MurphyA/hacker-news huggingface dataset:
by gfiorav | 2025-04-25 14:45:10+00:00
I agree. From a product perspective, I would also support the decision. Should we make the rules more complex by default, potentially overlooking SQL injection vulnerabilities? Or should we blanket prohibit anything that even remotely resembles SQL, allowing those edge cases to figure it out?

I favor the latter approach. That group of Cloudflare users will understand the complexity of their use case accepting SQL in payloads and will be well-positioned to modify the default rules. They will know exactly where they want to allow SQL usage.

From Cloudflare’s perspective, it is virtually impossible to reliably cover every conceivable valid use of SQL, and it is likely 99% of websites won’t host SQL content.
by CamperBob2 | 2025-04-25 14:45:30+00:00
As he mentions in the video, the whole motivation is compactness. When your panel looks like https://learningmodular.com/the-eurorack-expansion-project/ , every mm^2 matters.

I'd be tempted to eliminate the patch cord altogether by using one of those pushbutton pots. Normally it would act like a traditional pot, but if you push it, it would go into a mode where you could choose from a variety of nearby inputs wirelessly.

The LEDs next to the pot would need to be an OLED display that indicates the selected input. Some form of extremely lightweight mesh network for control connections would need to exist, something with very low bandwidth and short range but also low latency. After 5 or 10 years' worth of tinkering, it might actually synthesize some sounds.
by dml2135 | 2025-04-25 14:45:55+00:00
This has been my experience as well, and really leaves me puzzled as to what anyone is gushing about.

Can I just about corral the LLM into producing working output? Yea, sometimes. From a technology perspective, that’s pretty cool!

But is it a productivity boost? Absolutely not. Like not even close. Every time it would have been faster for me to just write the code myself.

I really don’t know how to square the vast gulf between my experiences and many other peoples’.
by taeric | 2025-04-25 14:45:55+00:00
I think the 1980s probably had higher debugger use than today. :)

I was specifically thinking of things like Cloudflare Functions and AWS Lambda, for the deployments that you can't really step debug. They both have ways, nowadays; but nothing that would let you do a hot patch to fix anything.

Granted, my example of senior engineers would be odd there. They definitely were deploying code as standard jar files to machines. Not sure why they didn't know of this. Even the more complicated war files were straight forward to connect to.

Further granted that this isn't something you could realistically do to a fleet of machines. Guessing that is why they didn't ever try to use it.
by simonw | 2025-04-25 14:45:57+00:00
"But having it is generally better than not having it."

I believe the exact opposite.

One (of many) reasons is that it can make your code less secure, by hiding your security mistakes from you.

If your WAF obscures escaping issues during your own testing and usage you could very easily let those escaping issues go unresolved - leaving you vulnerable to any creative attacker who can outsmart your WAF.
by andix | 2025-04-25 14:46:05+00:00
Why should we get rid of physical addresses? It's not really relevant for letters anymore, but people still need to go to places. Deliveries of goods are a bigger thing than ever before.

I can imagine that in the future a company doesn't need to have a physical address to be registered. But we already have that too, PO boxes and addresses where you can register your company without having an office here.
by mike_hearn | 2025-04-25 14:46:32+00:00
In some databases that's not a problem. Oracle has a built in horizontally scalable message queue engine that's transactional with the rest of the database. You can register a series of SELECT queries and be notified when the results have (probably) changed, either via direct TCP server push or via a queued message for pickup later. It's not polling based, the transaction engine knows what query predicates to keep an eye out for.

Disclosure: I work part time for Oracle Labs and know about these features because I'm using them in a project at the moment.
by keybored | 2025-04-25 14:46:48+00:00
How to avoid patience-atrophy under an onslaught of AI concern trolling.

Bugger off. I’ve used AI for code generation of utility scripts and functions. The rest as an interactive search engine and explainer of things that can’t be searched for (doesn’t help that search engines are worse now).

I see the game. Droves of articles that don’t talk about AI per se. They talk about it indirectly because they set a stage where it is inevitable, it’s already here, it’s taken over the world. Then insert the meat of the content which is how to deal with The Inevitable New World. Piles and piles of pseudo self-help: how to deal with your new professional lot; we are here to help you cope...

And no!, I did not read the article.
by tacon | 2025-04-25 14:46:58+00:00
Back in the day, I was an outside contractor installing a new storage system for the Livermore lab's secure computing facility. (Designing nuclear weapons) I had no security clearance. When I was present there was a rotating blue light, similar to a police car, warning people that an uncleared person was present. When I was in the facility, people would refer to the area being "dirty".
Show HN: StackHound - Stop guessing repo's tech stack, analyze it in seconds
by lorenzopalaia | 2025-04-25 14:47:09+00:00
If you’ve ever explored GitHub repos and felt frustrated by how little you can tell about a project’s real tech stack — you’re not alone.

That’s exactly why I built StackHound https://www.producthunt.com/posts/stackhound

It goes beyond the GitHub API to scan dependency files and uncover the actual tools, frameworks, and languages a repo uses — whether it's built with React, Next.js, Tailwind, Flask, or Spring Boot.

Just drop in a GitHub username and repo to analyze it instantly. You can also use our /api/analyze endpoint to plug it into your own tools.

Try the live demo: https://stackhound.vercel.app/ Check out the code (open source!): https://github.com/lorenzopalaia/stackhound

Would love to hear your thoughts — what features would make StackHound even more useful for you?
by flohofwoe | 2025-04-25 14:47:58+00:00
> type punning in unions is undefined behavior under the C and C++ standards

Union type punning is entirely valid in C, but UB in C++ (one of the surprisingly many subtle but still fundamental differences between C and C++). There's specifically a (somewhat obscure) footnote about this in the C standard, which also has been more clarified in one of the recent C standards.
by 542354234235 | 2025-04-25 14:47:58+00:00
Wikipedia runs on donations. Most of FB is a massively bloated interface to maximize engagement, shove as much “content” as they can anywhere and everywhere, track everything you do, and add more “features” to find the next mechanism to get people more addicted.

For over a decade, I used Facebook lite messenger app which was built for countries with spotty, slow internet. It was less than a tenth of the size of the US messenger (of course it was unavailable in the app store and had to be installed via apk), was fast and easy to use (no stories, feeds, money sharing, animations), and was much better at doing the one thing it was supposed to be for, messaging people. It finally stopped working a couple of years ago and the regular app is a bloated mess where chats are an afterthought.

And why? Ads. You need more engagement so you can show people more ads. You need more content, so you have more things to attach ads to. You to autoplay videos to get people to watch more and see more ads. You have to run trackers so you can better target your ads. It’s the ads, not the functions, that make the modern internet too expensive to be funded by individuals.

2000s Facebook was able to run just fine on 2000s internet and storage. It would take a trivial amount of modern data and a fraction of modern storage to run now.
by defyonce | 2025-04-25 14:48:27+00:00
just tell them something nonsensical. They are unable to take a hint and continue with the nonsense. They start to be stuck on local minima. All of them. Video/images/text. I haven't seen LLM that is able to take a hint and understand the hidden meaning in absurdity of following up.

there is infinitely larger amount of prompts that will break a model than prompts that won't break it.

you just have to search outside of most probable space
by perror | 2025-04-25 14:48:27+00:00
Just released my last product : SMSimple-API. All is in the name, simple product for a simple need. This API just allows you to send SMS via API almost wordlwide, for cheap price.

I began to code this product when i got lost with complex SMS API documentation. So i writed minimalist doc that you can easily copy paste and be sur it will work.

I hope you will enjoy my product, please reach me out for any feedback

Have a great day :)
by jcranmer | 2025-04-25 14:48:38+00:00
> punning through a union was legal in C

In C89, it was implementation-defined. In C99, it was made expressly legal, but it was erroneously included in the list of undefined behavior annex. From C11 on, the annex was fixed.

> but UB in C++

C++11 adopted "unrestricted unions", which added a concept of active members that is UB to access other members unless you make them active. Except active members rely on constructors and destructors, which primitive types don't have, so the standard isn't particularly clear on what happens here. The current consensus is that it's UB.

C++20 added std::bit_cast which is a much safer interface to type punning than unions.

> punning through incompatible pointer casting was UB in both

There is a general rule that accessing an object through an 'incompatible' lvalue is illegal in both languages. In general, changing the const or volatile qualifier on the object is legal, as is reading via a different signed or unsigned variant, and char pointers can read anything.
by diggan | 2025-04-25 14:48:47+00:00
> Yes, there'd be an extra wire to the power supply module, but that seems fine for a modular.

Maybe other's modular synths look/work differently than mine, but when all the panels are installed, there is no way to pull a cable from underneath the panels/inside the case to the outside, without drilling new holes through some panel or the sides of the case. So not sure how you'd pull a cable from the power supply to the front side of a panel when it's closed like that. My case is a Intellijel Palette 104HP, maybe other cases expose the power supply to the outside?
by teddyh | 2025-04-25 14:49:01+00:00
> For now, I'll continue using workarounds like "/etc/h*sts" (with quotes) or alternative spellings when discussing system paths in my Substack posts.

Ahh, the modern trend of ”unalived”¹ etc. comes to every corner of society eventually.

1. <https://knowyourmeme.com/memes/unalive>
by whstl | 2025-04-25 14:49:22+00:00
I worked in a consultancy/agency 15 years ago for less than a year (it wasn't for me) and in that short span I witnessed 3 "facebook with a twist" projects. Code was delivered, but they naturally failed to gain any critical mass whatsoever. Also having startups getting a consultancy to do their code was already quite strange.

I specifically remember one of them being "facebook for dogs" and another being for restaurant professionals.
by ryandrake | 2025-04-25 14:49:25+00:00
This looks like a variation of the Scunthorpe problem[1], where a filter is applied too naively, aggressively, and in this case, to the wrong content altogether. Applying the filter to "other stuff" sent to and among the servers might make sense, but there doesn't seem to be any security benefit to filtering actual text payload that's only going to be displayed as blog content. This seems like a pretty cut and dried bug to me.

1: https://en.wikipedia.org/wiki/Scunthorpe_problem
by taeric | 2025-04-25 14:49:52+00:00
Agreed on your last paragraph. Really all of your post. I would oddly find myself arguing against people trying to make a complicated step debug mock setup to simulate the deployed environment when looking for bugs. A general socratic approach to the behavior you were witnessing was a valuable way to find bugs.

To me, the connected debugger was far more interesting as a development tool than a debugging one. Despite the name.
by malwrar | 2025-04-25 14:50:36+00:00
> Wynn-Williams's firsthand account of the next decade is not a story of these people becoming more reckless, rather, it's a story in which the possibility of consequences for that recklessness recedes, and with it, so does their care over those consequences.

I often feel similar when I witness rich people operate, and I’m sure others on different wealth scales observe the same in me. It’s wild to observe someone take risky/dangerous positions, fail, and then shrug it off when you would have been ruined. One of those observable moments of privilege. I feel like it would be something interesting to study.
by sofixa | 2025-04-25 14:50:39+00:00
> One thing I can not afford though is your head in the sand optimism

It's not optimism to be dismissive of opinions with no basis in reality.

Russia cannot defeat Ukraine. If they attack in the Baltic, they'll add at least a few more enemies. It's mathematically impossible for them to fare better with more enemies when their current efforts are suffering due to men and materiel.
by shermantanktop | 2025-04-25 14:50:41+00:00
Labeling a massive geographic zone in an underdeveloped, historically exploited area—one which plays a key role in how the climate works—-as useless, and then converting it to an extractive industry…what could go wrong?

I’m as optimistic as the next person about energy tech, but I hope it doesn’t turn out like yet more colonialism.
by beezlebroxxxxxx | 2025-04-25 14:50:42+00:00
I agree. The long term effect will be a devaluation of knowledge work more broadly. It's a rich irony that so many people clamor to these tools when their constant use of them is more often the thing undoing their value as knowledge workers: flexibility, creativity, ability to adapt (intellectually) to shifting circumstances and new problems.

A downstream effect will also be the devaluation of many accreditations of knowledge. If someone at a community college arrives at the same answer as someone at an Ivy League or top institution through a LLM then why even maintain the pretenses of the latter's "intellectual superiority" over the other?

Job interviews are likely going to become harder in a way that many are unprepared for and that many will not like. Where I work, all interviews are now in person and put a much bigger emphasis on problem solving, creativity, and getting a handle on someone's ability to understand a problem. Many sections do not allow the candidate to use a computer at all --- you need to know what you're talking about and respond to pointed questions. It's a performance in many ways, for better and worse, and old fashioned by modern tech standards; but we find it leads to better hires.
by mihaaly | 2025-04-25 14:50:42+00:00
Probably he is insecure? Put too much into how much people think about him. And believes that being a big person he needs to be the best at everything, while - and this is a positive trait actually - he knows that he is not that big, needs to overcompensate and project much more than he possesses - which is a common trait on Facebook. Overreacts to the ubiquitous life experience of loss.
by jerf | 2025-04-25 14:50:44+00:00
The main problem the vast majority of policy proposals for this sort of problem face is that the proposals almost invariably slip in the idea of some sort of human being, if not an entire population of humans, that is abstractly above the problem and can be trusted to administer the policy. But if that was the case, we often wouldn't have the problem in the first place.

It's really hard to policy-fix something that literally 99% of the population is doing. Who is going to propose it? Who is going to enforce it? Who is going to pay attention to it?

And to be clear, this is commiseration with you, not argument. I have no solution even in principle.
by rootsudo | 2025-04-25 14:51:02+00:00
Unfortunately, I disagree with the article.

You do need to fear. You do need to hide the disability during interviews, onboarding and performance reviews, day to day, etc. No one cares about you really - they care if you do do some work, are present or performance. If not, it's easy to be pip'd. Even if you do, still can be stack ranked and pip'd.

--

"My history of changing jobs used to make me feel like I didn't fit into society, especially before I understood how ADHD influenced my work performance and relationships." That's great, but it doesn't really help - saying you aren't the missing piece of the puzzle doesn't help someone that is diagnosed, undiagnosed or underdiagnosed at all - it just means you didn't - and the person whose reading this article can very much be aware of that but still proceed and feel as pariah or more as employers move to administratevely end your role.

"If you work full-time and have ADHD, you need to let go of the fear of losing your job. That anxiety consumes valuable mental energy better used elsewhere. Job loss isn't a personal failing; it's simply a mismatch between your brain and your environment. If it happens, so be it."

Job, is income and self worth - adhd and anxiety are usually diagnosed together.

"Getting fired isn't a reflection of your worth; it's about compatibility." Yes and no, depends on the job and role for many people, and in USA society, your job/role in soecity is a refleciton of yourself. You can write anything and say it isn't, you can state the USA has an unhealthy over work culture, it's still a reflection of worth to many people, refleciton of worth for self progress, promotion (right, you don't fit in and you still think about that.)

""Will worrying about this job matter two years from now?" It won’t. Jobs come and go." Unfortunately again, it does matter. Job provides $$$ and being fired can lead to joblessness for a year+. If you do not have other revenue/income streams, you're pretty much SOL.

--

The article is really empty, dry and lacks resources and any true call to action. Many people have ADHD and it doesn't matter if the author can accept it - and move on. Many people can not. Many people could've had their perfect job stripped because of ADHD. You can say as much as you want a door clooses and many more can open, but some doors are closed forever.

No article would've been better.

For any other HN'er out there, disabilities, even if they're protected by law - do not matter, the more weakness you show in an env, be it a workplace, society or internet the more fuel someone has to burn you with it.
Show HN: Loat – Grow MRR with automated emails
by PETROPALOVSK | 2025-04-25 14:51:05+00:00
I built loat, born from my frustration with building a high-trust product in the complex tax space. We had to create different onboarding sequences for each product, educational nurture campaigns for newborn entrepreneurs, and tax tips newsletters. Existing tools (shoutout to Loops and SendGrid) are great, but creating, writing, and optimizing these campaigns consumed a massive chunk of my time.

Hiring a dedicated CRM wasn’t an option for us.

We initially built internal tools to automate this and realized other founders could benefit from this approach. So, we've turned our solution into loat, a dedicated platform that lets founders maintain lean teams and still maximize email as a powerful growth and onboarding channel.

I’d love to hear: does this solve a real problem for you? Was anything confusing? What would make it more useful?
by olalonde | 2025-04-25 14:51:11+00:00
Where are you seeing that? I just read the definition and it doesn't seem to a allow closed components:

> An Open Source AI is an AI system made available under terms and in a way that grant the freedoms to:

> Use the system for any purpose and without having to ask for permission.

> Study how the system works and inspect its components.

> Modify the system for any purpose, including to change its output.

> Share the system for others to use with or without modifications, for any purpose.

https://opensource.org/ai/open-source-ai-definition
by Imustaskforhelp | 2025-04-25 14:51:29+00:00
As someone who uses bun,deno & cloudflare workers, I want to say that atleast in bun, the wasm part actually happens itself in js and bun just runs that js using javascriptcore which is definitely not optimized as it is stated by Bun docs themselves (https://bun.sh/docs/runtime/loaders#wasi)

Also I am still not sure how you are thinking that this project is similar to Bun.

Bun is for javascript, somebody runs wasm in js and that on bun...

Faasta runs wasm directly and you would need to use javy to actually run js in Faasta https://github.com/bytecodealliance/javy

Its sort of like a->b or b->a and faasta is way more leaner and better... Though bun is good if you are all Typescript.

Still I am sure I am not able to explain myself clearly, so do ask me something if you think I haven't explained quite properly and I am obviously sorry about that!

(Side note: but my main gripe with deno is that I have to specify all of these permissions and its still not a 1:1 equivalent to nodejs , like its very close still though so I still used bun and I actually used just today bun to install pnpm and then install wrangler and then remove pnpm and install via bun because for some reason wrangler doesn't recognize bun as package manager but whatever right)
by mega_dean | 2025-04-25 14:51:30+00:00
> Who are we to believe - the repliers, or our own lying eyes?

Believe the repliers: I created an account in May 2024 and I have not added a phone number. Here's a screenshot from my settings: https://imgur.com/a/Q7kJpDv

But also, your eyes aren't lying to you: some servers require accounts to have confirmed phone number in order to join. So there is probably a lot of people who have had the experience of creating a Discord account, trying to join a server / accept an invite, and immediately seeing a "you must provide a phone number" prompt.
by hombre_fatal | 2025-04-25 14:51:39+00:00
Good point, and it made me think about a more general point about people:

It's often the same underlying trait that gives someone qualities that we like/admire but also the qualities we don't like.

When we evaluate each other, we sometimes have thoughts like "she has <good quality>, but if only she'd work on <bad quality>".

Over the years I finally realized that's not how we work. Our traits aren't always connected to isolated levers that we can pull independently.

The really good sales guy might exaggerate fibs in personal convo. The girl that moved from Germany to Mexico to start a successful hostel also has a hard impulsiveness that's hard to get along with. The really attentive mother is risk-averse to a point of absurdity. All examples of friends off the top of my head. Or me: I can find happiness anywhere that I am (good), but it also means I don't have the drive to rock the boat when I should (bad).

There doesn't necessarily exist the possibility of preserving the good part if you were to fix the bad part since the fix might require changing the underlying trait.
by RetroTechie | 2025-04-25 14:51:50+00:00
"Bacteria is added to the urine which breaks it down into the ammonium nitrate that plants need to grow."

Why that extra processing step? Soil bacteria do the urea→ammonia step just fine. Not to mention that urea is a very safe & stable compound.

Another issue is the possibility of spreading pathogens. A gardener can deal with this by just letting the urine sit for a # of months. But perhaps that's not a good approach for an industrial process?

Btw. "pee" in the url - nice touch. :)