News for hackers. Stuff that matters.

russell_h

The article mentions this, but this is an opportunity not a problem.

If a hyperscaler wants to connect a 500MW datacenter, great. That's a huge investment, with various positive externalities. Requiring the builders of the datacenter to also pay for whatever transmission, substations and generation upgrades their demand requires is just not that big of a deal compared to the total size of the investment, which is part of why companies like Microsoft and Anthropic have committed to doing just this.

The article notes that some states are already moving to require this, and more should do the same.

There's a huge opportunity here; the AI buildout is probably the biggest wave of private industrial investment in decades, if not ever, and it comes at a time that we need to accelerate the buildout of our electrical grid. Let's have the hyperscalers pay for it in a way that makes this positive sum for everyone.

As an aside, it's kind of funny that this article reads like it was written by Claude.

Re:Kimi-K3 Technical Report [pdf] on Monday July 27, 2026 @12:55PM (#49072404)
> However, I don’t trust hosted LLMs for anything that needs to be private.

Why not? Do you trust AWS with things that need to be private?

Re:Making on Wednesday July 22, 2026 @03:10PM (#49011924)
Whoa, I had no idea Beej is teaching at OSU!

Back when I was an OSU student I taught myself a lot about practical systems programming, and I was consulting Beej's Guide to Network Programming daily. I kept lamenting to myself that I wished the expensive university was proving as useful as this guy's free website.

Awesome that it has come full circle, great hire by someone.

Re:Zero-Touch OAuth for MCP on Thursday June 18, 2026 @08:21PM (#48593427)
MCP auth has been a huge pain point for us at C1 - both for our own internal MCP use and in our in-product MCP Gateway - so very glad to see this landing.

We launched support today for C1 to act as an EMA identity provider (we mint the short-lived scoped tokens), so I'm excited to hook this up for Linear and some of the other MCPs we use, and get out of the business of constant OAuth flows. Claude has been doing this magically for some of their built-in connectors (at least Slack I think) and the experience is pretty great.

Disclosure: VPE at C1. We wrote up how we’re approaching it here if anyone’s in the weeds on this: https://www.c1.ai/docs/product/admin/enterprise-managed-auth...

I think the argument would go that if people are clicking through certificate errors and you're in a position to MITM their traffic, you can just serve them a different certificate and they'll click through the error without noticing or understanding the specifics.
Re:Ask HN: Who is hiring? (November 2025) on Monday November 03, 2025 @01:48PM (#45802727)
ConductorOne | ONSITE (SF / PDX) | Full-Time

ConductorOne is building the platform for identity security and least privilege automation — helping companies secure access to everything, without slowing people down. Our engineering culture emphasizes small, high-ownership teams that deliver measurable impact and move quickly.

We’re hiring across many areas:

  - Software Engineers – We’re growing our product development teams in SF and Portland.

  - Site Reliability Engineering – We’re looking for SREs and a hands-on SRE manager (SF or Portland) to own reliability, performance, and infrastructure as we scale.

  - Forward Deployed Engineering (FDE) – We’re building a brand-new customer-facing engineering org: we're looking for engineers who want to work closely with customers to modernize and automate identity operations, and a Manager, FDE to lead the team.

  - Governance, Risk & Compliance (GRC) – We’re building a new GRC function and hiring our first Compliance Engineer to help scale our security and audit programs.
We work primarily in Go and TypeScript, on AWS + Kubernetes.

Apply here: https://www.conductorone.com/careers

I don't think lenders have any ability to retroactively require PMI; certainly no mortgage I've ever signed permitted this.
The title is clearly meant to generate outrage, but what is wrong with cutting up a book that you own?
Interesting, good info.

To be clear though, this grant is for over $1,200 per ton.

I don't quite understand the goal of this project.

It says they're preventing 15,000 tons of emissions, but there are all kinds of ways to prevent or offset greenhouse gas emissions for under $10/ton. So at a glance this project appears to be allowing almost 2 million tons in preventible emissions in order to... pay people to bike around and collect food scraps?

At least in the Pacific Northwest most Electrify America installations are in Walmart parking lots. These have caused me to spend more time at Walmart the past two years, honestly its a pretty good experience - aside from EA reliability issues, which seem to have improved but still far short of Tesla.
Without looking at any data I’m guessing part of this is that married men end up with kids and can’t afford a home they want to raise kids in there.

Edit: also, school quality.

Re:The DuckDB Local UI on Wednesday March 12, 2025 @10:29AM (#43343643)
This looks great!

At risk of harping on a tired topic, have you thought about embedding an AI query generator? For ad-hoc queries like I mostly use DuckDB for I’ve found it’s almost always fastest for me to paste the schema to ChatGPT, tell it what I’ll looking for, then paste the response back into the DuckD CLI, but the whole process isn’t very ergonomic.

I think I’m sort of after duckbook.ai, but with access to a local duckdb.

It doesn’t sound to me like the boat actually sank. In the article it mentioned that they heard the rescue helicopter from within. Wouldn’t that imply that the pressure inside would be one atmosphere? Am I thinking about the physics of this wrong?
I don't share OP's hostility to VC-funded databases, but PingCAP is definitely VC-funded: https://www.pingcap.com/press-release/pingcap-the-company-be...
Re:When Zig Is Safer and Faster Than Rust on Monday December 30, 2024 @09:38AM (#42549632)
I wouldn’t use this in production, but this was in HN earlier this year and I love the idea: https://github.com/borgo-lang/borgo
I read somewhere that some Soviet jets used huge quantities of alcohol for cooling.
At a glance I think you’re both right. Apparently I’ve been buying the good stuff by accident.
Does peanut butter often have added sugar? I’ve got Kirkland and Adam’s in my closet and am 99% sure neither lists that on the container.
Serious question: what do you think lawmakers should do?
Re:Ask HN: Who is hiring? (November 2024) on Friday November 01, 2024 @02:36PM (#42020152)
ConductorOne | Software Engineer | Hybrid (Portland, San Francisco), Remote(US) | Full Time

ConductorOne (https://conductorone.com) is a modern identity governance platform built to secure and simplify access management for today’s fast-changing, cloud-based environments. We unify access and permissions data from across all your cloud, infrastructure, and on-prem tools, giving real-time visibility and control, and help our customers reduce identity risks, automate access reviews, and streamline access requests, with powerful automation and user-friendly experiences. Trusted by teams at DigitalOcean, Instacart, Ramp, and more.

We use lots of Go, React, Temporal, gRPC, DynamoDB, Postgres and AWS. We’re looking for product-minded engineers, who love taking ownership of the product and shipping every day.

Frontend Engineer (SF preferred): https://jobs.ashbyhq.com/conductorone/01862e6d-0d75-43da-8fc...

Go Engineer (Portland, SF, Remote (US)): https://jobs.ashbyhq.com/conductorone/7a164d64-6427-4fba-b71...

Apply directly via the links above and mention this post, or reach out via the email in my profile.

Re:Well, it's just an AWS Account ID on Wednesday July 10, 2024 @02:42AM (#40924298)
In security contexts the term “enumeration” is understood to mean “brute force”. You can Google “enumeration attack” to see a bunch of examples where this is explicitly defined.
I saw a video where this company is doing exactly that for weeds:

https://youtube.com/watch?v=V3A6L2Dao6s

Great idea, I hope it works.

You’re right, good catch, I completely missed that.
They’re only partially correct no matter what. The timestamp in a ULID has only has millisecond resolution, so two IDs generated in the same millisecond, even within the same process, will be randomly ordered.

In practice though there are a lot of advantages to having approximately-time-ordered IDs, and I’ve found the pitfalls easy enough to avoid.

I think that Apple end-to-end encrypts fitness data.
Re:Nuclear's role in a net-zero world on Sunday March 24, 2024 @07:02PM (#39811315)
It doesn’t make much sense to compare the average outputs of wind vs nuclear unless you budget for a bunch of storage too.
Re:Spinkube: Running WASM in Kubernetes on Thursday March 14, 2024 @12:55AM (#39700725)
In this context WASM is more like a slower container than an application runtime. The potential advantages being:

* Far better isolation than a normal Linux container * If WASM takes off, maybe architecture-independent artifact distribution * If WASM takes off, maybe improved ability to call from one language into another

As a Kubernetes container runtime WASM today is probably most comparable to gVisor, with the somewhat huge caveat that it prevents you from just running normal Linux software.

Older »