News for hackers. Stuff that matters.

waterTanuki

Re:In LLM era, can software startup survive? on Monday November 02, 2026 @01:55AM (#50333860)
I see this phrase thrown around alot and it lacks any substantive evidence. If coding was the easy part why were junior level SWEs getting paid six-figure salaries?

People who say coding wasn't the hard part have never had to refactor a legacy system without LLM assistance and it shows.

Re:The AI cost of JavaScript frameworks on Sunday November 01, 2026 @07:34PM (#50331537)
> I should first note two caveats about my benchmark:

> The Pokémon app is small and doesn’t represent a large, complex real-world application.

That's a pretty big self-inflicted caveat. How do you know the results will translate to complex-real world applications?

Why not try adding a bunch of complex features to the app (Auth, battles, marketplace, social interactions, etc.) to see how an actual production frontend would hold up?

Re:Concerning behavior from a popular open-weight AI model on Sunday November 01, 2026 @07:11PM (#50331358)
Now you're just moving the goalpost.

I made no comment on the effectiveness of either system, but people here still seem to vastly underestimate the brutality of one over the other.

Re:Tailscale SSH: Investigation and remediation update on Sunday November 01, 2026 @07:08PM (#50331335)
It's just basic economics. This is true for any service that offers a freemium model and you have more than 1,000 total users.

Any time you provide a free tier it's going to have more users than the paid options. I'm sure they make a decent chunk of revenue from the paid users so it's not a comment on earnings/economic feasibility specifically.

Re:Concerning behavior from a popular open-weight AI model on Tuesday October 27, 2026 @10:32PM (#50268680)
I mean, China regularly executes its CEOs. The only sweet summer child here is you not understanding how Chinese politics works.
Re:Concerning behavior from a popular open-weight AI model on Tuesday October 27, 2026 @10:28PM (#50268653)
wiretaping an ISP is vastly different from say, ordering and forcing Anthropic or OpenAI to put malicious weights into their models. Not once in my reply did I ever imply the U.S. doesn't perform espionage. Look up Five Eyes.
Re:New iMac with M6 on Tuesday October 27, 2026 @08:31PM (#50267855)
People buy these instead of mac minis because of the pretty design. That's it. Consumers are a lot more irrational than most people give them credit for.
Re:Tailscale SSH: Investigation and remediation update on Tuesday October 27, 2026 @07:20PM (#50267275)
The vast majority of tailnets are just hobbyists on the generous free tier and probably don't use tailscale ssh, but rather ssh over a tailnet. Usually it's either just one person or a family sharing access to the tailnet. But for corporate accounts where ACLs are used for SSH yeah this is big.
Re:Concerning behavior from a popular open-weight AI model on Monday October 26, 2026 @09:40PM (#50253697)
> Anthropic is even considered security risk by the US.

You and everyone reading this knows that was a political statement, not a technical assessment because a certain SecDef who played fast and loose with Signal chats didn't like that anthropic refused to let them use their models with weapon systems.

Re:Concerning behavior from a popular open-weight AI model on Monday October 26, 2026 @09:36PM (#50253670)
It's much easier for the Chinese government to tell Alibaba they must perform espionage using their models than the US Government. Even if every last engineer there joined the company just for "AI Research and Development", they might be under scrutiny or forced to shutdown if they don't work with the CCP. Power is shared between corporations and the government in the west, the government is the power in China.
Re:Gaming on Linux Without Cheating on Monday October 26, 2026 @08:52PM (#50253383)
Are you proposing putting the RAM or CPU on the server side and keeping GPU client side? I don't see how that would work because you need extremely low latency to coordinate all of these things, and a network barrier is the highest form of latency.
Re:Gaming on Linux Without Cheating on Monday October 26, 2026 @08:50PM (#50253365)
I play BF6 on GeForce NOW (got the game before I made the full time switch to Linux) and the latency isn't perceptible at all. I suppose living in a country with extensive fibre optical links and a dedicated nvidia data center helps, so yes this isn't a solution for everyone, but I think it's better than the dilemma of letting cheaters proliferate or destroying privacy.
Re:Websites Should Be Printable on Monday October 26, 2026 @08:47PM (#50253345)
Heavily depends on what your site is trying to accomplish. Marketing sites aren't supposed to be printable because we're very visual creatures. We see before we read, and so something like the iPhone product page shouldn't be printable, but something like arXiv where I'm trying to read something, not see it should.
The more comments I read on HN attempting to rationalize this as "normal behaviour" by banks, the more I believe that this is a massive bubble getting ready to pop
Re:Gaming on Linux Without Cheating on Wednesday October 14, 2026 @08:45PM (#50097700)
You're right that these two goals are fundamentally incompatible, which means the only possible solution is to remove the clients' hardware from the equation for online competitive games.

For as much hate as cloud gaming gets (the whole "you will own nothing and be happy" schtick) I see it as the perfect solution to online competitive games:

- Even if you own physical media, you don't own the servers or data necessary to run the game.

- Games can be run by an accountable third party who runs signed kernels and hardware with attestation.

- None of your personal information ever touches this hardware.

There is a middle ground where instead of playing all of your games remotely, you only play the online competitive ones remotely in order to protect your data and ensure a fair environment. Too many companies have become rent-seekers to the detriment of their customers that this won't be seen as a viable solution because of the negative connotations.

Do not mistake this for complacency. I will gladly pick up a torch or pitchfork the moment NVIDIA suggests I rent their servers to play Minecraft or Stardew Valley, but for games like Battlefield 6 I think this solution works perfectly.

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @07:18PM (#50096942)
>I've worked at places where we use a password manager to manage lots of passwords for random services that we subscribe to. The engineering manager always says "you can put your own passwords in for free" and I say "no thanks, they're going to get hacked" and then six months later... they get hacked.

There is heaps of context missing from this. Did the password manager itself get hacked, or did an employee leak a password for a single site that didn't use 2FA ?? The former strongly solidifies your point, the latter undermines it, and to be clear I don't think it's a good idea to use an employer sponsored password vault either.

Browser diversity is merely an after-effect of Apple having complete control over iOS, if it was profitable to let Google coup the entire web, they would do it in a heartbeat.

It's obvious Apple isn't doing this to "protect the open web" because if that was true, they wouldn't have stopped developing Safari for Windows.

> Apple is kicking off a new campaign today to promote Safari’s benefits over Chrome. With a new “Switch to Safari” page on its website and a pair of new YouTube videos.

The irony of using a Google platform to promote ditching another Google platform lol.

Re:Redesigning Source Control at Anthropic on Tuesday October 13, 2026 @08:58PM (#50081079)
pick your poison. Splitting repositories multiplies CICD maintenance exponentially and even moreso if you're trying to share private ones that need secret keys to access. I know from experience. No single approach in this industry is flawless. Everything has tradeoffs.
Re:Theranos.World on Thursday October 08, 2026 @08:20PM (#50014312)
I checked the health app on the phone:

> No health data.

:)

Re:How California Closed the Montana License Plate Loophole on Tuesday October 06, 2026 @09:04PM (#49986559)
This is the cost of living in a federated republic. Power is diffuse across the states so they all have different opinions on how to go about things like vehicle registrations and insurance. The only alternative is for states to relinquish the power over vehicle registrations/plates/insurance requirements to the federal government which could enforce a universal standard, but I'm sure given current events you would see why that would be a terrible idea.

I think as programmers we naturally want a single, universal standard for everything, but there are genuine advantages to having the current system as well, even with all of its flaws.

Re:Decisions API is in public beta on Tuesday October 06, 2026 @08:37PM (#49986304)
> The tulip became a luxury item and many varieties were introduced. The varieties were classified and the most sought-after, prized tulips were the streaked tulips, especially yellow or white streaks on a red or purple background. These flame-like tulips were highly sought after. Interestingly, the streaks or “flames” of the tulip petals were caused by a virus. The virus is the tulip breaking virus, or tulip mosaic virus.

Source: https://www.canr.msu.edu/news/tulip_mania_the_history_of_the...

What's old is new.

Re:America.gov – Whatever you need from government, start here on Wednesday September 30, 2026 @02:11AM (#49905033)
Let's bring the subject back into focus: This is an example of an LLM being used to search a massive database of scattered text and files. Are you saying LLM's are not suited for searching through text?
Re:America.gov – Whatever you need from government, start here on Wednesday September 30, 2026 @12:29AM (#49904358)
You can disagree but the fact is people will take the path of least resistance. I'm not saying we shoudldn't strive for 100% accuracy but we also need to be realistic about what an LLM is. I'd rather we not pretend there's some magical combination of weights out there that will make it completely perfect.
Re:Dots: Always-on agents on Wednesday September 30, 2026 @12:23AM (#49904328)
Early on in my career as a software engineer, I was told by my managers that I had to sell my ideas as an elevator pitch to get anywhere. If I couldn't explain why a feature or fix would improve the business, it would go into the wastebin.

Colour me surprised then when I see, since circa 2024, an absolute deluge of AI products coming from these companies, each with their own naming scheme, marketing page, and accompanying hype post, and despite giving them MORE than the 30 second elevator pitch interval, I am left not understanding what it is they want to sell me. I have claude, I have codex, I get my work done just fine with each. I don't need another product for this. Any software these companies try pushing always ends up being something I could've made with their own AI models in a day and then never end up using. What's the end game here? What's the goal? What's the moat? I'm not sold on a single product outside of codex and claude code.

Re:America.gov – Whatever you need from government, start here on Tuesday September 29, 2026 @08:42PM (#49902925)
> I agree in general, but how do you resolve the problem that people will take the output of the chatbot as authoritative even when it could possibly have errors or miss important nuance?

The bar for something like this should not be 100% accuracy. It should be 100% accountability and transparency, followed by being at least as accurate as google search.

Similar to autonomous driving: it doesn't need to be perfect, just less likely than humans are at causing an accident.

Re:Fakecloud: Local AWS cloud emulator for integration tests on Monday September 28, 2026 @03:41AM (#49874779)
Alot of mock services have come out of the woodwork now due to genAI, but I don't think these are the solution from decoupling your services from cloud providers, because they have to keep up with schema updates for every single service which isn't practical even with genAI.

You should be writing everything in a sans-IO pattern: define your core, the interfaces, and your own types, (even if it seems redundant) and never, ever import a single dependency from a cloud provider in that core. Make two implementations of the interfaces: one in-memory that can be spun up quickly for testing and one that uses the actual cloud provider APIs. Now instead of hoping fakecloud or localstack update their mocks to be inline with AWS, all you have to do is update your dependencies and the implementation code and the core can be left alone for a long time.

This is also why I avoid lambda and other "serverless" compute like the plague because it's designed from the ground up to lock you in.

Re:Thelio Mira AI Linux Workstation: 192 GB GPU Memory on Monday September 14, 2026 @01:13AM (#49692269)
When did Windows come into the picture? I was just talking about Ubuntu.
Re:Thelio Mira AI Linux Workstation: 192 GB GPU Memory on Friday September 11, 2026 @03:29AM (#49654746)
I find it hard to believe any enterprise willing to drop over $40k on a workstation PC would choose `Pop!_OS 24.04 LTS with the COSMIC Desktop Environment` over Ubuntu.
> [01:42] A pilot called for flaps to be set to 20 degrees, and the other pilot cautioned they were too fast. The other pilot made additional comments regarding the aircraft’s excessive speed throughout the remainder of the recording. There was not a consistent verbal response to the comments about speed

The interaction here is eerily similar to the pilot interactions preceding the 1997 Korean Air Flight 801 (B747) disaster in Guam [1]. It's not clear based on the NTSB update if the Captain was ignoring the First Officer or the other way around.

[1]: https://en.wikisource.org/wiki/Korean_Air_Flight_801_-_Aircr...

Older »