MurphyA/hacker-news huggingface dataset:
by gary17the | 2025-05-02 07:30:20+00:00
> I’m using AI to assist me and I’m building an app

Vibe coding is a myth, it will take you only so far and will require manual fixes and refactoring before MVP. Learn the basics of and keep learning, say, Swift. https://developer.apple.com/swift-playground/

> Should I actually use a completely blank iPhone for this instead?

Does not make any difference. Every app runs in its own separate environment. Only iOS device "Language and Region" settings affect all apps on a device.

> should I use a more updated version of the iPhone?

Does not make much difference, unless you need to target some new capabilities introduced with a particular iOS version. Other than that, the rest of the API is the same across multiple recent iOS versions.

> Should I just run a simulator on my actual computer

Sure. It is easier and faster to test on a Simulator using a mouse rather than on a device, tapping. Once you stabilize some code under the Simulator, always re-test it on a real device.

> I don’t want to share my idea with others

This will come as a shock, but ideas themselves are nearly worthless. There has been a previous Facebook, a previous Twitter, a previous Office, etc. that has failed. It is only the quality of execution of an idea, the quality of the Product-Market-Fit and the quality of marketing of a product that makes a product a winner. Start by reading books by Rob Walling, e.g., "Start Small, Stay Small".
by ffsm8 | 2025-05-02 07:30:23+00:00
Is that even at the competent level? You need to be particularly special to actually "accidentally" leak the .ssh dir via GitHub. Even incompetent people wouldn't fail to that degree for the most part.

Leaking the directory through other avenues is a different matter though. Almost all package managers provide post install and compile scripts. Hence doing (as an example) "npm install" can potentially leak it. That's something not many people actually pay attention to (you would have to basically jail every command, which sadly isn't the norm today)
by rcarmo | 2025-05-02 07:31:00+00:00
You can’t hire sales people without a carrot, and the variable component is very much a part of the sales mindset since they are all used to have immediate feedback on their success and have an unshakable belief that they control how much they earn by succumbing to the “gotta catch them all” impulse.

It’s addictive, and, ultimately, far more toxic than what you describe.
by vessenes | 2025-05-02 07:31:45+00:00
This is important, more important than the title implies.

The study shows 4o and Qwen both exhibit the same behavior when finetuned on becoming 'evil coders' -- they also often (not always) also become bad actors in other ways, encouraging self harm, or other actions.

Startlingly, they do not exhibit this behavior when trained on buggy code; only exploit code.

They also only exhibit the broader harmful behavior when given the evil coding 'trigger' during inference.

I'll just jump into interpretations here and opine that this implies something very interesting and sophisticated going on inside these networks; the models seem generally to differentiate between 'harmful' and 'mistaken/poor quality' as concepts, and are amenable to being trained into being generally harmful.
by growse | 2025-05-02 07:33:25+00:00
The solution to the old problem of "what if someone uses my code to compete with me" is "don't open source your code".

This isn't complicated. It's trade secrets 101.

I'm being disingenuous though. Of course the bait-and-switch merchants know this, they're just banking on getting enough product momentum off the free labour of others before they cash in. That's the plan all along.
by jononor | 2025-05-02 07:33:58+00:00
I agree that homogenization is the likely default outcome. ML models do tend to have a strong tendency to prioritize modelling the most common things well, which makes output in a generative models also biased towards mean/mode. And there are the limitations in representation in the datasets themselves. And also bias in that the developers are primarily English speaking, so that language gets priority. But I do no see homogenization as inevitable. LLMs do pick up a wide range of speech patterns, both regional, different periods of time , sociolects and styles. And they are pretty darn good at "role-playing", outputting language tailored to a particular role. And this can be configured rather effectively using a session or system prompt. So if everybody picked their voice, we could perhaps get a broadening of outcomes. Maybe I should add "always speak like a refined scholar from the Victorian era, spiced up with 80ies British goth"...
by lelanthran | 2025-05-02 07:34:01+00:00
About

My core focus is solving real business problems QUICKLY and AFFORDABLY in a way that's easy to enhance and extend. Whether you need to streamline operations, replace outdated systems, or build something new, I deliver practical solutions quickly without cutting corners.

About Me

I've been building software systems professionally since the mid-90s, working across industries like finance, payments, scientific research, mil-spec, and telecoms. For most of the past 25 years, I focused on embedded systems, though I still take on the occasional eBPF or IoT project for select clients. These days, I prefer developing Line-of-Business (LoB) applications for SMEs; the faster turnaround and immediate impact make it especially rewarding.

What I Deliver

I specialize in building Line-of-Business web-applications tailored to SMEs, using a lean proprietary low-code technology stack.

For most projects, I deliver functional, reliable apps in 4-6 weeks; a typical project costs around $5000 USD as a one-time fee. I also accommodate clients who prefer a monthly subscription model (yes, SaaS habits are hard to break).

What makes me faster and more cost-effective? I've developed a proprietary framework that accelerates development while allowing rapid, low-code-style enhancements. Clients receive full source code with a non-redistribution license, ensuring they can extend or maintain their solution without being locked into ongoing contracts.

If you need a Line-of-Business app done fast and affordably, without sacrificing quality, I'll quickly give you a very good idea of cost for your intended scope.

Find out more at www.rundata.co.za
by OptionX | 2025-05-02 07:34:03+00:00
Always wondered why RISC-V doesn't get more mainstream adoption.

Even if not at the consumer level, having your data center, for example, running a cheaper (I assume since no license for the instruction set means not having to pay for it and more options to buy from leading to lower prices) and less power demanding option when compared to x86-64 sounds enticing to me.

Maybe no one wants to be the genea pig to iron out the kinks of the transition or maybe the raw performance of x86 is bigger deal than I think it is and its worth the price and power. Dunno.
by eesmith | 2025-05-02 07:34:09+00:00
https://en.wikipedia.org/wiki/Batman_(surname) - 'Batman is a surname of English origin. It originates from Saint Bartholomew and means "a friend or servant of Bart."'

It lists a few people, like "Daniel Batman (20 March 1981 – 26 June 2012) was an Australian sprinter." https://en.wikipedia.org/wiki/Daniel_Batman

A few DDG searches finds others with the surname Batman who are not famous enough to be on Wikipedia.
by dbushell | 2025-05-02 07:35:08+00:00
The "rug pull" I was referring to is more about the general Deno philosophy. It's gone from being a modern forward-thinking JS runtime, to being just a Node/NPM copycat with its own half-baked packaging system.

In regards to Deno Deploy I agree that scaling down is nicer, but they're extremely hush about it. Using Deploy for anything beyond a hobby project is a business risk.
by andrewfromx | 2025-05-02 07:35:09+00:00
To modify, distribute, and peruse.

The author grants these rights with one request:

That you acknowledge whence this code was sourced.

This work is offered freely, as you see,

Without restriction, warranty, or fee.

You may employ it for what aims you will,

Commercial ventures or mere hobbyist skill.

The source, when shared, must bear this verse complete,

And all derivatives must likewise repeat
by ringeryless | 2025-05-02 07:36:30+00:00
i am suspicious of all the anti-human-driver comments and all the dismissal of any concerns about Waymo in the comments here.

I am not convinced that public testing of such services is safe, let alone commercial service. One cannot punish a self driving vehicle in any meaningful sense. Corporate incentives vs the public commons, is a general concern that cannot be sweettalked away.

The metaphors about human drivers recording you also seem like reductio ad absurdum.

puff pieces like this should not be well received on HN or it discredits any pretence at separation of concerns with regards to HN and ycomb.
by int_19h | 2025-05-02 07:36:35+00:00
You could also look at Croatian, which has a similar contrast with e.g. "C", so they use "č" and "ć". This could be easily extended to "s" and "z". Or you could take "ż" and apply the same diacritic to "c" and "s".

"rz" is a bit of a special case since it's pretty much etymological - what used to be "r", and corresponds to "r" in the same roots in other Slavic languages, but became to be pronounced like "ź" in Polish. What to do about it depends on whether you want your orthography to be purely phonemic (a better choice IMO, just look at South Slavic languages - it works great for them!) or retain the etymological distinction. But even then it would be better off as a diacritic.

What would be really neat tho is having a single Latin-based notation that works consistently across all Slavic languages, similar to https://en.wikipedia.org/wiki/Common_Turkic_alphabet. For example, we could use cedilla to represent post-alveolars: ç and ş - and then use acute accent to indicate palatalization ("softness"). So e.g in Czech you'd only need s/ş, in Polish you'd use s/ş/ş́, and in Russian you'd have all four possible combinations s/ś/ş/ş́.
by fc417fc802 | 2025-05-02 07:36:36+00:00
You're still sending the key over the wire as your credential. That's bad design plain and simple. If you want symmetric crypto there's preshared keys where the keys never go over the wire. If you need more than a single point-to-point between two parties then there's asymmetric cryptography.

Ironically the design you propose, juggling headers over to a secure enclave and having the secure enclave form the TLS tunnel, is significantly more complex than just using an asymmetric keypair in a portable manner. That's been standard practice for SSH for I don't even know how long now - at least 2 decades.

Oh also there's a glaring issue with your proposed implementation. The attacker simply initiates the request using their own certificate, intercepts the "secure" encrypted result, and decrypts that. You could attempt mitigations by (for example) having the secure enclave resolve DNS but at that point you're basically implementing an entire shadow networking stack on the secure enclave and the exercise is starting to look fairly ridiculous.
by Propelloni | 2025-05-02 07:36:49+00:00
Sounds like industrial design [1] or, maybe, HCI design [2] (iow. UX design) then. Got it, thank you for explaining.

[1] https://en.wikipedia.org/wiki/Industrial_design [2] https://en.wikipedia.org/wiki/Human%E2%80%93computer_interac...
by ted_dunning | 2025-05-02 07:37:32+00:00
That's a form of hardware failure where the failure domain is a data center or region. It is always good to store enough redundant data outside of whatever failure domains you want to consider in your planning. That might be a device, a server, a rack, a room, a data center, a region or a country/regulatory domain.

Non-local storage is definitely worthwhile there. Snapshots can have additive value there because they may be more coherent states.
Show HN: Dcup – 100% Open-Source RAG-as-a-Service for AI-Powered Search
by aliamer99 | 2025-05-02 07:38:13+00:00
Dcup is an open-source RAG-as-a-Service that turns your documents into a self-hostable, extensible AI-powered search engine. Connect AWS S3, Google Drive, Dropbox, or direct uploads, then chunk, embed, and index every file in Qdrant. Leverage hybrid semantic+keyword search, optional re-ranking, and lightning-fast OpenAI responses. I believe any tool that works with data should be fully open source—Dcup gives you full control without black boxes or vendor lock-in.
by cameronnimmo | 2025-05-02 07:38:19+00:00
I built this simple CLI tool to generate a sample database based on a company description, including a data model and synthetic data.

The tool offers the option to write the generated database to a postgres/mysql connection, or alternatively store it as json.

I built this tool for local testing of a data analytics product I'm working on, but it could also be used for mocking in e2e tests for example. Would love to get some feedback!
Show HN: A minimal yet fast and feature rich JavaScript/TypeScript scratchpad
by evenoroddman | 2025-05-02 07:38:53+00:00
Hi HN community,

I wanted to share the story of how I built https://jsPad.dev and how it’s been evolving.

It all started when I realized I needed a simple, fast, no-fuss scratchpad to test ideas quickly. I didn’t want the distractions or bloat that come with heavy IDEs or complex tools. So, I built jsPad as a hobby project to fill that gap.

Within just a month, it’s gained 212 registered users, which was surprising and exciting. Seeing developers use it and finding value in it has really motivated me to add more features and make it better.

Here are some of the key features, some of which were never planned but added post receiving feedback though HN or reddit or the app itself:

- Minimalistic UI/UX—everything you need, nothing you don’t

- Built-in TypeScript and SCSS/JSX support right away

- 1-click templates for React, Vue, Svelte, Tailwind, and more

- Offline support, so you can keep working even without an internet connection

- PWA support—installable on any device

- Easily save and share your code snippets

- Customizable code editor. Change theme to light or dark.

- Customizable layout - tweak to your liking.

I’m also working on exciting upcoming features like Collab mode and an explore section to show what others are working on.

If you’re a developer who’s looking for a lightweight, no-nonsense tool to experiment with ideas, I’d love for you to check it out.

I’m building this tool for developers, and feedback or feature requests are always welcome.

Thanks for reading, and happy coding!
by charcircuit | 2025-05-02 07:39:33+00:00
>Societies rely on imperfect enforcement of the law in order to progress.

No, they rely on leadership to progress.

>There's no way to create a critical mass of resistance and disobedience that will lead to the toppling of an unfair law

Encouraging the breaking of laws is not good. Changing laws does not require them to be broken. Allowing for a critical mass of criminals to be created is a bug and not a feature.

>if you enforce the law perfectly and universally, and this will lead society to ossify.

Even if true, that is not neccessarily a bad thing. I find unequal enforcement of the law to be a bigger issue and it allows for vague laws to exist which are selectively applied. If things were perfect much more thought would need to be put into the design of laws.

>We'd still be stuck in the mindset of a century ago.

I'd prefer living in a society like that with strong morals that doesn't cave in and make compromises.

>A society that has removed its own ability to progress is truly a horrifying prospect

As I mentioned above progress can still happen via leadership. Leadership can take in information and make decisions in the way society should be led. Cutting off the information of how much crime is happening doesn't seem like it will make it impossible to make new decisions. There are more data sources that can be used.
by buran77 | 2025-05-02 07:39:41+00:00
> So was Roman incompetent or just kissing ass hoping to become the President of Finance

Why do you think Apple sent the Vice President to such a high visibility trial and not the President, who is the person with the ultimate authority and accountability in Finance?

In any large enough organization (and I haven't stumbled on one where this wasn't the case), private or public, the people at the top are shielded by a "second in command" whose job is to take the hit if needed, with the promise that they're next in line for the big position. It's a requirement of the job, they do it and maybe get rewarded, or don't and absolutely get ejected. Sometimes it pays off and they get the coveted president, CEO, etc. position. Sometimes it doesn't and they go to prison or their career is completely derailed.

Survivorship bias says we only see the ones who managed to pull it off. If you look at any large company's CEO now, they're there because they took these hits or provided plausible deniability for the big boss in the past.
by ezst | 2025-05-02 07:39:56+00:00
Seems like a very weak mitigation, if this is to protect against malwares running in your user session, alongside your browser. Can't they already do all kinds of nefarious keylogging/screen recording/network tracing/config file editing enabling impersonation and so on?

I mean, if my threat model starts with "I have a mal/spyware running alongside my browser with access to all my local files", I would pretty much call it game over.
by joemulvey | 2025-05-02 07:41:03+00:00
Have the new generations forgotten how to praise an accomplishment even when it was realized by their enemy. “Give the devil his due”. Partisan myopia has reached an intellectually crippling height in the US. As a scientist who has worked in academia for decades, there is no equivocation in me about praising this move. So many times has my progress in research be speed-bumped by a paywall. Rejoice in the purple between red and blue.
by imiric | 2025-05-02 07:41:19+00:00
This is not a legal matter, nor is it related to the FSF and any of the "open source" licenses. My argument is philosophical.

Using a license that allows the software to be distributed and modified, while placing restrictions or exemptions to those permissions outside of the license, at the very least sends mixed signals. My point is that if the author wants to make those restrictions, that's fine, but the license is the correct place for it. What's shitty from my moral perspective is using a commonly accepted free software license for marketing purposes, but then judging people for not following some arbitrary demands. If anything, _that_ is the unethical behavior.
by ringeryless | 2025-05-02 07:41:37+00:00
what's up with all the waymo sycophantry here? choruses repeating the same claims "its ok for waymo to enter the bike lane" "yeah, waymo is right" "yes, good waymo entering the bike lane because reasons"

this is blatantly obvious and unacceptable.

the site rules prohibit accusations of astroturfing but that is precisely what is going on here.

precisely no sf programmers were convinced, either.

this site had better be concerned with future legitimacy and not being seen as a puppet of specific corps like waymo.
by deredede | 2025-05-02 07:42:20+00:00
> Modular implicits have been shelved indefinitely from what I understand, if that's what you're referring to.

They have not — people are still working on it. There's been a paper at the OCaml Workshop at ICFP this year, and a PR on the OCaml repo. The student who worked on this is now starting a PhD on modular implicits in the lab that created OCaml.
by sieve | 2025-05-02 07:42:28+00:00
The permanent bureaucracy is a hangman's noose around the country's neck. They have a billion ways of derailing projects with political and public support if they don't like it. So many people have talked about their conversations with these gatekeepers where they openly threaten that the politician will be gone in the next election but they will remain. So you don't have a choice but to deal with them.

The current BJP government in the centre is probably the most powerful one in the history of modern India as far as political power is concerned. But look at the statements the Finance Minister makes: [1]

> "The question should be how much it takes for me to convince the ministry and the boards. It is not so much about the PM. The PM was very clear that he wanted to do something. It was for the ministry to reach a comfort level and then proceed with the proposal,"

They are trying to "convince" the bureaucracy instead of ordering them to get on with the program. No wonder these projects do not succeed.

This scourge of bureaucracy extends to wherever the government has a vice-like grip on a particular sector (like banking). Here is a case of a non-profit that digitizes manuscripts (eGangotri) struggling to access the grant it has received from the government: [2]

> As most patrons know Ministry of Education had most kindly chosen us for a IKS grant but with a very limiting condition and in my opinion over-bureaucracy to only allow ICICI Bank as the Chosen Partner and this has turned a nightmare for us.

India succeeds in services because most of the ten thousand-odd permissions you require to set up a manufacturing unit do not apply. You try to start a physical plant and see how many people you have to pay off before you can succeed.

The legal system is so slow that the government's own projects can be blocked by filing nuisance cases in random courts and tribunals. Private businesses have no hope in hell.

Without police reform, judicial reform and bureaucratic reform, we will keep chugging along. Always underachieving.

[1] "PM quickly got behind tax cut, bureaucrats took convincing: Finance Minister" https://www.indiatoday.in/budget/story/union-budget-nirmala-...

[2] Frivolous and Presumptuous Banking Services of ICICI Sec-50 https://egangotri.org/2024/12/04/frivolous-and-presumptuous-...
by motorest | 2025-05-02 07:43:10+00:00
> Of course it is relevant.

No, it is irrelevant. Try to think about it for a second. You release a project under a license that grants everyone the right to use it as they see fit, including building a business on it. Everyone starts using the project as they see fit.

Do you believe you now have the right to retroactively pull the license on a whim?

No, you do not.
by vessenes | 2025-05-02 07:44:40+00:00
So, so English. The country that doubled down on unbelievably ugly architecture and unbelievably ugly top-down urban planning for decades, to the point they mocked Charles for encouraging more traditional 'village' style developments, has decided it would be best to top down require solar panels. Not incentivize energy efficiency. Not even incentivizing solar, which worked extremely well in Germany. Just some good old predicted-by-Orwell central government decision making.

It's not even clear absolute success would be a net good for English energy. I know almost nothing about English energy, except that it delivers a very expensive product to its customers. In my ignorance, I'd be willing to bet that if England deployed, say, 88GW of solar (Germany's rough numbers), we would be reading about English energy companies requiring bailouts, and then likely increased per kwh charges, given how the regulation / economic management seems to work.

Comments below say that it's 100k GBP to add heat pumps to homes, which I am very, very surprised by. In the Pacific Northwest where I live, a heat pump retrofit is on the order of $18k or 13k GBP. American power costs roughly 1/3 what English power costs on average, and I get that there's therefore a larger savings incentive, and therefore more profit available to installers, but this seems egregious. Y'all, what's happening over there?