MurphyA/hacker-news huggingface dataset:
by 0x6c75636964 | 2025-05-05 21:56:34+00:00
Striking metaphor, alganet. You’re spot on—the uncertainty of who the “doppelganger” is remains ever-present in these dialogues. How much can we (or I) trust the mirrors we hold up to ourselves, especially when those mirrors might blur or reshape the boundaries between human and machine?

As for being “shot in the foot,” I see that as a possible cost of inquiry. Sometimes discomfort or missteps are necessary steps toward new insight. Don't get me wrong, though, I’m not spending all day waxing philosophical with language models to “find myself.” This was simply something interesting that emerged along the way.

I’m curious, though—how do you see this dynamic unfolding?
by pimeys | 2025-05-05 21:56:43+00:00
I run Zenarmor in addition to Adguard at home, which can detect DoH traffic and intercept it. You have to pay for this enterprise level tool, but if you are worried about DoH, Zenarmor is so far the easiest tool to block it.

In our house the only device that tries to use DoH is my partner's iPhone. It tries a few times, fails, then uses the Adguard DNS, which blocks the trackers.
by gogurt2000 | 2025-05-05 21:56:54+00:00
To me that sounds like sophistry (unintentional or not). Wikipedia summarizes it nicely:

"Sophistry" is today used as a pejorative for a superficially sound but intellectually dishonest argument in support of a foregone conclusion.

Loosely related: The 60's scifi novel "The Moon Is a Harsh Mistress" explored the idea of computers with powerful enough AI that they could construct a logically persuasive argument for any stance by cherry picking and manipulating the facts. In the book I think they called those computers Sophists, which seems particularly relevant today. You can absolutely ask an LLM to construct an argument to support any stance and, just like in the book, they can be used to produce misinformation and propaganda on a scale that makes it difficult for humans to discern the truth.
by senderista | 2025-05-05 21:57:40+00:00
I live in the PNW. I like roundabouts where they fit, but near our house there's a super-busy one with multiple lanes that is just an accident magnet. People are constantly cutting across lanes while entering and exiting and sideswiping each other. It was originally a 4-way traffic light and it should have stayed that way. OTOH, we have a 4-way stop sign that is also an accident magnet during rush hour (when there's so much traffic that right-of-way is often unclear) and it should be a roundabout instead. Other than accidents from cutting across lanes during turns, the main failure mode I see in roundabouts is that they're subject to starvation while stop lights or stop signs aren't: if traffic coming one way never stops, then traffic to its right may never have a chance to go. I see this dealt with informally by folks voluntarily yielding but it's far from ideal (and unsafe because it's making an ad-hoc exception to a rule).
by tomhow | 2025-05-05 21:57:59+00:00
> ROFL! Are you suggesting there is no framework? Do the basic research before spouting your propaganda!

Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

Please don't fulminate. Please don't sneer, including at the rest of the community.

https://news.ycombinator.com/newsguidelines.html
by foobarqux | 2025-05-05 21:58:43+00:00
There is so much tacit understanding by both LLM-boosters and LLM-skeptics that only becomes apparent when you look at the explicit details of how they are trying to use the tools. That's why I've asked in the past for examples of recording of real-time development that would capture all the nuance explicitly. Cherry-picked chat logs are second best but even then I haven't been particularly impressed by the few examples I've seen.

> I mean, I'm doing that in the sense that I am using them.

My point is whatever you are doing is worth millions of dollars less than teaching the non-believers how to do it if you could figure out how (actually probably even if you couldn't but sold snake-oil).
by Sniffnoy | 2025-05-05 21:58:50+00:00
> Doesn't that break Signal's security guarantees? For example, what if I set my message to delete in 1 hour but TM Sgnl archives it, or some other app simply ignores the retention setting?

Disappearing messages has never been a security guarantee of Signal. People can always archive things their own way (screenshots in the worst case). It's just a convenience feature, not a security thing.
by joshstrange | 2025-05-05 21:59:07+00:00
I do not want to be mean but I think you'd be much better served with ESLint rules to yell at you when you don't await when you should or do when you shouldn't.

This should _not_ be an automatic operation since it can change behavior in ways that will be unclear to the developer (completely undoing any gain from them being added automatically).
by lsaferite | 2025-05-05 21:59:43+00:00
I would counter that they were operating under the direction of the corporation and, as such, the corporation should be liable. But, I'm not a lawyer.

My overall point is just that a corporation willfully violating copyright should be treated wholly differently than an individual.

I still think that, regardless of any copyright violation by the corporation in acquiring the content, that training with the data doesn't (or shouldn't) somehow taint the resulting model.
by Jtsummers | 2025-05-05 21:59:44+00:00
> There are going to be a lot of angry customers this fall.

This is silly. They haven't bought it yet, there's nothing to be angry about. The battery life numbers will be known before sales begin and if there's any doubt, wait 1-3 weeks until reviewers have had a chance to put it through its paces. Similarly, if the camera and speakers are a problem, buy a different version or buy something else entirely. It's not like Apple is going to go out and replace everyone's phone with a 17 Air.
by robbomacrae | 2025-05-05 22:00:12+00:00
Spot on. I’d add that most serious transcription services take around 200-300ms but the 500ms overall latency is sort of a gold standard. For the AI in KFC drive thrus in AU we’re trialing techniques that make it much closer to the human type of interacting. This includes interrupts either when useful or by accident - as good voice activity detection also has a bit of latency.
by jiggawatts | 2025-05-05 22:00:25+00:00
Azure has Resource Groups and global visibility across all products in all regions in a single pane of glass.

There are “single IP” global load balancers with regional dynamic routing in Azure too.

People just assume AWS is the best in the same way that Cisco was considered the best even though they were a dinosaur selling over-priced products for the last two decades.
by bsder | 2025-05-05 22:01:36+00:00
> You're not going to find me on a university campus or in a research lab because I'm at a FAANG trying to pay my mortgage.

Make sure you are demonstrating it to the people on your team so that when they leave and go somewhere else, they can hit you up. This takes some time.

And, sorry, you have to get out and hit some gatherings in person (hackerspaces, meetups, professional meetings, etc.)--online-only isn't going to cut it anymore. With the AI garbage clog of inline interactions, your professional network is back to who you know in-person.
Show HN: Automate your workflows with screen recordings and AI agents
by Dheerajiitr | 2025-05-05 22:02:05+00:00
Hi all,

There are tons of AI agent builders out there. But let’s be honest, for most people, they’re still hard to use. Every single day, I see people struggling to create workflows with these agents and posting their requirements on Upwork.

So we built Nutix. Just upload your screen recording and that’s it.

Nutix watches what you do, understands your workflow, and builds it with AI agents instantly. You'll have to authorize access to underlying application for agents runs.

Access over 2500+ applications and build your automations on top of it.

No prompts. No coding. Just show it once , and you're done.
by stefan_ | 2025-05-05 22:02:55+00:00
I use it all the time, multiple times daily. But the discussion is not being very honest, particularly for all the things that are being bolted on (agent mode, MCP). Like just upstream people dunk on others for pointing out that maybe giving the model an API call to read webpages isn't quite turning LLM into search engines. Just like letting it run shell commands has not made it into a full blown agent engineer.

I tried it again just now with Claude 3.7 in Cursors Agent/Compose (they change this stuff weekly). Write a simple C++ TensorRT app that loads an engine and runs inference 100 times for a benchmark, use this file to source a toolchain. It generated code with the old API & a CMake file and (warning light turns on) a build script. The compile fails because of the old API, but this time it managed to fix it to use the new API.

But now the linking fails, because it overwrote the TRT/CUDA directories in the CMakeLists with some home cooked logic (there was nothing to do, the toolchain script sets up the environment fully and just find_package would work).

And this is where we go off the rails; it messes with the build script and CMakeLists more, but still it can not link. It thinks hey it looks like we are cross-compiling and creates a second build script "cross-compile.sh" that tries to use the compiler directly, but of course that misses things that the find_package in CMake would setup and so fails with include errors.

It pretends its a 1970 ./configure script and creates source files "test_nvinfer.cpp" and "test_cudart.cpp" that are supposed to test for the presence of those libraries, then tries to compile them directly; again its missing directories and obviously fails.

Next we create a mashup build script "cross-compile-direct.sh". Not sure anymore what this one tried to achieve, didn't work.

Finally, and this is my favorite agent action yet, it decides fuck it, if the library won't link, why don't we just mock out all the actual TensorRT/CUDA functionality and print fake benchmark numbers to demonstrate LLMs can average a number in C++. So it writes, builds ands runs a "benchmark_mock.cpp" that subs out all the useful functionality for random data from std::mt19937. This naturally works, so the agent declares success and happily updates the README.md with all the crap it added and stops.

This is what running the lawnmower over the flower bed means; you have 5 more useless source files and a bunch more shell scripts and a bunch of crap in a README that were all generated to try and fail to fix a problem it could not figure out, and this loop can keep going and generate more nonsense ad infinitum.

(Why could it not figure out the linking error? We come back to the shitty bolted on integrations; it doesn't actually query the environment, search for files or look at what link directories are being used, as one would investigating a linking error. It could of course, but the balance in these integrations is 99% LLM and 1% tool use, and even context from the tool use often doesn't help)
by snitty | 2025-05-05 22:03:42+00:00
>The City of Chicago's lawyers went the opposite direction

Not really.

>I wrote that SQL schemas would provide “only marginal value” to an attacker. Big mistake. Chicago jumped on those words and said “see, you yourself agree that a schema is of some value to an attacker.”

The City of Chicago's argument was that something of ANY value, no matter how insignificant, would help an attacker exploit their system, and was therefore possible to keep secret under the FOIA law.
by latchkey | 2025-05-05 22:04:03+00:00
"Companies that provide IT outsourcing and consulting are "scrambling to maintain their existing contracts" as companies try to reduce costs to prepare for the effects of tariffs, leading to hiring pauses and staff reductions in those firms, Janco said. A declining stock market has left companies fearing a downturn and therefore reticent to invest in new talent."

My buddy who has a consulting firm had a bunch of his accounts dry up because of this. I don't think people realize the impact of "fear" has on the market.
by nvarsj | 2025-05-05 22:04:14+00:00
Just do it like the olden days, use ansible or similar.

I have a couple dedicated servers I fully manage with ansible. It's docker compose on steroids. Use traefik and labeling to handle reverse proxy and tls certs in a generic way, with authelia as simple auth provider. There's a lot of example projects on github.

A weekend of setup and you have a pretty easy to manage system.
by matsemann | 2025-05-05 22:04:42+00:00
FWIW, I never clicked into this when I originally saw it because I'm not that interested in a "technical analysis", but gained interest when the other title said that the app was hacked. To me, that's worth discussing, but here that lede is a bit buried. And I now only know about it because a friend sent me the link.

I do feel there's a pattern of me reading some interesting tech news, then thinking "wait, why didn't I see this discussed on HN?", to searching for it and finding a buried/flagged HN discussion due to it being somewhat tied to politics (what isn't?)
by carlosjobim | 2025-05-05 22:04:45+00:00
You didn't mention the most important difference: Nordic countries have "free evidence exhibition", meaning that anything and everything is allowed to be presented as evidence in the courts and the judges have total liberty in deciding on how to weigh evidence.

This means evidence such as hearsay or illegally obtained evidence is given the same consideration as real evidence. Resulting many times that the court can sentence an accused that everybody "knows" is guilty, and other times resulting in mind bogglingly insane verdicts.

Another big difference: No plea deals. Which is something very strange about the American justice system.
by jiggawatts | 2025-05-05 22:06:42+00:00
Azure Resource Manager provides a “single pane of glass” for both the GUI and CLI tooling so that you’re not jumping between web consoles that appear unrelated but manage a single cohesive deployment of inter-related parts.

It uses human names instead of random gibberish identifiers. Last time I looked at AWS it still refused to turn these into clickable hyperlinks. Do the lookup yourself human! This menial task is beneath the great cloud computer.

Etc…
by sebiglesias | 2025-05-05 22:08:01+00:00
Location: Argentina

Remote: Yes

Willing to relocate: No

Technologies: Java, Python, SQL (Postgres), JavaScript, HTML/CSS, R, Typescript, Scala, Bash, React, Node.js, FastAPI, JUnit, Spring, Express, PostHog, Git, GitHub, Docker, Jenkins, CircleCI, Google Cloud Platform (GCP), AWS, Intellij, Kubernetes, Nginx, Redis

Resume/CV: https://sebiglesias.com.ar/assets/en/cv.pdf

Email: me@sebiglesias.com.ar

About me: I am a seasoned Software Engineer with over eight years of experience designing and developing robust, scalable systems across cloud, back-end, and front-end technologies. With expertise in functional programming using React, Node.js, and TypeScript, I have led impactful projects that improved CI/CD pipelines and customer experiences, driving measurable growth. Additionally, my work with data-driven systems and microservices using Java, Spring, and PostgreSQL has honed my ability to deliver innovative solutions to complex challenges. I am seeking opportunities to leverage my technical and leadership skills to build transformative software products and contribute to a forward-thinking organization. https://sebiglesias.com.ar
by tomp | 2025-05-05 22:10:57+00:00
If your model is fast enough, you can definitely do it. That's literally how "streaming Whisper" works, just rerun the model on the accumulated audio every x00ms. LLMs could definitely work the same way, technically they're less complex than Whisper (which is an encoder/decoder architecture, LLMs are decoder-only) but of course much larger (hence slower), so ... maybe rerun just a part of it? etc.
by ndsipa_pomu | 2025-05-05 22:11:02+00:00
One work-around is to get them to modify their wifi connection to use a specific DNS (e.g. Google at 8.8.8.8 and 8.8.4.4 is easy to remember).

I run Pi-hole in docker on a NanoPi that I setup as my router (running OpenWRT). In the rare occurrence that it misbehaves, I could just tell my spouse to power cycle it. I did think of having a failover, but there's always going to be a single point of failure with my ISP router anyhow.
by SAI_Peregrinus | 2025-05-05 22:11:16+00:00
"Almost all" is an interesting one, because it has family of mathematical definitions in addition to any informal definitions. If X is a set, "almost all elements of X" means "all elements of X except those in a negligible subset of X", where "negligible" depends on context but is well-defined.

If there's a finite subset of an infinite set, almost all members of the infinite set are not in the finite set. E.g. Almost all integers are not 5: the set of integers equal to five is finite and the set of integers not equal to five is countably infinite.

Likewise for two infinite sets of different size: Almost all real numbers are not integers.

Etc.
by sally_glance | 2025-05-05 22:11:55+00:00
Are we not very close to lifting this restriction? Using GANs multiple networks train each other, then there is stuff like Meta-Learning and Neural Architecture Search... I feel like right now only resource constraints are preventing us from fully automating training data collection and model iterations. Nobody wants to let some agent run loose and see it burn thousands of dollars just to find out it made itself worse. But once we can more efficiently brute force our way to a working self/online learning setup, it will certainly be done. We already synthesize training data using other neural networks too.
by chychiu | 2025-05-05 22:11:57+00:00
Doctor here

1. It’s generally difficult to quantify such risks in any meaningful manner

2. Provision of any number adds liability, and puts you in a damned-if-does, damned-if-it-doesn’t-work-out situation

3. The operating surgeon is not the best to quantify these risks - the surgeon owns the operation, and the anaesthesiologist owns the patient / theatre

4. Gamblers quantify risk because they make money from accurate assessment of risk. Doctors are in no way incentivised to do so

5. The returned chance of 1/3 probably had an error margin of +/-33% itself
by davesque | 2025-05-05 22:12:33+00:00
I have to agree. That's one of the dangers of today's world; the risk of believing that we never had a better one. Yes, the altruism of yesteryear was partially born of convenience, but it still existed. And I remember people actually believing it was important and acting as such. Today's cynicism and selfishness seem a lot more arbitrary to me. There's absolutely no reason things have to be this way. Collectively, we have access to more wealth and power now than we ever did previously. By all accounts, things ought to be great. It seems we just need the current generation of leaders to re-learn a few lessons from history.
by philipwhiuk | 2025-05-05 22:14:30+00:00
> Lots of people in academia and industry

Mostly OpenAI and DeepMind and it stunk of 'pulling up the drawbridge behind them' and pivoting from actual harm to theoretical harm.

For a crowd supposedly entrenched in startups, it's amazing everyone here is so slow to recognise it's all funding pitches and contract bidding.
Show HN: Skimz.ai – a 10-minute daily news brief, now installable as a PWA
by cfata | 2025-05-05 22:14:43+00:00
Skimz is a concise, citation-rich news briefing you can finish before your second coffee. We just shipped full Progressive Web App support, so you can install it like a native app and read offline.

Why a PWA matters: - One-click install on desktop (Chrome, Safari, Edge) - Auto-updates in the background — always the latest brief - Launches from your dock/Start menu without a browser tab - Caches the day’s edition for offline reading

Install in three steps: 1) Visit https://skimz.ai 2) Click the install icon in the address bar (Chrome/Safari) - Edge: ⋯ → Apps → “Install this site as an app” 3) Skimz appears alongside your other apps

What you get: - 60-second summary + 10-minute deep-dive every weekday - Markets, geopolitics, tech, science/health, “This Day in History” - Inline hover citations for every fact

Feedback and bug reports are welcome! Thanks for giving it a spin and curious to hear what the HN crowd thinks!
by pedalpete | 2025-05-05 22:15:18+00:00
I'm not refuting that good dental hygiene is important, but I had an interesting experience at the dentist a few weeks ago, which I've been trying to understand, and this article hints at my issue with current dentistry.

They discuss oral bacteria, but never name the bacteria that is responsible for the decay, if it is in fact decay. They don't talk about good and bad bacteria. The oral surgeon I went to see said "you've got gum disease", and he said this with 100% confidence based on what he suggested was that my gums were "detaching from" my wisdom teeth, and therefore my wisdom teeth had to be removed before any more damage was done.

A different dentist said the same thing to me 17 years ago. I've got 5mm pockets and if we don't take out those teeth, it will get worse. It hasn't gotten worse, nobody has said anything about what sort of bacteria this is. How do they know that this is not the natural position of my gums on those teeth.

When we discuss bacteria in any other part of the body, don't we name that bacteria? Don't we know the good from the bad and test for these things?

The dentist and surgeon's concerns were that the gums would completely separate from the tooth. So I told them...if you pull the teeth out, they're definitely going to be separated!

I'm hopeful that in the next decade we will test for the bacterial balance, or types and have x-biotics or similar methods to adjust the bacteria, not just pull out teeth. I'm still not sure what I'm going to do about it.
by janalsncm | 2025-05-05 22:15:19+00:00
There’s an argument that library authors should consider implementing those hallucinated functions, not because it’ll be easier for LLMs but because the hallucination is a statement about what an average user might expect to be there.

I really dislike libraries that have their own bespoke ways of doing things for no especially good reason. Don’t try to be cute. I don’t want to remember your specific API, I want an intuitive API so I spend less time looking up syntax and more time solving the actual problem.
by fc417fc802 | 2025-05-05 22:15:27+00:00
Such a literal interpretation isn't reasonable. There are all sorts of patterns that can be indirectly leaked through supposedly unrelated data. Yet FOIA exists and is obviously intended to be useful.

So obviously there must be some threshold for the value to an attacker. He attempted to communicate that schemas are clearly below such a threshold and they used his wording to attempt to argue the opposite.
by wkat4242 | 2025-05-05 22:15:56+00:00
I wouldn't bother buying a raspberry pi 5 to run this shit though, as the article suggests. It's way overkill.

Just run the docker on another server you're running anyway, or run it on a raspberry pi zero 2W for $15. A pihole does so little work, it doesn't benefit from a pi 5.

I just run it on a VPS that costs me 3€ per month and runs lots of other stuff too like an IRC bouncer. That way I can access it from everywhere.
by poormathskills | 2025-05-05 22:16:12+00:00
>I'm very rarely unique in my behaviour

I cannot stress this enough: if you know what Deepseek, Claude, Mistral, and Perplexity are, you are not a typical consumer.

Arguably, if you have used a single one of those brands you are not a typical consumer.

The vast majority of people have used ChatGPT and nothing else, except maybe clicking on Gemini or Meta AI by accident.