Recent submissions

Comment · 3 months ago
Comment · 3 months ago
this is definitely a backdoor, not necessarily that they use it to infiltrate users but definitely they put them at risk.

reminds me of a bug I found in some tplink router it compared passwords of 3 different users but that table was empty so basically 15 NULL bytes would log you in as admin lol

Comment · 3 months ago
what if it contained a zero day for tesseract and the script you thought you got is just a throwaway
Comment · 4 months ago
those spikes in march and june? war with iran. interesting...
Comment · 4 months ago
my experience with ffmpeg scene detection is that it's flaky. it works, sometimes, but not reliable by any means
Comment · 4 months ago
would be nice to be able to simply get the list instead of having an ominous heatmap
Comment · 4 months ago
this was absolutely fascinating to read
Comment · 4 months ago
that's sort of what skills are.

create a skill that transformed the json then "/<skill> <prompt>"

Comment · 4 months ago
code is like assembly now.

in the olden days (pre-LLMs) we would write high-level code.

the entire layer was high-level code and rarely would we ever need to peak into the assembly:

writing, debugging, architecting, reviewing, testing - all were done in the high-level language layer.

---

welcome to present day:

since we don't write code - we write intents, we also shouldn't review code either - we should review intents.

I don't review my code anymore. I ask the agent to generate markdown docs, graphviz diagrams, changelogs, audit reports, etc. I only review that.

I also ask it to write test and evaluate by whether the tests passed or not. I don't need to peak into the tests code - I can also ask plain english, pseudocode, control flow graph, whatever it is I want.

I can ask it to find errors or missing tests and improve that too!

code is like assembly now.

rare are the cases you would need to peak into that level.

Comment · 4 months ago
this is amazing exactly what I always wanted

how did this even get approved by app store? that's actually surprising

Comment · 4 months ago
interesting attack vector

shame it's not a real device so the surface is limited to bash only

I wonder what software might be vulnerable to this attack surface

Comment · 4 months ago
rick rubin says otherwise
Comment · 4 months ago
of course
Comment · 4 months ago
classic HN
Comment · 4 months ago
I am the founder and ceo

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton