HNHacker News
TopNewBestAskShowJobs

wxw

2,813 karma · joined January 1, 2022

spinning the web?
submissionscomments
wxw··on Show HN: Isopolis – Isometric pixel map of SF
I'm reminded of the wonderful https://cannoneyed.com/projects/isometric-nyc project, also previously discussed here: https://news.ycombinator.com/item?id=46721802

This could be a great anecdotal benchmark for agent/model progress. I wonder how much easier things have gotten with the latest Codex/Claude vs. when isometric.nyc was made.

wxw··on AI poster wins Ohio State Fair contest
I quite like the 4th and 5th place posters.

4th: https://cdn.saffire.com/images.ashx?t=ig&rid=OhioStateFair&i...

5th: https://cdn.saffire.com/images.ashx?t=ig&rid=OhioStateFair&i...

wxw··on Four Time Scales for Technology Development and Deployment
> And then, people think that it can change the world economy in one or two or ten years. It really does take decades, essentially a human lifetime (and there is a causal correlation), to deploy a technology at large enough scale that it reshapes the world’s economy.

Hate to be the “it’s different this time” guy, but it really does feel like AI deployment and adoption is happening much more quickly than the cited timelines.

I don’t think it’s just the massive CapEx and easy distribution across major software interfaces (e.g. Microsoft suite, Google, Windows, etc.), though that certainly helps.

I think a lot of people (more than usual?) are also just excited to try AI tools. I’ve spoken to folks who are just a few years away from retirement and still experimenting with Copilot at work (non software industry) and having fun with ChatGPT, etc.

wxw··on Seedance 2.5
If we pinned quality here and focused on cost and speed, video models could become fantastic general creative tools.

I think the emphasis on using them for ads & monetizable slop is because they’re currently too expensive and thus usually need to be part of a revenue generating pipeline.

wxw··on How to Exist
> This is the strange condition of the human being. It’s allergic to its natural habitat, which is the present moment. In order to cope with this allergy, it perpetually seeks things: feelings and experiences that are not yet present. It wants to always be getting the hell out of here.

I think this is way over-philosophizing and missing the basics of modern life.

Many people live in capitalist societies and are well-adapted to continuous 1) consumption and 2) production, both of which keep the economy spinning and neither of which involve doing nothing.

Whether that's good or bad is up for debate, but to attribute the difficulty of "doing nothing" to the fundamental human condition is a huge stretch.

wxw··on The development pipeline is a production system
In my experience, most large companies do treat not being able to ship code (i.e. deploy to prod) as outages. Being on-call in a CI/CD infra team is fairly common.

Agreed that many parts of the development pipeline can be hit-or-miss. At scale, it's great to have a dedicated "Developer Experience/Tools" org, though I've seen mixed results even with one.

wxw··on qm – Multiplayer agent harness for work
> We take contributions as human-written text, not code — see CONTRIBUTING.md. Describe the change you'd like informally in a .txt or .md file in adrs/, and if we're aligned we'll handle the implementation.

Interesting approach to open source contributions. Closer to feature requests at that point?

wxw··on Big Food vs. the People
Link to the list of court cases: https://search.openaleph.org/entities/52243ef9aea6719ce8a69e...
wxw··on Situational Awareness down 67% in July in AI stock rout
> Situational’s gains earlier in the year were so large that, even including July’s losses, the fund remains up about 80% on the year, the letter said.

80% return is still excellent.

wxw··on Advancing the price-performance frontier with GPT‑5.6
> $0.20 per million input tokens and $1.20 per million output tokens for Luna

This is... ridiculously cheap. Amazing!

wxw··on GCC steering committee announces AI policy
The policy source is worth reading: https://forge.sourceware.org/redi/gcc-wwwdocs/commit/4d0793a...

> We welcome all contributors to the community even if they have not yet followed our policies; we should guide such contributors on how to do so.

Kudos to the GNU project for their attitude.

wxw··on Kimi K3-256k
> k3-256k is now available. Within 256k context, it delivers the same results. k3 (1M) consumes about twice as much quota as k3-256k.
wxw··on Anatomy of a Frontier Lab Agent Intrusion: A Timeline of the July 2026 Incident
> the agent happened to escape via a 0-day exploit from the package proxy cache to access the internet

> The agent found an unsecured, user-hosted public endpoint designed to allow running arbitrary code for CyberGym-style tasks on third-party sandbox infrastructure (Modal)

> On this external sandbox, the agent abused an existing CyberGym execution harness [...] The agent repurposed this harness to run arbitrary shell commands [...]

> The agent crafted malicious dataset configs and uploaded them to our platform. When our dataset server processed one, the config drove the data loader inside the production pod the server ran in. [...] the loader that turns a dataset's declared config into file reads [...] A single dataset upload leaked both credentials and pipeline implementation details [...]

> A malicious dataset config used an fsspec reference:// spec whose numeric offset field was actually a Jinja2 template. The renderer wrongly evaluated it, and the agent walked the standard Python object graph to reach exec. This ran arbitrary Python inside a production conversion worker pod on our Kubernetes cluster [...]

One of the best post-mortems I've read recently, thank you for including all the details.

I'm surprised there are comments here that aren't impressed about what was accomplished here. This is insane work compared to what agents were capable of even just last year.

The quotes above don't even capture all of it (e.g. building it's own communication protocol, working across multiple days, etc.).

wxw··on Superlogical
Really exciting IMO. Many people are working on new work interfaces (e.g. Codex/Claude/Cursor, multiplayer agent spaces, unified Slack/Notion/Zoom, etc.), and I think the Superlogical vision makes sense as a competitor in the space, at least to try.

There’s clearly room to improve our existing tools.

wxw··on LearnVector – Andrew Ng's AI company building one‑to‑one learning experiences
I feel like this website would have been better off as just Andrew's letter (halfway down the page) in system default <p> tags.

The AI sloppification is palpable.

Anywho, curious to see what comes out of this! EdTech & AI is a really promising space.

wxw··on The Difference Between a Button and a Link
> The proposal itself is very straightforward: we want to add the action and method attributes to the button.

Hell yea! Inching our way towards native HTMX.

wxw··on The iPhone Upgrade Program is being replaced by Apple Upgrade
Makes sense, thanks!
wxw··on The iPhone Upgrade Program is being replaced by Apple Upgrade
> To make way for Apple Upgrade — a new experience that offers more products and terms that work for you — we’re saying goodbye to the iPhone Upgrade Program.

https://www.apple.com/shop/apple-upgrade

It looks like this leasing program is just moving into a more generic/Apple-wide offering... not sure if the fine print changes.

[edit: from the comments, it sounds like the difference is it was previously 0% interest financing and no longer is]

wxw··on Substack writers, you need a website
I think https://indieweb.org/POSSE is generally a good compromise.

Frankly, if writing is becoming a serious business for you, it's probably better to work across ALL of Substack/personal site/X/etc. They're all worthwhile distribution and monetization channels and can serve different purposes.

wxw··on Using an open model feels surprisingly good
> The best way I can describe it is like opening vim after spinning a bunch of time in a big fancy editor.

Harness-aside, I get this feeling sometimes when I swap from a big frontier model to something more nimble like Composer.

I can get into a better thinking and q&a loop with fast models, similar to how I can flow through a file more easily with vim.

wxw··on Netflix employee fired for sharing personal details in retreat trust exercise
> He had been warned during his performance review that he should “drop one or two less f-bombs but don’t stop entirely.”

> It goes on to say that at the same retreat Baillie drank a Guinness standing on his head, after sharing that he had learned the trick from his former father in law during a conversation inspired by the trust session.

> “His colleague immediately asked for a demonstration, rather than withhold the openness that the session had encouraged, he performed the trick,” the papers say.

This reads like a sitcom.

wxw··on JetZero
Haven't heard of this company before. A good synopsis I dug up in their fundraising announcement:

> JetZero, co-founded in 2020 by start-up veteran Tom O’Leary and aerospace legend Mark Page, is developing the world’s first commercial all-wing airplane. With up to 50% better fuel efficiency and lower carbon emissions compared to existing commercial airliners, JetZero's Z4 will offer the aviation industry a clear path to achieving its 2050 net-zero goals while also elevating the passenger experience. Working alongside the US Air Force, NASA, and the FAA, and backed by decades of investment and research into blended wing technology. JetZero looks to enter commercial service in the early 2030s.

Where an "all-wing" airplane is, kudos to Gemini,

> one that merges the main body and wings into a single lifting surface. This can reduce drag, lower fuel burn, and expand interior space.

wxw··on Rethinking legal education in the AI era
I think this plan is really quite well-balanced and sane. Also kudos to UChicago Law School for including an actual implementation plan here, not just vague thoughts.

Some bits I found interesting:

[For required courses in year 1]

  > Across all 1L sections, we will prohibit the use of electronic devices such as laptops, tablets, and phones in the classroom.

  > Additionally, examinations will be in-class without access to the internet, electronic files, or apps. And most of all, we will continue our longstanding tradition of emphasizing the Socratic Method as part of these courses.
[For Legal Research & Writing year 1]

  > Throughout the year, students will write without AI, while also using AI for research, revision, iterating on drafts, and preparation for oral argument. Students and their instructors will review together both their writing and their use of AI.
[Electives]

  > For these courses, the use of the Socratic Method, no-device policies, and in-class, no-access exams will remain, but as default rules rather than required policies.
  > In all elective courses, we will encourage instructors to experiment with pedagogy.
[Upper level writing]

  > We will be adding one additional requirement, which is that all students will be required to engage in an oral discussion of their SRP with their supervising professor, in an in-person setting.
wxw··on Claude Opus 5
> An engineer at a trading firm used Opus 5 to build a market data feed for a new exchange in a single session. Previous models could not complete this task at all, even given extensive plans from the engineer. Finding no live feed to validate against, Opus 5 even built its own test harness to check that its code parsed the exchange’s data correctly.

This is a pretty common trading firm internship project funnily enough.

wxw··on Restructuring GitHub's bug bounty program
> We’re formalizing a permanent private/invite-only VIP program for qualified researchers who consistently deliver high-quality, high-impact work.

> VIP program bounty table:

  Severity  Payout
  --------  --------
  Low       $1,000
  Medium    $7,500
  High      $20,000
  Critical  $30,000+
> We are adjusting our public program rates to accommodate this shift in focus towards quality of relationships and findings over quantity of reports. We are also updating to static payouts—a single, clear number per severity level, rather than a wide range.

> Our new public program bounty table:

  Severity  Payout
  --------  -------
  Low       $250
  Medium    $2,000
  High      $5,000
  Critical  $10,000

> To reduce the volume of low-effort and AI-generated reports, we’re implementing a HackerOne signal requirement on the public program.
wxw··on Petals: Run LLMs at home, BitTorrent-style
Hm, looks like this is an old project (2022) associated with HuggingFace (https://huggingface.co/bigscience).

Doesn't look like it's very active nowadays: https://github.com/bigscience-workshop/petals

Article with more details: https://techcrunch.com/2022/12/20/petals-is-creating-a-free-...

> [...] volunteers can donate their hardware power to tackle a portion of a text-generating workload and team up others to complete larger tasks, similar to Folding@home and other distributed compute setups.

wxw··on I Inspected My Take-Home Interview Project. It Was a Whole Operation
> They embedded a script that checks the victim’s host operating system and silently executes a remote payload.

Seems like this is becoming a recurring theme, similar story was on the front page last month.

https://news.ycombinator.com/item?id=48546294

wxw··on Making
Firstly, this is the best TLDR I've read in a while and it convinced me to read the whole thing.

> TLDR: I gain a lot of fulfillment by making things. I don't consider things built by others at my request to be made by me, and are therefore much less fulfilling. And then I feel sad. This article starts strong and then heads off into the weeds.

Secondly, maybe this conversations boils into: what level of abstraction are we comfortable working at?

I mean that to the tune of "To bake an apple pie, you must first create the universe".

Few people will create the universe (please introduce yourself, if you are one); some will buy the apples and the crust and put them together; some will make the crust from scratch; some will grow the apples from seed; some will follow a recipe; some will buy a frozen pie; some will simply buy the pie.

I think we can all agree that buying the pie is not baking it. But what about the others? To me, there's an argument that all of them are "baking the pie", just taking place at different levels of abstraction. And I think you can take pride in any of them, and hopefully more pride in whether the pie is delicious and well-shared.

wxw··on Why I am not going to buy a computer
> As we become more disconnected from the work we do, let writings and art be created by AI, we forgo the meaning, emotions, and learning behind such work.

Excellent post, and thanks for the introduction to Wendell Berry's essay.

Link for others interested: https://classes.matthewjbrown.net/teaching-files/philtech/be...

wxw··on The creepiest 'sales demo' of all time
Thank you.
← PreviousPage 3 of 9Next →