HN2new | past | comments | ask | show | jobs | submit | zaptheimpaler's commentslogin

The media organizations and people who pushed the pro-Israel narrative already understand all of this - it's not a failure, it was their intended goal.

I'm skeptical any public company is really going to have the strength to develop junior talent no matter how many experts say its important or what the long term consequences are. ShitCo A will slash headcount and see their stock go up 50%, investors & VCs at ShitCo B will ask why aren't we doing this and will soon follow. The same thing played out with all kinds of manufacturing industry jobs.

The track record in all industries for companies having well thought out plans to develop talent is pretty bad in the age of money. More likely they just fire the juniors, slowly lose seniors and pray for AGI to take over all coding. Maybe it does and they win, maybe it doesn't and they start panic hiring after 5 years.


Is this any different than pre-ai?

I didn't know about the long history of racism involving Elon's companies. But it seems Tesla had a problem discriminating against black workers since at least 2015:

"including slurs, nooses, swastikas, and threats found on equipment, in bathrooms, elevators, and even on new vehicles. The EEOC also charged Tesla with retaliating against employees who complained"

and has come up repeatedly since then, involving many workers and in different locations and newer factories. They still have a few lawsuits open against them from workers, shareholders, federal & state agencies.


Look at the massive and growing wealth & power inequality today, an age of aristocrats, then look at these AI fucks bragging about how AI will eliminate all white collar jobs. Obviously all of the gains are going to go to capital. You can already see LLMs are making programmers much more productive but it's actually causing lower salaries and job losses - so who's capturing the value of that increased productivity? Not workers..

Meanwhile US government is overtly corrupt, criminal morons, they certainly don't care or have any sort of plan to distribute the gains from this technology evenly. Scott Bessent is saying with a smirk on his face that the tariff refunds will not go to consumers [1]. These people actively hate you and laugh at your powerlessness. Hating AI is the right response because the current political system ensures 10% of the benefits will accrue to most people and 90% to the elites, the power imbalance gets even more extreme and it will lead to techno-feudalism (as it has in the past).

[1] https://finance.yahoo.com/news/bessent-says-tariff-refund-ul...


> Obviously all of the gains are going to go to capital.

Right now sota models requires a lot of iron.

It's possible that this will always be the case. But its is not a certainty!

We've seen software improvements shave orders of magnitude of compute requirements before. This could totally happen here. Iron could easily become stranded assets.

But that said, models have already become commodities, well somewhat. Is the value in running inference or applying it?

Today, we dare not use vibe coded libraries for mission critical things, HTML sanitization as an example.

But one day, who is to say the industry won't be disrupted by a vibe coded database with ~100% Oracle compatibility? Made by a nerd in a garage.

Established code bases is a moat today. It might not be in 5 years. Big tech won't be well positioned to take advantage, because trusting vibe coded crap is risky.

My point is mostly: the future is uncertain. Big established software companies might see their moat challenged by nerd in a garage running LLMs in the cloud.

What about the Adobe suite? AutoCAD? Office, etc. (To be fair, it's possible that software never was the moat).


> To be fair, it's possible that software never was the moat

This is the answer to all of your questions. Network effect and brand recognition sell Oracle, Adobe, office etc. Alternatives to all of them already exist, with either feature parity or close enough for most people.

The existing brands keep going because big companies and institutions don't pay for products vibe coded by some guy in a garage, they buy products that have paid support that they know will continue to exist for years.


> The existing brands keep going because big companies and institutions don't pay for products vibe coded...

But what about 5 years from now?

What when the menus have the same layout, compatibility with the legacy binary file format is near perfection.

Today, alternatives exists, but they are not polished the same way.


> But one day, who is to say the industry won't be disrupted by a vibe coded database with ~100% Oracle compatibility?

Based on the abysmal ability of LLMs to write code today, that's not likely to happen. One never knows. But I wouldn't put money on it.


Windows solution to this is exclusive fullscreen, which bypasses the compositor.

You can try Gamescope [1] from Valve, that's what Steam Deck uses - i think its a compositor designed to minimize latency but support the few things games need. Some compositors like KDE Plasma KWin support a direct scanout mode which is the same idea as windows' exclusive fullscreen. You might need to look for support for something similar in niri.

[1] https://wiki.archlinux.org/title/Gamescope


Thanks, I have tried gamescope but it kills the performance of games for me. All games have a lot of stuttering when I use it. It also didn't reduce the input latency. Same hardware is liquid smooth on Windows.

As far as I know niri enables direct scanout by default. It's an option you can disable if you want https://niri-wm.github.io/niri/Configuration%3A-Debug-Option.... I do not have this set which indicates direct scanout is enabled.

It's interesting because the latency is only when pressing keys on the keyboard. Mouse movement and button press latency feels as good as Windows, I can't perceive any delay. I tried 3 keyboards, it's all the same. I'm also not running anything like keyd or anything that intercepts keys. It's a vanilla Arch Linux system on both of the systems I tested.


Are you perhaps being bit by Linux's default 2s USB-autosuspend? I bump that to 30s (60s?) in my kernel command line arguments

It is set to 2 seconds based on `cat /sys/module/usbcore/parameters/autosuspend` but the input latency only happens in games. Outside of games it's fine. Also in game, if I continue to press keys faster than waiting 2 seconds, it still lags.

That makes it unlikely it's related to this auto suspend, especially since it only appears to happen when I use my 4k monitor, but I did set it to 30s just to rule it out and it made no difference. I brought it back to 2s afterwards.


You don't need exclusive fullscreen on Windows to bypass the compositor. Fullscreen borderless windows also bypass the compositor. And in newer Windows versions the compositor can be bypassed even in regular windows using hardware overlays.

Windows's desktop compositor DWM is actually very advanced, and I don't believe any Linux desktop compositor is anywhere close. It's one of the things I miss when leaving Windows.


I think we should stop making excuses for shitty practices. I can understand why they might do it, i can also see there are much better ways to deal with this situation.

Maybe the law should be changed then. The companies that have this level of disregard for security in 2026 are not going to change without either a good samaritan or a data breach.

He didn't have to crack the site. He could have reported up to that point.

We need a change in law but more to do with fining security breaches or requiring certification to run a site above X number of users.


Showing up without a PoC complicates things.

I understand why the author thought that way, but showing up with private data that the company is obligated to protect complicates things quite a lot more.

I've dealt with security issues a number of times over my career, and I'm genuinely unsure what my legal obligations would be in response to an email like this. He says the company has committed "multiple GDPR violations"; is there something I need to say in response to preserve any defenses the company may have or minimize the fines? What must I do to ensure that he does eventually delete the customer data? If I work with him before the data is deleted, or engage in joint debugging that gives him the opportunity to exfiltrate additional data, is there a risk that I could be liable for failing to protect the data from him?

There's really no option when getting an email like this other than immediately escalating to your lawyers and having them handle all further communication.


> is there something I need to say in response to preserve any defenses the company may have or minimize the fines?

Company should have SOPs for this.


It should, and that SOP is essentially always going to say something like "file a tracking ticket and immediately forward to legal for all further conversation". It sounds like the author really was just trying to be a helpful guy, but the typical person who emails a company about "multiple GDPR violations" is absolutely trying to get them in trouble, and a random developer with no comms training risks putting their foot in their mouth in legally consequential ways.

He downloaded data of multiple users

Yes, that’s the PoC.

Seemingly it could have been scoped tighter.

But complaining about the methodology your (successful, free, overdue) penetration test is wild.


Well done, defender of hill, protector of the mound.

You can lead a horse to water, as they say.

Suicidal horses who won’t drink pose little risk to other innocent horses!

Here is some of what happened during COVID, according to Patrick McKenzie (patio11) [1] :

----

I want to both be polite about the fact and be honest about it. We, the United States of America, through our elected representatives and through civil servants who represent our interests, committed monstrous crimes in 2021, which are against the laws, traditions, and constitution of the United States of America, including aggressively redlining the provision of life-saving medical care in a way which was designed to cause racially discriminatory outcomes with the provision of medical care.

Just throwing that out there as a statement. With that caveat, one of the things that we spent tens of millions of dollars on was that we want your consultancy to write a website which will enforce residency restrictions. A residency restriction is essentially, when we are under a supply constraint, there must be some method to decide which people get it, and some people don’t. We have, in our infinite wisdom as the government, decided that equity, equity, equity is one primary thing that we are focusing on. A thing that we think would be contrary to equity is allowing anyone who shows up at the clinic to receive the life-saving medication.

The thing that we are specifically worried about is relatively well-resourced people from advantaged demographics will use their superior access to transportation and information to travel to clinics which have the vaccine available and take that instead of that vaccine being used by someone in the local community who we intend the vaccine to go to. Therefore, to get an appointment to go to the vaccine, you will need to go to the county’s website, which is delivered by Accenture or similar, and prove to the website that you reside within one of the zip codes that we have allocated for those vaccine doses. Only then will you get the ticket, virtual or otherwise, which allows you to go to the pharmacy and get the vaccine. We spent tens of millions of dollars on that, targeting essentially a four-month window where we were acutely supply constrained. But we did not turn off residency restrictions on the websites after that four month window because we physically had no way to do that because that was not in the bid documents in some cases. ...

----

Just one of the many ways that rigid institutions that behave more like stupid robots than things capable of dynamic decision-making cause immense harm. This is not a rant against equity btw, only against insanity.

[1] https://alethios.substack.com/p/patrick-mckenzie-vaccinateca


This is real and there's no way to get these problems down to zero. However I do believe that the best first step is to make sure the government has more employees and fewer contractors. It will cost more year to year but the delivery will be much closer to what the constituents want and over time I would expect it to save money as well. With that said it's not a silver bullet as that group of people needs to be properly motivated, they still will need specialist help from consultancies, and there may be institutional capture anyway.

They likely wouldn’t even accept the money because it’s in gold bars, and they wouldn’t be able to prove its source.

The people doing the arresting have no ID and wear masks, arrest people without any evidence, throw them in detention centers and then deny them their legal right to a bond hearing and instead detain them indefinitely. Even someone like you should understand, police are not the judges, they can arrest someone but detaining them for a long period of time requires ascertaining their legal status and offering a chance for bond. The judges also overwhelmingly ruled the same thing, while ICE is directly disobeying their legal orders. If they were law enforcement, they would be following the law not breaking it.

https://news.bloomberglaw.com/litigation/ice-detainees-succe...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: