HNHacker News
TopNewBestAskShowJobs

thombles

1,899 karma · joined September 22, 2019

Web: https://octet-stream.net/ GitHub: https://github.com/thombles Mastodon: https://social.octet-stream.net/@thomask
submissionscomments
thombles··on US criticises Australia's proposed algorithm opt-out laws as 'censorship'
Some doubt, actually. From the Guardian's reporting:

> Under the plan – dubbed “my feed, my way” – users opting out of the algorithm will see content only from individuals and groups they have actively chosen to follow.

> Users would be asked what they want their default feed to be through a pop-up message provided on their platform of choice.

thombles··on How to Write with an LLM
If I want to say that iOS is useless for developing Bluetooth 5 features then this is true for all practical purposes and doesn’t deserve elaboration in my text, even if Apple’s API technically exposes one or two tiny pieces.
thombles··on How to Write with an LLM
I'm somewhere between 100 and 110% sure the author knew what they were doing.
thombles··on How to Write with an LLM
Even if you don't want style advice from an LLM (I generally don't, not for blogging), for a technical blogger "please check this post for factual accuracy" is a good way to not look like an idiot. Often it complains about hyperbole, which I tend to ignore since there's no point blogging unless you have some firm opinions, but on at least one occasion it pointed me towards some documentation that undermined my entire post - and led to a much better one a week later once I'd processed and applied that new information. Thanks, LLM.
thombles··on .name Termination
The reason we happily walk around with our wallets is because Big Finance and Big Government are willing to invalidate and reissue our credit cards and identity documents, maybe even help us out with the fraudulent transactions after it was stolen.
thombles··on GitHub Outage Tracker: Is GitHub Cooked?
As a daily GitHub user in Australia I still haven’t figured out why everyone’s complaining about uptime. :)
thombles··on Understanding is the new bottleneck
It’s definitely possible to get much better output with prompting. I know, because when I’m faced with a “standard” PR description full of technical clutter, I can paste the link to Claude and ask “ELI5 what the problem actually is, any important context, what changed, and why that solves the problem.” And most of the time it converts it into something pretty good and readable.
thombles··on AMD acquires Taalas to boost inference performance by etching models in silicon
I think it’s tongue in cheek. When I first got access to Sonnet 4.5 I remember thinking to myself “y’know if they never got any better and I just had access to this forever then that would be pretty okay”. Turns out my expectations have changed since then and I would like a higher baseline now.
thombles··on Lightning Memory-Mapped Database Manager (LMDB) 1.0
Be cautious if you're using large databases on iOS. At least until fairly recently, iOS doesn't page dirty mmaped pages back to disk and after enough churn the app will OOM.
thombles··on The Wisdom of Quinn the Eskimo (Apple Developer Technical Support Engineer)
One day Quinn will retire and Apple had better have a succession plan.
thombles··on Show HN: Smart model routing directly in Claude, Codex and Cursor
I’m curious how a workplace ends up with a model policy like this. It seems like you’d spend more time trying to work out how to use a tiny number of Opus tokens than doing it yourself.
thombles··on Bobby Prince, composer for Doom, Wolfenstein 3D, and Duke Nukem 3D, has died
Alas. Loved his work on Major Stryker.
thombles··on Why I email complete strangers
A low-risk way to dip your toes in is to email a blogger to say that you enjoyed their post or that you found it helpful. The message doesn’t have to have useful information in it, just be sincere. Per OP, often there won’t be a reply but also often it’s much appreciated - particularly by non-mainstream writers.
thombles··on Apple Foundation Models
There are already on-device models that you can use through this framework as a developer. Claude would just be an additional one.
thombles··on Claude Opus 4.8
That's my initial experience, yes. It's hard to compare these things cleanly of course. I went through several new contexts on GPT and it just couldn't get traction -- it became hard to keep it focused on "yes there's clearly a race but what actual persistent state got broken"? It just wanted to change the thread priorities so that the problem didn't occur and kept doubling down on that as the solution. Opus made some missteps too but it responded well to my corrections - 2 or 3 significant ones along the way - and it was prepared to keep digging on my exact goal until it found the real issue.
thombles··on Claude Opus 4.8
Today I was a few hours into chasing down a very tricky timing-dependent bug with GPT 5.5 and we were starting to go into circles. I noticed Opus 4.8 had showed up in GitHub Copilot so I switched over and pointed it at my notes so far. Another hour of steady progress and it tracked it down to some missing synchronisation in an upstream library which was occasionally corrupting a linked list. N=1 but worth every one of those rather expensive 15x requests today. 15x... yeah.
thombles··on Project Glasswing: An Initial Update
As one of those commenters on the previous post - yep, that theory appears to have been comprehensively trounced. Unless anything comes to light that mythos was applied poorly to curl, the evidence suggests that it’s not uniquely effective vs other AI-assisted approaches. I’ll be interested to see what’s reported in the next curl release.
thombles··on Mythos Finds a Curl Vulnerability
We will see. As for "testing that could have been done before", Mozilla's posts indicate otherwise. Use of Opus 4.6 led to 22 security-sensitive bugs vs Mythos' 271 (https://blog.mozilla.org/en/privacy-security/ai-security-zer...). They already had the methodology in place when the more powerful model came along (https://hacks.mozilla.org/2026/05/behind-the-scenes-hardenin...):

> Once the end-to-end pipeline is in place, it’s trivial to swap in different models when they become available. Building this pipeline early helped us find a number of serious bugs using publicly-available models, and it also helped us hit the ground running when we had the opportunity to evaluate Claude Mythos Preview. In our experience, model upgrades increase the effectiveness of the entire pipeline: the system gets simultaneously better at finding potential bugs, creating proof-of-concept test cases to demonstrate them, and articulating their pathology and impact.

thombles··on Mythos Finds a Curl Vulnerability
The question is how many security vulnerabilities are actually left in the code after all the recent AI attention. Either Mythos is a nothingburger, or it's substantially more powerful but there's nothing left to do. Even a large amount of C can be correct eventually. Curl has the _potential_ to become a good data point maybe 6-12 months from now - if researchers and new tools find many more vulnerabilities then Mythos is proved to be hype. If they don't, then maybe Mythos is overkill for today's curl and its capabilities are better deployed elsewhere (like Firefox, apparently).
thombles··on Mythos Finds a Curl Vulnerability
Curl simply isn't a good data point. It's one of the most picked-over codebases in existence with extensive security testing practices. All the researchers using not-quite-Mythos models have had plenty of time to report bugs up to this point. Daniel may be right that Mythos hasn't been a game changer for curl but the preconditions are different for virtually any other codebase. Perhaps the real marketing here is his own modesty about curl's maturity.
thombles··on Zig → Rust porting guide
The answer is in the next sentence: "Bun owns its event loop and syscalls." They clearly want to manage their use of threads explicitly, which is not _unusual_ for systems programming but probably less common. Note that `rayon` is different from most of these in that it has nothing to do with async Rust - it's a tool for spreading computation over a thread pool, very popular in non-async projects, but it would also go against their goals here.
thombles··on BYOMesh – New LoRa mesh radio offers 100x the bandwidth
Is the poster maybe confusing bandwidth (range of frequencies over which a single board can work) with bandwidth (data transfer speeds in bits per second)?
thombles··on VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage
I saw this the other day and was pretty confused - I prefer to write my own commit messages and wondered if I’d accidentally let the AI do it this time. Nope, just MS changing things behind my back. Sigh.
thombles··on Ghostty is leaving GitHub
I didn’t read this as a flex. More a rueful admission of his connection/addiction to GitHub.
thombles··on Cal.com is going closed source
It's a meaningful difference for SaaS. Most likely an attacker doesn't have access to your running binary let alone source code, and if they probe it like a pentester would it will be noisy and blocked/flagged by your WAF.
thombles··on Microsoft is employing dark patterns to goad users into paying for storage?
Microsoft could tone it down a bit (especially all the full screen harassment after windows updates) but I wonder how many casual users have had their bacon saved precisely because their documents and desktop got pushed to the cloud?
thombles··on Microsoft is employing dark patterns to goad users into paying for storage?
It’s super hostile. I realised I was going to press it by accident eventually so I switched to Fossify Gallery before I did.
thombles··on Microsoft is employing dark patterns to goad users into paying for storage?
It doesn’t? I use the OneDrive app for scanning documents all the time. + button then “Capture”
thombles··on I'm betting on ATProto
I understand your pedantic point but let me give a realistic reply. If your account, or the account of somebody you like corresponding with, happens to be on an instance that falls into disfavour (not uncommon in my time there) then server bans come out and conversations become broken, even between parties who had no knowledge of the overarching drama. Good luck even understanding it if you aren’t a techie.
thombles··on Copilot edited an ad into my PR
Oof. Why can’t it just do its one job? My interest level in trying these agents has gone from lukewarm to zero.
Page 1 of 6Next →