Recent submissions

Comment · 2 months ago
> In the real world, it does feel likely that we’re going to hit some sort of a ceiling on the number of useful bugs, and probably we’ll hit it soon.

This doesn't resonate with me. I see companies adding more sloppily written features with AI. I see more bugs in the software I use, not less. While it's plausible that software is getting both buggier and more secure, I suspect those two move in the same direction not opposite.

My guess is that we're getting better at finding _existing_ security issues with AI (and thus fixing those issues), but simultaneously adding more insecure surface areas _at a faster rate_.

Comment · 2 years ago
Comment · 2 years ago
Comment · 2 years ago
Comment · 3 years ago
There's an implicit assumption that the organizers would cancel the race if conditions are unsafe. E.g., when I go on a rollercoaster, I assume engineers have calculated the safety better than I could ever evaluate
Comment · 4 years ago
Comment · 4 years ago
I see a lot of doubters, but the bet is still open. If you're so doubtful, go ahead and put your money where your mouth is!
Comment · 4 years ago
> Did you use a regex to verify the data looks like a uuid before putting it into the database?

Is that really a thing? I have used UUIDs as primary keys many times in my life, and never had a need to do such a thing. I am struggling to even think of a valid use case.

Comment · 4 years ago
Comment · 4 years ago
As Tyler Cowen always responds to headlines like this: "If it’s true, why isn’t the price of oil down?"

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton