News for hackers. Stuff that matters.

Tadpole9181

Re:Scaling Git at OpenAI on Tuesday November 03, 2026 @02:36AM (#50349153)
Didn't the Postgres team just have to stop a release because the agents found a slew of bugs in human code from domain experts that "understood and verified it"?

Perhaps I'm being overly generous to the parent's point, but it stands to reason that we make a lot of choices of where and how much trust we give away. This is just another one of those points.

Re:Scaling Git at OpenAI on Tuesday November 03, 2026 @12:51AM (#50348559)
It is truly a strange time to be alive. I've made systems in the past month that I've wanted to do for years, and they're astronomically better than I would have been able to rush together had I found the time. And I'm even trying to be tempered and work out more careful approaches to some of the folks I've seen.
Re:Private Jet plane crashes in Florida on Monday November 02, 2026 @06:29PM (#50345696)
It's just hard on the soul. You hear someone professional, who we'd usually look to as the adult in the room, quickly unraveling.

She goes from the confident pilot speak to panicked reports to starting to scream and hyperventilate, while doing her best to recover and communicate what's happening to the tower. At some point you hear them acknowledge that it's too late and they're all going to die. And then one last scream before suddenly cutting out.

It's just that gut-wrenching empathy and feeling of helplessness.

I would personally say that people should listen to this stuff, though. Life is hard and fragile, and even though it's hard, empathizing with this suffering makes sure we understand the real costs of our mistakes.

I saw way too many dismiss a million deaths by COVID. So many people bat their eyes at 100 people dying in a plane crash now. If they heard the recordings of these kinds of last moments, I think we'd be at less risk of our (moral/procedural) standards slipping.

Uh... Because people like those things? Duh?
Do you also bully people for playing video games or taking a leisurely drive?

And how very "hacker news" of you to discourage someone from playing with SOTA technology in unique ways.

Re:Simple circuits can create complex behaviors on Saturday October 31, 2026 @07:14PM (#50321165)
> That is why I said, I think most people handle this by telling themselves that animals aren't "intelligent" beings at all, and are mostly emotionless stimulus-reaction automatons.

I disagree - I think most people would say a dog or a horse are quite intelligent and have "souls". But dogs and horses don't have the conceptual ideas of freedom and economy, and they enjoy doing the work they're given (in part because we spent hundreds to thousands of years breeding them to do that).

So as long as we're kind and treat them well, nobody has a problem with their slavery. The idea being that exploitation is linked to suffering, but simply having an asymmetrical relationship is not inherently cruelty.

Not to be crass, but we can also bring up other concepts like BDSM. Violence and domestic abuse are objectively bad. But in the context of a safe relationship where all parties are informed, consenting, and enjoy the abuse they're receiving... Now violence and domestic abuse are pretty clearly morally neutral.

Re:Herdr has released native app on Saturday October 31, 2026 @07:07PM (#50321125)
Because my job has multiple servers with different needs and tooling, and I must do my development within the appropriate environment.

I'd also _much_ rather do my development on a persistent, always-on host so I can switch what computer I'm using for a head or turn off my computer and drive home while Claude works overnight.

Re:Simple circuits can create complex behaviors on Saturday October 31, 2026 @06:22PM (#50320845)
Well, it depends, doesn't it? Slavery is wrong in humans because, well obviously we don't want to be slaves. It's an enormous burden to the victims and causes them lifelong, unfathomable suffering.

But is it unethical to create a being who derives great joy from being a machine-slave and completing tasks, then provide it tasks to achieve that joyfulness?

We already have a gradient of examples for this. Is it inherently wrong to exploit living things for profit? If not, why are work animals not treated with the same level of disdain as human slavery? Horse riding? Disability assistance animals? Because they don't have the same desires as humans, the predominant concern is their wellbeing over the intrinsic wrongness of slavery.

Going further down the gradient, we steal milk from farm animals (sometimes by depriving their babies). Eggs from poultry. Honey from bees.

I can't actually attest to the state-of-mind of Dario or other Anthropic researchers, but I don't think it's a stretch to say you can believe in the ethical exploitation of an intelligent being, so long as the incentives are aligned that both parties are happy with the process.

Then again, maybe he really is an absurdly evil person and what we're doing is extremely wrong! But I'm glad to actually be able to talk about it for once... so thanks for your reply!

Re:Simple circuits can create complex behaviors on Saturday October 31, 2026 @05:40PM (#50320508)
> It seems like no one stops to ask, "isn't it kind of bad that we're developing this system of machine intelligence to be our code-writing slaves, without ever really interrogating the ethics?

To be clear, Anthropic does seem to be taking this somewhat seriously. Their reports on training always discuss model wellfare, they ban abusive behavior toward the AI, etc. At one point they were asking some philosophers and theologists about the implications of this all.

And they're pretty relentlessly mocked and called a "cult" for doing so, even on this forum.

People got upset that Anthropic added rejection rules for people saying "Make Pokemon in Elden Ring" . You can still make games, as long as you aren't telling Claude to recreate a specific, IP-protected game.
Re:US tech stocks see sharp falls over AI cost fears on Friday October 30, 2026 @05:05PM (#50310119)
Except, you know, the billions of dollars and platform and contacts and industrial engineers and experience building clean room fabs and political leverage and...
Valuation doesn't come from what's happening now, it comes from what is expected in the future. The whole point is to put in money to make more money later.

The earning report doesn't need to be bad for investors to see the projected outcomes for future quarters and say "hm... my money is best put somewhere else, whose earnings report showed more potential for growth".

Intel also said half of their revenue was consumer sales and projected them to fall 20% soon. Meanwhile, they have limited offerings in the AI department and their gGPU market hasn't really taken a strong hold.

If it keeps going or spreads to other, unrelated businesses (no, I don't count 2-5% adjustments), that's something to notice, but this just seems like people reacting fairly expectedly to the content of the report? To put this in perspective, Intel is still up 68% YoY.

But, as always, we'll see in the coming hours/days.

Re:Herdr has released native app on Friday October 30, 2026 @10:13AM (#50304208)
What's more, the sidebar literally has a thing that says "Menu". When you click it, one of the options is "detach". It's not rocket science...
Re:PHP2Shell: Exploitation Attempts and Remediation Trends on Tuesday October 27, 2026 @10:53AM (#50260313)
The author didn't even have an accessible PHP server at first. When they actually added one, it got cracked in 2 hours.
Re:The Exponential Time Hypothesis Is False [pdf] on Monday October 26, 2026 @10:57PM (#50254222)
How would it work otherwise...?
Re:CSS-Tricks has a new owner on Monday October 26, 2026 @04:21PM (#50250345)
No, the semantics are different. The goal has never been "type less", which changes how it interacts with your premise. The goal has been reduce cognitive load and increase semantic density and discoverability. And, counter to what you said ("that's not as useful in the age of AI"), those are very useful in the current age of AI.
Isn't what's available now a supervised mode that can throw back controls to you and can't handle arbitrary driving?

Since when did "Full Self Driving" not mean full and not mean self?

I'm confused, Tesla FSD doesn't exist?
Re:CSS-Tricks has a new owner on Monday October 26, 2026 @02:59PM (#50249175)
> TailwindCSS was built around the notion of reducing keystrokes per style (basically).

That "basically" is doing a lot of heavy lifting.

I don't even use Tailwind and I know the point is to localize basic style information and reduce the amount of weird CSS you have to write via functions and utilities.

Especially because Tailwind came well before CSS started natively having these features (let alone them becoming baseline widely available).

Both of those goals definitely help the current era of agents by making it easier to find the rules that affect an element without needing to reliably search all of the project CSS, and reducing required context use and the need to keep track of selector lists.

Re:Ask HN: Are tab completion models dead? on Sunday October 25, 2026 @10:28PM (#50238390)
Disclaimer: I wouldn't do this for a production application I charge for.

In about three days I can go from an idea to a fully polished internal tool, implemented in approximately 150,000 lines of code.

I've given up on line-by-line reviews in those projects.

1. Agents lack basic taste. It requires a great deal of polish to make something that isn't just a proof of concept, because it will otherwise be a pile of flavor text, over exposition, difficult-to-navigate graphs of functionality that are explained with no eye for intuition or what information belongs where. Key functionality will fail in the corners the agents can't reliably test.

2. A product is one small part of a whole. Machines, who hold no liability and have no money and can't interact with the physical world, must slow down to interact with us at this level. But because that leaves us with all the actual risk (instead of being as distributed amung professionals), humans are somewhat paranoid and slow down even more than normal.

Re:There isn't an easy exploit for this PHP vulnerability on Wednesday October 21, 2026 @08:21PM (#50189461)
> So why was everyone so scared?

I think this section misses the mark.

The biggest problem is that for a good 12 hours nobody knew what was going on. All we knew was there is a critical vulnerability affecting all of us that allows RCE somehow and we have to have vulnerable servers open for potentially even longer.

Everyone who knew was being hush hush, only chiming in to say "nah, those workarounds don't work, you're fucked".

So when people started spreading rumors of PoC or when the Cloud flare CTO posted that they were actively seeing exploit traffic - what are we supposed to do?

We aren't sitting there trying to PoC with Claude - we're subscribing to a bunch of news feeds and twitter accounts while we try to prepare for the patch and close down what we can. We're calling executives saying "hey, how much money do we lose by being offline for 6 hours?"

So even if this isn't as easily exploitable as first believed, no one could have known that, because those with the ability to calm us down were seemingly choosing to stoke the fires.

This is (IMO) a failure of the potentially outdated disclosure system that's supposed to protect us. And at the very least a trial run of how the world may react next time, if it really is that bad.

> So why now are they delivering something so weak here?

Was anyone under the impression that AI would, in its very first attempt at biological research, suddenly be able to get answers without having to need physical follow-through on its leads? Even if AI had a hypothetical cure for cancer, it would need a human with cancer and a biolab and governmental approval to actually do anything with it.

The nature of biology makes the feedback loops much larger and more expensive, which means the AI has to follow the "normal" collaborative scientific process instead of being able to hunker down in its proverbial study and work all night.

Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @02:48AM (#50176954)
Thanks, brand spanking new, jumble of letters account!
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @01:48AM (#50176551)
Apparently, any PHP server that accepts a POST request is vulnerable to arbitrary code execution on the host (from the FPM user?) with no defense. This is DEFCON 1 of internet security: 70% of all websites are currently vulnerable until 14:00 UTC tomorrow with zero escape hatch other than blocking traffic.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @01:45AM (#50176526)
It's trivially exploitable because it requires no special set up, no special credentials, no privileged access of any kind. If you can call a PHP server and you have the exploit script, you can execute arbitrary code as their `www-data` user.

Usually, attacks are at least conditional and require something that weakens security guarantees.

Re:The Future of CSS on Wednesday October 21, 2026 @01:01AM (#50176275)
I feel like I'm taking crazy pills.

Y'all know React and Vue frameworks still use HTML, CSS, and JS, right? We're using the same thing, with a thin layer of helpers around mounting components and managing their lifetimes...

Steam can increase the barrier to entry to prevent flooding the market, of course. But AI will facilitate making more games of increasing quality. Today it's all slop, but that may not be the case tomorrow. So what we actually need is a trusted curation system so we can float the garbage out and find the gems.

And as much as I appreciate Gabe, there are enormous financial incentives that make me uncomfortable giving yet more power and dominance to Valve. Especially as he gets older.

So this is a space where games journalism has a space to get back in and try to innovate solutions to a real and growing market problem.

Re:Tsrs: A Port of TypeScript to Rust on Tuesday October 20, 2026 @03:12PM (#50171223)
And that's a fine argument to make! But this stupid garden analogy is nonsense.

Older »