Hacker Newsnew | past | comments | ask | show | jobs | submit | neodypsis's commentslogin

What is the steam cloud for after landing?


It's liquid propellant being vented, the fuel is under extreme pressure so when its released it immediately expands to a gas. I don't know that Honda has said what their propellant is, but it's probably liquid hydrogen and liquid oxygen.


Try one of the models with good vision capabilities and ask it to output code using build123d.


Not true. It depends on the pathogen.


You need to add sanitizer to the wash cycle, not just detergent.


I agree… I add a capful of something like this if I think the wash needs it :

https://www.tesco.com/groceries/en-GB/products/312705939


A combination that works nicely to solve bugs is: 1) have Gemini analyze the code and the problem, 2) ask it to create a prompt for Claude to fix the problem, 3) give Claude the markdown prompt and the code, 4) give Gemini the output from Claude to review, 5) repeat if necessary


If you like this plan, you can do this from the command line:

`aider --model gemini --architect --editor-model claude-3.7` and aider will take care of all the fiddly bits including git commits for you.

right now `aider --model o3 --architect` has the highest rating on the Aider leaderboards, but it costs wayyy more than just --model gemini.


I like Gemini for "architect" roles, it has very good code recall (almost no hallucinations, or none lately), so it can successfully review code edits by Claude. I also find it useful to ground it with Google Search.


Damn that's interesting. How much of the code do you provide? I'm guessing when modularity is high you can give specific files.


Gemini's context is very long, so I can feed it full files. I do the same with Claude, but I may need to start from scratch various times, so Gemini serves as memory (and is also good that Gemini has almost no hallucinations, so it's great as a code reviewer for Claude's edits).


Yeah right now I just dump entire files at it too. After 100-200k tokens I just restart. Not because the LLM is hallucinating (which it is not) but I like the feeling of treating each restart as a new feature checkpoint.


Were you able to find the tracks using Shazam? It is having trouble matching the one from the 28:00 mark here: https://archive.org/details/KmartFebruary1990


lol, never expected that to happen here


Is there a GrapheneOS image for use with Android Emulator? I want to test an app on it but got no physical Pixel device.


Many apps won't work in the Android emulator. Banking apps, etc. will detect it and ban it. Far more apps will ban the emulator than will ban GrapheneOS. We aren't aware of an app which would work in the Android emulator with a standard emulator image containing Google Play but wouldn't work with GrapheneOS. Nearly all Android apps work on GrapheneOS. It's nearly entirely just the subset which ban using any non-stock OS with the Play Integrity API which can't be used. We convinced a few banking apps to start allowing GrapheneOS via hardware attestation but the pace of banking apps integrating the Play Integrity API is unfortunately quite a bit faster than the pace we're convincing apps to support it after they do that.

You can build it for the emulator. It's straightforward to do, but it requires a lot of disk space and it will take around 40-60 minutes on a high end desktop CPU like a Ryzen 9950X. We don't publish official releases for the emulator at the moment because it's not intended for production use and isn't really a good experience to use. We could start doing it, but it'd add some extra work and we'd be concerned about people misinterpreting what it's meant to provide. Emulator builds don't have the regular security model intact or OS updates, etc.


Thanks for the reply, yeah, my interest was to test compatibility when we add support for Play Integrity to our app.


Please read https://grapheneos.org/articles/attestation-compatibility-gu.... It's possible to support GrapheneOS by using the Android hardware attestation API either as an alternative to the Play Integrity API or instead of it. By using the hardware attestation API, you can make a list of allowed key fingerprints for the SelfSigned boot state for non-Google-certified operating systems. We list all our current keys for non-end-of-life devices on that page. Recently, Swissquote used this approach to add support for GrapheneOS to their Yuh app and may be adding it to their main Swissquote app soon.

You can test hardware attestation on any modern Android device but you'd need GrapheneOS on a real device to fully check that you have the SelfSigned fingerprint allowlist working properly. It wouldn't be hard to do it without testing it though, and our users can test if app developers ask our community on https://discuss.grapheneos.org/.


What problem do you think Play Integrity solve other than keeping the user's under Google's walled garden? Play Integrity is a fake marketing term for DRM fromGoogle . It does not guarantee security of the device in any way. My 6~ year old and unpatched Android 10 passes Play Integrity and can run banking apps. That explains everything about Play Integrity. I don't use apps from developers who think they know better than their users.


>What problem do you think Play Integrity solve other than keeping the user's under Google's walled garden?

It ensures requests to your backend are vaguely from actual devices, rather than a bunch of emulators. There's many reasons why developers might want this. It significantly raises the bar for credential stuffing attacks, for instance.


Yes, developers are of course going to opt for APIs that allow them to be as lazy as possible, forego proper backend security, and reduce costs. But is allowing developers to be lazy worth the cost of destroying user freedom? If so, maybe we should work on bringing back the Web Environment Integrity API. That would really help out web developers and would make web apps a lot more secure. Nobody uses Linux on the desktop anyways besides weird nerds so it wouldn't have any real impact.

Can't wait until we finally kill hacker culture for good. Everyone and everything will be fully secured. It's going to be beautiful. The nerds can cry about it all day long, but they're powerless to stop it.


Please don't add play integrity to your app. There are many of us using custom ROMs, and it can relatively easily be worked around, but very much is often a giant screw you to technical users...


I've noticed 4o uses a lot of emojis, and, in general, is very enthusiastic. I find it funny. If I want a more formal bot, I switch to one of the o3 family.


I use a very simple custom system prompt (not on my work machine at the moment, but essentially something along the lines of "for technical questions, please be concise and to the point, and when asked for code, omit explanations and emit just the code itself unless I ask for explanations"), and it does wonders.


It’s interesting that my default prompt is exactly the opposite one: “do not write the code unless I ask for it specifically”. I like to use LLMs as a discussion partner, but writing code is trivial after a good discussion and I can do that myself


I guess it depends on use-cases. I use ChatGPT a lot for "trivial" questions a la "how do I uncommit a specific file in my last git commit" or "how do I paste from one PIL.Image into another one". In the past I would have to search google, click on the StackOverflow link, and then parse that whole page. Asking ChatGPT to give me just the snippet is faster, so doesn't get me out of my flow as much.


Every now and then 4o seems to get a bit drunk and use tonnes of emojis or start swearing when I haven’t sworn myself in the chat.

The other day I asked a fairly innocuous question and it LOLed and said it’d give me the ‘no Bullshit answer’


I've had 4o start off its response with a Smiling Face with Sunglasses emoji by the heading unprompted lol.

edit: does hacker news filter out emojis? TIL (there should be emojis after this colon: )


Meta: no emojis on HN. Pure emoticon. :)


so this "vending machine" is a postcard drop shipping website?


https://www.merriam-webster.com/dictionary/vending%20machine

vending machine noun : a coin-operated machine for selling merchandise

Coin is currency. This website sells merchandise. If they wanna call it a vending machine, then why not?

Either way, silly hill to die on. The post does explore our understanding of a vending no machine and maybe how we may approach online versions.


Perhaps I disagree on the following:

> There’s no customer support, chatbot, or extensive documentation.

I've seen many vending machines with customer support channels. If the machine takes the money but merchandise is not delivered, people will complain.


Exactly! A website that takes people's money and doesn't deliver a product or provide customer service is basically just committing fraud. Some vending machines do get away with fraud for a time. The place hosting someone else's machine (like a shop or a restaurant) will often get complaints from people who run into problems and those shops will often refund customers without notifying the vendor every time.

After enough complaints they might remove the machine from their property or compel the owner of the vending machine to maintain it, but the fact that some amount of fraud happens via vending machines isn't an ideal that we should try to replicate on the internet, especially not because it's easier for the people who make webpages.

"I didn't know I was ripping people off because I decided it would be easier if I never checked and also decided not to give any of the people I stole from a channel to tell me about it." won't hold up very well.

I also got some bad vibes from :

> The stakes should be low. Whatever you’re selling, it’s gotta be cheap. And if things go awry? No one’s going to launch a chargeback crusade

"I hoped that because I was taking such a small amount of money that nobody would bother to do anything about it" isn't a good look either.

The most pessimistic reading of this post is "why shouldn't I provide a service as shitty and fraudulent as lazy vending machine owners do only on a far more massive scale"

That said, I really do agree that people can over complicate things and there's a lot to be gained by not allowing account creation, not asking for more data than you absolutely need, and not keeping data around any longer than absolutely necessary. Just please don't think you can get away with not providing any customer service or not keeping an eye on things to make sure customers are getting what they pay for.


This is probably all just marketing/seo for the service used to send the post cards. I’ve never seen a vending machine that tells you the price they pay for the product by linking out to their providers. $0.82 per card and charging $5 for 3.


With a cute gimmick to hook customers and so cheap / low stakes that people will toss a few bucks into it for fun and not think too hard about it. It's like the chocolate bars and other items at the cashier of a supermarket, works entirely off of impulse purchases. The problem for OP is that they aren't physically in front of hundreds of potential customers wandering by. They're on the internet so they need to go viral like the bag of dicks guy or do stuff like blog about it and get posted places like hn.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: