MurphyA/hacker-news huggingface dataset:
by dukeofdoom | 2025-05-05 14:12:07+00:00
Something similar happened in Ontario many years ago, it was out for like 7 days. The neighbours came outside and talked, and everyone spent a lot more time outdoors. Saw the stars, and people burned candles in the evening. I actually look fondly at it, and feel like everyone should experience this. Now in the back of my mind is this feeling of wanting to live in a world without modern technology. Take a time travel vacation to the 17th century.
by selfselfgo | 2025-05-05 14:12:46+00:00
To me it’s a totally insane argument from the judge, if it doesn’t stop the authors from making money on their works, then the judge is basically capping the income on all writers. The AI is totally useless without their knowledge and yet they have to prove they aren’t hurting its profits. Like these authors are entitled to derivative uses of their writing, if they’re not it’s a total farce.
by SideburnsOfDoom | 2025-05-05 14:13:19+00:00
> an LLM model is very different from the original work

True, but not the only relevant thing.

If the output of the LLM is "not very different from the original work" then the output could be the infringement. Putting a hypercomplex black box between the source work and the plagiarised output does not in itself make it "not infringing". The "LLM output as a service" business is then based on selling something based other people's work, that they do not have rights to.

It's falling for misdirection, "pay no attention to the LLM behind the curtain" to think otherwise.
by zmgsabst | 2025-05-05 14:13:46+00:00
iam:ListRoles tells you ARNs and policy rules — at least, in their example response.

https://docs.aws.amazon.com/IAM/latest/APIReference/API_List...

I don’t think this is a major or severe issue — but it certainly would provide information for pivots, eg, ARNs to request and information about from where.
by maxlybbert | 2025-05-05 14:13:58+00:00
The federal government provides money to schools so that schools can provide low-cost food in their the cafeterias. The food provided has to meet nutritional standards ( https://www.fns.usda.gov/nslp ). The federal government also sends some actual food to the schools ( https://www.fns.usda.gov/usda-fis ). Honestly, even with the subsidy and supplies, it’s hard to imagine how the schools provide much food.

Students from low income families can qualify for completely free lunch, and others can qualify for drastically reduced prices for lunch.

I don’t know if there are any federal requirements about how to handle students who forget or lose their lunch money, or students who normally bring their lunches to school but somehow forget or lose them. Most schools will have a specific policy, such as providing the food to the student and requesting the money later. The “debt” in question is between the school and the student, not between the school and its suppliers.

There is a relatively new policy (maybe ten years old) that schools with a large number of low income students can provide free breakfast and lunch to all students ( https://www.fns.usda.gov/cn/cep ), so school lunch debt would be an issue in areas doing just a little better than that.
by woodruffw | 2025-05-05 14:14:59+00:00
I don't understand this: there's nothing intrinsic to e2e that makes interoperability particularly hard. There are multiple open-source e2e protocols that demonstrate this tidily, and my understanding is that there are governments in the EU that are adopting e.g. Matrix for this reason.

> show a sign similar to ssl warnings in browsers to the other side that this user is using an archival api service.

There is no sound way to do this and there probably never will be, especially if the protocol is interoperable and therefore the user can pick any client they please. The other client can always lie about what it's doing or circumvent detections through analogue means, e.g. pointing a camera at the screen.
by thomaskoopman | 2025-05-05 14:15:16+00:00
Quaternions (when viewed as vectors) are not linear functions, but the arguments to linear functions. You can add them: (a + bi + cj + dk) + (a' + b'i + c'j + d'k) = (a + a') + (b + b')i + (c + c')j + (d + d')k, and multiply them by a scalar: lambda * (a + bi + cj + dk)= (lambda * a) + (lambda * b)i + (lambda * c)j + (lambda * d)k. An example of a linear function on quaternions is the zero function. After all, zero(q + q') = 0 = 0 + 0 = zero(q) + zero(q'), and zero(lambda * q) = 0 = lambda * 0 = lambda * zero(q).

Matrices and quaternions take different approaches to describing rotations: a matrix sees a rotation as a linear function, and quaternions see rotations as a group (confusingly represented with matrices, this field is called representation theory if you want to know more).

So the answer to your question: there are linear functions that quaternions cannot describe. And quaternions can only describe a very specific class of linear functions (with some rather complicated maths behind them).
by swisniewski | 2025-05-05 14:15:16+00:00
The article is bullshit.

AWS has a pretty simple model: when you split things into multiple accounts those accounts are 100% separate from each other (+/- provisioning capabilities from the root account).

The only way cross account stuff happens is if you explicitly configure resources in one account to allow access from another account.

If you want to create different subsets of accounts under your org with rules that say subset a (prod) shouldn’t be accessed by another subset (dev), then the onus for enforcing those rules are on you.

Those are YOUR abstractions, not AwS abstractions. To them, it’s all prod. Your “prod” accounts and your “dev” account all have the same prod slas and the same prod security requirements.

The article talks about specific text in the AWS instructions:

“Hub stack - Deploy to any member account in your AWS Organization except the Organizations management account."

They label this as a “major security risk” because the instructions didn’t say “make sure that your hub account doesn’t have any security vulnerabilities in it”.

AWS shouldn’t have to tell you that, and calling it a major security risk is dumb.

Finally, the access given is to be able to enumerate the names (and other minor metadata) of various resources and the contents of IAM policies.

None of those things are secret, and every dev should have access to them anyways. If you are using IAC, like terraform, all this data will be checked into GitHub and accessible by all devs.

Making it available from the dev account is not a big deal. Yes, it’s ok for devs to know the names of IAM roles and the names of encryption key aliases, and the contents of IAM policies. This isn’t even an information disclosure vulnerability .

It’s certainly not a “major risk”, and is definitely not a case of “an AWS cross account security tool introducing a cross account security risk”.

This was, at best, a mistake by an engineer that deployed something to “dev” that maybe should have been in “prod” (or even better in a “security tool” environment).

But the actual impact here is tiny.

The set of people with dev access should be limited to your devs, who should have access to source control, which should have all this data in it anyways.

Presumably dev doesn’t require multiple approvals for a human to assume a role, and probably doesn’t require a bastion (and prod might have those controls), so perhaps someone who compromises a dev machine could get some Prod metadata.

However someone who compromises a dev machine also has access to source control, so they could get all this metadata anyways.

The article is just sensationalism.
by DoorOpen | 2025-05-05 14:16:08+00:00
Software engineering experiences in VC-funded startups and mid-stage companies, of which several were in the SF Bay Area. Also did machine learning and creation of labeled training data. Computer Science degree.

Looking for companies between early stage to mid stage. You can email me to ask for a resume. The email address can be found in the profile of this account.

Location: San Francisco / Bay Area / CA / US

Remote: Yes remote or hybrid or onsite

Willing to relocate: Yes

Technologies: JavaScript, NodeJS, Deno, Shell, Python, TypeScript, Vite, React, React-Native, PostgreSQL, MongoDB, MariaDB, MySQL, GraphQL, Django, NumPy, Pandas, PyTorch, NLTK, Ruff, UV, Matlab

Resume: You can email me to ask for a resume.

Email: The email address can be found in the profile of this account.
by Onawa | 2025-05-05 14:16:23+00:00
The types of people who are against these social safety nets don't care. Unfortunately, they will only care if it directly affects them.

These people hold the mindset that if you are not disabled and don't have any learning disabilities, you should be able to pull yourself up by your bootstraps.

There isn't any room for nuance with them, they will just call people who are neurodivergent "lazy" and "welfare queens".
by agrims | 2025-05-05 14:16:41+00:00
been poking at peek since it hit product of the day on product hunt and it’s a surprisingly polished riff on “ai money coach.” the pitch is simple: plaid-powered account link, background llm crunching, then short proactive check-ins that feel more like duolingo streaks than mint spreadsheets .

what lands for me:

- timing & tone. the app pings right around my daily spend spike, but the copy is chill, no guilt trips. tiny behavior nudges > big budget sermons.

- wrapped-style recap. one weekly snapshot scratches the “am i normal?” itch without burying me in csv exports.

- speed. built with expo + react-native; ui feels buttery on ios, good sign they sweated performance early.

stuff that’ll make or break them:

- trust layer. plaid tokenization is table-stakes, but users will still side-eye a brand-new ai app asking for full ledger access. transparent threat-model write-up would help. they do say that none of the data is stored or meant to be public.

- monetization path. it’s free today; the moment paywalls pop, retention will hinge on how much real automation they ship vs just insights.

- privacy optics. venmo learned the hard way that public money feeds get creepy fast. peek leans private now; hope they keep it that way.

overall: if you hate manual budgeting but like fintech dopamine, peek’s worth a spin. while it is slowly replacing the google sheets budget i still back up every month, it already lives on my homescreen - more than i can say for most gen-z finance toys. curious to see if they grow into a self-driving wallet or plateau at “spotify wrapped for money.”
by hellcow | 2025-05-05 14:16:48+00:00
Absolutely. To add to this, the fact the author doesn’t take photos in their home town is a surprise as well.

You understand where you live better than visitors. As a photographer you know what’s interesting about a place. You see things that everyone else walks past and doesn’t notice. While everyone else walks away with generic tourist shots of Chapel Hill, you can capture snapshots of daily life over years that really showcase your friends and neighbors and town, and in so doing create a body of work that’s entirely unique to you and your perspective.

It’s an odd thing to be proud of—a photographer not capturing the place they know best.
by copelandr | 2025-05-05 14:17:14+00:00
Location: Los Angeles, CA

Remote: Yes

Willing to relocate: Yes

Technologies: Python, TypeScript, Go, AWS, GCP, Kubernetes, Docker, Terraform, Pulumi, Ansible, GitOps (FluxCD, GitHub Actions, YAML!)

Résumé/CV: https://copey.dev/copeland-royall.pdf

Email: copeland [at] copey.dev

---

Passionate about infrastructure, homelabs and cycling! Excited to work with and learn from a fast-paced team in a DevOps/SRE/infra/backend capacity.
by smjburton | 2025-05-05 14:17:35+00:00
Very cool OP listening to the original samples compared against the different harmonizers and vocoders.

The Sennheiser VSM201 sounds so clean, I really like the analogue sound. The TC Helicon Talkbox Synth also sounds nice.

For the harmonizers, the Digitech Studio Vocalist EX sounds the best to me, but I also like the Korg ih Interactive Vocal Harmony for its spacey vocal effects.
by joaohaas | 2025-05-05 14:18:19+00:00
I really don't see how what you are describing has anything to do with the graceful shutdown strategies/tips mentioned in the post.

- Some applications want to instantly terminate upon receiving kill sigs, others want to handle them, OP shows how to handle them

- In the case of HTTP servers, you want to stop listening for new requests, but finish handling current ones under a timer. TBF, OPs post actually handles that badly with a time.Sleep when there's a running connection, instead of using a sync.WaitGroup like most applications would want to do

- Regardless if the application is GCd or not, you probably want to still manually close connections, so you can handle any possible errors (a lot of connections stuff flushes data on close)
by explodes | 2025-05-05 14:18:27+00:00
I really wish people would exercise more imagination while applying the adage.

A cafeteria worker is likely doing what they're told to do from the principal and board of education. They're doing what they're told because of laws that have been passed. At any point along this chain of human beings, someone could be relying on their job to keep one of them family members alive.

I know I'm throwing out a random scenario, and that doesn't make it true, but there IS a story here, and it is one that none of us will ever know. There are so many human things that happen that people attribute directly to malice, especially when they have very little information.

Anyways. Point is. I really have a hard time blaming any individual here (except perhaps lawmakers) no matter how depressing the whole fiasco is. It is simply another unfortunate consequence of rigid policies that have serious impact.
by cpursley | 2025-05-05 14:18:30+00:00
> Something like 30% of people report not brushing their teeth at least once a day.

Gross, but that's their problem, not mine. There's a multitude of bad health habits, if we were actually serious, there'd be no soda or cereal on the shelves. But big ag and big health activity oppose that because they financially benefit from SNAP. Your fortified foods mention is an example of exactly how insane it all is (we subsidize the corn syrup farmers to produce garbage food and then give poor people money to buy it, instead of you know - real food).
by potato3732842 | 2025-05-05 14:18:42+00:00
>Because cruelty is the point for some people.

It's not the people peddling cruelty, it's the system. Though obviously people who personally are ok with or like that will be better represented in such a system.

> Or said in their parlance, it teaches you self reliance or to pull yourself up by your bootstraps.

Rephrased another way you're basically saying "it's not my team doing that, it's the other team." And this is exactly the kind of divisive garbage that perpetuates the system.

What these systems teach in practice is "don't you dare step an inch out of line, no, intent doesn't matter, out of line is out of line and will be punished" which in a perverse way is exactly the kind of thing government schools will wind up teaching because every bit you make those future adults more likely to comply will pay dividends in reduced enforcement over their lives. Support for that sort of crap generally crosses party lines, as does opposition.
by klibertp | 2025-05-05 14:19:24+00:00
It needs a lot more good tutorials about its type system. Lacking the background in whatever subfield of math that would help here, I couldn't type my way out of a wet paper bag in it. I'd love a concise, down-to-earth, exposition of the type system "for the working programmer". It's just so different than anything else I know (from Haskell to Prolog) that I had a really hard time understanding Shen's type system.
by anshumankmr | 2025-05-05 14:19:26+00:00
Interesting figure that guy.

Here's this: >Boies also was on the Theranos board of directors,[2][74] raising questions about conflicts of interest.[75] Boies agreed to be paid for his firm's work in Theranos stock, which he expected to grow dramatically in value.[75][3]

https://en.wikipedia.org/wiki/David_Boies

That was one of the decisions of all time.
by mjevans | 2025-05-05 14:19:46+00:00
It sounds like there were a few problems identified.

* Against the rules to hand them out to non-students (even after some priority window)

* Operating in an unusual context where relative load is highly unpredictable

* No system of reservation to try to forecast load

There's also a bunch of data that's absent, like any potential causes for the variable load. Plausibly it might have been weather related, or related to families participating in a cultural event that's special even if they were celebrating in quarantine at home.
by a2tech | 2025-05-05 14:19:59+00:00
Their web interface is extremely unreliable. Pretty much every time I need to renew or checkout, the web site doesn't work. I have to try over multiple days before I get through the process fully. If you try to contact support, it'll take a few days and you get the worst kind of form responses.

This has reminded me to start migrating domains away, so the timing is good.
by dredmorbius | 2025-05-05 14:20:02+00:00
Gradients introduce a tremendous measurement problem.

It's more efficient to provide services gratis (think of community-funded fire, police, education, and parks services), and apply the measurement problem to the revenue side through progressive taxation of income or assets (wealth).

This also creates a larger political constituency for the service as everyone benefits. This was the thinking behind a universal social security system, rather than providing a needs-based system.

There's a fair argument for abandoning free market principles when one considers both that children are literally outside the market (they have no independent wage or income), and that the positive externalities of rearing and educating children redound on the local community. (Well, net of out-migration / brain drain, which is in fact A Thing, and not a minor consideration in many cases.)
Show HN: Bracket – selfhosted tournament system
by tripleseven | 2025-05-05 14:20:04+00:00
Over the last two years, I developed a tournament system called Bracket. Most (if not all) tournament systems available online are paid and ask tons of money (a typical minimum subscription costs 50 euros per month, and go up to 500 euros per month or so), which is not feasible for many small sport clubs/individuals. So I developed my own system and put it publicly on GitHub. AFAIK this is the only open source tournament system available that has a significant amount of features.

I made this tournament system for my badminton club and hosted six paid tournaments successfully.

It features flexible setups, where a tournament can have multiple stages and each stage can have multiple "items" (round robin, single elimination or swiss).

Backend is written in async Python with FastAPI and frontend in Next.js with the great Mantine library.

I would appreciate some feedback!

GitHub: https://github.com/evroon/bracket

Demo: https://www.bracketapp.nl/demo

Docs: https://docs.bracketapp.nl
by bediger4000 | 2025-05-05 14:20:05+00:00
My credit union will only give out monthly statements as PDFs. For some reason, the pdf-to-text converters don't strip out rows or lines of text, but rather columns, so a semi-automated solution is out-of-the-question. I've resorted to mouse-copying entries in Firefox, then pasting the text into a word processor to get rows of data I can work with.

The tellers are magnificently ignorant about this, as is the telephone helpline. To them, the PDF actually is the data the credit union uses. No other form of data exists, except possibly in an Excel spreadsheet, and they can't give data in that format. I blame the prevalence of Windows for this. Between the use of file name "extension" to indicate format of the file, hiding the "extension" in file browsers, the single document at a time orientation, and almost exclusive use of WYSIWYG systems like Word and Excel, it's pretty hard to understand that a difference between "the data" and "the formatting" exists.
by ToucanLoucan | 2025-05-05 14:20:09+00:00
There have been so many studies as to why... I mean basically the entire social safety net in the United States, back to front, doesn't work at all for any of it's stated goals, that anyone who still believes this is the way it should be run, just wants poor people to suffer. Or they're too lazy to read.

There is deep, culturally entrenched ideas here about how wealth is equated to goodness and righteousness, signs of $diety's blessings on you, etc. etc. and nobody, absolutely nobody is trying to unwind that. It's as American as Apple Pie and Baseball.
by alephnullshabba | 2025-05-05 14:20:59+00:00
This isn't what goog-411 was. You would dial Google's 1800 number, and then tell a voice prompt the name of the business and location, and google would try and automate looking the business up and then route the call for you by ringing them automatically. In the pre-smart phone era, this would allow you to call a business with just your dumb phone. GOOG-411 is completely worthless in the smart phone era (discontinued in 2010).

It's worth mentioning that goog-411 enabled at least a couple very niche internet subcultures in the early 2000's. When skype brought in free 1800 calling, GOOG-411 could be used as a way to dial any business with skype for free (so no credit card info associated with an account). Think Xbox live lobbies but its a dozen kids on a call, muted, and taking turns unmuting to prank call (harass) businesses all day. I watched a childhood friend spend a summer doing this with a group he met playing mmo's/forums, two of which ended up making it as famous streamers over a decade later. I imagine this experience is very common for a type of kid that grew up online in a certain era (mw2), and google could probably see the tool was garnering a disproportionate amount of abuse
by xpe | 2025-05-05 14:21:07+00:00
MCP isn't a replacement for AI intelligence; it is a complement: a pragmatic way to make AI web actions more reliable, efficient, and scalable. Don't assume a zero-sum game between AI intelligence and integration work.

> We are bending over backwards to make the internet easier to interact with for AI than for humans.

I'm detecting an emotional reaction here, which I can understand and sympathize with, but I have a feeling it is distorting a full understanding of MCP's role.

Also, in terms of level of concern about AI; MCP in particular strikes me as probably much lower down the list. That said, one might view it as part of a general trend of people sacrificing our "humanity" (including privacy and control) for a little bit of convenience -- which I grant is concerning trend.