News for hackers. Stuff that matters.

gcoakes

Re:Building an AI-native engineering org on Friday October 30, 2026 @09:34PM (#50312374)
Heh, you should look at the reply I left for your sibling comment. I think it is just a regression to the mean of all open source software upon which the models were trained. Sometimes the mean is an improvement.

Hell, if the Dunning–Kruger effect is to be believed, it would be bold me to assume I am capable of good human code. Maybe the average is the best I'll ever get.

Re:Building an AI-native engineering org on Friday October 30, 2026 @09:25PM (#50312329)
> LLM being used to make code more simple and elegant

Simple and elegant generally doesn't come from the LLM. It comes from me saying no to the LLM. I've discarded many branches that didn't feel like they were going the right way. Hell, I aggressively do that with my own code also. I rarely commit the first thing that works.

> where are the open source examples?

My general impression of open source is that it is, in part, a market driven by good software engineering. There's certainly below average code, but that tends to get mocked out of existence before it grows too much. Proprietary code that doesn't have a strong forcing function used to be able to hide poor engineering principles.

I think AI generated code is a regression to the mean, and the mean can be an improvement sometimes. I inherited this project. It was not originally written with AI. A lot of hard work and good engineering went into the hardware/firmware. The IoT software connecting it to our intranet, less so. Some examples that I'm fixing/fixed: ignoring HTTPS certificates, RCE by design, in-place file updating JSON files, a hand-rolled (but ineffective) fair mutex, busy waiting for a device to appear, and worst of all, no tests. None of these are hard to avoid, and even the small AI models would have come up with a better implementation.

This doesn't seem unique to my project either. I think a lot of software is just silently getting closer to the average of all open source code upon which the models were trained. I don't think I want things like SQLite to get closer to the average.

> Fully leaning into LLM doing as much of the coding and understanding as can be handed off to them seems insane to me, I don't mean this to offend though.

I think you might be reading too much into what I said. When I say "fully lean into", it's probably less than you're thinking of. I still feel that I understand what was written and can stake my reputation/career on it.

Re:Building an AI-native engineering org on Friday October 30, 2026 @06:49PM (#50311111)
I drastically improved the reliability of an internal IoT device so it can tolerate all kinds of abuse (abrupt power loss during update, unreliable SD card, bootstrapping over network when the SD card is missing/damaged, fail-safe updates, recovery in a network isolated environment). This is the first release that I really leaned into AI, having been pretty skeptical before.

I think AI has been a net positive and has been used responsibly at my work. It can be used to make existing products better and more secure. You just won't naturally hear about that. There's some challenges like emerging social mores but overall good.

Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @08:12AM (#50302853)
I think that's just the number Cursor has telemetry on. I think there's multiple distribution locations.
Re:Jailbreaking the Switch 2 on Thursday October 22, 2026 @08:12AM (#50194252)
I'm working on a IoT device at work and have been the "hands in the lab" for my agent this week. It's been a really weird experience. Making changes to the update/recovery process, so I have to validate several permutations of fault injection (i.e.: abrupt power loss during update step X while on starting version Y).

I would love to give it unattended "hands". I just thought it was more time efficient to do it manually rather than spend days trying to figure out how to automate SD card pull/plug. X and Y are relatively small, and I expect this validation to be too costly to do at a regular cadence in CI. I can trivially use a MCCI USB-C switch for the power though.

Tips would be appreciated if anyone here has thoughts.

Re:Too AI; Didn't Read on Friday September 25, 2026 @06:09PM (#49850582)
I'm struggling to get people to give me a good summary line. Even if I just ignore the commit message body, I still want a meaningful summary line so git blame will be accurate.

I joined this team not long ago, and I was trying to add a new feature to an API server. I saw a pretty obvious UnboundaLocalError that would occur given the right parameters. I hovered over the line and saw, "fix login". I then looked at the git log for that file and found three commits with the same text. No explanation of how login was broken, how it was fixed, and it introduced a bug. Some people care less and have less diligence than the AI agents.

I have a standard that I hold myself to which falls somewhere in the middle w.r.t. AI usage, but for the other people I work with, I want them to maximize their AI usage.

Re:Too AI; Didn't Read on Friday September 25, 2026 @05:39PM (#49850336)
I used to feel this way, but now, I want more people to send me AI slop because I'm tired of human slop. I am tired of parsing through two word git commits where the author didn't care enough to tell Claude to write the commit message for them. Sure, I would prefer to read your personal thoughts on the change, but if the choice is between no meaningful information and an agent's mostly coherent if a bit verbose description, I'll take the AI.

The same goes for AI generated code. I've seen some code that I'm pretty sure would have been better quality if my 90 year old grandma was steering Claude. The standard that I want to hold myself is derived from the open source world like SQLite. Sadly, some people just want to take the minimal path to ticket completion without regard for future maintenance or pride in their work. At least AI is token predicting off the code bases that I admire.

I think it is supposed to be stacks in the general sense of the data structure, not the literal `sp` register. I imagine they could be arbitrarily sized up to physical limits if you do some mmap magic. I'm still a bit fuzzy about how you could make useful programs with that, but it seems interesting.
I have a RX 9070 also. I run llama-swap with a fill-in-middle 7B model, local 9B model, and it proxies up to OpenRouter for the bigger stuff. I think that's where the sweet spot is right now.

I've spent $2 in the last 2 weeks on OpenRouter. I've been trying to only use the medium sized models that I would otherwise be able to run on a nice local setup. That nice local setup would cost ~$4k. I don't know what the operating cost would be, but I would be concerned that my home electricity would cost more than at a datacenter. It just doesn't make sense right now except for privacy reasons.

I'm probably going to hoarde open weights models in the ~31B range until memory costs fall in a few years. Then, I'll buy some hardware to run at home just so I feel more sovereign over my stack regardless the cost/token speed.

Some friendly tips from post-silicon validation:

sudo systemctl reboot --firmware

shutdown /r /t 0 /fw

These reboot directly into BIOS.

For Windows CMD+R menu, run it by pressing CTRL+SHIFT+Enter (elevates to admin). You may have to do it twice for some unknown reasons after reinstalling the OS.

Re:Keystroke timing obfuscation added to SSH(1) on Tuesday August 29, 2023 @10:34AM (#37308558)
What non-malicious use case is there for this?
Re:$Home, Not So Sweet $Home on Thursday August 17, 2023 @03:59AM (#37158560)
> The only sane way to manage "your config files" is to put them in a git managed folder and use a symlink farm program.

Another option is to ignore all files and selectively allow the ones you want to track. That's what I'm doing now.

> Files describing how to do IPC with current processes. They belong to ~/.local/state not .config.

XDG_RUNTIME_DIR (i.e.: /run/user/1000)

Are those real numbers? Also, do you mean additive or multiplicative (i.e.: 20 + 20 + 15 vs. 20 * 20 * 15).
Re:Harvard professor Francesca Gino was accused of faking data on Wednesday August 02, 2023 @10:32AM (#36971446)
Is there a market for publishing the retrospective of the process which resulted in a "late found flaw"? I would expect uninteresting data would still be published if only to prevent someone from going down that rabbit hole in the future.
Re:Nim v2.0 Released on Tuesday August 01, 2023 @11:42AM (#36957517)
> Zig also doesn't have dynamic dispatch

It doesn't have it as a language feature, but it does have VTables just like C would. The `std.mem.Allocator` is an example of this.

Re:Nim v2.0 Released on Tuesday August 01, 2023 @11:35AM (#36957393)
I think they're discussing the lifetime of that heap data, not whether the data is heap allocated.
I don't understand. Isn't this already the case in America with Section 230? (The original post is about the Netherlands, so this is now tangenting.) It's just that no one actually acts as a platform.

I'll daydream with you except mine is different. The optimal social media in my view is one tied to your real identity. Moderation would only be applied under court order by the relevant jurisdiction for the view of the content within that jurisdiction. i.e.:

1) American posts content critical of Indian officials. That content is restricted by order of an Indian court and no such order is additionally given by an American court. It would be hidden from view within India but not from within America. The inverse would be true.

2) Indian posts content critical of Indian officials. That content is restricted by order of an Indian court. America (or any other nation) has no duty to protect that speech and thus no claim over it. That content is censored everywhere.

Additionally, everyone would have client-side filters which may be published. Emphasis on "published" because the publisher would be accountable for their words just as much as a newspaper within their jurisdiction. Though they wouldn't need to say much (i.e.: list of people I [dis]like). Unique identity and nationality are the only ones I can think of right now. More complex examples:

1) An American publishes a list of politicians who have made inflammatory public statements. They have evidence of this for each person on the list and make no additional assertions about their behavior. People not interested in such content could subscribe to the filter. (I guess people interested in chaos could view the inverse.) No court is willing to censor this list because their statements are protected speech.

2) An American publishes a list of men who have committed sexual crimes (such as in the original post). They assert it as fact not alleged crimes. They include someone who has not been proven in a court of law to have committed that crime. They can be sued for libel and possibly forced to remove the person from the list or reword the list description.

Anonymity between the user and the social media service wouldn't exist, but it might between users. The service could be mandated by the jurisdiction to unmask or otherwise ensure the accused does not fall within the jurisdiction.

There's a dead comment sibling to this one talking about how group admins can see through the anominity. I don't understand why it is dead. It wasn't even rudely stated. Is it just flat wrong, or did it cross some unknown social boundary by pointing out a fact? Was it edited posthumously?

Edit: And, when I refresh it's not dead... I don't understand this system apparently.

Re:Chicago95 – Windows 95 Theme for Linux on Sunday July 30, 2023 @10:39AM (#36931584)
A quirk in my config that I haven't bothered to fix makes it so my formatter runs post write. I've unfortunately picked up the habit of <esc>:w<cr>:w<cr> in rapid succession.
Re:US Army Field Manual on Leadership (1990) [pdf] on Saturday July 29, 2023 @04:39PM (#36924312)
> Having bad leaders in an authoritarian system (there are many in the military) effectively amplifies the problem they create which is likely where this bias comes into play.

Additionally, good leaders in an authoritarian system can be more effective. It's just that no one wants to make the gamble for society at large.

It's more or less necessary for grunts where ultimately someone will be mandating another endangers themselves. I don't think modern society has enough bloodthirsty people to field a military completely composed of willing participants. We do have enough that think they're bloodthirsty to field our "voluntary" forces.

I used to work on datacenter NVMe products. I wrote the tests which validated them (mostly functional not performance). I left that company before things got hot with fabrics, but I really want to see that stuff succeed. It looked really cool.
Re:Austral Programming Language on Thursday July 27, 2023 @11:08PM (#36902743)
Is no one going to talk about their capabilities system? That shit looks cool. A compile time permissions system for which resources can be used. I wonder how fool proof that can be made. Are there escape hatches in the form of arbitrary assembly/linking? Could a leftpad module security issue be deterred with this?
Re:When did people stop being drunk all the time? on Wednesday July 26, 2023 @02:20AM (#36873744)
I usually do. I have a 2 liter water bottle that I fill up at least twice a day. Though ironically with the heat this summer, I've been exercising and drinking less.
Looks at dmesg... "Heh, how is this thing still running?"
Wasn't there active attempts to hide the extent of the issue with Chernobyl which significantly worsened the damage? If so, that seems like saying there were cascading human errors in a murder-suicide. You're technically right on some level, but I wouldn't so much call that human error.
I, for one, quite enjoyed the novelization of it. Especially the part about the space-irony continuum. My sleeping wife did not appreciate being woken up by laughter though.
I'm fascinated by the woman who seems to be pacing back and forth rather than do anything productive to help people or get to safety. I wonder if I would have the clarity of mind in that moment or if I would melt down also. It's moments like this that make me wish I had followed some of my early career options and became an EMT or similar. Then, I would know how I would actually react rather than just being an armchair commentator.
Re:Small Joys with Odin on Friday July 21, 2023 @10:17PM (#36822521)
I can't imagine someone named their language "of", "programming", or "in". So, I guess 3. Joy and Odin are obvious since they have shown up here recently.

Totally tangential, but am I the only one that was taught to put punctuation inside of quotes and now despises that rule?

Good read. Thank you.

This just worsens my fear of changing "unnecessary" code when I don't know the original motivation for it.

Re:After 30 Years, Linux Finally Hits 3% Market Share on Tuesday July 11, 2023 @02:15AM (#36677033)
> 100% OSS

Tell that to your BIOS or the firmware that runs on your WLAN or NVMe. Hell, tell that to the CPU itself[^1].

[^1]: https://en.m.wikipedia.org/wiki/Intel_Management_Engine

Older »