MurphyA/hacker-news huggingface dataset:
by mooreds | 2025-05-23 13:24:49+00:00
I wrote 5k words on the benefits and challenges of a self-hostable product[0] which may be useful to read. At FusionAuth, my employer, we have had both self-hostable and cloud versions for over 6 years. We started out with the self-hosted version and then added a cloud offering.

I'd start out with the business case. I'm not sure what "credential collection" is, but think about why your customers might want to self-host. Common reasons include:

- data sovereignty (legal responsibility towards users from a geography)

- data locality (data location)

- CONTROL (I put in all caps because that is an overriding reason)

- cost (esp if they have existing infrastructure your system can run on)

Devtools are a natural fit for self-hosting, as are other tools that target SREs, because the user/buyer is the operator and understands what they are getting into. Is the same true for "credential collection"? I dunno.

As far as pricing, we charge for features and support in one dimension, then hosting in another. (So if you self-host, the second dimension goes to zero.) That has been confusing to our audience[1]; one commenter said "your pricing sucks" :) . We're working to make that simpler, but it's a tough road because it is atypical.

Regarding development tasks, have your supported platforms and dependencies be as few as possible (we only require a MySQL or PostgreSQL database and an optional Elasticsearch/Opensearch installation).

Margins are way higher on self-hosted if you charge for features, but support will be much tougher. Build in some telemetry (in a transparent way your users can trust) to help your support team. Be prepared to hop on some video calls because sometimes telemetry won't give you enough info.

Also be prepared to draw some lines in the sand: is helping someone troubleshoot their proxy configuration in front of your software included? How about their database performance?

Product decisions will be harder too, but telemetry can also help there[2].

0: https://fusionauth.io/blog/building-self-hostable-applicatio... . You can read more discussion about this post here: https://news.ycombinator.com/item?id=42527887

1: https://news.ycombinator.com/item?id=41269089

2: Here's an example of the telemetry we collect: https://fusionauth.io/docs/get-started/download-and-install/... . We try very hard to know nothing about our customers' users to respect our customers privacy.
by jerf | 2025-05-23 13:25:05+00:00
"But . . . why?"

This is CPython. This is how it works. It's not particularly related to JSON. That sort of overhead is put on everything. It just hurts the most when the thing you're putting the overhead on is a single integer. It hurts less when you're doing it to, say, a multi-kilobyte string.

Even in your v8 example, that's a JIT optimization, not "how the language works". You break that optimization, which you can do at any moment with any change in your code base, you're back to similar sizes.

Boxing everything lets you easily implement the dynamic scripting language's way of treating everything as an Object of some sort, but it comes at a price. There's a reason dynamic scripting languages, even after the JIT has come through, are generally substantially slower languages. This isn't the only reason, but it's a significant part of it.
by prmoustache | 2025-05-23 13:25:21+00:00
I've used foobar2000 and irfanview when I was a windows user 20 years but I am struggling to figure out what these have that make them more desirable than comparable apps on linux.

I have all my image browsing / viewing / light editing usage covered with gthumb on Linux and rythmbox does it for me in term of music listening as it can play both my local files as well as net radios. I think kde users are naturally more into Amarok or Clementine but they are all probably fine enough. I have the feeling music listening is a problem that have been solved decades ago an all operating systems. Well with the exception of iOS apparently.
by watwut | 2025-05-23 13:25:23+00:00
> That explains why people voted for Trump. That doesn't explain why people didn't vote for Harris.

Harris does not provide what project 2025 calls for. She would not own the libs either.

> what did the Democrats signal? What was the big message that the Harris campaign really wanted people to know?

They run on "we will govern responsibly" and "we can make economy good". They were not talking about DEI, women in general nor about minorities as OP suggests.

> The Republicans absolutely addressed the economic concerns of the working class.

And all those concerns stopped mattering the day after - both to the voters and to the party too. Previous republicans governments, including Trumps one did not made economy great, did not made healthcare cheaper, none of that. These are pretend concerns. Something republican votes can pretend they care about when democrats are in power. Something that does not matter when republicans are in power. Something they will call "bad" during democrat governments regardless of how things really are and something they never blame republican government for.

You can add debt to it too. Deficit matters only when democrats are in power. It does not matter when republicans are in power.

It is and never was about any of that. It is primary about identity and secondary about cultural war. Economy and everything else is far far behind these.

---------------

Pretending this is about economy, pretending that trying to make these voters life better would get you vote is how democrats are loosing. Even when they succeed, those voters punish them, because it was never ever about that.
by toss1 | 2025-05-23 13:25:50+00:00
So, which version of "government waste" propaganda do you believe? The $2Trillion, $1 Trillion, $150 Billion (7/1000 of the initial claim), or any of the other mostly disproven by their own documents claims in the few $10b range?

Do you believe the Musk's line that "40% of all calls to Social Security are fraudulent", or what he actually found after creating massive IN-efficiencies, both drastically worsening service AND costing more, that only 2 in 110,000 calls might have fraudulent indicators. [0]

The examples would go on for many pages.

And what institutions do you think are actually wasteful? All the scientific research that creates most of the advances that employ most people in this forum, medical research that saves lives every day, disaster recovery programs that restore distaster-hit economies to productivity more rapidly, initiatives to re-shore manufacturing to the US and build infrastructure for the next-generation economy, or just programs to ensure everyone actually has healthcare, or predict the weather so people can get severe storm warnings in real time instead of the next morning after their family got killed?

>>delivering social improvements OK, do you not consider workers' rights, 40-hour workweek standard, overtime pay, ending child labor (remember, 5-year-olds working was common) and building education programs and requirements kids stay in school, requiring a level of workplace safety actual social improvements? Because those were NOT brought by "conservatives", but by "liberals".

Without liberals fighting, and often dying, your life would 99% likely be born poor, to a mother who bore a dozen other siblings, you get no real education, start work in a factory by age 5, and you are lucky to survive to adulthood, as only 1-2 of your brothers and sisters make it. That was life 120 years ago before work standards, education, public health, and many other "liberal" innovations happened. Just got look at an old graveyard and notice the ages on the tombstones - they are overwhelmingly infants and children. And those are the ones wealthy enough to have marked graves.

But evidently, you think it is less "wasteful" to just let 85% of the humans born work from the age of 5, have nearly no education, and die before adulthood.

All this is reality, not some linguistic trick, and if all you have to deny reality is a claim that reality is some linguistic trick, you have a very weak argument.

>>aren't MSM viewers in here I'm no MSM viewer either, and if you think the MSM is "liberal" you are at least several decades out of date. Just look at the ownership, where 90% of the MSM and all local media outlets are owned by just six major corporations, who are all-in on promoting oligarchy.

[0] https://www.yahoo.com/news/doge-fraud-tracker-social-securit...
by JimBlackwood | 2025-05-23 13:26:00+00:00
Not OP, but:

Barman on the host with a cronjob for physical backups and as archive/restore command for wal archiving and point in time recovery.

Another cronjob for logical backups.

They all ship to some external location (S3/SFTP) for storage.

I like the above since it adds minimal complexity, uses mainly native postgres commands and gives pretty good reliability (in our setup, we’d lose the last few minutes of data in the absolute worst case).
by neel_k | 2025-05-23 13:26:32+00:00
Richard Rorty, whose humanism and love of democracy MacIntyre despised.

Over the course of his career, MacIntyre went from an extreme left Marxist to an extreme right Thomist, and the only constant was his hatred of liberalism. He really couldn't stand the idea that people could believe in rationalism, feel the moral force of individual rights, or make purpose and meaning for themselves, all without appealing to an authoritarian source of control.
by kunwon1 | 2025-05-23 13:28:06+00:00
I got into making hot sauces recently. I didn't really care for any of the results until I started fermenting them. Chop up ingredients, add brine, put everything in a jar with a fermentation lid that allows gas to escape. Then let it sit on the counter for a week or two. blend and maybe add a bit of vinegar. That's the basic process, and in my humble opinion, it's the absolute best way to make hot sauce

(YMMV, do your own research, there are obviously risks to letting food sit out at room temperature for two weeks)
Show HN: ScrapeCopilot – Notebook Code Interface + Puppeteer + AI Copilot
by erichi | 2025-05-23 13:28:20+00:00
Hi HN, I’m Eric, and I’m building ScrapeCopilot, an AI assistant designed to eliminate friction in browser automation development.

Here is the link to VS Code extension - https://marketplace.visualstudio.com/items?itemName=scrapeco...

I've built browser automations for more than 5 years, and the constant frustration was always the sheer friction involved in getting working code – especially when debugging in headless mode or connecting to remote browsers.

When I started using LLMs to generate automation code, I found myself stuck in a repetitive loop: navigate to the desired page state, copy-paste HTML into the AI chat, and ask it to generate code. The worst part is that there was no easy way to run that generated code without losing the page state, forcing me to restart the browser session constantly. This wasted large amounts of time and mental energy. I built ScrapeCopilot to make this workflow seamless.

How it works:

ScrapeCopilot combines the power of a Jupyter-style notebook with a live Puppeteer browser session and integrated AI.

- Live Interactive Development: When you create an automation notebook, it initiates a fresh Puppeteer browser session. The page object is exposed directly to your notebook cells, allowing you to run any Puppeteer code against the live browser state and see the results instantly.

- AI-Powered Assistance: It integrates with GitHub Copilot (via the @scrapecopilot chat participant). The AI automatically sees the current page HTML, allowing it to generate highly relevant Puppeteer code based on your instructions directly within the chat.

- LLM Code Export: Once you've developed your automation logic, you can easily export the final, complete Puppeteer script based on your instructions.

This tool saves me hours daily, but even more importantly, it improves the developer experience in browser automation which is frustrating area.

I believe ScrapeCopilot can complement existing browser automation tools and frameworks by providing an interactive AI-assisted development experience.

Current Status & Future Plans:

- The extension currently works within VS Code. It will work in Cursor, but without chat support initially. I'm actively working on integrating a backend server to enable full chat functionality with Cursor.

- Currently the key workflow assumes that you create a new browser automation step by step, using code cells. But in my work I spend half of the time fixing existing automations, so my focus now is trying to adapt extension for debugging and fixing existing code.

- Playwright support is also on the list.

Check out short videos: - Demo: Headless False - https://scrapecopilot.ai/assets/demo-headless-false-Dhc_jeNR... - Demo: Headless True - https://scrapecopilot.ai/assets/demo-headless-true-PRQndDxP....

I'd love to hear your thoughts, feedback, and any suggestions!
by oblio | 2025-05-23 13:28:30+00:00
It's only going to get worse for Tesla. VW is preparing a €25k model and a €20k, and I fully expect VW to hit close to those price points, unlike Tesla.

Plus once VW does that, they will release comparable models from Audi, Seat, Skoda (all of those are VW brands).

Renault already has a few very nice models (4 and 5), Peugeot, Fiat, Citroen, Open have already released some.

The European EV ship has sailed for Tesla.
by constantcrying | 2025-05-23 13:28:58+00:00
First year 50,260.56 Euros at TV13 at the Humboldt University Berlin compared to Harvard's MINIMUM salary of $67,600. See https://postdoc.fas.harvard.edu/salarystipend-level

Given that taxes are much, much higher in Germany the difference is quite drastic.

Again I am NOT using a source for 2022, it is the exact contract in force for May 2025.
by marsupial | 2025-05-23 13:29:09+00:00
what you speak of is difference between literature and mere communication. Painting with words is essential in lit even if you do not notice. Maybe Beethoven writes chord progressions leaves it at that?

but in clarity yours is a STEM technical writing approach. Fine for stem, not fine for an English major. Muddy. Very very muddy. Relevant only to the carriage schedule and whether murderer gets gunk on his boots. True often for ersatz writers and professional emails. But mud fog BLEAKNESS gestures here maybe to social decay, anomie, listlessness, an eternal stupor, impotence of characters and so on. This is also communication by painting. The painting has a point for the plot AND your pleasure.

Would you prefer novel by bullet points?
by thejazzman | 2025-05-23 13:29:37+00:00
> treats them as objects to be used for self benefit

Wow.

This means everyone I've ever met in my entire life is a multi-time objectifier of women/men/pets/etc. We've all sought out new partners and friends upon losing others.

I feel for you, because it seems you have such a lost idea for people and relationships. You're projective all these bitter ideas that I've never ever in 38y observed in my life/others.

People spend a fortune of money and time on what you perceive as a label/symbol
by CodyGaskin | 2025-05-23 13:30:03+00:00
Thank you for your comment and for raising concerns about the accuracy of our messaging. I’d like to clarify what Memoram actually provides, as it’s fundamentally different from just “prompt engineering” or stacking prompts.

Memoram is not an LLM or an AI tool itself. Instead, it’s a secure, encrypted database where you can store any information you choose—preferences, facts, notes, or other data you want to persist across AI tools. Think of it as a personal, cross-app “memory vault” that you fully control. When you interact with different AI assistants, you can selectively grant them access to relevant pieces of your stored information, enabling those tools to provide more context-aware and consistent responses, regardless of which LLM or service you’re using
by bluesroo | 2025-05-23 13:30:13+00:00
Your definition of "learning" is incomplete because you're applying LLM concepts to how human brains work. An LLM only "learns" during training. From that point forward all it has is its context and vector DBs. If an LLM and vector DB is not actively interacted with, nothing happens to it. However for the brain, experiencing IS learning. And the brain NEVER stops experiencing.

Just because I don't remember my experiences at second 45232 on May 22, doesn't mean that my brain was not actively adapting to my experiences at that moment. The brain does a lot more learning than just what is conscious. And then when I went to sleep the brain continued pruning and organizing my unconscious learning for the day.

Seeing if someone can go from token to freeform physical usefulness will be interesting. I'm of the belief that LLMs are too verbose and energy intensive to go from language regurgitation machines to moving in the real world according to free form prompting. It may be accomplishable with the vast amount of hype investment, but I think the energy requirements and latency will make an LLM-based approach economically infeasible.
by hansvm | 2025-05-23 13:30:38+00:00
> hash is the deterministic function

In most languages and libraries, hashing is still only deterministic within a given run of the program. Authors generally have no qualms "fixing" implementations over time, and some systems introduce a salt to the hash intentionally to help protect web programmers from DOS "CVEs".

If you want reproducible RNG, you need to write it yourself.

System's based on Jax's notion of splitting a PRNG are often nice. If your splitting function takes in inputs (salts, seeds, whatever you want to call them), you can gain the property that sub-branches are reproducible even if you change the overall input to have more or fewer components.
by class3shock | 2025-05-23 13:31:16+00:00
This is the ranting (disguised as "analysis") of a self righteous English major annoyed that students don't get readings that are written in archaic English. The only person who can't read is the people who can't read the room and understand that this stuff is of zero relevance or usefulness to the vast majority of students. This is like getting mad when people show up for a Italian class and they don't understand the Latin readings you give them.
by yen223 | 2025-05-23 13:31:18+00:00
When they talked about how the first draft had the correct bird from the correct place making the correct sound, but what made it into production was the wrong bird from the wrong place making the wrong sound, I felt that in my software engineering soul.

The reasons were relatable too - real-world constraints got in the way, and ultimately this bug was way too minor to be fixed, in the face of all the big problems the movie faced.
by Joker_vD | 2025-05-23 13:31:47+00:00
That's... how the 2nd amendment used to be treated, actually: state laws against conceit carry have lo-o-ong history, and they've been held to be perfectly constitutionally until recently. Oh, and "well-regulated" used to mean "well trained and supplied" back in those day.

And the 2nd actually reads (if you fix its grammar since it's ungrammatical by the standards of the modern English language) "since the well-regulated militia is necessary to the security of a free state, the right of the people to keep and bear arms shall not be infringed" — now notice that it's a conditional rule, and its premise in "since..." is no longer true, militias are not necessary for the security of a country; and so the conclusion should lose its power. And arguably it's what the Founders intended: if they meant it as an absolute rule, they would've omitted the first part of it and would have simply stated that "the right of the people to keep and bear arms shall not be infringed", period.
by josephg | 2025-05-23 13:31:56+00:00
I just tried it, and the problem is even worse in gcc.

Given this C code:

typedef struct { uint16_t a, b; } pair; int eq_copy(pair a, pair b) { return a.a == b.a && a.b == b.b; } int eq_ref(pair *a, pair *b) { return a->a == b->a && a->b == b->b; }

Clang generates clean code for the eq_copy variant, but complex code for the eq_ref variant. Gcc emits pretty complex code in both variants.

For example, here's eq_ref from gcc -O2:

eq_ref: movzx edx, WORD PTR [rsi] xor eax, eax cmp WORD PTR [rdi], dx je .L9 ret .L9: movzx eax, WORD PTR [rsi+2] cmp WORD PTR [rdi+2], ax sete al movzx eax, al ret

Have a play around: https://c.godbolt.org/z/79Eaa3jYf
by titzer | 2025-05-23 13:33:29+00:00
This is why it's imperative that inline caches learn and adapt to the observed behavior. As long as learning is cheap, identifies profitable cases effectively, and backs off for polymorphic and megamorphic scenarios, it's a win.

VM implementer intuition only goes so far, and as the internet is the greatest fuzzer invented, you're definitely going to encounter programs that break your best laid plans.
by duxup | 2025-05-23 13:34:09+00:00
I hate cookie banners.

The idea that these problems should be solved in a way that means I have to have a legal agreement with every webpage just for viewing is absurd.

I don't make legal agreements when I walk into a shop, it makes even less sense on the web.

The cookie banner situation is an administrative solution that sounds nice in legal terms, but where the practical impact I suspect for most folks is they don't get more privacy / more ability to assert their rights ... they are just annoyed and click around to make the thing go away.
by unscaled | 2025-05-23 13:35:10+00:00
I would argue that JOSE is complex for the sake of complexity. It's not nearly as bad as old cryptographic standards (X.509 and the PKCS family of standards) and definitely much better than XMLDSig, but it's still a lot more complex than it needs to be.

Some examples of gratuitous complexity:

1. Supporting too many goddamn algorithms. Keeping RSA and HMAC-SHA256 for leagcy-compatible stuff, and Ed25519 for XChaChaPoly1305 for regular use would have been better. Instead we support both RSA with PKCS#1 v1.5 signatures and RSA-PSS with MGF1, as well as ECDH with every possible curve in theory (in practice only 3 NIST Prime curves).

2. Plethora of ways to combine JWE and JWS. You can encrypt-then-sign or sign-then-encrypt. You can even create multiple layers of nesting.

3. Different "typ"s in the header.

4. RSA JWKs can specify the d, p, q, dq, dp and qi values of the RSA private key, even though everything can be derived from "p" and "q" (and the public modulus and exponent "n" and "e").

5. JWE supports almost every combination of key encryption algorithm, content encryption algorithm and compression algorithm. To make things interesting, almost all of the options are insecure to a certain degree, but if you're not an expert you wouldn't know that.

6. Oh, and JWE supports password-based key derivation for encryption.

7. On the other, JWS is smarter. It doesn't need this fancy shmancy password-based key derivation thingamajig! Instead, you can just use HMAC-SHA256 with any key length you want. So if you fancy encrypting your tokens with a cool password like "secret007" and feel like you're a cool guy with sunglasses in a 1990s movie, just go ahead!

This is just some of the things of the top of my head. JOSE is bonkers. It's a monument to misguided overengineering. But the saddest thing about JOSE is that it's still much simpler than the standards which predated it: PKCS#7/CMS, S/MIME and the worst of all - XMLDSig.
by JimBlackwood | 2025-05-23 13:36:18+00:00
> occasionally digging into kernel bugs

Haha, been there! We recently had outages on kube-proxy due to a missing `—set-xmark` option in iptables-restore on Ubuntu 24.04.

On any stateful server we always try to be several major versions behind due to issues like above - that really avoids most kernel bugs and related issues.