Hacker Newsnew | past | comments | ask | show | jobs | submit | OptionX's commentslogin

And we have decades of hindsight with sql injection to work with and make it obvious. No so much with all the fancy new AI tools.

Yes MCP has next to no security features, but then again is it even a year old at this point?

Not excusing it just pointing out something folks should me mindful of when using tool based on it, its an immature system.

And heck, I still remember a time when most of the internet traffic just flew around in plain text. Insanity to us now.


So choose not to partake the discussion, dear god this conversation is awful.


Really really hope these guys get a foothold in the market. I'm a decades long Firefox user but even I have to admit things with Mozilla aren't looking bright so projects like this are the only things that can save us from the chrome clone wars.


What I really find useful in Firefox and not in other browsers is the native browser functionality/UI besides rendering webpages. I think Ladybird isn't focusing on those.


I always find funny how the new, supposedly progressive, arguments in favor of mass immigration run so close to the ones given against when slavery was abolished, that society can only exist with cheap,exploitative, labor.

Who indeed will pick the cotton.


Also it seems a teensy bit unfair to rob the developing world of its skilled workers so that we don't have to bother training them ourselves (plus they'll accept lower pay than natives).

Aren't those nurses needed back home?

https://www.forbes.com/sites/katherinehignett/2023/06/07/uk-...


Unironically no because most of these countries have extremely young populations.


Unironically yes because most of these countries‘ population is sick due to low hygiene and water qualify.


Why do they have a young population? What happens to the old people who live in those countries? Why would that not happen in the receiving countries if enough people are imported?


They have a young population because their birth rates are much higher than in (e.g.,) the U.K.


In 1950 the birth rates in Africa were higher than today. Where are those old people?

https://www.macrotrends.net/global-metrics/countries/afr/afr...


It's because the arguments ultimately originate from the same place as they did back then: the elites who benefit greatly from the existence of said cheap, exploitative labor.

The sorts of "progressives" who unconditionally support mass immigration are just useful idiots being used as tools by said elites to enforce their narrative. Just have to push the idea that "disagreeing with this is racist" and they'll all support it without question.


I mean I support what could be termed "mass immigration" and hold no biases as to what kinds of work they would do. I see no reason they wouldn't find work in all sorts of fields. But one of the most common talking points against this kind of immigration is that because they're "unskilled" they won't find work and be a burden on our welfare programs and social services or whatever. So then you start to list jobs that are positive value to society and don't require specialized training—that even if I accept the (admittedly racist premise) that immigrants won't seek education and skilled positions that we will still be fine.


Its because both the left and right argue for extremes which are just the same energy with different wording.

I do not distinguish the far-left from far-right as they equally polarizing and extreme, and only seeks to pull people in the center towards them through violence, censorship and intimidation.

People in the center seeks a balance between the extremes. Some industries require immigration of labor force but it can't come with delusional ideologies that seek to manipulate the wages.


You should probably differentiate between those things, because they have almost nothing in common. Even the commonalities you listed are extrinsic qualities (i.e. They are qualities of how people respond to the thing and not of the thing itself).


This is a far-right talking point that ignores the other concerns of progressives that are bundled up in the argument.

Progressives (in the US at least) generally support immigration with protections and fair wages. They also recognize, rightfully, that systems built for decades upon exploitative practices (low wages, no protections) if removed overnight will cause mass disruption of those systems.

Neither of these is in any way supportive of slavery, modern or otherwise. The first - suggesting that immigrants be treated civilly and paid a living wage - has been fought tooth and nail by 'free market' literalists. The second - that there will be disruptions in social and economic systems when an entire workforce is suddenly removed from the systems that it has propped up for decades - is common sense and historically founded.

You're conflating these things to try to justify a talking point that was just created three months ago.


The fact remains that UK (or US) is well below the replacement rate. If your progressive society can continue to exist only because oppressed women elsewhere keep supplying the human material, then it's not that progressive after all.


Nothing in this talking point is remotely „far right“. Words have lost all meaning. You also haven‘t answered his argument one bit. In the end, all you say with your smart words is that indeed, someone has to pick the cotton and it won‘t be you.


The "far-right" propaganda comes in when we try to argue that actually the right cares about immigrants, and they want to deport them because they just care so damn much.

Like, come on now. Give me a break. This type of reasoning is so caked with bullshit I don't think anyone on the right even buys it.

Sure, we can say maybe the left is arguing for exploitation, but certainly the right aren't champions of human rights. I mean, what's the big picture here? "Don't exploit the immigrants! Instead, violate their rights and force them into camps!"

We can solve the immigration problem overnight, if anyone cares. Just say that if you're found hiring undocumented people, you go to prison. I garauntee you, the problem will solve itself with such expedition it will leave you in awe.

But nobody on the right actually proposes this. Because they don't actually care about immigration. They care about populist messaging. They want you to believe there's an enemy within causing all your problems, and they they alone are the solution.

But no - they, too, directly rely on the exploitation. They won't ever patch it. It will always be lip-service, propaganda, and populist messaging.


The right doesn't give a shit about the livelihood of the immigrants, but they have accurately observed the line that goes from "heavily increase low skill immigration" to "emergence of a low trust society" to "implement authoritarian surveillance state to manage the low trust". The left has no answer for this, because it requires them to admit that high levels of immigration have negative qualitative impacts on society that don't show up in GDP figures. They can't do that, because immigration itself is part of the ideology.


No, the right just loves surveillance and authoritarianism. That's just what they trend towards if you leave them unchecked over time.

Immigrants are the populist scapegoat needed to get the authoritarianism. They're an easy to blame demographic that are physically marginalized - you can literally see them with your eyes.

Without immigrants, this populist messaging problem isn't solved. In the US, we just used black people before. Chinese people for a while too. Japanese people. We increased surveillance, built camps, required registries, you name it.

That's just how the right operates and how their populist messaging works. You need to convince poor "incumbents" (usually white people) that there's some other demographic coming for their money and they're dangerous. Don't let them into your neighborhood!

But don't worry, we can clean it up! Just give us unilateral power and a surveillance state, and we promise these pesky brown folk will be gone. And then, somehow that will magically improve the quality of your life!

It's the same story again and again, over and over. If we haven't already done this a bunch, I might be inclined to believe you. But we have. So when I hear about some new dangerous, untrustworthy, mostly brown demographic taking over your country I just yawn.

Yeah yeah been there, done that. Just give the authoritarian's what they want at this point, they're not even being slick.


>Without immigrants, this populist messaging problem isn't solved.

This conflicts with basically everything else you wrote. Not sure if you meant to do that, or meant to say something else, but the immigration issue is definitely driving the messaging from Reform and, to a lesser extent, the Conservatives. If suddenly the boats stopped, the Afghans were beamed away back to Afghanistan, and ~30 years of mismanaged immigration policy was reversed overnight I don't see how a) reform exists, b) the election at the end of this 5 year term isn't just about funding NHS and Labour holds a majority with the rest split between the Tories and the Lib Dems.

>So when I hear about some new dangerous, untrustworthy, mostly brown demographic taking over your country I just yawn.

People say things like this as a cryptic way to imply the person they're talking to is just a racist bad person and therefore anything else that person said is wrong and "bad", and then they get to sidestep any meaningful discussion about policy.

Honestly that's pretty much how we got to the place where Reform is leading in the polls by 10 points, so bravo for a very meta comment.


> but the immigration issue is definitely driving the messaging from Reform

Yes, my point is that we've already done this countless times.

The messaging doesn't go away if you get rid of these particular brown people. They just shift to some other demographic, because that's how right-wing populist messaging works.

Nobody would actually be satisfied if the immigrants were beamed away.

> People say things like this as a cryptic way to imply the person they're talking to is just a racist bad person

No, it's not, and I don't think you're racist.

To be clear, I'm from the US, so I'm speaking from the perspective of what we've done and we keep having this same thing happen again. And again. And again. For literally hundreds of years at this point.

That's the meaningful discussion. I yawn not because you are racist, but because you are unoriginal.

All those other right-wing populist dilemmas turned out to be hot bullshit. Looking back, I don't know how people were stupid enough to fall for them, but evidently they were and we implemented a lot of surveillance and authoritarian laws. Luckily, many repealed.

But, I have no reason to believe this particular demographic panic isn't bullshit. They've always been bullshit. Just based off of track record it's not looking good.

The reason I bring up brown people isn't to imply racism, it's to call into question the legitimacy of the basis for this outrage.

It seems to me that, coincidentally, just like every other right-wing panic, mostly brown people are targeted. Hm. Interesting. Look at that. So why is this panic real, and not fake like the other ones?


>Yes, my point is that we've already done this countless times.

>To be clear, I'm from the US

I'm also from the US, and am still able to discern that these immigration levels are unprecedented in history, in either country. So ... hand waving it away because it's icky isn't sufficient. Your position amounts to "immigration, in any amount, does not matter" which is a much more extreme claim than that of the "far right", either in the US or the UK.

>The reason I bring up brown people isn't to imply racism, it's to call into question the legitimacy of the basis for this outrage.

I don't know how to parse this sentence, other than for it to mean that as long as the immigration is from countries that are "brown" (your words) it's not legitimate to criticize it.


The immigration is certainly not unprecedented, we've had significant chinese, polish, and even Italian immigrantion. And they too suffered prosecution.

If the same thing keeps happening and we keep being wrong, I lose faith in the premise. I have no reason to believe the right is faithful on these issues, so I don't care. I'm just going to assume they're making a big deal out of nothing and I'm probably right.


> No, the right just loves surveillance and authoritarianism. That's just what they trend towards if you leave them unchecked over time.

The UK currently has a left leaning government. All governments love surveillance and authoritarianism.


Pointing out the hypocrisy of one side does not mean that the other is right. I still remember when the progressive pro-labour argument was against immigration to favour the increase of wages of the locals and I'm puzzled when they switched to "you know we need immigrants to work the shit jobs we don't want to do".


Any word on a compibily layer project for x86/64 like Rosetta? Seems like an important thing to have imo.

The article mentions an emulator, but it seemed to be for running games.

I also heard MS had something similar in their arm dev kit, but haven't looked much into it.


It's not just for games. FEX-EMU is used here alongside Wine/Proton to run games but it'll also run the x64 version of other things. There's other layers like Box64 that do the same thing. For Linux, a lot of the software traditionally found in repos already has an ARM version and it's not as necessary. On Windows on ARM sometimes the only way to get an ARM native version is to run the Linux version under WSL.

Windows on ARM has allowed running x86 code from launch with Windows 10 and x64 code since Windows 11.


There is Box86/box64/box32. A bit confusing but it's box86 for x86 > ARM32. Box64 for x86_64 > ARM64. And Box32 for x86 > ARM64.

I think they mention games because a lot of other software for Linux is generally open source. So a lot of times it's pretty easy to get an ARM build.

It also does a neat performance trick where it intercepts library calls and redirects them to native versions of the same library.

http://github.com/ptitSeb/box64


There's lots of responses but they miss the point. Rosetta let you run x86/64 apps without even knowing they were x86/64. Back when I ran Asahi, I searched far and wide, but Linux doesn't support that level of transparent integration. You always had to fuddle with the launch params.


Pedantic point, but Linux (the kernel) absolutely does. You can register an executable handler for amd64 binaries, and have Linux call that whenever one is invoked.

There is absolutely no user land infrastructure for using this in the way that Rosetta does on macOS, though. Feel free to contribute it!


You can run x86 steam games on asahi easily now. muvm makes it quite easy to run x86 binaries fairly transparently on arm.



Windows terminal used the name quake mode for the similar functionality it offers and there of course the Yakuake that does the same on Linux. Haven't heard of anyone rattling the copyright chain about it yet.



> 14.03.02 - Bolts; Fasteners, bolts; Fasteners, nails; Fasteners, screws; Nails (hardware); Nuts (hardware); Rivets; Screws; Tacks, thumb; Thumbtacks

> 26.01.03 - Circles, incomplete (more than semi-circles); Incomplete circles (more than semi-circles)

the ontology on this stuff is fascinating. That's a fastener?


I suspect there is a legal difference between offering a feature in the style of Quake (and calling it out as such) vs. baking it into your App’s branding.


Microsoft also owns id/ZeniMax, the owners of the copyright.


111mb is bloat apparently in a time where storage is in the terabytes.


111 MB for a text editor is acceptable? I mean I get it, "we" are getting conditioned to it, but...


The editor is 10mb. It's the grammar files that are represent the bulk, and those are optional.

And yes. Complaining about 100mb nowadays is ridiculous. You probably have larger logfiles sitting somewhere in disk doing nothing right now, regardless of your OS.


And it’s a 10MB static binary I can just drop into ~/.local/bin and have Just Work(tm)


I know, I was talking about a hypothetical text editor being 100 MB (without grammar files).

And those log files can be easily wiped or rotated (i.e. compressed, which can greatly reduce their size), as they should. You do not do the same with your other files, do you?


Why the down-vote? You don't rotate your logs? Thought it is commonplace. Rotating logs includes compressing old ones. Or are your log files actually over 100 MB? Why? What are you printing? Output of "yes"? :D

As someone mentioned, Emacs is over 100 MB, so it does not have to be hypothetical. That said, I use emacs (and vim) interchangeably and I have nothing against it. I have LibreOffice, too, which is also a behemoth, but so is Haskell with its modules that I see getting updated regularly. In any case, I still prefer KISS and the fewer bloat as possible.


Long forgotten the times back in the days during the Great Editor Wars when Emacs was shunned as an acronym for "Eight Megabytes And Constantly Swapping". The youth of today ...


Emacs binary download page pointed me to Windows, but for comparison:

141MB: emacs-30.1-nodeps.zip

75MB: emacs-30.1-installer.exe (better compression? Contents seem similar)

27MB helix-25.07-x86_64-windows.zip

So there's still an Emacs distinction, it seems

(*not that these size differences matter in practice -- helix's "bulk" is all in compiled language grammars, each of which is not loaded unless you use the language.)


(replying to myself)

Alpine package sizes:

- helix 10.3MiB (+ 3 dependencies: musl, libgcc, sh)

- emacs 14.5MiB (+ 1 dependency: musl)

- neovim 18.7MiB (+ 9 dependencies musl, lua, tree-sitter, libint, libluv, unibilium, utf8proc, libuv, libluajit))

So it doesn't seem out of the ordinary for popular cli editors, if you're worried about smaller environments.


I am old enough to remember that. :D


I mean a base Mac Mini in 2025 comes with 256GB of storage. Some storage is still damn expensive.

But regardless, if someone were to only ever installing Helix on their system, you might have a point. But you probably want to install many applications and if every applications starts wasting storage, you will soon run out of space.


Yes, but 111MB is .04% of 256GB. Install a hundred such "wasteful" apps and you're up to a whole 4% of that storage.


Almost all the size is language grammars, which are optional and removable. Some distros like Alpine make them separate packages.

But for desktop use, I think it's a good default to have everything "just work" out-of-the-box, because 110mb is nothing for typical developer machines.


Have you considered that professional developers who can afford expensive computers are not the only ones using a text editor?


Absolutely, I used one for many years before I was professional.

Out of curiosity, what hardware are you picturing those people running it on?

I've run Helix on a Daylight computer, which has a deliberately underpowered CPU (MediaTek Helio G99) and it's incredibly fast/snappy. 110mb is still near-trivial on the 128GB storage.

If you're (validly) worried about bloated software, note that Alpine's helix package is 10.3MB, which is smaller than their Neovim or Emacs packages. Individual language files are small (python is ~500kb uncompressed), there are just hundreds of supported languages. But installed ones are not loaded unless you edit the language.


we optimize for code runtime but not for our own typing latency

100ms optimization is a lot different for a CPU or a human brain. I'm not defending having the entire system log dumped out on every prompt but a few amenities are worth a few milliseconds computation time for a human.

Besides, I don't see how, for example , having your prompt take those 100ms to print a git branch or status breaks your "flow" yet having to type out the commands yourself and taking longer doing it doesn't.

Its a balance between bloat and and usability like so many other things, but, to me at least, being on either extreme of bloat or extreme-minimalism seems counterproductive.


100 ms is an incredibly long time even for humans.


Nope, not a minority at all. Quite the opposite outside the tech bro side of things.


I don't have many, but the few I do are set in environment vars by a file sourced in my bashrc.

Then you can just not track that file in the tool and figure out a safe way to back it up.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: