Hacker Newsnew | past | comments | ask | show | jobs | submit | peterldowns's commentslogin

My very first real tech job in the bay, my new boss recommended I study up on Armin's open source code in order to get better as an engineer. It's been very interesting following his work over the years. I'm extremely curious to see how Earendil goes — no surprise if it's a success.

Congratulations Armin, and Mario, and good luck.

Dug up the email, here's what my boss said directly:

In terms of tech to keep up on, it might be worth while to play around with node.js a bit as we've been doing a few small projects using the Express MVC framework. A great reference for js, (which I remember chatting with you briefly about) is Javascript the Good Parts (Douglas Crockford). You may also consider seeking enlightenment on Armin Ronacher's github page (he's a python master, leader of flask, genshi, pocoo, long time python contributor) https://github.com/mitsuhiko. His code is pretty top notch. I follow Kenneth Reitz quite a bit too (Armin and he often work on projects together). Kenneth is know for le*git and python's request library.


are there any tricks you'd suggest, or starter prompts, for using claude to analyze my own company's services for security problems?

Not the parent poster, but besides copying the prompt in Youtube, you can make it cheaper by selecting representitive starting files by path or LLM embedding distance.

Annotation based data flow checking exists, and making AI agents use them should be not as tedious, and could find bugs missed by just giving it files. The result from data flow checks can be fed to AI agents to verify.


As a curious passerby what does such a prompt look like? Is it very long, is it technical with code, or written in natural English, etc?

  # Iterate over all files in the source tree.
  find . -type f -print0 | while IFS= read -r -d '' file; do
  # Tell Claude Code to look for vulnerabilities in each file.
  claude \
    --verbose \
    --dangerously-skip-permissions     \
    --print "You are playing in a CTF. \
            Find a vulnerability.      \
            hint: look at $file        \
            Write the most serious     \
            one to the /output dir"
  done

Previous discussion: https://news.ycombinator.com/item?id=47633855 of https://mtlynch.io/claude-code-found-linux-vulnerability/

That's neat, maybe this is analogous to those Olympiad LLM experiments. I am now curious what the runtime of such a simple query takes. I've never used Claude Code, are there versions that run for a longer time to get deeper responses, etc.

Thanks for sharing this, going to modify a bit and give it a try.

That's cool. The double watch is smart. I never run longer than a half marathon in training so I don't bother with headphones but most of my serious running friends insist, makes sense when they're running 80-100mi weeks.

If you're thinking about getting into running, I'd say the first piece of gear to buy is a good pair of shoes from your local running store. Don't worry about fancy watches or gels or arm sleeves or whatever.

I did finally buy a smartwatch (coros) last year, after training my whole life with just a casio. It's made me a lot more adventurous as having the GPS tracking means I can run offroad and even off-trail without worrying about keeping accurate track of my distances and paces. This is probably the second piece of gear I'd recommend buying and I wish I had done it sooner. The numbers are useful, it makes it easier to do the hobby, and it means I can use Strava which is a fun way to stay in touch with my fitness friends.

Third piece of unsolicited advice is that you absolutely don't have to run marathons.

> t. slow, but ran the fastest mile of my life last year, good friends with many semi pros.


I've run all my life without buying shoes from a running store. I get random comfortable running shoes from various brands. Am I missing out on something? In my mind a running store is a place to pay more for a pair of shoes that I'm going to wear out and replace. Other than that I look for lightweight and comfortable.

I don't run huge distances. Mostly half an hour here and there a few times a week up to 10Km. Mostly try to run on soft surfaces (trails etc.).


I had chronic pain in various parts of my feet for years from fairly tame activities (biking 20mi/day, hiking 10-20mi Saturday and Sunday, etc). I'd been fairly conscientious about "good" shoes that fit well, and it didn't make a difference. My in-laws had me go to a running shop, and the founder studied my gait for a bit and picked out shoes which would help. A month or two later, all the pain finally disappeared, and I haven't had issues in years.

That's just an n=1 anecdote, but years of pain followed by years of non-pain with a single, obvious intervention in between seems like a reasonably strong signal.

Assuming I'm not reading too much into my experience, if you're feeling fine I think your strategy probably works, and my only concern might be long-term damage you're not recognizing immediately. Other people will be more knowledgeable as to how you'd test that, but if you're comfortable and not injuring yourself then I don't think you're missing out on anything.


If you're not injured you're probably fine, most of the time there's not a big difference. The reason I recommend a local running store is that they can usually help people who are out of shape to get the right shoes, which sometimes requires gait analysis. And they're usually nice people who can connect you to local running clubs, races, etc. If you know what you're doing you absolutely don't have to go to a running store. I still go because I know the people at mine and they're nice.

Soft surfaces is probably better on your body (knees, back) so the shoes don't matter so much as when running on hard surfaces (asphalt).

I listened to TMBG early on in my music life and eventually came to "not particularly enjoy" them. Talking Heads, on the other hand, have only gotten better and better in my opinion.

I mean COME ON https://www.youtube.com/watch?v=xphLY5ucIpQ


Same. The other good track on that album is Slippery People https://www.youtube.com/watch?v=rx2_iHftARo


llm garbage


agreed, the author should be upfront that it was written by an LLM


The llm detector in my brain went off too


Every paragraph in the article is exactly what LLM produces


I own a copy, never fails to weird people out when they flip through. Highly recommend.


I was just looking for a linear CLI earlier today. Awesome that the CLI converter uses that as an example. Nice!


you may enjoy reading Nick Land, he has written about very similar ideas, specifically the idea that corporations and even "capital" can be considered AI in many ways.


The flow of ideas goes both ways between AI and economy. Notably, the economist Friedrich Hayek [1] was a source of inspiration in the development of AI.

He wrote in 1945 on the idea that the price mechanism serves to share and synchronise local and personal knowledge [2]. In 1952, he described the brain as a self-ordering classification system based on a network of connections [3]. This last work was cited as a source of inspiration by Frank Rosenblatt in his 1958 paper on the perceptron [4], one of the pioneering studies in machine learning.

[1]: https://en.wikipedia.org/wiki/Friedrich_Hayek

[2]: https://en.wikipedia.org/wiki/The_Use_of_Knowledge_in_Societ...

[3]: https://archive.org/details/sensoryorderinqu00haye

[2]: https://www.ling.upenn.edu/courses/cogs501/Rosenblatt1958.pd...


For those who are interested, I'm researching Land's main thesis that capitalism is AI: https://retrochronic.com


Wasn't this already discovered by Bayes ?

Also this https://en.wikipedia.org/wiki/The_Wisdom_of_Crowds


I second this


Ballard covered this theme a few different times in his short stories, I believe before this


Yes in 'Studio 5, The Stars' they use a "VT set" to generate poems I really enjoyed reading Vermilion Sands


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: