HN user

dweekly

4,045 karma

David E. Weekly; ran R&D teams for Facebook, Google, and Capital One, founder of Medcorder, Drone.VC, PBwiki, Mexican.VC, Hacker Dojo, SuperHappyDevHouse. Long history of hackery and tomfoolery, MP3s, computer graphics, flying helicopters and planes.

Socials: - github.com/dweekly - linkedin.com/in/dweekly - x.com/dweekly

Posts89
Comments504
View on HN
david.weekly.org 13d ago

Detailing a phishing attack: Nyasher, a Google account-takeover kit

dweekly
2pts1
cyrinx.org 13d ago

Show HN: Cyrinx (36kbps Acoustic Transport)

dweekly
6pts3
david.weekly.org 3mo ago

Show HN: Undocumented Qualcomm mesh topology 802.11 frames

dweekly
2pts0
tfr.faa.gov 5mo ago

Drones Prohibited Flying Within 3000' of DHS

dweekly
4pts2
sparklevalidator.com 5mo ago

Show HN: Sparklevalidator.com (For Appcast.xml Files)

dweekly
1pts0
github.com 5mo ago

An HTML Standard for AI Use Disclosure

dweekly
1pts0
www.ncei.noaa.gov 6mo ago

December 2025 State of the Geomagnetic Field [pdf]

dweekly
1pts0
issues.chromium.org 8mo ago

Chromium Team Re-Opens JPEG XL Feature Ticket

dweekly
11pts2
satcom.sysnet.ucsd.edu 9mo ago

Don’t Look Up: Sensitive internal links in the clear on GEO satellites [pdf]

dweekly
555pts138
www.cs.auckland.ac.nz 1y ago

Why Quantum Cryptanalysis Is Bollocks [pdf]

dweekly
4pts3
issues.chromium.org 2y ago

Chromium Team Marks JpegXL Support Ticket Obsolete / Wontfix

dweekly
2pts2
arxiv.org 2y ago

Phobos photometric properties from Mars Express HRSC observations

dweekly
14pts0
datatracker.ietf.org 2y ago

Show HN: A Standard for Misdirected Email

dweekly
10pts4
news.ycombinator.com 2y ago

Show HN: Feedback on "Wrong Recipient" IETF Draft

dweekly
2pts0
en.wikipedia.org 2y ago

Chicken Tax (and Cars)

dweekly
1pts1
www.pnas.org 2y ago

A Link Between Aspartame and Anxiety

dweekly
4pts1
dweekly.medium.com 3y ago

Infinite Depth Questions in the Technical Interview

dweekly
1pts0
support.apple.com 3y ago

iOS 16.1: Clean Energy Charging

dweekly
1pts0
forecast.weather.gov 3y ago

Incoming potentially catastrophic storm for SF area

dweekly
248pts140
arxiv.org 3y ago

UniTune: Google's New Text-Driven Image Editing

dweekly
4pts1
www.usenix.org 3y ago

Aquila: A unified, low-latency fabric for datacenter networks

dweekly
122pts11
twitter.com 3y ago

Security Researcher Discloses Drone Delivered Hack

dweekly
1pts0
hoffmang9.github.io 3y ago

How the US Allowed Cryptography to Be Exported

dweekly
2pts0
psmag.com 4y ago

The Most Controversial Tree in the World (2019)

dweekly
16pts0
dweekly.medium.com 4y ago

What the Education System Could Be

dweekly
1pts0
www.faa.gov 5y ago

FAA Handbook: How Humans Learn [pdf]

dweekly
3pts0
www.engadget.com 5y ago

Wu Dao 2.0 Network Debuts With 1.75t Parameters

dweekly
2pts0
cloud.google.com 5y ago

Custom Compute at Google

dweekly
2pts1
hi.stamen.com 5y ago

The Facebook Map

dweekly
1pts1
status.firebase.google.com 5y ago

Firebase Accidentally Issues “Need to Reverify Domain” Warning Emails

dweekly
6pts0

1. He cites existing academic literature that is peer reviewed such as the link I provided.

2. If his claims are incorrect and poorly sourced, feel free to call them out. But his research appears to have been rather exhaustive on this topic.

3. If there are other sources that contradict these claims and are well researched, links are welcome

A friend of mine got phished and I did a teardown of the infrastructure components that were used to execute the attack, that executes a Browser-In-The-Middle attack with an encrypted websocket. I've already reached out to the involved infrastructure providers, but haven't yet heard back from all of them yet.

On licenses, what's your recommendation for best practice for an LLM co-authored project? Apache 2.0 or MIT seemed the best fit.

UPDATE: On the play button, I found your issue; I had tested on Chrome desktop and it worked fine, but I'm guessing you had Silent Mode enabled and I hadn't set the audio session to 'playback' from ambient. (You would have heard the sweep if you turned off Silent Mode.) I've now set playback mode and I have verified it now plays back just fine even in Silent Mode. You can verify it on cyrinx.org. Thank you for the bug report!

For human in the loop to be effective, the human needs to actually be performing some substantive action, giving real guidance and critique and pushback. If the human only ever accepts the default plans then not only is there no understanding but the agent should learn to stop asking. It is not learning anything from the human, after all.

One thing that I look at is pushback rate: what percentage of the agent's proposals are rejected or critiqued? If it's below 5% I have found I have gotten too credulous and I am no longer closely following. Danger! If it's above 50%, I have clearly not given the agents sufficient context to perform the task and need to update my harness and instructions.

Who watches the watchers? I can imagine a guard dog process that halts the session to yell at the human if it detects complacency: if the human is providing too few tokens per minute of new context relevant to the task.

Claude Opus 4.8 2 months ago

That does seem to be the path Apple is following here. Have a local model that can answer most things and then have a fallback of cloud options when they request is too complex. The cleverness of this strategy has been overshadowed by the incredibly poor quality of their local models. It will be extremely interesting to see what next month holds and whether Google helped fine tune an Apple specific Gemini / Gemma model for their devices. Bonus points, of course, if they unveil the M5 Ultra Studio with half a terabyte of RAM to be a local "cloud model" (the true fantasy here of course would be Apple building something a little like openclaw where from your phone you could give commands to your Home Apple server). They could probably get away with charging $20k for it if it has sufficient tok/sec. If that happens and is successful one could imagine a straight line path in the next two generations to bringing the cost and form factor down to the point where some of the form factor of an Apple TV becomes everybody's home inference server / agentic HQ. Sovereign AI for everyone!

The only path to cool is through cringe. You can do it!

I think a lot of people after a random compliment might be wondering if the other person is trying to get something out of them, like a date or a business deal. When it becomes clear that you're leaving it there with no expectation of reciprocation they can truly internalize the compliment.

I think a reasonable proxy for "care" is genuine curiosity about who a person is, how they came to be where they are, what makes them tick, coupled with a general desire for positive things to happen to them in their life.

If you believe that most people have things about them that are fundamentally interesting, you will put effort in to find those things, and you'll generally be successful in finding them. If you have a belief that most people are fundamentally uninteresting, you will not put in the work, and your beliefs will be validated because you will fail discover anything of interest in most people around you.

The act of earnestly wondering about a person is very flattering - this will help people open up to you and share their interestingness. If you can layer that with an additional thought of what useful thing you might be able to do for them, such as another person who might be able to help them, or a piece of advice you can give that might save them time, you will develop a reputation as a person one should talk to.

This then will increase your hit rate on being useful which is a nicely positively compounding cycle.

My read on the book was "humans are really good at telling if you genuinely care about them or not and will respond well to that, so you should genuinely care about the people around you, and good things will result from that overall, especially if you're not super mercenary about it."

Bill & Ted said it most pithily: be excellent to each other.

Claude Design 3 months ago

Having just checked my child in for their doctor appointment, 90% of web software would be dramatically improved by using very boring best practices and readable and accessible web practices.

GPT 5.4 is the surly physics PhD post-doc who slowly and angrily sits in a basement to write brilliant, undocumented, uncommented code that encapsulates a breakthrough algorithm.

Opus 4.6 is the L5 new hire SWE keen to prove their chops and quickly turn out totally reasonable code with putatively defensible reasons for doing it that way (that are sometimes tragically wrong) and then catch an after-work yoga class with you.

The FAA just effectively grounded all drone flights. FDC 6/4375 NOTAM published two weeks ago makes it illegal for a drone operator to operate within 3000 feet laterally of any Department of Homeland Security mobile operation in the United States. But given that such locations are not published or marked, operators are typically in unmarked vehicles, etc - it is now impossible for any drone operator anywhere in the United States to be sure they are compliant with the TFR. (It's pretty clear this was published to deter filming of ICE agents in Minneapolis.)

I've begun an AI content disclosure working group at W3C if folks are interested in helping to craft a standard that allows websites to voluntarily disclose the degree to which AI was involved in creating all or part of the page. That would enable publishers to be compliant with this law as well as the EU AI Act's Article 50.

https://www.w3.org/community/ai-content-disclosure/

https://github.com/dweekly/ai-content-disclosure

xAI joins SpaceX 6 months ago

Hot saltwater is the worst substance on earth, excepting, maybe, hydrofluoric acid. You really don't want to cool things with ocean water over an extended period of time. And filtering/purifying it takes vast amounts of power (e.g. reverse osmosis).

I heard Germans hate American root beer because they think it tastes like toothpaste and that very thought ruined root beer for me for a few years (until a sunny day when I was just dying for a root beer float and it absolutely hit the spot).

I think one interesting context to consider in this is cloud repatriation. Economics that didn't really pencil out half a decade ago may be worth revisiting for a lot of organizations who now find that their actual bare metal needs are quite modest and can be well met by a few modern servers. The IOPS/$ graph here contrasting on-prem w/cloud in particular is quite telling.