MurphyA/hacker-news huggingface dataset:
by shio_desu | 2025-05-26 20:36:12+00:00
Honestly I've been getting a lot of use out of LLMs for coding, and have been adjusting my approach to LLM usage over the past year and a half. The current approach I take that has been fairly effective is to spend a lot of focus energy writing out exactly what I'm looking to implement, sometimes taking 30 or more minutes creating a specs doc / implementation plan, and passing it to a agent with an architect persona to review, generate a comprehensive, phased implementation document. I then review the document, iterate with it to make sure the plan works well, then send it off to do the work.

I'm not yet a fan of Windsurf or Cursor, but honestly Roo Codes out of the box personas for architect, and orchestration to spin up focused subtasks works well for me.

I am kinda treating it how I would a junior, to guide it there, give it enough information to do the work, and check it afterwards, ensuring it didn't do things like BS test coverage or write useless tests / code.

It works pretty well for me, and I've been treating prompting these bots just as a skill I improve as I go along.

Frankly it saves me a lot of time, I knocked out some work Friday afternoon that I'd estimate was probably 5pts of effort in 3 hours. I'll take the efficiency anyday as I've had less actual coding focus time in coding implementations than I used to in my career due to other responsibilities.
by nabla9 | 2025-05-26 20:36:13+00:00
Apple is fined 500 million euros, if Apple does not comply within 60 days, it can be fined up to $50 million per day! (= 5% from last years daily revenue)

>PERIODIC PENALTY PAYMENTS

>(313) In view of the seriousness of Apple’s non-compliance with Article 5(4) of Regulation (EU) 2022/1925, as established in this Decision and considering that the non-compliance has been found to be on-going, the Commission concludes that it is necessary to impose periodic penalty payments pursuant to Article 31(1), point (h), of Regulation (EU) 2022/1925 if Apple were to fail to implement measures that bring the infringement effectively to an end within 60 calendar days from the date of

>Any periodic penalty payments that may be definitively set should be sufficient to ensure compliance by Apple with this Decision and may take account of Apple’s

...

>For the non-compliance referred to in Article 1, a fine of EUR 500 000 000 is imposed ...

>If the addressee of this Decision fails to comply with Article 3 within 60 calendar days from the date of notification of this Decision, it shall incur periodic penalty payments not exceeding the limit stipulated in Article 31(1) of Regulation (EU) 2022/1925, from the date on which it is required to bring the non-compliance effectively to an end pursuant to Article 3, until the date on which it complies with the Decision. Apple Inc.. significant financial resources (see recitals (286) and (307) of this Decision) notification of this Decision.

https://eur-lex.europa.eu/eli/reg/2022/1925/oj/eng

>Article 31

>Periodic penalty payments

>1. The Commission may adopt a decision imposing on undertakings, including gatekeepers where applicable, and associations of undertakings periodic penalty payments not exceeding 5 % of the average daily worldwide turnover in the preceding financial year per day, calculated from the date set by that decision, in order to compel them..
by guywithahat | 2025-05-26 20:36:17+00:00
I'm not entirely opposed to raising the retirement age, however what's unfortunate here is the money is needed primarily to cover for spending on immigration. 2/3rd of muslim immigrants have qualified for early immigration (starting at 50), and this has put strain on the system, forcing the retirement age up. There are problems in Denmark but the retirement age isn't the issue in this case
by elfly | 2025-05-26 20:36:23+00:00
yeah, this is the issue. I've used Claude Code to great success to start a project. Once the basic framework is in place, it becomes less and less useful. I think it cannot handle the big context of a full project.

It is something that future versions could fix, if the context a llm can handle grows and also if you could fix it so it could handle debugging itself. Right now it can do it for short burst and it is not bad at it, but it will get distracted quickly and do other things I did not ask for

One of these problems has a technical fix that is only limited by money; the other does not
by EdiX | 2025-05-26 20:36:25+00:00
I speak three languages and I'm learning a fourth. Don't study grammar, ever, it's a waste of time. Grammar rules always fall into one of two categories: the ones that are so obvious that you would have learned them after two examples anyway or the ones that are too vague and complicated to be useful. For an example of the latter look up people making flowcharts for the subjunctive or for the ga/wa distinction. Or, for that matter, find me the place in an english grammar that explains why you get "on" a train, but "in" a car.
by carlosbaraza | 2025-05-26 20:37:51+00:00
I live in Spain and my ISP is Digi, which uses the network from Telefonica. These blocks are incredibly frustrating, and a ton of people have noticed websites and services not working. However, because the block lasts some hours, people don't know what is happening: "is my mobile network bad?", "Is the website down?". They try a few hours later and it's back up, so they move on.

My company's website is behind Cloudflare and I discovered this whole situation because someone couldn't access it. Also my home assistant is not accessible from the internet the days with a match. And we use it to open the garage and the house. We learned the lesson the hard way being locked outside until I managed to connect with a VPN. This is just nuts and incredibly frustrating. And for La Liga we are just a bunch of "frikis" (nerds) complaining about it... because we are the only ones that understand what the problem is.

Unfortunately, someone would have to die and a lawsuit to follow, and maybe that could stop this crazy nonsense. E.g. A few days ago I read about someone with diabetes whose device was malfunctioning because of these blocks.
by marcfisc | 2025-05-26 20:37:52+00:00
Sadly, these ideas have been explored before, e.g.: https://simonwillison.net/2022/Sep/17/prompt-injection-more-...

Also, OpenAI has proposed ways of training LLMs to trust tool outputs less than User instructions (https://arxiv.org/pdf/2404.13208). That also doesn't work against these attacks.
by TJSomething | 2025-05-26 20:37:53+00:00
Another part from the paper that a lot of people here seem to be ignoring: "Specifically, macroscopic water droplets isothermally form when the NP size is ≤22 nm, RH is >~90%, and ϕPE ranges from 0.05 to 0.35." and "Initial water droplets that are observable under optical microscopy (~1 μm in size) appear within a few seconds after being exposed to 97% RH."

This is really moist air that's only barely short of forming dew. A lot of people are focusing on sensational "violation of physics", when it's an incremental improvement on process that happens naturally.
by skippyboxedhero | 2025-05-26 20:38:19+00:00
All of the cases that I have seen have been group chats. The Act in question is - https://en.wikipedia.org/wiki/Communications_Act_2003#Malici... - and there is also a 2001 Act that I believe is used when the prosecutors want a custodial sentence. The application of this law to WhatsApp has been controversial.

It is also worth understanding that in the UK, the security services use specific events to push politicians (with the help of the media) into passing these laws. The Online Safety Act is a recent example, the media campaign was orchestrated by the media/police/security services, and there was a similar campaign behind the 2003 Act...every time. To imply that the laws are there to do anything other than reduce freedom is the wrong starting point.
Show HN: CodeNow – CoderPad over WebRTC and WASM
by solumos | 2025-05-26 20:38:26+00:00
I was doing a lot of Leetcode this winter, and got the idea of building something like it that used wasm in the browser rather than having to manage the complexity of executing remote code securely on a server.

Once I figured that out, I thought it would be neat to make it collaborative, like Coderpad — that part was a bit tougher, but it mostly works now, using WebRTC.

I'm not sure whether other people will think this is cool, but I had fun building it and learning more about wasm + WebRTC.
by lisper | 2025-05-26 20:38:52+00:00
> ERROR: DomainError with -1.0: > sqrt was called with a negative real argument but will only return a complex result if called with a complex argument. Try sqrt(Complex(x)).

This is the sort of thing that drives me absolutely nuts. In no possible world that I can imagine is generating an error a more useful result than returning a complex value. I could forgive it if the system didn't know about complex numbers, but in this case it is clear that the system is perfectly capable of producing a correct and useful result, but it just refuses to do so in service of some stupid ideology. I have zero tolerance for this sort of nonsense.
by schoen | 2025-05-26 20:39:04+00:00
There could be a #4 "historically, streaming could use protocols with unreliable delivery and with limited or no retransmission" (which is somewhat related to #1 and #2). For example, there have been media streaming protocols built on UDP rather than TCP, so packets that are lost are not automatically retransmitted. The idea is that for a real-time stream transmission, older frames are no longer considered relevant (as they would not be rendered at all if they were received late), so there is typically no benefit in retransmitting a dropped packet.

That means you could get drop-outs when data gets lost in transmission, but the overall data consumption of the protocol wouldn't go up as a result.

Not all that long ago, this prompted lots of debate about QoS and prioritization and paid prioritization and network neutrality and stuff. People were arguing that media streams needed higher priority on the Internet than downloads (and other asynchronous communications). Effectively, different Internet applications were directly competing with one another, yet they had very different degrees of tolerance to delays, packet reordering, and packet loss. Wouldn't ISPs have to intervene to prioritize some applications over others?

I remember reading from Andrew Odlyzko that this controversy was mostly resolved in an unexpected way: faster-than-realtime streams with buffering (as the network was typically faster overall than what was needed for a given level of media quality, you could use TCP to reliably download frames that were still in the future with respect to what would be played, and then buffer those locally). This is indeed the scenario depicted in this article.

What about actual live events? My impression is that Twitch and YouTube livestreaming are using a 10-30 second delay relative to realtime, specifically to allow for significant buffering on the client, and then using reliable TCP faster-than-realtime downloads of the "near future" of the video content. Since these streams are purely unidirectional, users don't have a way to notice that they're not literally live. (I don't understand how this interacts with the typical ability to start watching almost instantly, with no visible buffering delay, though.)

There's a big difference for bidirectional conversation, like phone calls, because there even tiny delays are extremely psychologically noticeable. It appears that Zoom, for instance, is still using unreliable UDP streams for call content, which allows skips or dropouts, but keeps the latency relatively low so that it feels comparatively more like a face-to-face interactive conversation.
by to11mtm | 2025-05-26 20:39:36+00:00
'Standard practice'.

And yet there are plenty of shops that will either symmetrically encrypt passwords (at best, the email address or username is used as an IV), Log passwords stupidly [0], have a piss-poor integration where "Oh we have base64 encode the actual XML payload in the soap service and tag it '<Encrypted>`, ship it!" [1], or are just plain too budget strapped to replace the 'forgot password' functionality that told a user their password vs forcing a reset.

And I think that last point hits it well. i.e. at least a plurality of those horrors were done before standard practices evolved to the current state, but nobody can get the budget/time to fix it. (And, I will say, having 'fixed' more than one of the above cases, it definitely has a user impact which can lead to the folks approving the work having an uncomfortable conversation with customers. B: "We forced a password reset to update security standards" C: "Wait so your security standards were subpar!!!" [2]

[0] - Example; logging invalid attempts, but wait a user only failed because they did TypoEmailAddress@gmailcom instead of TypoEmailAddress@gmail.com.

[1] - Yes. This was a thing I got to deal with once. What's even more annoying is that it was a SOAP service so of course the pattern eliminated most of the potential usefulness of a SOAP service.

[2] - That said, usually the person making this complaint, is the person who historically was e-mailing their account rep to give them their password, vs using the 'correct flow but bad implementation' password reset we had in place as a stopgap.
by pqtyw | 2025-05-26 20:39:48+00:00
> So, how do you punish everyone fairly?

By punishing those who decided to commit the crime? Indirectly benefiting from somebody's else illegal actions is not a crime (you might be required to pay it back but that's it..).

Generally executives are the ones who benefit the most of these case and then leave the rest of of the company and the shareholders on the hook while they move on or retire.

> and execs won't get their bonus,

What if they already have their bonuses? Generally it might take years for any investigation to conclude, often executives who benefited from it couldn't care less what happens to the company they don't work at anymore anyway.
by frabcus | 2025-05-26 20:39:54+00:00
This somewhat happens already, with system messages vs assistant vs user.

Ultimately though, it doesn't and can't work securely. Fundamentally, there are so many latent space options, it is possible to push it into a strange area on the edge of anything, and provoke anything into happening.

Think of the input vector of all tokens as a point in a vast multi dimensional space. Very little of this space had training data, slightly more of the space has plausible token streams that could be fed to the LLM in real usage. Then there are vast vast other amounts of the space, close in some dimensions and far in others at will of the attacker, with fundamentally unpredictable behaviour.
by kevincox | 2025-05-26 20:40:16+00:00
I agree that having so many sites behind one CDN (and related services) is a problem, but I don't think it is the elephant in this room. Even if there were 100 very popular CDNs having 1% of sites blocked because one user was streaming sports doesn't feel acceptable. Shared hosting has always been very popular and you have sites like Shopify, Squarespace, WordPress.com that are hosting thousands of sites.

Maybe with IPv6 it will become normal to assign each customer their own IP? But I don't see it. This also reduces privacy because we are moving towards Encrypted Client Hello in TLS but we have made no progress to hide IPs.
by bredren | 2025-05-26 20:40:25+00:00
The way to get past the removing and adding is to have the prompt include what has already been done and what is left to do.

Then specify the need to conclude the work by a deadline.

These kinds of things cause the LLM to “finish” tasks and try to move on or say it is done when it is.

This won’t let you skip the curation of output along the way, but at least some of the stumbling around can be handled with prompting.
by toss1 | 2025-05-26 20:40:43+00:00
Seems we need to define what is meant by "gamification" in this context.

If we're just talking about tracking and making visible streaks, vocab words learned, tenses mastered, etc. that seems fine; little different than in fitness training where one tracks workouts, miles run, pace improved, weights lifted, etc.. Adding in a few goals and milestones met can be helpful

OTOH, if we're talking about skewing the content to maximize psychological manipulation at the cost of actual learning, that is toxic gamification, and certainly against the user's goals.

Haven't used DuoLingo, so I'm not sure which one we have here?
by kapitanjakc | 2025-05-26 20:41:39+00:00
GitHub Co pilot was doing this earlier as well.

I am not talking about giving your token to Claude or gpt or GH co pilot.

It has been reading private repos since a while now.

The reason I know about this is from a project we received to create a LMS.

I usually go for Open edX. As that's my expertise. The ask was to create a very specific XBlock. Consider XBlocks as plugins.

Now your Openedx code is usually public, but XBlocks that are created for clients specifically can be private.

The ask was similar to what I did earlier integration of a third party content provider (mind you that the content is also in a very specific format).

I know that no one else in the whole world did this because when I did it originally I looked for it. And all I found were content provider marketing material. Nothing else.

So I built it from scratch, put the code on client's private repos and that was it.

Until recently the new client asked for similar integration, as I have already done that sort of thing I was happy to do it.

They said they already have the core part ready and want help on finishing it.

I was happy and curious, happy that someone else did the process and curious about their approach.

They mentioned it was done by their in house team interns. I was shocked, I am no genius myself but this was not something that a junior engineer let alone an intern could do.

So I asked for access to code and I was shocked again. This was same code that I wrote earlier with the comments intact. Variable spellings were changed but rest of it was the same.
by 90s_dev | 2025-05-26 20:42:18+00:00
I'm pretty much decided on making the Show HN clone even if nobody uses it. Because I know it's a good idea and I believe in it:

* For every N=round(10) years software experience, you can click submit N10 times.

* You must* provide a link and year proving your earliest project or employoment.

* Max 256 submissions per day for everyone total.

Should be a fun experiment. Email me if you want an early invite.
by mcv | 2025-05-26 20:42:23+00:00
> The point just flew over your head.

It did not. I'm just pointing out reality. Kids are expensive, and it's probably easier to save for retirement if you don't have any. Don't get me wrong: I love my kids and wouldn't trade them for anything, and I have no problem working more and harder for them, but we don't live in the age where retirement depends on having kids anymore.

Maybe you meant to propose to change that, so only people with kids have a right to a government pension, which is certainly an interesting idea, but also doubly painful for people who wanted kids but were unable to have any.
by antirez | 2025-05-26 20:44:12+00:00
I don't believe the document does a great job in explaining what is otherwise a very simple idea (assuming I understood it well):

1. It creates a bitmap where each bit is a pixel in the image, if from frame 0 to frame 1 a given pixel changed, the corresponding bit is 1, otherwise it is 0.

2. All the 1s are added to the bloom filter, hashing their offsets. Now the bloom filter will be positive for all such indexes plus a percentage of false positive indexes.

3. We query the bloom filter to see all the indexes that are positive, and for all such pixels we store the raw pixel data of what changed. So we can reconstruct the next frame easily.

You can think at this like as storing the delta between two frames as: x,y,r,g,b of all the pixels that changed, but compressing a lot the x,y part at the cost of storing a bit more r,g,b than needed.

I have the feeling that since the pixels that changes from frame 0 to frame 1 are often similar (in their location) to what will change from frame 1 to frame 2, there is the possibility of further compressing that as well, by setting the right flags in the next frame and storing verbatim the only offsets that changed in addition to the previous or alike.
by aappleby | 2025-05-26 20:44:16+00:00
I'd add "Cheap prepaid smartphones are actually good now".

$50 will get you a totally usable 6-ish-inch screen Android phone with an almost-up-to-date OS that can do all the internet things you need. You don't even have to activate them with the cell carrier (much like the slightly more expensive $90 device I'm typing this comment on).
by waterheater | 2025-05-26 20:44:37+00:00
>serial interfaces dominating over the parallel ones

Semi-accurate. For example, PCIe remains dominant in computing. PCIe is technically a serial protocol, as new versions of PCIe (7.0 is releasing soon) increase the serial transmission rate. However, PCIe is also parallel-wise scalable based on performance needs through "lanes", where one lane is a total of four wires, arranged as two differential pairs, with one pair for receiving (RX) and one for transmitting (TX).

PCIe scales up to 16 lanes, so a PCIe x16 interface will have 64 wires forming 32 differential pairs. When routing PCIe traces, the length of all differential pairs must be within <100 mils of each other (I believe; it's been about 10 years since I last read the spec). That's to address the "timing skew between lanes" you mention, and DRCs in the PCB design software will ensure the trace length skew requirement is respected.

>how can this be addressed in this massive parallel optical parallel interface?

From a hardware perspective, reserve a few "pixels" of the story's MicroLED transmitter array for link control, not for data transfer. Examples might be a clock or a data frame synchronization signal. From the software side, design a communication protocol which negotiates a stable connection between the endpoints and incorporates checksums.

Abstractly, the serial vs. parallel dynamic shifts as technology advances. Raising clock rates to shove more data down the line faster (serial improvement) works to a point, but you'll eventually hit the limits of your current technology. Still need more bandwidth? Just add more lines to meet your needs (parallel improvement). Eventually the technology improves, and the dynamic continues. A perfect example of that is PCIe.
by treyd | 2025-05-26 20:44:52+00:00
> My impression is that Twitch and YouTube livestreaming are using a 10-30 second delay relative to realtime,

Yeah. The rule of thumb with Twitch used to be 11 seconds. You can still measure this because many streams replay the chat in the stream as an overlay for both being able to see when the streamer has seen your message and for archival purposes to preserve the chat in VODs.

> don't understand how this interacts with the typical ability to start watching almost instantly, with no visible buffering delay, though.

There's a buffer on the CDN (which they have anyways because they're recording the VOD) and you start playback at the point t seconds back.
by PlunderBunny | 2025-05-26 20:45:26+00:00
My wording was poor - I meant to write "most soft plastics that were recycled, were recycled into fence posts". Not that most soft plastic was recycled.

I'm not disagreeing with any of what you have posted.

For reference, the 52 posts that I have on my property are constructed from more milk bottles and soft plastic than I will ever consume in my lifetime. It's a drop in the bucket, but it's significant to me.