frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Ask HN: How do you prevent PII leaks in multi-tenant systems?

1•Securelytixdev•2m ago•0 comments

The space shuttle Discovery, the S in Discovery is upside down

https://www.theautopian.com/a-typography-geek-pointed-out-something-about-the-space-shuttle-disco...
1•mauvehaus•4m ago•0 comments

Musl Libc: integer overflows in regcomp can lead to out-of-bounds heap writes

https://www.openwall.com/lists/oss-security/2026/10/21/18
1•acossta•5m ago•0 comments

Every Time I Hire a Linguist, Inference Costs Go Down

https://arxiv.org/abs/2607.25335
1•surprisetalk•5m ago•0 comments

Show HN: Whybook, tackling the gap between AI notebooks and human understanding

https://whybook.dev/
1•redsquirrel12•6m ago•0 comments

Razer Ava

https://www.razer.com/razer-ava
1•Bishonen88•6m ago•1 comments

'Pure arrogance': anger in Finland as Google illegally fells 250k trees

https://www.theguardian.com/environment/ng-interactive/2026/oct/22/finland-google-felling-trees-d...
1•Symbiote•8m ago•0 comments

Most Americans want to halt all data center construction

https://www.washingtonpost.com/technology/2026/10/21/poll-finds-most-americans-disapprove-how-tru...
2•cdrnsf•11m ago•1 comments

Critical Fortinet Security Release

https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-mu...
2•TechTechTech•14m ago•0 comments

China Moves to Lock Its Own Top AI and Chip Designs Behind Export Controls

https://techpresso.co/blog/china-ai-export-controls-models-chip-designs
1•messpoiun•14m ago•0 comments

ZXC – Lossless Compression Built for Ultra-Fast Decode

https://github.com/hellobertrand/zxc/blob/main/README.md
1•chmike•14m ago•0 comments

Show HN: agent-marketplace

https://www.adyen.com/knowledge-hub/agent-marketplace
3•AlexanderGrooff•17m ago•0 comments

Politico and Telegraph owner pitched deal to buy European arm of TikTok

https://www.ft.com/content/171220b9-8d8e-4d82-a866-f9aaf258e0fb
1•alephnerd•18m ago•0 comments

Unitree Introducing: H2-X Kung Fu Legend Guardian

https://twitter.com/UnitreeRobotics/status/2112819774573179175
1•ksec•20m ago•0 comments

Replacing PyTorch with Julia and Reactant: One Year In

https://csvance.dev/posts/2026-10-22-reactant-end-to-end/
1•csvance•21m ago•1 comments

eMudhra 1FA OTP Login Bypass

https://mastodon.catgirl.cloud/@49016/117475921584308861
4•majorchord•22m ago•0 comments

Why your Gmail open rate is 30-40% too high, and how to check your own numbers

https://pay.trytoolboxpro.com/blog/why-gmail-open-rates-are-inflated
1•hyehugh•22m ago•0 comments

ASGC Games Industry Layoffs Tracker

https://layoffs.asgc.gg/
2•pjmlp•23m ago•0 comments

Tablesample Picks Rows

https://boringsql.com/posts/tablesample/
1•surprisetalk•25m ago•0 comments

State of IaaS and Compute 2026: market benchmark and cost analysis

https://cloudcompare.dev/reports/state-of-iaas-and-compute-2026-market-benchmark-and-cost-analysis
1•atmeszaros•25m ago•0 comments

1 in 10 members of Congress traded stocks in companies their committees oversee

https://www.kadoa.com/congress/insights/committee-trades
1•hubraumhugo•25m ago•0 comments

Trump Asked Google to Rename Atlantic Ocean 'Trump Ocean'

https://www.newsweek.com/trump-asked-google-rename-atlantic-trump-ocean-12603389
7•TrackerFF•27m ago•0 comments

The New Big Ball of Mud: Why Agentic AI Systems Turn Fragile

https://www.nngroup.com/articles/big-ball-of-mud-ai/
3•TonyAlicea10•30m ago•0 comments

Diplomatic Ways to Critique AI Slop

https://www.seascapemodels.org/posts/2026-10-20-diplomatic-critique-of-ai-slop/
1•sebg•32m ago•0 comments

Fun and useful ideas/mini-projects to build with Claude

https://araujo.zip/blog/things-i-built-with-claude
2•pedrospective•33m ago•0 comments

Musk ordered Starlink slowdown in Ukraine, then blamed it on Trump

https://arstechnica.com/tech-policy/2026/10/report-says-musk-not-trump-ordered-starlink-throttlin...
6•AliCollins•33m ago•0 comments

10 Most Expensive States to Start a Business (2027)

https://www.northwestregisteredagent.com/start-a-business/expensive-states-for-startups
1•hwj•34m ago•0 comments

Practical Compiler Construction, 64-Bit Edition

http://t3x.org/reload64/
4•nils-m-holm•34m ago•0 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitatio...
17•cubefox•34m ago•1 comments

"Flying Tesla is just another Lie" [TopCars TV] [video]

https://www.youtube.com/watch?v=SY6OhPs3ltM
3•Kevin_Flynn•35m ago•0 comments
Open in hackernews

I asked Gemini for a script to move files to Cloudflare R2. It deleted them

https://twitter.com/levelsio/status/1921974501257912563
6•bundie•1y ago

Comments

qwertox•1y ago
Rule #1: Always put deletions behind a flag which is disabled for the first couple of test runs.
turtleyacht•1y ago
It was truncating filenames, so /pics/1003-46.png overwrote /pics/1003-45.png because both were renamed /pics/1003-.png, or something like that.
qwertox•1y ago
Truncating file names for the target. Then it proceeded to delete the source file. "Successfully deleted local file: ..."

I mean, look at the printout. It shows that it created the remote file with the truncated filename, then deletes the local file with the correct filename.

turtleyacht•1y ago
Oh, I see. Having a flag to skip deletion during test runs is a good rule then.
rvz•1y ago
Recently there was a story about an updater causing a $8,000 bill because there was a lack of basic automated tests to catch the issue. [0]

The big lesson here is that you should actually test the code you write and also write automated tests to check any code generated by an LLM that the code is correct in what it does.

It is also useless to ask another AI to check for mistakes created by another LLM. As you can see in the post, both of them failed to catch the issue.

This why I don't take this hype around 'vibe-coding' seriously since not only it isn't software engineering, it promotes low quality and carelessness over basic testing and dismisses in checking that the software / script works as expected.

Turning $70 problems found in development into $700,000+ costs in production.

There are no more excuses in not adding tests.

[0] https://news.ycombinator.com/item?id=43829006

victorbjorklund•1y ago
Who runs such an AI generated script without checking the code first?
qwertox•1y ago
To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

It turns 10 lines of code which is perfectly fine to reason about into 100 lines of unreadable code full of comments and exception handling.

weatherlite•1y ago
Right so lets just always run the code as is ?
qwertox•1y ago
No. Not at all. I've settled to discussing my code with Gemini. That way it works very well. I explicitly say "Comment on my code and discuss it" or "Let's discuss code for a script doing this and that. Generate me an outline and let's see where this leads. Don't put comments in the code, nor exception handling, we're just discussing it".

Or you create elaborate System Instructions, since it adheres to them pretty well.

But out-of-the-box, Gemini's coding abilities are unusable due to the verbosity.

I've even gone so far to tell it that it must understand that I am just a human and have limited bandwidth in my brain, so it should write code which is easy to reason about, that this is more important than having it handle every possible exception or adding multiline comments.

rsynnott•1y ago
> To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

In which case, it should simply be considered unusable. Like, the sensible response to "tool is so inadequate that there is no reasonable way to make sure its output is safe" is to _not use that tool_.

rsynnott•1y ago
In which Roko's Basilisk fires a warning shot.
jethronethro•1y ago
This is why you test code or a script before running it for real. Live and learn, I guess ...