MurphyA/hacker-news huggingface dataset:
by aseipp | 2025-04-07 23:17:16+00:00
I don't know if it's the only or original reason, but one nice consequence of the reverse hex choice is that it means change IDs and commit IDs have completely different alphabets ('0-9a-f' versus 'z-k'), so you can never have an ambiguous overlap between the two.

Jujutsu mostly doesn't care about the real "format" of a ChangeId, though. It's "really" just any arbitrary Vec<u8> and the backend itself has to define in some way and describe a little bit; the example backend has a 64-byte change ID, for example.[1] To the extent the reverse hex format matters it's mostly used in the template language for rendering things to the user. But you could also extend that with other render methods too.

[1] https://github.com/jj-vcs/jj/blob/5dc9da3c2b8f502b4f93ab336b...
by kristianp | 2025-04-07 23:17:19+00:00
I agree with you about the hyperbole, but generational wealth is wealth passed down from generation to another, it doesn't specify the amount. The authors point is that many people are better off if they don't live hand to mouth, and that is likely people who have had financial help from their ancestors. She does couch it in emotional terms and talk about elite schools and billionaires, so she definitely muddies the waters there.

On the other hand I know a person who hasn't worked full time for a while, who still depends on family for handouts because they don't have the financial discipline to have any savings whatsoever. Some of the financial stress people have is self-inflicted. Allocating a percentage of income to an emergency spending account until it reaches $200 initially and then $2000 over a longer term would help reduce stress of accidentally overdrawing the checking account or having a small (by US standards) medical bill.
by bluefirebrand | 2025-04-07 23:17:23+00:00
> And yeah, you guys, it's time to buy a suit

No company worth working for would refuse to hire someone just because they didn't wear a suit to their interview

Dress nicely, sure. Wear a collar? Yeah probably. A tie? Meh.

Let's get rid of this old fashioned boomer nonsense from hiring please
by andrewla | 2025-04-07 23:19:05+00:00
I mean, have you ever had to deal with regulators? Departing from industry norms will 100% be used against you in any regulatory proceeding, no matter how minor. It is naive to think otherwise. Regulators go after big pockets and

The guidelines you link to are advisory, not legal, and they trace back to the ePrivacy regulations (although the notion of "consent" was modified by the GDPR; it's not clear which interpretation applies -- ePrivacy regulations, which are still in effect, also require consent). "The obligation is on controllers to innovate to find new solutions that operate within the parameters of the law and better support the protection of personal data and the interests of data subjects." This is standard boilerplate shit that says "you have to follow the regulations, not whatever is in this doc".

I honestly don't know what to tell you. The cookie popups are an offense in every possible way; they fail to accomplish their intended purposes, they burden users with useless interactions that provide no protection, and they burden website developers with useless busywork to document compliance to hopefully avoid retaliatory punitive fines if you draw the attention of regulators or EU officials. That these policies find supporters on HN of all places is beyond my comprehension.
by rs186 | 2025-04-07 23:20:11+00:00
In the past, they just call this a hiring freeze. The CEO doesn't want to admit that the company isn't doing great, so the excuse is now "you must explain why the job can't be done by AI".

I mean, if the job can be done by AI, he should go the extra step and lay off half of the employees, that's the sensible thing to do for any CEO. Why not do that today?

This is pretty dumb. I am looking forward to the news when the CEO is ousted and AI can't even save him.
by roguecoder | 2025-04-07 23:21:42+00:00
As an interviewer, I'm not testing for things AI is likely to help you with. I want to know how you are going to do the job, and experience first-hand how you collaborate in our shared profession.

You can practice with AI if you want, but it is definitely not necessary. I would much rather have someone say "I don't know that one" (and have hired many people who did), rather than have someone provide some content ChatGPT gave them the day before.
by josephg | 2025-04-07 23:24:34+00:00
Maybe. How much of your programming ability comes from mentorship from your coworkers? I think its less than 10% for me. Maybe its a lot more for others, particularly self taught programmers?

But that still doesn't explain my classroom experience. Some of my weaker students worked much harder than some of my more talented students. The weaker students also ended up getting a lot more 1-on-1 time from me as a teacher. That helped a bit - but the ranking in assessments was - for the most part - depressingly stable. I think the world would be a much fairer place if ability was purely a function of how much work you've put in. But unfortunately I don't think the data backs that up.
by lrvick | 2025-04-07 23:25:53+00:00
So for example, Google uses a goobuntu/bazel based toolchain to get their go compiler binaries.

The full source bootstrapped go compiler binaries in stagex exactly match the hashes of the ones Google releases, giving us as much confidence as we can get in the source->binary chain, which until very recently had no solution at all.

Go has unique compiler design choices that make it very self contained that make this possible, though we also can deterministically build rust, or any other language from any OCI compatible toolchain.

You are talking about one layer down from that, the source code itself, which is our next goal as well.

Our plan is this:

1. Be able to prove all released artifacts came from hash locked source code (done)

2. Develop a universal normalized identifier for all source code regardless of origin (treehash of all source regardless of git, tar file etc, ignoring/removing generated files, docs, examples, or anything not needed to build) (in progress)

3. Build distributed code review system to coordinate the work to multiple signed reviews by reputable security researchers for every source package by its universal identifier (planning stages)

We are the first distro to reach step 1, and have a reasonably clear path to steps 2 and 3.

We feel step 2 would be a big leap forward on its own, as it would have fully eliminated the xz attack where the attack hid in the tar archive, but not the actual git tree.

Pointing out these classes of problem is easy. I know, did it for years. Actually dramatically removing attack surface is a lot more rewarding.

Help welcome!
by abdullahkhalids | 2025-04-07 23:26:52+00:00
> (I'm not saying HN is GDPR compliant though, it's missing a DPO mail address to allow edit/deletion of older PII messages and a privacy policy even though said policy would probably be max 10 lines)

The privacy policy is here [1], linked in the footer. It also very clearly says: "For deletion requests, please contact us at privacy@ycombinator.com.".

[1] https://www.ycombinator.com/legal/
by omneity | 2025-04-07 23:27:11+00:00
In the local context as well. Unlike say the docker socket which is protected by default using unix permissions, the CDP protocol has no authorization, authentication or permission mechanism.

Anything on your machine (such as a rogue browser extension or a malicious npm/pypi package) could scan for this and just get all your cookies - and that's only the beginning of your problems.

CDP can access any origin, any data stored (localStorage, indexedDB ...), any javascript heap, cross iframe and origin boundaries, run almost undetectable code that uses your sessions without you knowing, and the list is very long. CDP was never meant to expose a real browser in an untrusted context.
by 4ad | 2025-04-07 23:27:31+00:00
Iridient X-transformer produces a linear (demosaiced) DNG, that's its sole reason to exist, to do a better job at debayering than other software like Adobe. So it wouldn't make any sense for Iridient X-transformer to produce a mosaiced DNG because that would be basically a noop, the program wouldn't do anything.

So yes, of course that files produced by Iridient X-transformer are large, they are linear files. They are exactly three times as large because there are three color channels, four times as large if you also embed the original.

There is zero reason to convert RAF files to DNG files if you camera produces RAF files. The discussion we're having here is cameras producing mosaiced DNG natively, which as I hoped I showed you wouldn't come with any size penalty. The DNG can use modern lossless compression techniques, and can encode the same mosaiced (not debayered) data. And it works in every program, unlike RAF which always needs to be reverse engineered for every new camera release.
by leecarraher | 2025-04-07 23:27:38+00:00
Is raw a defined format? Or is it just whatever is most performant for the camera to write to storage, while also allowing for conversation to standard formats. Most are likely similar, running same or similar architectures, but in and of itself there is no raw format spec that must be adhered to. So if one way is more amenable to the system architecture, then that wins.
by roguecoder | 2025-04-07 23:28:01+00:00
Yikes!

That sounds like a vicious cycle: when people are stressed out, they are less likely to be able to learn successfully, setting them up to under-perform, get fired and then further stress out everyone else around them.

Cortisol has never improved a line of code.

Doing an explicit probationary period could at least reassure people who have been there longer, but it seems like it would be hard to regain trust at that point. The company should probably be praying its employees are unionizing behind the scenes & can save them from the mess they are making.
by danijar | 2025-04-07 23:30:44+00:00
It gets diamonds at 1:48 in the top left video (might need to full screen to seek) [1].

The tools are admittedly really hard to see in the videos because of the timelapse and MP4 struggles a bit on the low resolution, but they are there :)

[1]: https://danijar.com/dreamerv3/
by lrvick | 2025-04-07 23:30:52+00:00
As the other (dead, but correct) commenter pointed out, job one is proving the released binary artifacts even match source code, as that is the spot that is most opaque to the public where vulns can most easily be injected (and have been in the past over and over and over).

Only with this problem solved, can we prove the code humans ideally start spending a lot more time reviewing (working on it) is actually the code that is shipped in compiled artifacts.
by legitster | 2025-04-07 23:31:28+00:00
> Responding to the chief justice's order on Monday afternoon, Mr Sandoval-Moshenberg said: "This is just a temporary administrative stay, we have full confidence that the Supreme Court will resolve this matter as quickly as possible."

The good news is the family's lawyer is not worried about the stay. The bad news is it sounds like the Garcia was got ... "lost" ... once sent to El Salvador.

These forceable deportations are sounding marginally borderline with concentration camps.
by EPEC | 2025-04-07 23:31:55+00:00
EnergyCAP [https://www.energycap.com/] | Sr Financial Analyst, Solutions Engineer, etc. | Remote-First | Full time

EnergyCAP is the leading energy and sustainability platform, helping organizations take control of their utility data, reduce costs, and achieve sustainability goals. With powerful analytics, automated bill management, and seamless integrations, EnergyCAP transforms complex data into actionable insights. From tracking energy usage and optimizing efficiency to simplifying carbon accounting and financial reporting, our platform provides the tools needed to make smarter decisions. Trusted by governments, universities, healthcare systems, and businesses, EnergyCAP helps organizations streamline operations, improve accountability, and drive meaningful sustainability progress.

Check out our career page here: https://www.energycap.com/careers
by dbspin | 2025-04-07 23:32:25+00:00
>If we truly care about biodiversity,

The 'we' here is the issue. Who is we? The human race do not share complex holistic goals, organisational frameworks, or even aesthetic preferences. It's a miracle cooperation exists at all at transnational scale. The hope that it could serve functional purposes - rather than alternately facilitating the enrichment of the very few, and constraining the worst excesses of that wealth transfer - seems to beg the question, how?

'We' don't truly care about anything, there is no we once the net gets that wide. Don't get me started on 'should', a word that shakes its head in impotence.
by kazinator | 2025-04-07 23:32:59+00:00
If it were not for those who assiduously compile dictionaries and other sources, and those who correct, you would not be able to understand the English from fifty years ago.

Language evolution needs serious gatekeeping.

It would ideally be best left to those who know what they are doing, not those who can't be bothered to look up a word.

Nimrod as a pejorative probably arose among students who knew the name from history, and just started using it for fun. Kids in my eighth grade class, when we studied The Hobbit, started using "Bilbo" as a pejorative (referencing the character name Bilbo Baggins).
by zahlman | 2025-04-07 23:33:09+00:00
>It also didn't help that people often configured SVN to run with the option to add global locks back in, because they didn't understand the benefit of letting two people edit the same file at the same time.

I think it was more that they were afraid that a merge might some day be non-trivial. Amazing how that fear goes away once you've actually had the experience.

(I had to check because of this thread. SVN and Git initial releases were apparently about 4 and a half years apart. I think it was probably about 6 years between the time I first used SVN and the time I first used Git.)
by foxglacier | 2025-04-07 23:33:55+00:00
Not at all. It doesn't only regurgitate what already exists and create a new wizard character that's not an existing one. It might have some elements of existing ones but that doesn't make it necessarily a copyright violation.

Here's Gemini's "make a picture of a young wizard which isn't a copy of any existing one.". I don't know enough about wizards to know how unique it is but maybe you can tell. https://lh3.googleusercontent.com/gg-dl/AA8i_VKUEpqw3AOOB_t4...
by eikenberry | 2025-04-07 23:34:49+00:00
Sorry for the offense, it is hard coming up with analogies that don't offend someone. Should probably just have left it out.

But neurodivergense is not just a lack of social skills. Painting it this way is one of the reasons people don't understand it and act with bias against those suffering from it. It is a disability and is recognized by the ADA.
by gerdesj | 2025-04-07 23:35:05+00:00
-49?

Mind you, 0 needs inventing or what happens between 1 and -1 ... oh and -1 needs defining too, whatever that nonsense is!

People haven't somehow magically become cleverer over the recent millennia. We just have some fancier tools these days. I'm sure if you gave a few Romans enough wine and the starting point of "Quid CDI significat?" then you would probably get a decent discussion.
by cryptonector | 2025-04-07 23:36:12+00:00
I wonder this too. My guess is that he did not like "heavyweight" branching and the lack of cherry-pick/rebase. At any rate that is why I didn't like it back then.

Sun Microsystems (RIP) back then went with Mercurial instead of Git mainly because Mercurial had better support for file renames than Git did, but at Sun we used a rebase workflow with Mercurial even though Mercurial didn't have a rebase command. Sun had been using a rebase workflow since 1992. Rebase with Mercurial was wonky, but we were used to wonky workflows with Teamware anyways. Going with Mercurial was a mistake. Idk what Oracle does now internally, but I bet they use Git. Illumos uses Git.
by 4ad | 2025-04-07 23:36:29+00:00
All raw means is scene-referred data. The idea that somehow raw means "raw" data from the sensor is an often repeated idea, but unfortunately is completely nonsense. Modern sensors do on-chip noise reduction, they can be programmed to give data in all kind of formats and with different processing done to it. The same sensor used in different cameras can have different ISO. The same sensor used in different cameras can produce different RAW files even at the same ISO. Not just in the sense of a different file format, in the sense of different data in the file, from the exact same sensor, but programmed differently.
by no-dr-onboard | 2025-04-07 23:36:37+00:00
100% reproducible? That's amazing. I'll be honest, I don't really believe you (which I suppose is the point, right?).

Do you all document how you got around system level sources of non-determinism? Filesystems, metadata, timestamps, tempfiles, etc? This would be a great thing to document for people aiming for the same thing.

What are you all using to verify commits? Are you guys verifying signatures against a public PKI?

Super interested as I manage the reproducibility program for a large software company.
by XCSme | 2025-04-07 23:38:08+00:00
Maybe because the LLM improvements haven't been that good in the last year, they needed some new thing to hype it/market it.

EDIT: Don't get me wrong, the benchmark scores are indeed higher, but in my personal experience, LLMs make as many mistakes as they did before, still too unreliable to use for cases where you actually need a factually correct answer.
Show HN: Browser-Use MCP for Claude that works without an API key
by vortex_ape | 2025-04-07 23:38:27+00:00
Hey everyone,

I built an MCP that enables the Claude desktop app to control your browser with Browser Use (YC W25).

MCPs (based on the Model Context Protocol by Anthropic) enable Claude to use tools that can do a variety of functions like searching the web, executing code, manipulating files, accessing APIs; basically interacting with things outside the conversation context.

The main reason I built this MCP was because I saw that existing Browser Use MCPs required me to get an API key from OpenAI/Anthropic playgrounds in order to use them with the Claude desktop app, which I didn't want to do because I already pay for Claude.

It was fun to read the Browser Use code (https://github.com/browser-use/browser-use) to see how everything works! There's basically an agent (powered by an LLM of your choice) which has access to a bunch of tools. I removed that agent and made the Claude desktop app the agent instead using the Model Context Protocol by Anthropic, and finally gave it access to the Browser Use tools to tie everything together.

Hope you find it useful!
by squiggleblaz | 2025-04-07 23:38:47+00:00
A local minimum is a point in the design space from which any change is an improvement (but there's other designs which would be worse, if they make several larger changes). I think it's hard to make that claim about Git. You're probably referring to a local maximum, a point in the design space from which any change makes it better (but there's other designs which would be better, if they make several larger changes).

In my career, I've used Svn, Git and something I think it was called VSS. Git has definitively caused less problems, it's also been easy to teach to newbies. And I think the best feature of Git is that people really really benefit from being taught the Git models and data structures (even bootcamp juniors on their first job), because suddenly they go from a magic incantation perspective to a problem-solving perspective. I've never experienced any other software which has such a powerful mental model.

That of course doesn't mean that Mercurial is not better; I've never used it. It might be that Mercurial would have all the advantages of git and then some. But if that were so, I think it would be hard to say that Git is at a local maximum.
by munificent | 2025-04-07 23:40:24+00:00
In Japan, men commit suicide at roughly twice the rate of women. The age group with the highest rate of suicide was 50-59. I can't find good data, but loneliness and not feeling valued by a community is very likely a significant contributor here.

Women are important but if the problem you're trying to solve is deaths of despair, then focusing on men makes sense.
by hombre_fatal | 2025-04-07 23:41:56+00:00
That works for a certain class of applications, but it's not very simple once you do want interactivity on the browser client.

Nor would I call it simple that the server has to be able to send the whole UI over the wire instead of just data. And it ties your server to the web browser instead of providing a simple data API that can be used by anything that can make an http request.

There are always trade-offs.
by joshwarwick15 | 2025-04-07 23:42:21+00:00
Most of these are not a real concern with remote servers with Oauth. If you install the PayPal MCP MCP server from im-deffo-not-hacking-you.com than https://mcp.paypal.com/sse its the same sec model as anything else online...

The article also reeks of LLM ironically
by donnachangstein | 2025-04-07 23:42:59+00:00
> so neuro divergence isn't a legitimate disability?

It doesn't really matter if it is or isn't, if being able to function well around other humans is a job requirement, as it often is in technical occupations. Why do you think behavioral questions are often asked during interviews?

For the same reason someone who requires a wheelchair could not reasonably be expected to be a firefighter, or a blind person be a pilot or bus driver, regardless of any accommodation provided.
by gxonatano | 2025-04-07 23:43:58+00:00
As an atheist, I couldn't agree more. The fastest way to become an atheist, as it's often pointed out, is to read the Bible, which explains why about 95% of the Christians I've known have never read it. When asked, they say things like "the _whole_ thing?" or "cover to cover?" as if it were the unabridged Oxford English Dictionary, instead of just a single volume.

As a work of literature, with an unparalleled influence on Western culture, it's required reading for anyone interested in literature, philosophy, history, or related disciplines. As a blueprint for how to live your life, however, any reasonably ethical person will find its teachings to be at odds with modern ethics. More often than not, it's morally repugnant, and unapologetic about it, too. You won't hear about how backwards its morality is by going to church, though, and so you need to read it for yourself. Even Jesus, one of the most upright citizens in the book, is revealed to be as full of hate and vengeance as he is a "prince of peace."

Of course, as with everything, it really matters what edition you get. The New Oxford Annotated Bible is a good starting point. The Norton Critical editions (in two volumes, the old and the new testaments) are great, too, and include some of the source materials. (Bet you didn't know that a lot of the Bible was plagiar...ahem... adapted from much earlier texts, and from other religions.) The Skeptic's Annotated Bible is a great edition, too, and annotates everything from a secular perspective.
by ape-mrjb | 2025-04-07 23:44:26+00:00
I ran a test: same resume, different platforms (Rezi, Canva, LinkedIn…), uploaded to Workday. The best one? 58% accuracy.

Why is resume parsing still this broken in 2025? I wrote up the mess (with data) and proposed a simple fix. Would love your take.

TL;DR: We made a Resume Metadata Standard — and it's open-source. https://github.com/rezi-io/resume-standard
by iamwil | 2025-04-07 23:44:43+00:00
> Seeing this, the game’s creator decided to take it to the next level. New rules were introduced, allowing the cards to be used in actual battles. The objective isn’t to defeat the opponent’s card but to outplay it based on the characters’ skills and abilities.

Anyone have an idea of how the gameplay works? How do you "outplay" your opponent?