Hacker Newsnew | past | comments | ask | show | jobs | submit | stocksinsmocks's commentslogin

Perhaps, but I prefer it this way. The 10 horsepower wig is an underserved market.

Well, to be fair there were a lot of guys doing exactly this sort of thing except they were writing their hobby projects by hand. I don’t take any technical blogs about someone’s secret sauce seriously at all. Programmer blogs are marketing pieces.

Marketing for what? I didn't even link to what I'm building because I wanna ship it when it's ready.

$5.75/hr is well below outsourced rates. It’s $1.40/hr if the agent runs without stopping. If I hired a human consultant for a project of any size, I could easily spend $10,000 or more on just scoping and contract approval. Humans don’t win on cost.

Right now they still need someone typing prompts and verifying them. When they do what you intend it means that is no longer more work to handhold them than doing it yourself, but it is still work.

The most insightful part of your comment was that you needed a throwaway account to preserve your HN social credit score to take a completely moderate and constructive position.

LLMs are infrastructure.

There are thousands of nuclear weapons that cannot be stopped in play. NATO is actually behind in missile capabilities. That leaders are not frantically negotiating a settlement makes me wonder if the survival of their constituents is not a goal.


In the defense of the language models, the bugs were written by humans in the first place. Human vetting is not much of a defense.


From what I understand some of the bugs where in code the AI made up on the spot, other bug reports had example code that didn't even interact with curl. These things should be relatively easy to verify by a human, just do a text search in the curl source to see if the AI output matches anything.

Hard to compute, easy to verify things should be the case where AI excel at. So why do so many AI users insist on skipping the verify step?


> Human vetting is not much of a defense.

The issue I keep seeing with curl and other projects is that people are using AI tools to generate bug reports and submitting them without understanding (that's the vetting) the report. Because it's so easy to do this and it takes time to filter out bug report slop from analyzed and verified reports, it's pissing people off. There's a significant asymmetry involved.

Until all AI used to generate security reports on other peoples' projects is able to do it with vanishingly small wasted time, it's pretty assholeish to do it without vetting.


New prompts in the same session are dangerous because the undesired output (including nonsense reasoning) is getting put back into the context. Unless you’re brainstorming and need the dialogue to build up toward some solution, you are much better off removing anything that is not essential to the problem. If the last attempt was wrong, clear the context, feed in the spec, what information it must have like an error log and source, and write your instructions.


I would also love to know the real reason why US manufacturing seems to be so much more costly than it is anywhere else, even after adjusting for wage differences.


It's not that drastic after wage differences, but bringing manufacturing costs down requires efficient, reliable supply lines. Nothing in the US has been that way for decades given the incentive structure of corporate America.


Because US manufacturers/investors demand high profit margins and expect it to increase every year, if not every quarter. If a company makes the same profits year after year, US investors consider it a dead end if not a complete failure, despite the fact that everybody involved in the business is making money


The purchasers for buses, trainsets, etc., are bad- lots of unnecessary customization, last minute changes, low volume, etc. This drives down efficiency across the system.


Isn’t that true in other countries though?


RE volume, a couple of years back, Ireland, a country of a little over 5 million people, recently made an order for 800 electric buses over five years via the national transport authority. Meanwhile, the transport authorities in the article, in a country with 340 million people, made orders for 10 and 17 buses respectively.

Now, I think Ireland's extreme centralisation on this is unusual, but the US's approach of having loads of absolutely tiny transport authorities is, too.


Could this level of incompetence be more easily explained by malice? Maybe the robots were meant to be exploited at a future time. The PRC subsidizes the robots, every US family buys one, a plausibly deniable exploit results in the robots subduing their owners with Kung Fu. America is vanquished in a bloodless coup. A 1000 year global Chinese imperium ensues. Forks and spoons hardest hit.

It’s just silly enough to be real.


I'd bet it would be more of shipped is king mindset. It's not so unprecedented that new categories of Chinese products dominate markets with incredibly insecure, stupid, and nearsighted implementations, and then buttons up one night and kicks out all open source development that benefited from lack of security.

Chinese phones, drones, action cams, robot vacuums, home security cams, smart bands, etc. all used to be insecure and vulnerable as hell. Not anymore.


No, because the exploit is likely to be caught before every US family has bought one. Much simpler, all malice needs to do is to roll out an OTA security update.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: