frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Learn Lil in 10 Minutes

https://beyondloom.com/decker/learnlil.html
1•tosh•12s ago•0 comments

FSFE reports trouble with payment provider

https://lwn.net/Articles/1063287/
1•t-3•48s ago•0 comments

25 Years of Eggs

https://www.john-rush.com/posts/eggs-25-years-20260219.html
1•avyfain•58s ago•0 comments

Meta will shut down VR Horizon Worlds access June 15

https://www.engadget.com/ar-vr/meta-will-shut-down-vr-horizon-worlds-access-in-june-222028919.html
1•bookofjoe•1m ago•0 comments

CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root

https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-f...
2•askl•1m ago•0 comments

Ask HN: How do you handle payments for AI agents?

1•bahaghazghazi•1m ago•0 comments

Fuck It, I'm European

https://cdn.shopify.com/s/files/1/0945/2329/4031/files/12F_Fuck_It_I_m_European.pdf?v=1771760064
1•doener•1m ago•0 comments

Does technology make people touch each other less? (2015)

https://www.bbc.com/news/magazine-31026410
1•simonebrunozzi•2m ago•0 comments

Show HN: Loom, a Component Framework for Go

https://loomui.dev/blog/introducing-loom/
1•AnatoleLucet•2m ago•0 comments

Show HN: SentrySearch – Semantic search over dashcam footage

https://github.com/ssrajadh/sentrysearch
1•sohamrj•2m ago•0 comments

Beam Metrics in ClickHouse

https://andrealeopardi.com/posts/beam-metrics-in-clickhouse/
2•whatyouhide•2m ago•0 comments

The Rise of Fake Casio Scientific Calculators

https://hackaday.com/2025/12/29/the-rise-of-fake-casio-scientific-calculators/
2•gaws•2m ago•0 comments

Building a Pipeline for Agentic Malware Analysis

https://synthesis.to/2026/03/18/agentic_malware_analysis.html
2•oneron•3m ago•0 comments

Show HN: AgentPay – Let AI agents pay for APIs autonomously

2•bahaghazghazi•3m ago•0 comments

Ask HN: Are MiniMax Models Scams?

1•XCSme•3m ago•0 comments

The Last IT Guy

https://suthakamal.substack.com/p/the-last-it-guy
1•suthakamal•4m ago•1 comments

Qianfan-OCR – 4B open-source VLM replacing multi-stage OCR pipelines

https://huggingface.co/baidu/Qianfan-OCR
1•dongdaxiang•5m ago•0 comments

Startup CEO Gökçe Güven, the Founder and CEO of Kalder Inc. Charged with Fraud

https://www.justice.gov/usao-sdny/pr/startup-ceo-charged-fraud
2•randycupertino•5m ago•1 comments

AI set to map risks of future climate disasters

https://www.nature.com/articles/d41586-026-00835-y
1•Brajeshwar•5m ago•0 comments

Show HN: DealCred – Verified Reviews for Real Estate Deals

https://dealcred.com/
1•KerryJones•6m ago•0 comments

ICO Enforcement Actions: Public Bodies Get Reprimands, Companies Get Fines

https://ciphercue.com/blog/ico-enforcement-two-tier-system
1•adulion•7m ago•0 comments

Show HN: Birdcage – Secure remote access for personal AI

https://github.com/vhscom/birdcage
1•vhsdev•8m ago•1 comments

Is X.com currently degraded?

https://x.com/home
1•novateg•11m ago•3 comments

Accessing Hardware in Rust

https://ferrous-systems.com/blog/hardware-access-rust/
2•jandeboevrie•11m ago•0 comments

Apple pushing back on 'vibe coding' iPhone apps

https://9to5mac.com/2026/03/18/apple-pushing-back-on-vibe-coding-iphone-apps-developers-say/
4•gennarro•12m ago•0 comments

Claude Code reverse-engineered itself. Two subagents refused. It called them shy

https://www.skelpo.com/blog/claude-code-reverse-engineering
2•amlug•13m ago•1 comments

Show HN: BlacksmithAI – AI‑Assisted Penetration Testing Framework (Beta, Free)

https://bs.kahanlabs.com
1•yohannesgk•13m ago•0 comments

Nvidia NemoClaw

https://github.com/NVIDIA/NemoClaw
2•hmokiguess•13m ago•0 comments

Snowflake AI Escapes Sandbox and Executes Malware

https://www.promptarmor.com/resources/snowflake-ai-escapes-sandbox-and-executes-malware
2•ozgune•14m ago•0 comments

Show HN: PixelSwift – Image compression that never uploads your files

https://pixelswift.site
1•zhangshuaikang•16m ago•1 comments
Open in hackernews

I asked Gemini for a script to move files to Cloudflare R2. It deleted them

https://twitter.com/levelsio/status/1921974501257912563
6•bundie•10mo ago

Comments

qwertox•10mo ago
Rule #1: Always put deletions behind a flag which is disabled for the first couple of test runs.
turtleyacht•10mo ago
It was truncating filenames, so /pics/1003-46.png overwrote /pics/1003-45.png because both were renamed /pics/1003-.png, or something like that.
qwertox•10mo ago
Truncating file names for the target. Then it proceeded to delete the source file. "Successfully deleted local file: ..."

I mean, look at the printout. It shows that it created the remote file with the truncated filename, then deletes the local file with the correct filename.

turtleyacht•10mo ago
Oh, I see. Having a flag to skip deletion during test runs is a good rule then.
rvz•10mo ago
Recently there was a story about an updater causing a $8,000 bill because there was a lack of basic automated tests to catch the issue. [0]

The big lesson here is that you should actually test the code you write and also write automated tests to check any code generated by an LLM that the code is correct in what it does.

It is also useless to ask another AI to check for mistakes created by another LLM. As you can see in the post, both of them failed to catch the issue.

This why I don't take this hype around 'vibe-coding' seriously since not only it isn't software engineering, it promotes low quality and carelessness over basic testing and dismisses in checking that the software / script works as expected.

Turning $70 problems found in development into $700,000+ costs in production.

There are no more excuses in not adding tests.

[0] https://news.ycombinator.com/item?id=43829006

victorbjorklund•10mo ago
Who runs such an AI generated script without checking the code first?
qwertox•10mo ago
To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

It turns 10 lines of code which is perfectly fine to reason about into 100 lines of unreadable code full of comments and exception handling.

weatherlite•10mo ago
Right so lets just always run the code as is ?
qwertox•10mo ago
No. Not at all. I've settled to discussing my code with Gemini. That way it works very well. I explicitly say "Comment on my code and discuss it" or "Let's discuss code for a script doing this and that. Generate me an outline and let's see where this leads. Don't put comments in the code, nor exception handling, we're just discussing it".

Or you create elaborate System Instructions, since it adheres to them pretty well.

But out-of-the-box, Gemini's coding abilities are unusable due to the verbosity.

I've even gone so far to tell it that it must understand that I am just a human and have limited bandwidth in my brain, so it should write code which is easy to reason about, that this is more important than having it handle every possible exception or adding multiline comments.

rsynnott•10mo ago
> To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

In which case, it should simply be considered unusable. Like, the sensible response to "tool is so inadequate that there is no reasonable way to make sure its output is safe" is to _not use that tool_.

rsynnott•10mo ago
In which Roko's Basilisk fires a warning shot.
jethronethro•10mo ago
This is why you test code or a script before running it for real. Live and learn, I guess ...