HN user

chii

20,197 karma
Posts132
Comments9,826
View on HN
www.youtube.com 3mo ago

Thoughts on the Use of Artificial Intelligence in Programming Courses [video]

chii
4pts0
www.youtube.com 4mo ago

Simulating the hardest Physics Problems in Python [video]

chii
2pts0
www.youtube.com 5mo ago

Valve Just Won a Legal Victory [video]

chii
1pts0
www.youtube.com 5mo ago

New DeepSeek Research – The Future Is Here [video]

chii
1pts0
www.youtube.com 5mo ago

Can a Pendulum be a Battery? [video]

chii
2pts0
www.youtube.com 5mo ago

The Space Propulsion Tier List [video]

chii
1pts0
www.youtube.com 6mo ago

Jerome Powell's being threatened [video]

chii
13pts0
www.youtube.com 6mo ago

The Single Most Undervalued Fact of Linear Algebra [video]

chii
1pts0
www.youtube.com 6mo ago

SIGGRAPH2025 Advances in Real-Time Rendering: IdTech8 Global Illumination [video]

chii
1pts0
www.youtube.com 7mo ago

Apple's Preventing Some Apps from Working on Older iPhones [video]

chii
2pts0
www.youtube.com 7mo ago

Portals must bend gravity [video]

chii
1pts0
www.youtube.com 7mo ago

Is This the Greatest In-Camera Effect of All Time? [video]

chii
2pts0
www.youtube.com 7mo ago

Increasing code performance with LTO [video]

chii
2pts0
www.youtube.com 7mo ago

Why are Transformers replacing CNNs? [video]

chii
2pts0
www.youtube.com 7mo ago

The Math Crisis at UC San Diego [video]

chii
3pts0
www.youtube.com 7mo ago

Let's Break Down the 45nm Process Node [video]

chii
1pts0
www.youtube.com 7mo ago

The Journey to the Edge of the Infinite Chess Board [video]

chii
1pts0
www.youtube.com 8mo ago

Graphics API is irrelevant [video]

chii
2pts0
www.youtube.com 8mo ago

The cloud is slowing you down [video]

chii
3pts0
www.youtube.com 8mo ago

The 100-Year Storm Myth [video]

chii
1pts0
www.youtube.com 8mo ago

Windows 11 Situation Worse Now Microsoft Axed Windows 10 [video]

chii
8pts1
www.youtube.com 9mo ago

Is AI's Circular Financing Inflating a Bubble? [video]

chii
14pts2
www.youtube.com 9mo ago

It's Already Getting Hacked... [video]

chii
1pts0
www.youtube.com 9mo ago

Optical diffraction patterns made with a MOPA laser engraving machine [video]

chii
2pts0
www.youtube.com 10mo ago

Steam Game Can Steal Your Money [video]

chii
1pts0
www.youtube.com 10mo ago

VNB: The Minecraft bank that lost $200k in 3 minutes [video]

chii
1pts0
www.youtube.com 11mo ago

Turning a $150 AC into a Super-Efficient Geothermal Unit [video]

chii
3pts1
www.youtube.com 11mo ago

The fastest sorting algorithm [video]

chii
1pts0
www.youtube.com 11mo ago

A Privacy-Preserving Postcode lookup tool [video]

chii
2pts0
www.youtube.com 12mo ago

Fallout's Memory Model [video]

chii
5pts2

SQLite is all you need if it really is all you need.

most use cases are really capable of being satisfied by sqlite, but the "architect" imagines they need more (or is preparing for the potential).

which is why there’s a subsidy required for people to buy them?

the gov't also offers interest free (but inflation indexed) loans to tertiary education.

Just because there's a subsidy, doesn't mean the tax payer is paying a price for inefficiency. The policy itself needs to be individually examined to determine whether it's an efficient use of funds, not simply that it's a subsidy (time frame needs to be taken into account too).

Resetting Xbox 15 days ago

No, it's a signal from the market that the product being sold is not wanted by the market.

to me, it is really a signal that the cost of production is high - ala, they're inefficient, rather than the market not wanting the product.

not committing prompts.

nothing prevents people from committing their prompts. I've started seeing prompts being committed into repos, or at least as part of the commit message.

In any case, if in the future there's a prompt specific language, it would be committed. I dont think we've reached there yet, but i dont doubt this is on the path to the future.

relies on the creator clicking the link

and that's why google calls it social engineering. But i still do believe this is a vulnerability. It catches people offguard, and makes social engineering easier.

An attacker controlled link in a place that a user would not expect to be vulnerable (as it is in a "trusted" environment).

The attack requires a third party to unknowingly click on the engineered URL that leak private video title. Not sure if it counts as a POC if you can only use your own channel to prove it works.

But still, it would require a user interaction to click on the link to leak data - and google should acknowledge it as an issue, because an attacker should never be able to generate a link they control in a trusted/secure environment.

They would say that they won't consider it as a bug, silently fix it and you are left there doing the work for free.

then as long as you have a trail that proves you discovered and reported it, you can make this a PR nightmare for them with noise about it publicly. The fact that it is fixed means it is considered an issue, and so by declining to acknowledge the issue and refusing to pay, they're essentially deleting the built-up trust of a bug bounty.

It won't pay out even if you did this of course, but if this happens a lot, the aggregate reputational damage leads to "do not report". That's really the only outcome you can engineer, but it is decently damaging that google _should_ see and prevent it.

That's why trains work

and that's why trains work but you have to pay a higher price to use it, while youtube is shitty, and breaks often, but it's free to use.

It is about the trade offs - not the trade offs that someone talks about passively, but actual action based trade offs; ala voting with their feet.

digital goods should have a place, but the issue here is that there's no equivalent physical goods replacements. And i dont think you can regulate this away.

The only force is consumer action (in aggregate). And it seems that companies have managed to train consumers not to take any action against the interests of these publishing companies.

This is what i hate about modern corporate culture (or human culture in general perhaps).

I dont want to expend effort politiking. I dont want to expend effort blowing my own trumpet. The value of my work is self-evident, but requires an equally intelligent person to understand.

And most people do not understand, and thus, fail to recognize the value.

Leaving Mozilla 1 month ago

don't think Fx can survive on only us.

not at the current employee and costs. But do they need to do that? Do they need to produce new products (and pay the cost to do so)?

Why can't they be lean and mean? Focus purely on browser experience without any BS, without any upsell? And there are volunteers out there that willingly contribute code/fixes for free.

Everybody values their own time more than other's.

The fix, imho, is for the reviewers to also use ai to review the code. However, the ultimate responsibility for the outcome(s) should be on the committer - you commit it, you own it, so to speak. If there's an incident, they need to be the one paged in the middle of the night. Bugs resulting from it will land on their desk.

The reviewers aren't a shield/safety net.