MurphyA/hacker-news huggingface dataset:
by mustache_kimono | 2025-04-22 22:57:50+00:00
> It says that "our computers are thousands of times faster and more powerful than computers from the 90s and early 2000s" and yet somehow "flexibility and features" destroy all of those advancements.

This is the brain worm.

I agree with Blow and Muratori, et al., re: design patterns which are slow (aggressive OOP), and both are right about the solution (DOD). I agree that GCed languages are slower than minimal runtime non-GCed languages. Blow and Muratori are entirely right about the particulars of these tradeoffs, re: video games, their own software domain. But that's also why it's so frustrating that they don't understand that other software has different tradeoffs.

"Why is this new terminal not so fast?" is a fine question, but the answer is usually something like: Programming is an economic activity with tradeoffs, and, because that's true, perhaps the terminal didn't need to be that fast (by spending the marginal number of hours to make it faster)?

In the past, John Carmack and Michael Abrash did amazing things with the Pentium chip and x86 assembly, because those were the constraints on their problem. But don't forget that they didn't have the kind of constraints software has now. Memory safety and security being one important constraint they didn't really worry about unless that memory unsafety crashed the program. They didn't have distributed systems problems. They didn't have to ship their product to the cloud or the web (although they later did with Quake Live). Games are super interesting and complex, but so are distributed databases.

So -- I'd argue -- it is no less amazing to build the foundational software of the web. Don't kid yourself, these are incredibly hard problems, and it's perfectly okay that such software is not written in C/C++ for all the well known reasons C/C++ has problems in these domains. The reason this argument is such a muddle is because it may not have been reasonable to build some of things we've built without a GC, and that's okay.

From my own experience, I am working on a fuzzy finder in Rust, and let me tell you `fzf`, written in golang, is really hairy competition, because it has loads of features people really want and it doesn't have to worry about half the things I still need to worry about. Is junegunn a "bad" programmer and fzf a "worse" program, because my program is faster in a few arbitrary benchmarks? No, not at all. `fzf` has dozens of features we don't have and is fast enough for its domain, even where the domain expectation is non-GCed tools.
by sourya4 | 2025-04-22 22:58:18+00:00
Great questions! gemin-2.5-pro was pretty good in writing code that uses 3.7-sonnet! It drafted all the prompts and the pipeline.

You kind of called it. I had to tweak some minor SDK use details by sharing it the latest documentation docs in the second go.

I would say 30% Claude Code, 65% Cursor (gemini-2.5-pro), 5% manual.
by tomhow | 2025-04-22 22:58:29+00:00
> Is Graham still involved in HN?

He's on the board of YC, which appoints the CEO [1], and he still has a lot of influence. He still has dinner with dang from time to time to talk about HN [2].

> While it's true that he has spoken against Trump many times, Garry Tan is very close to Thiel, Musk, and the MAGA movement in general. Didn't he recently show support for DOGE as well?

I don't think that's a completely accurate characterisation. Garry continues to identify as a Democrat [3]. He works with people across the political spectrum to make the playing field fair for the earliest-stage startups, which is consistent with his roles as an early-stage investor and a partner (and now CEO) of YC for over a decade. Just a couple of weeks ago he hosted the Little Tech Competition Summit [4] in DC, featuring speakers from different sides and parts of government. One of the most notable speeches was by Cory Booker, who talked at length about the importance of making entrepreneurship accessible to people of all socioeconomic backgrounds, which is a cause Garry deeply supports, given his own life experience.

> Of course, YC is more than its current CEO and hopefully this doesn't affect the moderation of this website :)

Exactly :)

If we were making moderation decisions to serve individuals or agendas that supposedly our “salary depends on”, we'd tie ourselves in knots.

Our job is to keep HN a great place for intellectual curiosity.

[1] https://www.forbes.com.au/covers/innovation/y-combinator-sta...

[2] https://x.com/paulg/status/1758191829491859607

[3] https://x.com/search?q=from%3Agarrytan%20democrat&src=typed_...

[4] https://www.youtube.com/watch?v=yjIJOfgVgu0
by LinXitoW | 2025-04-22 22:59:58+00:00
I've only played with these kinds of plug and play databases, but mixing and matching seems like the worst of both worlds. The plug and play is gone, because some things might me in API 1, some others in API 2, and maybe worst of all, their domains might overlap. So you need to know that the "boring" changes happen via the postgREST, but the fancier ones via some custom API. The APIs will probably also drift apart in small ways, making everything even more error prone.
by pinkfluffymochi | 2025-04-22 23:00:53+00:00
We've built an app that solves one of the most tedious problems in security engineering - normalizing diverse log formats into a standard schema (OCSF). Security teams typically spend months manually mapping proprietary log formats to work with their tools, costing organizations millions annually in integration costs.

Our approach:

AI-assisted mapping that analyzes your logs and suggests appropriate OCSF mappings Support for both structured JSON logs and unstructured text logs Real-time validation against sample logs as you develop Export portable config files that can run in production with our open-source execution engine

The app is free for the community: https://app.ocsf.fleak.ai/

Break our AI, Win a Chair: We've also launched a challenge with our log classifier AI. Try to stump our classifier with unusual security logs at https://ocsf-classifier.fleak.ai. Winners who successfully "break" our AI will receive a camping chair at our RSAC booth (ESE-65) next week! This helps us improve our models while you test your security knowledge.

We've open-sourced the execution engine (ZephFlow) that powers the production deployments: https://github.com/fleaktech/zephflow-core

Looking for feedback on usability, especially from security engineers who've dealt with log normalization. We're also building a library of templates for common security logs - if you have particular log types that need mapping, we'd love to help create templates for them.
by linguae | 2025-04-22 23:01:22+00:00
Coincidentally, I just taught composition over inheritance this morning in my class on object-oriented programming in C++ at Ohlone College in Fremont, CA, and gave an example of why it is undesirable for a stack implementation to inherit a linked list as opposed to just having a linked list as a member. We will learn the SOLID principles of object-oriented software design on Thursday. I may end up passing along this article to my students. Thanks for sharing!
by rewgs | 2025-04-22 23:03:52+00:00
Really glad to see that someone has started on a Mac package manager written in Rust.

A couple purely superficial suggestions (echoing some other comments here):

- Lose the Brew terminology, especially if the name of the project isn't a synonym of "brew." - Change the name in general. "Sapphire" makes me think of "Ruby." IMO the obvious name is MacPac :p
by legitster | 2025-04-22 23:04:47+00:00
A related blogpost from the .org: https://wordpress.org/news/2025/04/jubilee/ Jubilee is probably a reference to the Old Testament concept of a Year of Jubilee where all debts are forgiven and everything is returned to their ancestral owners.

But this also sounds like a classic Mullenweg oscillation/overreaction at this point - instead of unbanning just the people whom he banned in pettiness, he would rather make a massive ordeal of it.
by jcarterwil | 2025-04-22 23:06:51+00:00
We dissect John Calhoun’s “Universe 25” experiment (limitless resources → societal collapse) and map it to modern nutrition economics. Post lays out data on UPF‑driven chronic disease and proposes market/policy fixes—nutrient‑density incentives, communal food culture, regenerative ag. Would love feedback from the HN crowd on the viability of these levers.
by anyfoo | 2025-04-22 23:07:28+00:00
curl is one of those projects that's probably meant to be ultra-portable, though, working across an incredibly wide range of platforms, some probably with comparably ancient compilers.

I don't actually know any details so I don't want to presume, but it wouldn't surprise me at all if targeting later standards simply isn't an option for the curl project due to portability. It may be that the (sizeof(t) == n) trick may just be what consistently works across all targets. (Until yours came along.)

I do remember when configure etc. still had to check whether ANSI prototypes (as opposed to the original K&R style declarations) were supported... I hope that check isn't much of a thing anymore.
by amanaplanacanal | 2025-04-22 23:07:38+00:00
I think part of the problem is we don't really know what a healthy diet looks like. We can point to what is probably unhealthy: eating tons of sugar filled items is probably bad, eating a lot of fried food is at least questionable, but beyond that we really don't know. The research is either poorly done, impossible to do, or you can find studies that go both ways.
by variaga | 2025-04-22 23:08:25+00:00
Private Equity playbook:

1) Buy a company from the stockholders by having the company take out loans (secured by future earnings) to pay for the stock. Do not pay for it with more than a token amount of your own money.

2) Slash company expenses in a way that generates short-term returns (but which normal companies don't do because it causes long term problems) like:

- don't buy new inventory to replace items sold (mentioned above)

- stop doing maintenance (saves money for a while, until everything breaks)

- delay paying outside vendors (works for a few months, until they stop shipping you stuff unless they get their money and/or sue you)

- sell physical assets (like the stores themselves) to an outside holding company (possibly owned by you) and rent them back, getting short term income for the company from the sale (but collecting the rent yourself, and also retaining the right to sell the real estate later).

3) pay yourself huge bonuses on the basis of your cost savings.

4) When the company is no longer viable, leave the empty husk behind. The company has a bunch of loans it will never be able to pay off (sucks for the lenders) but you keep your paychecks, bonuses and any assets you sold to yourself at below-market prices.

5) move on to the next company.

(basically, "the bust out" sequence from Goodfellas)
by zifpanachr23 | 2025-04-22 23:09:11+00:00
My theory: every (I'm exaggerating, more like most) systems programmer in the company was told to join Azure or get cut. Then outsourcing or something. It's been obvious that they don't have many experienced people left to work on native windows stuff for a while now. The constant churn in the platform apis and everything getting turned into a web app was the sign.
by hackingonempty | 2025-04-22 23:09:33+00:00
There isn't an update issue. BitTorrent metadata are hashes, they get updated and distributed at the same time as the current URLs and hashes in the same file or maybe in a similarly named file right next to it in the same pull request.

There is no state/seeding problem. The client downloads from the same https url as always but uses peers on an as-available basis to speed things up and reduce load on the origin.
by lisp51 | 2025-04-22 23:09:41+00:00
I find Lisp particularly powerful as well. We use Clojure on a daily basis, and the guide that helped us a lot in getting started was Brave Clojure -- https://www.braveclojure.com/ -- going through it was fun and didn't take long. In my experience though LLM tools don't have much difficulty writing Lisp any more than other languages. However, when they hallucinate it's pretty bad: either spitting something completely off-mark, or mixing up params (and other hard to detect details), so that might be the struggle you're wondering about.
by ramraj07 | 2025-04-22 23:09:45+00:00
In my (possibly not the best) opinion the most important quality will be to not delude oneself with the idea that their method or field is the most important field in all of science. Unfortunately academic structures force you to think and believe that and then proselytize that way. But if you stay above it at least in my books you're above most folks. But then I'm a lowly guy in a corner lol.

Practically what this means is that you should decide what you truly want to change (not necessarily what you can change with your current expertise) and pursue it across whatever fields necessary. If it's curing a disease, you have to decide what is the most important thing that's stopping us from curing that disease and pursue that exact topic. More often than not it's not anything software related. You have to grab a pipette at some point and guillotine a few mice at another lol.
by YeGoblynQueenne | 2025-04-22 23:09:47+00:00
Not sure about that. Plenty of Jesus calling himself, and others calling him, the son of god, in the Gospels. This is from John 14:

8 Λέγει αὐτῷ Φίλιππος· Κύριε, δεῖξον ἡμῖν τὸν πατέρα, καὶ ἀρκεῖ ἡμῖν. 9 λέγει αὐτῷ ὁ Ἰησοῦς· [l]Τοσούτῳ χρόνῳ μεθ’ ὑμῶν εἰμι καὶ οὐκ ἔγνωκάς με, Φίλιππε; ὁ ἑωρακὼς ἐμὲ ἑώρακεν τὸν πατέρα· [m]πῶς σὺ λέγεις· Δεῖξον ἡμῖν τὸν πατέρα; 10 οὐ πιστεύεις ὅτι ἐγὼ ἐν τῷ πατρὶ καὶ ὁ πατὴρ ἐν ἐμοί ἐστιν; τὰ ῥήματα ἃ ἐγὼ [n]λέγω ὑμῖν ἀπ’ ἐμαυτοῦ οὐ λαλῶ, ὁ δὲ [o]πατὴρ ἐν ἐμοὶ [p]μένων ποιεῖ τὰ ἔργα [q]αὐτοῦ. 11 πιστεύετέ μοι ὅτι ἐγὼ ἐν τῷ πατρὶ καὶ ὁ πατὴρ ἐν ἐμοί· εἰ δὲ μή, διὰ τὰ ἔργα αὐτὰ [r]πιστεύετε. 12 ἀμὴν ἀμὴν λέγω ὑμῖν, ὁ πιστεύων εἰς ἐμὲ τὰ ἔργα ἃ ἐγὼ ποιῶ κἀκεῖνος ποιήσει, καὶ μείζονα τούτων ποιήσει, ὅτι ἐγὼ πρὸς τὸν [s]πατέρα πορεύομαι· 13 καὶ ὅ τι ἂν αἰτήσητε ἐν τῷ ὀνόματί μου τοῦτο ποιήσω, ἵνα δοξασθῇ ὁ πατὴρ ἐν τῷ υἱῷ· 14 ἐάν τι αἰτήσητέ [t]με ἐν τῷ ὀνόματί μου [u]ἐγὼ ποιήσω.

https://www.biblegateway.com/passage/?search=%CE%9A%CE%91%CE...

This takes place during the last supper, after Judas has left. Philip asks whether Jesus can't just show them "the father" and Jesus says that anyone who has seen him, has seen the father, because the father is in him and he is in the father, and that he does not speak by himself but the father speaks in him and acts his (the father's) acts. Then he tells his disciples to believe that he is in the father and the father is in him (again) and that anyone who believes in Jesus will be able to do what Jesus does and more besides (I think he means miracles) because Jesus is going towards the father.

Finally:

καὶ ὅ τι ἂν αἰτήσητε ἐν τῷ ὀνόματί μου τοῦτο ποιήσω, ἵνα δοξασθῇ ὁ πατὴρ ἐν τῷ υἱῷ· 14 ἐάν τι αἰτήσητέ [t]με ἐν τῷ ὀνόματί μου [u]ἐγὼ ποιήσω.

My quick translation:

"and what you ask for in my name, that I will make true, so that the father is glorified through the son. If you ask for something in my name I will make it true"

So he's clearly saying he's the son of the father; and it's difficult to see what other father he means but god. I don't know why bible scolars have to go and split hairs here, it's very obvious what the Evangelist is saying Jesus is saying, you have to squint very hard to see something else.

There's plenty more of that from the same chapter and in other places in John and the others. And then you can read the passages on the cross where people come and make fun of him for having said he's the son of god.

People are assholes, trolling a man dying on a cross, but either there was a nasty rumour going around or Jesus really did call himself the son of god and that got up peoples' noses. On the other hand there's the bit about calling himself the King of the Judeans, which he seems to have vehemently denied in front of Pilate, so who knows? To his students anyway he seems to have clearly said he's the son of the father and the students certainly believed it.
by jmyeet | 2025-04-22 23:09:51+00:00
I envy the neurotypicals who can just form habits, 21 days or otherwise.

People are neurotypical rarely if ever understand what those with ADHD go through. The best description I've heard is that people with ADHD don't have habits: we have trauma.

The meaning of that is that neurotypicals have the capacity to simply go into a rom and do something. It almost passively happens. ADHD people do not. Even getting up in the morning involves 50 questions being mentally asked and answered. Do I need to take something to the bathroom? Did I run the dishwasher? Did I leave the heating on? Do I need to do laundry today? And I'm 5 seconds into my day.

A brain that seeks novelty quickly gets bored with reptition. The only way you form habits is by the trauma of the consequences of not having that habit.
by structax | 2025-04-22 23:10:07+00:00
shared a version of this idea before, but I’ve refined it a bit after reading some thoughtful feedback.

It’s about how many modern frameworks — especially in the JavaScript world — are quietly repeating the same architectural patterns of early 2000s backend frameworks (like PHP, Laravel, Rails), but wrapped in React and TypeScript.

My argument isn’t “PHP good / Next bad,” but rather: Are we confusing new syntax and branding with true innovation?

Would love to hear what the HN community thinks about the state of frontend architecture — and whether we’re evolving, or just orbiting old ideas with new tools.
by ssl-3 | 2025-04-22 23:12:16+00:00
In the absence of other influences, people tend to build with whatever is both cheaper [to buy and to use] and most-available.

If clay bricks are plentiful and cheaper in an area, then clay bricks tend to be used.

If dimensional lumber is plentiful and cheaper, then dimensional lumber tends to be used.

Same with concrete, or steel, or whatever. It varies regionally because the availability and cost of resources also vary regionally.
by sneak | 2025-04-22 23:12:48+00:00
It is bothersome to see people who obviously don’t believe in free software ideology and software freedoms (otherwise you would never produce nonfree software) (ab)using the open source community in this way.

Software freedoms exist as a concept for a reason, not just a bullet point to get people to click a download link that doesn’t even include source anyway.

I call such projects “open source cosplay”. It’s an outfit you put on for conferences, then take off when back at the office working on the nonfree valuable parts.
by testing22321 | 2025-04-22 23:13:01+00:00
The only country he is wrecking is the US. Every other country can still happily trade with every other country.

Sure, for some countries it will hurt short term, but long term they will all just increase trade between each other and do perfectly fine.

China’s exports to the US are only 7% of their GDP. Even if all that went to zero, they’ll still have the highest GDP soon enough.
by TankeJosh | 2025-04-22 23:14:49+00:00
100% agree with everything you’re saying here. This tool is designed to make the infra / DevOps person more effective by spending less time on tedious tasks and instead focus on the high level architecture and cost of their infrastructure. The deployment feature is mainly for testing any configurations in dev / staging environments before integrating with GitOps.

The workflow we imagine is an infra team either managing everything on their own, or providing private Terraform modules that the rest of their developers can ask the agent to configure for them. For teams that go this developer self-service route, you can also set custom validation rules and default configurations that are shared across your team.

Looking back on our launch post we definitely did not highlight who this product was built for well enough. I’d love to hear if there’s any aspects of the tool that you think would be helpful for your work!
by legitster | 2025-04-22 23:15:36+00:00
> In some ways, this is a loss—tracking cookies are undeniably terrible, and Google's proposed alternative is better for privacy, at least on paper. However, universal adoption of the Privacy Sandbox could also give Google more power than it already has, and the supposed privacy advantages may never have fully materialized as Google continues to seek higher revenue.

Cookies are much maligned these days, but to defend them a little bit - the alternatives are almost universally worse for user privacy. Persistent session storage? Browser fingerprinting? Locking everything behind a user account with mandatory sign-in? Blegh.

On the other hand, cookies are a pretty transparent interaction. It's a tiny file that sites in your browser. You can look at them. They expire on their own. You as a user can delete, modity, edit, hack them to your heart's content. They contain no PII on their own. They are old-fashioned and limited and that's a good thing.

The real problem here is not the cookie - it's the third party data networks. I would much rather focus our ire on the function rather than the form.
by robotnikman | 2025-04-22 23:15:40+00:00
>In such a situation, the best solution is slow charging, for which a low-power charger from your old feature phone is ideal.

It seems like most Android phones now have a feature that does this, though you have to enable it. Mine asked me to put in the time I go to bed and the time I wake up, and it slowly charges the battery over that time period to 100%
by llamavore | 2025-04-22 23:15:53+00:00
Paying for users (he calls it "subsidies") is mentioned but Chen talks about the fact that if you do it at the wrong time and you don't have hard side users or value and you're k-factor is too low, those users just churn. Theres a whole section dedicated to the strategic use of subsidies which have been used to great effect once you have a system of cyclic value generation.
by wahern | 2025-04-22 23:16:37+00:00
Western disbelief in the veracity of oral traditions isn't confined to cultures outside the West. It's as strongly antagonistic, if not more so, to Western traditions. If it's not written down, it didn't happen; and if it contradicts even one scrap of written literature, it absolutely couldn't have happened, no matter how overwhelming the non-written corpus of evidence. Heck, Europe birthed an entire religion, Protestantism, predicted on "sola scriptura".

OTOH, this insistence on verifiable data that can be easily shared and critiqued undergirds much technological progress. If the price to be paid in its excesses is the loss of historical knowledge, perhaps it's been worth it.
by woodruffw | 2025-04-22 23:17:21+00:00
The adjacent thread observes that there is an update issue, just one that has a technical solution.

> The client downloads from the same https url as always but uses peers on an as-available basis to speed things up and reduce load on the origin.

So some kind of hybrid scheme, which (to me) implies the worst of both worlds: clients are still going to hammer upstreams on package updates (since client traffic isn’t uniform), and every client pays a bunch of peering overhead that doesn’t pay off until the files are “hot.” In other words, upstreams still need to plan for the same amount of capacity, and clients have to do more work.

(The adjacent thread observes that none of this is necessary if CDNs or other large operators do this between themselves, rather than involving clients. That seems strictly preferable to me.)