hibikir

Joined 12 years ago

Karma
7,447
Submissions
1,228
Member since
Mar 9
Twitter: hibikir1
View on Hacker News

Recent submissions

Comment · 17 hours ago
And you still have to make sure all the real constraints are in. I had to fix a proven correct distributed algorithm that just happened to believe updates were done atomically and with no latency.
Comment · 17 hours ago
Except when there's an actual urgent patch: See recent PHP or Ruby ecosystem updates. Then you are just a sitting duck for a week
Comment · 17 hours ago
Shared code repositories for OSS are much older than npm. See at least maven central for Java.

What makes npm a more relevant target is a much smaller standard library and thinner dependencies, leading to more chances that a random project will have code of suspicious provenance. The vast majority of what a backend Java project depends on was probably written either by the same 3 companies, or large, established OSS repos. So this is relatively solvable if people in steering committees decided they cared. It's improving, but I'd argue not fast enough.

Comment · 20 hours ago
It depends on the political system. In many a parliamentary system, voting differently than what you are told means you will not be in the party list ever again, so for the day to day, there's very little convincing effort when you have the majority. And especially in systems where there is very little legal money in politics, the carrot is just ability to get access for not-so-legal money. So party leadership is a matter of having enough businessmen friends, and having will to power in a rather unclean word.

The whole "you are just one vote" doesn't really apply there. As the 30th legislator on your party list, you show up and vote as you are told. And in systems like the one in the US, barring rare moments, it's also not all that different. The card that your party will abandon you, and that if you want a position of any importance you have to play ball means many a junior congressperson just votes as they are told, and spends time fundraising.

Comment · 1 day ago
While there are incentive problems across all levels, The political quagmires that make it impossible to move at any reasonable speed, and that lead to counterproductive ideas getting large budgets are in my experience very common at the highest sizes. It's true that on the other edge of the spectrum, small startups make poor choices, but many of said startups will fail due to said choices. So by the time you have a viable company making good money, the really badly aligned companies are gone.

So when I look throughout my long employment career for best security and organizational practices, all the highlights are still relatively, relatively undersized companies, with headcounts in the 3-4 figures. It's as they grow, and start to be multi-headed behemoths, that they decay again, as what is good for the responsable mid-level exec, for the business unit, and for the company as a whole start to have nothing to do with each other. That's when you can smell the decay in the hallways. A few large companies manage to stave off this rot a little more than others, but it's inevitable. Then nothing important can be done in a timely fashion.

Comment · 1 day ago
Because for the same behavior, risks are going to be very different on the other side. In my family, for instance, we need significant interventions to get a reasonable risk due to all the bad genetic factors. In my wife's family, not so much. So knowing how serious the risk seems much better than just handing statins to absolutely everyone.
Comment · 1 day ago
In some ways, US healthcare is already very aggressive for some forms of preventive medicine. Compare the colon cancer protocols across the world. Basically nobody else is recommending colonoscopies to the entire population with no cheaper tests, but that's the standard of care in the US. It's not free to receive, and it's expensive in general, but for some reason in the US it is standard, instead of starting with non-invasive tests.

And yes, regarding smoking, the US has had one of the most effective preventive actions in the world. Compare actual numbers of smokers in the US vs, say, Spain, France or Turkey. So it's not anywhere near as clear cut as what you are trying to make it sound.

Comment · 1 day ago
Forget financial benefits: There's just a high risk of ending up in a crippling financial hole. Many schools have tuitions over 60k/yr. Add mandatory campus living costing 20-30k on top.

I have a child graduating high school right now. As a developer in the US, this means no child of mine is getting need based scholarships. So the question becomes whether it really makes sense to go to any of said expensive colleges vs handing the child 200k+ and going to a worse school where he gets merit scholarships worth 6 figures over the course of his stay.

When you put those kinds of prices out there, do not be surprised if people start to think it's all a ripoff.

Comment · 1 day ago
And if you ingest patches in seconds, you now have an issue of checking that the patch is not poisonous. Many a modern outage comes from changes deployed too fast. Damned if you do, damned if you don't.
Comment · 4 days ago
We already have as much parallelization as companies can afford: Hundreds, if not thousands of new corn varieties, coming from one lab. The budget is the limit. Testing is just expensive.

Process improvements come from failing faster, so you spend less money on your test. Finding the actual answer without testing would also be wonderful, but LLMs might be fast, but they aren't magic. Something like Alphafold saves time in some steps, but it's not just "hand me a candidate", but find completely novel verification mechanisms, which would be just as useful for humans. Either way, parallelization is unlikely to increase.

Comment · 4 days ago
It's often not necessarily about visibility, but real iteration time.

For instance, let's say we are doing biology on plants, which is still much easier than doing human trials. No matter how motivated claude might get, you aren't getting a corn plant to grow in 40 seconds. Real world research pipelines involve stages where even greenhouses don't do, and sacks of grain are shipped to Hawaii, or Brazil, or wherever, to try to get practical data for a given test.

If your computer simulation is so accurate you can skip a step now done with biology, great, but it gets harder the larger your problem is. I might see if a molecule kills bacteria kind of quickly, but what does a molecule do to a real human being? Not so easy.

Comment · 4 days ago
What can make sense, and what has been my personal experience, is that I have shifted my most draining work to the AI, so I can actually get more useful work done without getting exhausted. Just like 10 hours mining sitting inside of equipment is better than 10 hours with a pickaxe and a shovel, even if we ignore productivity
Comment · 5 days ago
If I have a team of 20, making a lot of money, but I think I can do the exact same job with 15 because of AI productivity gains, should I keep the other 5 employed for the vibes?

The total net income doesn't matter: The move is management saying they are overstaffed for the work they think they need.

Assume Microsoft is expecting just a third of people to take the offer. It's just too many people to want to move to a different division that needs more labor: It's basically entire divisions that they'd have to create from whole cloth.

Comment · 5 days ago
For most Microsoft employees, the maximum unemployment benefits in most states are a rounding error vs the buyout offer. Here in Missouri it's $320, maxed to 20 weeks. So for most local employees that might get this letter, It's less than a month of salary, and that without accounting for months of health benefits, which I bet the buyout includes.
Comment · 5 days ago
Interesting perspective. As someone who didn't even grow up in the US, I saw Sim City as a builder of relatively low density, hard zoning cities that had little to do with the high density I grew up in. The idea of commercial zones didn't even make sense to me, as in Spain, such thing doesn't exist. Need for traffic to get to the commercial zones made little sense.

Solar seems to be working just fine in Spain, a place where almost nobody lives in a stand alone house, or even a row house. You still put solar in the building, but then you have industrial solar in places wi5 little agricultural value, and wind turbines installed on top of hills. All of this could work just fine in any sim city I remember, as you are just dedicating space to power, which is fine.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton