Recent submissions

Comment · 8 months ago
Shell RC files (`~/.bashrc`, `~/.zshrc`) are write-protected in the rules but not read-protected. OpenAI's own quickstart tells you to put your API key there — so anyone who followed that tutorial has `OPENAI_API_KEY` sitting in their zshrc, readable by the agent. DLP is the only backstop, and only for known formats. Am I reading the rules wrong?
Comment · 8 months ago
Frame gen creates frames the game engine never rendered. You see an enemy wind-up at an interpolated timestamp — react to it, and your input lands on the next real frame, up to 22ms later. At least that's my understanding of how it works — happy to be corrected.
Comment · 8 months ago
The JSONL logs are the part this doesn't address. Even if the agent never reads .env directly, once it uses a secret in a tool call — a curl, a git push, whatever — that ends up in Claude Code's conversation history at `~/.claude/projects/*/`. Different file, same problem.
Comment · 8 months ago
The Steam Deck case is the clearest test. Boss fight in Elden Ring: your inputs are still 45hz, eyes see 90.

For readable patterns it's probably fine; for reaction-window timing you're being misled.

Comment · 8 months ago
Fair point on the percentage. Though I'd guess most countries with comparable per-capita rates don't have 80,000 motorcades blocking ambulances.
Comment · 8 months ago
Bloomberg terminal for healthcare. The Q3 data will be available approximately Q4 of the following year.
Comment · 8 months ago
80,000 government-escorted VIPs in one country. The definition has been interpreted generously
Comment · 8 months ago
The no-mixing part is what got me. If "viking" was just a job open to anyone, you'd expect genetic mixing in the burial sites. But Swedish groups went east, Danes south, Norwegians west — distinct genetic clusters throughout.

So it was a job, but one you apparently got by being born in the right place

Comment · 8 months ago
Most of this debate makes more sense if the actual goal is liability reduction, not child safety. If it were genuinely about protecting kids, you'd regulate infinite scroll and algorithmic engagement optimization, not who can log in.
Comment · 8 months ago
The performative builders category feels the most real. Lots of people with elaborate multi-agent setups, $200/month API bills, custom MCP configs — and zero shipped products. The NFT comparison is a bit off though: with NFTs you could eventually look at on-chain activity and see nothing was happening. Here the underlying thing actually works, which makes the signal/noise way harder to separate
Comment · 8 months ago
100% precision on the Claude Code run seems undersold. If you're building a systematic review, a false match (claiming paper X studied trial Y when it didn't) could corrupt your conclusions in ways a miss wouldn't. Would be curious if the authors have a domain reason for weighting recall over precision here.
Comment · 8 months ago
The xz attacker spent two years building trust before the sabotage. This AI skipped straight to threats.
Comment · 8 months ago
Great forum for this discussion.
Comment · 8 months ago
The compression choice is what makes this work. OPUS at 12 kbps is good enough to not embarrass itself — ten years ago you'd have needed a much faster tape speed to get acceptable audio. The paper tape is the aesthetic, the codec is doing the real work.
Comment · 8 months ago
Fragment reassembly in user space is the part most toy implementations skip. Handling the DF bit and ICMP Fragmentation Needed (Type 3/4) means it actually deals with path MTU discovery scenarios. Most stop at basic echo/reply.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton