MurphyA/hacker-news huggingface dataset:
by jesuscgv | 2025-04-16 19:41:11+00:00
hey, my name is Jesus and I'm studying computer engineering. I've been hitting the gym a while now and I'm way too lazy to keep writing down my reps with the week's day and all that. Plus, I had a hard time knowing if I was really improving or not, so I checked out some apps for help—but most them were super expensive, either because they threw in stuff I didn't want like nutrition or just charged way too much for what they offered. So, I teamed up with a friend to create a website that we could use at the gym—something easy to use overall. The site is called gymbenchmark in case anyone finds it useful. It's nothing fancy since it doesn't have a ton features, but it does exactly what we wanted: it's simple, nice, and comfortable to use. And cheap ahsshaasas. If anyone gives it a try, we'd really appreciate some feedback to improve it.
by Joker_vD | 2025-04-16 19:41:25+00:00
Yes, "ought" is the past tense of "owe". At some point, the second alternative spelling "owed" was introduced to better separate the two meanings (literal and figurative), but it's still the same word; a similar thing happened with "flower" and "flour", those used to be interchangeable spellings of the same word but then somebody decided that the two meanings of that word should be separated and given specific spellings.

And the construct "you owe it to <person> to <verb>" still exists even today but is not nearly as popular as "you should <verb>" precisely because it has to state to whom exactly your owe the duty; with "should" it sounds like an impersonal, quasi-objective statement of fact which suits the manipulative uses much better.
by enforzaguy | 2025-04-16 19:41:28+00:00
xengo.io is a smart short URL and marketing link platform with QR codes, real-time notifications to where you actually want it, and analytics that help you track, understand, and act.

Just a simple way to get notifications to the devices when someone clicks a link. Transparent to the user, but gives you real-time notifications to Slack, Microsoft Teams, WhatsApp, Telegram, Email, Discord and more with information about the smart URL, geo-location, browser type, IP address, user agent, device type (desktop, mobile, tablet etc), as well as any other metadata that you've added when you created the smart URL.

As well as the real-time notifications, analytics, trending, patterns and general reporting of the performance of your smart URLs.

I appreciate some expensive CRM systems will create individual URLs within emails, posts, websites etc that will identify an individual when they click a link, but I wanted to create something that wasn't related to a CRM.

Additional workflows (in development) are the QR Code generation so that people can print these out, stick them to a fleet of vehicles, and have a flow when scanned to send information on the company, but at the backend track which vehicle the advert was scanned on etc.

100's of use cases. As simple as get a Telegram when someone clicks on your link from inside a post... like this...!

https://dev.xengo.click/4805HA

Wish me luck.
by neogodless | 2025-04-16 19:42:15+00:00
There may be good ideas in here, particularly for the e-reader users, but it's a terribly unfriendly web site from a mouse / keyboard. Having no (apparent) way to escape eInk mode is really not a great user experience.

And I, too, fell into the eInk mode by clicking on the scrollbar. Very odd design decisions there.

I couldn't figure out how to go "up" in pages. Pressing "Home" didn't do anything. So a lot of web browser / mouse / keyboard functionality is thrown out in that mode, which shouldn't be necessary to still be a good e-reader mode.
by jedberg | 2025-04-16 19:42:32+00:00
Apologies for the HN rule breaking of discussing the comments in the comments, but the voting behavior in this thread is fascinating to me. It seems like this is super controversial and I'm not sure why.

The top comments have a negative score right now, which I've actually never seen.

And also it's a top post with only 15 comments, which is odd.

All so fascinating how outside the norm OpenAI is.
by mschuster91 | 2025-04-16 19:42:49+00:00
> Worse for some suppliers, but better for customers.

The problem is, it leads to cost-cutting and unsafe practices. The fact that American eggs and poultry meat need to be washed because it would otherwise be unsafe to eat from the horrible conditions the poultry is exposed to is telling enough.

> Citation needed. Normal statistics say that 'western masses' are getting ever richer.

Total wealth may grow but the distribution is ever more in favor of the ultra-rich [1]. Half of Americans report having to live paycheck to paycheck, mostly due to housing and fixed costs of living growing way faster than wages [2].

[1] https://apps.urban.org/features/wealth-inequality-charts/

[2] https://www.cnbc.com/2024/11/19/bank-of-america-nearly-half-...
by philipkglass | 2025-04-16 19:43:40+00:00
This is no worse than before. All electronic grade silicon is already produced starting from silane or trichlorosilane, and both are about equally hazardous to handle. See this overview of producing purified silicon:

"Chemistry of the Main Group Elements - 7.10: Semiconductor Grade Silicon"

https://chem.libretexts.org/Bookshelves/Inorganic_Chemistry/...
by steamrolled | 2025-04-16 19:44:25+00:00
I don't think these comparisons are useful. Every time you look at companies like LinkedIn or Docusign, yeah - they have a lot of staff, but a significant proportion of this are functions like sales, customer support, and regulatory compliance across a bazillion different markets; along with all the internal tooling and processes you need to support that.

OpenAI is at a much earlier stage in their adventures and probably doesn't have that much baggage. Given their age and revenue streams, their headcount is quite substantial.
by tibbar | 2025-04-16 19:44:42+00:00
While it's an idealized/toy setting, yes, these are both real categories of sensors. In particular, Sensor B, the "weird one", is just a system that has some defect/failure rate. An example might be a system that only works during the day and fails at night because it uses a camera. Or maybe a camera that's taking pictures from behind a helicopter rotor so it's frequently obstructed. Or maybe you are actually using a bunch of sensors and some of them are broken. (Of course, you'd have to tweak it a bit to get a scenario where every measurement is truly a 50% random split between meaningful and non meaningful, and you can't easily tell the difference, but as I said, this post is an idealized/toy setup.)
by danenania | 2025-04-16 19:44:48+00:00
Thanks, I tried to tone down the self promotion. To be completely honest, I was up all night coding so I'm not quite at 100% at the moment lol. I have massive respect for OpenAI and didn't mean to to try to distract from their launch. Sorry to anyone I annoyed!

I really appreciate your willingness to try Plandex and look forward to hearing your feedback! You can ping me in the Plandex Discord if you want—would love to get more HNers in the channel: https://discord.com/invite/plandex-ai

Or email me: dane@plandex.ai
by ModernMech | 2025-04-16 19:45:02+00:00
I get where you are coming from, I really do, I've worked with those self starters. I worked with a guy without any education past HS and he was great, he taught me a lot.

But the example was about a shop keeper playing candy crush on their phone, and you're relating it to experience with your highly motivated and bright colleagues working at your programming language organization, people I'm assuming you associate with based on their programming aptitude and innate interest in programming languages. How many shop keepers (the kind OP is referring to we're not talking about Good Will Hunting here) do you work with at your organization?

As an educator dealing with 20-somethings who are in the position of finding employment, I don't think what you're suggesting can scale. It's not a path the 100+ students I teach every semester can take. These students cannot pick up a leetcode book and study for 3 weeks and land a job at FAANG. Some of them have trouble landing a FAANG job with the degree, and the work experience, and project experience.

"The people with get-up-and-go are going to find a way get what they want."

Sure, this is just saying that the cream rises to the top. Maybe a handful of students could do it, but 90% of the rest of them not going to, so they need alternatives. And we need to provide those alternatives because like I said, you can't build an economy from cream.

95% of the people need a framework to educate themselves, they can't just go to youtube.com and come away with the ability to pass a Google interview in 3 weeks. They need focused, intensive study. A tight feeback loop. The ability to get 1:1 time with an expert to move past hurdles. The ability to work closely with peers and to work in groups. Broad and varied perspectives. Instruction from actual experts (which I will point out your college had and most people don't). You know, a real education.
by schindlabua | 2025-04-16 19:45:18+00:00
Chess is not exactly a simple logic task. It requires you to keep track of 32 things in a 2d space.

I remember being extremely surprised when I could ask GPT3 to rotate a 3d model of a car in it's head and ask it about what I would see when sitting inside, or which doors would refuse to open because they're in contact with the ground.

It really depends on how much you want to shift the goalposts on what constitutes "simple".
by ori_b | 2025-04-16 19:46:18+00:00
> You also have to prove more frequently that you have control of the domain or IP in the certificate.

That doesn't particularly matter; if someone takes over the domain but doesn't have a leaked key, they can't sign requests for the domain with my cert. It takes a leaked key for this to turn into a vulnerability.

On the other hand, anyone that owns the domain can get a perfectly valid cert any time, no need to exploit anything. And given that nobody actually looks at the details of the cert owner in practice, that means that if you lose the domain, the new owner is, treated as legit. No compromises needed.

The only way to prevent that is to pin the cert, which this short rotation schedule makes harder, or pin the public key and be very careful to not regenerate your keys when you submit a new CSR.

In short: Don't lose your domain.

> Compared to a year?

Typically these kinds of things have an exponential dropoff, so most of the exploited folks would be soon after the compromise. I don't think that shortening to this long a period, rather than (say) 24h would make a material difference.

But, again, I'm also not sure how many people were compromised via anything that this kind of rotation would prevent. It seems like most exploits depend on someone either losing control over the domain (again, don't do that; the current issuance model doesn't handle that), or just being phished via a valid cert on an unrelated domain.

Do you have concrete examples of anyone being exploited via key mismanagement (or not proving often enough that they have control over a domain)?
by crote | 2025-04-16 19:46:33+00:00
No. The customer is violating their contract.

The whole "customer is king" doesn't apply to something as critical as PKI infrastructure, because it would compromise the safety of the entire internet. Any CA not properly applying the rules will be removed from the trust stores, so there can be no exceptions for companies who believe they are too important to adhere to the contract they signed.
by georgewsinger | 2025-04-16 19:46:44+00:00
Somehow completely missed that, thanks!

I think reading this makes it even clearer that the 70.3% score should just be discarded from the benchmarks. "I got a 7%-8% higher SWE benchmark score by doing a bunch of extra work and sampling a ton of answers" is not something a typical user is going to have already set up when logging onto Claude and asking it a SWE style question.

Personally, it seems like an illegitimate way to juice the numbers to me (though Claude was transparent with what they did so it's all good, and it's not uninteresting to know you can boost your score by 8% with the right tooling).
by genewitch | 2025-04-16 19:47:14+00:00
Passing the risk for a price.

AWS is expensive, in my mind, because of stuff like this. They don't want you to nirror it on aws, so egress is expensive. The $/GB/month storage fees it'll cost to store this while exploring it is not cheap, either. And once you have an idea of the data you want to move out of the gap, you want to process /extract it quickly (because of $/GB/Month costs...)

I just thought about a spare machine I have with a 12TB spindle and an SSD not plugged into a network.

I understand how to airgap, and unless something can magically worm it's way through HDMI that's probably how I'd get data out, just to be annoying to everyone. To be fair.
by cube2222 | 2025-04-16 19:47:41+00:00
Fingers crossed for this to work well! Claude Code is pretty excellent.

I’m actually legitimately surprised how good it is, since other coding agents I’ve used before have mostly been a letdown, which made me only use Claude in direct change prompting with Zed (“implement xyz here”, “rewrite this function with abc”, etc), so very hands-on.

So I’ve went into trying out Claude Code rather pessimistically, and now I’m using it all the time! Sure, it ends up costing a bunch, but it’s easy to justify $15 for a prompting session if the end result is a mostly complete PR, done much faster.

All that is to say - competition is good, fingers crossed for codex!
by malshe | 2025-04-16 19:47:44+00:00
I had to learn Bayesian econometrics mostly on my own[1]. Fortunately, Jeff Miller[2] created a series of fantastic YouTube videos to explain Markov Chain Monte Carlo in detail. Personally, I prefer to learn mathematical concepts with equations and develop the intuition on my own. If you have the same preference, you will find his videos really helpful: https://www.youtube.com/watch?v=12eZWG0Z5gY

[1] I am lucky to know people who are fantastic Bayesian modelers and they helped me polish my concepts.

[2] https://jwmi.github.io/index.html
by 9rx | 2025-04-16 19:47:48+00:00
That's not an entirely fair take. Once upon a time it was believed that cryptocurrencies would be able to supplant payment processors (i.e. VISA, Master Card) We even had a rollout of crypto ATMs to utilize the belief in that network. That is a money printing business, so it wasn't unreasonable for VC money to chase it.

Sure, those intimately familiar with the technology may have always known that it wouldn't work, but the average person absolutely did not. They only came to learn that it wouldn't work as the cryptocurrency ventures proved that it wouldn't work.

The pivot to being some kind of tool to store wealth, or a way to trade cartoon monkeys, or whatever as a last ditch effort to save the companies that failed to turn it into payment processing technology was more obviously irrelevant, but that came much, much later. The VCs were desperately seeking an exit by that point.
by Ametrin | 2025-04-16 19:48:06+00:00
I recently released a Chrome extension that converts webpages to PDF. It's free, but you need to register to get a key. Unfortunately, this solution isn't client-side JavaScript; I'm using an API underneath. To be honest, I mainly created it to promote the API, but if it's useful for people, I might develop it further. Perhaps it could be useful to you in some way. I don't know your requirements, but maybe with this base in the form of this extension, it wouldn't be difficult to add something that meets your expectations, let me know. However, if you want to export a PDF from Ahrefs, for example, I'm afraid that might not be possible; currently, only basic authentication is supported. Unless maybe I could add an option like in my API to pass JavaScript code, but I also doubt that would work because Ahrefs probably has some bot protection.

edit: i forgot the link https://chromewebstore.google.com/detail/pdfbolt-web-to-pdf/...
by goku12 | 2025-04-16 19:48:58+00:00
> Good. CVEs were the poster boy of goodharts law for the longest time.

I guess this must have been by somebody else who thinks it's OK to shutdown CVE db because it isn't good enough for them.

> I know, hyperbole <= hot head => low reading comprehension

Try starting with the list in my first reply. Reading comprehension comes later.

> Sure, if that is the blocker, funding them more is fine by me.

Perhaps you should have started with that first before belittling their work. This is exactly what I have been saying all along.
by fallingknife | 2025-04-16 19:49:22+00:00
It is not charity for the researchers. That's money earned. It's charity for the bureaucrats who administer it. As for the facilities and administration it pays for, I take no issue with the facilities. I want to take an axe to the useless bureaucrats and lawyers involved. My dad is a university researcher and he faces endless bureaucratic nonsense to run his lab. If we want to keep researchers here we should start by making it easy for them. It's a cost savings too.
by thinkling | 2025-04-16 19:49:41+00:00
I find the wording ambiguous, but this:

> Eink mode is not a closed-file format reader but rather a form of responsive web design (RWD) integrated into the website itself.

suggests to me that it's a display mode you have to enable in the CSS design of the site, like "print" layout. I.e. this particular version is not software you can use on any site, it has to be baked into the site.
by dsr_ | 2025-04-16 19:49:54+00:00
Daniel K Moran figured out the endgame:

"Therefore, the Lunar Bureau of the United Nations Peace Keeping Force DataWatch has created the LINK, the Lunar Information Network Key. There are currently nine thousand, four hundred and two Boards on Luna; new Boards must be licensed before they can rent lasercable access. Every transaction--every single transaction--which takes place in the Lunar InfoNet is keyed and tracked on an item-by-item basis. The basis of this unprecedented degree of InfoNet security is the Lunar Information Network Key. The Key is an unbreakable encryption device which the DataWatch employs to validate and track every user in the Lunar InfoNet. Webdancers attempting unauthorized access, to logic, to data, to communications facilities, will be punished to the full extent of the law."

from The Long Run (1989)

Your browser won't access a site without TLS; this is for your own protection. TLS certificates are valid for one TCP session. All certs are issued by an organization reporting directly to a national information security office; if your website isn't in compliance with all mandates, you stop getting certs.
by caconym_ | 2025-04-16 19:50:01+00:00
Relative to the hype they've been spinning to attract investment, casting the launch and commercialization of ChatGPT as their greatest achievement really is a quite significant downgrade, especially given that they really only got there first because they were the first entity reckless enough to deploy such a tool to the public.

It's easy to forget what smart, connected people were saying about how AI would evolve by <current date> ~a year ago, when in fact what we've gotten since then is a whole bunch of diminishing returns and increasingly sketchy benchmark shenanigans. I have no idea when a real AGI breakthrough will happen, but if you're a person who wants it to happen (I am not), you have to admit to yourself that the last year or so has been disappointing---even if you won't admit it to anybody else.
by kgeist | 2025-04-16 19:50:07+00:00
>Assuming OpenAI are correct that o3 is strictly an improvement over o1 then I don't see why they'd keep o1 around.

Imagine if every time your favorite SaaS had an update, they renamed the product. Yesterday you were using Slack S7, and today you're suddenly using Slack 9S-o. That was fine in the desktop era, when new releases happened once a year - not every few weeks. You just can't keep up with all the versions.

I think they should just stick with one brand and announce new releases as just incremental updates to that same brand/product (even if the underlying models are different): "the DeepSearch Update" or "The April 2025 Reasoning Update" etc.

The model picker should be replaced entirely with a router that automatically detects which underlying model to use. Power users could have optional checkboxes like "Think harder" or "Code mode" as settings, if they want to guide the router toward more specialized models.
by gitremote | 2025-04-16 19:50:22+00:00
In your first example, you appear to assume that for calculations where "each mistake could cost $millions or lives", engineers who calculated by hand typically didn't double-check by redoing the calculation, so a second check with a 95% accuracy tool is better than nothing. This assumption is false. I suggest you watch the 2016 film Hidden Figures to understand the level of safety at NASA when calculations were done by hand. You are suggesting lowering safety standards, not increasing them.

Your third example is unclear. No calculators can perform factoring of large numbers, because that is the expected ability of future quantum computers that can break RSA encryption. It is also unclear why multiplication and division have different difficulties, when dividing by n is equal to multiplying by 1/n.
by ignoramous | 2025-04-16 19:50:29+00:00
Unless I misunderstood, GP mentions that the problem stems from WebPKI's central role in server identity management. Think of these cert lifetimes as forcefully being signed out after 47 days of being signed in.

> easier for a few big players in industry

Not necessarily. OP mentions, more certs would mean bigger CT logs. More frequent renewals mean more load. Like with everything else, this seems like a trade-off. Unfortunately, for you & I, as customers of cert authorities, 47 days is where the now the agreed cut-off is (not 42).
by axkdev | 2025-04-16 19:51:41+00:00
Hey! The weakest part of Claude Code I think is that it's closed source and locked to Claude models only. If you are looking for inspiration, Roo is the the best tool atm. It offers far more interesting capabilities. Just to name some - user defines modes, the built in debug mode is great for debugging, architecture mode. You can, for example, ask it to summarize some part of the running task and start a new task with fresh context. And, unlike in Claude Code, in Roo the LLM will actually follow your custom instructions (seriously, guys, that Claude.md is absolutely useless)! The only drawback of Roo, in my opinion, is that it is NOT a cli.
by echelon | 2025-04-16 19:51:41+00:00
Most people don't care about techies or tech drama. They just use the platforms their friends do.

ChatGPT images are the biggest thing on social media right now. My wife is turning photos of our dogs into people. There's a new GPT4o meme trending on TikTok every day. Using GPT4o as the basis of a social media network could be just the kickstart a new social media platform needs.
by mysteria | 2025-04-16 19:51:56+00:00
I actually do this for my homelab setup. Everyone basically gets the local CA installed for internal services as well as a client cert for RADIUS EAP-TLS and VPN authentication. Different devices are automatically routed to the correct VLAN and the initial onboarding doesn't take that long if you're used to the setup. Guests are issued a MSCHAP username and password for simplicity's sake.

For internal web services I could use just Let's Encrypt but I need to deploy the client certs anyways for network access and I might as well just use my internal cert for everything.