HN user

ezekg

6,170 karma

Founder: https://keygen.sh. Personal email: ezekg@yahoo.com. Twitter: https://x.com/_m27e.

Posts192
Comments2,032
View on HN
analog.watch 13d ago

Show HN: Analog Watch

ezekg
107pts96
www.unrealengine.com 1mo ago

The road to Unreal Engine 6

ezekg
3pts1
benreinhart.com 2mo ago

Req Is All You Need

ezekg
3pts0
safedep.io 2mo ago

Mass Supply Chain Attack Hits TanStack, Mistral AI NPM and PyPI Packages

ezekg
2pts0
cra.mr 2mo ago

Finding Vulnerabilities with Warden

ezekg
4pts0
github.blog 3mo ago

The uphill climb of making diff lines performant

ezekg
3pts0
github.github.com 3mo ago

GitHub Stacked PRs

ezekg
900pts528
go-proverbs.github.io 3mo ago

Go Proverbs

ezekg
2pts1
blog.sentry.io 4mo ago

Fair Source Software in the AI Age

ezekg
1pts0
keygen.sh 5mo ago

Value extraction

ezekg
3pts0
karpathy.ai 5mo ago

Microgpt.py – train and inference a GPT in pure, dependency-free Python

ezekg
2pts0
davidoks.blog 5mo ago

I'm not worried about AI job loss

ezekg
351pts552
scrapoxy.io 5mo ago

Scrapoxy – End of Life

ezekg
2pts0
keygen.sh 5mo ago

AI helped me through burnout (but not how you think)

ezekg
1pts0
keygen.sh 6mo ago

SaaS Is Not Dead

ezekg
1pts2
blog.ar-ms.me 6mo ago

The unbearable frustration of figuring out APIs

ezekg
83pts58
mike.tech 6mo ago

The Death of Software Development

ezekg
3pts4
keygen.sh 6mo ago

Is success just luck?

ezekg
5pts2
keygen.sh 6mo ago

Catapults don't build castles

ezekg
2pts0
analog.watch 7mo ago

Show HN: analog.watch - read 3 analog clocks as fast as you can!

ezekg
2pts0
analog.watch 7mo ago

Show HN: analog.watch – read 3 analog clocks as fast as you can!

ezekg
2pts1
herman.bearblog.dev 7mo ago

Grow slowly, stay small

ezekg
2pts0
dingolang.com 7mo ago

Dingo – a meta-language for Go

ezekg
3pts0
nodejs.org 7mo ago

Node.js Security Pre-Alert for Upcoming Releases on Monday, Dec 15, 2025

ezekg
1pts0
dingolang.com 7mo ago

Dingo – a meta-language for Go

ezekg
2pts0
keygen.sh 8mo ago

Price so it's interesting

ezekg
3pts0
keygen.sh 8mo ago

Luck Is a Harsh Mistress

ezekg
3pts0
blog.cloudflare.com 10mo ago

The impact of the Salesloft Drift breach on Cloudflare and our customers

ezekg
35pts15
tala.bearblog.dev 10mo ago

Perfectionism is a form of shame

ezekg
3pts0
herman.bearblog.dev 10mo ago

My product is my garden

ezekg
3pts0

or look at your phone or whatever

have a means to get it ... in tv broadcasting etc

I think you're missing the point of wearing an analog watch, which is fine, but still missing the point nonetheless. :)

As an avid watch wearer, all analog, I built the game so I could improve my skills, because under pressure when somebody asks "what time is it?", I want to be able to tell them exactly, because I should be able to read it! I think it's good to want to improve your skills, whatever that may be. You shouldn't bar people from that because you disagree.

I may have missed numpad support because I have a 60% keeb! Normal number keys work fine for me. Will investigate.

Appreciate the feedback! It cares, yeah, but being off-by-a-minute doesn't really dock your overall score very much. I figured without that, a "perfect" would be much less meaningful.

Thanks for playing. It's been a fun little game I play to make sure I don't embarrass myself when somebody asks me what time it is, since I wear a lot of watches. I'd love to add a global leaderboard, but right now it's all client-side! A server-authoritative leaderboard seemed a bit too complex, especially i.r.t. preventing cheating, but I might tackle it at some point.

I don't understand how the agent's own authz doesn't match the prompter's authz -- in fact, the agent shouldn't even have its own authz at all! it should always use the prompter's authz, even if that means 'layered' authz (i.e. AND'd) across prompts. Almost all of these prompt-injection attacks crop up because companies decide an agent should be trusted, able to decide its own authz, or that authz for one prompter is the authz of another prompter, which is quite frankly, retarded.

Thankfully, most devs aren't the one making purchasing decisions in B2B. I haven't seen any change in the build vs buy equation for real businesses tbqh, and in B2B, those are the customers you want to target anyways, not the indie devs who think they can build Dropbox in a weekend. In B2C, I can definitely see this being true, but I have very little experience there so anything I say here is more on gut-feeling than anything else. But I have over 10 years of experience in B2B, and I've never seen businesses more eager to buy, to free teams up to work on the things they're experts at -- myself included.

Build a good product and they will come.

I did this exact thing this year. I moved about >5 TB of event and log data into Clickhouse. I went from having to increase Postgres storage capacity every few months ($$$) to never thinking about it. Migrating to Clickhouse took me from constant timeouts on analytics queries to all queries returning in well under 100ms, and automated data retention using TTLs going from nightly pruning jobs that failed constantly (Postgres hates DELETEs on large tables) to again, never thinking about it. Because of this, I was able to increase retention per-account from a mere 30 days like I had -- just to keep performance and storage costs under control -- to much, much longer. Huge fan.

Our philosophy through this transition is to bring existing projects along, not to force a hard break. Studios shipping on UE5 today should expect a manageable, and clear path forward when UE6 is ready for them. To allow for this, Actors and Blueprints will be in early versions of UE6. Eventually, these will be deprecated when the new framework is sufficiently mature, and you’ll have conversion tools to move projects from one framework to the other.

Very interesting to see them deprecating Blueprints. The proliferation of Blueprints is actually why I chose Unity DOTS over Unreal. I wanted to code (especially with LLMs), and from who I talked to, the industry seemed to use Blueprints more than code for gameplay scripting, which didn't appeal to me at all.

If you ask it for a cute picture of you and somebody else it has no way of telling if you’re trying to improve your relations with your spouse or be a delusional creepazoid stalker. The chatbots which can make images are programmed to assume the latter, which is more than a little bit offensive.

I've seen the same behavior increasing as well, across the board with AI. I was hitting these types of issues just using ChatGPT to make funny pictures with my kids, of me and my kids. It got to the point where all of my kids asks were rejected due to its "guidelines" when in reality all they were asking was to be turned into Elsa or be chased by a trex. Silly kid things, yet it assumed I was being a creep, or attempting to break copyright law. I used to be able to use Grok for these things, as it was largely less "censored" but that seems to no longer be the case. It feels like infantilization, and I absolutely hate it.

Not talking about the generated clients, I'm talking about the spec itself. If the majority of API services don't even have an OpenAPI spec, they can't use tools like Stainless even if they wanted to. A lot is being left on the table by not working on that first issue: companies don't have an OpenAPI spec. Been on my mind to explore that issue, because I run one of those API services that don't have an OpenAPI spec, but I have other priorities pulling my attention away from that. I just wish it was all handled.

Unpublish was unavailable for nearly all affected packages because of npm's "no unpublish if dependents exist" policy. We have to rely on npm security to pull tarballs server-side, which adds hours of delay during which malicious tarballs remain installable

Per https://docs.npmjs.com/policies/unpublish:

If your package does not meet the unpublish policy criteria, we recommend deprecating the package. This allows the package to be downloaded but publishes a clear warning message (that you get to write) every time the package is downloaded, and on the package's npmjs.com page. Users will know that you do not recommend they use the package, but if they are depending on it their builds will not break. We consider this a good compromise between reliability and author control.

I don't even know what to say here, npm.