MurphyA/hacker-news huggingface dataset:
by nathanmarz | 2025-04-10 21:19:07+00:00
Yes, Rama emerged from following this approach exactly. The "make it possible" phase was grinding for years on innumerable backend infrastructure problems. These included problems I worked on directly at BackType and Twitter, and also the thousands of use cases I helped with through my open-source work (especially Storm).

The "make it beautiful" part involved unifying all these use cases into a single set of abstractions that could express them all concisely, with high performance, and without needing any other infrastructure. Since I was building such a general platform, I was also able to consider use cases I hadn't directly worked on – basically just looking at popular web applications and their features.

Leaving Twitter in 2013 was the start of the "make it beautiful" phase. By that point I had already figured out the broad outlines of what such a next generation platform would look like (event sourcing + materialized views, indexing with data structures instead of data models). It was a long road from there to figure out the details and turn it into a production platform.
by kelipso | 2025-04-10 21:19:11+00:00
> If you care about Dem ideology etc enough to follow their primaries

I don’t. I follow both primaries because that’s where almost all of the democratic process in the Presidential election happens. Once you have two candidates (third parties are obviously jokes), you get to choose between the two.

So, the primary process is very important to make sure democracy happens and I put a lot of importance in it. As should everyone.

And so, if a candidate does not win through that primary process, that candidate is illegitimate.
by notahacker | 2025-04-10 21:19:20+00:00
You're a lot less likely to get retaliatory tariffs when you're communicating to manufacturers that you intend to raise your $nicheproductclasses tariffs to support domestic manufacturing under industrial strategy and national security policy than when you announce blanket tariffs with threats. The US imposed 100% tariffs on EVs last year for example[1], which wasn't exactly a universally popular move but wasn't likely to provoke a trade war. Much easier to accept losing share of a market than every market, plus also less likely to accidentally punish the manufacturing industries you're trying to support.

[1]there's a certain irony in one of Biden's last actions being to impose tariffs in a way which massively helped Tesla, and one of Trump's first being to propose tariffs that could seriously hurt its supply chain if they don't get exemptions...
by iteratethis | 2025-04-10 21:19:37+00:00
I donated my old gaming PC to my nephew (20 y/o). I told him that owning it also means maintaining it. I don't have time for that. Figure it out, "digital native".

Within 2 days he had it ruined. Kept running hot and crashing. I told him over the phone how to analyze the problem. Nothing what I said made any sense to him.

So I came over and saw that he had installed 50 or so new programs, some very dubious. Zero security awareness, just click on anything like a grandma. One program was rogue and took 100% CPU in a forever loop. He had never heard of task manager to inspect such a problem. Completely clueless on how to use a PC or operating system.

He also has a sister. I asked her to share a document. She opens the document on the laptop and proceeds to make photos of the doc with her phone and sends them to me.

These are middle-class young adults with decent education (in theory). It's shocking.
by btilly | 2025-04-10 21:19:50+00:00
I dislike this feature.

The stated use case is to avoid injection attacks. However the primary reason why injection attacks work is that the easiest way to write the code makes it vulnerable to injection attacks. This remains true, and so injection attacks will continue to happen.

Templates offer to improve this by adding interpolations, which are able to do things like escaping. However the code for said interpolations is now located at some distance from the template. You therefore get code that locally looks good, even if it has security mistakes. Instead of one source of error - the developer interpolated - you now have three. The developer forgot to interpolate, the developer chose the wrong interpolation, or the interpolation itself got it wrong. We now have more sources of error, and more action at a distance. Which makes it harder to audit the code for sources of potential error.

This is something I've observed over my life. Developers don't notice the cognitive overhead of all of the abstractions that they have internalized. Therefore over time they add more. This results in code that works "by magic". And serious problems if the magic doesn't quite work in the way that developers are relying on.

Templates are yet another step towards "more magic". With predictable consequences down the road.
by davepeck | 2025-04-10 21:20:11+00:00
> I'm not sure if t-strings help here?

That's correct, they don't. Evaluation of t-string expressions is immediate, just like with f-strings.

Since we have the full generality of Python at our disposal, a typical solution is to simply wrap your t-string in a function or a lambda.

(An early version of the PEP had tools for deferred evaluation but these were dropped for being too complex, particularly for a first cut.)
by TheOtherHobbes | 2025-04-10 21:20:24+00:00
As someone else said - maybe you haven't noticed but there's a machine washing your clothes, and there's a good chance it has at least some very basic AI in it.

It's been quite a while since anyone in the developed world has had to wash clothes by slapping them against a rock while standing in a river.

Obviously this is really wishing for domestic robots, not AI, and robots are at least a couple of levels of complexity beyond today's text/image/video GenAI.

There were already huge issues with corporatisation of creativity as "content" long before AI arrived. In fact one of our biggest problems is the complete collapse of the public's ability to imagine anything at all outside of corporate content channels.

AI can reinforce that. But - ironically - it can also be very good at subverting it.
by aib | 2025-04-10 21:20:32+00:00
I ended up writing a similar plugin[1] after searching in vain for a way to add temporary DNS entries.

The ability to add host entries via an environment variable turned out to be more useful than I'd expected, though mostly for MITM(proxy) and troubleshooting.

1: https://github.com/aib/nss-userhosts
by shadowgovt | 2025-04-10 21:21:25+00:00
It's not precisely "just for show;" there are enough non-super DNC delegates that they can, in fact, outweigh the superdelegates if they have something approximating consensus. When it's a close race, the superdelegates can dominate the outcome.

But there's no reason to assume that anyone would have shown up to challenge Harris. The incumbent effect is very strong in both parties, and it's extremely rare to refrain from nominating the sitting first-term President, so there's no reason to believe the result of all of that wouldn't have been the successor the President recommended. Note that the initial Primary went landslide to Biden. American voters tend to go with recognizable names and tend to hew to tradition.

You're quite correct that relative to the GOP, the Democrats have a more elitist structure that consolidates leadership to party operatives. When you don't have that... Well, nobody in the GOP party machinery really wanted President Trump, but the GOP doesn't have superdelegates.

> 2016 insiders ratfucked Sanders to pick Clinton

This is a common hypothesis but Sanders never had the votes. He was about 3 million short of Clinton. While there's no doubt that the party preferred Clinton, the voters didn't show enough of a preference for Sanders to overcome that inertia. Again, American voters tend to go with recognizable names, and they already saw Clinton close to the White House (even if, as First Lady, she wasn't actually elected).

Were the Democratic voters even wrong? Clinton ultimately went on to win the popular vote. There's no particular reason to believe Sanders would have done so; we'll never know what that alternate reality would have looked like, but his opponents would have drilled in on his Jewish heritage and it would have gotten quite ugly (as Trump revealed, there's a lot of straight-up bigots who became politically motivated in 2016).
by BrandoElFollito | 2025-04-10 21:21:28+00:00
I do not think this was personal. As a security professional I have the same reaction.

Security is hard, but not only in the technical area. The whole governance is not obvious for someone who did not have these threats on their radar.

If you do security you need to be ready to get feedback you do not expect, in areas you may have not fully addressed.
by nhumrich | 2025-04-10 21:22:01+00:00
Nick Humrich here, the author who helped rewrite PEP 501 to introduce t-strings, which was the foundation for this PEP. I am not an author on this accepted PEP, but I know this PEP and story pretty well. Let me know if you have any questions.

I am super excited this is finally accepted. I started working on PEP 501 4 years ago.
by opto | 2025-04-10 21:22:56+00:00
Am I being a completely delusional sceptic or do tools like this make no sense to anyone else?

If you need AI to tell you about a guest and tell you what to ask them, why are you having them on your podcast? You don't know anything about them, and have nothing to ask them - why does the world need you to do this interview? You don't care about your guest at all, so why would we want to listen to you talk to them?

As the guest, why bother responding to questions made like this? Why not have an AI write answers for you, since you are probably equally uninterested in your interlocutor and their questions?

Skip the bs and just publish the transcript of two AIs talking to each other.
by bee_rider | 2025-04-10 21:23:08+00:00
What do you do now?

I have a Flair Espresso machine and get beans from a nearby roaster. I dunno. It seems decent. I don’t consider myself a snob, but I put some effort in.

Maybe Italians would be able to tase the defects that I add. But, they are the people who popularized Moka pots so they can’t really be so perfect.
by trelane | 2025-04-10 21:23:24+00:00
> You can choose not to contribute your changes back to permissively-licensed software, but in actual practice most people do contribute them.

They contribute some things, sure. But the also don't contribute some things. It is hard to know how much because it's kept secret from all of us, even their own customers.

> "It's not like the Rust compiler is proprietary software with their own closed-source fork of LLVM..."

Rust no, hut there are a lot of proprietary, semi-incompatible proprietary forks out there.
by janalsncm | 2025-04-10 21:23:30+00:00
I don’t see how that increases the phishing risk. If the user mistypes a url, DNS doesn’t have any anti-spam mechanisms. If they mistype part of a url, Google can correct it.

Whether or not they do so in practice is another question of course and there are well publicized examples of them failing.

If what you’re saying was correct then preventing most phishing emails would simply be a matter of “educating users”. I believe at scale that is an impossible task.
by aseipp | 2025-04-10 21:23:37+00:00
I care a ton about fast and accurate build systems but one issue I think we haven't solved is that: people do not want to use other build tools for their language. "Why isn't it Cargo? Why not use NPM/Yarn? Why not use Pip? Why not CMake?" These questions are often rhetorical because they do not care about build systems. They don't care about the design. They don't care if your CI could be 5x faster. You will never make them care. It's good enough. You must have absolutely zero externalized cost (and therefore put in a lot of effort) to get over this hurdle. There's seemingly no way around it.

The reason a lot of people like Bazel is, I think, tools like Gazelle -- which reduce that whole problem back to "Run gazelle" and all the crap is taken care of for you. Dependencies, BUILD files, etc. People constantly talk about the "complexity" aspect, but very few people appreciate how complex Cargo, NPM, Yarn, Cabal, Dune, internally are. Because they just run "build", and it works. Bazel, Buck2, Mill, etc will all have this problem unless huge effort is put in.

TBH, this is one of the reasons why I think Nix has wildly succeeded in the past few years while more fine-grained and scalable systems have had adoption problems -- despite its numerous, numerous flaws. You get to Bring-Your-Own-Build-System, and Nix along with the blood of 10,000 upstream contributors keeps the juice flowing, and it's cached and hermetic so you see real savings. That greatly eases people into it. So they adopt it at all points on the curve (small, medium, huge projects), because it works with what they have at all those points. That makes them willing to get deeper and use the tool more.
Show HN: I built a tool to manage and compare credit card rewards
by jsh1 | 2025-04-10 21:24:28+00:00
This is a free tool that helps you manage and visualize your credit card rewards across different categories.

You can input the cards in your wallet and see how they complement each other, spot gaps in your setup, and also see the best card to use for a given merchant.

I’m also a founder at OneCard, where we’re building a smart card that’ll eventually handle all of this automatically, routing each purchase to the best card in real-time.

Would love feedback from the HN community!
by notahacker | 2025-04-10 21:25:04+00:00
Presidents don't need multi-decade initiatives to be not so hopelessly inept at trade policy they end up hurting manufacturing rather than bringing it back.

Trump shouting about how his amazing tariffs are going to bring manufacturing back and then promptly cancelling most of them and bragging about how everyone wants to do deals with him and he's going to do beautiful deals isn't any kind of strategy for bringing manufacturing back, and frankly the fact that so many Americans are dumb or partisan enough to insist it is represents a bigger problem for US industrial policy than term limits
by NKosmatos | 2025-04-10 21:25:18+00:00
I was thinking of posting something similar since we’re into galaxy spotting season here in the northern hemisphere. I plan to do it with my Dwarf DII telescope :-)

Some additional links to help fellow amateur astronomers and astrophotographers:

https://www.messier-objects.com/messier-marathon/

https://www.dwarfvision.com/object-catalogues/jbs-dsos

https://youtu.be/-QKHuNJKEgA
by robocat | 2025-04-10 21:26:07+00:00
I'm much more interested in someone who says they voted for Trump. What makes em tick?

Then again, I find people with mental health issues interesting - some of my good friends are literally crazy.

There are Trump supporters that are New Zealanders too - although they are often quiet about it (due to pushback from more socialist types).

The memetic infection of American partisanship and bullshit is strong here. Talk with people and hear clichéd US words and statements (left & right) regurgitated.
by davepeck | 2025-04-10 21:26:11+00:00
I'm not sure I agree with this analysis.

Template.__str__() is equivalent to Template.__repr__(), which is to say that these aren't f-strings in an important sense: you can't get a useful string out of them until you process them in some way.

The expectation is that developers will typically make use of well-established libraries that build on top of t-strings. For instance, developers might grab a package that provides an html() function that accepts Template instances and returns some Element type, which can then be safely converted into a string.

Stepping back, t-strings are a pythonic parallel to JavaScript's tagged template strings. They have many of the same advantages and drawbacks.
by bsder | 2025-04-10 21:27:03+00:00
> I think few people would argue that the upfront cost of rolling your own docs site could possibly be lower than the cost of deploying an off-the-shelf solution like Hugo.

I'm not convinced. At some point, you will have to debug something weird in your docs system.

If you deploy Hugo, that means understanding Go. Docusaurus--Javascript, Node, and that entire ecosystem. With this, it's Zig all the way down.

Zig users tend to be (possibly notoriously) anti-dependency.
by ratorx | 2025-04-10 21:27:17+00:00
I’m not sure you understood my example. The f-string is within a function. The function argument only accepts sanitised input type.

If you create a subclass of str which has an init function that sanitises, then you can’t create a Sanitised type by casting right?

And even if you could, there is also nothing stopping you from using a different function to “html” that just returns the string without sanitising. They are on the same relative level of safety.
by jiggawatts | 2025-04-10 21:27:32+00:00
“Do it during the day without an outage.” is my approach.

It requires specific technology choices and planning ahead, but it is especially simple in the web era because they all go through load balancers which are redundant themselves.

The opposite example was Blizzard taking down WoW for half a day every week, which is an absurdly long time.

Even if they had a single server per game world instance, they could have orchestrated updates using automation to take each instance down for a few minutes instead of all of them at once for many hours.
by aseipp | 2025-04-10 21:28:05+00:00
To be honest, I'd rather not see Buck2 repeat the mistakes of Bazel so early on, especially when it took a lot of time before settling on bzlmod.

Frankly, I'd rather it go the other way: just have a gigantic 'buck2pkgs' repo that has everything inside of it -- literally fucking everything -- just like Nix and Nixpkgs have done. I've watched and committed to Nixpkgs for over 10 years now and I think being a monorepo has massively contributed to its success, ease of contribution, and general usability. And in practice it means 99% of projects only need one "dependency" and they are done and have everything they could want.

In theory a buck2pkgs could even be completely divorced from Meta's existing Prelude, because you can just reimplement it all yourself, without being constrained by their backwards compatibility with Buck1. That would reduce the surface area between the two projects substantially and let you do a lot of huge cleanups in the APIs.

I actually started doing this a while back but it is of course a massive amount of work. I do think it's a much better way to go, though...
by shadowgovt | 2025-04-10 21:28:14+00:00
That's fine. Hitler's first attempt to seize power was a failed 1923 coup. He ascended to the Chancellorship in 1933. Germans also heard about fascism for ten years and things were fine.

... until they weren't. I hate to be the bearer of bad news, but there sure are a lot of historians in America who have actually packed up and fled the country as of late...
by maxglute | 2025-04-10 21:28:37+00:00
> Any record of congress doing that for those reasons

I think it was part of Clean Networks Initiative, there's ongoing strategic game to cut PRC out of subsea infra business, just like telcom. IIRC a bunch of sanctions a few years ago killed many cable projects or at least pushed PRC out as partner. Cables landing in PRC didn't. Cables landing in ASEAN but with PRC suppliers/builders ended up switching to other suppliers/builders.
by nhumrich | 2025-04-10 21:28:44+00:00
Libraries can enforce only template strings, and properly escape the output. This is already possible in Javascript, and you can completely prevent injection attacks using it. > The developer forgot to interpolate not possible if you enforce only templates

> the developer chose the wrong interpolation Not possible if the library converts from template to interpolation itself

> or the interpolation itself got it wrong Sure, but that would be library code.
by antonkar | 2025-04-10 21:28:44+00:00
The intelligence is just a static geometric shape in an LLM file (only GPUs "choose" and "shape-change" in that shape).

So the maximal intelligence is actually not an agent at all (it has zero agency itself), it's a place. You can imagine the final direct democratic simulated multiverse, that's the final absolute super-intelligence. It has all the agents inside of it, while it itself is as static spacetime. Agents (like us and others) are 3D and dynamic, while the multiverse is 4D static spacetime. Everything already happened, so there is no future, only the past, you can forget something to relive it.

While maximal agency (=shape-changing) is actually the Big Bang, it has almost zero intelligence (it's a dot) but infinite potential future intelligence (can become a multiversal simulation).
by fragmede | 2025-04-10 21:28:48+00:00
In all of this, the question of its encryption hasn't come up? Me texting my mom about family drama that wants to be secret doesn't have the same threat model as actual war plans, but has the encryption itself been deemed sufficiently unbreakable that it's down to UX issues that are the problem and I don't have to worry about anybody uninvited listening in when texting family secrets on signal?
by MattGrommes | 2025-04-10 21:29:16+00:00
This is nit-picky but you're probably actually referring to Cinematographers, or Directors of Photography. They're the ones who deal with the actual cameras, lens, use of light, etc. Directors deal with the actors and the script/writer.

The reason we give them awards is that the camera can't tell you which lens will give you the effect you want or how to emphasize certain emotions with light.
by HarHarVeryFunny | 2025-04-10 21:29:52+00:00
If the goal is to have high paying jobs in the US, then yes the government should put penalties in place to encourage that. US cost of living (housing, real estate taxes, health care costs, college costs, etc) is way higher than many countries, especially those where jobs are being offshored to, especially India, so salaries have to be higher here.

So, do we let US companies invest US consumer derived revenue in the Indian economy, just to boost profits a bit, or do we protect good jobs at home instead, and have a virtuous circle where US profits get plowed back into the US economy?
by alganet | 2025-04-10 21:31:08+00:00
92 huh? That is an opinion from a long time ago.

The question I have is why AI technology is being so aggressively advertised nowadays, and why none of it seems to be liberating in any way.

Once the plow liberated humans from some kinds of work. Some time later it was just a tool that slaves, very non liberated, used to tend to rich people's farms.

Technology is tricky. I don't trust who is developing AI to be liberating.

The article also plays on the "favorite author" thing. It knows many young folk see Asimov as a role model, so it is leveraging that emotional connection to gather conversation around a topic that is not what it seems to be. I consider it a dirty trick. It is disgraceful given the current world situation (AI being used for war, surveillance, brainwashing).

We are better than this.
by doublerabbit | 2025-04-10 21:33:01+00:00
Why? Who wrote the rule that websites need to be available 24/7?

Just because the server is powered 24/7 doesn't mean the website has too. I turn off my personal NAS when I go to bed. No point keeping it on while I am asleep.

In PDP days you were given a allotted time slot of usage.
by nhumrich | 2025-04-10 21:33:51+00:00
There was a very very long discussion on this point alone, and there are a lot of weird edge cases, and led to weird syntax things. The high level idea was to defer lazy eval to a later PEP if its still needed enough.

There are a lot of existing workarounds in the discussions if you are interested enough in using it, such as using lambdas and t-strings together.