MurphyA/hacker-news huggingface dataset:
by decimalenough | 2025-05-27 03:55:23+00:00
"Factory" seems overblown here: the facility is described as a "battery factory, servicing facility and vehicle showroom", nothing to do with assembly.

I have no idea why they're proposing to raze a park for this when there's plenty of derelict actual car industry buildings left around Adelaide from the Holden/Mitsubishi days.
by selcuka | 2025-05-27 03:56:02+00:00
+1 for robust error handling:

error!(" Quantum verification failed (this literally cannot happen in Rust)"); error!(" The borrow checker should have prevented this..."); error!(" This is probably a cosmic ray bit flip, not a Rust issue"); error!( " In C++ this would have been a segfault, but Rust gave us a nice error" ); return Err(format!(" Rust error (still better than C++): {:?}", e).into());
by wsatb | 2025-05-27 03:56:23+00:00
This is a nice outlook from a vacuum. The reality is those perfectly healthy elderly people are still going to struggle to compete with the younger workforce who will be anything from more physically/mentally apt to just simply cheaper. So they’re probably going to be forced into retirement without the means to actually do it.

Not to mention, from strictly a human view, working someone to their death is just plain wrong. This isn’t about enjoying a retirement which is near impossible at that age or shortly after, it’s about not screwing over people by putting them into poverty due to really no fault of their own.

I hope the youth are kinder to you when you reach old age.
by davidcox143 | 2025-05-27 03:56:32+00:00
Sort of. There’s a summary by the author of atoms in the Twitter thread linked above.

They also link this very lengthy blog post:

https://nrd.sh/blog/atom-anatomy/

My understanding of atoms compared to flakes is that they 1) add toml 2) provide a more precise way to reference remote src.

The author also claims performance benefits. I haven’t used them personally and can’t speak to their stability or ergonomics.
by rixed | 2025-05-27 03:56:40+00:00
AI for classical education can be an issue, but AI for inverted classes is perfect.

Going to school to listen to a teacher for hours and take notes, sitting in a group of peers to whom you are not allowed to speak, and then going home to do some homework on your own, this whole concept is stupid and deserves to die.

Learning lessons is the activity you should do within the confort of your home, with the help of everything you can including books, AIs, youtube videos or anything that float your boat. Working and practice, on the other hand, are social activities that benefit a lot from interacting with teachers and other students, and deserves to be done collectively at school.

For inverted classes, AI are no problem at all; at the contrary, they are very helpful.
by cryptonector | 2025-05-27 03:56:54+00:00
> So, the language is deterministic which is a result of being confluent. And going to section 6.1 as suggested says this:

Non-determinism in programming language theory does not mean _physical_ non-determinism.

> To answer your question more plainly it's the ambiguity that's important. Non-determinism usually follows as a natural consequent.

Non-determinism in programming language theory does not require ambiguity. Non-determinism here means something more like that the program's execution will search for matching solutions as if it knew them non-deterministically, but the search process will be deterministic (and it's almost invariably a depth-first search).
by c-smile | 2025-05-27 03:57:34+00:00
Consider <textarea> that has resizing handle on the corner (try to reply to this message to see it alive). And now try to imagine how would you render those diagonal lines in HTML/CSS ?

While in Sciter, that has such immediate mode rendering form the very beginning, you can simply draw them as:

resizableElement.paintForeground = function(gfx) { // draw on top of background & content let box = this.getBoundingClientRect(); gfx.moveTo(...); gfx.lineTo(...); gfx.moveTo(...); gfx.lineTo(...); ... }

Easy, right? And does not need to modify DOM and place artificial positioned elements.
by craigmccaskill | 2025-05-27 03:57:48+00:00
You can just add it to your master prompt. I have this added to mine, YMMV:

Tone & Communication Style

* Keep it clear, structured, and concise.

* Maintain a professional tone but make it feel natural and human; avoid robotic or overly formal language.

* Use a more conversational tone in casual, mentoring, or internal team contexts.

* Do not use em-dashes or emoji unless specifically requested.
by kiitos | 2025-05-27 03:58:56+00:00
The token you provide to the GitHub official MCP server determines what that server is allowed to access. But the MCP server doesn't just serve requests with responses, which is the normal case. It can read private data, and then publish that private data to something that is outside of the private scope, e.g. is public. This is a problem. The system doesn't need to make an explicit promise guaranteeing that this kind of stuff isn't valid, it's obviously wrong, and it's self-evident that it shouldn't be allowed.
by chubot | 2025-05-27 04:00:06+00:00
have nothing that anybody wants directly

Yeah I definitely thought about that ... it is a bit crazy. Avoiding conflict is definitely a way of surviving

The Amish are an interesting case study in avoiding conflict ... I buy produce at the farmer's market from the Amish, so I read about their culture, real estate, etc.

I learned that they're pacifists, which makes sense

e.g. they refused to fight in World War II on behalf of the US, which caused some problems

But yeah it does not reflect well on the rest of us. I watched all of Fall of Civilizations, and yeah it wouldn't be that inaccurate to say that history is a continuous series of power struggles and succession problems! (and technology too, but arguably technology is primarily used to win wars ...)
by thayne | 2025-05-27 04:01:05+00:00
Yes, it's a partial mitigator, but it isn't as complete of a solution as a CDN, for a number of reasons. For one thing, with Anubis your server is still responding to requests, so a full scale DDoS could potentially take you down without having to actually complete the PoW, they just have to make enough requests.

Using a CDN for DDoS typically has multiple levels of protection:

- caching reduces load on your server

- In the event of a (D)DoS attack, the cdn can absorb the attack traffic with their much higher capacity than your server(s)

- The CDN can block certain kinds of attacks, especially low level (D)DoS attacks without the traffic ever touching your servers

- Since the CDN fronts many sites, it can have more information about which IP addresss, and user agents are more suspicious. This one is a little controversial, because there is a conflict between getting an accurate profile of how suspicious a request is, and preserving the privacy of users.

- It may have built in support for some kind of bot detection, such as captcha or a proof of work. IDK about the free tier of cloudflare, but for paid offerings at least, this is usually optional.

In short, Anubis could be part of a DDoS mitigation plan, but if you are worried about a targeted attack, it probably isn't sufficient. And critical services are potentially a valuable target for attacks.
by BLKNSLVR | 2025-05-27 04:01:50+00:00
There is, in fact, a walled off area within the old Mitsubishi facility that has a big Tesla logo on it. It's freaking tiny though, relative to the space needed for a "battery factory, servicing facility and vehicle showroom".

The old Mitsubishi facility has been turned into the "Tonsley Innovation District", it's quite an oddly interesting place with disparate little technology hubs / companies setup in there. I've visited because there's a lot of covered open space with polished concrete flooring which is great for inline skating on. It's a popular place for kids parties with skates, scooters, bikes, radio controlled cars, etc.

I don't know if there would be enough spare contiguous space there for a Telsa facility now.

https://renewalsa.sa.gov.au/projects/tonsley-innovation-dist...

Edited to add:

Here's a youtube video of someone skating around the facility: https://www.youtube.com/watch?v=1HzUK7KTzNc

At 3:54 the Tesla bit is coming into view on the right hand side (direct link: https://www.youtube.com/watch?v=1HzUK7KTzNc&t=234s)
by hiAndrewQuinn | 2025-05-27 04:02:49+00:00
"Weird" might be overselling it, but I'm quite fond of the first nontrivial Go program I ever wrote, which SSHes into Debian machines and gives a JSON "status report" of everything you might need to know to determine whether a program running on Debian Machine A might run on Debian Machine B. https://github.com/hiAndrewQuinn/meikkalainen

I feel like this falls under a class of tools where the existing solutions are just far too complicated for me to wrap my head around, like many of my shell scripts are meant to help with.

I should really get around to writing the semantic JSON diff for this project at some point.
by brookst | 2025-05-27 04:03:06+00:00
MCP is a great idea implemented poorly.

I shouldn’t have to decide between giving a model access to everything I can access, or nothing.

Models should be treated like interns; they are eager and operate in good faith, but they can be fooled, and they can be wrong. MCP says every model is a sysadmin, or at least has the same privileges as the person who hires them. That’s a really bad idea.
by jeanlucas | 2025-05-27 04:03:13+00:00
Actually a joke doesn't necessarily needs to be funny, and depending on the framing not even humor.

Gregory Bateson's "A Theory of Play and Fantasy" (in Steps to an Ecology of Mind) (1972): Bateson argues that certain communicative acts signal themselves as "play" or "non-literal." A joke is such an act—structured and marked by "metacommunicative" cues, indicating that it should not be taken at face value.

Regardless of reception (you finding it funny) it still is constructed as a joke.

Sorry for being pedantic :^)
by bee_rider | 2025-05-27 04:04:44+00:00
It sorta depends on the material… I always thought paper programming tests were dumb: when I was taking them and when I was proctoring/grading them. It is not that similar to writing a program in an IDE where it will tell you if you make a little mistake, and often help you work your way through it.

We made it. But, that’s survivorship bias, right? We can’t really know how much potential has wasted.
by dang | 2025-05-27 04:04:44+00:00
Worry not! Your gravitation is well-founded.

The earliest documented use of 'hack' is from "AN ABRIDGED DICTIONARY of the TMRC LANGUAGE", written in 1959 by Peter Samson. (TMRC was the Tech Model Railroad Club of MIT.) The definition was itself a playful example of what it was defining:

HACK: 1) something done without constructive end; 2) a project undertaken on bad self-advice; 3) an entropy booster; 4) to produce, or attempt to produce, a hack. HACKER: one who hacks, or makes them.

Samson (2005): "I saw this as a term for an unconventional or unorthodox application of technology, typically deprecated for engineering reasons. There was no specific suggestion of malicious intent (or of benevolence, either). Indeed, the era of this dictionary saw some 'good hacks': using a room-sized computer to play music, for instance; or, some would say, writing the dictionary itself."

https://www.gricer.com/tmrc/dictionary1959.html

The 'malicious' connotation (e.g. breaking into someone else's system) dates from early 1960s phone phreaking. The claim that the malicious sense came earlier than the creative sense was made in 2003 by a researcher [1] who retracted it when this 1959 usage was pointed out:

"as soon as the 1959 citation was discovered I conceded that I was probably wrong about "hacker" originally having malicious connotations" (https://news.ycombinator.com/item?id=19416623)

I'm not sure Peter Samson would agree that it was "discovered", but never mind.

[1] https://web.archive.org/web/20051023131548/http://listserv.l...

---

Edit: The phone-phreaking instance dates from 1963: https://blog.historyofphonephreaking.org/2013/09/document-of...

The wrong idea that the so-called 'malicious' usage came first was widespread for a while—here's an example: https://imranontech.com/2008/04/01/the-origin-of-hacker/
by ggm | 2025-05-27 04:05:19+00:00
Not saying "security by obscurity never works" but am saying it's a shame the defensive wall of anti-spam/abuse depends on some secrecy, because it's a low wall. If the concern with knowing the secret sauce is how easy it would be to defeat, then its a low wall. But, as long as it stays secret, it's doing it's job.

I'm not an infosec professional, or a competent LISP coder, I'm not in a position to say what's better. This is just what pros in the field say to me.

(It's mentioned in the article)
by rr808 | 2025-05-27 04:06:41+00:00
I think the problem I'm trying to describe is yes, Spring is popular within the people that do work on Java appications, however the Java/Spring platform is the reason most developers do not want to use Java. Java/Quarkus, Java/Micronaut or even Java/VertX would be more popular if they became the default Java framework in stead of Java/Spring.
by 0_gravitas | 2025-05-27 04:08:39+00:00
I donate monthly to the following:

- Magit, needs no introduction

- Borkdude, a __massive__ Clojure ecosystem contributor

- JPMonettas, for their work on FlowStorm, an incredibly useful debugger/introspection tool for Clojure

- The CIDER project, Clojure once again

- NoahTheDuke, for their work on keeping my much beloved jinteki.net alive and we'll

All these people deserve your money imo
by kiitos | 2025-05-27 04:08:45+00:00
There is no attacker in this situation. In order for the LLM to emit sensitive data publicly, you yourself need to explicitly tell the LLM to evaluate arbitrary third-party input directly, with access to an MCP server you've explicitly defined and configured to have privileged access to your own private information, and then take the output of that response and publish it to a public third-party system without oversight or control.

> Any time you use an LLM with tools that might be exposed to malicious instructions from attackers (e.g. reading issues in a public repo, looking in your email inbox etc) you need to assume that an attacker could trigger ANY of the tools available to the LLM.

Whether or not a given tool can be exposed to unverified input from untrusted third-parties is determined by you, not someone else. An attacker can only send you stuff, they can't magically force that stuff to be triggered/processed without your consent.
by blrboee | 2025-05-27 04:09:44+00:00
We want people to know that they’re interacting with a language model and not a person. But we also want them to know they’re interacting with an imperfect entity with its own biases and with a disposition towards some opinions more than others. Importantly, we want them to know they’re not interacting with an objective and infallible source of truth. This is exactly why I use claude over chatgpt. Chatgpt quickly started acting like my friend calling me 'bro', 'dude', 'oh man, thats true' language. which i liked on first day and became weird later on.
by ggm | 2025-05-27 04:10:01+00:00
Stick to the not-for-profit sector. I spend 2y in industry at the peak of the 80s dotcom boom and I was a poor fit. A life in university research before and after that, and industry self regulation and standards development ever since was just more fun, for a lower renumeration outcome.

Those not-really-work conversations people have at work? Thats my job

Done me proud for 43 years. I'm out in a month, going solo and living off my retirement which is not insanely big, but healthy.

As Louis Prima said: "Enjoy yourself, it's later than you think" - https://www.youtube.com/watch?v=aCKZMdLJjAU
by _wire_ | 2025-05-27 04:10:40+00:00
If you keep backing away from assumptions about vessels, physics, etc., as you should, then you ask why would you think there is "anyone" who needs to "visit". At this point you see that ET is simply a mirror. My preferred navigators of the continuum of being are whales: floating within ancient oceans protected by a thick layer of blubber, they seem wonderfully adapted for connection via some intergalactic telemetry. The ultimate expression of their adaptation is that they don't care if they're hunted. They've got other stuff to do.
by lolinder | 2025-05-27 04:12:10+00:00
> Any time you use an LLM with tools that might be exposed to malicious instructions from attackers (e.g. reading issues in a public repo, looking in your email inbox etc) you need to assume that an attacker could trigger ANY of the tools available to the LLM.

I think we need to go a step further: an LLM should always be treated as a potential adversary in its own right and sandboxed accordingly. It's even worse than a library of deterministic code pulled from a registry (which are already dangerous), it's a non-deterministic statistical machine trained on the contents of the entire internet whose behavior even its creators have been unable to fully explain and predict. See Claude 4 and its drive to report unethical behavior.

In your trifecta, exposure to malicious instructions should be treated as a given for any model of any kind just by virtue of the unknown training data, which leaves only one relevant question: can a malicious actor screw you over given the tools you've provided this model?

Access to private data and ability to exfiltrate is definitely a lethal combination, but so his ability to execute untrusted code, among other things. From a security perspective agentic AI turns each of our machines into a Codepen instance, with all the security concerns that entails.
by harlanji | 2025-05-27 04:13:24+00:00
Building a tool chest of software for my own needs. IT for Sovereigns.

Mostly not open source, contrary to how I have historically operated. I think I'll drop them open source as time goes on and money matters less. Kinda feels like I might make more money just open sourcing it all because of good karma tho.

It's all in Python because that's what I could get on the $200 Windows laptop I built it with, I kept it in S Mode as a challenge because I want it to run as constrained as my customer personas might experience.

Present stage is finding those personas and slicing the wares up into offers/products.
by rashunain | 2025-05-27 04:14:24+00:00
Read current affairs of 27 May 2025 in English to improve your performance in the general awareness section of the government exams and become a government officer. Daily Current Affairs are very important for the preparation of the government exams like SSC CGL, SSC CHSL, RRB NTPC, SBI PO, UPSC, State PSC, Defence exams.
by lolinder | 2025-05-27 04:14:47+00:00
> There is no attacker in this situation. In order for the LLM to emit sensitive data publicly, you yourself need to explicitly tell the LLM to evaluate arbitrary third-party input directly,

This is not true. One of the biggest headlines of the week is that Claude 4 will attempt to use the tools you've given it to contact the press or government agencies if it thinks you're behaving illegally.

The model itself is the threat actor, no other attacker is necessary.
by buu700 | 2025-05-27 04:15:07+00:00
16 years ago, when my friend and I had some downtime while working at a summer camp, we got bored and put together a crazy "AI"-assisted* essay that was filled with wild ranting, references to people at camp, and other camp inside jokes, and emailed it to the main office with the subject "VERY IMPORTANT: Surrealism in the Works of Koons.". It's been a bit of a running joke since then, and I had to laugh when a few of Claude 4's commit messages had the same energy.

*: The OG ChatGPT: https://en.wikipedia.org/wiki/Postmodernism_Generator
by refulgentis | 2025-05-27 04:17:02+00:00
IMVHO it is very obvious that if I give Bob the Bot a knife, and tell him to open all packages, he can and will open packages with bombs in them.

I feel like it's one of those things that when it's gussied up in layers of domain-specific verbiage, that particular sequence of doman-specific verbiage may be non-obvious.

I feel like Fat Tony, the Taleb character would see the headline "Accessing private GitHub repositories via MCP" and say "Ya, that's the point!"
by coderatlarge | 2025-05-27 04:17:36+00:00
from the linked pages:

“ Many working scientists, students, and hobbyists have wished to create their own tag-based hypertext knowledge base, but the combination of tools historically required to make this happen are extremely daunting. Both the Stacks project and Kerodon use a cluster of software called Gerby, but bitrot has set in and it is no longer possible to build its dependencies on a modern environment without significant difficulty, raising questions of longevity.“
OSINTGraph – Map Your Target's Instagram Network and Uncover Hidden Circles
by mhloo | 2025-05-27 04:18:21+00:00
I got sick of flipping through profiles like some tab-hoarding detective just to figure out who knows who on Instagram.

So I built OSINTGraph — a free, open-source tool that turns any target's followers and followees into a visual network map using Neo4j.

Just load it up and boom — mutuals, hidden links, close ties, even some creepy location hints if you’re lucky.

If it helps you out, don’t forget to star the repo

https://github.com/XD-MHLOO/Osintgraph
by refulgentis | 2025-05-27 04:18:26+00:00
Put more plainly, if the user tells it to place morality above all else, and then immediately does something very illegal and unethical to boot, and hands it a "report to feds" button, it presses the "report to feds" button.

If I hand a freelancer a laptop logged into a GitHub account and tell them to do work, they are not an attacker on my GitHub repo. I am, if anything.
by brudgers | 2025-05-27 04:19:33+00:00
If you are not making progress, trying something else might provide insight into why that is.

If it is only a matter of patience, then the time spent working on something else is still waiting patiently.

It is only when it is only a matter of effort toward what you are already doing that trying something else is clearly wrong.

In other words you are allowed to work on two things at the same time. Good luck.
by hxtk | 2025-05-27 04:20:05+00:00
It sounds like your instinct here is that we need to store (x,y,r,g,b) tuples for everything that changed, and leave other pixels unchanged from the previous frame.

You could store all of that in a single map from (x,y) to (r,g,b), which would cost you, say, 4 bytes per pixel for the (x,y) data and then, say, 30 bits or (rounding up) 4 bytes per pixel for the (r,g,b) with 10-bit color. A hash map would optimize lookup, but for efficient storage you really just want an array of 8-byte chunks where the first two bytes are x, next 2 are y, next 10 bits are r, then g, then b. To decode, you just start with the previous frame and then iterate down the list and apply each diff in the list.

If you iterate over (x,y) in a consistent order, you avoid the need to store it because you can simply say that the next (r,g,b) tuple in your list is the pixel data for the next (x,y) value that passes the bloom filter. This effectively cuts the amount of data you have to store per pixel in half, but increases the number of pixels you have to store by a probabilistically small amount because bloom filters have false-positives.
by eru | 2025-05-27 04:20:14+00:00
> ...and yet, somehow we managed?

People in the past put up with all kinds of struggles. They had to.

> I don't believe the argument you are making is true, but if the primary objection really is that teachers have to grade, then no, I don't have any sympathy.

I have no clue what the primary objection really is. I was responding to "I don't see why this is so hard", which just shows a lack of imagination.