting an attribute somewhere in the DOM (e.g. <body non-executable="true">)

This seems like a fairly obvious idea to me, but I'm not a frontend developer, so I'm looking for someone to tell me why this doesn't already exist :)

tallclair··on Keybase is out for iPhone, Android
> exists on all 5 platforms (iOS, Android, macOS, Linux, and Windows)

How about Chromebooks?