Hacker Newsnew | past | comments | ask | show | jobs | submit | aliasxneo's commentslogin

Did a Ctrl+F to try and find anything about `.agents/skills` in the release notes. My harness already fixes Claude's refusal here, so I can't tell if that's been supported yet or not. Annoying if they did one without the other.

What harness is that?

oh-my-pi

Tunneling was something that recently fell out of the work I've been doing [1]. I've used Cloudflare Tunnels before but I just have low trust with them recently with how big they are getting. All of these nice things come at the cost of pushing _a lot_ of traffic through their systems.

[1]: https://dntls.substack.com/p/the-new-internet


Reality check - you are not pushing “_a lot_” of traffic relative to any hyperscaler or large scale CDN. They push hundreds of Tbps sustained. You don’t peak at a few Mbps.

They can monitor extreme outliers. It’s not an issue for them.


In hindsight, that was probably a confusing sentence. I was more pointing out how much traffic flows trough their systems which ends up making it an attractive honeypot, especially as a U.S. company.

Sure any centralization of infra is an obvious risk for a myriad of reasons eg DoS, manipulation, honeypots, etc.

But again my point applies - the chances they get enough people using it that it becomes a meaningfully worse security target than lots of other existing things seems … super low.

It’s a big world, people make many choices I can’t understand (nix? Haskell? Php? <flame wars to /dev/null>). Even if this product nailed it - the number of people who can use it is minuscule - yes even as we add Claude-enabled PMs to the software dev ranks.

Alt view with the old saying - “put all your eggs in one basket … and watch that basket!”


I think they're talking about market capture risks

If there's any company in the world that can survive a lot of extra traffic being pushed through their systems it's Cloudflare.

I bet these new tunnels end up being a fraction of a percentage point of their network traffic.


Yeah, I don't doubt their infrastructure at all. In fact, I rate them fairly high in terms of reliability and performance. I've honestly been a fan of them for a very long time - it's just I'm watching all of this centralization happen and it sets my Spidey sense off. Like I'm waiting for the other shoe to drop.

The "centralization" which is cloudflare basically running its own walled garden version of the interent (how often do you see a cloudflare page checking if you're human?) is exactly why a lot of people do NOT like cloudflare. And if you've known about CF and its leadership since their inception you'd be even more wary of sticking your stuff over there.

I've migrated many companies off of cloudflare, usually because they end up pissing off companies when a contract renewal comes up and they slam them with massively increased bills and almost useless support if you aren't very high paying enterprise. I don't know how many CF support tickets I've just given up on over the last 15 years, usually related to their admin page, workers or some weird thing their system does that wasn't documented and I just stop getting responses and definitely don't get fixes.

If you ever worked in webhosting the Cloudflare wordpress/etc extensions are everywhere and back when I did work in hosting tons of support tickets were made because of CF. Could be way better now, I don't go near that industry these days.

The casual CF user sticking it in front of a blog they rarely look at and the business forced CF user has a very different experience. I cringe and seriously consider if I'm interviewing for an infra role and they use cloudflare. Usually it's startups that grew into larger businesses.


Gotcha, that totally makes sense.

I didn't take it as a capacity concern, but a "how much data do they get to look at" one.

It’s a concentration of power issue.

Given they seem to mostly offer services that are about as easy to switch away from as you could hope for, compared to, say, companies who write loads of CF that only runs on AWS, and I can't imagine why this keeps on being said for Cloudflare specifically. What power do they have?

It doesn't matter that they're easy to switch away from. It matters that people haven't actually switched away from them.

Can you explain why it doesn't matter that they're easy to switch away from?

Because it only matters whether people actually switch away from them.

Why?

Don’t the free tunnels have explicit limits on bandwidth and streaming?

They see all the traffic in cleartext. Plus you have to trust them not to maliciously alter your traffic. As a US company, their options may be limited if they are coerced by their government to do so.

Just use TLS / mTLS over the tunnel, no?

Interesting how 4/4 other replies didn't get the centralisation concern despite it being a fairly often discussed topic

Your opening piqued my interest, but:

“The substrate itself consists of a few systems…”

I doubt that this is how wordy your communication is.

“It consists of a few systems” would be adequate. And if we had prior context about what else exists that surrounds “the substrate” the “substrate itself” distinction would be meaningful, but it’s not, because you are referring to one object, which is the system you built, and I doubt any enzymes act on it, so it’s likely not a substrate.


There are other reasons not to trust them as well, especially if you've seen how their sales team operates https://news.ycombinator.com/item?id=40481808

Yeah, it reminds me of Google. Fool me twice ...

I'm not trusting any of these corporates any more


Cloudflare want you to push traffic through their systems. This is yet another traffic generator to drive up Cloudflare’s leverage when negotiating peering with carriers & service providers, in order to drive down the marginal cost of bandwidth for Cloudflare’s actual product viz. the enterprise DDoS protection.

True. Same reason Hurricane Electric peers promiscuously. I'm surprised more networks don't, to be honest - wouldn't say DTAG prefer that you peer with DTAG than peer with HE upstream of DTAG?

This is pretty great and I think this will be quite important in the age where everyone has their self-hosted services.

I feel like skills are going to succumb to influencer branding. People will use the ones their idol says to use.

Agreed here, though this product/marketplace may be able to be a landing site for precisely that.

Wrote some of my thoughts somewhat related to this recently [1]. I've simply concluded that its a matter of numbers: the more centralized data becomes the easier it is for the government to coerce access. If the government could obtain the data of a million citizens by coercing or engaging in law fare against one or two companies, it's much easier done. If they had to individually coerce, sue, or otherwise hack into those same million customers, it becomes a lot more expensive and difficult. It sucks that's the way it is, but that's why I think the new internet has to reverse the rules and make authorities more particular about who they track rather than just casting a dragnet across N major providers.

[1]: https://dntls.substack.com/p/the-new-internet


In the very same conference they announced WoW Forever. So whatever it is, it's not necessarily systemic, because they seemed to have nailed that audience.

Spending almost all of my time working on DNTLS (https://dntls.net/). Yesterday I was able to create secure mTLS tunnels over IPv6 for direct P2P to my co-founder's desktop in SE Asia (I'm in the US). He was able to load a website I was hosting locally on my machine. I also tested coordinating through a relay to avoid publishing my public IP and sending all traffic through the relay to hide my IP entirely. We more or less recreated the "old" internet in a way except everything is mTLS and E2E encrypted.

Why does that have to be the only reason? I personally think it has nothing to do with "Hacker" news, but I understand that sentiment has been in the fringe lately with HN becoming increasingly political.

Just to be clear, everything is political - whether you want to acknowledge it or not.

There's a far cry between someone showing off some weird contraption they hacked together versus posting about the Houthi's military campaign. If you can't see that, then I'm not sure what else to say.

What you're suggesting is that it's a spectrum and I agree. I don't know what to tell you.

“political” has a meaning, and it’s not “everything”.

Words mean things.


Totally, but I didn't say political means everything I said everything is political, which means anything a human does to any extent, tacitly or otherwise, is embedded in a power structure.

Why is there an "online" metric in the front page? That's one of the stranger things I've seen an AI do.

Seen an AI do? I built this. I'm using Elixir and this is using Presence.

Use to be a huge Blizzard fan back in the day. Can't get behind basically anything they are doing today. Time will tell if something like this just reinforces whatever is broken or results in real improvement. I'm cynical on the matter.

I remember when Warcraft 3 came out and a news outlet mentioned something on the lines of "gamers' trust in Blizzard borders on religious faith" and it sounded true.

It's unbelievable how far from that trust and love they have fallen.


> living in a society that treats lack of income as deserving of whatever pains and suffering

What does the opposite society look like? Universal income?


I’m not even sure that’s a useful question. It almost points at “what’s the other end of the continuum so we can discuss points on the axis”, which _is_ useful, but I’m not even convinced that “merely” treating those without income as deserving pain is at an end of a continuum itself. It’s a point upon it; things could be worse yet.

Instead let’s break away from opposites and into pieces. What would be _different_ in a society that doesn’t judge harshly the less fortunate?

I’d suggest that would include ensuring that nobody starves or sleeps on the street for want of work.


Richard Rorty describes liberalism as the idea that cruelty is the worst thing that exists. Cruelty, of course, has just as many forms as suffering.

Universal income protects only basic needs and it does so in part. Even if you have income, you need to have housing, clean water, food that isn't poisened and some form of healthy environment to live a good life: income doesn't guarantee it.

On the other end of the income spectrum is the unlimited amassing of wealth. After some point, wealth turns into power. For example, Musk is able to buy twitter influencing public opinion, and Starlink can make or break the battlefield.

If we are talking only about income, I think we would need both a minimum (universal) income and a maximum (a cap on wealth). If we do not, then we will eventually lose democracy.


It looks like a healthy extended family where resources are shared towards a common goal of health and liberty.


>It looks like a healthy extended family where resources are shared towards a common goal of health and liberty.

In the Europe, like several rich western countries, we mostly replaced the extended family with the government welfare state, for better but mostly for worse.

So current young workers are contributing to a failing state ponzi pension system that will leave them in poverty by the time they retire in several decades, and they will also lack the care of the extended family unit that was the norm decades ago thanks to collapsed birth rates. Double whammy.


Doesn’t sound very much like a healthy family to me


WDYM?


Unfortunately this does not work at nation scale. We are not insects. Tribes fail at levels over a few hundred and that scale only works because of blood ties. Communism has failed to produce good outcomes every time it's been tried. Even coops aren't competitive with traditional corporations.


Agreed, the human biological system likely needs radical augmentation in order to actually realize such a system

The median cortical volume fails beyond dunbars number, so some kind of compensation is needed


What if health and liberty to someone looks like them not providing any net positive to society? What compels someone to work 12 hours a day to share those resources with such a person?


Some people look to the nice things they have and think to themselves "I want everyone to have these things."


No argument there. The question is whether history shows us that that represents a majority or minority of people.


You’re making a point about loafers but non-wage earners are always going to outnumber wage earners, and able bodied loafers are a minute fraction of who we must provide for (the young, the elderly, students, the disabled, etc)


Sounds like an unhealthy person and situation such that 12 hours of labor is mandatory

Step one would be to help them get into a situation where that wasn’t true


If enough people decide they want to spend their liberty not working, then the 12 hours is a necessity, not something "unhealthy" about the person.


Sounds like you’ve got your world model rock solid


It mostly just feels like basic maths, not really a world model. Productivity is a finite resource. If there's a deficit in productivity, people will necessarily suffer and, in the worst case, die. The problem is world views that suggest giving everyone a free choice that enough people will choose productivity while everyone else chooses leisure. I'd be more apt to believe it if we had evidence of it being a natural outcome.


It doesn't have to be so extreme though. Basic scenario: 20% of everyone's income is taxed and then distributed equally to everyone (no matter what, and without setting any fixed dollar amount), another 10% pays for administrative functions and government stuff except welfare, and the remaining 70% is theirs to do with as they please. What would happen? Would everyone quit their job? I don't think so, because 70% is a lot. Some people with jobs that pay so poorly their 70% is less than everyone's average 20% would quit, but that's good, because those were zombie jobs.


I'd be fine with this so long as people who didn't contribute any taxes couldn't vote. Otherwise you're just signing up for those who choose to work to get exploited by the leisurely.


Are there historical examples of this ever happening in any significant numbers? This idea that people en masse just won't work and live off of the state where opportunities for work are reasonably available seems more like a boogeyman than a real thing. (obviously, if work is not really available, I can see this happening, but I wouldn't describe the people unable to find work as "leisurely" in that case)


How much is "none"? Exactly $0.00? Can someone who donates $0.01 to the government every year vote?


“I need the world to comfort my fears”

You’re correct. A society filled with people with this view can’t work


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: