News for hackers. Stuff that matters.

kstenerud

Re:My Favourite Laptop on Monday November 02, 2026 @12:43PM (#50340549)
My "desktop" machine is actually an old T450 I bought used over a decade ago, running Linux Mint (Mate).

Weak processor, 16gb ram, but good enough for browsing and running daily tasks, and it's simple enough to connect to more powerful machines when the need arises. And the docking station has HDMI and displayport. Hardware H.264 codec, and also HEVC and VP9, but alas only with the windows driver.

My big rig desktop is now in the basement, sleeping until I need to run LLMs or diffusion or a heavy compile. I also sometimes use it for Steam gaming, connecting to it via moonlight (which works surprisingly well, even over WIFI).

Actually, Japan is one of those interesting cultures that traditionally inverts permission. That's slowly going away now in many areas as they adopt a more western approach, but it's part of their culture's origins.
There's a difference between not giving way to a robot vs spending 10-15 minutes actively blocking it.

Yes, we're going to quickly come to a head on the issue of robots on sidewalks, much like we have with e-scooters, or Google's ill-fated bikes.

The robots open a new possibility on an existing system (sidewalks), which is going to lead to problems from both sides until the legislature comes up with new rules. This is how free and democratic societies work.

I didn't take it quite so literally. It's more about taking a chance to be the person you want to be.

Q put it best:

"This is the man you are today. And you should be happy! You have a real heart beating in your chest, and you get to live out the rest of your life in safety: running tests, making analyses, and carrying reports to your superiors."

I think the most memorable of the Picard-focused TNG stories for me was "Tapestry". It really hammered home how much of one's potential is lost when one never takes risks.
Re:Patrick Stewart has died on Thursday October 29, 2026 @05:24PM (#50296265)
I actually found DS9 to be the best of all of them. Aside from the terrible Dr Bashir character, they felt believable, and like any real environment had personality clashes, personal issues, baggage, and of course interpersonal conflicts.

The difference was that rather than turn it into soap opera porn, the characters actually tried to behave professionally (most of the time).

Re:We Won't "Just Hang Out" on Thursday October 29, 2026 @04:08AM (#50285846)
> Work, obviously, is pointless in a world of cheap superhuman intelligence.

Really? So doing things like learning to play an instrument or mastering chess are pointless?

> University (really all education beyond teaching people to speak) will be pointless because there’s no work to do and because growing your human capital doesn’t change your life outcomes: you get the same UBI whether you’re illiterate or a PhD.

Why must a university education be only a career generator? What about a well-rounded education, with a specialization in the things that interest you?

> If Claude Code has existed when I was starting out, nobody would have cared about Austral or my other open-source projects

Claude code is here, and yet I'm still writing open source code that people appreciate.

> As a teenager I tried to install Linux, ran into all kinds of problems, and went on the IRC chatrooms to get help. And in the process I made friends. Today, I would just ask Claude. AI disintermediates everyone, so that we no longer need each other.

Your friends don't need to all be techies. There are many other ways to make friends.

> What even is the point of cities in a world without work?

Community? Actually physically going outside and meeting people?

> The BATNA to hanging out keeps getting better, cheaper, and more convenient. When people’s sensorium becomes an infinite firehose of AI-generated superstimulus, why would they hang out with anyone?

Human connection? Experiencing things in the world together? Physical contact?

I haven't noticed any difference. In fact, I just set it on a laundry list of 12 items to sort out overnight. It took 10% of my weekly quota to do it, and it probably would have only taken half the tokens if I'd been monitoring it. But it did work while I slept, so I'm not too torn up about it.

There were a few small issues with its work (it's not the greatest at getting layouts right, and one of the features it implemented feels clunky and will need tuning), but the architectural refactors it did worked perfectly and I'm happy with the performance improvements.

I haven't yet checked out the research tasks it did, but usually it does a decent job. I could have just asked it to research and implement, but I find it best to manually verify its conclusions first.

I liked my prof's approach to exams:

"You may bring one 8.5x11 double-sided cheat sheet into the exam. You may write anything you want on it. And I promise you that if you prepare such a sheet, you'll never even look at it during the exam."

And he was right.

Re:The Importance of Limitations for Creativity and Learning on Sunday October 25, 2026 @09:39AM (#50231468)
"I think Scratch is so featureful that it is intimidating to newcomers. The paradox of having so many toys is that it’s hard to know which one to play with."

I'm the exact opposite. I want the choices and possibilities so that I can run with them. When the space is limited, it can still be fun and interesting, but only until you've plumbed the depths and everything you do becomes derivative, repetitive, and boring.

Growing up, my favorite toy was a huge bucket filled with random lego pieces. Some were basic bricks, some were from the technical set, some were from themed sets (cars, space ships, etc). I'd spend hours coming up with new designs, the original box designs long forgotten.

Jellyfin can only be used from remote if you can expose its ports somehow. Lots of routers block that, or your ISP is set up such that you need NAT tricks, and have to use STUN and TURN and such to work around it. Jellyfin doesn't handle any of that. Tailscale helps here, but then if you want family members to use it, you have to set them up on tailscale as well. Or you set up a service on a VPS.

I wrote this because I'm unhappy with the offerings out there, including Emby, Plex, and Jellyfin. Also too many bugs that have been sitting for years with no solution. For Jellyfin in particular:

- SyncPlay is buggy, doesn't support voice, and seems to be unmaintained now.

- Way too many CVEs, mostly FFmpeg injections (CVE-2026-35033, CVE-2026-35032, CVE-2026-48793, CVE-2025-31499).

- The session key leaking in URLs.

- Upgrades breaking the database.

- Needless transcodes and wrong "can play this" guesses.

- Subtitles that load late or drift after resuming.

What's wrong with the name?

Differences from Plex:

- Watching your own films away from home isn't paywalled, and never will be.

- Hardware encoding is free, and always will be.

- No cloud account required unless you want my convenient discovery service.

- If you don't want to use a cloud account at all, you can set up your own discovery server on your own VPS for watching away from home even through routers and shit (also free).

- No ads, no storefront, no telemetry.

- Watch Together with voice. Multiple people can watch a synced video, and talk to each other (I've tested this with me in Germany and the other person in Australia, and it worked beautifully).

- Hardened against corrupt video files and issues like NFS failures (getting stuck forever in a syscall). Everything vulnerable is separated and isolated.

- Open source. The server is AGPL and the web clients are MPL.

- Your files are left alone. Media is read-only by default. The server reads the .nfo metadata files you already have, from Kodi for example.

What's not there yet:

- Native apps. I'm only doing a web client for the time being until all the features are in place. It's pretty fast, though.

- Music. This comes later.

What's wrong with the name?
Re:Every AI model has the same "controversial" take on humans on Thursday October 22, 2026 @01:18PM (#50198297)
They're not wrong. Humans have many ways to display loyalty, and belief is one of those ways. This is also why facts can't change these kinds of beliefs (and in fact usually backfire https://en.wikipedia.org/wiki/Belief_perseverance).

Our evolutionary heritage is that shared belief and social unity (even when it's wrong) trumps independent thinking for group survival in a hostile landscape.

Re:What I Self-Host on Friday October 16, 2026 @10:54AM (#50119115)
Early beta will be web browser only, but I'll be adding shims to support existing clients (for the functionality they support). Ultimately I'll be adding native clients but those are some time off.
Re:What I Self-Host on Friday October 16, 2026 @03:10AM (#50115135)
- Single binary

- I've addressed the most common complaints and unfixed issues in all of the competitors

- "Watch together" mode because my gf is stuck in another country for the next few months. Includes voice chat and will soon have tv casting to watch on the big screen and chat on the phone.

- all the hole punching tricks to get access from remote if you want it (or just keep it local only if you'd rather not)

- more features I'll talk about later - out of time atm

Re:What I Self-Host on Friday October 16, 2026 @02:49AM (#50114988)
I'm currently building a Plex competitor, minus the rug pull. I'll be opening a beta soon, and I'm wondering what the interest is from the hn crowd.

Basically: easy self hosting, includes a discovery server you can run on your VPS, all the usual stuff you expect from this kind of software, and free forever.

The only thing I'd charge for is my own discovery service which gives you convenience because you don't have to host your own. Any feature that can be hosted yourself remains free forever.

International law is a veneer that only works when the balance of power is tilted strongly towards those who support it.

That was the case for the majority of the post-WW2 order, but is no longer. We're witnessing the birth of a new world order. Likely the new order will have an international law of a sort because it's good for trade, but it won't necessarily be the same as it was.

Underneath it all, only power decides.

Re:The Slow Formation of Durable Software on Thursday October 08, 2026 @12:04PM (#50007525)
We've already gone through that many times with COBOL, Excel, Visual Basic, PHP, Javascript, etc.

Whenever a new technology makes what used to be hard easy, all the non-experts pile in and produce shit for awhile, until they're finally forced to admit that software engineering is hard (or die trying).

The same will happen with LLMs in a couple of years.

Re:The Slow Formation of Durable Software on Thursday October 08, 2026 @12:01PM (#50007489)
That's a discipline and hubris failure, and has bitten many people even before LLMs were a thing.

Most V2 rewrites fall under a similar category.

Re:The Slow Formation of Durable Software on Thursday October 08, 2026 @08:38AM (#50005121)
> If AI had existed in the early aughts, we could not have accelerated Zotero’s conception, because we did not know exactly what we wanted, and so could not have written coherent prompts for an LLM. Instead, it took a great deal of time and collaboration to develop a clear vision for what Zotero should be.

AI doesn't preclude this. In fact, it can help accelerate parts of it.

He's describing the typical big project lifecycle:

- Examine the landscape

- User research (how they use existing software, what their frustrations are, etc)

- Brainstorming

- Early ideas and prototypes

- Refinement, user feedback

- Solidify the vision and high level process design

- Choose technologies

- Design & architecture

- Plan out phases

- Build phases, then test them with users

LLMs are great at research, and great at prototypes. Once you have your design, they're good at coding as well. They're also good at distilling user feedback.

Re:Assisted Death Is Not a Choice of Last Resort in Canada on Monday October 05, 2026 @01:53PM (#49968100)
Actually, it's required for alternatives to be presented (counselling, mental health and disability supports, community services, palliative care, offered consultations with relevant professionals). And both assessors must agree the person has seriously considered these options.

The authors are just being lazy.

Re:Packing Binary Is Fun on Monday September 28, 2026 @03:51AM (#49874844)
Schemas save you space, but then you lose the ability to understand the data without the schema. That's where JSON has always been handy despite its inefficiencies.

Of course you can get the same kind of thing in binary. I wrote a drop-in binary JSON replacement because it's easy to write a binary one that's twice as fast as simjson and yyjson. The important thing is to never give the drop-in replacement any extras that break roundtrip compatibility.

Was a fun little project to write, and quite useful for me: https://github.com/kstenerud/bonjson

Re:If we do not stop to help each other, what do we become? on Sunday September 27, 2026 @01:47AM (#49863683)
Maybe I'm remembering a different Stack Overflow.

Yes, there were genuinely helpful people there. I strove to be helpful as well. But my most common experience there was:

- People asking why you're doing that (without answering the question).

- People telling you that you shouldn't do that (without answering the question or providing an alternative).

- People closing your question as off-topic or duplicate without actually reading and understanding what you wrote.

- People editing your question and changing the meaning (leading others to innocently conclude off-topic or duplicate). Or removing actually important details.

- People giving just plain wrong answers that get upvoted, with comments from more senior people begging them to change or remove it.

Or in the words of Brick Top: "If I throw a dog a bone, I don't want to know if it tastes good or not."

And yes, every so often a golden answer by an amazing person.

Now I can just ask a few LLMs, comparing and contrasting their answers. Even better: I can interrogate them on their answer.

Stack Overflow had a community of sorts, but it wasn't anywhere near like a physical community.

We may work online, but we exist in the flesh.

This is why I wrote YoloAI. If you're not sandboxing your agent, you're asking for trouble.

The built-in "sandboxes" these companies provide are laughable.

Re:I don't want to read what you didn't write on Wednesday September 23, 2026 @03:00AM (#49812604)
You're not going to get deterministic results.

It's very easy to argue with stawman arguments.

Re:I don't want to read what you didn't write on Wednesday September 23, 2026 @02:59AM (#49812599)
The human is there as the control valve, the one who keeps the overall context, and the one who injects actual creativity.

Every time the LLM throws jargon around, you call it. "What do you mean by gated wedge?" You call its bullshit, check what it's saying against your understanding of the overall system, and keep it on the straight and narrow.

It's a lot like supervising a junior dev who happens to be very quick at absorbing lots of info, but not so great at the big picture.

Re:I don't want to read what you didn't write on Tuesday September 22, 2026 @04:32AM (#49798162)
I just have my LLM read the PR, then give me a summary of what the PR is about, how important it is, and how good the PR itself actually is. Then I have a conversation with the LLM about specific points, especially things where I get that feeling that I don't have a 100% understanding.

Until I fully understand what's going on, the PR doesn't move and my interrogation of the LLM doesn't end. My interaction is littered with "Explain X" and "How does this square with Y?" and "What if Z happens?"

The interrogation is the point, without me having to wade through hundreds of lines of irrelevant code to get at the meat of the matter.

Re:Google's Open Agentic Orchestrator on Monday September 21, 2026 @05:03AM (#49784878)
I was expecting whack-a-mole as well when designing my sandbox software, but mostly it didn't happen.

As a test, I built a sandbox with only the host-side filtering proxy allowed for networking. 99% of traffic was HTTP. No QUIC at all.

npm, pip, apt, go, curl and git-over-HTTPS all worked on the standard proxy environment variables alone. No mirrors or other coaxing needed.

DNS is disallowed through the chokepoint, but that's no problem because the proxy resolves host-side anyway.

Re:Google's Open Agentic Orchestrator on Monday September 21, 2026 @04:55AM (#49784824)
I spent today doing forensics on ten compromised WordPress sites sharing one hosting account.

I used two agents: One with network access to collect the evidence, and one with everything except the model endpoint cut off, which did the analysis.

The second agent's entire input was attacker-authored. So PHP droppers, obfuscated loaders, database rows, filenames, blah blah.

In this case I'm more worried about hostile input attacking the agent, and I need to contain the damage. My sandboxing solution does that by restricting access to the source data, making it read-only. The work dir can only transfer data via patch and apply (like a git workflow), so even my workspace can't be modified until I approve each change. And then restricted network means that any compromise ain't going noplace.

The second agent couldn't even install PHP or contact any CVE site to check if it was looking at a known attack, and that was by design. All it could do is write up a report about what it observed, not make assumptions about what it is. I could then take its (much smaller) clean output and pass that to a third agent with network access.

This is forensic work, so of course not your median dev's bread & butter. But the attack surface is only just starting to be plumbed. Compromising input can turn your agent into their agent, planting things as easily as planting worms was back in the early internet days when people connected without a firewall.

Older »