HackerNews

Show HN: OwnTime – a chess clock for your day's priorities

I made OwnTime to balance between competing priorities in my life. The idea is based on two main influences: the concept of "roles" from "The 5 Choices" (2015), and my repeated failure to effectively implement time blocking due to the necessary flexibility in my role. The app allows you to define time budgets, which are not much more than a few mutually exclusive countdown timers. The UX is essentially that of a chess clock for an arbitrary number of players with configurable time. The whole poi...
HackerNews

LLMs and Self-Referentiality

Article URL: https://scottaaronson.blog/?p=10046 Comments URL: https://news.ycombinator.com/item?id=49530169 Points: 19 # Comments: 9
HackerNews

Pre-Release of Polars 2.0

Article URL: https://pola.rs/posts/announcing-polars-2/ Comments URL: https://news.ycombinator.com/item?id=49546753 Points: 7 # Comments: 0
My journey to "I use arch btw"
🌍 Dev.to

My journey to "I use arch btw"

1. How this project started? I'm going to be honest, it's been ages since I have written something without the use of AI to fix my writing. English is not my first language so please bear with me! With the rapid rise of AI, I felt that I have been losing passion for what I used to love at some point: learning . Nowadays, we can quickly solve most of our problems with the use of AI, often times, not even reviewing if it correct or not. That's why I decided to take some time daily t...
🌍 Dev.to

4 Ways JWKS and Session Verification Shape Trust Boundaries for API Requests

When a support agent is trying to recover an account after a suspicious login, JWKS verification and session verification define different trust boundaries for API requests. The distinction decides which recovery path the agent can offer and how much damage a stolen credential can do. Short answer: use JWKS verification for a stable, distributed signature boundary, and session verification when the request must reflect current session state; most customer-support systems need both, with an ex...
🌍 Dev.to

How to Style an HTML <hr>: A Clean, Copy-Paste CSS Pattern

Most browsers render an HTML <hr> as a horizontal rule, but the default styling is not always what you want in a real interface. A common first attempt is to change height or color and move on. That can leave the browser's default border in place, which is why a divider may look thicker, doubled, or different from the design you expected. Here is a small, reusable pattern that makes the result predictable. Start with a stable divider class Add this HTML wherever...
🌍 Dev.to

How I Grew Buildside to 130 Users in 2 Weeks by Building in Public

Two weeks after launching Buildside, 130 people had joined. I did not have an ad budget or a huge email list. There was no secret growth trick. I grew Buildside by sharing the journey on X and LinkedIn, speaking with users, and letting their feedback guide the app. The biggest lesson I learned was: You have to market your product long before you launch it. I started marketing before the app was ready Many founders wait until their product feels finished before they talk abo...
🌍 Dev.to

You Have a Review Ceiling. Measure It Before It Measures You.

I sat in on Margaret-Anne Storey's DORA community session last week, and she put a name on the thing I'd been circling since April. It isn't technical debt. Her ACM Queue piece splits software health into three debts. Technical debt is the familiar one: implementation choices that make tomorrow's change harder. Intent debt is the missing rationale, the goals and constraints that say what a system is even for, which now has to be legible to agents and not just to people. Cognitive debt is...
🌍 Dev.to

Cloudflare injects a beacon. My CSP said no.

Originally published on indiecore.net . I deployed, opened the console on the live site out of habit, and found this: Loading the script 'https://static.cloudflareinsights.com/beacon.min.js/v3d52…' violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'inline-speculation-rules'". The action has been blocked. I had not added that script. It is in no template, no build output, and no dependency. grep -c cloudflareinsights dist/index.h...
Metrics Driven Security
🌍 Dev.to

Metrics Driven Security

Security teams have historically operated on instinct. A firewall rule feels right. A new tool seems like it will help. An audit finding gets patched because someone said it was important. That approach worked when security was a small, contained function bolted onto IT. It doesn't work anymore. Attack surfaces are larger, budgets are scrutinized more closely, and boards want to know whether the money spent on security is actually reducing risk. The answer to that pressure is metrics-driven secu...
🌍 Dev.to

Server-Rendered Login Sessions: Creation, Verification, Refresh, Logout, and Phone Recovery

Short answer: for a server-rendered learning app, create a short-lived session only after the phone code is verified, keep refresh as a separate state transition, and make recovery a deliberate path rather than an accidental logout loop. The useful design artifact is an auditable session record tied to a learner, device context, and recovery status. I build RAG and agent features in Python, so I tend to move from a notebook test to a production boundary quickly. Authentication deserves a slow...
Solving the Background Verification Bottleneck for enterprises: Inside BGVerifyIQ
🌍 Dev.to

Solving the Background Verification Bottleneck for enterprises: Inside BGVerifyIQ

Imagine an HR manager who has just completed this month’s hiring drive. Dozens of candidates have accepted their offers, and everyone is eager to onboard them as quickly as possible. But before that can happen, every background verification request has to move through multiple checks, vendors, approvals, and status updates. What should be a straightforward operational process often turns into hours of chasing spreadsheets, checking vendor portals, and answering the same status questions over and...
🌍 Dev.to

Nine categories: how engineering manager interviews actually get scored

Most EM interview prep fails the same way. You pick three strong stories, polish them until they're tight, run them past a friend, and walk in confident. Then somebody asks how you'd handle a high performer who's difficult to work with, and none of your three stories touch it. That isn't a depth problem. It's a coverage problem, and it's the thing that makes the EM loop different from every IC loop you've done. An IC loop samples from a narrow surface. Systems, code, a couple of behavioura...
🌍 Dev.to

I Ran git reset --hard in the Wrong Window

git reset --hard HEAD~3 — run in the wrong repository window, at 6:40pm, immediately followed by the specific kind of silence that happens when you realize what you just did before your brain finishes processing it. Three commits of uncommitted-adjacent work, gone from the working tree in under a second. The first, most important fact: it's very likely still there git reset --hard moves the branch pointer and resets the working tree, but Git doesn't actually delete commit obje...
🌍 Dev.to

Scope, not effort: how engineer promotions actually get decided

Most engineers who stall at a level have the skill. What they don't have is anyone willing to explain the machine they're inside. The explanation you get from your manager is partial by design. They know their part of the process and not the committee's, so what comes back is "keep doing what you're doing, you're close." Which is true, and useless, and then you're close again next cycle. So here is the machine, reconstructed from what the four big companies publish, what their engineers wr...
HackerNews

AI-DLC – one core, many harnesses

Article URL: https://github.com/awslabs/aidlc-workflows/tree/main Comments URL: https://news.ycombinator.com/item?id=49545120 Points: 1 # Comments: 0
HackerNews

Protocols for People: AI, the Internet and the IETF

Article URL: https://digitalmedusa.org/protocols-for-people-ai-the-internet-and-the-ietf/ Comments URL: https://news.ycombinator.com/item?id=49545281 Points: 2 # Comments: 0
HackerNews

AI security that assumes the attacker has root

Article URL: https://thenewstack.io/tide-raziel-emergent-authority/ Comments URL: https://news.ycombinator.com/item?id=49545513 Points: 1 # Comments: 0