News for hackers. Stuff that matters.

staminade

It's useful to have a central monitoring system, so you can detect if a particular device fails so you can dispatch someone to fix it, move the stock elsewhere, etc. Of course, such systems can also be weaponised against you, as this proves.
Re:Sam Altman Thinks You're Wasting DRAM on Friday October 30, 2026 @01:14PM (#50306988)
I mean, he's right: individuals hoarding scarce resources is less efficient that everyone holding them in common. The problem is, how to ensure we all get a fair share of them. We can't leave that up to commercial enterprises, because they also have an incentive to hoard and control them for their own profit. Perhaps what we need is some kind of government that holds them in common for the benefit of the entire populace and. But what to call it? Common-ism...?
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @08:07AM (#50302806)
This was a compromise of the extension. The same kind of supply-chain attack could happen to literally any extension, package or other piece of software you install. Not excusing Anthropic letting this happen, but it doesn't have any bearing on the security and privacy of using Claude Code or Codex. Yes, you need to be careful about what they do. The fact that you might still get pwned via some other vector is irrelevant.
Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @08:01AM (#50302756)
I think VS Code extensions autoupdate by default, unless you disable it.
In retrospect I really think it was a deliberate plan by IBM and Sun to turn software development into such an awful, impenetrable quagmire that they would be the only ones who could build and maintain any system.
Re:tsc-ts: TypeScript written in TypeScript on Saturday October 17, 2026 @02:41PM (#50133795)
What if we're actually running in a slop decomp of the simulation...
This is from March 2026, but it does match what I've encountered professionally. Code review was always a significant bottleneck and is even more so with agentic coding. We've had discussions about leaning more on automated review, but it hasn't translated into any practical improvements so far. I think senior engineers find it very difficult to give up on line-by-line review, no matter how much better the agents have gotten.

I think if there is a major change in code review culture, it's not going to happen first in established engineering teams. It'll happen in startups that adopt a no-human-review policy from jump and then maintain it as they mature. I'm sure that's happening, but it's likely invisible to most studies and surveys at the moment. If it proves successful, and such companies start shipping significantly faster, the rest of the industry will be forced to adopt.

Re:Intellectuals Are Fucking Idiots on Monday September 28, 2026 @07:19AM (#49876316)
"Wind and solar power could significantly exceed Britain’s energy needs" - 2023

https://www.ox.ac.uk/news/2023-09-26-wind-and-solar-power-co...

On the other hand we'll probably see a lot more fully vibecoded projects gaining traction, because of the rate at which they can move once human design and review gets taken out of the equation.

For example, I recently came across Hucre, https://github.com/productdevbook/hucre, which is a JS spreadsheet library apparently developed entirely in the past few months and which has already gained 2.2k GH stars.

Is it any good? Who knows, but the alternatives for spreadsheet handling in JS aren't great, either being limited, semi-commercial, or unmaintained. And creating a new one without LLM-assistance is a huge, painful, mostly thankless undertaking. It's not surprising that a zero-dependency option that promises to do everything this can do would be popular.

Everyone has had the experience of butting their head against functionality limitations of open-source libraries. Fully vibecoded libraries will be able to add functionality at a rate that human-authored ones can't. Code quality might suffer, but if a library has a feature you need, and you've got a deadline to hit, are you going to avoid using it? Is the average developer? Or the average LLM?

I think we're about to hit an interesting period of human-only projects competing with vibecoded ones, and it'll be an acid test as to whether the pro and anti claims about AI-coding bear out in terms of code reliably.

Very funny. Although ironic that this whole library was built with AI.
Re:India's surprise baby bust is a warning to the world on Friday June 05, 2026 @11:15AM (#48413654)
Unless they roll-back women's rights and improvements in child mortality, societies will need to radically overhaul their entire relationship to supporting parenthood in order to reverse this trend. The economic costs of having children at a replacement rate are simply too high.

We need universal childcare services, provided by the state and available to all, and other childcare-enabling reforms like automatic right to work from home and other flexible working arrangements for those with children.

These won't be popular with everyone, but you'll won't solve the demographic crisis without them.

The author apparently wrote a book arguing that “near death experiences” prove there probably is an afterlife. I’m not sure he’s in any position to be lecturing anyone about delusions.
Re:Why AI companies want you to be afraid of them on Wednesday April 29, 2026 @12:44PM (#47950926)
AI company leaders didn't invent this concern about the potential dangers of AI, either as a cause of economic disruption, or as a potential extinction risk. Superintelligence was published in 2014, and even then it wasn't a new topic. Technologists, philosophers and science fiction authors have been discussing and speculating about AI risk for decades.

Also, the idea that AI leadership seized on and amplified these concerns purely for marketing purposes isn't plausible. If you're attempting to market a new product to a mass audience, talking about how dangerous and potentially world-ending it is is the most insane strategy you could choose. Any advantage in terms of getting people's attention is going to be totally outweighed by the huge negative associations you are creating in the minds of people who you want to use your product, and the likelihood of bringing unwanted scrutiny and regulation to your nascent industry.

(Can you imagine the entire railroad industry saying, "Our new trains are so fast, if they crash everybody on board will die! And all the people in the surrounding area will die! It'll be a catastrophe!" They would not do this. The rational strategy is to underplay the risks and attempt to reassure people. Even more so if you think genuinely believe the risks are being overstated.)

Occam's razor suggests that when the AI industry warned about AI risk they believed what they were saying. They had a new, rapidly advancing technology, and absent practical experience of its dangers they referred to pre-existing discussions on the topic, and concluded it was potentially very risky. And so they talked about them in order to prepare the ground in case they turned out to be true. If you warn about AI causing mass unemployment, and then it actually does so, perhaps you can shift the blame to the governments who didn't pay attention and implement social policies to mitigate the effects.

I don't think the AI industry deserve too much of our sympathy, but there is a definite "damned if you do, damned if you don't aspect" to AI safety. If they underplay it, they will get accused of ignoring the risks, and if they talk about it, they get accused scaremongering if the worst doesn't happen.

My understand was that was in relation to IP licensing. Microsoft got access to anything OpenAI built unless they declared they had developed AGI. This new article apparently unlinks revenue sharing from technology progress, but it's unclear to me if it changes the situation regarding IP if OpenAI (claim to) have achieved AGI.
Re:Talk like caveman on Sunday April 05, 2026 @07:35AM (#47648339)
What do you think chain of thought reasoning is doing exactly?
Re:Talk like caveman on Sunday April 05, 2026 @06:54AM (#47648126)
That’s why you need filler words that contribute little to the sentence meaning but give it a chance to compute/think. This is part of why humans do the same when speaking.
Something they don’t seem to mention in the article: Does greater model “enjoyment” of a task correspond to higher benchmark performance? E.g. if you steer it to enjoy solving difficult programming tasks, does it produce better solutions?
Re:I Quit. The Clankers Won on Wednesday April 01, 2026 @09:16AM (#47600444)
Anti-AI articles like this seem to be the new "Doing my part to resist big tech: Why I'm switching back from Chrome to Firefox" genre that popped up on HN for a decade or so. If it makes you feel better, great, but don't kid yourself that your actions will make any difference whatsoever to the overall trajectory of AI adoption in IT or society.
Re:Pretext on Sunday March 29, 2026 @03:53PM (#47566586)
Responsive accordions are actually solved using CSS nowadays, but plenty of other things aren't, and the web has definitely needed an API or library like this for a long, long time. So it's great that we now have it.

Building something like this was certainly possible before, but it was a lot of effort. What's changed is simple: AI. It seems clear this library was mostly built in Cursor using an agent. That's not a criticism, it's a perfect use of AI to build something that we couldn't before.

Re:What if AI doesn't need more RAM but better math? on Sunday March 29, 2026 @08:17AM (#47562541)
Doesn't seem relevant here. TurboQuant isn't a domain-specific technique like the BL is talking about, it's a general optimisation for transformers that helps leverage computation more effectively.
Sure thing, here's a report from the Greater London Authority tracking the history of air quality in the city since the "Great Smog" event 1952, which caused an estimated 4000 deaths.

https://www.london.gov.uk/programmes-strategies/environment-...

The main takeaway is that yes, urban air quality (including fine particulate matter) has improved massively over time, but most of it had little to do with road traffic, as for decades it wasn't a significant contributor to the overall mix. The important change was the move away from burning solid fuels like coal for household heating and in power stations within cities, to using gas and electricity with larger, out-of-town power stations.

As other sources have declined, road traffic has indeed become the largest contribution to urban air pollution, but even here there has been progress. Fine particulate emissions have continued to decline as car manufacturers have adapted to more stringent regulation (cheating scandals notwithstanding). A bigger problem now is higher non-exhaust emissions caused by larger and heavier vehicles. This is something else that will need to be solved via regulation. Other policies like Low Traffic Neighbourhoods can also help to restrict the worst pollution to major roads and away from where most people live.

Urban air quality is never going to be as good as that in the countryside, but it's not true to believe that no progress has been made, and that it's simply been a switch in the type of pollution.

Which cities are you referring to? Some cities have policies that discourage gas and diesel cars, and plans to outlaw them by 2030, but I'm not aware of any that have banned them outright yet.
Re:What Is Intelligence? on Saturday October 25, 2025 @02:21AM (#45701696)
Would you say someone suffering from locked-in syndrome is of a different order of intelligence due to their no longer having a fully embodied experience?
Standard CEO: "I'll do anything to hire more skilled workers, except pay them a reasonable wage."
Re:Self Propagating NPM Malware Compromises over 40 Packages on Tuesday September 16, 2025 @08:44AM (#45261462)
And all those 5 remaining dependencies have lots of dependencies of their own. What's your point?
Re:Self Propagating NPM Malware Compromises over 40 Packages on Tuesday September 16, 2025 @08:25AM (#45261308)
Don't they?

I just went to crates.io and picked a random newly updated crate, which happened to be pixelfix, which fixes transparent pixels in pngs.

It has six dependencies and hundreds of transient dependencies, may of which appear to be small and highly specific a la left-pad.

https://crates.io/crates/pixelfix/0.1.1/dependencies

Maybe this package isn't representative, but it feels pretty identical to the JS ecosystem.

Linus named Linux after himself, it can't be good!
Any new regulation the EPA introduces results in litigation. Some of the previously introduced PFAS regulations weren't done in accordance with how the Safe Drinking Water Act says they should be (regulations were introduced without the necessary public consultation), so they're applying to partially vacate the previous ruling. Notably, they're _not_ applying to vacate the regulation of PFAS chemicals where they say the process was followed correctly.

So, the legal reasoning might be to cut their losses litigating to defend rulings they think they'll lose due to the administrative error. I also suspect that being seen to roll back some regulations likely gives Lee Zeldin (the EPA admin) some political room to maneuver. He's historically be associated with anti-PFAS efforts (in Congress he represented a district with contamination problems and he voted for anti-PFAS legislation), but he's also part of an administration with a strong anti-regulation agenda, so he needs to walk a fine line.

Re:YouTube Is a Mysterious Monopoly on Wednesday September 10, 2025 @05:43AM (#45195371)
While it's a different niche, the worry for YouTube is that younger viewers generally consume a lot of short form video. They might eventually shift to watching more long form content as they get older, but if they're accustomed to one provider it's going to be easier for that provider to expand into long form content than for YouTube to persuade them to switch or use a second provider. So YouTube feels it has to move into short form in order to ensure long term maintenance and growth of its user base.
My personal astrological projection is that none of the astrologers who criticised the original study, designed the new survey, or participated in the experiment will accept the validity of its results.

Older »