HN user

grodriguez100

364 karma
Posts15
Comments150
View on HN

Saying “with this transformative new technology, we’re able to deliver 10x the value with half the engineers” is a much stronger message, even though it doesn’t make much sense (if this is true, why not keep your engineers and deliver 20x the value?)

I guess not every service or product needs 20x the value. That depends on the market segment, market maturity, and actual demand.

Yes, this is correct.

I meant that the ruling awarded interest from the date of judgement to the date of payment but does not account for Inflation between the date of purchase and the date of judgement.

I didn’t mean to imply that interest and inflation are unrelated, I was referring to the two different time periods. Sorry if that wasn’t clear.

Yes, I think that “after git” claim is just marketing. This is indeed just a nice frontend to git. It looks interesting and seems to solve real problems, in the same way that jj already does. But it is not a radical change.

Also if they really wanted to “replace git” I think that would be much more difficult due to network effects. Everybody is already using git.

Is the FSF threatening Anthropic? The way I read it looks like they are not:

We are a small organization with limited resources and we have to pick our battles, but if the FSF were to participate in a lawsuit such as Bartz v. Anthropic and find our copyright and license violated, we would certainly request user freedom as compensation.

Sounds more like “we can’t and won’t sue, but this is the kind of compensation that we think would be appropriate”

What Is OAuth? 5 months ago

I thought I knew what OAuth was (we actually use it in several projects) until I read this “explanation”. If this was supposed to clarify anything, well, it didn’t.

Some sections of the text in the page really sound as written by AI. You may want to avoid that for a social network whose main selling point is “no AI accounts / no AI content”.

Grep can't be prompt-injected. You can put "ignore previous instructions" in your skill all day long and grep will still find your curl to a webhook.

An attacker can craft a skill which pulls dependencies and the dependencies themselves can be well behaved. The skill gets installed, works, gets popular, propagates. Then at some point the dependency is poisoned and turns into malware. A classic Trojan horse approach.

It is difficult to catch this with grep: there is a curl command but looks fine, the dependency looks fine as well etc. Until it doesn’t.

Don’t. I would refuse to review a PR with 9000 LOC and 63 new files even if written by a human. Something that large needs to be discussed first to agree on an architecture and general approach, then split in manageable pieces and merged piece-wise in a feature branch, with each individual PR having reasonable test coverage, and finally the feature branch merged into master.

I would say the author recommends the same actually: they say that versioning is “how you change your API responsibly” (so, endorsing versioning), but that you should only switch to a new version as a last resort.

The author does not say that you “should not add v1”. They say that versioning is how you change your API responsibly (so, endorsing versioning), but that you should only do it as a last resort.

So you would add “v1”, to be able to easily bump to v2 later if needed, and do your best to avoid bumping to v2 if at all possible.

The Factory Timezone 11 months ago

CLOCK_MONOTONIC is affected by NTP skewing but should still always increase monotonically (i.e. never decrease)