HN user

taftster

2,049 karma

[ my public key: https://keybase.io/taftster; my proof: https://keybase.io/taftster/sigs/0lXrdc605CMOxR_VfREz1yLpR9NyGQsmm4P_7mn1tig ]

Posts4
Comments679
View on HN

Have we become reddit here? I mean, you probably have some sympathy and upvotes from fellow readers, but this isn't pushing the conversation forward at all.

Any citations to your statement that NSA produces nothing? Or do you have a strong argument or evidence to support this?

Yes. And truthfully, I try to remember to only ever navigate my project folders (particularly those under revision control) using command line and/or IDE folder views.

But eventually, for whatever reason, I use Finder to go looking into a directory structure and bam, now I have .DS_Store. gitignore takes care of it, I know, but still, it's annoying.

I need this for the junk in my life. Like, did I even use such-and-such thing in the past decade? If not, toss it out (ideally to a reuse store).

I'm trying to get to a place where I think of all my purchases as rentals. That it's OK, if justified, that a tool served its purpose one time, and if it doesn't get used again or goes to the donation center, I have received the benefit. Something that can be reused is then just bonus. If not reused by me, then at least, someone else can benefit from the good.

Switching my mental thinking to "renting" instead of buying items has help me be able to get rid of items which I haven't used in some time, reducing my footprint. I have a long way to go, but I come from a family of clutterbugs and it's just kind of baked in.

Dots would be useful in my scenario just to capture utility of everyday things.

The modern age of video games, that's probably correct. And you're right, music probably compares at some level, especially given that it predates cinema. I wonder if ancient theater (Shakespeare, et al) would qualify. Probably.

I did, for the record, say "very few mediums", so as to allow room for music or video games, perhaps. I still stand by the overall statement that losing Hollywood would mark some sort of tragedy (but maybe not universally).

Also, I wouldn't go as far to say that losing what we know of in current celebrity status by certain actors would be missed. Though influencers are probably more grotesque to some (including myself).

Agreed. To say "good riddance" to Hollywood scares me. Like we are giving up and accepting generated slop and influencers from now on. There's a lot of bad movies, but just as you said, very few mediums have thusly pierced through across cultures and societies quite like Hollywood.

I like your comment, but it seems the author acknowledged this as a caveat to the algorithm.

Many home routers try to preserve the source port in external mappings. This is a property called “equal delta mapping” – it won’t work on all routers but for our algorithm we’re sacrificing coverage for simplicity.

So to what percentage is this coverage sacrificed exactly? No idea. Not as useful if the percentage is high, as you are implying.

MacBook Neo 5 months ago

"good laptops" yes. But I haven't seen a "great" one in a very long time. The Windows market is asleep at the wheel and a copilot button is not going to resuscitate it.

I think the Surface is as close to great as you can get. I'm not saying that I know the whole market of laptops, you probably know better. But the Surface is pretty good, which is weird because it seems like Microsoft isn't really focusing on it or even backing away from it.

I agree with the parent, that Macbooks are way ahead in terms of usability, polish and charm for a laptop. And the performance is outright stellar.

MacBook Neo 5 months ago

Other than Microsoft nobody even makes decent laptops in the Windows world.

I completely agree. I actually quit like and get along with my Surface Laptop. It's a really nice computer overall, worthy. It's the closest you get to the same polish and usability that Apple has in their macbooks.

I absolutely love my M4 macbook pro, it's definitely the best laptop I've ever owned. I had an older macbook pro that I kept way past its lifetime too.

Well, it should be the approver of the PR, not the author (AI slop or human slop) that is accountable. I don't ever want an AI to auto-approve a PR (or maybe only for very small things, like dependency-bot kind of tasks).

Not saying that's how it's done, in terms of accountability. The skin-in-the-game thing is hopefully still present, even with AI. But you're right, there's risk.

You overestimate my ability to keep mental context for 6 months.

And additionally, most of the PRs I have seen reviewed, the quality hasn't really degraded or improved since LLMs have started contributing. I think we have been rubber stamping PRs for quite sometime. Not sure that AI is doing any worse.

Both points here are appreciated. One that a README file as a "placeholder" for a directory gives the opportunity to describe why said empty directory exists. I would be slightly concerned though if my build process picked up this file during packaging. But that's probably a minor concern and your point stands.

Additionally, the AI comment is ironic as well. It's like we're finally writing good documentation for the sake of agents, in a way that we should have been writing all along for other sentient consumers. It's funny to see documentation now as basically the horse instead of the cart.

I agree with you. Empty .gitignore would be a "smell" to me. Whereas .gitkeep tells me exactly what purpose it serves. I like the semantic difference here that you describe. I don't like when multiple .gitignore files are littered throughout the codebase.

I'm not sure that governments actually create them, not prolifically at least. There's been some state actor influence over the years, for sure.

However, exploits that are known (only) by a state actor would most definitely be a closely guarded secret. It's only convenient for a state to release information about an exploit when either it's been made public or it has more consequences for not releasing.

So yes, exactly what you said. It's easier to find the exploits than to create them yourself. By extrapolation, you would have to assume that each state maintains its set of secret exploits, possibly never getting to use them for fear of the other side knowing of their existence. Cat & Mouse, Spy vs Spy for sure.

Good Riddance, 4o 5 months ago

I don't want to be called "gorgeous", but I admit that some of my "love language" is positive affirmations. As a man, I want to know that I am making a positive impact on my family, my wife, my community, my work. I crave that strong positive feedback, just as much or more as anyone.

So yes, I think it is a bit sexist or at minimum gender typing. And I don't think it's necessarily a "lie" for you to overstate your feelings. You might have matured in your approach, but I believe that everyone appreciates (to some variable measurement) positive affirmation from their partners. And that your lie was recognizing your partners needs for inputs, to help them in their self-image, and to assure them in their self-doubts. These are not lies.

I mean, that's fair. I guess I just wanted to put my old man hat on. The song is a tribute to an era of lost innocence. Which I think is quite apropos to the current situation surrounding telnet. Vestiges of the days of the early internet continue to disappear, almost like an endangered species. Old/obsolete protocols, like telnet, are pined for by old guys like me.

Well, I mean, the first part is a song by Don McLean called American Pie. You might know that, unsure that everyone will pick it out though.

One of the most famous play choices at karaoke bars these days too. I think because the song is a long story, of sorts? But it's a terribly long song and I will leave to take a smoke break anytime it gets chosen. You're going to be there for a good 10 minutes before it concludes.

So maybe the AI prompt was something like, "take CVE-2026-24061 and compose a song lyric in the style of American Pie by Don Mclean". I wonder if you would get similar results with that prompt.

How do you automate, for example, "HTTPS over websocket with OAuth", without providing some kind of hard-coded, static or otherwise persistent authentication credentials to the calling system in some form (either certificate based auth, OAuth credentials, etc.)?

The problem with IoT and embedded secrets isn't really a solved problem, from what I can tell. I'm not sure that OAuth exactly solves the problem here. Though all your comments about SSH (especially host verification) holds true.

Just honestly trying to understand the possible solution space to the IoT problem and automated (non-human) authorization.

This is a pragmatic answer. While yes, regex is not proven to be the Most Correct Solution for a generalized parse, when you are sitting down with some data in front of you and you can grab the needed bits with a regex group, why not exactly use this. It might be part of a bigger parsing strategy, sure. But if it gets the job on, that means you can move on to the next thing.