Hacker Newsnew | past | comments | ask | show | jobs | submit | bestcommentslogin
Most-upvoted comments of the last 48 hours. You can change the number of hours like this: bestcomments?h=24.

This is awkward.

Exhibit A - September 2025 - "Help build the future" - Cloudflare hires 1111 interns to "help build the future" [https://blog.cloudflare.com/cloudflare-1111-intern-program/]

Exhibit B - May 2026 - "Building for the future" - Cloudflare lays off 1100 people, about 20% of their workforce to "continue building the future" [https://blog.cloudflare.com/building-for-the-future/]

I'll finish on this quote: "The future ain't what it used to be." — Yogi Berra


Thank you for the update, Cliff. I will update your Wikipedia page to show that your death is currently under dispute.

> The packages for departing employees will include the equivalent of their full base pay through the end of 2026. Healthcare coverage is different across the globe, and if you’re in the United States, we’ll continue to provide support through the end of the year. We are also vesting equity for departing team members through August 15th, so they receive stock beyond their departure date. And, if departing team members haven’t hit their one-year cliffs, we are going to waive those and vest their pro-rated equity through August as well.

The announcement reads as pretty heartless to me, but this is a very, very nice departure package


Welp, looks like I’m affected. If anyone is looking to hire a systems engineer with distributed systems and load balancing experience, shoot me an email at <anything>@piperswe.me :/

I’ll update this with a resume link tonight…


Perspective from the trenches: I teach at a university that uses Canvas. We are in our final exams period right now.

We got our first email (from Academic Affairs) notifying us that it was down at 5:17pm EDT this afternoon, with little info; followup emails were sent at 6:24 and 6:57 with more info, but mostly about how we would be compensating for it and not about what actually was going on (other than, "nationwide shutdown" and "cybersecurity attacks", no further detail). I don't get a sense that they know much more than that, not that I would expect them to.

A perhaps telling detail: they're instructing us to have students email us directly with any work that had been submitted via Canvas. That suggests that they have no particular confidence that it will come back up soon.

I personally am only slightly affected; as a CS professor a lot of my students' work is done on department machines, and submitted that way, and I do the actual exams on paper. More importantly, I've never liked or trusted Canvas's gradebook, and so although I do upload grades to Canvas so students can see them, my primary gradebook is always a spreadsheet I maintain locally.

But I have a lot of colleagues for whom this is catastrophic at a level of "the whole building burnt down with all my exams and gradebooks in it"---even many of those that teach 100% in person have shifted much or all of their assessment into Canvas (using the Canvas "quiz" feature for everything up to and including final exams), and use the Canvas gradebook as their source-of-truth record. We've been encouraged to do so by our administration ("it makes submitting grades easier"). For faculty in that situation, they have few or zero artifacts that the students have produced, the students themselves don't have the artifacts to resubmit via email because they were done in Canvas in the first place, and they have no record of student grades or even attendance (because they managed that all inside Canvas). I guess they have access to the advisory midterm grades from March, if they submitted them (most do, some don't), but that might be it.

My gut feeling on this is that this is either resolved in hours (they have airgapped backups and can be working as soon as they can spin up new servers), or weeks (they don't). Very little in-between. And if that's true and we wake up tomorrow with this unresolved, I really have no idea what a lot of professors at my university and across the country are going to do to submit grades that are fair and reasonable. In the extreme case, they may have to revert to something we did in the pandemic semester (and before that, at my school, in the semester that two major academic buildings actually did burn to the ground a week before finals): let classes that normally count for a grade just submit grades as pass-fail. Because what else can you do?

(Well, one thing you can do is not put your eggs all in one basket, and not trust "the cloud" quite so much, but that ship's already sailed. I do wonder if in the longer term, anybody learns any lessons from this....)

UPDATE: As of 11:45pm EDT, my university's canvas instance is up and running! Here's hoping it stays (but I'll be downloading some stuff just in case...)


Dear Cliff,

I'm terribly sorry to hear of your passing, but am pleased that you have since gotten better.

Cheers!


The disconnect for AI is that it is a jagged frontier and it only really shines when one of its jagged frontiers extends counter to one of your valleys.

If you've been writing Perl for 30 years, you might not want to learn JavaScript just to make a little fun idea in your head to show your wife. Vibe code that shit man. Who cares? Your wife does not care about LOC or those internal design decisions you made.

If you're trying to learn something new like an algorithm, protocol, or API write that shit by hand. You learn by doing, and when you know how the thing works and have that mental context, you will always be faster than an AI. Also, when did we stop liking to learn? Why is it a bad thing to know all the ins and outs of a programming language? To write and make all the decisions yourself? That shit is fun. I don't care if you disagree.

If you're at work and they really care about getting something out of the door, do whatever you think is best. If you just wanna ship vibed code and review PRs all day, all the power to you. If you wanna write it by hand, and use AI like a scalpel to write up boiler plate, review code, do PR audits, etc... go for it!

A hammer is a really great tool that has thousands of purpose-designed uses. I still prefer my key to get into my car. It's all tools, you are a person.

A lot of this stuff if coming top-down from people who do not have the experience you do. Wouldn't a smart employee use their expertise to advise the organization? If you work at a company where that would not be okay, maybe it's time to start looking for another firm.


I have largely written Reddit off and no longer visit it after an experiment I did where I had an agent karma farm for me and do some covert advertising. As I went through the posts it wrote I realized that as a reader I would have NO idea that these were just written by a computer. Many many people (or other bots) had full on conversations with it and it scared me a bit.

I am not quite there with Hacker News but I do know for a fact that many "users" here are LLMs.

Online communities are definitely dying. I guess I hope that maybe IRL communities have a resurgence in this wake.


This really sucks. I loved this job. I'm an EM and I was trying to hire more people because we're so busy with everything we needed to do. My teams products are something like 95% profit.

Really going to miss my team, they were wonderful to work with. Secretly hoping they'll have to rehire.

I refuse to believe it was about AI. Coming from the inside, the bottleneck was never code. Seeing who is being laid off, especially on my team, it's the people who make things run.


Going from complaining about Apple not having enough polish in the fine details of their UI to suggesting we all switch to Chromebooks is so completely inconsistent that there must be other motivations.

In one post they're complaining about things like Apple having the search bar in different locations in different apps, and in the next post they're seriously trying to tell us that a laptop that requires modifying the software and running shell commands copied from the internet so you can run a text editor to change settings and drivers is the solution? They dropped a note about how they haven't actually tried development on the chromebook at the end but say they assume it would be okay. For someone telling us to switch to Chromebooks, they haven't even finished doing their own homework

Linking to an SEO spam website called technical.city for performance comparisons is another clue that this choice was driven by something else first and the reasoning was backfilled. The new MediaTek part is fast, but there's more to laptop performance than a single bar chart from a site citing ancient benchmarks like PassMark.

I can't read this as anything other than an attempt to make a contrarian choice and then present it as the superior alternative.


1000% agree. I am increasingly hesitant to believe Anthropic's continual war drum of "build for the capabilities of future models, they'll get better".

We've got a QA agent that needs to run through, say, 200 markdown files of requirements in a browser session. Its a cool system that has really helped improve our team's efficiency. For the longest time we tried everything to get a prompt like the following working: "Look in this directory at the requirements files. For each requirement file, create a todo list item to determine if the application meets the requirements outlined in that file". In other words: Letting the model manage the high level control flow.

This started breaking down after ~30 files. Sometimes it would miss a file. Sometimes it would triple-test a bundle of files and take 10 minutes instead of 3. An error in one file would convince it it needs to re-test four previous files, for no reason. It was very frustrating. We quickly discovered during testing that there was no consistency to its (Opus 4.6 and GPT 5.4 IIRC) ability to actually orchestrate the workflow. Sometimes it would work, sometimes it wouldn't. I've also tested it once or twice against Opus 4.7 and GPT 5.5; not as extensively; but seems to have the same problems.

We ended up creating a super basic deterministic harness around the model. For each test case, trigger the model to test that test case, store results in an array, write results to file. This has made the system a billion times more reliable. But, its also made the agent impossible to run on any managed agent platform (Cursor Cloud Agents, Anthropic, etc) because they're all so gigapilled on "the agent has to run everything" that they can't see how valuable these systems can be if you just add a wee bit of determinism to them at the right place.


I’ve seen managers hiring people with an intent to lay them off when winds change to protect themselves and their close circle. I can only imagine they’ve had great KPIs in both cases: first for scaling the team, and then for cutting costs.

I run a niche creative community, and we outlawed AI-generated content in 2022 as it was easy to see how corrosive it would be to the community.

It hasn't been easy. We ban fake AI accounts daily and shrug off around 600 AI content creator accounts monthly.

It's a lot of work, extra work that wasn't needed before AI content came around, and of course, that is an extra cost.

I fear losing the battle.


I work at Mozilla; I fixed a bunch of these bugs.

In general, I would say that our use of "vulnerability" lines up with what jerrythegerbil calls "potential vulnerability". (In cases with a POC, we would likely use the word "exploit".) Our goal is to keep Firefox secure. Once it's clear that a particular bug might be exploitable, it's usually not worth a lot of engineering effort to investigate further; we just fix it. We spend a little while eyeballing things for the purpose of sorting into sec-high, sec-moderate, etc, and to help triage incoming bugs, but if there's any real question, we assume the worst and move on.

So were all 271 bugs exploitable? Absolutely not. But they were all security bugs according to the normal standards that we've been applying for years.

(Partial exception: there were some bugs that might normally have been opened up, but were kept hidden because Mythos wasn't public information yet. But those bugs would have been marked sec-other, and not included in the count.)

So if you think we're guilty of inflating the number of "real" vulnerabilities found by Mythos, bear in mind that we've also been consistently inflating the baseline. The spike in the Firefox Security Fixes by Month graph is very, very real: https://hacks.mozilla.org/2026/05/behind-the-scenes-hardenin...


This was always a nightmare waiting to happen. The sheer mass of packages and the consequent vast attack surface for supply chain attacks was always a problem that was eventually going to blow up in everyone's face.

But it was too convenient. Anyone warning about it or trying to limit the damage was shouted down by people who had no experience of any other way of doing things. "import antigravity" is just too easy to do without.

Well, now we're reaching the "find out" part of the process I guess.


> AI didn't take our jobs. Greed did. Same greed that moved factories to Bangladesh and keeps slaves in cobalt mines in the Congo, wearing a new mask. Tell the nephew to do something else. Anything. It won't save him either, but at least he won't have to pretend the thing destroying his life is a robot.

This hit me hard. This article is art. I think I need to sleep on this and read it again in the morning.


I dislike the title because it doesn't clearly state it's a layoff. "Building for the future" gave me the impression that it's about some major new initiative with a roadmap outlining plans.

> Something about the whole thing always registered to me as, like, lame—too normcore, too boring, perhaps even too cheugy to an informed and taste-driven millennial ur-consumer like me. The kinds of brands I like to buy aren’t what they sell at Costco

Good example of how people can build identities through their brand choices and purchasing habits.

It’s a foreign concept for many of us who seek out the best product or deals for each purchase and will change brands in an instant if another company releases a better product. Yet the crossover between brands, identities, and lifestyles is deeply held by many people.

I know some will try to turn this into a criticism of Americans, but in my travels and international business experience I wouldn’t even rank Americans in the top 10 for integrating brands and identity. In some countries I had to make a conscious effort to try to wear clothes from acceptable brands and swap my functional laptop bag for something more stylish to avoid letting my purchasing habits become a point of judgment from others. It’s actually refreshing to come back to America where as long as you’ve made some effort to look more or less appropriate for the occasion few people care about the brand of your clothes, laptop bag, or car. Some people are proud of their Audi or designer bag, but I rarely run into situations where I’d be judged for arriving in a sensible Subaru instead of a Mercedes.


Feudal Japan had a measurement called the "koku", which is roughly the amount of rice needed to feed a person for a year: about 330 lb. You can now buy 50 lb. of rice at Costco for $30, which is a few hours of work at minimum wage.

To me, that is a modern marvel. I don't want people to buy things that they don't need, and I also don't like the crowds, but I can't help but feel grateful for a stocked grocery store that is accessible to basically everyone—isn't that the dream?

https://en.wikipedia.org/wiki/Koku


> The first is when novices in a field are able to produce work that resembles what their seniors produce [...]. > The second is when people generate artifacts in disciplines they were never trained in.

There is a third shape. Experts who have become so reliant / accustomed to AI that it dilutes their previously sharp judgment and, importantly, taste. I am seeing more and more work produced by experts which seems strangely out of character. A needlessly verbose text written by someone who was previously allergic to verbosity. An over-engineered solution (complete with CLI, storage backend, documentation, unit tests) for a trivial problem which that person would've solved by an elegant bash one-liner only 3 years ago. The work itself is always completely immune to any rational criticism, as it checks all the boxes: extensive documentation, scalable, high test coverage, perfect code style, and for texts perfect grammar, non-offensive, seemingly objective. But, for lack of a better word, it simply lacks taste.


I don't disagree with most of your statement, but Valve has and continues to make lots of money from loot boxes in both CS and TF2. Just want to point out that they do do stuff like that too.

"We are our own most demanding customer. Cloudflare’s usage of AI has increased by more than 600% in the last three months alone. Employees across the company from engineering to HR to finance to marketing run thousands of AI agent sessions each day to get their work done. That means we have to be intentional in how we architect our company for the agentic AI era in order to supercharge the value we deliver to our customers and to honor our mission to help build a better Internet for everyone, everywhere."

As an English enthusiast, I'm getting very frustrated at how the language is consistently abused in executive communications to write words without saying anything.

The implication that is NOT said is that suddenly 20% of people were sitting around without any work to do because AI was making everyone so efficient and productive. This does not, however, seem to be the reality, based on conversations within the company. It appears we have yet another case of economic downturn disguised as increasing velocity.


I love the polish, but credit where credit is due:

„Poland is the largest beneficiary of EU funds 2014-2020, with one in four euro going to Poland“

https://www.gov.pl/web/funds-regional-policy/poland-at-the-f...

Update: The comments below this are strange.

I ment: „Poland gets money, Poland transforms it into more money”.

Is Poland more efficient in it than other countries? I do not know. Would Poland have generated less money without it ? Probably? Is an annual investment of the 2-3%of the GDP into a country a lot? I think so?


I have my first contribution to Inkscape in this release I think. It's quite a minor feature though, so I don't see it in the changelog. It allows the user to set their default saved file name. I was tired of drawing.svg :)

This is surprisingly common.

The security of UUIDv4 is based on the assumption of a high-quality entropy source. This assumption is invalidated by hardware defects, normal software bugs, and developers not understanding what "high-quality entropy" actually means and that it is required for UUIDv4 to work as advertised.

It is relatively expensive to detect when an entropy source is broken, so almost no one ever does. They find out when a collision happens, like you just did.

UUIDv4 is explicitly forbidden for a lot of high-assurance and high-reliability software systems for this reason.


The only effective punishment/threat that I saw work on my bullies at school was the threat to remove one of them from the football team and prevent him from playing for the school. He turned it around and was ok after that.

It was highly effective because it was a bigger punishment than those used for not doing your homework, and because it was highly relevant to him specifically. It worked because we had 16 students to a class (I was very privileged to be there) and teachers who gave a crap and put the time in to understand the problem and think of potential solutions, rather than just apply generic policy.

The problem is that most schools don't do that, would likely argue they don't have time to do that, and also probably spend a fair amount of resources and time on relatively ineffective bullying prevention.


Brave started off incredibly sketchy and with terrible reputation, for example https://news.ycombinator.com/item?id=18734999

I haven't ever considered it since and I assume many others are in the same boat.


Whether it's AMP or manifest 3 or android source shenanigan or attempts to replace cookies with their FLOC nonsense or this...Google is rapidly turning into a malicious force when it comes to the open internet

It's the other way around.

Valve is the company where we spend a lot of money and they deserve it.

The rest is companies that trick people into giving them money (battlepass! lootboxes!) and they don't deserve it.

People often forget that consumers as a whole are the ones holding the power, and the sad part is that rewarding a company with a good product with your money stopped being the business model and it's now the exception.


The worst part is the sharp changes in the price being traded aren't achieved by magic but rather with guns & actual human suffering

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: