Hacker Newsnew | past | comments | ask | show | jobs | submit | MaxMatti's commentslogin

How's the battery holding up during vibe coding sessions or occasional LLM usage? I've been thinking about getting a MacBook or a laptop with a similar Ryzen chip specifically for that reason.


Currently I don't use vibe coding or even code assistants, so I can't speak to how the battery fares when doing that sort of thing. I don't know how much or how intensively they need to run the underlying LLMs.

For chatting with LLMs via ollama, I've seen total power usage go to about 50W (on an M3 Max) while the LLM is active, which is about 3x-4x power usage compared to just idling with browsers and editors open.

So I'd estimate about 2-3 hours of continuous LLM use on battery. Because I have enough RAM spare, at least there's no need to keep shutting down and reloading models.

I haven't really pushed it to find out how long they run on battery, as I haven't used LLMs all that much.

I'm more interested in the underlying operations of how they work, investigating novel model architectures and techniques, and optimising performance, than actually using them as an end user :-) Similar to how I enjoyed writing game engines more than playing games :-) Maybe I'll get into using them more in future.


The paper does mention that you can have your ssh keys signed by a ca, so in a company the it staff could configure everybodys os to only trust ssh keys signed by the organization.


> you can have your ssh keys signed by a ca

Good idea. That way when your CA private key leaks (the key which we never ever rotate, of course) the bad guys can compromise the whole fleet and not just one server. Bonus points if the same CA is also used for authenticating users.


>That way when your CA private key leaks (the key which we never ever rotate, of course)

As with X.509, any serious usage will involve a hardware security module, so that compromise of the CA host does not allow the key to be leaked. You'd still have a very bad day, but it can be mitigated.

I do think it's a fairly significant flaw that SSH CA doesn't support intermediate CA's (or at least didn't last time I looked into it) to enable an offline root CA.

>Bonus points if the same CA is also used for authenticating users.

The SSH CA mechanism can be used for both Host and User auth, yes.

Keeping in mind, in a real use case this would be tied to something like active directory / LDAP, so you can automate issuance of ssh keys to users and hosts.

Systems configured to trust the SSH CA can trust that the user logging in is who they say they are because the principal has already been authenticated and vouched for by the identity provider, no more manually managing known_hosts and authorized_keys, or having to deal with Trust On First Use or host key changed errors.

You can also set the CA's endorsement of the issued keys to fairly short lifetimes, so you can simplify your keymat lifecycle management a great deal - no worrying about old keys lying around forever if the CA only issues them as valid for an hour / day / etc. .

Overall I think you still come out ahead on security.


There's conflicting information in the readme about whether --best-effort is enabled or disabled by default.


I'm unsure how much of a difference that really makes as there's lots of distractions in my (and probably most peoples) morning routine that are not related to my phone. Boring things like the hygiene routine but also things that come up and require thought such as (almost) empty grocery items or things related to the commute such as radio in the car or ads in public transit. While most of these are not specifically engineered to be attention seeking, I still see most of them as distracting and my focus only starts when I sit down to do some work.


It's all about your body's natural response to dopamine highs and lows.

Social media, doom scrolling, candy crush, etc. are all high-dopamine activities. After you engage in these activates for a while, then stop, you're left at a relative dopamine deficiency, which your brain abhors. It attempts to rectify the deficiency by encouraging you to engage in high-dopamine activities, which you experience as being 'distracted' from the relatively low-dopamine-rewarded work you're trying to focus on. If you avoid engaging in high-dopamine activities in the morning, your brain WILL be more amenable to focus on low-dopamine-rewarded work.

Read Dopamine Nation for a handy primer on this.


To be clear, I woke up, opened a sugar free red bull, and began working immediately.

The rule was to spend at least the first hour offline, but I'd find myself getting so much done, I'd want to keep going, and usually extend it to 3 or 4.

In fact I was so productive during this time, I found myself looking actually looking forward to work the next morning.


Above a certain size all communities sooner or later turn into cults, most of the time around one or a few persons. The ones that you don't perceive as such you just haven't looked into close enough. I wish it were different but so far I have yet to find a community that doesn't fit that description. Not just open source, not just software, any community.


Next up: Substack?


Rhetoric question: how many Substackers use Notion to organize their writings?


Wouldn't that also apply if you blocked the number?


That only works if the marketing campaign exclusively uses the number you're blocking. In some cases - for example, political SMS in the US - it turns into whack-a-mole unless you unsubscribe properly.


Yep, US political spam is unblockable. I receive “wait, you’re a Republican, this can’t be right‽” style SMS messages from 10–20 unique phone numbers every day. The FCC’s spam complaint form only accepts one sender number per submission so I’m about 1,300 complaints in so far.


Unblocking might be faster, as it's something you only need to do on your end


If Firefox is so bad then which better alternative do you propose? The one owned by the biggest advertising company? The one that is only available on Apple's devices? The one owned by the company that puts ads into the start menu of your OS? The one that injects its own affiliate ID into the websites you browse? The one that takes tens of seconds to load even the simplest website? One of those that don't support JavaScript and thus don't let you use 99% of the web?


I guess that’s one way to look at it, but one of those options is clearly different from the others because the maker doesn’t have the same economic incentives.

It’s a shame that the EC decided to make it easier for websites to force users not to use that one, though.


I used Aegis for a while and really liked it, switched to Bitwarden now but the UX was better


I use both and make offline backups regularly.


Many important parts of android auch as the keyboard, camera App and even call/SMS have been der facto replaced with closed source alternatives by Google or your smartphone manufacturer.


I'm unimpressed by whataboutism. This doesn't change that I can a very fine LineageOS experience on my phone.

I'm also impressed by Inkscape, logseq, kicad, vscode. Gnome isn't exactly my cup of tea but it is pretty polished & my parents use it fine. Psi messenger works nice. Matrix/Element is fine.

I personally think there's an unbelievably huge amount of very good nicely polished open source apps out there. Ther would be even more apps and more polish if more folks would try venturing off the Windows & MacOS paths too.


Json is maybe a bit heavy, but using a machine readable format such as tsv or csv (including configuring your terminal emulator to properly display it) would be a big step up from the status quo.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: