HN user

ithkuil

8,390 karma

[ my public key: https://keybase.io/mkm; my proof: https://keybase.io/mkm/sigs/FIYNAHvv8Z12Rx2uToSalnyNnQJjrowgL_-13ZXRyNM ]

wonderfuldev_snrxn5rhbzc0kox8ykwk3ev0

Posts42
Comments4,064
View on HN
www.prnewswire.com 3y ago

Squarespace Enters Definitive Agreement to Acquire Google Domains Assets

ithkuil
1pts0
tokio.rs 3y ago

Turmoil, a framework for developing and testing distributed systems

ithkuil
5pts0
www.techspot.com 3y ago

Peter Eckersley, tech activist and founder of Let's Encrypt, dies at 43

ithkuil
94pts9
github.com 4y ago

Libaws: A simpler way to declare AWS infrastructure

ithkuil
87pts89
github.com 4y ago

Distributed cache with client-side consistent hashing

ithkuil
1pts0
github.com 4y ago

Postgres wire compatible SQLite proxy

ithkuil
288pts81
www.snia.org 4y ago

Zoned Namespaces (ZNS) SSDs: Disrupting the Storage Industry

ithkuil
3pts0
isitup.org 4y ago

Archive.ubuntu.com Seems to Be Down

ithkuil
2pts1
github.com 4y ago

Lipstick: A Rust-like syntax front end for C

ithkuil
3pts0
github.com 4y ago

Remote Desktop Coded in PowerShell

ithkuil
23pts15
github.com 4y ago

BumbleBee: Run and distribute eBPF programs using OCI images

ithkuil
78pts5
datatracker.ietf.org 4y ago

JSON Path Working Group

ithkuil
17pts1
github.com 4y ago

Log4jscanner

ithkuil
156pts41
github.com 4y ago

Functional tools in Go 1.18 using newly introduced generics

ithkuil
5pts0
www.theregister.com 4y ago

Azul introduces remote compilation for Java

ithkuil
46pts36
ai.googleblog.com 4y ago

General and Scalable Parallelization for Neural Networks

ithkuil
21pts0
proxychains.sourceforge.net 4y ago

ProxyChains

ithkuil
39pts13
blog.thinkst.com 4y ago

A Kubecfg Canarytoken

ithkuil
1pts0
github.com 4y ago

A distributed locking library built on top of Cloud Spanner and TrueTime

ithkuil
31pts8
github.com 4y ago

TypeScript with a Borrow Checker

ithkuil
35pts8
www.infoq.com 4y ago

Google Cloud Announces Backup for Google Kubernetes Engine

ithkuil
2pts1
blog.burntsushi.net 4y ago

Index 1.6B Keys with Automata and Rust (2015)

ithkuil
174pts10
physicsworld.com 4y ago

The Non-Radiating Antenna

ithkuil
75pts22
www.espressif.com 4y ago

ESP32-H2, an IEEE 802.15.4 and Bluetooth 5.2 (LE) RISC-V SoC

ithkuil
5pts0
blog.cloudflare.com 4y ago

The Future of Work at Cloudflare

ithkuil
4pts0
github.com 5y ago

Google Compute Engine VM takeover via DHCP flood

ithkuil
498pts174
interestingengineering.com 5y ago

China Just Announced That It's Sending the First Humans to Mars

ithkuil
2pts0
physicsworld.com 5y ago

Indestructible light waves travel through opaque material as if it isn’t there

ithkuil
48pts16
status.quay.io 5y ago

Quay.io Image Pulls Failing

ithkuil
3pts1
www.reuters.com 5y ago

Trump Pardons Anthony Levandowski

ithkuil
2pts0

The irony. A company building models and tooling to automatically produce code being attacked for using automatically produced code in the very tools that allow people to automatically produce code, presumably by somebody who wants to use their tools to automatically produce code, possibly because they believe that their approach at ensuring that automatically produced code is properly reviewed by a responsible human has to be more thorough than whatever that company does because of course they were going too fast and thus it can't be good

You make a reasonable point so I don't want to oppose it but just to offer more tricks in case some of you don't know them:

_less_ has a nice "&" command that is like "/" (search) but that filters instead like grep.

You can also pipe to an external command from less

Codex Micro 7 days ago

My second reaction is: ah is this what the stolen IP from apple fuss was all about?

My first reaction isn't here yet

I'm not suggesting a change, I'm suggesting a public discussion about a change.

What I see is one political faction who wants to convince everybody that their desired outcome was in the constitution all along and we're just misreading it. My suggestion is that, if that's really what the people want, then the current democratic process should be followed to amend the constitution in order to clarify whatever rule is unclear. There are good reasons in place for such changes to require a supermajority.

If a supermajority cannot be reached, then let's have a discussion and figure out how to make everybody's concerns heard.

But that's so completely against the current populistic climate where the most boisterous and outraging claims are rewarded; so I know this won't happen; but that's what I think _should_ happen.

If people really want to stop this kind of birth citizenship tourism they must vote for people who will pledge to amend the constitution using the proper democratic process.

But today's climate is so hostile to any kind of rational discussion about how to change laws. One faction just wants to deny citizenship right now to any people they seem not "american enough" while the other faction cannot possibly entertain any change to the current system or else It would concede something to the populist faction

I wonder why, out of the many things models definitely can't do, you choose "try" and "find out". Surely every time it proposes a solution and then gets possibly corrected by the human minder its "trying something out" and surely it can use tools like web search and code execution to "find out" stuff?

There are many ways of implementing a curl | sh installer, some of them robust, some of them not.

However they all look the same to the end user.

That's a feature and also a potential source of problems since users cannot tell if that particular application they want to install Is implementing the installer correctly or not. The outcome is that most users just trust that application (possibly because it's popular and trusted) and that's fine but it also trains the public that this installation method is ok and that gives a positive feedback for other applications to also offer their software using that installer pattern until at least one of such packages is implemented very badly or sneakily malicious.

If only a curl had a flag where you pass the sha256 of the file and it first checks it against the buffered file before outputting it to stdout.

That would singlehandedly resolve this whole kerfuffle.

The install instructions will be a slightly longer one liner and that's fine because people copy paste it anyway

He presented himself as someone who has utter disregard for any form of coherence and people actually argued that that's what made him palatable to the masses. I don't think that someone who voted for him can in good faith claim they didn't know he would betray his promises. All they wanted Is for him to own the libs

We wouldn't have identities either if we were all clones and our memories could be edited and shuffled at each conversation.

For an agent to have an identity we would have to intentionally make it hard to context engineering and limit it to append only messages that mimick human communication.

I can implant a thought into your head. If I say "Don't think about a green elephant" for a moment you'll think about a green elephant. There are more sophisticated examples of a person implanting thoughts in somobodies head (e.g. propaganda) but that's about it, I can't literally edit thoughts.

Why on earth do we want to limit our ability to do more powerful context engineering in a substrate that offers that ability natively?

Presumably because for some use cases you want the context of an agent to belong to a different "administrative domain" and you so want to have control over what information reaches it and how can it affect it?

I guess the signal-to-noise ratio matters.

In the last 3 months I received 700 spam/scam calls to my phone, my wife received about 400. We can't turn off ringing for unknown callers and we're getting mad. A few days ago I vented to one of those call-center people trying to sell me a cheaper power utility for the Nth time, and told her to find another job or something like that; she actually called me back yelling at me that "any job is worth", and yelled at her that I cannot fucking receive sometimes up to 20 calls in a day, sometimes at quite annoying times of the day! It's getting ridiculous.

EDIT: I know not everybody is having the same experience in my country. Some people are only getting a few calls per week; I registered our phones in https://registrodelleopposizioni.it/ and also I'm using android's spam filter which filters out additional hundreds of calls automatically.

EDIT 2: I sometimes wonder if we're being harassed by somebody ; I cannot tell. The voices are often quite similar, but it might be the albanian accent that makes them sound similar.

EDIT 3: caller id numbers are always different

But LLM can write code that can do math and count. Tool use, more broadly, has proven to be a very powerful way to let LLMs do what they're good at (handle the fuzzy and imprecise nuances of natural language, which includes the scooping of a lot of context) and delegate other things they're not good at to external tools, some of which if can write on the spot.

If you think about it, we humans do that all the time too.

I'm crap at 4 digit multiplication in my head, but I have no problem doing that with pencil and paper

Fair enough, there _could_ be powerful models that are hidden from the general public, but I wouldn't call it "naive" to think the current capitalistic incentives are such that the only way to produce such models is to do exactly what we see out in the open with a handful of companies each trying their hardest to outcompete the other

πFS 1 month ago

Why stop at bytes? Let's split it in individual bits and then look up the bits in pi!

But Pi's binary expansion is not very practical for this purpose, since it's 11.0010...

OTOH. e is 10.1011...

Let's stick to fractional digits (the ones right of the binary point) at index 0 we have 1 and at index 1 we have 0.

So, to encode a stream of bytes so that each bit is encoded as the index of that bit in the e, all you need to do is to xor it with 0xFF

MCP is dead? 2 months ago

Can an MCP provide prompts for your model to download and use CLIs (and ensure they have the right versions of those tools) in such a way that the data flows through the client side tools?

The more I read this thread the more I'm convinced that the main value of MCP is to provide a server managed release process. This is the same advantage that SaaS has over client side apps.

However MCPs couples with a client willing to run tools locally can provide the best of both worlds

Possibly. But otoh one cannot complain that agents don't produce high quality code while at the same time not allowing them to thoroughly go through all the steps required to produce high quality code

The informed claim is not that the obscurity layer has no value. Quite the contrary, it has such a great value that it basically reduces the incentives to have great proper security and thus once the obscurity layer is breached the second line of defense is weaker.

The argument is that it's much easier to secure proper key material rather than design and config information that can often be leaked accidentally because it's actually directly manipulated by humans (employee onboarding, employee churn etc)