MurphyA/hacker-news huggingface dataset:
by viridian | 2025-05-14 17:43:52+00:00
Reads like you are trying to argue for abstinence only education here. The reality security must operate in is that the best security policies are those that people don't circumvent.

If people have to resort to sticky notes, sharing credentials, scripts that automatically update a file containing a plaintext credential, or what have you, odds are that security has massively fumbled the ball.

Keep in mind this is already intuitive enough for everyone, even the security minded, within some set of social and or professional norms. No one uses one time pads for common password based authentications, nor do they rotate passwords daily, nor do they require 64+ characters. We don't do this because its obvious to everyone that business would be too great, and people simply would not comply. Many security teams seem interested in pushing that boundary as far as they can without regard to what the probability density function of compliance actually looks like.

I say this as my password for Nationwide Children's Hospital has officially become the first password to cross that line for me, and now lives in a paper notebook. Forced reset, 2FA mandated, requiring 15 characters, upper, lower, number, and special char (but only a subset of special chars).

Maybe its overkill that the place I go to fill out questionnaires about baby poop, has minimum password requirements such that the entire world's computer would take over 10,000 years to crack.
by pottertheotter | 2025-05-14 17:44:05+00:00
A couple years ago there were several posts here about not using PassKeys, and I went along with that for a bit. But I’ve fallen in love with them. They’re so nice to use with 1Password.

I suppose I might want to stop using 1Password someday, but it still has all my passwords as well so I can just fallback to those. And, honestly, only a fraction of the sites I have in 1Password have PassKeys available.

What I hate much more is sites that don’t have passwords and require you to log in via email every time. It drives me NUTS.
by pessimizer | 2025-05-14 17:44:11+00:00
Works that way with learning a spoken language, too. I couldn't learn my second language until I stopped thinking I was supposed to judge whether things in the language were "good" or not. Languages aren't meant to be "good" in a beauty contest sense, they're supposed to be useful. Accept that they are useful because many, many people use them, and just learn them.

I probably wouldn't have been able to do that with Rust if I hadn't been an Erlang person previously. Rust seems like Erlang minus the high-overhead Erlangy bits plus extreme type signatures and conscious memory-handling. Erlang where only "zero-cost abstractions" were provided by the language and the compiler always runs Dialyzer.
by MyPasswordSucks | 2025-05-14 17:44:46+00:00
When writing reviews in-app, there's a certain pressure to not fuck someone over.

For instance, hypothetically, there might be a listing that mentions plenty of clean towels, a swimming pool, and a walk to a convenience store. I get there and there were two towels, the swimming pool was one of those above-ground models, and the convenience store was a 20 minute walk.

Leaving a negative review on AirBnB might fuck the guy over in search results or certain incentives, so I wouldn't really delve into the definition of "plenty" and how a "swimming pool" should mean "a pool that's large enough to swim in" and not "a big puddle that's perfectly suited for splashing around in, but less so for actual swimming". I might mention them in a private note to the renter or something, but it's not egregious enough to sabotage the otherwise-perfectly-fine service I was provided.

There's no such direct gamification with a third-party review site, so I might bring these things up there.

It's similar to leaving a thumbs up for an Amazon driver who walks on the lawn because he didn't notice the paved walkway. Was it "perfect delivery"? No. But is it something I'd want the guy to have negative employment ramifications over? Also no.
by MentalHappyInc | 2025-05-14 17:45:40+00:00
I pivoted into tech as a solo founder — no dev team, no budget. Here’s the AI stack that helped me build and grow a real product — including 20+ podcast bookings, 50% more outbound reach, and $600/month total spend. This changed how I think about scaling.

Not sponsored. Not affiliated — just tools that helped me get further, faster.
by qq12as | 2025-05-14 17:45:53+00:00
This is great.

But how incremental are these advancements?

I picked one at random (B.2 -- the second autocorrelation inequality). Then, I looked up the paper that produced the previous state of the art (https://arxiv.org/pdf/0907.1379). It turns out that the authors had themselves found the upper bound by performing a numerical search using "Mathematica 6" (p.4). Not only did the authors consider this as a secondary contribution (p.2), but they also argued that finding something better was very doable, but not worth the pain:

"We remark that all this could be done rigorously, but one needs to control the error arising from the discretization, and the sheer documentation of it is simply not worth the effort, in view of the minimal gain." (p.5)

So at least in this case it looks like the advancement produced by AlphaEvolve was quite incremental (still cool!).
by quasse | 2025-05-14 17:45:55+00:00
> It would take years to make a single new bus route in any city, I don't think I've ever even seen that happen.

This is simply not true. Madison, WI just finished a massive revamp of their entire bus system where many existing routes were re-aligned or replaced with rapid transit routes with dedicated lanes. Despite massive amounts of naysaying from local conservatives the project has been a massive success and has resulted in a huge bump in ridership [1].

The whole thing happened because the city elected a mayor [2] who was laser focused on making transit happen and just kept working on it.

I think US politics has a major incentive alignment problem - if your local politician's genuine personal success metric is "improved transit" then you're likely to end up with improved transit. If success is "got re-elected", "got more corporate donations" or "used mayorship as a stepping stone to national politics" then you're likely to end up with a milquetoast compromiser who never does anything of substance because they don't want to be accountable for anything.

[1] https://www.channel3000.com/news/madison-metro-sees-brt-wind...

[2] https://en.wikipedia.org/wiki/Satya_Rhodes-Conway
Ask HN: What if you didn't need JavaScript?
by Theoleff | 2025-05-14 17:46:09+00:00
Hello,

I’ve been working on a side project: a curated collection of modern, CSS-only techniques for building interactive UI components (like toggles, modals, dark mode…) without relying on JavaScript.

The idea came from seeing how often we reach for JS when CSS is now more than capable. I’m putting these patterns into an ebook, focused on clean, accessible, and native solutions.

Here’s the landing page if you're curious: https://theosoti.com/you-dont-need-js/

I’d love your honest feedback:

- Does this seem useful or interesting to you?

- Anything you'd expect to see in something like this?

- Or anything that immediately turns you off?

I'm genuinely curious how others are thinking about this.
by alejandro-nummo | 2025-05-14 17:46:42+00:00
I’ve always found traditional accounting software bloated and difficult to use. Especially for freelancers and founders who just want to know where their money is going.

So I decided to build Nummo: a private, double-entry accounting app with a clean design, bank sync, and natural language queries.

It's like “Notion meets Ledger CLI,” but dead simple and opinionated.

Still early, but I recently pre-launched a landing page with a live demo and got a few presales really fast.

I would love your feedback.
by coldpie | 2025-05-14 17:46:49+00:00
KeepassXC lets you export the private key, which you can then back up or import into another KeepassXC instance. I have tested this, it works. I even shipped my exported private key off to a friend in another state and he was able to import it into a KeepassXC instance and log in to my account. Presumably another password manager could support importing the data, as it's just plaintext, though I don't know if any do.

Unfortunately the spec authors think this export feature violates the spec and have threatened KeepassXC with being banned by authenticating websites[1]. This explicit support from the spec authors for client banning makes passkeys non-viable to me. The websites I log in to should not be able to restrict what clients I choose to use to manage my own data.

[1] Spec author writes, "To be very honest here, you risk having KeePassXC blocked by relying parties. ... (RPs [may] block you, something that I have previously rallied against but rethinking as of late because of these situations)." https://github.com/keepassxreboot/keepassxc/issues/10407
by SOTGO | 2025-05-14 17:47:01+00:00
From a summary on HHS.gov it says "De-Identified Health Information. There are no restrictions on the use or disclosure of de-identified health information." Maybe someone with more knowledge could expand on the limitations of what counts as "De-Identified" but I think that might work. I followed the reference and nothing in the CFR jumps out at me, but I'm not a lawyer so who knows.
by matesz | 2025-05-14 17:47:19+00:00
> Here, the code between <<<<<<< SEARCH and======= is the exact segment to match in the current program version. The code between======= and >>>>>>> REPLACE is the new segment that will replace the original one. This allows for targeted updates to specific parts of the code.

Anybody knows how they can guarantee uniqueness of searched snipped within code block or is it even possible?
by nradov | 2025-05-14 17:47:20+00:00
You're making the common mistake of thinking that healthcare is some sort of normal market subject to simple supply-and-demand economics rules. The reality that supply is heavily constrained by CMS funding for residency slots, prices are (mostly) fixed by a few large payers, and patient demand is effectively infinite. There is a serious shortage of radiologists already and it's getting worse as the population grows older and sicker. If AI tools make radiologists more productive then more imaging studies will be ordered.
by Imnimo | 2025-05-14 17:47:30+00:00
I'm surprised by how little detail is given about the evolution procedure:

>In AlphaEvolve, the evolutionary database implements an algorithm that is inspired by a combination of the MAP elites algorithm [71] and island-based population models [80, 94].

"inspired by" is doing a lot of heavy lifting in this sentence. How do you choose dimensions of variation to do MAP-elites? How do you combine these two algorithms? How loose is the inspiration? It feels like a lot of the secret sauce is in the answers to these questions, and we get a single paragraph on how the evolution procedure works, which is so vague as to tell us almost nothing.
by Animats | 2025-05-14 17:47:38+00:00
Yes. But the Arc has to wrap a Mutex, which means you have to lock to get access. It's a dual of the Rc/RefCell/borrow mechanism.

The trouble with calling .lock() is that there is a potential for deadlock. There are some people working on static analysis for deadlock prevention, which is a dual of the static analysis for double borrow protection problem. We're maybe a PhD thesis or two from a solution. Here's some current research, out of Shanghai.[1] Outlines the theory, but code does not yet seem to be available.

[1] https://arxiv.org/pdf/2401.01114
by klik99 | 2025-05-14 17:47:38+00:00
Yes, that's a really good point. I had this nagging feeling of there was a commercialization aspect driving when I was writing that, since that's obviously what happened to punk, and you hit the nail on the head. I do think students are taught the 3-act structure / heros journey as if it was the ideal structure, but the true reason for it's ubiquity is an attempt to commoditize art.
by chneu | 2025-05-14 17:47:39+00:00
I believe the latest episode of the "Modern Love" podcast is kind of about this.

https://www.nytimes.com/2025/05/14/podcasts/why-boys-and-men...

I don't have any more links off hand, but I don't think this is a "new" thing as I've seen it discussed quite a lot over the years. Things such as "Why do white men kill themselves so much more than other groups?"

I don't want to get into the whole "white men's problems are more important than other groups problems" because it's very sensitive and that isn't the point I was making.

There are a ton of reasons why this seems to afflict white men a bit more and I don't know which of them are more valid than others. Whether the idea that it affects white men more is probably contentious in itself. That's not the point.

I'm not claiming I'm right or that it's a serious issue. It's just an interesting topic that probably has a billion factors contributing. It's interesting to think about and can be eye opening to what other people are going through.
by arghwhat | 2025-05-14 17:48:02+00:00
Arguably, even considering HDR a distinct thing is itself weird an inaccurate.

All mediums have a range, and they've never all matched. Sometimes we've tried to calibrate things to match, but anyone watching SDR content for the past many years probably didn't do so on a color-calibrated and brightness calibrated screen - that wouldn't allow you to have a brightness slider.

HDR on monitors is about communicating content brightness and monitor capabilities, but then you have the question of whether to clip the highlights or just map the range when the content is mastered for 4000 nits but your monitor manages 1000-1500 and only in a small window.
by SoftTalker | 2025-05-14 17:48:02+00:00
So I recently needed an MRI to evaluate a rotator cuff injury. Because MRIs are expensive, insurnace required that I do 6 weeks of physical therapy first to see if that would resolve it.

Is this because the imaging process is so expensive, or because the radiologist who reads the image is so expensive?

If demand for an expensive imaging process increases, it will get even more expensive.
by tracker1 | 2025-05-14 17:48:11+00:00
I'm inclined to give the guy slightly more credit. I do think that he talks off the cuff more than most politicians we are used to. I also think that he works from strategy as opposed to pre-planning everything.

This is not that I agree with everything he does. I'm saying the guy is human, impulsive, narcissistic as well as capable of being charismatic and joking. The tariff bombs were likely about negotiation from strength from the beginning.
Show HN: Build a free linktree alternative that skips in-app-browsers
by DevEric | 2025-05-14 17:48:13+00:00
I searched for something like this and couldn’t find it. I thought, this can’t be that hard, so I built it myself. What really messed me up was that social media apps open websites inside their in-app browsers…

It costs nothing to run, so it’s free for everyone. You only need to sign up if you want to create your own link page. If you just want to convert your existing link into one that automatically skips the in-app browser, you can do that without an account.

I used Next.js and MongoDB. And I’m proud to say: Not Vibe-Coded!

Let me know if you need help or have questions.
by tylerhou | 2025-05-14 17:48:45+00:00
In practice, if I have to implement dominators, it's probably for a toy language so I just go with the (fast quadratic) dataflow approach. It's simple to implement if you know what you're doing and if you already have a dataflow framework, it's pretty easy to implement: https://github.com/tylerhou/cs265/blob/main/tylerhou/lib/ssa...
by quelup | 2025-05-14 17:48:54+00:00
Haha that's nuts - if nothing else, it's pretty good validation that others have this same problem. Let's definitely connect - you guys are building something really cool and I'm looking forward to seeing how you've grown and where you all go. I liked your YT ad too btw - lol we really do have almost the exact same idea. I'll check out the community.
by pram | 2025-05-14 17:49:18+00:00
lmao this is exactly the kind of stuff I always see from Claude. It’s like adding a Skip() to a test and declaring it works now. “Well it’s a lot faster, I met the criteria of my TODOs cya”

I’ve seen it so much I kinda doubt it was “inadvertent” because they’re like seemingly intentional about their laziness, and will gaslight you about it too.
by johnea | 2025-05-14 17:49:20+00:00
Seriously. One has to wonder how many of those "reviews" and "articles" were LLM generated.

Like the tool's glowing appraisal of Altman, it also is self promoting.

To me, this represents one of the most serious issues with LLM tools: the opacity of the model itself. The code (if provided) can be audited for issues, but the model, even if examined, is an opaque statistical amalgamation of everything it was trained on.

There is no way (that I've read of) for identifying biases, or intentional manipulations of the model that would cause the tool to yield certain intended results.

There are examples of DeepState generating results that refuse to acknowledge Tienanmen square, etc. These serve as examples of how the generated output can intentionally be biased, without the ability to readily predict this general class of bias by analyzing the model data.
by zahlman | 2025-05-14 17:49:36+00:00
> Yeah, but the whole purpose here is "flattening the learning curve", and telling people code will work when it won't is doing the opposite.

"Flattening the learning curve" is perhaps a wrong metaphor - you can't actually change what needs to be learned; you can only make it easier to learn.

Saying something that is usually right and can be corrected later is a standard pedagogical approach - see https://en.wikipedia.org/wiki/Wittgenstein%27s_ladder . To extend the metaphor, the ladder is there to help you climb the learning curve.
by SyrupThinker | 2025-05-14 17:50:29+00:00
I think this is good insight, and I would extend this further to “coming from a less strict language to a very strict one”.

As someone who self-learned Rust around 1.0, after half a year of high school level Java 6, I’ve never had the problems people (even now) report with concepts like the ownership system. And that despite Rust 1.0 being far more restrictive than modern Rust, and learning with a supposedly harder to understand version of “The Book”.

I think it’s because I, and other early Rust learners I’ve talked to about this, had little preconceived notions of how a programming language should work. Thus the restrictions imposed by Rust were just as “arbitrary” as any other PL, and there was no perceived “better” way of accomplishing something.

Generally the more popular languages like JS or Python allow you to mold the patterns you want to use sufficiently, so that they fit into it. At least to me with languages like Rust or Haskell, if you try to do this with too different concepts, the code gets pretty ugly. This can give the impression the PL “does not do what you need” and “imposes restrictions”.

I also think that this goes the other way, and might just be a sort of developed taste.
by gamblor956 | 2025-05-14 17:50:47+00:00
The problem is that a lot of the themes and topics in the novel simply aren't relevant to teenagers, and won't be for years. It's why English teachers love the novel and students almost universally hate it. My English teacher also said as much at the time: most of us wouldn't appreciate this novel until well after college.

We weren't forced to write a series of essays explaining how much we loved the book or how brilliantly written it was; that would have earned a D at best in any of the college-bound English classes in my district (and generally, in most other California school districts as well). We did have to write essays engaging with the themes and substantive content of the book (i.e., what ideas the book was conveying and how it did that, or tried to do that).

The point of Gatsby was too see how (relatively) modern books engaged in the same sort of symbolism and symbolic discourse as "classical" works like Dickens. AP English classes were permitted to use more modern novels, and most did (the most recent novel we read as part of the course was the Shipping News.)
by some-guy | 2025-05-14 17:50:56+00:00
I agree about 4k vs non-4k. I will say going OLED was a huge upgrade, even for SDR content. HDR content is hit-or-miss...I find some of it is tastefully done but in many cases is overdone.

My own movie collection is mostly 2-4GB SDR 1080p files and looks wonderful.
by ekzhang | 2025-05-14 17:51:01+00:00
Hello - I wanted to share a bit about an open-source project I’ve been working on, building a fundamental library for ML and numerical computing in the browser.

There are different tradeoffs here, but I’d like to replicate the speed and ergonomics of Python libraries with NumPy/PyTorch/JAX without the difficulty of distribution. jax-js is lightweight enough to be embedded in a website, but optimized to take advantage of tech like Wasm and WebGPU.

Let me know if you have any feedback on this compiler design. It’s working well and faster than tfjs at matrix multiplication, while having kernel fusion as well.
by coldpie | 2025-05-14 17:51:34+00:00
This is fine for corporate settings, where the data is not owned by the user but by the company. But it's completely unacceptable for managing one's own personal account. What do I do if I do not trust proprietary software to manage my ability to log in to online services? How can this be compatible with open source passkey providers?

The spec failing to distinguish between these two cases is a major flaw and completely kills passkey viability for personal accounts until they resolve it.
by tgsovlerkhgsel | 2025-05-14 17:51:49+00:00
Assuming you're talking about taking a lawyer:

I'm sure you're right in some countries. In countries with a working small claims system, you should be able to do that without a lawyer in simple enough cases. In some other countries, you might be out more than $500 temporarily but in the end the company pays the lawyer and all other costs.

Often, once it reaches the escalation point where their legal department and not their customer-service-denial department is handling the case, they'll cut a check.

If you are talking about shaming: Your shaming might not have the same reach, but you can still leave negative reviews and tell your friends. I have a policy that if a company pisses me off or wastes my time, I will spend at least the equivalent amount of time leaving negative reviews or telling people about my experience, for reasons a) and c).