Hacker News new | past | comments | ask | show | jobs | submit | kissgyorgy's comments login

In Nix, you can do something like this:

    gitRef = with lib;
      pipe .git/HEAD [
        readFile
        trim
        (splitString ":")
        last
        trim
        (ref: ./git/${ref})
        readFile
        trim
      ];
Super clean and cool!

Not at all.

What is the best way? Or at least, a better way?

I recall Shopify having a seccomp-based jail to run untrusted ruby code. But their use-case was very limited so they can get away with blocking almost every syscall.

Other than that... VMs? The fact that people consider JS/WASM engines good security sandboxes is a bit scary tbf.


I trust a WASM sandbox a whole lot more than I trust a Docker container sandbox.

WASM engines run in almost every browser on earth, billions of times a day. Security problems in those get spotted very quickly.


It's a bit hard to do comparisons without going into threat models and all that _fun_ stuff :shrug:

For example, JS runs in almost every browser on earth too, yet it took V8 devs 2 years to find out that `Math.expm1()` could return -0.0 (https://chromium.googlesource.com/v8/v8.git/+/56f7dda67fdc97...). This is a cherry-picked example, and JS is clearly more complex than WASM, but still.

Just because stuff runs on a lot of devices doesn't mean it's more or less secure.

Linux runs on quite a few devices too, yet we still find bugs, people still don't ship updates to said bugs, yadda yadda yadda.

My point is just that lots of devs often skip the threat modeling and just think "I'll slap it in a WASM thingie an it'll be fine". Well good luck.


Landlock, cgroups on Linux

gVisor

You can't solve people problems with technology.

How is creating a professional certification a technical solution? This sounds like a people solution to a people problem.

I'm not into fonts at all either, but this looks like more crispier and more readable that I anything saw before. I don't know exactly why.


We do the same with Nix, the shebang line looks like this:

    #! nix-shell -i python3 -p "python312.withPackages (pkgs: [ pkgs.boto3 pkgs.click ])"
With this, the only requirement is Nix on the system, you don't even need Python to be installed!


While that is true, there are still lots of PyPI packages not yet packaged with nixpkgs, so this is not as universal an approach as uv.


> you don't even need Python to be installed!

Note that this is exactly the case in TFA - uv takes care of installing Python ad-hoc.


Yup, and you can apply the same technique to any language. The obvious example is bash with all the dependencies specified, but I’ve also hacked up quick single file rust scripts using nix shebangs.

https://nixos.wiki/wiki/Nix-shell_shebang


Having Nih installed is much stronger requirement than having uv


im not sure this is true


Nix requires a bunch of stuff to setup and to understand. uv is just a binary in PATH.


How to do the same thing with `nix shell` (The flake based command) instead of `nix-shell`?



Maybe `#! /usr/bin/env -S nix shell `?


I don't really trust tools I can't put my name in the name field in 2025. It's insane how almost everybody got such a simple thing wrong.


I am really sorry.. What is your name (It sounds stupid, but I would really like to fix it :D)?


Just accept any Unicode character. That's it.


It's clear you never worked in a factory and you have just as much empathy as these CS grads. This kind of thinking why I hate capitalism so much.

I worked in a factory multiple times and I can tell from experience nobody needs a stupid performance measurement like this. Your manager will make sure you work you ass off. Or you work with a big dangerous machine so you have to pay very much attention all day. Of course not every factory is the same, but putting even more pressure to factory workers like this is just inhumane and the most capitalist move I can imagine. Next step is to put robotic whips next to the lines and when their productivity goes below a specific value hit them automatically... Literal slavery.


I would put it as simply as You write your blog for yourself, learning a lot in the process. If others read it, it's a bonus.


I think OP overestimates the number of people using Operator in the foreseeable future.

Also it's optimised for todays web for websites and forms and I suspect they continue develop it this way for two reasons:

1. This works TODAY, which is important for a business.

2. As others commented in this thread, people won't necessarily trust it blindly, seeing visually what it does exactly is a feature.


It's a shame because Perplexity is BY FAR the most useful AI tool out there. This shows they have clearly no vision and won't be able to keep afloat.


I would have agreed up until a few weeks ago. ChatGPT search is getting better, but kind of superficial so I still preferred Perplexity. But the new Gemini Deep Research is waaay better than Perplexity at deeper Internet searches and I imagine only will continue to get better.


Perplexity is useful as a thin layer of product over a base model. As Sam Altman said, eventually all such startups will be steamrolled by companies that own the models.


Sam Altman is not a credible figure, and that quote was rubbish IMO. There’s no inherent reason that foundation model trainers (the dumb pipes of the AI era) will win RAG by default. Apps like Perplexity aren’t even really constrained by the strength of the model. The secret sauce is the information retrieval, where OpenAI has no special advantage. But Google sure does…


He might say that, but I think in fact the opposite is true. The models are getting commodified. The real value lies in distribution (access to customers) and consumer product skills.


Yeah, but the distributers are always depend on the models. And they'll have to pay their licenses. And the ones who control the model have quite an influence on all of us.


They don’t have to pay for licenses for open models. Although I’m not sure if Meta’s licenses have some sort of restriction on who can use it.


I have been using / fanboi'ing Perplexity since January 2022; overall, I am disappointed in the direction their product has been heading. While it is still the first URL I visit when I want apprentice-level help, I don't think this will be true for much longer.

If anybody at perplexity wants my more-direct feedback (beyond what I've submitted via your platform's conversations), my postal is listed in /hn/bio (I do not use email, so if your platform eventually `requires` this it's an immediate disusership from me dawg).


I'm pretty sure no one at Perplexity cares. That's my honest, genuine, sober impression based on my own experience.


I mean, thanks to llama/deepseek, the models are now essentially free.


Please explain why do you think they're the most useful by far? Just curious of such a bold statement in a highly competitive space.


Not OP but it used to be that if you wanted an LLM that would cite its sources - Perplexity was one of the only games in town that did a really good job combining an LLM with an active search engine.

It was also much better for posing questions that required the most up-to-date knowledge.


Why do you sound like a bot.


Probably because bots are trained to sound like people.


It starts with a search and reasoning from there. Cites the sources in the middle of the sentences so you can just click and verify, see the whole context.

It blows every "model only" service because it's 100x more accurate.

I use it instead of Google for every search now.


Search is the most if not only useful application of LLMs. In this space there is also Phind. It seems I use Perplexity as often as Google nowadays.


Deepseek's search is pretty much on par with perplexity already


Perplexity are also flagrant copyright violators


Because they summarize and cite sources or because their models were trained on copyrighted materials? Summarization and training should be tranformative, and the user questions add that element of novel purpose to the original materials that should make the output non derivative. But most of their responses are one time use, nobody is ever returning to them.



More than every other AI company?


Ha ha, Perplexity is the green bubble of chatbots.


Always interested in alternatives. What do you suggest?


Or due to their power, they've already secretly been taken over by the US Gov't. That's not really a "big conspiracy theory" at this point. I was mocked by the left for years for saying that the Gov't was involved in Facebook censorship. Turns out I was right. The biggest battle our Gov't has to wage is the battle for hearts and minds, and the control of information, and so they're trying to get in as deeply rooted as possible with every big AI company.


Are you referring to the firehose of covid misinformation spewed out of Facebook, or some other grift?


To be clear I wasn't blaming just the Gov't for all the censorship, because 99% of Facebook employees (including Zuck himself) were strongly in favor of censoring all conservative viewpoints, as well, and were in lock-step with Big Gov't controlling speech.

Zuck recently tried to blame it all on the FEDs (on JRE podcast) but he was obviously lying because Facebook even built a special portal for the FEDs to log into, for moderating/controlling the public, so he was the ring-leader of all the censorship, for about a decade.


my God what social media does to people to write and believe stuff like this… hopefully one day everything will be banned… amazing to read this - just amazing what seemingly normal human being can be made into believing!


Aw, Silicon Valley doesn't want everything banned. They just want all ideas that go against their world view banned. lol.


99% of Facebook employees (including Zuck himself) were strongly in favor of censoring all conservative viewpoints, as well, and were in lock-step with Big Gov't controlling speech.

how can you write this with the straight face when top like 100 accounts spreading shit on Facebook are right-wing nutcases. Give me on popular left-wing nutcase on Facebook?! believing that conservative views on any social media platform were ever being supressed is downright craaaaazy :)


Sorry dude. Nobody believes any of that in 2025. The claim that conservatives weren't being singled out on Social Media is laughable nowadays. All the companies have ADMITTED doing it. The Gov't has ADMITTED doing it.

I mean, conservatives were getting censored/attacked even for true things like saying COVID might have leaked from a lab, that there are only two sexes, that Hunter Laptop was real, that FBI lied on FISA warrant, that people meds are have horse-versions of them, Biden is senile, and on and on and on for countless other things.


kind of cool seeing where you are getting your “information” :) godspeed with all that!


Even CNN/MSM admits all of this nowadays, and you know it, but won't admit it.


And yet Twitter is censoring progressive viewpoints and even skewed the algo toward promoting a certain political candidate and yet not a single word from those free speech warriors.

https://www.theverge.com/2024/11/17/24298669/musk-trump-endo...


I'm generally in favor of Free Speech, but after Silicon Valley censored conservatives for a decade, during the entire Cancel Culture era, I think for them (liberals) to get to experience what it feels like to be censored themselves is probably a good thing. A good learning experience for them to begin to understand first hand how it feels, and what they did to others, without remorse, and with ill intent, for a decade.

So I say to all liberals complaining about Twitter censorship: "Turnabout is fair play" and "You deserve it, because you invented it."


"Yes, yes, that will show them... Fair play." In the background, the country burning.


Every Democrat in the DC Swamp is quaking in their boots right now out of fear that the Republicans might do to them what they did to the Republicans. They expect it to happen, because being so revenge-oriented themselves, they know it's what they'd do.

The difference is that, unlike liberals, Conservatives (especially MAGA) are God-fearing law-and-order abiding people, not motivated by hate, and not the evildoers that they were falsely accused of being, by the insane left and their Senile POTUS, for the past 8 years.

So don't worry, Democrats have nothing to fear but the exposing of their hypocrisy, and more loss of reputation as more truths come out.


That’s the bulk of the “justifiable” censorship but if you dig into the [largely overrated] “Twitter files,” sometimes they even got mad about jokes.


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: