thombles

Oof. Why can’t it just do its one job? My interest level in trying these agents has gone from lukewarm to zero.

If you want your nostalgia in multimedia - https://canyonmid.com/

> you can imagine how a locally run LLM that was just part of the SDK/API developers could leverage would lead to better UI/UX

It’s already there for Apple developers: https://developer.apple.com/documentation/foundationmodels

I saw some presentations about it last year. It’s extremely easy to use.

HN has some heuristics to reduce hyperbole in submissions which occasionally backfire amusingly.

Given what this person has gone through, if you want to be critical then I think you owe us a more detailed explanation what exactly would have worked better. Armchair parenting is very easy.

Out of all bugs and feature requests, this one is an outlier in that it requires specific hardware to work on and has an obvious success condition. This means that every man and his dog is not going to be throwing an LLM at this to see if their particular slop wins the prize. People get weird when money is on the line and managing a bounty is a job for which I would never volunteer.

MetaARPA tier membership (quarterly fee) is required to have HTTPS on your personal website - personal sites hosted on the main BSD cluster don’t have it.

HTTPS ain’t cheap though.

One place bisect shines is when a flaky test snuck in due to some race condition but you can’t figure out what. If you have to run a test 100000 times to be convinced the bug isn’t present, this can be pretty slow. Bisecting makes it practical to narrow in on the faulty commit, and with the right script you can just leave it running in the background for an hour.

Spam, illegal content, and moderation in general. How do you protect against new account spam when any domain could be a PDS and any PDS could host an arbitrary number of users? What do you do about people stuffing ebooks and TV shows in git repositories? If a project is getting piled on with all its issued spammed because of political views of the repo's maintainer, is this considered a problem, and if so how is it fixed?

The advantage of an AppView is that, like BlueSky, you can actually have a central moderation team and consistent moderation policy. Even if people post whatever they want on their own PDS it is possible to curate what people normally see. However, even though I avoid following the drama I can see that the BlueSky moderation team is constantly under fire for some decision or other. Choose your poison.

Nowadays I don't have the appetite for fully decentralised public networks and all the responsibilities and problems they bring. It's nice that AT's content is completely open compared with something like Twitter, but it's so helpful that the day-to-day administration is centralised when you want an authority to appeal to without ending up with the quagmire of "defederation".

A question to ponder: is anyone here going to volunteer to run a "permissive" radicle seed node? (i.e. providing storage and access to arbitrary git repos uploaded anonymously)

I gifted it to a couple of new Dad friends. They never did get back to me about it. Fair.

Crates.io had a major phishing campaign just the other day, but no major hacks yet as far as I know. Is that because they do something special that NPM has failed to do? Or is it just that NPM is a big and juicy target?

I think if somebody wants to see library distribution channels tightened up they need to be very specific about what they would like to see changed and why it would be better, since it would appear that the status quo is serving what people actually want - being able to create and upload packages and update them when you want.

> But right now there are still no signed dependencies and nothing stopping people using AI agents, or just plain old scripts, from creating thousands of junk or namesquatting repositories.

This is as close as we get in this particular piece. So what's the alternative here exactly - do we want uploaders to sign up with Microsoft accounts? Some sort of developer vetting process? A curated lib store? I'm sure everybody will be thrilled if Microsoft does that to the JS ecosystem. (/s) I'm not seeing a great deal of difference between having someone's NPM creds and having someone's signing key. Let's make things better but let's also be precise, please.

In addition to what's already in the thread, I assume by now somebody has vibecoded an agent to scan GitHub for bounties and then automatically vibe up a corresponding solution. Will be a fun source of spam for anyone who wants to do the right thing and pay people for good work.

My bank recently made it that app-based MFA must be used for every single web login. Unless I and many others are willing to swap banks in the vain hope that the new bank won't do the same thing (I am not), then we're cooked.

Relatedly, Tim Oliver did a great presentation about building a holographic foil effect for the Threads "golden ticket" in Instagram https://www.youtube.com/watch?v=_sHxHz0nVG8

For today's 10000: amateur radio operators call Morse code "CW" since it's a Continuous Wave (unmodulated) transmission while you're pressing the key. The most basic kind is a straight key which simply transmits when you push and stops when you let go. Electronic keyers often use iambic paddles/buttons where you use one switch to create a series of "dits" and the other switch to create "dahs" yourself, which is less physically demanding and lets you hit higher WPM. There are examples of both types here.

Putting aside the notion that a monetary incentive is invalid for some reason, there are also plenty of open source authors who are pretty unimpressed that they only ask for attribution and even that's being laundered away via weights. If their licence isn't being respected that's certainly a legal issue.

Is there value in requesting a CVE for a service that only Microsoft runs? What's a user supposed to do with that?

> the same mental health degrading content

In this brief choice of words you've revealed that you're just guessing at what the actual problem is. There's a good book about it mentioned upthread; I recommend it.

Have a look at Jon Haidt's book The Anxious Generation. He makes the case rather well that we need to cut out the safetyism in the physical world while getting serious about it in the online world. It's not some abstract matter of the morality of kids' digital freedom, it's the tanking of mental health and increase in self-harm and attempted suicide since smartphones came along.

At least on OneDrive for Android, a bizarre thing is that search is _not_ equivalent to find . -iname. It is able to find search terms in the _content_ of documents but not their filenames.

If you're planning on diving in, the linked "how to play" video is two minutes long and gets the basics across very effectively: https://youtu.be/jvHEvbko3uw

Well I never set much store by marketing and I'm not planning to start. :) More seriously though it helps explain the apparent contradiction that it sounds scammy at a macro level yet many individuals report getting a lot of value out of it.

Speaking as a grump who recently chilled out, put reservations on hold and gave Claude a crack... it turns out that the anti-AI crowd (which still includes me in many regards) gets a lot wrong about the experience of using it, as demonstrated in TFA. You don't get reams of wishy-washy code unless you ask for it. If you're an experienced developer who Knows What They Want then you can wield it like a scalpel. None of the output is a surprise because you discussed the context and requirements first. It just gets there (probably) faster than you might have typing out keywords yourself. If the goal is Whatever, then sure, you will get that faster.

Use rufus.ie to burn a USB that has the hardware restrictions removed. Works a treat IME.

Hmm a bit of a tone shift from: https://fly.io/docs/about/open-source/

> Fly.io builds on the work of a tremendous open source infrastructure community. We want open source authors to benefit from their work because we think a healthy, thriving open source ecosystem will help us build better products.

To the fine article:

> Meanwhile, software developers spot code fragments seemingly lifted from public repositories on Github and lose their shit. What about the licensing? If you’re a lawyer, I defer. But if you’re a software developer playing this card? Cut me a little slack as I ask you to shove this concern up your ass.

Bingo. Furthermore, the annoying things that MS does are predictable and usually not directly harmful. Yeah they want telemetry, they want to encourage me to use expensive autocomplete everywhere, but ultimately the range of bad stuff is "oh dear the corporation is trying to upsell me nonsense I have to turn off", not "my OS is the combination of thousands of distinct software packages where I have to trust literally everybody with code execution... I sure hope this keeps working out".

I'll take your word for it but I have to chuckle, since I'm adjacent to some groups of gamers and I've never seen the name of this game in my life. So it goes!

> if you estimate that at least 90% of your content is created by humans, you are eligible to add the badges

Probably not what most people expect