gobdovan

13 ms·

211.
by gobdovan 6mo ago
> They have CEO spouses that don't ask them to take out the trash or think about which yogurt to buy. From 'Curb your enthusiasm', I've learnt that that's actually the only thing they ever do.
212.
by gobdovan 6mo ago
One thing I'd highlight is that the mechanism the OP notices in all the actors is a low-cost way of reducing uncertainty. At each step, what does it cost to admit uncertainty or error vs what is gained from doing so? For a powerful per
213.
by gobdovan 6mo ago
You're misreading my point. I didn't recommend 'fail2ban' or claimed any machine without it is as good as compromised. I recommended removing the attack surface entirely by not exposing SSH to the public internet. The po
214.
by gobdovan 6mo ago
When you call LLVM IR a design failure, do you mean its semantic model (e.g., memory/UB), or its role as a cross-language contract? Is there a specific IR propert that prevents clean mapping from Oberon?
215.
by gobdovan 6mo ago
Yes, <1h was a weak root password. All attacks I've seen directly were always user error. The point is effectively removing attack surfaces rather than enhancing security in needlessly exposed internet-facing protocols.
216.
by gobdovan 6mo ago
I'd call it unnecessary exposure. Under both modern threat models and classic cybernetic models (check out law of requisite variety) removing as much surface attack area as possible is optimal. Especially disabling passwords in SSH is
217.
by gobdovan 6mo ago
No, it does not allow concurrent writes (with some exceptions if you get into it [0]). You should generally use it only if write serialisation is acceptable. Reads and writes are concurrent except for the commit stage of writes, which SQLit
218.
by gobdovan 6mo ago
Historical reliability and compatibility. They claimed they were S3 compatible, but they were requiring deprecated S3 SDKs, plus S3 advanced features are unimplemented (but at least they document it [0]). There was constant timeouts for obj
219.
by gobdovan 6mo ago
Yep, it literally is a one-file backup. And runtime it's so much faster for apps where write serialisation is acceptable.
220.
by gobdovan 6mo ago
shared also in peer comment: https://gist.github.com/ouatu-ro/5ca4abca26bd65630de3d4768fe...
221.
by gobdovan 6mo ago
Usually when there's "on a [low] $/mo" you'll hear basic advice. You'd be surprised to find out many folks are not aware of this!
222.
by gobdovan 6mo ago
Nice list! I'd say the SQLite with WAL is the biggest money saver mentioned. One note: you can absolutely use Python or Node just as well as Go. There's Hetzner that offers 4GB RAM, 10TB network (then 1$/TB egress), 2CPUs mac
223.
by gobdovan 6mo ago
https://gist.github.com/ouatu-ro/5ca4abca26bd65630de3d4768fe...
224.
by gobdovan 6mo ago
Quite a lot. And I'd say that I process more info by typing than by simply reading. I typed the first edition and got the printed second edition too after. I always searched videos of what he was exemplifying and found quite amazing ma
225.
by gobdovan 6mo ago
That's in the ballpark how big corps use open source strategically. They try to kill everyone value extraction moat at any other layer than the ones they dominate. So they commoditize their complement [0]. They don't care if you
226.
by gobdovan 6mo ago
I am saying this is exactly what's happening, but with more robust language. If you disallow Amazon, maybe there is a third party that offers our services to Amazon. So Amazon-the-string is not the bogeyman; the concern is the resale o
227.
by gobdovan 6mo ago
I have a few tricks for handling procrastination that are in this ballpark: 1. When I see myself wanting to procrastinate, I ask myself 'If I follow this feeling, will it increase my power (i.e. capacity/agency/utility) or de
228.
by gobdovan 6mo ago
The author calls it a 'joke' that Heroes are just unpaid Amazon employees, but reality doesn't become a joke just because it's funny. The asymmetry here is staggering. I find myself holding back private research because
229.
by gobdovan 6mo ago
Yeah, I'm talking more about a wrapper over the python data model (pyobject) rather than an MCP-style API for kernel interaction. I'm not proposing you abstract interactions under a rigid proxy, but that you can use proxy objects
230.
by gobdovan 6mo ago
Codex just picks it up. The surface is basically a guarded object model, so pandas/polars-style operations stay close to the APIs the model already knows. There's some extra-tricks but they're probably out of scope for an HN
231.
by gobdovan 6mo ago
You could wrap pyobject via a proxy that controls context and have AI have a go at it. You can customise that interface however you want, have a stable interface that does things like proxy.describe() proxy.list_attrs() proxy.get_attr(&quot
232.
by gobdovan 6mo ago
Language is a tool, you have to do what's best for your own goal. If you read Orwell, his message is not necessarily that complex language is worse at transmitting ideas, as he's actually arguing that complex language can hide the
233.
by gobdovan 6mo ago
It's at least Meta-relevant. Compression Represents Intelligence Linearly (Y Huang, 2024)
234.
by gobdovan 6mo ago
I don't see anything wrong that would disqualify your plan. But if the alternative is regex, and you're writing already in TypeScript, you may take a look at ts-morph [0]. TS has very good compiler APIs and that gets you somethin
235.
by gobdovan 6mo ago
The 99.9% is less impressive than you'd think, currently they're not even keeping the same program behaviour 0.1% of the time. They also mention AST in the pipeline, not CST, so I wouldn't expect source-preservation to be a d
236.
by gobdovan 6mo ago
No. JSIR is primarily for JS -> IR -> JS for analysis and source-to-source transformation. It's not a ready-made bridge for emitting other languages You could use it as an intermediate form in a JS->C# pipeline, but you still
237.
by gobdovan 6mo ago
I was imprecise, I was specifically thinking of already SSA-based tech. My broader point is that for SSA-based pipelines targeting Wasm, translation between SSA/graph IR and stack-based IR is largely mechanical and efficient. Whether a
238.
by gobdovan 6mo ago
I think the WASM world is a clear example that bridges the gap you're describing. You usually compile from SSA to WASM bytecode, and then immediately JIT (Cranelift) by reconstructing an SSA-like graph IR. If you look at the flow, it&#
239.
by gobdovan 7mo ago
I am struggling with finding a good model for desktop apps. The subscription model always seems to yield the most money, but I too dislike subscriptions. One-shot option seems attractive, but the desktop (MacOS at least) app market is actua
240.
by gobdovan 7mo ago
We solved the parasite problem and at the same time changed the ecology we were accustomed to. The irony of dynamic systems.

More ›