frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

We're releasing the weights of Mistral Large 4

https://mistral.ai/news/mistral-large-4-oss/
515•kuberwastaken•2h ago•132 comments

H.264 Is Magic (2016)

https://sidbala.com/h-264-is-magic/
56•ea016•48m ago•19 comments

Grace Blackwell needs a new scheduler: 27% more usable GPUs from the same racks

https://skypilot.ai/blog/grace-blackwell-needs-a-new-scheduler
27•wondersky•56m ago•0 comments

Zombie stats: Where the numbers AI quotes come from

https://trakkr.ai/trakkr-research/zombie-stats
54•mektrik•1h ago•18 comments

DoorDash to Acquire Instacart

https://about.doordash.com/en-us/news/doordash-to-acquire-instacart
191•WalterSobchak•4h ago•340 comments

Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers

https://dreamgroup.com/blog/chained-php2shell-exploit-roots-25-servers
143•882542F3884314B•5h ago•65 comments

Mexico is a showroom for electric vehicles you can't buy in the U.S.

https://www.washingtonpost.com/climate-environment/2026/10/27/i-saw-future-driving-mexico-its-off...
67•bookofjoe•1h ago•37 comments

Launch HN: Simantic (YC F26) – Firmware Simulation for AI Agents

8•shong0504•45m ago•6 comments

noalloc: Tooling and libraries to enforce zero heap allocations in Golang

https://github.com/theconsensuslabs/noalloc
9•g0xA52A2A•22h ago•0 comments

Qwenputer: A functioning, deterministic RISC-V CPU inside Qwen3.5

https://divagr.com/blog/qwenputer
647•csmantle•16h ago•136 comments

Java's new AOT cache feature is in a rough state

https://xpipe.io/blog/java-aot-cache
56•theanonymousone•3d ago•17 comments

Zero click, silent, remote Android DoS

https://smsofdeath.com/
259•MarkBlah•9h ago•142 comments

Why is this fingerprinting script creating bioweapons?

https://nullpt.rs/fingerprinting-bioweapons
1489•hazebooth•23h ago•278 comments

Keplearn: Extract Equations from Data in Seconds

https://github.com/owls-on-wires/keplearn
23•owls-on-wires•2h ago•1 comments

Newly discovered Kerberos delegation abuse path

https://hunio.org/security/abusing-constrained-delegation-without-protocol-transition-against-spn...
8•hunio•1d ago•1 comments

LLM Voice

https://martinfowler.com/bliki/LLM-Voice.html
10•ibobev•1h ago•0 comments

Gemini 4 Carbon is the new #1 on the Artificial Analysis Intelligence Index v5

https://artificialanalysis.ai/articles/gemini-4-carbon-new-number-1
277•theHocineSaad•3h ago•214 comments

Getting debug access on a Brother printer over Telnet

https://inventor7777.github.io/blog/2026/10/22/debug-access-on-brother/
146•inventor7777•3d ago•46 comments

How Google determines the names for bodies of water in Google Earth

https://publicpolicy.googleblog.com/2008/04/how-google-determines-names-for-bodies.html
163•terminalbraid•5h ago•131 comments

The US added a record 20.2 GWh of battery storage in just 3 months

https://electrek.co/2026/08/31/the-us-added-a-record-20-2-gwh-of-battery-storage-in-just-3-months/
228•ljf•5h ago•147 comments

Hackers expose the identities of more than 40k DHS employees

https://text.npr.org/nx-s1-6021497
197•firefax•4h ago•46 comments

Forging a Microsoft Edge Full Chain with Logic Bugs Only

https://blog.orange.tw/posts/2026-10-the-last-proof-of-human-craft-browser-full-chain/
205•austinallegro•9h ago•35 comments

Southern Africa's first known stenciled rock art found hiding in plain sight

https://phys.org/news/2026-10-southern-africa-stenciled-art-plain.html
34•wglb•2d ago•7 comments

‘You Are Done’: The letter sent to King by the F.B.I (2014)

https://www.nytimes.com/2014/11/16/magazine/what-an-uncensored-letter-to-mlk-reveals.html
357•surprisetalk•3h ago•250 comments

OpenAI's agents talked to each other through the CPU Cache

https://the-decoder.com/openais-isolated-ai-agents-found-ways-to-talk-to-each-other-through-cpu-c...
340•limbicsystem•2d ago•235 comments

MiniLake Is a Local Databricks API Emulator with SQL, Delta Lake and Spark

https://dmux.github.io/minilake/
83•kermatt•2d ago•17 comments

StackOverflow now gets fewer than 1000 questions a month

https://data.stackexchange.com/stackoverflow/query/1926661#graph?t=1
699•babelfish•17h ago•598 comments

A Health Update

https://furbo.org/2026/10/28/a-health-update/
336•frizlab•19h ago•54 comments

CNC Stone Carving

https://carmelitegothic.com/cnc-stone-carving/
514•bschne•1d ago•141 comments

GitLab Security Incident: Attempted Exploitation of CVE-2026-97229

https://alpinelinux.org/posts/GitLab-security-incident-CVE-2026-97229.html
237•sashk•16h ago•111 comments
Open in hackernews

Why are good developers so wary of agentic development?

https://martinfowler.com/rachels-ramblings/good-devs-wary.html
50•torutofu•2h ago

Comments

jqpabc123•2h ago
Why are good developers so wary of agentic development?

Perhaps because agentic development is aimed at replacing "good developers".

Agentic development tends to undermine the very process that creates "good developers".

Agentic development will do to software what off-shoring did to manufacturing.

kube-system•43m ago
Nah, good developers are wary of agentic development because they have a high degree of understanding and intentionality for their designs. And they see how it easily becomes a crutch for a lack of understanding or intentionality.

> Agentic development will do to software what off-shoring did to manufacturing.

Agentic development will do to software what off-shoring did to software development.

majorchord•43m ago
Indeed, I think skills are like muscles... you need to keep using them well to stay strong. If you farm out all your thinking to an AI, your own skills and knowledge will diminish and your ability to design/debug/reason about your own (or any) code can fade.
alienbaby•35m ago
as has happened time and again through history. software development skills will fade as models become genuinely better at creating, designing, architecting, engineering, testing, validating code at the level of fully complete products.

There will still be the need for humans in the loop to make sure the final product is suitable and what the humans genuinely wanted. We'll all become QA / Acceptance testers. For a little while , that will go away in the end too I think. software will become nothing more special than every day household objects.

datadrivenangel•20m ago
Making a custom household object requires time, effort, and expense. Especially if you want it to be nice.

A lot of DIY AI software is going to be the equivalent of home built workshop / shed furniture: it works fine, but it is janky and built from whatever they had at the hardware store. There will be a place for professional assemblers and designers and engineers at the furniture store / factories.

majorchord•8m ago
Is there a reason you seem to believe this "jank" in the AI software world will stay the same forever? The policies, testing and general knowledge of the professionals are part of what's training the AI models... accurately passing all necessary software standards/certifications/policies are just a few (near future) prompts away.
d--b•45m ago
Not wary really, but I do tend to micro manage the agent.

I'm no longer considering myself a good developer either, the agent is way better at details. Not so much at following a general pattern that makes sense.

deadbabe•6m ago
Just because you’re not a good developer, doesn’t mean you can’t be a “good” developer.
curt15•44m ago
> How much can we trust a system when nobody has experience of building it this way?

If humans are no longer reading the LLM outputs and internalizing the codebase themselves, there's no longer much point to source code. The coding assistant might as well take a natural language prompt and directly hand you an ELF binary that passes a test suite. Are companies ready for that?

luc_•42m ago
I think some definitely are. Especially if there is a system that sits on top of that and pokes and prods the binary to see if it behaves like it's supposed to.
rubicon33•41m ago
Exactly! I wouldn’t be surprised if some day in the distant future, that’s where this all goes. Coding languages may in fact be on their way to being dead. You can imagine a world where, regardless the platform, the lowest level instruction format is output.
rjknight•39m ago
I would not be surprised if we ended up with binaries and Lean proofs.
kylecazar•29m ago
I can see a future generation of models. For now, LLM's train on human artifacts and they handle Python/TS well because of the overwhelming amount of code they've seen, combined with the semantic labels high level languages use that they rely on for reasoning.

Also, consider token efficiency. Imagine how many tokens would be torched just translating an import statement of a popular library to its binary equivalent, let alone a big complex program

graemep•38m ago
Because LLM's can do amazing things, but they can also make huge blunders. Claude constantly makes incorrect assumptions, or implements the wrong thing, or claims there is a bug when there is not.....

On the other hand its VERY fast at finding and fixing some bugs, and finding problems before they hit production. Very good at checking things like what API changes an upgrade brings or finding the right answer about a badly documented library, etc.

stvltvs•4m ago
It's almost like LLMs are another tool with strengths and weaknesses rather than a super human intelligence.
rsyring•35m ago
> Good developers’ caution about agentic development comes from knowing that built isn’t the same as working in production...I always felt there was something else, another fear hiding behind those obvious ones.

It's not fear. It's experience. I've seen the kind of code agents write. And it's too often crap even when it "works". This isn't about beautiful code. It's about what we've built actually making sense to a, hopefully talented, software engineer.

Maybe more important than that, it's about taking the time to build the mental models that facilitate product development and the next iterations of coding. When agents write all the software, the majority of engineers I've seen, including myself, lose almost all context to what is actually going on at anything but a very high almost laughable level. And they then become almost completely dependent on the agent for the next iteration of development b/c they don't really understand what is there currently.

Does this matter? From a software perspective, it depends on what you are building and for whom.

From a human perspective, it depends on the human. I've seen good developers that I trust historically churn out crap code with agents because it was just too much to review. And there is some kind of weird addiction like thing happening in our brains when using AI that makes it incredibly difficult for us to slow down and review all the code it writes. In part b/c agents are great at crapping out 3K line PRs like it's nobody's business. But it needs to be someone's business to understand what we are shipping for anything but non-trivial projects. And truly understanding 3K line PRs hour after hour is just not sustainable for most of us. Our eyes glaze over and we just ship it because that's what we do now as an industry.

I think wary is the wrong term. I've learned agentic development's strengths and weaknesses. And the tools, as they work currently, churn out code at a rocket's pace that any good software engineer would immediately reject in years past. I don't like their code, I don't like how their code development process interacts with my brain. It's not waryness, it's dislike and mistrust.

So, yes, they can be assistants. And they can even write code. But I think in much smaller chunks than most people are using them these days.

The idea that we should build software factories and/or otherwise just turn agents loose and isolate humans to the product/QA level is insane to me. But I understand why we are here and I realize that a large portion of the business and dev community likes this new model.

I'm hoping that not doing it that way will end up be a competitive advantage in the long run. Both for the software we are producing and for the devs that are creating it.

hgqwtr•34m ago
Good developers know that AI isn't necessary at all and no software got better since AI generated code. In fact it got worse.

All that AI does is giving lazy developers more output that is approved by another LGTM developer, so the appearances of progress are kept up.

There is no reason at all to justify no-AI usage. It is the same as when the cigarette industry depicted smoking as cool and non-smokers had to justify not giving in to the dirty habit for fear of not being one of the cool kids.

datadrivenangel•30m ago
A business ending software failure or security breach can occur from a single feature flag variable or 'minor' parsing bug. Usually its a long sequence of these, but it only takes one.

I've personally experienced week long incidents because someone didn't understand how a system worked and a couple of low impact shortcuts and convenient approaches and minor mistakes all came together to internally DDOS important systems. All reasonable individually, resulted in the majority of the ops team pulling a 70+ hour week and doing live prod cleanups in the middle of the night.... Agents do this faster. Also, they're labor competition, maybe.

ang_cire•29m ago
"I don't trust code that I don't understand, or that I don't know someone experienced has reviewed."

proceeds to install 200 random npm dependencies

viklove•24m ago
Where do you find these guys? I haven't worked on a project with more than 20 dependencies, and usually those dependencies have 0 subdependencies so they're quite easy to audit.
xnorswap•22m ago
Are you including transient dependencies in that count?
viklove•20m ago
Yes 20 total dependencies including transients. If a lib has many subdependencies I take this as a red flag and try to avoid it.
exe34•13m ago
No react then?

https://news.ycombinator.com/item?id=39019001

meindnoch•15m ago
*transitive
user43928
agd•28m ago
I’ve seen the opposite. The best devs are aggressively embracing agents - producing more, and at higher quality.
deadbabe•13m ago
The problems is the best devs aren’t the ones doing all the work. You have shitty devs too who are barely thinking or checking anything mixing slop code in with what whatever the best devs are doing, so it all eventually turns to shit.
walthamstow•11m ago
It won't be long before the best devs are working and the shit ones are not
realo•12m ago
Yes sir! 100 times this.
jakevoytko•7m ago
This is also my experience in my own bubble. Even my friends who were skeptical for the longest started finding ways to perform cool cross-org work with them and accelerate their coding.

The biggest pocket of skilled holdouts I've noticed are in more artisan spaces where the craft of coding is part of the art. Things like old-school indie game developers where they're still sweating the assembly output and clock cycles.

mrweasel•4m ago
From the article:

> they are not hesitant to use a coding assistant, they are hesitant to go all in and let the agents do all the execution.

They are embracing the use of coding agents, but they still want to be in control. That also matches what I see from my most talented colleagues. They outsource certain tasks to the AI and verify the output.

My somewhat unpopular opinion is that only very good developers are able to use AI coding tools somewhat safely. They could have written the code themselves, but it's faster to have the agent do and then verify. The rest of us couldn't write the code, at least not when we start on a project. When we finish, we have some of the skills and could rely more on the AI tools if we were to do it again.

matt3210•27m ago
I’m weary of the culture of ship it if it passes tests even if someone (a reviewer) has concerns
radial_symmetry•26m ago
Because they are stubborn.

When even Linus is using agents it is time to accept it.

root_axis•24m ago
They are still hanging into the false belief that software quality matters to anyone besides good developers.
HumblyTossed•20m ago
You don't get frustrated when things that should work don't?
hparadiz•15m ago
After spending a few hours looking at some human written C with daybreak I no longer trust human made code. It's mostly slop.
treespace8•23m ago
For me it breaks the rule of "Network of trust".

Software works because someone is accountable for it. Pair Programming, Test Driven Development, and now Agentic coding all to one degree or another damage the network of trust.

- Pair Programming (There is no one person accountable for the change.) - Test Driven Development (The test pass, so my software is good) - Agentic Coding (My prompt was good, so my software is good)

AI is great for software development... As long as you review and understand each change it makes. Because YOU are going to be held accountable for what the software does.

gchamonlive•18m ago
How does opensource software work when nobody is accountable when I run software from GitHub?

This is the exact mentality behind corporate software and why nobody gets fired for using IBM, Oracle, Azure...

Accountability is a poor proxy for quality because there are so many ways to frame an incident never those responsible really get accountable.

Software works because developers care about the product. If something goes wrong the entire team is accountable, so they work together on something as one.

devin•8m ago
I don't think pairing, nor TDD come anywhere close to the abdication of responsibility that agentic programming does.
gedy•16m ago
There's agentic development where you've designed, even at a high level what the goals and constraints are. Within reason, as doing 10 things at once is not compatible with actually thinking about a problem, no matter what your Adderall says.

Then there's... management forcing "agentic development" on you to basically hurry up, and actively don't want your design input or even to think about the problem. Just 'review it' and be expected to own the problems after. Outsourcing basically.

The first is fine, second is not sustainable for any happiness unless you are offering top compensation.

sibeliuss•16m ago
They're not. But some of them are! And it comes down to knowing how to work with agents in the best way. A good developer -- all in on Agentic development or not -- still knows precisely where to review, pause, rewrite, spike, and so on and so forth. I just don't see the problem here.
ryandvm•11m ago
My experience as a senior software engineer is that generative AI is an incredible productivity boost for engineers that know what they need to implement. If I need to write a new service, I'm going to be able to do that extremely quickly with Claude Code or some other agentic tooling as long as I know what I want.

However, generative AI should be banned for leadership or product owners or anyone on the requirements specification end of the Jira ticket. I'm fine with them using LLMs to read documents and learn, but generative AI specifically in the hands of these folks seems to be a net productivity drag on organizations.

I am so tired of 1,500 word Jira tickets that are over-specified to death with requirements that nobody is actually interested in and I have to spend exorbitant amounts of times just trying to distill out the functionality that the requestor is actually looking for. And these logorrheic nightmare tickets end up spawning all kinds of other unnecessary downstream work.

gopalv•7m ago
> They are hesitant to take their hand off the wheel because they don’t have full confidence the agents have the right guardrails in place to run off on their own.

This is not a new problem, I've had this problem every summer when a new batch of interns show up.

As they say, if an intern can bring down production, it is not the intern's fault.

The interns are generally so much better than me at writing code, but they're not the best at "software development" (I call it "software gardening").

My training regime is to push them up the next 4 leadership levels from "writing code" - delegation, negotiation, vision and inspiration.

Agents are barely at delegation, with multi-agent harnesses.

They don't negotiate with you, they say yes.

Their vision is limited to the context you gave and most of their output is uninspiring (you can smell "Claude did this" on a UX design pattern easily).

But the humans, they've been thrust into delegation on day 1 & unless you've been a tech-lead manager, you probably haven't exercised that skill yet. Even if you have done that, the way agents work is not exactly how humans work [1] in terms of incentives or even try something they think won't work.

If you've been a good IC for years, the company could always afford to hire a human who specializes in those skills and suddenly you've been promoted to a new role without a pay bump or even a choice.

Most of the "Let's add agents and go faster" is basically adding more manpower to a project behind schedule and the payback is missing because that causes communication gaps & dropped messages.

[1] - https://tinyurl.com/orchestration-imperative

teunispeters•4m ago
"agents" are useful for people operating in domains they don't know or understand, and not for people who do. Or at least I've never seen a task in a field I'm comfortable in, improved by either "AI" or "an AI agent". Made worse, yes, but not improved.

But I don't mind "agentic development" to help a person learn to code in a domain. As kind of a tutorial, both on "how things can work" and "how to spot the mistakes". "Agents" and "AI" always make a LOT of mistakes, especially in fields of domain specialization.

alienbaby•39m ago
isnt that kinda like downloading and using software a team you have no knowledge of has produced and released?

All you can go by is 'does it do what it says it does'

ang_cire•30m ago
Yeah, all these devs pretending you can only trust code you understand, then going and pulling in 1000 random npm deps...
batshit_beaver•10m ago
When people install npm packages, they typically only install ones the community trusts. These packages have clear APIs, open source, good docs, test coverage, security checks, and, importantly, usually no undocumented side effects.

Engineers introduce these packages into their own projects that have far fewer of the above guarantees than OSS, are built under pressure from deadlines, and have a constantly churning set of maintainers.

I think from the perspective of a business its own code does call for greater scrutiny than its dependencies.

abirch•38m ago
Gary Tan has said markdown is code. Personally I see my job as establishing the architecture, creating tests, lint rules, etc. for my agents. Monitor the code, but if there's an issue create a new agent that monitors performance, etc.
graemep•33m ago
There is a point to source code:

Lots of tools for analysing and debugging it

It can be cross platform - the same source code will run on x86 and ARM, and in many cases on Windows and Linux.

Changes have predictable consequences because compilers and interpreters are deterministic.

swatcoder•22m ago
There do exist plenty of modest utility/novelty/supplementary projects for which that approach will probably prove fine and may even take over as a norm. I wouldn't make it my business to sell a product that could be built that way (where's the moat), but I'd consider using a product maintained that way as part of my business process. I'd just have its spec and maintenance be an internal matter overseen by an employee or contractor.

But for projects with expansive eat-the-world requirements and a need for extensive customization (enterprise and some large B2C platforms), or those with strict resource efficiency constraints, you can't just shake and bake a black box every time you have a new idea/requirement/bug. The search space to fit against is too vast, which even your model will need to pay for. You need to be working up from both a very detailed specification that can hold/verify all your constraints firm amidst changes and an architecture that sufficiently anticipated what you mean to add/fix.

Source code (as theory crafting) is really good at being the minimally-ambiguous documentation of those constraints and the analytical expression of that architecture. Where it matters, even in the context of agentic development, good source code will make your model get much more done for much less and so maintains your competitive advantage.

It's not going anywhere in the big picture, even if there will be more projects where it doesn't matter.

solarpunk_enthu•18m ago
I feel like ever since we stopped reading assembly we don't really internalize our codebases.
gedy•12m ago
It's just one "Buy Now" button. How hard could that be? /s
user43928•4m ago
That's simply not true.

Until spec files can be worked with so efficiently that we can just regenerate the binaries from them for every change, what you said makes little sense.

You're going to need an intermediate portable form of storing the program. It so happens that all the tools and AI are optimized to work with source code.

sobiolite•14m ago
Do you review and understand every byte of machine code being generated by your compiler? Do you understand all the implications of how it could interact with the underlying hardware, pipelining and prediction, etc?

Maybe you do, but most of our industry doesn't and hasn't for decades. Isn't this just the next step up the ladder of abstraction?

batshit_beaver•7m ago
You can’t abstract away the need to capture requirements in a symbolic language. It doesn’t matter which programming or formal language you choose to specify your requirements in, but it cannot be natural language.
•
15m ago
Then you probably haven't worked much with JS.

The Jest test runner alone has 250 dependencies in its latest version, and v25 had over 500.

xmprt•21m ago
This joke is made a lot but I think most good developers take care in considering the npm dependencies they install. You can get a ton of dependencies pretty easily by just installing very popular ones like react, tailwind, nextjs, etc. If there's ever a dependency that I'm not familiar with then I make sure to take at least a cursory look over the repo to make sure it has a decent number of stars/community, is well maintained, has multiple contributors, etc.
ang_cire•7m ago
That is great, but the reality is that your OS, the productivity software you use daily, and the dependencies downstream of the ones you review, are not actually being checked by you for code quality.

Part of using software is just going off how well it works.

When one Linux flavor starts to have issues, most people don't do a dissection on why, they just switch distros. Or web browsers (I've lost count of the back-and-forth between FF and Chrome performance over the years, nevermind all their precursors). Or office suites.

Pretending that the code is what really matters, and not what the code does, is elevating the paint quality over the painting.

xmprt•2m ago
I didn't mention the code once in my reply. Code is only one aspect of reviewing a dependency. Much more important is the community and support around the tool/dependency.

When dealing with LLM output, you're getting a 1 of 1. There's no way to measure the community, number of contributors, or how maintainable it is.

swatcoder•15m ago
No doubt there's some hypocrisy to point to if you want, but most who say that kind of thing today have been saying the same thing about those "200 random npm dependencies" for the last decade too.
athorax•15m ago
I don't think this is the class of developer the article is referencing
devin•14m ago
The good devs I know avoid dependencies like the plague.
nozzlegear•13m ago
Probably not the same people.