HN user

jxf

5,675 karma
Posts31
Comments752
View on HN
bsky.app 10mo ago

PSA: "GitHub Developer Fund" emails are scams

jxf
5pts0
news.ycombinator.com 2y ago

Ask HN: Making Microsoft Teams Bearable

jxf
20pts27
www.amazon.com 2y ago

OpenAI-generated Amazon product names

jxf
10pts2
news.ycombinator.com 2y ago

Ask HN: Recent “Personal Tracker” App?

jxf
2pts0
www.eveonline.com 3y ago

EVE Online introduces an Excel plugin for player data mining

jxf
10pts2
twitter.com 5y ago

BMW charging drivers to activate automated software safety feature

jxf
17pts13
medium.com 6y ago

The Collapse of FairWin's $125M Ponzi Scheme

jxf
2pts0
news.ycombinator.com 9y ago

Ask HN: Guide for securing home network with smart devices?

jxf
4pts1
news.ycombinator.com 9y ago

Ask HN: What Atom editor packages do you use?

jxf
1pts0
github.com 10y ago

Notes on distributed systems from Kyle Kingsbury (aphyr)

jxf
34pts1
hbr.org 11y ago

The business strategy drawing Walt Disney gave to investors (1957)

jxf
9pts4
jxf.me 11y ago

Solving the Cheryl's Birthday Problem with Prolog

jxf
31pts1
www.toothycat.net 11y ago

Magic: the Gathering is Turing-complete

jxf
1pts1
github.com 11y ago

Linus on Witcher 2 Bug: “Sorry we broke this, will be fixed”

jxf
4pts1
transition.fcc.gov 11y ago

Marriott Hotels fined $600,000 by FCC for jamming Wi-Fi hotspots [pdf]

jxf
446pts184
modelviewculture.com 12y ago

HR Antipatterns at Startups

jxf
13pts4
github.com 12y ago

Author of OpenSSL vulnerability also wrote the spec

jxf
3pts1
news.ycombinator.com 12y ago

Ask HN: Is there a way to bill automatically for a metered service?

jxf
2pts6
github.com 12y ago

Production AWS keys on GitHub

jxf
35pts14
github.com 12y ago

Prolog interpreter using only C++ template metaprogramming

jxf
2pts0
twitter.com 12y ago

Information Architects promises to drop patents pending for Syntax Control

jxf
4pts1
asciinema.org 12y ago

Happy (Obfuscated) Holidays

jxf
1pts0
stackoverflow.com 12y ago

What does the expression ":-!!" mean in C?

jxf
1pts0
github.com 12y ago

Ruby program implementing Wikipedia's "Back to Philosophy" game

jxf
2pts1
www.indiegogo.com 12y ago

Ashe Dryden starts Indiegogo project aiming to improve developer diversity

jxf
1pts0
splasho.com 13y ago

Explaining cryptography using only the 1,000 most common words in English

jxf
2pts0
news.ycombinator.com 13y ago

Ask HN: Integrating with third party services?

jxf
9pts0
plus.google.com 14y ago

Storing and representing phone numbers: it's harder than you think

jxf
1pts0
jobs.github.com 14y ago

Critique my company's first technical job posting

jxf
2pts0
stackoverflow.com 14y ago

How Square knows who you are on its iOS app (StackOverflow)

jxf
1pts0

No one is ever going back and reading individual commits.

I violently disagree with this.

At a minimum, when I review PRs I look at the commit history to understand what's up. If the path that was taken to commit this is full of "oops" and "fix" messages, it's an immediate reject for me. The commits tell the story and it's a kindness to your human reviewers to not make them work harder to understand the point you're trying to get across.

Can't use the Twitter links if you don't have a Twitter account. Also, why make the user click away when they're trying to understand if your product does something interesting, and why do they need an account on an unrelated service when an image/gif embed would get the message across in 5 seconds?

.gitignore doesn't have the same security implications.

If you fail to prevent a private key from being added to your repository, you can reverse this and purge it from the blobs and reflog as if it never happened.

If you fail to prevent OpenAI from ingesting a private key, you have created a security incident.

It was such a simple concept but it worked so well. Wouldn't be able to do something like that anymore due to all manner of sandboxing in action. Lost a tool, gained security.

This class of programs absolutely still exists (see: every debugger, scanmem, GameConqueror, etc.).

Sandboxing doesn't prevent processes from inspecting the memory of other processes, it just prevents the sandboxed process from doing things it shouldn't.

My understanding is that it's not that the _models_ are banned, but rather the _platform_ is banned. It is acceptable to host, say, `deepseek-r1-distill-qwen-7b` and run it yourself, for example. It is not acceptable (to the authors of these bans) to download the DeepSeek app and run it on your work device.

It's much harder to search using an AST tool for a human. It's certainly harder than grepping, for example. I use AST tools myself, but it takes a while to represent a complex structure in a big codebase when I need to look for that.

It's not always amenable to grepping. But this is a great use case for AST searches, and is part of the reason that LSP tools should really be better integrated with agents.

Heroku is not dead 5 months ago

I think Cloud Run has many nice features that Heroku's apps don't. However, Heroku's services ecosystem and the easy bindings don't have a direct Cloud Run equivalent, imo, and are inferior in the GCP world.

As a native English speaker, "I'm sorry for how you feel" is patronizing. Genuine apologies acknowledge mistakes rather than invalidate feelings.

RegEx Crossword 9 months ago

I tried this for over 20 minutes and made almost zero progress because I thought the expressions also had to be words, like a crossword puzzle. Oops. It might be worth clarifying that somewhere.