I think that the gallup poll is flawed because it does not explain what daylight saving versus standard time is. I just spoke to an educated grad student, who thought that we were in standard time right now. Because the…
That’s a bold claim to make about HNers. Au contraire, security companies have absolutely missed supply chain attacks. Example: https://snyk.io/blog/node-gyp-supply-chain-compromise-self-p... Before that we had…
It’s rational to feel much safer in the Java packages ecosystem, where pinned versions are the default and the norm, and packages cannot run any install-time scripts.
And that’s exactly why semantic versioning provides only an illusion of stability. This is also why ecosystems that don’t pin their versions such as floating versions that are the default in JavaScript ecosystems are so…
Delaying non-security updates has the benefit of not wasting a team’s time when something regresses and is fixed in a quick follow up patch. Having to report issues upstream is not free.
Don't store any secrets in your repo. Don't store them in env vars. Strong long passphrase on your SSH keys, stop using unencrypted SSH keys. Everything in a keychain. The practice of storing secrets in a .gitignore'd…
Was it Codex or the desktop ChatGPT agent?
Pi.dev requires some plugins to work well. Using Qwen3.6-27B/35B locally at Q8, I was quite frustrated with failed tool calls and tried many things. Ultimately this combo worked: 1. https://pi.dev/packages/pi-tool-guard…
#2, name matching valid government ID excludes trans people who have not yet legally changed their name. Same reason they can’t get a Meta Verified status, even if paying. Thanks technology for keeping things accessible…
Lock files were begrudgingly introduced after people who aren’t playing around with move fast and break things cried foul about dependencies being updated unexpectedly. The “semantic versioning” dogma and the illusion…
I asked Claude to set up a new NPM project and it configured the install task as “npm ci || npm install”, which is stupid. That was on Opus4.7 xhigh. When I pointed out that doing so defeats the purpose, it said “oh…
Never use “npm install”, only “npm ci”. Using “npm install” is a willing act to run fresh exploits.
Merge queues are not as frequently used… ~2000 PRs affected over 4 hours. I reckon that’s on the order of 10 commits per tenant. It’s a feature with low traction, probably because it creates more problems than it solves.
Kotlin’s closed-by-default design choice makes it worse than Java, and thus not strictly better than Java. It’s premature optimization, and a design-up-front-influenced paranoia/fear of any extension in not-designed-for…
A startup might have trouble with, and might not have enough automation for: - proving churned customer data was deleted completely and within the agreed-on period of time - - not enough to have a record - - auditors…
Tree shade means bird poop danger.
It’s impossible to install XCode without an Apple account. It’s only distributed through the Mac App Store, and downloads from Mac App Store require an Apple ID. And even XCode beta downloads are locked behind an Apple…
It’s because when placed inside the engine bay, the large wiring harness is shorter, which is not only cheaper, but also shorter wiring helps with the consistency of electrical timing and reduces noise.
Yes they do. They can tolerate engine bay heat, but not exhaust heat. They are usually shielded from getting soaked. Some Mazdas put the metal-cased engine computer in a plastic air box that feeds cold air from the…
> If it's so bad for gamblers, why don't they stop? Because harm does not guarantee control. When it becomes compulsive, it’s not a simple cost-benefit choice anymore. People can know it’s hurting them and still feel…
I disagree with the downvotes, but let me put it differently: if you don’t understand, have reviewed and be ready to own all of LLM output (the thoughtful part), then you aren’t owned the time to read them. If you…
Apple container CLI configures internal domains (`container system dns`) by adding an internal resolver and it worked for me when I specified an actual domain previously handled by external DNS and it showed up as a…
Your AWS backup snapshots must go one-way (append-only) to a separate AWS account, to which access is extremely limited and never has any automated tools connecting to with anything other than read access. I don’t think…
I’ve been using scroll back search for 15+ years with Terminal.app and iTerm2, and there’s no way that’s not the job of the terminal. You don’t know how good that is until you use it.
It’s a shame that version 1.2.x got abandoned and didn’t receive any important bug fixes. That has severely cut my trust into this project. It’s been over 4 months since the last 1.2.3 release, so the memory leak when…
I think that the gallup poll is flawed because it does not explain what daylight saving versus standard time is. I just spoke to an educated grad student, who thought that we were in standard time right now. Because the…
That’s a bold claim to make about HNers. Au contraire, security companies have absolutely missed supply chain attacks. Example: https://snyk.io/blog/node-gyp-supply-chain-compromise-self-p... Before that we had…
It’s rational to feel much safer in the Java packages ecosystem, where pinned versions are the default and the norm, and packages cannot run any install-time scripts.
And that’s exactly why semantic versioning provides only an illusion of stability. This is also why ecosystems that don’t pin their versions such as floating versions that are the default in JavaScript ecosystems are so…
Delaying non-security updates has the benefit of not wasting a team’s time when something regresses and is fixed in a quick follow up patch. Having to report issues upstream is not free.
Don't store any secrets in your repo. Don't store them in env vars. Strong long passphrase on your SSH keys, stop using unencrypted SSH keys. Everything in a keychain. The practice of storing secrets in a .gitignore'd…
Was it Codex or the desktop ChatGPT agent?
Pi.dev requires some plugins to work well. Using Qwen3.6-27B/35B locally at Q8, I was quite frustrated with failed tool calls and tried many things. Ultimately this combo worked: 1. https://pi.dev/packages/pi-tool-guard…
#2, name matching valid government ID excludes trans people who have not yet legally changed their name. Same reason they can’t get a Meta Verified status, even if paying. Thanks technology for keeping things accessible…
Lock files were begrudgingly introduced after people who aren’t playing around with move fast and break things cried foul about dependencies being updated unexpectedly. The “semantic versioning” dogma and the illusion…
I asked Claude to set up a new NPM project and it configured the install task as “npm ci || npm install”, which is stupid. That was on Opus4.7 xhigh. When I pointed out that doing so defeats the purpose, it said “oh…
Never use “npm install”, only “npm ci”. Using “npm install” is a willing act to run fresh exploits.
Merge queues are not as frequently used… ~2000 PRs affected over 4 hours. I reckon that’s on the order of 10 commits per tenant. It’s a feature with low traction, probably because it creates more problems than it solves.
Kotlin’s closed-by-default design choice makes it worse than Java, and thus not strictly better than Java. It’s premature optimization, and a design-up-front-influenced paranoia/fear of any extension in not-designed-for…
A startup might have trouble with, and might not have enough automation for: - proving churned customer data was deleted completely and within the agreed-on period of time - - not enough to have a record - - auditors…
Tree shade means bird poop danger.
It’s impossible to install XCode without an Apple account. It’s only distributed through the Mac App Store, and downloads from Mac App Store require an Apple ID. And even XCode beta downloads are locked behind an Apple…
It’s because when placed inside the engine bay, the large wiring harness is shorter, which is not only cheaper, but also shorter wiring helps with the consistency of electrical timing and reduces noise.
Yes they do. They can tolerate engine bay heat, but not exhaust heat. They are usually shielded from getting soaked. Some Mazdas put the metal-cased engine computer in a plastic air box that feeds cold air from the…
> If it's so bad for gamblers, why don't they stop? Because harm does not guarantee control. When it becomes compulsive, it’s not a simple cost-benefit choice anymore. People can know it’s hurting them and still feel…
I disagree with the downvotes, but let me put it differently: if you don’t understand, have reviewed and be ready to own all of LLM output (the thoughtful part), then you aren’t owned the time to read them. If you…
Apple container CLI configures internal domains (`container system dns`) by adding an internal resolver and it worked for me when I specified an actual domain previously handled by external DNS and it showed up as a…
Your AWS backup snapshots must go one-way (append-only) to a separate AWS account, to which access is extremely limited and never has any automated tools connecting to with anything other than read access. I don’t think…
I’ve been using scroll back search for 15+ years with Terminal.app and iTerm2, and there’s no way that’s not the job of the terminal. You don’t know how good that is until you use it.
It’s a shame that version 1.2.x got abandoned and didn’t receive any important bug fixes. That has severely cut my trust into this project. It’s been over 4 months since the last 1.2.3 release, so the memory leak when…