HNHacker News
TopNewBestAskShowJobs

zvqcMMV6Zcr

94 karma · joined January 2, 2026

submissionscomments
zvqcMMV6Zcr··on Threat actors expand abuse of Microsoft Visual Studio Code
Does it matter that much? I don't think there is any "safe" build system. Users will try to build project sooner or later. With Maven it is easy to add a plugin with harmful payload as dependency, you won't spot it in "source", unless you carefully review every dependency. IDEs need containers/isolation and they need it now. Instead we got that "Do you trust this project" dialog.
zvqcMMV6Zcr··on Waiting for dawn in search: Search index, Google rulings and impact on Kagi
Recently I encounter "no results" screen when using Google that I am starting to suspect the problem will solve itself. And by solve I mean open parts of internet will die off completely, and only owners of silos like Facebook will be able to provide data for search indexes.
zvqcMMV6Zcr··on Ask HN: Do you have any evidence that agentic coding works?
I know of 4th - line level interference. I love how it works in IDEA, 30% of time I just slap TAB to accept generated code, if it is wrong I just continue writing as usual. Avoids most drawbacks: you don't pay for it(it is running on local CPU), the "review" is instant while still providing boost to productivity.
zvqcMMV6Zcr··on cURL removes bug bounties
In most basic form it would just be form with URL that (lib)curl is later supposed to fetch. And target server (controlled by researcher) is supposed to send payload that triggers RCE in client.

Sure, it covers a very narrow scope but I am afraid the bigger issue would be that it is going to get spammed with submitted links. And those links will often be to strait up illegal content, it might not matter that such server instantly deletes all downloaded files.

zvqcMMV6Zcr··on cURL removes bug bounties
I think it might be the same issue as with WordPress and Jira - terrible plugins. Each company uses own special mix, and encounters issues often occurring in that one specific configuration. And it is the base platform that takes the blame.
zvqcMMV6Zcr··on Nvidia Stock Crash Prediction
Technical analysis is amazing, it is most refined form of pseudoscience.
zvqcMMV6Zcr··on Dead Internet Theory
There were some dedicated submissions about ad fraud on HN. In long term companies tend to reach equilibrium, where both reducing and increasing ad budget decreases profit. It is a classic prisoners dilemma, giving up on ads with poor ROI would be obvious decision if it wasn't for competitors who will benefit both from some actual conversions and lower bids for domain specific keywords.
zvqcMMV6Zcr··on Prediction markets are ushering in a world in which news becomes about gambling
Rich might be overstatement, but WNBA dildo stir show that people are ok with risking jail time over relatively low amounts of money.
zvqcMMV6Zcr··on CD Projekt issue DMCA takedown notice against popular Cyberpunk VR mod
The term "derivative work" covers a lot. For example all fan translations are one and all content stored on movie subtitles sites is by definition illegal. I don't know about those particular VR mods but in general case it is easy to show that game mod is not a standalone work and counts as derivative work, so game developer can limit the distribution however they want.
zvqcMMV6Zcr··on Ask HN: How can we solve the loneliness epidemic?
> get a dog

I briefly considered it but I don't want to be the asshole. I would put any pet in exact position I am myself trying to avoid - stuck in home, alone for long periods of time.

zvqcMMV6Zcr··on Ask HN: One IP, multiple unrealistic locations worldwide hitting my website
> I can handle hundreds of requests per day with no issue on a home cable modem connection and my desktop pc running nginx.

And what kind of ecommerce site are you running on that nginx? First thing that get overwhelmed by bot traffic is DB. With a tiny one, with low total connection limit and bots hitting less common path like browsing 20th page of product search results, it is really easy to get DoS. I remember having to block Yandex user agent 20 years ago, surprising no one wanted to allocate additional resources so that crawler is happy.

zvqcMMV6Zcr··on Apple is fighting for TSMC capacity as Nvidia takes center stage
Designing CPUs also wasn't their core business and they did it anyway. Apple probably won't care that much about price hikes but if they ever feel TSMC can't guarantee steady supply then all bets are off.

I wonder what will happen in future when we get closer to the physical "wall". Will it allow other fabs to catch up or the opposite will happen, and even small improvements will be values by customers?

zvqcMMV6Zcr··on Nvidia Reportedly Ends GeForce RTX 5070 Ti Production, RTX 5060 Ti 16 GB Next
AMD's approach to pricing was "comparable NVidia card minus $50". If price of remaining NVidia cards goes up then AMD will follow.
zvqcMMV6Zcr··on Furiosa: 3.5x efficiency over H100s
It misses most important information, price and how quick they can ship. If they can actually deliver and take slice of market share from NVidia then it would make me happy.
zvqcMMV6Zcr··on Date is out, Temporal is in
I just groked it before and thought "plain" in `Temporal.PlainDateTime` indicates some specific format instead of just being zoneless. It is actually always using ISO8601 fur build in toString conversions, so I don't really have anything to complain about.
zvqcMMV6Zcr··on Date is out, Temporal is in
I am not sure if I like mixing value and formatting in single object. On other hand anything will be an improvement compared to that terrible old API.
zvqcMMV6Zcr··on Floppy disks turn out to be the greatest TV remote for kids
I am not sure physical component will help that much. Not after I once saw a kid swap between 4 different Minions DVDs every 5-10 minutes.
zvqcMMV6Zcr··on Himalayas bare and rocky after reduced winter snowfall, scientists warn
Politicians look at best at next term, CEOs look at next quarter. Climate changes took decades to manifest effects. And those 2 groups produce most news "worthy" messages. Journalism is quite close to being dead (with local reporting already being buried), as rephrasing PR statements is cheapest and fastest way to produce "content". Who is supposed to nudge public discourse in that direction, "influencers"?
zvqcMMV6Zcr··on Himalayas bare and rocky after reduced winter snowfall, scientists warn
I always considered the conflict between India and China a bit silly, considering the size of those countries compared to tiny disputed territories. But the are totally are going to war over Himalayas water resources, aren't they?
zvqcMMV6Zcr··on AWS raises GPU prices 15% on a Saturday, hopes you weren't paying attention
> all the power lies in subscription services

I think NVidia already decided they have all the power when the decided to add 100h limit to their GForce Now service, with that limit getting effective for legacy plans right now. It would be bad if people like they service so much that they avoid buying overpriced hardware :D

← PreviousPage 3 of 3