MurphyA/hacker-news huggingface dataset:
by teekert | 2025-04-09 18:21:44+00:00
Students do something akin to vibe coding I guess. It may seem impressive at first glance but if anything breaks you are so, so lost. Maybe that’s it, break the student’s code, see how they fix it. The vibe coding student is easily separate from the real one (of course this real coder can also use AI, just not yoloing it).

I guess you can apply similar mechanics to reports. Some deeper questions and you will know if the report was self written or if an AI did it.
by dhucerbin | 2025-04-09 18:21:57+00:00
Sure! In some methods of authentication, like OpenID, not only your client need to present some UI, but also you need to prepare some endpoints on the backend to handle full flow of authentication. You probably also need to provide some parameters to those endpoints and methods inside.

So again, you want to add one thing “auth”, but need to add code in multiple places in your app. Server components promise to encapsulate that. Idea is that you can grab a component from npm, and it will handle all of that orchestration for you, and component will be your only one interface, so all configuration can be passed as props (of course it will be taken from your env/secret).

The promise is that you can encapsulate inside a components both client and server code.
by itfourall | 2025-04-09 18:22:00+00:00
Thanks for the interest!

I’ve open-sourced the project here: GitHub: https://github.com/IT-4-ALL/mapstructur

It’s a lightweight, self-hosted visual map editor – mainly built with PHP, HTML, and vanilla JS. The Docker setup makes it easy to spin up locally or on a server.

Everything is stored per page (JSON), with draggable markers and custom background support.

If you find bugs, have ideas, or want to contribute – feel free to open issues or PRs. Always open to feedback and improvements!
by kstrauser | 2025-04-09 18:22:18+00:00
Bluntly: fuck that. I'm many generations deep in this country, and when I travel to visit other places, I have the right to return here to the home where I was born. No part of our Constitution says I have to kiss law enforcement's butt to be permitted to come back to my house. I understand that they're trying to do their job, but the government also needs to understand that I'm not interested in participating in dragnet searches.

I feel no moral or legal obligation to let them search through all my stuff just because of their policies, which don't seem at all compliant with our highest laws and ideals.
by fragmede | 2025-04-09 18:22:50+00:00
it's not snake oil, there's clearly something there, if you haven't vibecoded a thing or watched a video of someone doing it, you owe it to yourself to do at least that much.

the question is how will the economy adapt to this and is it inflationary or deflationary? was developer time really the bottleneck on business development?

the question of build va buy just got a giant weight in favor of build

I was lambasted last week for claiming I could vibecode a credible threat to any SaaS company in a week, but I'm not alone in thinking that sort of capability.

Chamath Palihapitiya claims:

> Tell us what enterprise software you use and my team and I will build you an 80% feature complete version at a 90% discount.

https://www.8090.inc/

https://news.ycombinator.com/item?id=38960001
by itfourall | 2025-04-09 18:22:56+00:00
MapStructur is a standalone visual map editor meant for self-hosted environments. Unlike SaaS diagram tools, it runs entirely locally (via Docker) and stores data in plain JSON.

Useful for:

Network topology maps

Floor plans and logistics

Escape room design

Asset visualization on custom backgrounds

No external dependencies, no tracking, no vendor lock-in. Source code: https://github.com/IT-4-ALL/mapstructur

If you're looking for a lightweight alternative to tools like Lucidchart or Miro (but fully under your control), this might be worth exploring.
by bentley | 2025-04-09 18:23:25+00:00
It’s fun to compare BSD alternatives to GNU software and BSD documentation to GNU documentation. For example, OpenBSD refused to integrate GnuPG for package signing due to its complexity, instead developing its own signify(1):

https://man.openbsd.org/signify.1

https://www.gnupg.org/documentation/manuals/gnupg24/gpg.1.ht...

Oops, sorry, this is GNU software, so we need the real documentation from texinfo:

https://www.gnupg.org/documentation/manuals/gnupg/

GnuPG certainly has more features. Does that make it better software? For checking signatures (the only thing I’ve used GnuPG for in 15 years), I find the signify(1) documentation more readable and the signify(1) tool more usable.

Or how about tar(1), everyone’s favorite punching bag due to its weird options?

https://man.openbsd.org/tar.1

https://manpages.debian.org/bookworm/tar/tar.1.en.html

https://www.gnu.org/software/tar/manual/tar.html

Yikes!
by midtake | 2025-04-09 18:23:44+00:00
Why? If you're the content owner, you should be able to. If you factor out inline code, you will likely just trust your own other domain. When everything is a cdn this can lead to less security not more.

Do you mean people should be banned from inlining Google Analytics or Meta Pixel or Index Now or whatever, which makes a bunch of XHRs to who knows where? Absolutely!

But nerfing your own page performance just to make everything CSP-compliant is a fool's errand.
by DrillShopper | 2025-04-09 18:24:18+00:00
> I believe the consequence of not vaccinating should be social exclusion until you catch up

I think it should be even stronger than that: no public services or public spaces for you. No driver's license, no public school, no library card, nothing, unless you can demonstrate a medical reason why you cannot receive a specific vaccine, and then you get an exception for only that one.

If you want to live in your own world where you're disconnected from society then that's fine, you can do that, but it doesn't and shouldn't come consequence free given the damage you can do to others.
by gorgoiler | 2025-04-09 18:24:18+00:00
The first order fraud would be market manipulation run by the commander in chief.

The second order play would be for Trump to tip his associates off that he was going to do this and let them profit handsomely from the bump. Congratulations Mr President: your lackies love you because they profited from fraud but moreover you now have grade A kompromat on all of them in the form of your Signal chat records showing they were complicit in market fraud!
by Imustaskforhelp | 2025-04-09 18:24:25+00:00
It's both, we know citizens have power (Wisconsin), we know money has power(Elon Musk)

But Wisconsin was wondering because people hate Elon Musk.

My worry is that billionaires would fund anonymously both political media and they also own their own social media and so citizens would kind of less vote ... Or billionaire power would overcome that of citizen.

I think we need citizens to be aware of this but I also understand politics is a shitshow and i have so many hassles, why take another one.

And to that, I have no answer. i myself am stuck on this dilemma. I am really going to stop reading news because I don't think I personally can do anything. I have better things to do like studying or building software which can do better impact.

Though it also doesn't sucks to know about politics except I have seen people are really set in stone of politics, myself included.
by dashundchen | 2025-04-09 18:24:26+00:00
The only TDS is the blind devotion his cult has, that lets them contort themselves into supporting anything the fascist con-artist spews out.

Not getting into the cryptocurrency rug-pull he just pulled during his inauguration 2 months ago.

Not even getting into his lie about election fraud.

Here's just a small smattering of the civil and legal judgements Trump has lost in regards to defrauding people.

> In December 2022, two entities of the Trump Organization were found guilty on 17 counts, including tax fraud and falsifying business records. The scheme involved providing executives with off-the-books perks to evade taxes

> In May 2024, Donald Trump was convicted on 34 felony counts of falsifying business records. The charges were related to hush money payments made during his 2016 presidential campaign to conceal information.

> In February 2024, a New York judge ruled that Donald Trump and his companies had engaged in a years-long scheme to inflate his wealth on financial statements. The court imposed a $355 million penalty and barred Trump from serving in top roles at any New York company for three years

> In August 2022, Allen Weisselberg, the Trump Organization's former CFO, pleaded guilty to 15 felony charges, including grand larceny and tax fraud, admitting to a scheme that evaded taxes on $1.7 million in income.

> In November 2019, a New York state judge ordered Donald Trump to pay $2 million in damages for misusing the Trump Foundation's funds to further his political and business interests.

> Trump University, a for-profit real estate training program, faced multiple lawsuits alleging that it defrauded students by making false claims about the value of its courses and the involvement of Trump himself. In April 2018, a federal judge finalized a $25 million settlement to resolve these lawsuits

> Trump and his companies have been accused for decades of refusing to pay contractors, workers, and small businesses after work was completed
by mkipper | 2025-04-09 18:25:06+00:00
There are _some_ differences in quality, but I think they're pretty minor.

I recently visited the Philippines and a friend bought some knockoff Crocs at a market. The little rivet thing holding the strap to the shoe had the logo printed right on the exposed plastic, and after a few days, the logo was mostly scratched off. But my wife's Crocs that she bought a decade ago still look fine because there's some sort of sealant on top of the logo.

Is that worth an 800% markup? Probably not. But the knockoffs do cut some corners that the genuine articles don't.
by losvedir | 2025-04-09 18:25:09+00:00
I actually think this kind of supports the point you're responding to. HN used to have a battle cry about startups where "the idea doesn't matter, it's all in the execution" (mostly because we're tech-ies, and not those business folks coming up with the silly ideas).

Well, to some extent that's the case with manufacturing. You're bemoaning the loss of IP, which is catastrophic when that's all you have and your wealth is built on a gentleman's game of words and paper.

China, meanwhile, has built out factories, a knowledgeable workforce, and an extensive supply network. Back to startup terminology, there's a "network effect" in manufacturing of all the little parts that make up bigger things. You can drive around town and try out different parts, and make an invention here or there and improve things incrementally. There used to be a thriving ecosystem around the big U.S. domestic car manufacturers, not just for the cars themselves, but all the thousands of parts that go into them.

In other words, like many older hackers who grew up in the "information just wants to be free, man" world that spawned open source, the dig that China is "stealing IP" doesn't really hit me that hard. I'm impressed that they've gone to the next step of actually using it to make physical stuff, and I wish we did that more.
by loevborg | 2025-04-09 18:25:09+00:00
The Chinese are warning their citizens about travel to the U.S.

> China issued an alert warning its citizens and students of the potential risk of traveling in the U.S. and attending schools there. > > “Recently, due to the deterioration of China-US economic and trade relations and the domestic security situation in the United States, the Ministry of Culture and Tourism reminds Chinese tourists to fully assess the risks of traveling to the United States and be cautious,” the ministry said in an alert.

Can't blame them honestly
by perrygeo | 2025-04-09 18:25:23+00:00
I think it's a rational reaction to peak oil. One way or another, we're going to phase out fossil fuels in the next few decades, either through depletion or climate action or market incentives. That implies reduced mobility, higher shipping and travel costs, and shortened supply chains. Preparing for a more local world and reducing reliance on global supply chains seems a prudent long term strategy.
by dboreham | 2025-04-09 18:25:30+00:00
Well I bought this morning (not a large trade), based not on insider information but on the obvious outcome. Also the dynamic signal that Trump spent 2h spewing utter nonsense at a donor dinner last night, but the market didn't go down this morning. Signaling that something was in the works one way or another.

Edit: best to note that Trump is still doing plenty to destroy the US economy, so be careful out there.
by MarkSweep | 2025-04-09 18:26:12+00:00
I’ve played around with a similar concept last weekend. The one tweak I would suggest is to use the “structured outputs” feature of the LLM API if it supports it. It makes it more likely that the LLM generates valid JSON that follows your schema. Here are some examples of the documentation for different APIs that implement the feature:

https://ai.google.dev/gemini-api/docs/structured-output

https://github.com/ollama/ollama/blob/main/docs/api.md#reque...
by nitwit005 | 2025-04-09 18:26:17+00:00
The GTA performance bug didn't get fixed because back when they were trying to make the game performant, there was no problem. They kept adding new stuff to the online part of the game, and the file being parsed grew to be ridiculously large. The person who fixed the bug mentioned "63k item entries": https://nee.lv/2021/02/28/How-I-cut-GTA-Online-loading-times...

The economics of these games requires that you remove most of the development staff after launch. The games cost hundreds of millions to develop. Everyone went off to go work on GTA6 or some other title.
by ivansavz | 2025-04-09 18:26:18+00:00
I'm living on my own now so I don't have experience with the group version of this.

I try to be proactive if I know I'm meeting someone to remind them to call/text and not expect Signal/Telegram comms. The only thing that has been a problem are RCS text messages since my iPhone assumes if RCS was used once to communicate with someone, it should always be used. I can manually use "send as SMS" for outgoing, but I don't get the reply.
by TeMPOraL | 2025-04-09 18:26:24+00:00
There is no such thing as "safe" data in context of a general system, not in a black-or-white sense. There's only degrees of safety, and a question how much we're willing to spend - in terms of effort, money, or sacrifices in system capabilities - on securing the system, before it stops being worth it, vs. how much an attacker might be willing to spend to compromise it. That is, it turns into regular, physical world security problem.

Discouraging people from anthropomorphizing computer systems, while generally sound, is doing a number on everyone in this particular case. For questions of security, by far one of the better ways of thinking about systems designed to be general, such as LLMs, is by assuming they're human. Not any human you know, but a random stranger from a foreign land. You've seen their capabilities, but you know very little about their personal goals, their values and allegiances, nor you really know how credulous they are, or what kind of persuasion they may be susceptible to.

Put a human like that in place of the LLM, and consider its interactions with its users (clients), the vendor hosting it (i.e. its boss) and the company that produced it (i.e. its abusive parents / unhinged scientists, experimenting on their children). With tools calling to external services (with or without MLP), you also add third parties to the mix. Look at this situation through regular organizational security lens, consider principal/agent problem - and then consider what kind of measures we normally apply to keep a system like this working reliably-ish, and how do those measures work, and then you'll have a clear picture of what we're dealing with when introducing an LLM to a computer system.

No, this isn't a long way of saying "give up, nothing works" - but most of the measures we use to keep humans in check don't apply to LLMs (on the other hand, unlike with humans, we can legally lobotomize LLMs and even make control systems operating directly on their neural structure). Prompt injection, being equivalent to social engineering, will always be a problem.

Some mitigations that work are:

1) not giving the LLM power it could potentially abuse in the first place (not applicable to MLP problem), and

2) preventing the parties it interacts with from trying to exploit it, which is done through social and legal punitive measures, and keeping the risky actors away.

There are probably more we can come up with, but the important part, designing secure systems involving LLMs is like securing systems involving people, not like securing systems made purely of classical software components.
by davidw | 2025-04-09 18:26:24+00:00
One thing companies love is lots of uncertainty like this. It keeps their accountants entertained! "Maybe we should build a factory in the US" ... 24 hours later ... "well, not today".

What's really amazing is all the muttering from "Very Important Wall Street" type people who are saying that he's insane. Like... with that kind of salary, weren't you paying attention? We've known he wasn't right in the head for a while now. Maybe they should be replaced by AI.
by cess11 | 2025-04-09 18:26:49+00:00
Words are used due to the absence of things. They fill an immediate experiential void and stand in for something else, because you want or need another person to evoke some fantasy to fill this absence and make understanding possible.

If you have a mind and it is a computer, then it is because of nurture, because the brain is nothing like a computer, and computers simulating language are nothing like brains.
by sershe | 2025-04-09 18:26:50+00:00
The title is, basically, a lie. “no longer target virtual currency exchanges, mixing and tumbling services, and offline wallets for the acts of their end users or unwittingly violations of regulations.” is by far not the same as not prosecuting fraud.

Not targeting exchanges for actions of their users in particular is an unambiguously good thing. I thought people here were pro not targeting media platforms for user comments, or file exchange protocols for what users are sharing?
by seanp2k2 | 2025-04-09 18:27:01+00:00
He's been a pariah since the 80s at least. See eg Muppets Episode 2399 about Grump Tower https://www.youtube.com/watch?v=5FeyDm4vrFo or https://www.politico.com/magazine/story/2016/03/1988-the-yea... for a more detailed history on some of his decisions. From the article regarding his 1987 first book:

Reviewers trashed Donald Trump’s first book. They dismissed The Art of the Deal as self-promotional pap. They called the author a huckster. “The man’s lack of taste is as vast as his lack of shame,” said the Washington Post. Fortune noted his “shallowness” and “pomposity” and his need for “more money,” more “toys” and “more attention.” The book, said The New Republic, “is a weapon in the continuing public relations war that is Donald Trump’s way of doing business.”
by dodslaser | 2025-04-09 18:28:14+00:00
There is a zsh plugin (zsh-github-copilot) that automates this process. Just type what you want to do, hit a custom keybind, and buffer is replaced by a command that does what you described.

You can also have a second keybind that uses a zle widget to show an annotated description of the command currently in the buffer.

It works surprisingly well, and has saved me from having to dig through manpages several times.
by scrubs | 2025-04-09 18:28:28+00:00
Great point. I made much the same before in a different way.

We're all clear Disney, Star Wars, TV is entertainment. People are not clear that Rush Limbaugh, opinion makers on podcasts, Fox, CNN, Tick-tock is also entertainment.

The straightest venue for news proper has got to be CSPAN. They're clearly there to inform not to push a point, piss you off at the other side, or any other shadow-boxing goals.

Getting people pissed off to own the liberals, the neo-cons, to own the Trump supporters is ... entertainment and it doesn't hurt (I write this cynically) it helps drives up ad-revenue.
by gorjusborg | 2025-04-09 18:28:33+00:00
> Good engineers build things that eliminate failure modes,

Yes, but not all failure modes, only the ones in scope for the goals of the system. From the outside you can't tell what the goals are.

There is no such thing as eliminating all failure modes, which was exactly the point I was making in my post above. The best you can do is define your goal clearly and design a system to meet the constraints defined by that goal. If goals change, you must redesign.

This is the core of engineering.
by WalterBright | 2025-04-09 18:28:36+00:00
Have you counted state & local taxes, as well as the deficit? All those count. Washington State has heaped on a lot of new taxes in the last few years. California has done even worse.

> Claims that the market has become less free are perfectly baseless

So the mountains of new regulations have no effect?

Consider all the thousands of burned out houses in LA. So far, only 4 building permits have been issued.

In Seattle, constant burdens by the City Council heaped on the rental business have driven out a lot of landlords (things such as free lawyers for tenants), resulting in a shortage of affordable housing. Those don't show up as government spending, but they retard the market anyway.

The same goes with minimum wage hikes.
by lenerdenator | 2025-04-09 18:28:57+00:00
If you're screwed enough you eventually just want to burn the whole thing down, whether it's rational or not, and there are definitely some people who voted that way.

That, or he's just a recognition of reality: resources and being a dick get you everywhere, whether it be business, politics, international relations, or the courts. Being authoritarian didn't stop China from becoming a near-parity superpower. Europeans were more than happy to start working on Nordstream 2 and attend both the World Cup and Winter Olympics in Russia long after it became apparent that Putin and his ilk were going to return to being imperialistic autocrats. Why does it matter if the US does the same if you're willing to fall in line?
by rcarr | 2025-04-09 18:29:01+00:00
Surely there's got to be some kind of law surrounding the import price and the expected final retail price? In theory you could import a car, mark it as being valued at 1 cent, pay a 200 percent tariff of two whole cents and then sell at full price. The only danger would be that something happened in transit and the insurance company only pays 1 cent. Surely there's got to be something in place to stop this kind of loophole, seems way too exploitable.
by lysace | 2025-04-09 18:29:13+00:00
*How can anyone take the US seriously?

Also see: https://www.bbc.com/news/articles/c5yrr0e7499o

> Confidence in the US economy is plummeting as investors dumped government debt amid growing concerns over the impact of Donald Trump's tariffs.

> Governments sell bonds - essentially an IOU - to raise money from financial markets for public spending and in return they pay interest.

> The US does not normally see high interest rates on its debt as its bonds are viewed as a safe investment, but on Wednesday rates spiked sharply to touch 4.5%
by an0malous | 2025-04-09 18:29:24+00:00
“And in their desperation, they turned to a man they didn't fully understand.”

— Alfred describing why the mob hired the Joker

It’s clear that both political parties in the US are captured by the investor class, the democrats didn’t even have an election to choose Kamala she was selected by their donors who preferred someone they could control over someone with the best chance of winning.

If the lesson people take away from this is that Republicans are just uneducated and naive, they’re missing the point. People were desperate for something different, they thought Trump was someone from outside of the system but they didn’t realize that the system is money and no one is outside of it.