MurphyA/hacker-news huggingface dataset:
by johngai | 2025-05-15 04:45:41+00:00
After using Asana for years, our team hit a wall. Once we started scaling (25+ people, multiple departments), we realized Asana just couldn’t keep up with the complexity of our workflows — especially when it came to integrations, automation, and visibility across projects.

We recently made the switch to Barawave, and honestly, it’s been a game-changer. It combines project management, CRM, invoicing, and internal communication in one place — with built-in AI and automation that Asana doesn’t even come close to.

Barawave just published a blog post comparing the two platforms — worth a read if your company is growing and you’re feeling the same friction we did: Asana vs Barawave: Why Barawave is the Better Choice for Scaling Businesses in 2025

Curious if anyone else has made the switch from a traditional PM tool to something more all-in-one? What was your experience?
by skydhash | 2025-05-15 04:46:11+00:00
Or you could just read the PPP RFC [0].

I’m not saying that your approach is wrong. But most LLM workflows are either brute forcing the solution, or seeking a local minima to be stuck in. It’s like doing thousands of experiments of objects falling to figure out gravity while there’s a physics textbooks nearby.

[0]: https://datatracker.ietf.org/doc/html/rfc1661
by SpicyLemonZest | 2025-05-15 04:47:24+00:00
A large number of shoplifting incidents went viral over the past few years. This drew attention to the long-standing problem of shoplifting, and generated public pressure behind the reformers with long-standing proposals for what should be done to reduce shoplifting. This is how all political change happens. (It's frustrating, of course, for people like the author who don't think the long-standing proposals are a good idea.)
by voidspark | 2025-05-15 04:48:14+00:00
It's for higher quality of output. Better solutions. These are the state of the art reasoning models (subscription only, no free access) which are smarter.

It also mainly happens when the context is clear that we are collaborating on work that will require multiple iterations of review and feedback, like drafting chapters of a handbook.

I have seen ChatGPT ask questions immediately upfront when it relates to medical issues.
by panarky | 2025-05-15 04:48:34+00:00
Bitwarden paid users have a feature called "Emergency Access" where you designate one or more other Bitwarden users who can access your vault in an emergency.

If you die or become incapacitated, your emergency contact can click a button to request access to your vault. You receive a series of emails requesting that you approve or deny their request.

If you don't deny their request within a wait time that you specify in advance, your public key-encrypted user symmetric key is delivered to the the emergency contact for decryption with the their private key.

More here -> https://bitwarden.com/help/emergency-access/
Show HN: AppOutlets – Discover and track iOS app deals and lifetime discounts
by goingmerryapps | 2025-05-15 04:50:34+00:00
Hi HN,

I built AppOutlets, a site that helps users discover and track iOS app deals, including lifetime discounts, indie apps, and productivity tools. As an indie developer myself, I often saw great apps go unnoticed unless they hit the front page of Product Hunt or Reddit. I wanted to create a simple, fast-loading directory that curates meaningful discounts for apps — not just games, but tools people actually use.

Current features: • Hand-picked app deals • Focus on productivity, utility, and creative tools • Lifetime deal tags for one-time purchase apps • Search, filter by category

Why I made this: I realized many high-quality indie apps offer time-limited sales that aren’t surfaced well unless you’re constantly browsing the App Store. As a developer, I also wanted a place to highlight ethical monetization models like one-time purchases or reasonable subscriptions.

It’s still an early MVP, so any feedback is appreciated. I’m especially looking for ideas around: • Better tagging/sorting • Integrations with newsletters or browser extensions • Developer submission support

You can check it out here: https://appoutlets.com

Happy to answer questions or collaborate with others building tools for app discovery.
by josecodea | 2025-05-15 04:51:05+00:00
I built an email client, it sent emails, it also received emails, it had an intuitive and speedy user interface, and it touched on fundamental topics for a web-application with users, quintessential topics for a back-end engineering role.

Somehow the only criticism I got is that it was not simple enough.

Perhaps the moral of the story is that many managers have no idea what the word "simple" implies in terms of software.

This is a classic situation:

Engineer gets asked to implement the "do what I mean" button by some manager, this is a magic button that when pressed will do whatever the manager wants at that moment. The manager acts shocked when they are told that this is not a simple request to fulfill. The manager thinks: "I am being tricked! I merely asked for a single button!"
by duskwuff | 2025-05-15 04:51:39+00:00
As far as I understand it, most of the things you're saying are true of Composer as well. Composer packages (which can be top-level projects, libraries, or Composer plugins) can have dependencies which are resolved recursively, with version constraints, and are updateable. There's some flexibility in how the contents of those packages are structured, so long as they slot into predictable namespaces, and Composer automatically generates an autoloader script which allows contents from any of those packages to be loaded as needed. Most Composer packages are installed through Packagist, but can also be loaded directly from Git repositories or from the local filesystem (e.g. for local development).

In short: it sounds like you may not be familiar with Composer. I'd strongly recommend that you take a close look at it; you may be reinventing the wheel here.
by burnt-resistor | 2025-05-15 04:51:46+00:00
Much like all of the inflationary government policies, layoffs are all about wage suppression and increasing the transfer of wealth to the gigarich. All workers, not just laborers or knowledge workers, of all kinds need to unionize and form worker-owned co-ops to stabilize their futures and capture more of what they produce. Going it alone never works out, only solidarity does.
by ivraatiems | 2025-05-15 04:53:45+00:00
I want to make a lot of points about this, so many that I sort of don't know where to start. Here they are in no particular order. I feel pretty strongly that all of these things are true at once.

1) An open-ended take-home assignment with no expected time limit and extremely little guidance is a very poor choice for an initial assessment of a candidate

2) A week of work is way too long to spend on such an assignment unless it explicitly says it expects that much time (and even then, I'd decline)

3) It doesn't seem like what OP produced in that week was terribly strong; it seems heavy on documentation and low on usable code. I see why he was passed.

4) Kagi as a company has always seemed to have an extremely fire-from-the-hip, whatever-Vlad-thinks-is-cool mentality, and I don't honestly trust it much as a result; it also seems like it therefore would not hire someone who works the way OP does.

5) Companies implicitly hire people who are similar to the ones they currently have unless they work strenuously to avoid doing so (in a personality and technical knowledge sense; this is not a comment about "DEI" or something)

6) Asking someone to put in a lot of time and effort and then providing essentially no feedback is an extremely common dick move

7) Take-home assignments should be compensated, if only some token amount, to express gratitude to the candidate for their effort. The better long-form take-home assignments do this already (Automattic is one example of a company that does this, and their other behavior aside, I think it's a good move)

All in all, nobody in this article comes off particularly well. I think OP managed to demonstrate why Kagi has this assessment while also producing an effective indictment of the assessment as a poor choice of hiring tool. Even so, I'm glad OP posted this, credit to him for showing what the hiring world is like right now. It's rough out there.
by jaza | 2025-05-15 04:54:25+00:00
My twins spent several hours in their stroller (bugaboo donkey) on many days, back when they were toddlers (a lot of that time being spent having their afternoon nap in the stroller). Living in Sydney Australia. Similar car-centric problems to most US cities. But I guess we're lucky to live walking distance from parks, supermarkets, childcare centres (and now school), and a train station. And the stroller fitted folded-up in the boot (aka trunk) of our (small hatchback!) car. And our train station (and our most common destination stations) has a lift (aka elevator - Sydney has successfully been rolling out a project [1] to install lifts in more and more of its ageing train stations over the past decade). I couldn't imagine having managed, back then, without a 2-toddler stroller.

[1] https://www.transport.nsw.gov.au/projects/transport-access-p...
by josephg | 2025-05-15 04:54:53+00:00
> your argument doesn't hold water, because you are appealing to the existence of a schroedinger's programmer that simultaneously would use rust but also wouldn't turn on a borrow checker if it existed in another language.

I'm appealing to the existence of people who would like rust very much, but find the borrow checker to be cumbersome / annoying / difficult. I suspect a lot of people would fall into this camp. Including a lot of people who admire Zig, Jai, Odin, dmd. And probably a lot of C++ developers.

In my opinion, most of the best parts of rust have nothing to do with the borrow checker. For example, sum types, the rust standard library, cargo & crates.io, traits, Result / Option, editions, rust's unit testing, etc.

If someone released a borrow checker for zig, would it get 100% adoption? No way. Especially if it was hard to learn, required adding unfamiliar "lifetime annotations" throughout your code and sometimes required you to refactor functions that you know are correct anyway.

> Here's the thing. Rust is currently "the only game in town" for spatiotemporal memory safety and that is sucking the air out of the atmosphere, because no one wants to invest time into trying other ideas. [...] Those of us who don't want that kind of BS in our language have to constantly be accused of not caring about memory safety which is hardly the truth.

I think we've found agreement. I've been saying this for years - Rust is humanity's first serious attempt at a programming language like this. Its like the first iPad. I think there's lots of ways a rust successor could learn from rust's mistakes and make a better language. I'm really looking forward to what a borrow checker might look like a few more languages down the line.
by notepad0x90 | 2025-05-15 04:54:55+00:00
Why are emotions so special? they're just algorithms like any other. Emotions aren't what make humans different than machines. feeling something is similar to an LLM model reacting to a prompt a certain way. Just because chatgpt is trained to not "feel" anything (to avoid controversial output) doesn't mean LLMs can't feel things like we do. self-awareness, self-training, adaptability, original thinking, critical thinking,etc.. are different questions. but I see no reason why machines can't receive input/stimuli and react/output by the same way we do because of how they feel about the input.
by tauoverpi | 2025-05-15 04:54:58+00:00
I'm aware of the _why_ but this is why the tools aren't useful for my case. If they cannot consume the codebase in a reasonable amount of time and provide value from that then they generally aren't useful in areas where I would want to use them (navigating large codebases). If the codebase is relatively small or the problem is known then an LLM is not any better than tab-complete and arguably worse in many cases as the generated result has to be parsed and added to my mental model of the problem rather than the mental model being constructed while working on the code itself.

I guess my point is, I have no use for LLMs in their current state.

> That's because whatever training the model had, it didn't covered anything remotely similar to the codebase you worked on. > We get this issue even with obscure FLOSS libraries.

This is the issue however as unfamiliar codebases is exactly where I'd want to use such tooling. Not working in those cases makes it less than useful.

> Unless you provide them with context or instruct them not to make up stuff, they will resort to bullshit their way into an example.

In all cases context was provided extensively but at some point it's easier to just write the code directly. The context is in surrounding code which if the tool cannot pick up on that when combined with direction is again less than useful.

> What's truly impressive about this is that often times the hallucinated code actually works.

I haven't experienced the same. It fails more often than not and the result is much worse than the hand-written solution regardless of the level of direction. This may be due to unfamiliar code but again, if code is common then I'm likely familiar with it already thus lowering the value of the tool.

> Again,this suggest a failure on your side for not providing any context.

This feels like a case of blaming the user without full context of the situation. There are comments, the names are descriptive and within reason, and there's annotation of why certain things are done the way they are. The purpose of a doc comment is not "this does X" but rather _why_ you want to use this function and it's purpose which is something LLMs struggle to derive from my testing of them. Adding enough direction to describe such is effectively writing the documentation with a crude english->english compiler between. This is the same problem with unit test generation where unit tests are not to game code coverage but to provide meaningful tests of the domain and known edge cases of a function which is again something the LLM struggles with.

For any non-junior task LLM tools are practically useless (from what I've tested) and for junior level tasks it would be better to train someone to do better.
by eYrKEC2 | 2025-05-15 04:55:57+00:00
Geographic mobility sucks. Why change your social network every 15 minutes for a job. If there are opportunities in your locale, why move? The grass probably isn't greener.

My grandfather did this -- chasing the dream at IBM and my father attended 6 different school districts growing up. They lived in mansions in downtown San Francisco and now he doesn't have a long term friend, because friendships and people are transient and you never know when you have to leave town for the next shiny nickle.

Fuck that.
by anyfoo | 2025-05-15 04:56:06+00:00
I am really an amateur when it comes to Spectre-like attacks, but do you strictly need a valid pointer pointing to the address? I thought you "just" need to mispredict into code that would use it as a pointer, even if that code is never actually reached?

The paper demonstrates this by the C PoC using a system call as a gadget. Any value can be passed into the system call before it gets checked for validity on the other side of the kernel boundary. In their example, they use the "buffer" and "buflen" arguments to the keyctl system call, which results the values passed into the system call being in the registers r12 and r13. Then, they mispredict into a disclosure gadget that uses r12 and r13 for dereferencing pointers:

movzx edx, byte ptr [r12] mov rbx, qword ptr [r13 + rdx*8]

Note how "buflen" isn't even a pointer (for keyctl) to begin with, but the (as far as I understand) unrelated disclosure gadget code dereferences r13 (because it treats it as a pointer), and they managed to mispredict into it through keyctl's call to the "read" function pointer (this is the part where it's still a bit fuzzy to me, as I unfortunately don't fully understand the misprediction itself and how they control for arbitrary destinations).

Now, obviously you can't directly make system calls through JS. But I don't understand yet what, if anything, is in place to absolutely make sure that there are no indirect ways that result in a system call (or another path!) where benign, but arbitrary values get passed as arguments in registers, executing benign code, but being mispredicted into a different kernel code path where those registers would be used as pointers.

And then, once you can do that, you can affect almost arbitrary physical memory, since typically almost all physical memory is mapped in the kernel's address space.

Sure, this is much harder because of the layers in between, but I still don't quite understand why it's impossible, and why a sufficiently motivated attacker might not eventually find a workable solution?

Spectre just seems so fundamentally catastrophic for me, that anything but proper hardware fixes to how privilege boundaries are honored by speculative execution seems to merely make things harder to me, but how hard is a very non-trivial question for me. Is it hard enough?

(As for ASLR, in their paper they break that as their first step using their own methods.)
by lelandbatey | 2025-05-15 04:56:13+00:00
Yeah, the Eastside is a real estate hellscape. Everything east of Lake Washington till highway 203/18 is genuinely quite bad. I had cheaper rent on top of Queen Anne, 1 block from the Trader Joe's, than any place of comparable walk/transit on the east side ($2065/month for a 2 bedroom 1.75 bathroom apartment+1 parking place, ~950sq/ft).
by anyfoo | 2025-05-15 04:58:15+00:00
Again, I don't think I understood yet why the JS code needs to create actual pointers accessing arbitrary memory for the attack to work, instead of benignly passing down arbitrary integer values far enough into (say) the kernel and mispredicting into code that would use these arbitrary values to be dereferenced as pointers, elaborated here: https://news.ycombinator.com/item?id=43991973
by timewizard | 2025-05-15 04:58:19+00:00
> I'm probably only 6'+ off the ground once a month or so

Do you never take the stairs?

> but once again I rarely use those while I'm in a car several times a day.

Which is why your car has a built in safety system and your power drill doesn't. The majority of fatal accidents involve drugs or alcohol. 15% are motorcycles and 15% are pedestrians. We see all miles as "passenger miles" in a vehicle but there are "inebriated passenger miles" and "sober passenger miles" with wildly different expectations between them.
by thaliaarchi | 2025-05-15 04:58:35+00:00
I find it interesting that MicroPython's `re` module[0] is implemented with a backtracking regular expression engine from re1.5[1], instead of one of the linear-time engines from the same library. (Russ Cox covers the various engines in the excellent blog series[2] which re1 is a companion to.) I figure the choice was made due to binary size or memory constraints, though they're all quite small.

[0]: https://github.com/micropython/micropython/tree/master/lib/r...

[1]: https://github.com/pfalcon/re1.5/tree/v0.8.2

[2]: https://swtch.com/~rsc/regexp/regexp2.html
by toast0 | 2025-05-15 04:58:38+00:00
My school district growing up had a decently sized Unisys mainframe. While I was working there, they upgraded to a new machine.

The old machine was about desk height and 15 feet wide. The new machine was a 4u box running a Unisys mainframe emulator on NT 4, on a quad processor pentium pro. Pretty sad. But they did keep the giant line printer, at least while I was working there.
by dragonwriter | 2025-05-15 04:58:44+00:00
> His conviction was entirely on the basis of insider trading. The SEC went after him, not the NSA or DOJ or whatever.

The SEC has no criminal prosecution powers; all they can do in that regard is write a note asking the DOJ to pretty-please look into something. The only way to get a federal (civilian) criminal conviction is to have the DOJ go after you.
by Minor49er | 2025-05-15 05:00:12+00:00
I recently found some people to collaborate with

One was through GitHub where I started talking to a developer after contributing some fixes to his project which got the ball rolling on another endeavor that we're both very interested in creating

The other was through a forum where some users are creative technical types, so giving feedback opened the doors for collaboration

The idea that attracts others is the idea that is well-communicated. So start talking about specifics in the open. You may be surprised at the responses
by josecodea | 2025-05-15 05:00:20+00:00
You might not know this, but implementing Templ with PocketBase is non-trivial. It is actually impossible to do so unless you can read the source code for PocketBase yourself. Pocketbase is a golang framework that doubles as a library, PocketBase implements an entire backend, it is a very real project by an extremely adept author. You would be lucky to work on a Golang repo as featureful as PocketBase.
by irjustin | 2025-05-15 05:02:07+00:00
Related but an aside - Lately I've really been wondering if Skynet actually is the next evolution.

That humans, like all animals before us, are a stepping stone and there is actually no avoiding machine overlords. It happens to literally every existence of life across the universe because the final emergent property of energy gradients 100% leads to pure logic machines.

At least Fermi's paradox helps me sleep better at night.
by grumpy-de-sre | 2025-05-15 05:02:17+00:00
Axle weight is a really good point tbh, if you don't have to pay labor costs for the driver it'd make a ton of sense to downsize. Ideally this would be accomplished with taxes on gross vehicle weight. Would make smaller vehicles inherently more economical.

I'm not sure the cheaper argument actually works out in other areas though. If due to peak capacity requirements you have to buy and operate two minibuses vs one full sized bus then that one full sized bus is going to be cheaper to maintain/clean/etc.

However if it's a low utilization route then for sure a minibus is a no brainer. Seems we see that model deployed in a lot of locations referenced above (excluding dollar vans etc, which I see more as a failure of the state tbh).
by dangus | 2025-05-15 05:03:45+00:00
This is giving me Groupon vibes. Airbnb went from offering something of a unique product to having no real identity anymore.

Just like with Groupon where the idea was so novel for the time but quickly faded away as irrelevant, a diluted shell of its former self.

When you really think about it, Airbnb offers you nothing that a normal travel booking site by the giant incumbents like Expedia group offer, and unlike Airbnb, Expedia group sites can compare rentals by owner alongside real hotels, too.

So basically when you go to Airbnb you're going to a partial travel site and it's also a travel site without any extra travel functionality like rental cars, hotels, and other vacation packages.

I wonder if Airbnb's pivot toward local experiences is a much bigger mistake than using their momentum to make a real attempt at competing more directly with Expedia/Priceline. Why didn't Airbnb start working with hotels and other traditional travel industry players?
by CobrastanJorji | 2025-05-15 05:06:25+00:00
An interesting little example of this problem is initial prompting, which is effectively just a permanent, hidden context that can't be cleared. On Twitter right now, the "Grok" bot has recently begun frequently mentioning "White Genocide," which is, y'know, odd. This is almost certainly because someone recently adjusted its prompt to tell it what its views on white genocide are meant to be, which for a perfect chatbot wouldn't matter when you ask it about other topics, but it DOES matter. It's part of the context. It's gonna talk about that now.