xyzzy123

8 ms·

91.
by xyzzy123 7mo ago
You're missing out on 10 years of real world feedback if you do this.
92.
by xyzzy123 7mo ago
This will not be a popular comment, but... A 24 hour wait like this can sometimes be the result of a security team not knowing what else to do. There are all sorts of weird threat models when you think hard about how devices are used, like
93.
by xyzzy123 7mo ago
Hi, companies over-hired. A problem at big companies is that staff create the need for more staff. You end up with lots of weird situations like departments creating work for each other that doesn't benefit the customer. Also more matu
94.
by xyzzy123 7mo ago
One issue is that there's X% (debatable) of people who can't work for reasons that are complex or hard to explain. For many, even if they are physically able, you kinda don't want them to. I mean, people who will create negat
95.
by xyzzy123 7mo ago
Iraq I will grant you, those sanctions were a travesty. Cuba bad too. In general, I don't find the argument that there were 38 million deaths from sanctions very convicing. That estimate is based on excess deaths and correlation. It is
96.
by xyzzy123 7mo ago
> Iran has weathered decades of sanctions, which is a fancy way of saying "we're going to starve you and deny your citizens basic medical care". The death toll for this is also likely in the millions. Hi, I think millions
97.
by xyzzy123 8mo ago
> the art of engineering is reducing the amount of code you've to write I would argue that it's _scaling_ software development? Making it so that you can create bigger programs: that accomodate more contributors, more requireme
98.
by xyzzy123 8mo ago
Why not push it all the way to the consumer? Why shouldn't you be liable if you buy a wrench, but actually the worker who made it was mistreated? That would make people think twice before buying products of unknown provenance and suppo
99.
by xyzzy123 8mo ago
So I wonder about sharable skills? Like if it's a problem that lots of people have, I find the base model knows about it already. But how to do things in your environment? The conventions your team follow? Super useful but not very s
100.
by xyzzy123 8mo ago
My point was meant to be a bit more subtle; that we all engage with abstractions of reality. Whenever I'm tempted to complain about people not knowing stuff, I pause and think about how little I really know. In my grandfather's pe
101.
by xyzzy123 8mo ago
Most people, when they turn the tap on, they don't know where the water comes from. Try asking someone "What is the physical principle that makes the water come out of the tap? How do they make it come out?" you might be surp
102.
by xyzzy123 8mo ago
I love to single thread but nobody else seems to. A typical situation would be making a sandwich for one kid while two others are trying to talk to me at the same time, each rising in volume to cut through the noise of the other. Partner ex
103.
by xyzzy123 8mo ago
Agree, worth analysing what is genuinely commodity. There are more elements to it though which can be sort of hard to explain. There are whole cultures and ways of thinking built around production. The children of engineers who worked on xy
104.
by xyzzy123 8mo ago
This is fine as long as the supply chain is, in fact, diversified.
105.
by xyzzy123 8mo ago
You become dependent on the supplier. The downside in general is that other countries lose production capacity in steel, heavy industry, semiconductors, machine tools etc - industries that took decades to build and can't be easily repl
106.
by xyzzy123 8mo ago
Sure, but do you want abundance of software, or scarcity? The price of having "star trek computers" is that people who work with computers have to adapt to the changes. Seems worth it?
107.
by xyzzy123 8mo ago
Even if code gets cheaper, running your own versions of things comes with significant downsides. Software exists as part of an ecosystem of related software, human communities, companies etc. Software benefits from network effects both at d
108.
by xyzzy123 8mo ago
Would be cool if you could donate to maintainer's favourite bot to get bugs fixed. Usually, getting stuff fixed on main is better than being forced to maintain a private fork.
109.
by xyzzy123 8mo ago
I think all of your points are valid and I can't really see any part if your argument that isn't at least directionally correct. But then I'm left wondering: Why is protectionism working for China?
110.
by xyzzy123 8mo ago
There are enthusiasts and early adopters using this in small businesses already. In terms of "practical niche" the use case I've seen so far is "n8n but you create workflows by talking to it" aka business glue to au
111.
by xyzzy123 8mo ago
Run Claude Code on the node and ask it to debug the issue...
112.
by xyzzy123 8mo ago
I'm not very familiar with the field on a practical basis. What parts of the job require judgement that is resistant to automation? What percentage of customers need that? If the hours an accountant spends on a customer go from 4 per m
113.
by xyzzy123 8mo ago
I guess the problem is that it seems like an opaque financial product. ETFs or crypto are not useful for "saving" but the risk profile is at least a known quantity. The return you quote is a numeric range but there's no corre
114.
by xyzzy123 8mo ago
> I'm not privy to device-wide bypasses of Play Integrity that ship with Trusted Execution Environment (which is pretty much all ARM based Androids), Secure Element, and/or Hardware Root of Trust, but I'd appreciate if you
115.
by xyzzy123 8mo ago
If you work on mobile apps you will notice that full attestation is too slow to put in the login path. [This might be better than it used to be, now in 2026]. I don't think a good security engineer would rely on atty as "front lin
116.
by xyzzy123 8mo ago
An important security measure for who, though? The servers at the bank should "never trust the client" in case the attestation is bypassed or compromised, which is always a risk at scale. If it's an important safety measure _
117.
by xyzzy123 8mo ago
Org processes have not changed. Lots of the devs I know are enjoying the speedup on mundane work, consuming it as a temporary lifestyle surplus until everything else catches up. You can't saw faster than the wood arrives. Also the layo
118.
by xyzzy123 9mo ago
It seems like the best way the humans could compete is to be a bit more flexible on interpretations than a fully compliant AI would be allowed to be. This applies all the way from small to very large businesses. AI for this stuff is sort of
119.
by xyzzy123 9mo ago
Agreed on all points. Local loops are faster and safer wherever possible. But particularly for devops / systems focused work, you lose too much "test fidelity" if you're not integrating against real services / cloud
120.
by xyzzy123 9mo ago
Many places have "dev", "test" "prod"... but IMHO you need "sandpit" as well. From an ops point of view as orgs get big enough, dev wraps around to being prod-like... in the sense that it has the pro

More ›