News for hackers. Stuff that matters.

jon-wood

Re:Resisting Cognitive Surrender on Tuesday November 03, 2026 @09:16AM (#50352280)
Somewhat off topic now, but Nolan is fairly famous for being intricately involved with every aspect of the films he directs. He's constantly behind a camera checking out what shots are going to look like, pushing the limits of where you can put an IMAX camera, and coordinating with set builders to do ridiculous stuff like building a reproduction harbour jetty.
Re:Resisting Cognitive Surrender on Tuesday November 03, 2026 @09:13AM (#50352248)
> It seems to work well, mainly hurts when the problems are invisible, so security, backups, breaking migrations, perf, maintenance over time (language / runtime updates, dep updates, server updates etc). All the stuff that hurts if you have never been responsible for the uptime of something before. Not knowing that software is never "done". But junior devs trip on those exact same things.

If we continue from your "water comes from the tap" example this situation feels like someone who has no experience of plumbing deciding they're going to replace their bathroom without bothering to find out how any of it works. They'll possibly end up with a bathroom that superficially works but they're also liable to find problems down the line with leaks, things not draining properly, or water pressure issues.

Some of the people writing software purely via LLMs are even turning this into a business, which I guess would be analogous to deciding you're going to run sewage treatment for a small city without understanding anything about how that works. It'll mainly hurt when the problems are invisible, so food poisoning, or inlets backing up and overflowing into a nearby river.

Re:Show HN: Bema: Work messaging built for humans on Tuesday November 03, 2026 @08:51AM (#50351969)
While I applaud the sentiment here how many people work for an organisation that would be ok giving full Slack access to something like this, especially given the complete lack of information on how that data is being processed beyond an incredibly vague mention of Cloudflare in the privacy policy?
Re:OccupySaaS on Monday November 02, 2026 @10:15AM (#50337932)
Feels to me that things would be much healthier if SaaS products did look more like old style one off software products. Build something that does the job, then stop rather than endlessly throwing more bells and whistles in, acquiring all your competitors, and slowly diluting software people love into a mess of half baked features that mostly exist so there's something to mention in the next quarterly earnings call.
Both Anthem and Veilguard are examples of exactly what the article is talking about - Bioware, a studio famous for scripted single player RPGs where the focus is on story, being pushed by EA into making live service games for an audience which have "skip dialogue" as a reflex reaction to anything that isn't more shooting or optimising DPS.
Re:The Federated Code Forge on Friday October 30, 2026 @01:09PM (#50306906)
Not currently, Tangled's data model is entirely built around Atproto, which at least at the moment assumes everything posted is public. There's work in progress at the moment to layer access controlled data on top of that which I think Tangled could use with time though.
As an aside that Gist is pure Claudeish, endless paragraphs of barely relevant waffle about what is at its core a fairly simple patch, which manages to make it all harder to understand by burying the point in needless timelines, version tables, and hallucinated speculation about why things are as they are.
They don't need to, a Pineapple (or anything else that can run a wireless access point, you could do this with a laptop) just needs to advertise the expected SSID and do so with a stronger signal than the official ones for people's devices to connect to it instead of the actual network.
Re:Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees on Wednesday October 28, 2026 @09:06AM (#50272940)
This is the way forward these days. In my opinion the situations in which a Raspberry Pi is the right answer are vanishingly small these days - for interacting with physical things like relays or LEDs use an ESP or similar, run Micropython on it if you're not into writing C and the like, or ESPHome if you want something dead simple.

If you need an actual computer there are so many options along those lines now, and almost all of them are better than a Raspberry Pi in various aspects. Finally, if you just want to put some stuff on a screen then most TVs already have an operating system and a web browser on them, target that and you can get rid of the computer dangling off the back entirely.

Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @08:18AM (#50272414)
This is frankly a bit nonsensical. "In a workplace setting, connecting to your residential IP will raise suspicions or alarms." - so will connecting to literally any unexpected VPN endpoint if the network is halfway competently monitored.

Just because your VPN endpoint is on a VPS somewhere rather than a computer on your home network doesn't make it any more secure, and the scare mongering here that somehow a home router will drastically mess up a function as simple as forwarding traffic coming in on a port to another machine is weird... if you don't trust it to do that then I'd get rid of the thing because that's its entire job.

Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @08:15AM (#50272381)
"Should" and "shouldn't" are dependent on context. In this case, that somewhat depends on what the router you're using is, how much you trust it, and your ISP's configuration. Opening a port isn't an inherently insecure thing, it's a choice that you make while being aware of the tradeoffs between that port being exposed to the internet at large and wanting a given service to be available.
Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @08:08AM (#50272305)
Its not always the case but many of MITM-ing corporate firewalls are going to immediately drop any TLS connection they can't decrypt on the basis they're coming from an unauthorised device.
Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @08:05AM (#50272266)
I'd be fascinated to see numbers on whether your assumptions here are correct in terms of the ratio between hobbyists using Tailscale on their home network and actual paying customers using it for more serious purposes. Does that change if you look at user counts rather than networks?

My gut feel is that you're correct but presumably they do have a decent number of proper corporate customers or none of these features would exist in the first place.

Re:Claude Duet on Thursday October 22, 2026 @05:27AM (#50193148)
It really doesn't. It just requires an API endpoint for signing up to the waitlist and a skill injected into the session explaining how to use it.
Re:Tsrs: A Port of TypeScript to Rust on Wednesday October 21, 2026 @04:54AM (#50177823)
Its called Tauri: https://tauri.app/
Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @11:47AM (#50089546)
That person is fucked when they lose their phone anyway, because they're also the sort of person who has never backed up all their photos/contacts/iCloud files anywhere that doesn't require iCloud auth to get at. At some point we have to either properly educate people on the fact that they need to have a recovery path, or we have to accept that they're going to need to rebuild their entire digital life every 2-3 years.

This is your cue to go get your parents to add you as recovery contacts for their Apple account now, rather than finding out that exists when they lose their phone.

Re:New Apple TV 4K on Tuesday October 13, 2026 @11:36AM (#50073391)
Yeah, the hardware is great. I honestly couldn't tell you much about the app because I exclusively use the speaker via HDMI-ARC and AirPlay, both of which work really well.
Re:New Apple TV 4K on Tuesday October 13, 2026 @11:10AM (#50072947)
The person in the other thread is incorrect, an Apple TV connected to HomePods can be configured to advertise HDMI Audio Return Channel so that anything your TV is displaying has its audio routed through it.

Having said that I eventually replaced my pair of HomePod Minis with a Sonos soundbar because I wanted something with a bit more oomph to it, although I'd maybe have considered getting a pair of the big HomePods and using the Minis as rear speakers had this been available at the time.

Re:Apple HomeView on Tuesday October 13, 2026 @09:40AM (#50071605)
I wouldn't watch a movie in my kitchen but I regularly watch YouTube or a TV show on an iPad while cooking or cleaning.
Re:Apple HomeView on Tuesday October 13, 2026 @09:39AM (#50071590)
I was so ready to buy one of these things on day one to replace the iPad that awkwardly sits on the side in my kitchen and they completely missed that relatively simple target. All I really want is a device that will accept AirPlay video in my kitchen with a decent speaker or two.
Re:Apple HomeView on Tuesday October 13, 2026 @09:35AM (#50071522)
And yet from what I can see on the product page this thing doesn't have video apps on it, and doesn't work as an Airplay video target, so you still end up with a laptop/iPad on the kitchen counter.
This is one of those cases where saying "Europe should..." is valid, because they do have the concept of European law which if passed has to become law in all member states as well.
Re:Bevy 0.20 on Friday October 09, 2026 @06:27AM (#50018514)
The answer to all forms of "How is [X] not intuitive?" is that the person finding it unintuitive doesn't have other points of reference that make it intuitive. Lots of people have spent their programming life working with languages that don't have the concept of generics, or maybe have even worked on things where they were using generics but didn't know that's what they were doing.

Very few things are truly intuitive, they just happen to be similar to other things you've done and so you've got a step up on understanding them. Really good software engineers tend to be constantly playing with things outside their usual domain and so have broader range of concepts they can reach for when the time comes.

Re:Accountability mechanisms can be joyful on Tuesday October 06, 2026 @10:02AM (#49978664)
I also thought I naturally didn't enjoy exercise and had resigned myself to at best forcing myself to go to the gym and grind out a session on a rowing machine or something. I then, in one of the best impulse decisions I've ever made, decided I'd go check out the climbing gym nearby and it turns out I just hadn't found the exercise that clicked for me.

On topic for the wider thread of gamifying doing things that are good for you, bouldering in particular works perfectly with my brain. Every few weeks there's a whole set of new things to try and climb to the top of, and its often as much about working out a sequence of moves that works for as it is about brute strength.

I've never really been able to make exercise stick for an extended period but this time round I'm on about 18 months of consistently making it to the gym twice a week or so and pulling on plastic holds for a while. Its (mostly, unless I have a bad session) fun while doing it, the combination of exercise and problem solving means my system is flooded with endorphins and dopamine afterwards, and I'm fitter than I've ever been.

Re:Agents don't need memory. They need documentation on Sunday October 04, 2026 @08:25AM (#49953316)
I have memory turned off for everything, context management is the fundamental technique in working with LLMs, and I absolutely do not want random additional things being added to that context without my knowledge because it results in nonsense like using Claude to do work on the industrial IoT SaaS product I work on professionally and being told I could just use the Home Assistant instance which manages my flat to deal with that problem instead.
Re:Agents don't need memory. They need documentation on Sunday October 04, 2026 @08:19AM (#49953270)
I’ve been trying to nudge agents (both Claude and GPT) into a red/green/refactor TDD loop and I’m increasingly unconvinced it’s worthwhile. TDD works for humans because it forces us into a pattern of doing the simplest thing that could work, then thinking about how to refactor that. An LLM can be prompted to do that without the skeleton of a failing test, and I plan to experiment with other methods of pushing them towards the same ends.
Re:Agents don't need memory. They need documentation on Sunday October 04, 2026 @08:11AM (#49953217)
Hooks should (in my opinion) be deterministic. As an example I’ve also noticed Claude writing Python scripts to extract fields from JSON when jq is available to it. They almost always contain the same patterns, and having seen this I’m going to write a hook which triggers on those and fails the turn telling it to use jq instead.
Re:Cloudflare Ohttp Gateway on Saturday October 03, 2026 @04:24AM (#49942362)
It’s entirely possible if the application developers have made the choice to intentionally avoid tracking and tying personal data to user identity, which is exactly who this product is aimed at.
Re:Cloudflare Ohttp Gateway on Saturday October 03, 2026 @04:23AM (#49942352)
iCloud Private Relay (available on every macOS and iOS device in recent years) uses OHTTP to obscure your identity from sites you visit.
Re:New PlayStation 5 Console Jailbreak Released on Wednesday September 30, 2026 @02:01PM (#49912265)
Most people are not competition ranked players, they’re people who like to play a few hours of a game now and again.

Older »