frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Postgres 19 Repack: Built-In Table Bloat Cleanup

https://www.snowflake.com/en/blog/engineering/postgres-19-repack-table-bloat/
1•plaur782•1m ago•0 comments

Paradigms of Software Development for Founder Engineers

https://jacobstrauss.bearblog.dev/paradigms-of-software-development-for-founder-engineers/
1•jda5•2m ago•0 comments

Show HN: I made an iPhone app to find and delete duplicate photos

https://apps.apple.com/us/app/x-cleanup-storage-cleaner/id6796765379
1•bashirmo•2m ago•0 comments

A tiny Ohio town has a strategy to force data centers to keep their promises

https://www.vox.com/future-perfect/509247/ohio-data-centers-ai-election-perry-tax-breaks
1•PamalHorse•3m ago•0 comments

'Doctor Peyo': the horse comforting cancer patients in Calais – in pictures

https://www.theguardian.com/society/gallery/2021/mar/12/doctor-peyo-the-horse-comforting-cancer-p...
1•danielovichdk•5m ago•0 comments

Protection Ring (security levels on CPUs)

https://en.wikipedia.org/wiki/Protection_ring
1•wolfi1•8m ago•0 comments

Free CRM health check – see how much pipeline money is stale

https://crmhuolto.fi
1•Expanium•9m ago•0 comments

JavaScript obfuscation against "AI" code analysis

https://mastodon.social/@bencurthoys/117563232404985385
1•ColinWright•10m ago•0 comments

WordPress 7.1.4 upgrade-window RCE is now on CISA's exploited list

https://hatamoto.dev/wordpress/wordpress-7-1-4-upgrade-rce-cisa-kev
1•zenincognito•11m ago•0 comments

OpenSSH 10.6p2 Critical workaround for alpine without PAM

https://www.openssh.org/releasenotes.html#10.6p2
1•selckin•11m ago•1 comments

Overlooked Linux Mv Option Replaces Three Commands with One

https://itsfoss.com/mv-exchange/
3•mrkn1•15m ago•0 comments

What it costs to move your email templates off Mandrill

https://senlo.io/blog/moving-email-templates-off-mandrill
1•igorfilippov3•16m ago•0 comments

Show HN: Get Better at Piano with Noodle

1•rahilb•16m ago•0 comments

Reusing existing FUSE daemons as VirtioFS backend

https://github.com/torgeiru/virtio-fs-kmod/tree/docs/developer-build-guide
1•riegrotter•19m ago•0 comments

Wrong Ways to Create Strings

https://endler.dev/2026/wrong-ways-to-create-strings/
2•WhyNotHugo•20m ago•0 comments

Algorithmic Art: When AI Writes the Code, Where Is the Art?

https://art.camilleroux.com/writing/making-art-with-code-in-the-age-of-ai/
3•camilleroux•25m ago•0 comments

Smart-contract risk reports that AI agents buy per call over x402

https://github.com/Bosacks/magneta-risk-x402
1•Sentinelleai•26m ago•0 comments

Robots with real-tissue muscle actuators achieve jumping, swimming and walking

https://ethz.ch/en/news-and-events/eth-news/news/2026/10/one-small-leap-for-a-muscle-one-giant-st...
1•giuliomagnifico•26m ago•0 comments

Show HN: Nico – a two-agent type personal agent on your Mac

https://nico.app/
2•benjushi•30m ago•1 comments

Fyslide – a local desktop app that turns one topic into TikTok slideshows

https://fyslide.com
1•gianmaurice•32m ago•0 comments

VMware returns to low-end server virtualization with 'vSphere Express'

https://www.theregister.com/virtualization/2026/11/04/vmware-returns-to-low-end-server-virtualiza...
2•ndsipa_pomu•32m ago•1 comments

Awesome repositories are no longer awesome

https://erikgahner.github.io/posts/2026/awesome-repositories-are-no-longer-awesome/
18•erikgahner•34m ago•10 comments

Multiple planes diverted as bomb threats to commercial flights reported

https://www.theguardian.com/world/live/2026/nov/05/aer-lingus-plane-bomb-threat-europe-latest-new...
1•roryirvine•38m ago•1 comments

Show HN: Mooring, an agentic development environment for Claude Code

https://mooring.sh/download
1•Digital-Stratag•38m ago•0 comments

Building for agent use without MCP or skills

https://hookdeck.com/blog/designing-http-api-for-agents
1•GarethX•40m ago•0 comments

OpenAI Finds 948 Local Privilege Escalation Bugs in the Linux Kernel

https://www.phoronix.com/news/OpenAI-948-Linux-LPE-Bugs
4•throwaway270925•40m ago•0 comments

Snitchie: Is Your AI a Nark?

https://kristopolous.github.io/snitchie/
2•kristopolous•40m ago•1 comments

GhostMap Android flaw lets malicious app trigger persistent boot loop

https://www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-p...
1•shakna•45m ago•0 comments

Show HN: Telegram AI assistant with projects, images and background jobs

https://github.com/watscho/chat-gpt-telegram-bot
1•watscho•48m ago•0 comments

Bvlgari Octo Finissimo Titanium Lineup at Geneva Watch Days

https://www.notebookcheck.net/Bvlgari-Octo-Finissimo-titanium-lineup-at-Geneva-Watch-Days.1443116...
1•DarrylLinington•49m ago•0 comments
Open in hackernews

I asked Gemini for a script to move files to Cloudflare R2. It deleted them

https://twitter.com/levelsio/status/1921974501257912563
6•bundie•1y ago

Comments

qwertox•1y ago
Rule #1: Always put deletions behind a flag which is disabled for the first couple of test runs.
turtleyacht•1y ago
It was truncating filenames, so /pics/1003-46.png overwrote /pics/1003-45.png because both were renamed /pics/1003-.png, or something like that.
qwertox•1y ago
Truncating file names for the target. Then it proceeded to delete the source file. "Successfully deleted local file: ..."

I mean, look at the printout. It shows that it created the remote file with the truncated filename, then deletes the local file with the correct filename.

turtleyacht•1y ago
Oh, I see. Having a flag to skip deletion during test runs is a good rule then.
rvz•1y ago
Recently there was a story about an updater causing a $8,000 bill because there was a lack of basic automated tests to catch the issue. [0]

The big lesson here is that you should actually test the code you write and also write automated tests to check any code generated by an LLM that the code is correct in what it does.

It is also useless to ask another AI to check for mistakes created by another LLM. As you can see in the post, both of them failed to catch the issue.

This why I don't take this hype around 'vibe-coding' seriously since not only it isn't software engineering, it promotes low quality and carelessness over basic testing and dismisses in checking that the software / script works as expected.

Turning $70 problems found in development into $700,000+ costs in production.

There are no more excuses in not adding tests.

[0] https://news.ycombinator.com/item?id=43829006

victorbjorklund•1y ago
Who runs such an AI generated script without checking the code first?
qwertox•1y ago
To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

It turns 10 lines of code which is perfectly fine to reason about into 100 lines of unreadable code full of comments and exception handling.

weatherlite•1y ago
Right so lets just always run the code as is ?
qwertox•1y ago
No. Not at all. I've settled to discussing my code with Gemini. That way it works very well. I explicitly say "Comment on my code and discuss it" or "Let's discuss code for a script doing this and that. Generate me an outline and let's see where this leads. Don't put comments in the code, nor exception handling, we're just discussing it".

Or you create elaborate System Instructions, since it adheres to them pretty well.

But out-of-the-box, Gemini's coding abilities are unusable due to the verbosity.

I've even gone so far to tell it that it must understand that I am just a human and have limited bandwidth in my brain, so it should write code which is easy to reason about, that this is more important than having it handle every possible exception or adding multiline comments.

rsynnott•1y ago
> To be fair, the code Gemini outputs in AI Studio is so extremely verbose that it is almost impossible to read through it.

In which case, it should simply be considered unusable. Like, the sensible response to "tool is so inadequate that there is no reasonable way to make sure its output is safe" is to _not use that tool_.

rsynnott•1y ago
In which Roko's Basilisk fires a warning shot.
jethronethro•1y ago
This is why you test code or a script before running it for real. Live and learn, I guess ...