HN user

spondyl

2,424 karma

Lead Platform Engineer at Halter but speaking for myself.

Feel free to contact me at marcus(at)utf9k(dot)net

---

automated junk below

[ my public key: https://keybase.io/marcuscrane; my proof: https://keybase.io/marcuscrane/sigs/YWbaXGw10b1r6YwVga455NAs0ZLoRjxpVweDkJI6ZYw ] wonderfuldev_gabfjkmp1o6cu5sz6tc8bt47

HackerSmacker profile: https://www.hackersmacker.org/user/spondyl?hs=CEzDD14NmTpisOYE6k

spondyl.at.hn

meet.hn/city/-36.852095,174.7631803/Auckland

Socials: - github.com/marcus-crane - utf9k.net

Posts45
Comments545
View on HN
world.org 3mo ago

The new World ID and the partners bringing proof of human to the internet

spondyl
5pts0
github.com 10mo ago

Proposal to Rename Renovate Bot to Mend Bot

spondyl
1pts1
00000000000000000000000000000000000000000000000000000000.org 1y ago

00000000000000000000000000000000000000000000.org

spondyl
1pts1
www.coywolf.news 1y ago

Bitly adds interstitial ads to shortened URLs

spondyl
2pts0
shanghikid.50megs.com 1y ago

Terence Tao "This Is Otakudom" Voice Actor Bio

spondyl
2pts1
github.com 2y ago

Reference commit used by GitHub Support

spondyl
1pts0
news.ycombinator.com 3y ago

Tell HN: Travis CI is seemingly compromised (once again)

spondyl
160pts53
utf9k.net 4y ago

Do demo iPads have a canonical owner?

spondyl
2pts0
utf9k.net 4y ago

Plex + Tidal = A Nice Match

spondyl
8pts0
en.wikipedia.org 4y ago

Information Deficit Model

spondyl
2pts0
utf9k.net 4y ago

Twitter, could you please fix your image servers?

spondyl
1pts0
utf9k.net 5y ago

Remind the user what your service does

spondyl
1pts0
blog.apnic.net 5y ago

Transport Protocols and the Network

spondyl
2pts0
whyy.org 5y ago

New book contends that Catch Me If You Can is mostly made up

spondyl
351pts138
utf9k.net 5y ago

Dropbox is way too clingy

spondyl
7pts2
utf9k.net 5y ago

Google recently surfaced awful results for movies and TV

spondyl
1pts0
en.wikipedia.org 5y ago

FM-2030

spondyl
2pts0
utf9k.net 5y ago

Latency as a Forcing Function

spondyl
1pts0
www.youtube.com 5y ago

NZ government issues Covid-19 PSA “remix” for summer music festivals [video]

spondyl
2pts0
en.wikipedia.org 5y ago

I am lonely will anyone speak to me

spondyl
284pts209
www.stuff.co.nz 5y ago

Gang members robbing and assaulting people using Discord to buy drugs

spondyl
2pts0
github.com 5y ago

Official New Zealand Covid Tracer app open sourced

spondyl
3pts0
www.nytimes.com 5y ago

Google Anything, So Long as It's Not Google (2005)

spondyl
3pts0
www.gamesindustry.biz 5y ago

Nicalis issues DMCA against fan remake of original freeware Cave Story engine

spondyl
1pts0
utf9k.net 5y ago

Configuration Magic

spondyl
1pts0
orgro.org 6y ago

Orgro – An open-source mobile org-mode file viewer

spondyl
5pts0
utf9k.net 6y ago

Setting up Emacs inside of a WSL2 distribution

spondyl
3pts0
steamcommunity.com 6y ago

Fear Not the Long Road

spondyl
1pts0
en.wikipedia.org 6y ago

Financial Position of the United States

spondyl
2pts0
utf9k.net 6y ago

Publish Your Older Works

spondyl
1pts0
[dead] 1 month ago

The article linked appears to have entirely fabricated the quote, as referenced by another commentor. The story has been slowly circulating today but there doesn't appear to be any evidence of the quote being said in the linked video source.

their own software/APIs are quite buggy

Our org has been attempting to trial Fast Mode on and off but enabling it in Claude Code just says something like "not available with your cloud provider"

It turns out that for all of the matrices on the documentation site, there is a secret "other" set of infrastructure for those who bill Enterprise via AWS Marketplace where certain features like Fast Mode are incompatible when using "aws routing"

Anthropic Support straight up mentioned that Claude Code just doesn't handle this case correctly and erroneously gives you the impression that it's supported against your billing method, and that it's all effectively undocumented.

I suppose this means there are like 5 different AWS methods of use:

- Bedrock (Legacy)

- Bedrock

- Claude for AWS

- Claude via Marketplace

- Anthropic's own "primary infrastructure"

and then roll in other cloud provider variations

On that note, I recall Datadog having coupled billing and infrastructure per cloud (ie; billing via GCP requires using the GCP infra) and was wondering if commenters had any insights into if there is some special requirement/complexity around marketplace billing for cloud providers or if it's just some weird design choice?

GitHub Is Down 1 month ago

"unauthorized" is a bit different than "unauthenticated". The former suggests trying to access something you don't have permission for while the latter suggests you're just not logged in.

At a guess, I could imagine some sort of failure of cached pages, which can be cached for signed out users but probably not for signed in users (as the rendered HTML would need to have user context like their avatar etc)

I wrote a little bit about my experience with this sort of stuff a little while back if you're interested:

https://news.ycombinator.com/item?id=47393437

I would add to that a few more open questions that I haven't seen addressed:

- As more engineers (and non-engineers) pick up coding agents, everyone is authenticating multiple MCPs, creating an n * n explosion of complexity that is impossible to centralise. Multiply this by the number of distinct coding agents for every platform and visibility is very tough. A lot of platforms also don't support scopes so you can't enforce safety short of a network proxy I suppose

- For non-developers mainly, lacking mental models such as <agent> for Y desktop app does not imply that there is a local LLM running on your machine. I suppose it's a question of trust and education versus starting conservative and progressively onboarding where we're more of the former.

- We talk a bit about the idea of sharing prompts but that fundamentally a prompt does not in itself contain quality. I've had internal tools I've made where it's mentioned that Claude made it when I mean, yes to a degree but I did many iterations using my own taste to refine things and held opinions about how things should operate. Giving someone a prompt won't inherently guarantee anything of quality. I often think about the idea of ie; give a screenshot of Github to an LLM but in a way, you're saying to create a clone, not of what exists today but is a dead echo of the design taste and choices made years ago that persist today. You can create things cheaply but without taste and good judgment, how can you continue to evolve it in a way that isn't like that draw the rest of the horse meme.

- I personally wonder about tokenmaxxing stories you hear about from other companies and like, logically what happens to glue roles? Does someone like a Microsoft just stack rank on token count and fire those who actually get work done? I suppose they already hollow out knowledge anyway so maybe it's nothing new.

- Definitely the thing with internal tooling where eventually you generate so much that you fundamentally have no mental model. It's fine for non-critical stuff and I'm kind of coming around to the idea that it's actually a better position to have no idea of the code and a strong "theory" of how a thing should work than it is to fully understand the code and have zero "theory". Ideally both of course.

Anyway, this isn't a comprehensive ramble but I've also been a bit disappointed that there hasn't been more talk about the second order effects. Many things can be true at once where you can see value in LLMs while still being critical of them and the whole DC situation ie; Colossus 1 etc.

Probably not too relevant but off the top of my head, the New Zealand Government's guidance on ransomware payments is that you could technically be fined if you pay a ransom to an entity in a sanctioned country, although it doesn't go into specifics

I had wondered if this was actually a bug and not intentional:

When a user downloads or updates Chrome, Gemini Nano is downloaded on demand to ensure Chrome downloads the correct model for the user's hardware. The initial model download is triggered by the first call to a *.create() function (for example, Summarizer.create()) of any built-in AI API that depends on Gemini Nano.

This sounds like it could be possible that some part of Chrome, or perhaps a privileged website (ie; google.com), could be invoking `*.create()` 100% of the time? I don't actually know that this is what's going on or even if it's likely mind you.

https://developer.chrome.com/docs/ai/understand-built-in-mod...

It is also quite ironic that one of the docs pages is titled "Inform users of model download" although it goes on to talk about notifying in terms of model download time, not necessarily getting user consent:

https://developer.chrome.com/docs/ai/inform-users-of-model-d...

Unfortunately, navigating to this page seems to display:

Too many requests are being made from an unsupported application. This unfortunately degrades the experience and makes feeds slow for everyone else. Please try back later.

I focused too much on the non-Steins;Gate works when I replied (as pointed out elsewhere) so to be clear, when I say "worth watching", I was referring to the "other animes" bit. Steins;Gate's adaptions are great! It's the other SciADV anime adaptions that aren't quite on the same level

Oh yeah, the Steins:Gate animes are perfectly fine to be clear! I was only thinking of the non-SG animes which are... pretty messy!

The Chaos;Head anime barely makes any sense, even having read the VN because it only got 12 episodes. I haven't finished Chaos;Child or Robotics;Notes which seem fine so far for C;C anyway, it doesn't quite feel the same.

There is Occultic;Nine which anime only in that the VN was never localised plus the game itself isn't on Steam so there's nothing to base a patch off of.

Anyway, take my thoughts with a grain of salt and not like some correct stance haha

For readers who are vaguely aware of Steins;Gate, you may be interested to know that it's actually part of a wider universe called the Science Adventure series (or SciADV for short).

Steins;Gate works really well as a standalone entry (and I didn't even realise it wasn't a standalone thing until a year or two back) but it's part of a loose overarching canon.

Most of the games have various errors but there's a translation group called Committee of Zero who not only retranslate all of the games (sometimes from the ground up) but also do a lot of technical work. They've been doing essentially a reimplementation of the entire engine as well, although I don't know that it'd be accurate to say it's a clean room implementation or anything like that.

For those interested, you can see the various patches here (https://sonome.dareno.me/projects/) and this guide should give you an idea of the ideal playthrough order (https://old.reddit.com/r/steinsgate/comments/13cjnui/kurisus...)

I will mention that the first entry, Chaos;Head NoAH takes a while to get going (like a few hours) and gets quite gruesome towards the end (to the point that I wanted to quit) but once you get past it, the rest is all a lot tamer in comparison.

The whole series is a very long time investment as far as VNs go but I personally got really into the series and spent a few months(!) just getting through the mainline entries which culminated with the most recent entry: Anonymous;Code.

Without going into any details, there's a loose canon across the series that Anonymous;Code finally digs into and makes you look at the entire series from a new angle. It's a bit controversial but I appreciated it.

It's not really that clear what the future of the series is as there's a remake coming up called Steins;??? where it appears to be a remake but there's a bunch of fans hoping that it's more in the vein of Final Fantasy 7 Remake where there's really more going on under the hood.

There are also the anime adaptions but I wouldn't recommend them. I've seen most of them, and I'm really not a snob about this sort of stuff but just due to the medium of VNs (with multiple routes and that), they aren't able to successfully replicate a lot of the twists and turns at all which take time to build up.

It's pretty bizarre to me to have even stuck with a VN let alone played through like 6 over the span of like half a year or more? Honestly, I'm not even sure if SciADV is actually "good" or if it's just one of the first franchises in a long time where I haven't ruined it for myself by reading Wikipedia in advance. I think it's pretty good though.

Worth watching? Not really but they are definitely worth playing. It's hard to fault the anime adaptions because they have limited time compared to the 20 - 40 hours that some of the VNs take. Many of the other entries (Chaos;Child is great) are definitely worth it but won't really hit as well if you're just watching the adaption. The main reason being that VNs have multiple paths so they reveal information piece by piece. The adaptions generally try to include all of the information at once in a linear fashion but it doesn't really have the same effect.

Well, I assume this is all just generated with Claude Code, right? Whether there is much back and forth with the LLM is a valid question and nothing wrong with generating websites (I do it too for some side projects). Claude loves generating websites with a particular style of serif font. We also saw this with https://tboteproject.com/timeline/ and I've just generally seen it from various designs that coworkers have spit out over months using Claude defaults.

I guess I just find it weird because all the signals are messed up so whenever I see these sorts of layouts, I feel like I'm looking at the average where I don't think "gorgeous and interesting" at all. Instead, I'm forced to think "I should be skeptical of this based on the presentation because it presents as high quality but this may be hiding someone who is not actually aware of what they're presenting in any depth" as the author may have just shoved in a prompt and let it spin.

There's actually a similarly designed website (font weights, font styles etc) here in New Zealand (https://nzoilwatch.com/) where at a glance, it might seem like some overloaded professional-backed thing but instead it's just some guy who may or may not know anything about oil at all, yet people are linking it around the place like some sort of authoritative resource.

I would have way less of an issue if people just put their names by things and disclosed their LLM usage (which again, is fine) rather than giving the potentially false impression to unequipped people that the information presented is actually as accurate and trustworthy as the polish would suggest.

Here are some relevant excerpts from an October 2025 article[1]:

In a message to GitHub’s staff, CTO Vladimir Fedorov notes that GitHub is constrained on capacity in its Virginia data center. “It’s existential for us to keep up with the demands of AI and Copilot, which are changing how people use GitHub,” he writes.

The plan, he writes, is for GitHub to completely move out of its own data centers in 24 months. “This means we have 18 months to execute (with a 6 month buffer),” Fedorov’s memo says. He acknowledges that since any migration of this scope will have to run in parallel on both the new and old infrastructure for at least six months, the team realistically needs to get this work done in the next 12 months.

If you consider that six month parallel window to have started from the time of the October memo (written presumably at the start of October), then that puts us currently or past the point where they would have cut off their old DC and defaulted to Azure only.

Whether plans or timelines changed, I have no idea of course but the above does make for a convenient timeline that would explain the recent instability. Of course, it could also just be symptomatic of increased AI usage generally and the same problems might have surfaced at a software level regardless of whether they were in a DC or on Azure.

Putting that nuance aside, personally I like the idea that Azure is simply a giant pile of shit operated by a corporation with no taste.

[1] https://thenewstack.io/github-will-prioritize-migrating-to-a...

I'm not explicitly authorised to speak about this stuff by my employer but I think it's valuable to share some observations that go beyond "It's good for me" so here's a relatively unfiltered take of what I've seen so far.

Internally, we have a closed beta for what is basically a hosted Claude Code harness. It's ideal for scheduled jobs or async jobs that benefit from large amounts of context.

At a glance, it seems similar to Uber's Minion concept, although we weren't aware of that until recently. I think a lot of people have converged on the same thing.

Having scheduled roundups of things (what did I post in Slack? what did I PR in Github etc) is a nice quality of life improvement. I also have some daily tasks like "Find a subtle cloud spend that would otherwise go unnoticed", "Investigate an unresolved hotfix from one repo and provide the backstory" and "Find a CI pipeline that has been failing 10 times in a row and suggest a fix"

I work in the platform space so your mileage may vary of course. More interesting to me are the second order effects beyond my own experience:

- Hints of engineering-adjacent roles (ie; technical support) who are now empowered to try and generate large PRs implementing unscoped/ill-defined new internal services because they don't have any background to know is "good" or "bad". These sorts of types have always existed as you get people on the edge of technical-adjacent roles who aspire to become fully fledged developers without an internal support mechanism but now the barrier is a little lower.

- PR review fatigue: As a Platform Engineer, I already get tagged on acres of PRs but the velocity of PRs has increased so my inbox is still flooded with merged PRs, not that it was ever a good signal anyway.

- First hints of technical folk who progressed off the tools who might now be encouraged to fix those long standing issues that are simple in their mind but reality has shifted around a lot since. Generally LLMs are pretty good at surfacing this once they check how things are in reality but LLMs don't "know" what your mental model is when you frame a question

- Coworkers defaulting to asking LLMs about niche queries instead of asking others. There are a few queries I've seen where the answer from an LLM is fine but it lacks the historical part that makes many things make sense. As an example off the top of my head, websites often have subdomains not for any good present reason but just because back in the day, you could only have like 6 XHR connections to a domain or whatever it was. LLMs probably aren't going to surface that sort of context which takes a topic from "Was this person just a complexity lover" to "Ah, they were working around the constraints at the time".

- Obviously security is a forever battle. I think we're more security minded than most but the reality is that I don't think any of this can be 100% secure as long as it has internet access in any form, even "read only".

- A temptation to churn out side quests. When I first got started, I would tend to do work after hours but I've definitely trailed off and am back to normal now. Personally I like shipping stuff compared to programming for the sake of it but even then, I think eventually you just normalise and the new "speed" starts to feel slow again

- Privileged users generating and self-merging PRs. We have one project where most everyone has force merge and because it's internal only, we've been doing that paired with automated PR reviews. It works fairly well because we discuss most changes in person before actioning them but there are now a couple historical users who have that same permission contributing from other timezones. Waking up to a changed mental model that hasn't been discussed definitely won't scale and we're going to need to lock this down.

- Signal degradation for PRs: We have a few PRs I've seen where they provide this whole post-hoc rationalisation of what the PR does and what the problem is. You go to the source input and it's someone writing something like "X isn't working? Can you fix it?". It's really hard to infer intent and capability from PR as a result. Often the changes are even quite good but that's not a reflection of the author. To be fair, the alternative might have been that internal user just giving up and never communicating that there was an issue so I can't say this is strictly a negative.

All of the above are all things that are actively discussed internally, even if they're not immediately obvious so I think we're quite healthy in that sense. This stuff is bound to happen regardless, I'm sure most orgs will probably just paper over it or simply have no mechanism to identify it. I can only imagine what fresh hells exist in Silicon Valley where I don't think most people are equipped to be good stewarts or even consider basic ethics.

Overall, I'm not really negative or positive. There is definitely value to be found but I think there will probably be a reckoning where LLMs have temporarily given a hall pass to go faster than the support structures can keep up with. That probably looks like going from starting with a prompt for some work to moving tasks back into ticket trackers, doing pre-work to figure out the scope of the problem etc. Again, entirely different constraints and concerns with Platform BAU than product work.

Actually, I should probably rephase that a little: I'm mostly positive on pure inference while mostly negative on training costs and other societal impacts. I don't believe we'll get to everyone running Gas Town/The Wasteland nor do I think we should aspire to. I like iterating with an agent back and forth locally and I think just heavily automating stuff with no oversight is bound to fail, in the same way that large corporations get bloated and collapse under their own weight.

This is a "productionisation" of the same content discussed here: https://news.ycombinator.com/item?id=47362528

I would caution readers to do their due dilligence as the presentation may be fancy but that should not immediately translate into a signal of quality in itself given the author has disclosed using Claude Code for a chunk of this work.

While I won't outright discount the findings (as there is "too much" to reasonably verify), there are a few oddities around the source repo such as errors where Claude has tried to access sources, been denied and then noted as much or where it has seemingly fetched incorrect files and tried to interpret them (https://github.com/upper-up/meta-lobbying-and-other-findings...)

I am not under the immediate impression that the author has done thorough due diligence rather than just offloading that to readers by saying "You can just check the sources yourself"

I came here to say that this is pretty much my view having poked around a little bit as well.

This file does not exactly fill me with confidence: https://github.com/upper-up/meta-lobbying-and-other-findings...

In one part of the report, there seems to be this implicit assumption that Linux and Horizon OS (Meta's VR OS) are somehow comparable and that Meta will be better equipped than Linux if age verification is required.

It doesn't explicitly say "This will allow Horizon OS to become the defacto OS and Linux will die out" but that seems to be the impression I'm getting which uhh... would make zero sense.

More broadly, this entire report (and others like it) are extremely annoying in that I've seen some Reddit comments either taking "lots of text" as a signal of quality or asking "Does anyone have proof that these claims are inaccurate" which is

a) Of course entirely backwards as far as burden of proof

b) Not even the right rubick because it's not facts versus lies, it's manufactured intent/correlations versus real life intent/correlations (ie; bullshit versus not)

All of this could be factually true without Meta being smart enough to play 5D chess

This post raises a few flags in my mind that it was at least partly generated by an LLM? That isn't to suggest that this editor doesn't/won't exist, that the editor uses LLM-generated code (which is not a sleight) or that the claims are not truthful.

The main things that jump out are the inconsistency in writing style (sometimes doing all lowercase and no punctuation) but then the brief rundown is all perfect spelling and grammar with em-dashes.

The "Not just" parts stick out like "Not just play them back — edit them" as well as "This isn’t a proof of concept or a weekend project. It’s a real authoring environment."

Anyway, best of luck to the author with their project!

Oh neat, I had come across the headless client yesterday (and submitted a now-fixed bug report for it after running into some issues).

Before opening HN this morning and seeing this post, I actually wrote a post about how I'm experimentally using headless to publish my blog: https://utf9k.net/blog/obsidian-headless/

Well, that post was my experiment but I'll be looking forward to trying it out going forward.

There are of course many alternatives and I'm sure this workflow may have its pains but for now, it feels like a lot less friction between actually writing and having it published.

I've used plain Git for many years of course but I've also tried other rube goldberg machines such as various Git-inside-Obsidian plugins and so on but there's always just a bunch of "stuff" between writing and putting it online.

Jeremy Lewin's tweet referenced that "all lawful use" is the particular term that seems to be a particular sticking point.

While I don't live in the US, I could imagine the US government arguing that third party doctrine[0] means that aggregation and bulk-analysis of say; phone record metadata is "lawful use" in that it isn't /technically/ unlawful, although it would be unethical.

Another avenue might also be purchasing data from ad brokers for mass-analysis with LLMs which was written about in Byron Tau's Means of Control[1]

[0] https://en.wikipedia.org/wiki/Third-party_doctrine

[1] https://www.penguinrandomhouse.com/books/706321/means-of-con...