Hacker Newsnew | past | comments | ask | show | jobs | submit | pitched's commentslogin

TPM-only saves you against someone pulling your drive. Probably more than enough for a USB drive. Enable startup PIN if you’re worried about someone grabbing the whole laptop.

I think it does not make much sense to protect the USB drive, as you won't be able to access it from another computer which is what USB drives are for. It makes sense to protect interval drives, but it is unlikely that someone would remove the drives and leave an expensive laptop to the owner.

I think of TPM-only more like a privacy lock than a deadbolt.

An encrypted external drive though works like a safe. Put things in there you want to keep safe but don’t need every day. Air gapped while not in use makes it even more safe.


I'm asking about TPM attestation in general, not Bitlocker

Yes.

Some modern CPUs have moved the TPM inside the CPU itself. But traditionally, TPMs were attached via the LPC (low pin-count) bus, and you could absolutely sniff them or de-solder them and arbitrarily MiTM.


It is surprisingly good at rubber ducking and also that phase of code review which is more of a sanity check than a full review. I also like using it to build an index of source code in a new (to me) project. It is a tool and, like all tools, has things it’s better and worse at.

Fewer people than ever are comfortable doing that, even though the information on how is easier to get than ever.

I hope a repairable and upgradable Steam Machine would help more people dip their toes into it.


I fully understand being uncomfortable with a CPU swap, but a GPU swap isn't difficult.

Valve also could have gone the Framework route of releasing a motherboard+CPU combo so you can upgrade later down the line just by swapping the board out.

I guess they can earn more money by soldering everything on the board and having you buy a completely new PC every time you want to upgrade.


That would include trade off of locking yourself to single form factor. Less of issue with laptops with decades of design behind them. But unlikely to be preferable for first design you make.

You could use mini-ITX form factor.

If they only subsidize engineering time, not part cost, this could still be a success for them. It could benefit them even to have people swapping OS and reselling parts. Steam does work across a lot of these combinations already.

The latest update makes it harder than ever to use. Like, it looks better, I see that. But whoever designed the new UI clearly doesn’t actually use one. For example, the battery level isn’t in the home screen UI anymore. You have to go into settings to see it. Battery only last a couple hours so it’s pretty critical to keep on top of.

I must say I have not touched mine definitely in 2 years or more. The product is just shameful.

The moment a group accepts VC money, this becomes the plan

Exactly. The goal of any VC by definition is to return a positive return on investment. I guess you might have a handful of exceptions, funds that are environmentally conscious, but profit remains paramount.

I was at stainless since the very beginning, I can tell you it wasn’t the plan

Yeah, but they now have new owner who might be having different plan.

The new owner's plan is...to sunset the paid product immediately and give customers access to tooling to be able to continue generating SDKs on their own. From Stainless's post:

    As we focus on Claude Platform capabilities and connecting agents to APIs, we’ll be winding down all hosted Stainless products, including our SDK generator. Starting today, new signups, projects, and SDKs will not be available.

    If you’re a Stainless customer, visit app.stainless.com/transition for help transitioning from Stainless-managed products to other options. As always, you own the SDKs you’ve generated to date, and have full rights to modify and extend them however you wish. 
As a customer, all-in-all, we were pretty pleased with the outcome. Stainless was a great partner to us, even in "the end," and I'm really happy for the team.

With respect, you were manipulated (either by founders or by investors). Startups leverage employees' pro-social leanings to make them feel good about a fundamentally anti-social enterprise.

HN cracks me up sometimes. Anthropic is anti-social? Stainless devs don't want their pre IPO equity to do well? Okay.

I very much doubt you would apply your expectation of altruism to yourself!


But I think that doesn't matter.

If you intend to sell it to the highest bidder eventually then what difference does it make what was your plan?

If a business had real values then they would never sell out (see lichess).


Why wouldn't getting more customers the plan? Anthropic doesn't acquire companies to have a lower market share. There is clearly a consolidation and a rush to get as much of the developer market as possible.

The plan can change with the right amount of money. Just ask OpenAI.

the plan isn't really up to the recipient of VC money lol

They all do way too much. I just want it to load fast, type with no latency, and get the hell out of the way. Like vim, but less confusing.


I also want them to not take up GBs of RAM for only having a few windows open. I want something not based on Electron. I want something native instead of written in Javascript.


I also don't want any of its dependencies to be written in Javascript. I also want minimal, auditable dependencies - build, package and runtime. Ideally, I want the app to be a single, portable binary that I can run anywhere, without installing. I also don't want the app to pollute my filesystem and litter configs and other dependencies everywhere. I want the app to respect the Freedesktop standards.

I also don't want the app to use GTK, libadwaita and the like. Although Qt is somewhat acceptable, I would strongly prefer something more lightweight like Slint, Iced or egui. Or even better, make it a terminal app with a TUI (that doesn't use bloated frameworks like Ratatui/Bubbletea etc).


Many thanks for taking the time to share mate. - no javascript (you're the #2 mentioning this) - small footprint, auditable (i read opensource is a must?) - no outside dependencies - Linux as a first-class citizen - TUI > GUI

I can read that you're probably a terminal power user, so how do you keep track of non-coding stuff like tracking JIRA tasks and handling code reviews? Are you using MCPs for that, or a TUI orchestrator with support for those sort of things - or do you manually go to those platforms yourself?

Once again, thank you for taking the time to discuss these things :+1:


Thanks for bringing the Electron topic! I'm actually using Electron, and it's mostly a web app - the reason being that will make it easier to host it online when I add support for cloud sandboxes. I imagine in the near future that we (developers) won't be writing much manual code anymore, and our time will be spent validating work or guiding agents to do said work (planning, architecture decisions, validating business logic, etc).

Electron on its own isn't that bad, and surely not responsible for GBs of RAM - the main bottleneck I'm facing when dealing with a dozen+ parallel tasks is that each claude code terminal eats up easily 200MB of RAM.

When you mention Electron, is it because in most Electron apps the experience doesn't feel snappy, as it would vs native?


soloterm.com is based on Tauri and uses less memory. It might not be your bottleneck but memory usage adds up with many projects and virtual machine. Not everybody wants to run their virtual machines in the cloud.


yep! conductor is also built in tauri, and there are dozens of alternatives. But it on itself won't make a big of a difference as it is still a wrapper around a web app. Tauri itself has a smaller build size because it doesn't bundle chromium and uses whatever webviewer the system provides (which is no longer a big issue, but still...). How's your experience with soloterm? Any features you love/miss?


It already has too many features and the author keeps adding more. Timers, notifications, additional notifications to tell me about new features he added. It (the sandboxes in soloterm) don't work well with my virtual machines, I'm sure it's my setup, in general sandboxes are good approach. All seems geared towards coding 24/7 and multiple agents on the same code base. Meanwhile even if code in parallel it's usually separate projects, separate languages. I can imagine you don't want to hear "less features" and look for more features to add instead.


- performance - simple/objective

Noted! Thank you first of all!

Besides those two points, is there anything else you think could save you time? Ex. notify you when your PR got approved, auto-fix CI errors, not ping you every 10 seconds asking permission to execute a bash command again, send a msg notification somewhere when work is done, or being able to continue working on your phone, stuff like that


I opened and it said to use a repo tab. There are no tabs so I pushed a button. It had a list with Linux so I clicked that. It redirected to a 404 page on github and I gave up.

I don’t know what this is supposed to do, let alone how to use it. But I looked at it for you!


There's a menu bar on the left in which the third option is labelled repository, no?

firefox 150 here.


Not on mobile safari


Two things, one is wrote, the other is direct: Thank you, sincerely, an immeasurably appreciative amount for trying something new, sharing your time and opinion, and being honest with it. This is how we become better tool builders and engineers: different perspectives, different ways of thinking, and honesty with others. Again - thank you.

For you: The 'tab' layout is pretty atrocious even as a one-shot run through of fitting most of the control areas to mobile and desktop screens. It's not easy, and a lot of 'feature' bloat makes it worse. Knowing what your first-time drop in was like and how you found that link is incredibly useful insight, and I'll be updating the layouts more to accompany first timers and instructions like the original source material I'm rebuilding from on the Apple side.


A lifetime is a long time. Much longer than children are children.


> A lifetime is a long time.

By all accounts it is not.


On studies showing napping increases lifespan and all the good things, a common complaint is that presence of naps is also an indicator of high socioeconomic status. This anecdote is a good counter to that!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: