Recent submissions

Comment · 6 months ago
I don’t get it. Did they use the MTA budget or something? If the train is better then just build the train. Certainly these guys aren’t stopping you.
Comment · 6 months ago
These massive green text attempts started becoming common recently and honestly they’re excruciatingly boring. Misses the entire value of the medium. Very “hello, fellow kids”.
Comment · 6 months ago
Indeed, it would seem that both positions are equally well-substantiated.
Comment · 6 months ago
This is a lot of content-free stuff but the reality is that if you’re hoping that customers will just write software to integrate with your SaaS you have to ask yourself why they wouldn’t also just write your SaaS. So either you go to them, they come to you, or you’re past some particular implementation hurdle. I think it’s better you go to them. Just reduces the barrier to entry and people will happily pay you for additional technology capacity to get a sufficiently complex thing onboarded.

So sending your implementation team out is “not just smart — it’s required” (to use everyone’s current favourite phrasing).

Comment · 6 months ago
So we know Claude’s mitigation. What is Ramp’s? Same warning dialog?

It’s funny that this technology only admits in-band signaling. Given that, any foreign content is risky. It’s actually quite interesting that the current technological ecosystem is built around a high trust situation: npm, pip, cargo all run foreign code in the developer context and communities have norms of downloading random people’s modules.

And so I suppose it’s no surprise that we use LLMs - another tech that is high-trust: since it has no out of band signaling ability.

But it seems like we’re very close to the end of the era where someone will use (in a sensitive system) arbitrary web content carrying the equivalent of merged code/data.

Comment · 6 months ago
I only use GitHub for unified login git access to a bunch of repos. These other “forges” (didn’t know that was the term - cool) are all almost certain to put Anubis in front and make a logged out user be unable to access the code. I get why, but it seems inevitable. I think Codeberg already does and for some reason it takes ages to complete the challenge on my phone.

Undoubtedly these various hosts will come under pressure from spammers and the like and they will react by placing extraordinary barriers around accessing the code.

That’s fine but it reminds me of the later stages of online forums, where it was impossible to browse most threads because you had to create an account and then build up community points until the screenshot of the kernel panic on the ZTE phone would be visible so you could see if it’s the same problem as yours.

GitHub was big and powerful enough to not need all of this but now we’re going back to the era of decentralization and I suppose with that come the pros and cons.

Comment · 6 months ago
You’re an adult??

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton