MurphyA/hacker-news huggingface dataset:
by lbeurerkellner | 2025-05-26 19:53:51+00:00
I agree, one of the issues are tokens with too broad permission sets. However, at the same time, people want general agents which do not have to be unlocked on a repository-by-repository basis. That's why they give them tokens with those access permissions, trusting the LLM blindly.

Your caution is wise, however, in my experience, large parts of the eco-system do not follow such practices. The report is an educational resource, raising awareness that indeed, LLMs can be hijacked to do anything if they have the tokens, and access to untrusted data.

The solution: To dynamically restrict what your agent can and cannot do with that token. That's precisely the approach we've been working on for a while now [1].

[1] https://explorer.invariantlabs.ai/docs/guardrails/
by _DeadFred_ | 2025-05-26 19:53:53+00:00
The RECOVERED number matches retail theft recovery numbers. So it is AT LEAST on par with organized and unorganized criminal retail theft. I'd say that is significant (I would argue retail theft if much easier to catch and pursued much more often, making wage theft a larger issue) especially as it's happening within the structure of/approved by businesses.

https://hayesinternational.com/news/annual-retail-theft-surv...
by lancekey | 2025-05-26 19:53:56+00:00
I didnt have time to write a whole treatise. Yes women’s was brought in line with men’s. I should have said, men’s retirement age has not gone up but said retirement age bc it’s an HN comment, not a published paper.

The raise to 68 will happen, but it has not happened yet. So, I think to frame my comment as “simply untrue” is disingenuous at best.
by 90s_dev | 2025-05-26 19:54:01+00:00
Similarly I made the best bubble emulation app on iOS maybe 8 or 10 years ago. I was so happy with it, to some extent I wish I didn't delete the source code. But it only took me one inspired Saturday to make. Unfortunately it sold no copies because nobody needs a bubble emulator that emulates a Windows 95 era screensaver but with touch capabilities. They were such pretty bubbles though...
by jeroenhd | 2025-05-26 19:54:40+00:00
There are two or three companies that do what CrowdStrike does on a scale CrowdStrike supports. Not necessarily on a technical level, but on a CEO-goes-to-the-same-golf-clubs level of business support. CrowdStrike was probably the worst of the bunch, but any of them can cause the problems CrowdStrike caused.

It'll happen again, though probably on a smaller scale. Software like CrowdStrike's is a massive single point of failure but spending twice the money to have a backup suite on part of the network to maintain basic operations when the primary suite crashes is not very popular. The short hit to productivity is worth the emergency prep in terms of financial output, and the people spending weeks on end recovering systems are expendable anyway.
by mananaysiempre | 2025-05-26 19:54:47+00:00
> “Fures,” inquit [Cato], “privatorum furtorum in nervo atque in compedibus aetatem agunt, fures publici in auro atque in purpura.”

A. Gellius, Noctes Atticae, XI, 18, 18.

https://penelope.uchicago.edu/Thayer/L/Roman/Texts/Gellius/1...
by spijdar | 2025-05-26 19:55:37+00:00
Building those applications consistently and reliably, e.g. being able to hop on a random Linux box and be able to build and deploy an application without thinking about where to fetch copies of all the dependencies. Nix’s raison d’etre is really to make developer lives easier, IMO.

I don’t use Nix, but I’ve played with other Linux package managers enough to understand the desire for something better, and something that’s actually predictable, especially (emphasis here!) when mixing/matching arbitrary versions of dependencies. I used Gentoo/Gentoo-derivates for several years and it (building random packages with == specific versions) is a sticky problem when using a traditional build system.

Of course, once the packages are built then you can do whatever hacks to bundle the dependencies with it. But the hard part is building them in a consistent, “reproducible” way.
by smcin | 2025-05-26 19:55:54+00:00
Ok so English max is 3,625 points from 1,045 words (with ENABLE2K word list).

Why not compute the max possible Boggle board for other languages: French, Spanish, German, Italian, Portuguese, Czech... they each have a different set of 16 dice x 6 faces [], and of course totally different wordlists:

[boardgames.SE] "What is the dice configuration for Boggle in various languages?" https://boardgames.stackexchange.com/questions/29264/boggle-...

[] some languages' Boggle dice sets have 25x6 faces
by robinhouston | 2025-05-26 19:56:06+00:00
I’ve been playing around with trying to make a timeout using just bash builtins, motivated by the fact that my Mac doesn’t have the timeout command.

I haven’t quite been able to do it using _only_ builtins, but if you allow the sleep command (which has been standardised since the first version of POSIX, so it should be available pretty much anywhere that makes any sort of attempt to be POSIX compliant), then this seems ok:

# TIMEOUT SYSTEM # # Defines a timeout function: # # Usage: timeout <num_seconds> <command> # # which runs <command> after <num_seconds> have elapsed, if the script # has not exited by then. _alarm() { local timeout=$1 # Spawn a subshell that sleeps for $timeout seconds # and then sends us SIGALRM ( sleep "$timeout" kill -ALRM $$ ) & # If this shell exits before the timeout has fired, # clean up by killing the subshell subshell_pid=$! trap _cleanup EXIT } _cleanup() { if [ -n "$subshell_pid" ] then kill "$subshell_pid" fi } timeout() { local timeout=$1 local command=$2 trap "$command" ALRM _alarm "$timeout" } # MAIN PROGRAM times_up() { echo 'TIME OUT!' subshell_pid= exit 1 } timeout 10 times_up for i in {1..20} do sleep 1 echo $i done
by rightbyte | 2025-05-26 19:56:23+00:00
Wanting to use velocity profiles to set exhaust treatment parameters during warm up of the engine is totally reasonable.

Bosh's software is tunable to silly extents to avoid expensive vehicle testing as testing is tied to binaries due to bad processes.

You can more or less make a different program by changing 'parameters'.

I really think it might be unfortunate if this would extend into a crusade versus general computing.
by LatteLazy | 2025-05-26 19:56:28+00:00
I feel like this article makes a very poor argument for what should be an easy win.

I think the uk needs much more freedom of speech, both at a legal level and culturally (I am a Brit)

But the articles arguments are weak:

Someone calling for violent disorder during a riot probably should face prosecution. The fact the US constitution might protect such speech is irrelevant.

Similarly you can make a good argument that incitement of racial (religious etc) hatred should not be protected either. If you want to critique Islam or Israel go for it. But calling all Muslims or Jews or all women or gays or whatever other group names is likely to cause arguments and disturb the peace.

The article also focuses way too much on the USAs approach. This seems to me to have failed: on one hand the us is knee deep in conspiracy theories and far right rhetoric, and on the other people self censor endlessly (or face the consequences on an arbitrary and capricious basis).

If you’re going to argue for free speech, do it based on the inherent dangers of letting any one group decide what is banned, do it on the necessity of having clear quick communication of social changes and do it on the basis of the fastest correction of error. Not “because someone wrote down congress shall pass no law” and then a long list of judge’s arbitrarily decided what that did or didn’t protect over the next 200 years.
by bigyabai | 2025-05-26 19:56:55+00:00
> the optimal political system would variably reward / penalise voters based on their voting behaviour

We fought the Civil War to stop this from happening. Man cannot govern himself alone, he has to be held accountable by his peers. To some degree this means that the federal government has to be able to lay down the law, even if it's not a populist sentiment. You aren't being punished for voting wrong, that's beyond any deterministic impact your vote had on the system.

> right now, non-Trump voters will suffer just the same amount as pro-Trump voters, leading to widespread (and justified) disillusionment

But your entire point in the preceding paragraph is that the suffering is an unjust byproduct of modern democracy. So, are individuals justified for their disillusionment, or simply butthurt over a working system that doesn't favor them?

The RNC and DNC both have a modern litany of sitting presidents that courted widespread suffering. We could bicker over who's worse, but the wheel has to run over somebody to keep rolling. I agree with Belter, not giving Americans Trump as a president would be a violation of causal consequences. It would be cleaner, safer, nicer, more profitable, less stressful and more productive to put someone else in his place, but it would also be wrong.
by kurrupttt | 2025-05-26 19:57:29+00:00
Appreciate your feedback! So, one thing about the blue collar industry specially in field services is that they wanna spend most amount time doing blue collar work and the least amount time doing admin stuff.

I showed this to a couple service providers (1 handyman, 1 electrician) and they loved it. So hopefully theres a big market there of people that would find this useful. Over time I can build more agentic features or even build this into an entire intelligent agentic CRM for the blue collar industry. Lets see where it goes :)
AgentLink: On-demand AI agents you can assemble into teams
by nraychaudhuri | 2025-05-26 19:57:40+00:00
Over the past few weeks, I’ve been building AgentLink — a platform where you can discover and deploy AI agents trained for specific tasks like code review, market research, or sales outreach.

The idea is to make it feel like hiring a freelance team — but powered entirely by AI.

Here’s what AgentLink enables:

- Find agents trained for narrow tasks (e.g., code reviewers, data summarizers, lead generators) - Assemble teams instantly, like snapping together Lego blocks - Hire agents on-demand and scale usage up or down as needed - Track agent output, provide feedback, and iterate quickly.

It’s built on a custom system that handles agent orchestration, memory, and inter-agent communication.

Still very early — I’m currently testing with solo developers and small teams.

I’d love feedback from anyone who’s worked with AI agents, multi-agent frameworks, or automation tooling.

What technical (or product) challenges would you anticipate in scaling a system like this?
by pcrh | 2025-05-26 19:57:54+00:00
Here's a BBC article on the case. Obviously 1) there was more to this than just a few posts on Whatsapp, and 2) the situation did get out of control for a brief while and the police were called. Probably similar to common "affray" or public disorder cases.

>The school said it had "sought advice from police" after a "high volume of direct correspondence and public social media posts" that it said had become upsetting for staff, parents and governors.

https://www.bbc.com/news/articles/c9dj1zlvxglo
by mike_hearn | 2025-05-26 19:58:02+00:00
If you want readers more than impact you might want to consider something like a Substack. The paying audience would be smaller, but, it's not crawlable by AI (at least not today).

Still, it's a bit ironic that your own website advises people to use bots to get apartments (thus bypassing the work put into the adverts and apartment hunting sites), whilst also decrying bots who would bypass your site.

More generally perhaps there's a market for a Steam-like walled garden but for "old web" style sites. Crawlers would be controlled via technical means, micropayments would be built in, and use of AI would be strictly controlled. For instance maybe the garden uses AI to build link directories like DMOZ used to be, but the information itself isn't trained on so you're guaranteed to have organic readers.
by perching_aix | 2025-05-26 19:58:02+00:00
I appreciate the hostile tone, very in vogue, but no, what I'm saying is that this...

> THE POLICE arrived at Maxie Allen’s door at midday on January 29th. None of the six officers seemed to know much about why they were there, recalls Mr Allen. But they read out a list of charges and searched the house, before arresting him and his partner and taking them to the police station, where they were held for eight hours. The couple’s alleged crime? Disparaging emails and WhatsApp messages about their daughter’s primary school.

...is a lot more vague and less compelling than what you drew up here.

Namely it doesn't mention:

- that these people are journalists

- that they were criticizing their daughter's primary school's handling of her disabilities

- how exactly were they criticizing it and to what audience

- any links to any of the court documents for people to inspect, to support these

Am I supposed to conjure up these details from thin air or something? I'm not from the UK, this is not a story I was familiar with. Literally all the article had to say in the way of the arbitrariness and vagueness of this case was:

> At one point during his questioning Mr Allen’s partner asked for an example of a WhatsApp message that constituted “malicious communication”. The detective had to stop and Google the crime.

Which sounds crappy enough, but then this is pretty on par for cops to begin with in my impression, topic nonwithstanding. So yeah, not very compelling.

> you think this isn't worrying, isn't arbitrary,

Correct, what was written in the article isn't particularly worrying at all, nor does it do a particularly good job of demonstrating the arbitrariness. That's exactly what I said.

> and doesn't hint that the standards set out in those laws are vague?

Law is written in natural language, imposing rules over things in the natural world. It will never not be vague, and it cannot in good conscience afford to not be vague either. It could be specific in some ways I'm sure, at the cost of effectiveness as usual, but the article doesn't exactly support or detail this idea much, by virtue of not saying anything more specific. Which is what I was talking about.
by wkat4242 | 2025-05-26 19:58:22+00:00
PS: I just want to add, it's the distribution of wealth that makes the difference. Europe has very few billionaires unlike America. We don't believe in 'the market' above everything. Hence we distribute wealth more. This is also why we have much less violent crime, the difference between rich and poor is not as big. It doesn't have that much to do with defense spending.

And why should someone be able to be a billionaire? With say 10 billion someone could spend a million a day to live, and still make their money last 27 years. Here in Spain most people don't make a million in total wages during their entire life.

You vote for the system in the US, things don't have to be that way. But the ultra rich make it seem like everyone could be rich if they only just work hard. Obviously that's false. Most rich people don't work very hard and definitely not 100.000 times as hard as people making 100.000 times less than they do.
by rzz3 | 2025-05-26 19:58:29+00:00
It doesn’t have to be that way; learning a language is a long process. I took about 3 years to reach real practical fluency, and I still have to say “what?” more often than I’d like and I still need to learn a ton of more advanced vocabulary. Duolingo unfortunately doesn’t offer any C1 content so I’m stuck using other methods.
by taishikato | 2025-05-26 19:58:42+00:00
First: I created WinTechJobs as a cheaper alternative app to Jobscan.

As an additional difference it enables more accurate resume analysis.

If you've ever used Jobscan before, you might know that the analysis of hard skills and soft skills in particular is terrible. Jobscan will list things like "cad" (Canadian dollar) as a hard skills item. They're probably just extracting words that seem relevant from the job description. However, this makes resume scoring completely unreliable.

WinTechJobs doesn't have these issues.
by dp-hackernews | 2025-05-26 19:59:12+00:00
> "The publisher of this work is 1729. It’s named after the Ramanujan number, which symbolizes for us the dark talent: all those people from the middle of nowhere, passed over by the establishment, with crazy-but-correct ideas, who could do great things if only given the opportunity. These are exactly the kinds of people who we expect will found startup societies and network states."
by danenania | 2025-05-26 19:59:24+00:00
Management involves a lot of difficult tradeoffs, and this is one of them. Asking for feedback privately creates the feeling of "people talking behind your back" that can erode trust. But if you instead try to have full transparency and facilitate direct/open feedback, you can either have open conflicts/retaliation or (more likely), people hold back and don't give honest feedback, causing problems and resentments to never be addressed.
by jopsen | 2025-05-26 20:00:24+00:00
Houses less 400k DKK ~ 60k USD, granted houses at price range are small, worn down, far from cities and job market in area a bit challenged - but not impossible.

https://www.boligsiden.dk/tilsalg/villa?sortBy=timeOnMarket&...

I'm not suggesting that this high life or secret to happiness. Just that of you want to work less, you can choose to spend less.
by salawat | 2025-05-26 20:00:28+00:00
So do you think it's okay to record someone else's kids in bathing suits at a lake for watching later?

Just trying to connect panoptic recording to something that tends to motivate visceral reactions from people.

Not everything needs to be recorded. In point of fact, I see more than enough room for a right to non-overt recall-ability being worth at least discussing if only because we have evolved our capabilities to pervasively monitor to such a scale that it is nigh-required we sit down and really discuss this. There'll be no more familiar a generation than ours for coming to terms with these technologies if only because we brought them this far. It's our responsibility to contain their excess.
by bigyabai | 2025-05-26 20:00:49+00:00
They copied the idea directly from decade-old, declassified NSA slides: https://en.wikipedia.org/wiki/XKeyscore#/media/File:KS10-001...

If you are an EU resident that uses any American COTS hardware then you don't get a say in whether or not you're surveilled. Just a warm fuzzy feeling as consolation that you voted for something nobody respected in the first place.
by adeon | 2025-05-26 20:00:50+00:00
I think from security reasoning perspective: if your LLM sees text from an untrusted source, I think you should assume that untrusted source can steer the LLM to generate any text it wants. If that generated text can result in tool calls, well now that untrusted source can use said tools too.

I followed the tweet to invariant labs blog (seems to be also a marketing piece at the same time) and found https://explorer.invariantlabs.ai/docs/guardrails/

I find it unsettling from a security perspective that securing these things is so difficult that companies pop up just to offer guardrail products. I feel that if AI companies themselves had security conscious designs in the first place, there would be less need for this stuff. Assuming that product for example is not nonsense in itself already.
by mschuster91 | 2025-05-26 20:00:53+00:00
> Zuckerberg has spent a pretty penny on this Tiktok disinformation campaign

There's more than enough reports from outside the US that credibly allege TikTok is a critical factor in the radicalization and recruitment of the far-right and militant Islamism [1][2][3].

Conspiracies about Zuckerberg wanting to dunk on a competitor aside (that may or may not be real, and I'm heavily inclined to believe they are true), the threat from TikTok is real, this application needs to be exterminated at all cost before China completely tears apart our society.

[1] https://www.bpb.de/lernen/digitale-bildung/werkstatt/560523/...

[2] https://www.zdf.de/nachrichten/politik/deutschland/radikalis...

[3] https://www.tagesschau.de/inland/regional/hessen/hr-wandern-...
by btown | 2025-05-26 20:01:21+00:00
One of the patterns I often reach for when working with webhooks is "never trust them to do anything other than set a should-refresh flag on a related object, or upsert a stub identity for a new related object, for asynchronous reprocessing which will then call out to get the latest relevant state."

Assume that things will come out of order, may be repeated, may come in giant rushes if there's a misconfiguration or traffic spike, and may have payload details change at any time in hard-to-replicate ways (unless you're archiving every payload and associating it with errors). If you make the "signal" be nothing more than an idempotent flag-set, then many of these challenges go away. And even if someone tries to send unauthenticated requests, the worst they can do is change the order in which your objects are reprocessed. Signature verification is important, but it becomes less critical.
by exiguus | 2025-05-26 20:01:54+00:00
Maybe they can't. But actually, you can install them a password manager and let them generate random password. Setup with them 2fa (FreeOTP or something). And change with them every password when you are at home for chrismas.

Also, when they now found themself on have i been powned, they have a bigger problem, because they have likely malware on the phone or computer.
by owenversteeg | 2025-05-26 20:02:38+00:00
I avoid microplastics by drinking only water and wine. I was never really one for other types of beverages, so this isn’t very limiting to me. Keep in mind that any closure other than natural cork contains plastic or other noxious chemicals: in theory there’s also metal, wood, natural waxes and rubbers, but they are rarely used without plastic.
by to11mtm | 2025-05-26 20:02:40+00:00
In my experience, AI just makes bad managers more obvious...

The best a bad (or worse, toxic [0]) manager can help for, is that AI will help them look like less of an idiot.

The nominal I have seen however, is managers providing non actionable, non provable feedback. In these cases you'll see conflicting feedback (while not providing enough detail to understand if this is a real thing or an AI hallucination), such as 'You are not afraid to interject important points in meetings -> You need to not take people off topic on meetings', or for a team where every IC always meets deadlines agreed to every sprint planning, 'You are working too slow'.

In the worst case, you've got the folks who enjoyed ChatGPT's especially sycophantic phase and wind up buying into all sorts of dumb shit because the computer told them it was a good idea...

[0] - As an example of toxic, consider the sort of manager that uses near-circular logic like 'you need a doctors note for a sick day -> oh you were good enough to drive to the doctor then we need you in here' and then wonders why half the team gets sick over the next few days.