HN user

h45x1

52 karma
Posts7
Comments17
View on HN
[dead] 2 months ago

I might be misjudging the security risks, but I can't see myself running Claude Code with full access to my work machine, simply relying on its built-in sandboxes and permission systems. For a long time I simply ran it under QEMU, but that proved less convenient than desired. So, recently I put together a Bash wrapper around bwrap and pasta for sandboxing Claude Code. And while I was at it, I also organized a per-project split for Claude config files, so that sessions, say, and certain other files are always project-specific and there is no possible cross-contamination between projects. Sharing, for it proved non-trivial to run bwrap and pasta together: bwrap creates nested namespaces and so one needs to switch namespaces as well before pasta can be attached to bwrap. Now I can just do `jail project-folder` and then `claude`. The wrapper is for Arch, other distros might need some path adjustments.

Less knowledgeable overall, I would agree. LLMs are, if anything, the ultimate knowledge bases. But within our own areas of expertise, our worldview is typically more coherent and we have often learnt to reason optimally within that world view. To be fair, it is hard for me to generalize. So at least that's what I see in areas which I know. As pointed out by others, however, making discoveries that bridge disciplines is where LLMs might have an edge.

My pet theory comes to information density. LLM writing feels too shallow. If you read a text from a person who cares about her subject, there will be more useful detail and insight scatterd throughout. And the information within sentences will be more meaningfully connected. On one hand, LLM would know all that, but it does not seem to know how to distill that knowledge into a written text. I read what people write. If I know the text is from an LLM, I skim.

I am surprised it's just half. The incentives are not there for replication or verification. You need to publish and it is easier to publish something new than to fight over existing results, especially if you're a young researcher.

I maintain something akin to google trends but for abstracts in economics papers. The word "novel" is growing rapidly, while "reproduce", "replicate", and "verify" have not changed much over the years: https://dubovik.eu/blog/repec?t=replicate&t=reproduce&t=veri...

Sure. Though to each his own, I'd imagine. Mine is quite basic.

- 4 pages at the back are reserved for index.

- Daily journal starts at the back.

- There is no obligation to have regular entries in the daily journal.

- ◦ denotes a past event; ◦ hh:mm denotes an upcoming or past event.

- → denotes a task.

- "circled" → denotes a completed task.

- strikeghrough denotes a cancelled or refiled task.

- ¿ optional task, not sure about something ?

- "-" is for all types of second-level bullets.

(As a side note, I mostly do task organization on the computer, but sometimes in a journal as well.)

- Topics start at the front.

- Topics are free-form.

- A new year starts a new journal. (I don't care for the new year resolutions though. At best, a list of side quests I'd like to do.)

For reasons of just trying stuff out rather than for utility, I have a set of Python scripts to generate books from their titles alone using an LLM. There are hundreds of similarly titled projects on github. This weekend I generated a new book, "A Tinkerer's Introduction to Claude Code". I thought it would be fun to use a Claude model for that, so that's what I've done. (IHMO, Gemini is better at writing and cheaper for that purpose as well.) The book is dull, full disclaimer here, but it has a few bright moments. Not least,

"Set aside time—perhaps one small task per session—where you write code unassisted. Treat it like exercise."

There is also the question of real estate. I can have several paper notes side by side (when taking notes on loose sheets) but with iPads or ReMarkables that'll be rather decadent.

I have a dedicated couple of pages in a notebook, where I write down the note-taking conventions I use. When transitioning to a new notebook, I would copy those pages, possibly making a few improvements based on past usage. A most unhurried release cycle, if I can say so myself.

Regarding the space management, there are many solutions straight out of the programming world, of course: utilize both sides of the notebook, reserve a minimum number of pages per topic, keep an index with free pages, etc. But there are some hardware ones as well, I'm trying Atoma notebooks (https://atoma.be) these days.

In my limited understanding, with zero-knowledge proofs. That's also what the blog mentions. Say, a website issues a challenge, you sign the challendge with your private key supplied by either your government (or some other authority). The signature is verified against a big set of public keys using a ZKP without knowing which specific public key matches.

I imagine the problem is more economics and politics than technology. Say, personhood verification becomes available. Then it is also that much easier to mandate age verification, and that becomes a slippery slope.

"Careful design of the protocols maintains privacy by preventing sites from learning any additional information beyond personhood." Is personhood verification desirable? Say, HN introduces personhood verification and budgets the number of posts or comments per person. That would limit the amount of AI posts, which seems to be desirable judging by the recent discussion (https://news.ycombinator.com/item?id=47340079). What are the drawbacks though?

Starting with the CTAP 2.1 standard, there is a largeBlob extension in the standard that allows for storage of a small amount of arbitrary user data. The current libfido2 library implementation uses a largeBlobKey provided by the authenticator to encrypt the data in userspace before storage. However, at least on a Yubikey, obtaining the largeBlobKey does not require User Presence, which IMHO lowers the essential security guarantees that a hardware authenticator normally provides. Recently got myself a set of Yubikeys and tinkered with them for a while. It seems it is also perfectly possible to use the hmac-secret provided by a Yubikey to encrypt one's data in user space and then store it in the largeBlob array on a Yubikey. Importantly, requesting the hmac-secret does require User Presence.

That combination is hardly documented anywhere. And so I somewhat skeptical about my unorthodox security solution. Sharing on the off-chance a security expert would comment.

The prompts are slightly tailored towards a textbook but are otherwise generic. If you have a Gemini API key, you can specify any title and get your own book. It can take several hours for a larger book (can be done faster and slightly cheaper with async queries, but I thought that an unnecessary complication for a small pilot). It is easy to disagree on the resulting quality of the book; for me it feels more like an extended Google query than anything. But as an exercise where the size of your prompt stack is larger than 1, it was fun and, in parts, thought-provoking.

If I am to name just one prompting trick that I discovered to be useful, that'll be hierarchical budgeting. I have a total word budget for the whole book and I ask Gemini to allocate that budget for chapters, and so on recursively. Fun part, the sum of parts does not always equal the total, but the difference was never bigger than 5%. That's some stochastic summing happening.

I think with our modern day lives it's tough to accomplish. There is more multitasking going on our part, some of it necessary for work or social relations, so we learn to switch easier. The downside, it becomes harder to focus. Not to discourage, just to say it'll have to be long term work, commitment.

Personally, I try to: - prioritize older, existing projects, - have an explicit daily schedule, - keep a handwritten journal (just as a commitment to be away from the computer).

Helps a little bit.

And in actually answering the question, one occasion where my focus was certainly higher than average is when I had an opportunity between jobs to travel for a few months to another country. I had a laptop with me but for security reasons there was hardly anything on it, just basic browsing. I didn't even have passwords for my Netflix account, etc. Quite quickly I could focus really well on just a few tasks, say learning a new language. Of course, such a solution is hardly applicable in most cases.

Thanks! For animations I wrote some custom rendering code, with a simple API that exposes a canvas and the ability to paint either constant pixels, which never change in colour, or dynamic pixels that can fade out with time. Then each frame I would simply paint the pixels at the search frontier and the rendering code would take care of the fading out when exporting. Also used the Lab colour space for colour blending.

The rest of the pipeline was straightforward. I exported individual frames in a .ppm format, which was easiest to program, and then stitched them into an .apng animation using ffmpeg. Did quite a few tests initially to choose between .apng and .webp and back then .apng was least glitchy across the devices I have.

I wrote this blog back in 2023 but since then I became a frequent lurker on HN and decided to repost the blog here. For me, writing it was about connecting the dots between dynamic optimization techniques I've studied as an economist and the more general search algorithms studied in CS. (This is a second submission for I erroneously put Show HN in the title the first time around.)

[Show HN] Admittedly much less visually engaging :), but some time back I was interested in the twin paradox, so I made a website where you fly a toyish spaceship between three stars and see how the various clocks and the space itself change. It's flat spacetime, so relatively easy to simulate and everything just runs in JS: https://twinparadox.org

The original motivation was, can one make a game with relativistic spaceships, conceptually speaking? The issue is that if a player calls another player IRL it'll be like instantaneous communication... In flat spacetime, though contradictory to its postulates, one can choose a preferred frame of reference, say the planets, and allow instantaneous communication within that plane, not leading to any inconsistencies in a game, I think. Curved spacetime doesn't admit a notion of simultaneity, so that's completely out, no black holes in a game :( Never really got to the point of modelling multiple ships though, the life caught up. So it's just a single ship on the website for the moment.