Hacker Timesnew | past | comments | ask | show | jobs | submit | more lima's commentslogin

How does this approach compare to the various Ghidra MCP servers?


There’s not much difference, really. I stupidly didn’t bother looking at prior art when I started reverse engineering and the ghidra-cli was born (along with several others like ilspy-cli and debugger-cli)

That said, it should be easier to use as a human to follow along with the agent and Claude Code seems to have an easier time with discovery rather than stuffing all the tool definitions into the context.


That is pretty funny. But you probably learned something in implementing it! This is such a new field, I think small projects like this are really worthwhile :)


I also did this approach (scripts + home-brew cli)...because I didn't know Ghidra MCP servers existed when I got started.

So I don't have a clear idea of what the comparison would be but it worked pretty well for me!


> But the implementation of Gerrit seems rather unloved

There are lots of people who are very fond of Gerrit, and if anything, upstream development has picked up recently. Google has an increasing amount of production code that lives outside of their monorepo, and all of those teams use Gerrit. They have a few internal plugins, but most improvements are released as part of the upstream project.

My company has been using it for years, it's a big and sustained productivity win once everyone is past the learning curve.

Gerritforge[0] offers commercial support and runs a very stable public instance, GerritHub. I'm not affiliated with them and not a customer, but I talk to them a lot on the Gerrit Discord server and they're awesome.

[0]: https://www.gerritforge.com/


Clearly, convincing it otherwise is part of the challenge.


This is changing, Ghidra is increasingly replacing IDA for commercial work.


LLMs don't really know why they got something wrong, so unless it had access to the original chain of thought, it's just guessing.


They don’t have access to their network level. But I assume they actually do have access to their chain of thoughts.


It's complex, but Ceph's storage and consensus layer is battle-tested and a much more solid foundation for serious use. Just make sure that your nodes don't run full!


Make sure you have solid Linux system monitoring in general. About 50% of running Ceph successfully at scale is just basic, solid system monitoring and alerting.


This line of advice basically comes down to: have a competent infrastructure team. Sometimes you gotta move fast, but this is where having someone on infrastructure that knows what they are doing comes in and pays dividends. No competent infra guy is going to NOT set up linux monitoring. But you see some companies hit 100 people and get revenue then this type of thing blows up in their face.


> AI first websites will get so popular that browsing sites manually will look like trying to use a text only browser in the JavaScript world.

That might be great for accessibility, though.


Postgres replication, even in synchronous mode, does not maintain its consistency guarantees during network partitions. It's not a CP system - I don't think it would actually pass a Jepsen test suite in a multi-node setup[1]. No amount of tooling can fix this without a consensus mechanism for transactions.

Same with MySQL and many other "traditional" databases. It tends to work out because these failures are rare and you can get pretty close with external leader election and fencing, but Postgres is NOT easy (likely impossible) to operate as a CP system according to the CAP theorem.

There are various attempts at fixing this (Yugabyte, Neon, Cockroach, TiDB, ...) which all come with various downsides.

[1]: Someone tried it with Patroni and failed miserably, https://www.binwang.me/2024-12-02-PostgreSQL-High-Availabili...


Postgres is not a CP database, and even with synchronous replication, it can lose writes during network partitions. It would not pass the Jepsen test suite.

This is very hard to fix and requires significant architectural changes (like Yugabyte or Neon have done).


> Postgres is not a CP database, and even with synchronous replication, it can lose writes during network partitions.

Argument is that partitioning almost never happens, because of network reliably rerouting traffic.


Reliable networks don't actually exist[1].

Clearly, it's possible to reduce the risk to the point where many companies are willing to accept it, but it's still a problem and comes with high operational costs. And for some use cases (like finance), even a small risk of undefined database behavior or lost writes is unacceptable.

The future are distributed databases with consensus, and unfortunately, Postgres isn't there yet.

[1]: https://aphyr.com/posts/288-the-network-is-reliable


reliable network and partitioning are two different things.

If your network is down, your clients can't connect DB too, and nothing works. State of network partitioning is harder to achieve, its more like if connection between two datacenters is down where DB replicas live, which is more rare because of all global connection redundancy.


It's really the same thing. Network partitions can (and do) occur within a single DC.

> If your network is down, your clients can't connect DB too, and nothing works

This sounds simple, but can only be achieved with high certainty using distributed consensus.


500 was just their first batch.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: