Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
werrett
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
by
werrett
25d ago
> Canadian negotiators also hoped to achieve some relief on softwood lumber tariffs that go back decades and were augmented with additional tariffs from Mr. Trump. https://www.nytimes.com/2026/08/21/world&#
2.
▲
by
werrett
2mo ago
Oh cool. This is from the folks behind story time chess. https://storytimechess.com/ I can thoroughly recommend. I’ve purchased it for my (then) 4 year old and it’s definitely been a great way for us to both get better at t
3.
▲
by
werrett
3mo ago
> Frontier AI models, like airplanes, should be required to go through technical testing and auditing, and their release should be blocked or reversed as a threat to public safety if they do not meet high standards of safety Amodei. June
4.
▲
by
werrett
3mo ago
And the just released “Palaces of The Crow” by Ray Nayler. I just finished it — really moving but also a brutal read in parts (c.f. because of what humans will do to each other not crows) https://www.goodreads.com/book/
5.
▲
by
werrett
4mo ago
c.f. Linear for Agents https://linear.app/agents
6.
▲
by
werrett
5mo ago
Yes, let’s pay down the deficit by cutting funding to the sciences. While the latest war is running at ~1 billion a day (we’re in day 48 btw). https://iran-cost-ticker.com/
7.
▲
by
werrett
7mo ago
Yawp. T’was Strava. https://www.theguardian.com/world/2018/jan/28/fitness-tracki...
8.
▲
by
werrett
1y ago
There’s Zenitizer by an indie dev https://apps.apple.com/us/app/meditation-timer-zenitizer/id6...
9.
▲
by
werrett
1y ago
While appalling I don’t think you would find it 'crushing', even ignoring the jibe about expat conclaves. Costa Rica’s 17 in 100k is ~2.5 times bigger than the US’ 6 in 100k people killed by homicide. Thanks to gun crime, the US’
10.
▲
by
werrett
1y ago
You guys are tripping. EULAs have had anti-competition, anti-benchmarking, anti-reverse engineering and anti-disparagement clauses since the late 90s. These unknown companies called Microsoft, Oracle, Salesforce, Apple, Adobe, … et al have
11.
▲
by
werrett
1y ago
> something being a liability and something having upkeep costs are not the same thing. What would your definition of /liability/ be then? 'An ongoing commitment to pay future costs' is a pretty good one.
12.
▲
by
werrett
1y ago
At least one person has been subject to secondary screening and ultimately denied entry on the accusation that they had two phones. > I thought I was just going to be given my passport and sent on my way, or maybe asked a couple of quest
13.
▲
by
werrett
1y ago
This is the ultimate nihilistic take on security. Yes, 'cyber' security has devolved to box checking and cargo culting in many orgs. But what's your counter on trying to fix the problems that every tech stack or new SaaS prod
14.
▲
by
werrett
1y ago
I’m a fellow cyclist in SF and can only wholeheartedly second this. To add some extra anxiety, I’m usually riding a cargo bike, ferrying a child to or from daycare. I still remember the first time I went through a four-way stop intersection
15.
▲
by
werrett
1y ago
I've got conflicted feels about Tailscale. I love their product and a bunch of the people I know use their free tier, including myself. But their enterprise strategy destroys their good will. I can only assume it's focused on kill
16.
▲
by
werrett
1y ago
I doubt it’s a real threat but it would be a country that would happily unsubscribe from US export bans. So Israel or Singapore would be two good options for the chip industry. South Korea or Switzerland you could argue for but are probably
17.
▲
by
werrett
1y ago
As well as being disingenuous your whole argument is beside the point. ASML isn’t threatening to move to the US. The current administration has created day light between the US and EU governments and ASML is using this leverage to try and g
18.
▲
by
werrett
1y ago
Did you even read the article? ASML is chaffing against American-led export regulations. The Trump government is still very keen on restricting China’s ability to make cutting edge chips. The threat to move is probably empty. But it’s not a
19.
▲
by
werrett
1y ago
Here ya go: King Stingray does Coldplays's 'Yellow' https://youtu.be/sr3iI8gg2fo Denzel Curry does Rage against the Machine's 'Bulls on Parade' https://youtu.be/ZY4ywyFXdik
20.
▲
by
werrett
2y ago
Yes. It was probably a maintainer's creds being compromised. The [malicious commit is masquerading as a commit from Renovate]( https://github.com/tj-actions/changed-files/commit/0e58ed867... )(( https:
21.
▲
by
werrett
2y ago
I mean maybe! But only if you've removed all of the usage of this compromised `tj-actions/changedfiles` action, across all your repos and their branches. Otherwise, if you continue to use it and it will run anytime there has been
22.
▲
by
werrett
2y ago
You can pin GitHub Actions to specific versions or specific commits. But note you can change version tags arbitrarily. In this specific case, the bad actor changes all of the version tags to point to their malicious commit: https:/&#x
23.
▲
by
werrett
2y ago
No idea. But they didn't do a great job -- they broke the action, which caused build failures that people were going to notice. The malicious commit only landed at 09:57 PDT today (March 14) in one specific action (out of a number that
24.
▲
by
werrett
2y ago
Only commit hashes are safe. In this case the bad actor changed all of the version tags to point to their malicious commit. See https://github.com/tj-actions/changed-files/tags All the tags point to commit `^0e58e
25.
▲
by
werrett
2y ago
Exactly. And that's what happened here -- the bad actor changed all of those version tags to point to their malicious commit. See https://github.com/tj-actions/changed-files/tags All the tags point to commit
26.
▲
by
werrett
2y ago
Not to go too much on an AusPol tangent, LNP Nuclear stuff is more about delaying the green-power transition. It keeps coal / gas power around for a nuclear future that is decades away at best (and never more likely). It’s a sop to the
27.
▲
by
werrett
2y ago
https://help.nextdns.io/t/x2hmvas/what-is-dns-over-tls-dot-d... > NextDNS supports all 4 protocols. See the setup tab for more information on how to use them.
28.
▲
by
werrett
2y ago
This is the exact opposite of what you should do. More disenfranchisement means more focus on rage bait / single issues that will rile up your side and juice your participation a little more (see ‘guns’, ‘pro-life’, ‘her emails’, et al
29.
▲
by
werrett
2y ago
Jabber/Xmpp? Is that a joke? Not to be rude, but surely the ‘club’ bit is the key part of a ‘book club.’ Most companies with more than a handful of people have, or would be interested in having, a book clubs. In tech forward shops they
30.
▲
by
werrett
2y ago
Out of interest -- Why put PHI in your SCM? If you're just wrangling code but not actual data SaaS should be kosher.
More ›