tigranbs

Current AI coding assistants are not just a Stack Overflow replacement; they do a pretty good job writing whole projects without you touching the code. At the end, when the coding guidelines are not clearly defined, the AI-generated codebase becomes messy and unmaintainable. That is why, nowadays, it has become profitable for my team to fix the "vibe-coded" products that are working fine but have a shit ton of problems with scaling and implementation logic.

Security researchers have revealed 30+ CVEs affecting Claude Code, Cursor, GitHub Copilot and others via prompt injection and MCP tool poisoning; this article covers attack vectors, the OWASP agentic AI Top 10 and practical defences.

Links times out, seems the host wasn't ready for the HN traffic!

Wow, the internet has grown 19%, which is surprising that it is still growing at that rate over the year.

Living in SoCal, I almost always prefer to order online. Most local businesses are losing to their e-commerce competitors; no wonder commercial spaces are empty.

I have a side business of a small e-commerce shop. I would consider having physical space just for the sake of luxury, but now I would rather spend that monthly rent on marketing online rather than paying for physical space.

IMHO, that's what is happening. Bank problems or anything else are secondary; if it were profitable to be at the physical location for the businesses, other factors would vanish.

Based on the stability track record, I was more curious about how SQLite has done the anomaly testing. Sadly, the article has just a few words about it.

Truly one of the best software products! It is used on every single device, and it is just pure rock-solid.

I would say the AI consumption aspect was a side effect: the primary goal was to "generate" new stuff. So far, to me, the significant boost is the coding aspect. Still, for the rest of the people, I think you are right: 90% of the benefits come from being an interactive, conversational search on top of the available information that AI can read/consume.

Firefox has been lagging in Web features for a long time. I have been a Zen browser user for about a year, and recently moved back to Arc just because almost all interactive websites look bad on the Firefox engine; somehow, they don't have the same level of JS API support as Chrome does, especially for WebRTC, Audio, or Video. And this is frustrating that they think the problem is the AdBlockers!

IMHO, this is not too bad! But obviously, coming from the software product industry, everyone knows that building features isn't the same as operating in practice and optimizing based on the use case, which takes a ton of time.

Waymo has a huge head start, and it is evident that the "fully autonomous" robotaxi date is far behind what Elon is saying publicly. They will do it, but it is not as close as the hype suggests.

TBH, the idea seems way outdated for the current state of software engineering. The Rust compiler provides a massive benefit for AI Coding because it literally catches all the failure cases, so all AI have to do is implement the logical parts, which is usually a no-brainer for something like a Claude Code or Codex.

For example, the https://github.com/SaynaAI/sayna has been mostly Claude Code + me reviewing the stuff + some small manual touches if needed, but for the most part, I have found that Claude Code writes way more stable Rust code than JS.

It would be easier and safer to give the JS code to a translator and have it translate it into Rust, and then continue AI Dev with Rust, than to invest time in an automated compiler from JS to Rust. IMHO!

In my experience, "memory" is really not that helpful in most cases. For all of my projects, I keep the documentation files and feature specs up to date, so that LLMs are always aware of where to find what and which coding style guides the project is based on.

Maintaining the memory is a considerable burden, and make sure that simple "fix this linting" doesn't end up in the memory, as we always fix that type of issue in that particular way. That's also the major problem I have with ChatGPT's memory: it starts to respond from the perspective of "this is correct for this person".

I am curious who sees the benefits of the memory in coding? Is it like "learns how to code better" or it learns "how the project is structured". Either way, to me, this sounds like an easy project setup thing.

As a US person, I have lived in Finland for 3 years, and I can assure you that the Finns are the most content people you can imagine! They can go months without talking to anyone and still consider themselves "happy", but the correct word in English is "content".

That report is correct, it just they advertise with the wrong word in the headline, I guess because it is more click-bate title than having it as "The most content country"

Nice! I am surprised that the JS compressed chunks are not that big. I have checked, and the largest is ~340Kb, which is even smaller than a regular Next.js starter kit home page.

Traditionally, we have a ton of components for 2D UI, but the UX still sucks for the most part. I am not even sure what it will look like to create the 3D UX for anything other than the Games. For example, nobody uses Unity for desktop or mobile apps, because the freedom of a 3D environment isn't suited to regular UI tasks.

I used the MIT license for https://github.com/SaynaAI/sayna mainly because the challenge is usually in product velocity and direct sales/distribution. Blocking from SaaS is explicitly entirely redundant.

Making software is getting cheaper, so this kind of license would not protect against someone reverse-engineering the SaaS tool in a week. It is better to be abstracted away from those type of things IMHO

Ah nice! I should integrate this into https://github.com/SaynaAI/sayna

``` Performant. Do the best we can within what is conformant. ```

Would be great to have benchmarks like ops/second

Maybe it is just me, but the “universal” platform architecture seems a bit inefficient. I think, with a software-first mindset and modularity in Hardware products, it is insane to think efficiency first, especially when the goal is to make it cheaper to produce and operate.

Is this the WOW effect of the hardware price-to-performance ratio? The only significant benefit I can see is that the M-series chips have RAM as GPU memory, which is slower than traditional GPUs, but at least you can run things with that memory.

The last time I worked meaningfully with C++ was back in 2013. Now that I write mostly Rust and TypeScript, I'm amazed by how C++ has changed over the years!

Regarding the "auto" in C++, and technically in any language, it seems conceptually wrong. The ONLY use-case I can imagine is when the type name is long, and you don't want to type it manually, or the abstractions went beyond your control, which again I don't think is a scalable approach.

This is definitely not applicable to every app, BUT that's a very clever way of solving UX problems with "face"- based animations and expressions, giving users feedback. At the same time, you do stuff in the background. I have seen this for the first time in the Airbnb apps, but only in 1-2 cases, and they use Lottie animations, not directly tied to UI events.

When I write the scraper, I literally can't write it to account for the API for every single website! BUT I can write how to parse HTML universally, so it is better to find a way to cache your website's HTML so you're not bombarded, rather than write an API and hope companies will spend time implementing it!

Ahh, this is great! Finally, I can use the `font-stretch` CSS property to make some text components more expressive.

This reminds me of my personal "prime number" grabber research https://github.com/tigranbs/prime-numbers I needed to create the unique graph nodes and assign prime numbers, and to make things efficient, I thought, why not just download the list of known prime numbers instead of generating them one by one. So I did and compiled everything with a single Go binary. Ehh, good old days with a nice feith in making "the best" crappy software out there.

And obviously, you need things fast, so you parallelize a bunch!

It is interesting that suddenly the Terminal UI became popular. I am super happy to see this kind of thing pop up.

Ah, that's the best way to spend ~10K

EV motorcycles are a huge struggle! I have been riding motorcycles pretty much my whole adult life, but after trying electric bikes a few times while in the EU, I felt they were like toys. Honestly, how can you ride a motorcycle that sounds like a kitchen blender? FYI: I understand they are more efficient and faster, but a motorcycle is not about efficiency; it's more about a hobby, fun. In the EU market, it is mostly deliveries because cities are built for them.

Yeah, then try adding more quotas to scale your usage; you will feel the pain! But, to be fair, it is way easier than the AWS Bedrock or Microsoft Azure!

The 2-bit-per-transistor ROM using four transistor sizes is wild. Were there other chips from this era experimenting with semi-analog storage, or was the 8087 unusually aggressive here?

Ah, so nobody is giving up on MCP, then; that's good. Standardization would be the key between providers.

Somehow it writes bad React code and misses to check linting prompts half the time. But surprisingly, the Python coding was great!