HN user

Meekro

4,325 karma

Contact me at stsalkov [at] google's email service.

Posts29
Comments625
View on HN
news.ycombinator.com 8mo ago

Ask HN: Reason for the DDoS attacks on DALnet circa 2002?

Meekro
8pts0
twitter.com 1y ago

Sophisticated Phishing Attack Exploits Google's Infrastructure

Meekro
2pts0
old.reddit.com 1y ago

Detecting ChatGPT in College Essays

Meekro
3pts0
lists.play.date 2y ago

Playdate Catalog Update

Meekro
2pts0
www.propublica.org 3y ago

Newest College Admissions Ploy: Paying to Make Your Teen a Peer-Reviewed Author

Meekro
4pts2
unisync.sh 3y ago

Show HN: Unisync, the programmer's continuous sync too

Meekro
2pts1
news.ycombinator.com 3y ago

Ask HN: What not-profit-seeking project are you tinkering with this week?

Meekro
104pts157
arstechnica.com 5y ago

Playdate preview: You won’t believe how fun this dorky, $179 game system is

Meekro
15pts0
reason.com 5y ago

Reopening Texas Had No Discernible Impact on Covid-19 Cases or Deaths

Meekro
53pts25
www.techdirt.com 5y ago

Five Bar Owners Arrested in France for Not Logging Patrons Internet Use

Meekro
4pts0
www.justice.gov 5y ago

US Seizes Domains Used by Iran's Islamic Revolutionary Guard Corps

Meekro
139pts135
news.ycombinator.com 6y ago

Ask HN: Why do distros ship old software?

Meekro
4pts1
arstechnica.com 6y ago

Google Stadia launch review: Gaming’s “future” looks rough in the present

Meekro
3pts0
arstechnica.com 6y ago

Man allegedly told YouTubers: Pay up or I'll file bogus takedowns

Meekro
3pts0
arstechnica.com 7y ago

Bitcoin is worth $6000 for the first time this year

Meekro
3pts0
www.youtube.com 7y ago

A Scam Call Center

Meekro
2pts0
pastebin.com 7y ago

The Java Way (2006)

Meekro
2pts0
arstechnica.com 7y ago

Researchers, scared by their own work, hold back “deepfakes for text” AI

Meekro
2pts0
torrentfreak.com 7y ago

Kim Dotcom Extradition Battle May Have Years to Run

Meekro
2pts0
news.ycombinator.com 8y ago

Ask HN: Finding a CPA for my startup

Meekro
4pts2
venturebeat.com 8y ago

Gab.ai raises $4.8M

Meekro
2pts0
medium.com 8y ago

What's Happening with Bitcoin

Meekro
3pts0
www.chokepoint.net 8y ago

Exposing Server IPs Behind CloudFlare

Meekro
8pts0
arstechnica.com 8y ago

Gab.ai faces loss of domain over hate speech

Meekro
17pts7
arstechnica.com 8y ago

Plaintiff Suing Grubhub Admits Lying on Application, Barely Working His Shifts

Meekro
1pts0
money.cnn.com 8y ago

Russia Terminates the Daily Stormer

Meekro
16pts6
arstechnica.com 9y ago

Nintendo Switch Demoed on Late-Night TV

Meekro
1pts2
github.com 9y ago

Show HN: Brooce, a language-agnostic job queue written in Go

Meekro
6pts2
consolephp.com 13y ago

Web-Based Interactive PHP Console

Meekro
1pts0

This doesn't strike me as "reading" your emails any more than a router is "reading" your packets when it forwards them. As far as I know, Google employees (even high-ranking ones) can't randomly start going through people's messages-- that's the privacy that matters.

Zed 1.0 3 months ago

I think the application should own its dependencies and its default config. In this case, it felt to me like no one had really looked at them.

Zed 1.0 3 months ago

Agreed-- Sublime is asking $99 right now, which is quite reasonable for something that you're going to use for hours a day in your professional work. Somebody gave many years of their life to make that tool the best it could be, and as a well-paid professional, I feel it's more than fair. In other high-end professions (like the legal field), I've heard of law firms paying a lot more than $99 for certain software licenses.

That said, there are a lot of reasons why someone might be struggling with money. If I was the creator, I wouldn't object to someone using an unlicensed copy forever in that case.

Zed 1.0 3 months ago

Coming from Sublime, I'd never even heard of a Language Server when I first tried Zed. As I recall, disabling particular kinds of warnings required copy-pasting some pretty exotic incantations into my project config. All of it was poorly documented, and it felt like I was doing something nobody expected me to do. Instead, I should have been able to mouse over a particular warning and say "don't warn me again about things like this", at which point Zed should edit the project config for me.

Zed is 1.0 3 months ago

I could! I'd probably have to take it piece by piece, rather than telling an AI to edit hundreds of files in one epic session and hoping for the best. Even just reviewing a commit that large feels like it would be a bad use of time. Also, giving every variable a type (or using "mixed" everywhere), and giving every function a return type (more "mixed" or "void") would just make the code more verbose without any justification that I can see.

With Zed, I feel like I'm being dragged into a modern style guide that I never agreed to. It would be nicer if I could make it my own by turning off those parts that I disagree with and keeping the rest. I know this is technically possible, but they've certainly not made it easy.

Zed 1.0 3 months ago

I really want to like Zed because they've clearly put so much work into it, but so far I've been sticking with Sublime. I have several large PHP projects that were started in the 2010-2020 era, and Zed will highlight and complain about all sorts of minor things that were standard PHP fare at the time: functions without return types, for example. My code (which works fine) looks like an ocean of red when I view it with Zed, and turning all those warnings off is not trivial.

For each kind of warning, I wish there was a button that said "don't warn me again about issues like this one in this project." Then I could keep the interesting warnings (like undeclared variable) and ditch the ridiculous ones.

Sadly, it's not a great time to be a autistic revolutionary type. Too easy to get cancelled when you make women uncomfortable, or something. Look up what happened to Richard Stallman if you're not sure what I mean. No-doubt he'll be replaced by someone who says Safe Things that don't offend HR departments.

It's true that the lack of multithreading in PHP has been a persistent pain. I love PHP and I've done PHP-centric projects for 20 years, but I end up falling back to Go when it's time to write a background worker that will handle lots of tasks in parallel. I really wish my PHP apps could include native components that process background tasks in parallel.

On the other hand, Javascript's parallelization is one of the hardest-to-understand things I've ever seen: in order to really grasp the async/await model, you have to know the whole story of callback hell and how modern Javascript papers over it while carefully preserving backwards compatibility.

There are advantages to the lack of application state, though. Memory leaks and similar bugs became largely irrelevant, for instance. Regarding performance, a simple LAMP stack on a dedicated machine can easily give you <250ms pageloads for many web apps. If that's not fast enough, or you're averaging dozens or hundreds of requests per second, you're probably big enough that you can use parallelization or more exotic architectures to speed things up.

You mentioned a 12-agent setup with IMAP that you might consider migrating into this platform. Could you tell me more about the overall goal of the project? I'm curious because this whole "email+agent" thing that the article talks about strikes me as kind of strange, and I'm curious what the non-spam use cases are.

I would note that Cloudflare has been doing better-- the SBL listings page mentioned in that article[1] shows only 47 active complaints, down from 1201 when the article was written 2 years ago. Many of those complaints are stale, too: I spot-checked a few (referencing the domains fireplacecoffee.com and expansionus.com) and the domains are expired and not being hosted by anyone.

[1] https://check.spamhaus.org/sbl/listings/cloudflare.com/

Thomas can probably speak to this better, but as someone who has participated in other Cloudflare betas: there's usually a button or a form and you can request access.

Thanks for the clarification! Sounds like some developers, including your beta users, are experimenting with new ideas (which includes plugging agents into different workflows to see what happens), while old farts like myself bemoan AI getting plugged into everything and every app sprouting "Ask AI" buttons that they never asked for or wanted.

I can definitely understand some of the ire-- people are probably imagining how they'll try to contact Verizon and will get back a totally unhelpful email from ChatGPT when all they wanted was to talk to a real human for 5 minutes. Your blog post about hooking up agents to email probably speaks to that fear.

I also kind of rolled my eyes at the blog post and its obsessive focus on "agents" -- definitely feels like a solution looking for a problem. But the email-sending product being promoted is probably ok, right? They just happened to write a lot of words observing that ChatGPT can, in fact, call sendmail() through their platform (if you give it access) -- a fact that shouldn't surprise anyone.

My experience has been the opposite of what you're saying: AWS SES (one of AWS's flagship products, and probably the biggest email sender in the world) is a pretty responsible anti-spam citizen. Spamhaus even wrote this article[1] praising SES's anti-spam efforts. From the article: "Amazon SES has a long-standing relationship with Spamhaus, working closely to prevent suspicious IPs and domains from impacting their network." Though I'm sure that new incidents come up daily, Spamhaus themselves seem to disagree with the notion that SES's IP blocks have "poor reputations."

[1] https://www.spamhaus.org/resource-hub/service-providers/how-...

I'm not sure why this announcement has generated so much irritation in the comments-- Cloudflare has been transitioning from "DDoS protection" to "AWS competitor" for many years now, and this is just their alternative to AWS SES.

It's an email sender that you can access through an API, or directly through Workers. For those who haven't been keeping up over the years, Workers is their product for running code on Cloudflare's platform directly (an AWS Lambda competitor, more or less) and they've been trying to make it the centerpiece of an ecosystem where you deploy your code to their platform and get access to a variety of tools: databases, storage, streaming, AI, and now email sending. All of this is stuff that AWS has had for years, but some people like Cloudflare more (I certainly do).

One thing that surprised me is the price-- Cloudflare's cloud offerings are usually much cheaper, and I've saved plenty of money by migrating from AWS S3 to Cloudflare's R2. This new offering is 3x the AWS price, though. Weird. Anyway, most small companies don't send enough email for it to matter.

But getting back to the consensus in the comments here: I'm not sure why people think that they'll be worse about policing spam than AWS SES, Azure Email, etc.

Nobody sensible runs the latest kernel

From the article: "Linux 7.0 stable is due out in about two weeks. This is also the kernel version powering Ubuntu 26.04 LTS to be released later in April."

Unfortunately, lots of people will be running it in less than a month. At the moment, it'll take a kernel patch (not a sysctl) to undo this-- hopefully something changes.

There seem to be two separate lines of thought in this conversation: first, that the AI tech isn't smart enough for us to trust it with autonomously killing people. Second, even if it was smart enough, maybe such weapons are immoral to produce?

The first line of thought is probably true, but could change in the next 5 years-- so maybe we should be preparing for that?

The second line of thought is something for democracies to argue about. It's interesting that so many people in this thread want to take this power away from democratic governments, and give it to a handful of billionaire tech executives.

It sounds like the "supply chain risk" designation is just about anyone who works with the DoD not using them, so their code doesn't accidentally make it into any final products through some sub-sub-subcontractor. Since they've made it clear that they don't want to be a defense contractor (and accept the moral problems that go with it), the DoD is just making sure they don't inadvertently become one.

I'd encourage you to look up the Defense Production Act. Its powers are probably broad enough that the President could unilaterally force Anthropic to do this whether or not it wants to. It's the same logic that would allow him to force an auto manufacturer to produce tanks. And the law doesn't care whether we are in a crisis or not. It's enough that he determine (on his own) that this action is "necessary or appropriate to promote the national defense."

However, it looks like Trump isn't going to go that route-- they're just going to add Anthropic to a no-buy list, and use a different AI provider.

I think you're right, this isn't about a specific request but about defense contractors not getting to draw moral red lines. Palmer Luckey's statement on X/Twitter reflects the same idea: https://x.com/PalmerLuckey/status/2027500334999081294

The thinking seems to be that you can't have every defense contractor coming in with their own, separate set of red lines that they can adjudicate themselves and enforce unilaterally. Imagine if every missile, ship, plane, gun, and defense software builder had their own set of moral red lines and their own remote kill switch for different parts of your defense infrastructure. Palmer would prefer that the President wield these powers through his Constitutional role as commander-in-chief.

I've gathered that the dispute is over Anthropic's two red lines: mass surveillance and fully autonomous weapons. Is there any information (or rumors even) about what the specific request was? I can't believe the government would be escalating this hard over "we might want to do autonomous weapons in the vague, distant future" without a concrete, immediate request that Anthropic was denying.

Even if there was a desire for autonomous weapons (beyond what Anduril is already developing), I would think it would go through a standard defense procurement procedure, and the AI would be one of many components that a contractor would then try to build. It would have nothing to do with the existing contract between Anthropic and the Dept of War.

What, then, is this really about?

Banning something just for kids is an easy win for any politician, since that's one of the few groups that can't punish you in the next election. For that reason alone, I assume we'll get some law within 5-15 years mandating that Facebook ban kids. I assume the kids will trivially bypass it the block, or switch to foreign social media, and we'll go back to business as usual.