Hacker Newsnew | past | comments | ask | show | jobs | submit | tucnak's commentslogin

..unless you're actually reasoning at nation-scale where OP's points apply

I wouldn’t agree. Even at national scale, these projects cost resources. And the resources of all agents (org, countries) are constrained.

While we could reason in "performance / watt" and "performance / people", "performance / whatever other resource involved", and "performance / opportunity cost of allocating these resources to this use case and not another", "performance / whatever unit of stable-ish currency" is a convenient and often "good enough" approximation that somewhat encapsulates them all.

A simplification, like any model, but still useful.


Defense in depth is not the point, zero trust networking is.

"seems" is doing a lot of heavy-lifting in your message

Assuming perfectly efficient business

16 year-old me would have been very impressed by this!

Is that a compliment, or the opposite?

A bit of both. I guess it's nice, but nothing I actually care about.

I had a similar thought: there surely are lots of young folks who will be all excited with this (I was back in the CVS/SVN days when git appeared).

But nowadays I'm extremely lazy to attempt to learn this new thing. Git works, I kind of know it and I understand its flow.


We still have some repos in Subversion and most things in git. It’s still exciting for every repo we get migrated out of svn. That’s a high bar to cross if we’re talking further improvements compared to git though.

I was 38 or 39 when I found jj.

See? You weren’t even over 50! Young whippersnappers…

Same here, I’m not experiencing so much friction to justify looking for an alternative

Wow, well this was a waste of time.

The point of contention is whether Mythos is the product of its intelligence or its harness; the results like this, and other similar testimonies, call into question too-dangerous-to-release marketing, and for good reason, too. Because it is powerful marketing. Aisle merely says the intelligence is there in the small models. I say, it's already clear that competent defenders could viably mimic, or perhaps even eclipse what Mythos does, by (a) making better harness, (b) simply spending more on batch jobs, bootstrapping, cache better, etc. You may not be doing this yourself, but your probably should.

Aisle and Anthropic are literally talking about two different problem spaces.

FWIW, Apple Virtualization framework is fantastic, and Rosetta 2 is unmatched on other Arm desktops where QEMU is required. For example, you can get Vivado working on Debian guest, macOS host trivially like that.



They are not phasing it out for virtualization.


Only reference I can find is:

"Starting with computers using macOS 28, Rosetta functionality will be available only for certain older, unmaintained games that rely on Intel-based frameworks."

https://support.apple.com/en-us/102527

And

"Beyond this timeframe, we will keep a subset of Rosetta functionality aimed at supporting older unmaintained gaming titles, that rely on Intel-based frameworks."

https://developer.apple.com/documentation/apple-silicon/abou...


Been using Colima to run mixed architecture container stacks in docker compose on my M3 Mac and the machine barely blinks. I get a full day running a dozen containers on a single battery charge.

Colima is backed by qemu, not Rosetta, so if Rosetta disappeared tomorrow I don't think I'd notice. I'm sure it's "better" but when the competition is "good enough" it doesn't really matter.


The .com purist advice is sound but you're not getting four-letter domain names that way, and in some ccTLD zones you can still.

I was price-gouged out of owning a single, rare .icu domain when renewal fee for it went from 20 usd to 220 usd overnight, just for this one domain... I'm pretty sure it's not Gandi, but the TLD opetator, because other .icu domains I've had were fine. I decided to eventually abandon them all anyway. Moved away from Gandi later when they started doing gouging of their own, too.

What is HN's opinion on Dynadot?


Yeah, what the heck happened to Gandi? It used to be my go-to, but nowadays... yikes!


They got sold to private equity, unfortunately. I switched to Bookmyname (by Scaleway) for some TLDs, and Infomaniak for others.


Wait, If I remember correctly, I think its possible to now buy domains from scaleway directly within their interface

https://www.scaleway.com/en/domain-names/

Could be very interesting for the people who love/host on scaleway.

Scaleway is a good company fwiw imo.


Can we trust Cloud registrars like Bookmyname/Scaleway, Amazon Route 53, Cloudflare more than Namecheap, Gandi and co?


I think that it's a good thing when domains aren't their main source of income. It gives them more incentive to provide good, stable experience and pricing.


More than what Gandi was? No.

More than what Gandi is now? 100%


Private equity cancer, same as Namecheap.


Reddit's r/namecheap is also full of horror stories.


What you're talking about exists, and it's called Relationship-based Access Control, or ReBAC. There are a few implementations, Zanzibar paper, etc. The issue is not capability system, it's governance. The operator needs to write policies, of course! They don't want to read, write policies, audit other people's policies.


What is your take on usability of these systems? In practice they seem to be rather un-ergonomic and usage devolves into require everything.

As agentic systems seem to mainly interoperate with REST style systems I suspect that using URIs for resource use descriptions would be more natural.


You're right on ergonomics.

CodeAct is one way to abstract away some things, and bring others to the forefront. Especially when it comes to anything requiring a sidecar for mTLS, or something agents must be aware of, like error handling for whenever some call fails deep inside the stack. Troubleshooting access issues is key, during tool development and when using said tool in production, too. For many, many things, CodeAct is simply superior to naive calling conventions that you see around MCP clients, think OpenAPI.


Sorry to piggyback, but if this is of interest to you, feel free to reach out to me over to email (contact info in my profile). I'm one of the founders of the most popular ReBAC solution, SpiceDB, which secures quite a few AI products including big players like OpenAI. I'm always interested in hearing about more use cases or where folks are struggling the most.


Hi Jimmy, happy to talk about my experience. I reached out to you over email.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: