Hacker Newsnew | past | comments | ask | show | jobs | submit | elwebmaster's commentslogin

People don't have time (or even mental capability / even more time) to learn CAD but they have a task at hand which they want done. If AI can generate a part which is "good enough" for the user at a cost that the user considers reasonable (I.e. zero) then AI gets used. If a part fails thats rarely a concern because these parts are just 3d printed and likely cost single digit cents in filament. User can always print a new one.

Right, but the thing that I think sort of militates against this scenario is this:

If a non-CAD person imagines a part that they need, the chances are very high indeed that either it isn't what they need, can't be made robustly or sensibly, or if it is, it already exists in some meaningful way that can be adapted, because one of tens of millions of other people already wanted it.

This scenario — needing something very specific that can be described only in words and nobody else has ever needed before — is almost imaginary. Most stuff just isn't like that.

Now… if someone were to design an AI CAD package that could remix objects that exist and combine them, perhaps with a GUI tool that allowed a user to identify attachment points, maybe that would be interesting. But a lot of that has been solved in non-AI GUIs already.

Text-to-CAD just isn't as good an idea as it seems. You are not going to be able to magic up some novel invention from a text description without a significant amount of domain knowledge of the words needed to describe a part, and that domain knowledge usually comes from learning CAD!

(Bit like getting a coding agent to write really good code)

And simple parts, sorry, just don't need much CAD skill. Get a CAD package on a free plan, learn enough to make your thing. You will get so much more out of that and it will be easier to make changes. It'll probably have standard tools for adding threads, even.

Even image-to-CAD for a functional part requires a significant amount of understanding of what to photograph and from which angles, etc.


Dude, coat hanger joint is broken. The free chatgpt gives openscat file I can just paste and convert to stl. I didn't even measure the diameter of the pipe, apparently those are standard. In 10 minutes I have a new 3d printed part to fix my coat hanger. No CAD UI app subscriptions, not reading CAD books or whatever. That's real life. Rest is in your mind.

You surely don't think you can scale from that to more complex parts.

With any tool?

We are doing AI screening. Candidate works with AI for 15 minutes and session is recorded. We review real output not AI generated resume. If candidate can get AI to apply and produce meaningful output then maybe we should hire that candidate. Currently outputs are manually reviewed but easy enought to have AI screen outputs.


The inundation of AI applications is shitty, but I think this side of the coin—AI interviewer—is even worse. This is degrading for a human applicant, and after the very immediate term it’s probably not going to be very useful. Instead of grinding leetcode, people are going to be grinding the AI interview, which is depressing to even consider. Not only that, but there’s also going to be an arms race of AI tools that can ace the AI interview for you.


Where do you work?

Mostly so that I can know to never apply, because that application process sounds awful and degrading.


If I am applying for a job, I invest my (valuable) time in them. I expect my counterpart to return that favour.

Anything else would be a quick bail for me, and I expect over time anyone who hires in disrespectful ways will get the candidates they deserve.


I hope you're aware that you'll lose a lot of top talent that way who won't put up with that.


I use AI for practically everything but I never outsource judgement calls to it, wish you luck, I’d love to see the postmortem.


This sucks man.


Oh if only cut and paste was broken... In Windows and Linux copy and paste itself is broken. Sometimes you copy with mouse, sometimes you copy with keyboard, and if it is a recent version of MS Office likely neither will work. Sometimes you paste with Ctrl+v sometimes with Ctrl+shift+v, sometimes with mouse, sometimes it just won't work. Such a simple operation should have been completely owned by the OS.


It works very reasonable on Linux/X11 with two separate clipboards - one for Ctrl+C/V and one for selection / middle click paste.

Ctrl+Shift+C/V is only necessary for terminals that already have other historical pre-GUI conventions for the Ctrl+ combinations - and you can always use a terminal emulator that lets you use Ctrl+C/V with the GUI semantics.


Can we bring it back with LoRA? It has a lot of the properties of the original internet: decentralization, slow speeds, and limited access.


Nonsense. Many if not all legit Claude users are using Claude Code inside their Cloud servers. How else would you use it anyway? For just local dev? That's so 2000 and late bro.


No, I'm not saying it's the exclusive and only measure (that would indeed be something we might see 20, 25 years ago), it's one of a myriad of discrete datapoints used to determine if an account is authentic or not.

There's a lot of inauthentic coordinated automated systems these days along the general lines of scraping/crawling/social media manipulation/sockpuppetry that require running through residential proxies or proxies to places that don't look like datacenter IP space.


Enough with web trash! Isn't vibe coding enough to build a proper program?


You are not alone. How about GPT 5.5? Does it come close to Fable 5?


GPT 5.5 xhigh is smarter than Fable but Fable like Opus 4.8 as well is faster and seems more “agentic”. It’s easy to test this. Build a fairly complex software with Claude(opus or Fable).

Review the commits with both Claude and GPT 5.5 Xhigh. You can see that Fable is still sloppy(er) compared to GPT. You can test it the other way around as well(drive the dev with GPT and review with GPT and Claude). You get the same result Claude has an edge though and that’s on building more beautiful user interfaces.


I somehow take the opposite on almost everything here.

4.8 xhigh or max has a slight edge on 5.5 xhigh, for very complex logic perhaps it loses but it's just better in almost every other way, especially code quality. GPT is a slop machine outputs way too much and over-abstracts, plus its communication is so bad in comparison.

Fable was for sure a step above GPT, I tried them both against a few of the same hard tasks and it was not a small difference.


5.5 is pretty good. It's no Fable though. It is definitely better than opus tho.


Why is npm still not blocked by every OS on earth is beyond me. These guys will never learn.


Nothing to do with nom itself. This sort of scam would have worked with many different technologies, even a Makefile.


Cat related technology like noms and toe beans are immune to this exploit. =3


fyi npm 12 will have securer defaults https://github.blog/changelog/2026-06-09-upcoming-breaking-c... but it will be a while for ecosystem to catch up and npm reputation already damaged


How does npm differ from any other package manager in that sense?


They typically don't execute arbitrary code when setting up the project.


If a build tool has any support for tests, it can execute arbitrary code, since that is what tests are. I am quite sure Maven's pom.xml can install binary jar into local .m2/repository, and later use it as plugin during generate-sources phase - and that is something an IDE will want to do when opening project. NPM attacks are really product of its popularity (and update churn that community already got used to).


You’re not wrong, but what an IDE does when opening a project directory is an issue with that tool, and not one directly addressable by the maintainers of the dependency management tool.

The more direct comparison would be whatever the equivalence of “npm install” is for a given language, and what it allows to run. Sounds like they’re making good progress to fix that, but it’s certainly more than a popularity issue.


Because uh every OS on earth has the exact same vulnerabilities? How are you supposed to stop a user from downloading something random from the internet and running it?


Some posix like systems mount /home with noexec in fstab.

Practically, most systems leave it off because many out-of-band user space script language package ecosystems stop working. =3

There are also adaptive application firewalls that are user friendly.

https://github.com/evilsocket/opensnitch


noexec clearly isn't going to help if you run untrusted JavaScript...


Sometimes, but nodejs or npm won't work properly without the headless chromium VM, and would need bypassing local file-access security-sandbox restrictions most normal system Web-browsers enforce by default.

If root installs OS supported VM packages, than it would be pointless to complain the system runs as expected. As a sentient turnip, I probably wouldn't know for sure... =3


npm is hard to avoid, as other ecosystems have integrated it as a cross-platform build/installer script bootstrap.

Indeed, all things nodejs are usually a dumpster fire at a hair salon, but the real point here was people always inherit whatever the previous cheapest labor built at that office. Also, usually people don't get to make architectural decisions for a long time. =3


There is no bona fide desire to solve the problem by the social media companies which are profiting from our kids. As a parent, I can never find the option to enable parental controls on apps like YouTube (especially on TV). This option is easy enough to implement locally without requiring any accounts or OS-level age support. However, clearly the goal is not to protect the children but to enable mass scale surveillance and profit from it. Even when I manage to enable parental controls by using a dedicated app or account (what nonsense is it that I need to create an account to restrict access!!!) the content being served is dubiously appropriate for the age group, aside from having no value whatsoever other than the intended goal of perpetuating addiction.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: