MurphyA/hacker-news huggingface dataset:
by julik | 2025-04-08 11:26:43+00:00
So do I, but we were told that "open source is a gift", and I can only have opinions about choices made by others, not command them "do it this way instead". I am not the inventor, owner or maintainer of Tailwind nor do I aspire to be.

And as much as I prefer things be done well instead of.... like that... there are only that many hills to die on - and only that many people interested in my opinion :-)
by mbs159 | 2025-04-08 11:27:05+00:00
I don't really care where the videos are hosted, though. I watch on YouTube because that's where my beloved creators choose host their vids. If they started to host their videos on Vimeo or even archive.org, I would watch them there since I only care about the content.

> Hosting videos isn’t cheap, who should cover that cost?

The ad revenue is in the billions and is steadily increasing each year. I would bet that the costs are more than covered.
by ssh_row | 2025-04-08 11:27:14+00:00
Hey HN,

I’m building Picklock, a minimalistic bug bounty platform that helps small startups and indie hackers run simple bounty programs or a Vulnerability Disclosure Program (VDP) — without all the overhead.

Recently, I’ve noticed more indie founders — especially non-technical ones — are shipping entire products with AI assistance. But often, the code written by LLMs isn’t vetted for security. This leads to a scary trend: products getting hacked shortly after launch, damaging trust and burning early users.

Picklock is my attempt to fix that. Think of it like a Bugcrowd or HackerOne, but purpose-built for early-stage startups and AI-coded products. The idea is to connect hackers looking to earn bounties with founders who want to secure their products early, before things break.

What makes Picklock different?

Built for early-stage, vibe-coded products.

Focus on AI-generated code and solo/indie builders.

Lightweight — no bloated dashboards or complex onboarding.

Resources and guidance to help founders not get pwned.

Check it out https://picklock.47labs.io/ and if it resonates, please consider joining the waitlist. Your support would mean a lot — I’d love to understand if this is something the community needs.

Thanks! row
by orbital-decay | 2025-04-08 11:27:15+00:00
4o still exhibits the "pink elephant effect", it's just... subtler, and tends to reveal itself on a complex or confusing prompt. Negations are also still not handled properly, they tend to slightly confuse the model and decrease the accuracy of the answer or the generated picture. The same is true for any other LLM. Moreover, the author is asking the model to rationalize the decision he already made ("tell me why there can't be any elephants"), which could work as an equivalent to a CoT step.

It's "just" a much bigger and much better trained model. Which is a quality on its own, absolutely no doubt about that. Fundamentally the issue is still there though, just less prominent. Which kind of makes sense - imagine the prompt "not green", what even is that? It's likely slightly out of distribution and requires representing a more complex abstraction, so the accuracy will necessarily be worse than stating the range of colors directly. The result might be accurate, until the model is confused/misdirected by something else, and suddenly it's not.

I think in the end none of the architectural differences will matter beyond the scaling. What will matter a lot more is data diversity and training quality.
by M4v3R | 2025-04-08 11:27:40+00:00
Yeah, this is in my opinion the biggest limitation of the current gen GPT 4o image generation: it is incapable of editing only parts of an image. I assume what it does every time is tokenizing the source image, then transforming it according to the prompt and then giving you the final result. For some use cases that’s fine but if you really just want a small edit while keeping the rest of the image intact you’re out of luck.
by austin-cheney | 2025-04-08 11:28:16+00:00
I used an AI tool for the first time this weekend to get a military CAC to authenticate to websites through Firefox on Arch. It took more than half a dozen uses of the AI tool to get what I was looking for though. Super edge case and even the AI struggled like a human.

Yes, I still use search engines and almost always find what I need in long form if I can’t figure it out on my own.
by danielscrubs | 2025-04-08 11:28:38+00:00
1. Yes they won’t interact with the misbehaving person but they will loudly declare their feelings around it.

2. Police boxes are great when drunk people are causing ruckus. What are the details in your case?

3. Never said it was. You need to stop seeing things as being good or bad. What I said was strong incentives.

4. L-theanine has a calming effect, it is quite well known. Just as lead has the opposite effect.

To be productive, what actionable insights do you glean from countries such as Japan?
by cies | 2025-04-08 11:28:55+00:00
I agree with the author of the article in that it's often best to do as much as possible in plain-old HTML.

When an interactive "widget" is needed, I try to simply embed that in one HTML page, and avoid to make the whole app an single page application (SPA).

SPAs are problematic because you need to manage state twice: in the BE and FE. You also may want a spec'ed API (with client library generation would be AWESOME: GraphQL and OpenAPIv3 have that and it helps a lot).

> so you use normal frontend technologies

This is the problem. "Normal" means React/Vue/Angular these days and they are all shit IMHO. This is partly because JS is a rampification and TS fix only what could be fixed by _adding_ to the language (since it's a superset). So TS is not a fix.

I had great success with Elm on the frontend. It's not normal by any norm. Probably less popular than HTMX. But it helps to build really solid web apps and all devs that use it become FP-superstars in a month.

Tools like ReasonML/ReScript and PureScript may also have these benefits.
by dspillett | 2025-04-08 11:29:46+00:00
> I'm not aware of any meaningful differences between using the browser's password vault vs. using a local password manager's vault.

Both are better than using the same password, or overly simple passwords, on multiple accounts, and other human flaws. Beyond that there are some subtleties in the threat models, so the two options have a couple of slightly different risks.

If your browser is hacked, passwords stored in it could be unsafe. While the browser makers take great efforts to properly segregate the functions to reduce the risk, there have been cases where malicious code has been able to circumvent those efforts through bugs to gain access. There is also the issue of local attacks: if someone manages to unlock your workstation (or you accidentally leave it unlocked) your browser may helpfully fill in passwords where an external vault would not (or course if you left that unlocked too, this difference is moot).

Likewise the external password manager often means credentials being carried over the clipboard, and if not that then the OS message queue. Both of these can potentially be intercepted by any malicious running code that has managed to get into your current session, or you could simply cock-up and paste them into the wrong place (or perhaps have the password manager send them to the wrong place due to confusion over which window will get input focus when the password manager starts sending messages).

Personally I go with the external app and refuse to store passwords in the browser, in part because I like having to actively switch to it, unlock it, etc, because the possibility of more automated features (even if they are optional) makes me feel less safe. But there are safety arguments both ways, and for most people the distinction is not important: in both cases if malicious persons or code are that close to your credentials, in either storage location, you are probably rather screwed anyway!
by Clubber | 2025-04-08 11:29:50+00:00
I second this. I haven't had to do the typical recruiter channel since 1998. I have plenty of people I've worked with in previous jobs whose companies were looking for good people. This only works if you work hard enough to make a good impression.

I would suggest for your first job, take whatever you can get, as long as it is in your field, and deal with it for the first two years to get your foot in the industry. My first job was notoriously horrible, but after two years, I got a really good job with a company you've heard of through a recommendation.

Also, I would suggest looking outside the typical mega tech companies. There are plenty of other industries that need good people.
by rco8786 | 2025-04-08 11:30:10+00:00
> They've effectively destroyed the most progressive party from the inside, by having it push ludicrous and unpopular policy

I generally agree with this (as a mostly democratic leaning citizen)

> that privileges males and actively harms women and girls.

But was surprised to see it followed by this. Can you explain your logic here? Not disagreeing. But at a glance it seems to me that it's the rolling back of DEI policies that is privileging males and harming women and girls.
by maverwa | 2025-04-08 11:30:40+00:00
I may be failing to understand the protocol here, but the thing it returns for a weather request is intented to be ingested by an LLM, which then uses that information to reply to a user, right? Whats the benefit of adding CSS styling, or even HTML formatting to the output over just a plaintext response? I'd image that adds a lot of unecessary tokens the LM has to grasp?
by d4rkp4ttern | 2025-04-08 11:30:48+00:00
Diagrams are still a big unsolved problem. Making diagrams for a talk or paper is an extremely tedious process and I am still waiting for a good multimodal LLM solution for this. It should take a sketch and/or text description of what you want and in a few iterations you should get what you want. GPT4o tries hard but results are still bad.
by shubhamjain | 2025-04-08 11:32:48+00:00
The Ghibli trend completely missed the real breakthrough — and it’s this. The ability to closely follow text, understand the input image, and maintain context of what’s already there is a massive leap in image generation. While Midjourney delivered visually stunning results, I constantly struggled to get anything specific out of it, making it pretty much useless for actual workflows.

4o is the first image generation model that feels genuinely useful not just for pretty things. It can produce comics, app designs, UI mockups, storyboards, marketing assets, and so on. I saw someone make a multi-panel comic with it with consistent characters. Obviously, it's not perfect. But just getting there 90% is a game changer.
by hnbad | 2025-04-08 11:33:30+00:00
I agree with most of the points but I would condense #2 and #3 to "Move most things into scripts". Sometimes it's difficult to avoid complex workflows but generally it's a safer bet to have actual scripts you can re-use and use for other environments than GitHub. It's a bad idea to make yourself dependent entirely on one company's CI system, especially if it's free or an add-on feature.

However I'd balk at the suggestion to use Dhall (or any equally niche equivalent) based on a number of factors:

1) If you need this advice, you probably don't know Dhall nor does anyone else who has worked or will work on these files, so everyone has to learn a new language and they'll all be novices at using that language.

2) You're adding an additional dependency that needs to be installed, maintained and supported. You also need to teach everyone who might touch the YAML files about this dependency and how to use it and not to touch the output directly.

3) None of the advice on GitHub Workflows out there will apply directly to the code you have because it is written in YAML so even if Dhall will generate YAML for you, you will need to understand enough YAML to convert it to Dhall correctly. This also introduces a chance for errors because of the friction in translating from the language of the code you read to the language of the code you write.

4) You are relying on the Dhall code to correctly map to the YAML code you want to produce. Especially if you're inexperienced with the language (see above) this means you'll have to double check the output.

5) It's a niche language so it's neither clear that it's the right choice for the project/team nor that it will continue to be useful. This is an extremely high bar considering the effort involved in training everyone to use it and it's not clear at all that the trade-off is worth it outside niche scenarios (e.g. government software that will have to be maintained for decades). It's also likely not to be a transferable skill for most people involved.

The point about YAML being bad also becomes less of an issue if you don't have much code in your YAML because you've moved it into scripts.
by danielktdoranie | 2025-04-08 11:33:37+00:00
One of the events in my early life that got me interested in computers was a friend from middle school who lived near a Radio Shack and a neighbourhood computer store. He dumpster dived and got every computer he owned that way. He had a couple of Macintosh computers, this was like 1992, with cracked plastics. I enjoyed just sitting there and watching him tinker. His entire bedroom was filled with stuff he liberated from dumpster diving.
by acjacobson | 2025-04-08 11:33:52+00:00
I've run into something similar twice now in the last month. A candidate pauses or says 'let me think about that' on a relatively simple question as if to give an LLM time to respond. After the pause they give an overly long detailed answer - again like an LLM response.

One candidate was absolutely stumped and could not answer why and when they became interested in technology. They couldn't say anything about themselves personally. It was baffling.
by Crosseye_Jack | 2025-04-08 11:35:23+00:00
> But it can't be done en-masse, against every citizen.

I took that to be in reference to using "shoe leather" to conduct surveillance / investigations rather than today's ability to "simply" query a database for such information.

For example, back in the day (get off my lawn) if a crime happened in say a park in the middle of the night, then police would have to conduct door to door questioning to see who saw what and who in the area around the time, this required boots on the ground eating up man hours, something that doesn't scale up.

These days they can ask Google for a list of all the phones in the area at the time and will either have names/addresses tied to the Google accounts associated with that data or have enough data to then query the cell operators for that information.
by froh | 2025-04-08 11:35:40+00:00
oh, they'll stay around for another while.

they also moved on three more CPU generations since that redbook, to z17.

I think it's Linux on Z that makes it sexy and keeps it young, in addition to a number of crazy features, like a hypervisor that can share CPUs between tenants, and a hardware that support live migration of running processes between sites (via fibre optic interconnect) and the option to hot swap any parts on a running machine.

It's doing a number of things in hardware and hypervisor that need lots of brain power to emulate on commodity hardware.

_and_ it's designed for throughput, from grounds up.

Depending on your workload there may be very good economical reasons to consider a mainframe instead of a number of rack-frames.
by crabbone | 2025-04-08 11:35:40+00:00
Erm... no?

The highest ranking person I ever shook hands with was the GP Morgan head of futures department. He came to talk to the whole company to prep for acquisition. So, it wasn't a super official "ceremony", but it was in front of some fifty men, including senior management of the said company. He was wearing a polo shirt, jeans and a pair of sneakers. I don't know if this is how he'd show up to his office in the bank. Likely not (but who knows?)

Also, nobody in that room was wearing a suit.

Maybe your advise works for other places. For vast majority of programming jobs showing up overdressed will raise more questions about your sanity than score any points on preparedness.
by thiagoharry | 2025-04-08 11:36:02+00:00
Most of these cases were about former chinese areas that were occupied and stolen by the west. Suddenly, when China wanted them back, western countries begun caring about democracy and freedom. Compare this with current western powers which commited atrocities all around the world with colonies, US which attacked and invaded areas which were never theirs in Texas and Hawaii, and supported all sort of genocide, coups and invasions when countries around the entire world did not aligned with its capitalist system.
by rmnclmnt | 2025-04-08 11:36:12+00:00
Why? You lose your phone or compatibility with latest OS version and suddenly you can’t even open the door or bring the lights on…

Not the target of the article but another guess would be repairability: while local craftmens around do wonder with wood, steel and electricity, good luck finding someone being able to properly debug a locked-down proprietary digital system!

Welcome to the real world I guess?
by pavlov | 2025-04-08 11:36:45+00:00
What defines normal? It’s a strange idea when the typical stack for web front-end keeps changing. There isn’t even a single answer to the client/server split.

Is JQuery normal? What about the Google Closure compiler? ColdFusion? Silverlight? Ruby and CoffeeScript? Angular? SPA React with classes? Elm? SSR React with a server framework? Client-only vanilla DOM manipulation?

Your idea of normal is presumably whatever you’ve been using for the past few years. For someone who starts using Htmx now, it becomes normal. And if there’s enough of those people, their idea of normal becomes commonplace.
by dagw | 2025-04-08 11:36:47+00:00
I think we can safely assume that Tesla, in it's current state, is done for.

I wouldn't bet on it. People have short memories, and Tesla still make pretty good cars. The new model Y launching now has gotten a lot of praise from all the reviews I've seen. If (big if) Musk can keep his head down and stop making non car/spaceship related headlines and perhaps take a less prominent role in Tesla, I suspect this will blow over.
Show HN: Simpleformapp – A lightweight form and table tool for lead capture
by muriithiKabogo | 2025-04-08 11:37:30+00:00
Hi HN,

I built Simpleformapp to replace my Jotform + Airtable workflow. I was paying $58/month just to capture and manage leads — it worked, but felt like overkill.

So I made something simpler: - Create clean forms - View/manage submissions in a table - No bloat or complex pricing

It’s live and I use it daily to run my business. Would love any feedback — UX, performance, feature ideas, or thoughts on positioning.

Thanks!
by throw10920 | 2025-04-08 11:38:13+00:00
> SPAs are problematic because you need to manage state twice: in the BE and FE. You also may want a spec'ed API (with client library generation would be AWESOME: GraphQL and OpenAPIv3 have that and it helps a lot).

OK, this helps explain some of the reasoning.

Unfortunately, that means that the tradeoff is that you're optimizing for user experience instead of developer experience - htmx is much easier for the developer, but worse for the user because of higher latency for all actions. I don't see how you can get around this if your paradigm is you do all of your computation on the server - and if you mix client- and server-side computation, then you're adding back in complexity that you explicitly wanted to get away from by using htmx.

> "Normal" means React/Vue/Angular these days

I didn't mean (just) that. I included vanilla webtech in my definition of "normal" - I guess I should have clarified in my initial comment (I just meant to exclude really exotic, if useful, things like Elm). Does that change how you would respond to it?
by ndsipa_pomu | 2025-04-08 11:38:25+00:00
China always seems to play the long game and it's so much better to buy from a reliable trading partner rather than one where the rules can change with no notice. Almost the entire point of having trading deals between nations is to provide predictability. The U.S. is now going to be treated as an international pariah with pretty much every nation aiming to reduce trade with the U.S.
Show HN: FormReach – LLM form marketing automation for Japan
by nwatab | 2025-04-08 11:38:27+00:00
I developed an AI tool that automates contact form submissions for marketing. Simply select target companies from a list, and our LLM automatically fills out and submits forms for you. I created this because user acquisition was always the most time-consuming part of my previous product development and sales efforts. While currently limited to the Japanese market, I hope it can help those doing business in Japan save significant time.

FormReach features: - No initial costs; you're only charged for successful submissions - AI handles all form completions and submissions automatically - Continuously updated database of compatible contact forms

If you're interested in the Japanese market or have feedback on this approach, I'd appreciate your thoughts.
by Alex-Programs | 2025-04-08 11:38:36+00:00
> Rust → Memory safety with zero overhead (Mozilla)

I think Rust is interesting because while a lot of its initial appeal came from memory safety, a lot of the usage now is not as a C++ replacement but as a Go/JS/Java replacement. It introduced people to algebraic type systems, its excellent tooling, etc, and now it's moved beyond its initial appeal. When I use other languages I miss Result<>, Option<>, and the fact that everything - from if statements, to matches, to simply {} - is an expression.

There are places where I use it as a C/C++ replacement - STM32 firmware, for example - but I also use it for accelerating my webextension code with WASM and as a CRUD backend.
by throw10920 | 2025-04-08 11:40:05+00:00
> What defines normal?

For the purposes of my comment and question - I do: vanilla (HTML+CSS+JS) and the most popular frameworks (React, Vue, Angular, Next).

> Your idea of normal is presumably whatever you’ve been using for the past few years.

None of those matter for my comment. Just substitute the value I provided above in to my original comment and you should be able to respond to the substance of the point I was making.
by CharlieDigital | 2025-04-08 11:40:22+00:00
The problem is the market dynamic of EVs.

The people most likely to buy EVs are also the people that Elon has alienated. Your average red-state voter is not very likely on the EV bandwagon.

There was a period of time when Tesla was the only game in town for EVs. Now? That's not the case anymore with multiple automakers with competitive if not flat out better products, wider dealer and service networks, and compatibility with Tesla's charging network.

The brand damage he's done has been immense.
by motorest | 2025-04-08 11:40:34+00:00
> Sitting in a conference room under pressure after potentially flying out possibly hundreds of miles doesn't test your soft skills in actual day to day work. I've known many excellent engineers that buckle under that conditional.

You're complaining about the hypothetical effectiveness of concrete hiring practices. You are not rejecting the value and importance of soft skills.

Also, the ability to work under pressure is valuable skill. If you have a candidate that fails to perform when being in a room with someone else, I doubt you can argue that that's your hiring decision when other candidates are able to perform in similar circumstances.
by _heimdall | 2025-04-08 11:40:37+00:00
I really want to like the transitions API but I've been frustrated by it multiple times.

It feels like they wanted to build page animations similar to what Windows Phone had 15 years ago. That would be great, Windows Phone transition were surprisingly nice.

It just doesn't work on the web though, its an after thought. Animations on windows phone only worked because it was designed into the UI library and rendering engine from the beginning.