HN user

zeroxfe

3,249 karma

i am jack's cold sweat

Posts30
Comments598
View on HN
github.com 5mo ago

Show HN: RAGmail – analyze and query your life from your email history

zeroxfe
2pts0
github.com 1y ago

Show HN: Hype – a Rust Web Framework

zeroxfe
3pts0
0xfe.blogspot.com 2y ago

The Firewall Guy

zeroxfe
2pts0
karpathy.github.io 2y ago

Karpathy: A from-scratch tour of Bitcoin in Python (2021)

zeroxfe
3pts0
news.ycombinator.com 3y ago

Ask HN: How do you find high quality mobile games?

zeroxfe
113pts115
www.youtube.com 3y ago

EP000: Operation Aurora – When China Attacked Google

zeroxfe
2pts1
pitchy.ninja 5y ago

Show HN: Improve your singing with real-time visual feedback

zeroxfe
1pts0
hbr.org 5y ago

Building a transparent supply chain with blockchains

zeroxfe
4pts0
twitter.com 5y ago

The most terrifying fact about blockchains is rogue AIs you can't switch off

zeroxfe
14pts36
www.vexflow.com 6y ago

VexTab Tutorial: Add guitar tabs to your web pages

zeroxfe
1pts0
github.com 6y ago

Show HN: VexFlow has a new font stack, and supports W3C SMuFL

zeroxfe
1pts0
0xfe.blogspot.com 6y ago

Generating Spectrograms with Neural Networks

zeroxfe
1pts0
0xfe.blogspot.com 6y ago

Time Frequency Duality

zeroxfe
2pts2
0xfe.blogspot.com 6y ago

Pitch Detection with Convolutional Networks

zeroxfe
83pts27
0xfe.blogspot.com 6y ago

K-Means Clustering and Art

zeroxfe
4pts0
0xfe.blogspot.com 6y ago

No Servers, Just Buckets: Hosting Static Websites on the Cloud

zeroxfe
2pts0
vexflow.com 6y ago

Show HN: VexFlow – JavaScript Music Notation and Guitar Tablature

zeroxfe
8pts1
pitchy.ninja 6y ago

Show HN: Pitchy Ninja – a web-based voice and ear trainer with realtime feedback

zeroxfe
1pts0
blog.quid.works 7y ago

Building a Reliable Serverless Application in a Weekend

zeroxfe
6pts0
github.com 7y ago

Show HN: Library to render guitar chords in the browser

zeroxfe
3pts0
github.com 7y ago

Show HN: Pennywall is a donation-wall / tip-jar / paywall for sharing your links

zeroxfe
4pts1
quid.works 7y ago

Show HN: Quid – try micropayments instead of ads or subscriptions

zeroxfe
64pts52
blog.kraken.com 8y ago

On Tether: Journalists Defy Logic, Raising Red Flags

zeroxfe
2pts0
github.com 8y ago

What is Stellar?

zeroxfe
2pts0
github.com 8y ago

Show HN: Hacking Stellar (draft)

zeroxfe
4pts2
keybase.io 8y ago

Keybase is now writing to the Bitcoin blockchain

zeroxfe
2pts0
0xfe.blogspot.com 9y ago

Scheduling on SMP Hardware (2007)

zeroxfe
1pts0
www.megaprocessor.com 10y ago

Building a CPU one transistor at a time

zeroxfe
10pts1
www.vexflow.com 10y ago

Show HN: VexFlow, a pure-JavaScript music notation and guitar tab renderer

zeroxfe
13pts3
vexflow.com 12y ago

Show HN: An entirely browser-based audio time stretcher (Chrome)

zeroxfe
1pts0

I'm in that camp -- I have the max-tier subscription to pretty much all the services, and for now Codex seems to win. Primarily because 1) long horizon development tasks are much more reliable with codex, and 2) OpenAI is far more generous with the token limits.

Gemini seems to be the worst of the three, and some open-weight models are not too bad (like Kimi k2.5). Cursor is still pretty good, and copilot just really really sucks.

I've done this kind of thing many times with codex and sqlite, and it works very well. It's one prompt that looks something like this:

- inspect and understand the downloaded data in directory /path/..., then come up with an sqlite data model for doing detailed analytics and ingest everything into an sqlite db in data.sqlite, and document the model in model.md.

Then you can query the database adhoc pretty easily with codex prompts (and also generate PDF graphs as needed.)

I typically use the highest reasoning level for the initial prompt, and as I get deeper into the data, continuously improve on the model, indexes, etc., and just have codex handle any data migration.

Expiries are a defence-in-depth that exist primarily for crypt hygiene, for example to protect from compromised keys. If the private key material is well protected, the risk is very low.

However, an org (particularaly a .mil) not renewing its TLS certs screams of extreme incompetence (which is exactly what expiries are meant to protect you from.)

Also MCP is very obviously dead, as any of us doing heavy agentic coding know.

As someone that does heavy agentic coding (using basically all the tools), this is so far from the truth. People claiming this have probably never worked in large enterprise environments where things like authentication, RBAC, rate limiting, abuse detection, centralized management/updates/ops, etc. are a huge part of the development and deployment workflow.

In these situations you can't just use skills and cli tools without a gigantic amount of retooling and increased operational and security complexity. MCP is really useful here, and allows centralized eng and ops teams to manage their services in a way that aligns with the organizations overall posture, policies, and infrastructure.

Google is so far behind agentic cli coding. Gemini CLI is awful.

This part I totally agree. It's really hard to express how bad it is (and it's really disappointing.)

At some point you need to treat people as adults, which includes letting them make very bad decisions if they insist on doing so.

The world does not consist of all rational actors, and this opens the door to all kinds of exploitation. The attacks today are very sophisticated, and I don't trust my 80-yr old dad to be able to detect them, nor many of my non-tech-savvy friends.

any more than it would be acceptable for a bank to tell an alcoholic "we aren't going to let you withdraw your money because we know you're just spending it at the liquor store".

This is a false equivalence.

usual "true random number" bullshit

What's bullshit about it? This is how TRNGs in security enclaves work. They collect entropy from the environment, and use that to continuously reseed a PRNG, which generates bits.

If you're talking "true" in the philosophical sense, that doesn't exist -- the whole concept of randomness relies on an oracle.

GPT-5.3-Codex 6 months ago

it's a waste of time to steer them

It's not a waste of time, it's a responsibility. All things need steering, even humans -- there's only so much precision that can be extrapolated from prompts, and as the tasks get bigger, small deviations can turn into very large mistakes.

There's a balance to strike between micro-management and no steering at all.

I've used both gVisor and microvms for this (at very large scales), and there are various tradeoffs between the two.

The huge gVisor drawback is that it __drastically_ slows down applications (despite startup time being faster.)

For agents, the startup time latency is less of an issue than the runtime cost, so microvms perform a lot better. If you're doing this in kube, then there's a bunch of other challenges to deal with if you want standard k8s features, but if you're just looking for isolated sandboxes for agents, microvms work really well.

It's waaay better than GLM 4.7 (which was the open model I was using earlier)! Kimi was able to quickly and smoothly finish some very complex tasks that GLM completely choked at.

It seems to work with OpenCode, but I can't tell exactly what's going on -- I was super impressed when OpenCode presented me with a UI to switch the view between different sub-agents. I don't know if OpenCode is aware of the capability, or the model is really good at telling the harness how to spawn sub-agents or execute parallel tool calls.

That tends to work quite poorly because Claude Code does not use standard completions APIs. I tried it with Kimi, using litellm[proxy], and it failed in too many places.

I've been using this model (as a coding agent) for the past few days, and it's the first time I've felt that an open source model really competes with the big labs. So far it's been able to handle most things I've thrown at it. I'm almost hesitant to say that this is as good as Opus.

"Economy" doesn't necessarily mean "monetization" -- there are lots of parallel and competing economies that exist, and that we actively engage in (reputation, energy, time, goodwill, etc.)

Money turns out to be the most fungible of these, since it can be (more or less) traded for the others.

Right now, there are a bunch of economies being bootstrapped, and the bots will eventually figure out that they need some kind of fungibility. And it's quite possible that they'll find cryptocurrencies as the path of least resistance.

TBH, that's pretty much the stack I'd pick if I were building anything new by hand. If you look at the site, there's a lot going on and Next + React + Tailwind does not seem so crazy.

These are all quite reliable well-understood components, and far from "chasing trends" IMO.

The last time I was there, there were many layers of encap, including MPLS, GRE, PSP, with very tightly managed MTU. Traffic engineering was mostly SDN-managed L3, but holy hell was it complex. Considering that Google (at the time) carried more traffic than the rest of the Internet combined, maybe it was worth it.

I think that the wax and wane of confidence is a natural (and healthy) cycle to preserve.

You start knowing nothing, and have no confidence, then learn stuff and your confidence builds, then you capitalize on that (learning x confidence) by doing productive things, then you hit barriers that create confusion and break down your confidence, at which point you realize you knew nothing and start learning like a beginner again.

Unhealthy confidence does not have this pattern, whether it's low or high. Even "medium" confidence, IMO, signals some kind of rut that one is stuck in, which tends to stifle creativity.

And, you as the client can verify whether it works

How do you do that? Cookies are typically opaque (encrypted or hashed) bags of bits.