HNHacker News
TopNewBestAskShowJobs

viraptor

47,802 karma · joined February 8, 2009

hn _monkey_symbol_ viraptor _full_stop_ info

my public key: https://keybase.io/viraptor; my proof: https://keybase.io/viraptor/sigs/9hLpwnZ9c2YIIWbW6bZwT-qImoWZUt2-K7h4XERPoKA

submissionscomments
viraptor··on Newgrounds.com – A community of games, music, and art
They made Sly 2? Oh no, there goes my night...
viraptor··on Several vulnerabilities have been discovered in the Linux kernel
The linked article ends with mitre confirming the outcome is what the curl project wanted. The dispute process is there exactly because some cases are ambiguous, or hard, or people involved are annoying. Whenever there are two sides with a dispute, one will likely claim Mitre handled something wrong, by definition of a dispute. They get to make decisions. So what exactly do you want from this case? Perfect decision making every time? They're handling thousands of cases and there will always be mistakes at that scale - some will be subjective things that people will disagree about forever.
viraptor··on Several vulnerabilities have been discovered in the Linux kernel
https://news.ycombinator.com/item?id=49929389

I'm using specific words and it's been explained and linked twice already. Come on!

viraptor··on Several vulnerabilities have been discovered in the Linux kernel
Tell us about a system for managing vulnerability database that works across enterprise, private and open source, is staffed enough to research both impact and disputes, is funded enough to work for decades, isn't partisan to any industry interests, can classify vulnerabilities in a non ambiguous way, can handle public submissions at any volume in a timely manner...

and one that will never make decisions that is incorrect or disliked by any party.

viraptor··on Several vulnerabilities have been discovered in the Linux kernel
You're memeing on bad cve handling, but that's so far outside of what the real issues are, it just doesn't make sense. How about telling people about what the real problems with vulnerability classification are, rather than mitre=bad?
viraptor··on Several vulnerabilities have been discovered in the Linux kernel
https://news.ycombinator.com/item?id=49929389
viraptor··on MonoCode: GUI for Coding Agents
Or t3code https://t3.codes/
viraptor··on Several vulnerabilities have been discovered in the Linux kernel
That's an issue in the other code, not in the addition service. It would be lumped together if it was an addition function close to the other code. But I wrote service there on purpose.
viraptor··on Several vulnerabilities have been discovered in the Linux kernel
> It's therefore a denial of service

That doesn't follow. In the extremely simple example, an adding service returning 1+1=3 has a bug, but it's not a possible DoS situation at all.

> missing but planned features also deny the use of said features

That's not what DoS is.

This whole situation with CVE assigning comes from the whole process being far from ideal. But it doesn't mean it's completely useless and doesn't follow any rules at all.

viraptor··on When oil prices spike, where does the money go?
This is not police and robbers. US is not world police nor the good side here. But they do still have enough people aware of global politics and understanding cause-and-effect who are in advisory and decision making roles, that this chain of events would've been pointed out as very likely. Saudi Arabia had a 1200km cross-country pipeline built in 1980s just for the occasion of a political crisis closing the straight and needing an alternative route for export, so it's not even the first time this issue happened in the current gov's average lifespan.

In short, this is basic cause and effect. We can easily say the attacks closed the straight.

viraptor··on Singapore govt dating app uses Gale-Shapley stable marriage algorithm
A lot of this is just a difference in topics for conversations - local/global. See: us talking here about a Singapore dating app, when likely neither of us two is in Singapore and at least one is already married. On the other hand, people in my circle are worried about the climate change concerns and we're aware of that... but it's not often a topic of conversation. It's not the concern that's amplified, just the topic is more frequent. But it doesn't mean I'm not seriously worried about my kid having to migrate in later life due to local agriculture becoming not viable at scale, one of the dumb wars turning into ww3, or just dying due to one of the current climate effects turning into a feedback loop that we can't survive within the next few generations.
viraptor··on Singapore govt dating app uses Gale-Shapley stable marriage algorithm
Korea is close to that with the looks/weight social obsession. Not free, but trivial to get with close to no checks -vs- required medical reasons in other countries. But on the other hand... it's fueling the looks/weight social obsession, which has its own downsides longterm.
viraptor··on 10-year Treasury yield climbs above 5.3% to a level not seen in 24 years
They can lose some monetary discretion if it goes on for too long. I'm not sure what "corrective net expenditure path" means in practice, but it sounds like other members get to decide that one at the time.
viraptor··on US sanctions force The Netherlands off Microsoft and toward alternative NixOS
It's not arcane. You're just unfamiliar with it. It's pretty close to any lazy functional language.

Also what causes problems for others may not be the same thing that causes problems for you. You could try accepting others' experiences.

viraptor··on US sanctions force The Netherlands off Microsoft and toward alternative NixOS
As a downside, any change to software, version updates, keeping things secure now depends on the team is experts. Most are easy, some are hard (e.g. new software now requires a new Swift version - one person motivated enough to do that project has been pushing it for months), some are annoying (patch to libc means you're re-downloading your whole system).

As a positive thing, maybe at least nixos will get a serious security pipeline rather than the current best-effort community approach.

viraptor··on US sanctions force The Netherlands off Microsoft and toward alternative NixOS
Golden image deployments and netboot have been around for ages. If you want an unified system and control the infrastructure, it doesn't really matter which system you use.

I'm not sure why they chose nix. But it does make it easier to carry local patches than a lot of other systems. I hope they succeed.

viraptor··on OpenAI Says It Will Not Release Newest A.I. Model Over Safety Concerns
Different type of business. Many car companies release new cars showing you how much more powerful and implied dangerous they are. Both in capabilities and design style. In the US (other places too , but especially) they also get much bigger with less visibility which gets double dangerous. But the sentiment they're going for is pretty close - "you want this powerful thing, don't you?"
viraptor··on Ember-1
> Same token burn / cost though right?

Not quite. One, because you save on the initial query being sent multiple times. Two, because the reasoning will be very similar at the beginning; "user asked me to", "let's check what's in this project already", etc. you'll get similar actual output cost, but input and reasoning will be shorter.

viraptor··on ASML says it sold 'absolutely nothing' in Europe in 2026
Just for context, because I was curious: the when they say no orders, that's following 2 known orders in 2024 and 3 in 2025.
viraptor··on An airport cooled by natural ventilation
Circulating the air is what happens inside. Ventilation in architecture is across the inside-outside boundary.
viraptor··on ASML says it sold 'absolutely nothing' in Europe in 2026
This is not opinionated. The financial circle between AI companies has been discussed lots of times already, it's everywhere you want to check. Grid funding is here https://www.energy.gov/articles/energy-department-announces-...
viraptor··on ASML says it sold 'absolutely nothing' in Europe in 2026
A lot of the "growth" is debt and money going in circles. We'll see how much of it actually stays around next year. So far the US already has to bail out the datacentre expansion by funding transmission lines upgrades instead of asking for money for it from the companies.
viraptor··on An airport cooled by natural ventilation
No, that's how ventilation works. They can be independent and you need both. Closed loop A/C provides no ventilation.
viraptor··on An airport cooled by natural ventilation
> Naturally ventilated airports would probably have issues with fumes.

I'm confused. Do you mean from the food places? Those need proper extraction anyway. Or the cars/planes? Then mechanically ventilated airports take the air basically from outside anyway.

viraptor··on What About Rails?
Have you got any sources? The only thing I can find is the 2026/2006 mix-up which feels like a classic typo rather than AI mistake. There are other typos there which makes it less likely the presentation was fully generated. And it means that the result wasn't reviewed - looking at code is irrelevant in comparison.
viraptor··on What About Rails?
I don't understand what you mean by "just what you did". I'm not making PowerPoint presentations.
viraptor··on NHS bodies in England impose 2-year minimum wait for ADHD and autism assessments
That and the fact that if you ask a person with ADHD to come back in 2 years, there's a really good chance they won't for much longer than that.
viraptor··on What About Rails?
> Which is fine if you trust the LLM to write great code, and great tests for the code, but fundamentally you have to have 100% trust, 99.9% is not going to be enough in any serious industry, would it ?

This is lacking a lot of nuance. There are many types of code. There are many situations where I'm analysing something one-off and if I get 33% success ratio, but can easily verify the result, I'm happy - still saved me time and money. They're are situations where I'm generating graphs from some dataset and I don't have to trust anything - I know what the result should look like, I just need the agent to drive matplotlib. There are low stakes dashboards which I'm happy to generate and develop entirely via agents - they'll embed the updated screenshots in PRs that I can yolo-merge - worst case is that someone complains about something not working next time they visit. Then there's lots of experimenting which was never stopped to hit production anyway.

Finally after all of that you get code that's actually part of deployable features. Of course the trust is nowhere near 100%, but if you have a healthy testing process (e2e, validating different browsers, or whatever is appropriate for your environment), then what's your trust in human developer+review? Because mine is nowhere near 100% either.

In practice there are places where I extremely don't care about the code and never wanted it anyway, places where I'll read the code to check the design or just in case, and places which agents are not allowed to touch (medical billing rules for example).

viraptor··on What About Rails?
He did slow down, but that's not the way to look at dhh contributions. Rails is a whole umbrella of projects, from rails top level package to turbo, solid_cache, sprockets, action-/active-anything, etc. There are lots of relatively recent contributions in that org overall.
viraptor··on Abandoning Scientific Linux Was a Mistake
> AlmaLinux and RHEL remain the main supported Linux distributions across much of the organization

Alma and Rocky provide almost the same thing.

← PreviousPage 2 of 34Next →