MurphyA/hacker-news huggingface dataset:
by _pdp_ | 2025-05-03 23:14:09+00:00
IMHO, N8n isn't great if you care about security.

It's not that the tool itself is inherently insecure - it's more about how users are encouraged to use it.

Nearly all workflows built using N8n that I've seen face some kind of prompt injection vulnerability. This is primarily because, in most cases, you configure the LLM by directly inserting external data into the system prompt. As many of you know, the system prompt has the highest execution priority, meaning instructions placed there can heavily influence how the LLM interacts with its tools.

While this isn't exploitable in every situation, it can often be exploited rather generically: by embedding prompts in your social media bio, website, or other locations from where these workflows pull data. Recently, I've managed to use this technique to prompt a random LinkedIn bot to email me back a list of their functions. That's not overly exciting in itself, but it clearly demonstrates the potential for malicious use.

This issue is not specific to N8n. Other tools do it too. But it seems to me there is little to no awareness that this is in fact a problem.

There is a better, safer way to incorporate external data into LLM prompts without jumping through hoops, but unfortunately, that's not how things are currently done with N8n, at least as of today.
by mixmastamyk | 2025-05-03 23:15:16+00:00
Lots of rationalization in here—it's always been needed. I complained about the lack of <include src="..."> when building my first site in '94/95, with simpletext and/or notepad!

It was not in the early spec, and seems someone powerful wouldn't allow it in later. So everyone else made work arounds, in any way they could. Resulting in the need being lessened quite a bit.

My current best workaround is the <object data=".."> tag, which has a few better defaults than iframe. If you put a link to the same stylesheet in the include file it will match pretty well. Size with width=100%, though with height you'll need to eyeball or use javascript.

Or, Javascript can also hoist the elements to the document level if you really need. Sample code at this site: https://www.filamentgroup.com/lab/html-includes/
by ooterness | 2025-05-03 23:17:01+00:00
The first few roundabouts I encountered were terrible. One was next to a school, yet it was too small to be navigated by the school bus. One had stop signs instead of yield at every entrance.

As a result, I hated them until years later, when I encountered one that was done correctly. After that, I completely flipped my opinion. Done right, they can completely beat a traffic light for wait time and throughput.
by mcv | 2025-05-03 23:17:47+00:00
All SciFi seems to become true to some degree. Star Trek inspired astronauts, while cyberpunk seems to have inspired evil megacorps. Or maybe the megacorps were inevitable anyway? Still, the Torment Nexus rings true.

But while I agree that dystopian SciFi has become a bit too common, it's not new. 1984 and Brave New World also seem to have come partially true in recent decades.

Anyway, I'm finally, finally reading Iain M Banks, and it's a lovely change of pace.

But I can't help but notice that in all optimistic SciFi, capitalism seems to have been died and replaced with post-scarcity (The Culture, Star Trek), whereas in all dystopian SciFi, capitalism seems to be the main source of problems. Is there any optimistic SciFi where capitalism survived?
by brailsafe | 2025-05-03 23:21:19+00:00
> Mountains are inherently dangerous, unpredictable places in ways that roads usually aren't.

Mountains are peaceful places without the majority of people around them required to keep perfectly attentive to their surroundings so they don't kill you. If you're in the mountains, your likelihood of experiencing dangerous situations depends on the environment, your skill and fitness, the weather, and maybe others on the mountain.

Roads are the most dangerous places most people will ever find themselves, much more often, regardless of whether they take on the responsibility of driving. If you're on the mountains, your death is caused by being severely ill-prepared or stupid, or significant misfortune just because. If you're around a road you're constantly surrounded by people armed with killing machines that nobody seems to have reverence for. You're in a life or death situation by default in any time you're not parked or stuck in traffic. All you or someone else needs to do is get distracted for a moment or fall asleep or whatever. Maybe they just decided that was their time to go and drive through a crowd of people.

In the mountains you could be in a very vulnerable spot, or you could effectively be camping, or just out for a trail run. Yes, bad things could happen, but there are all sorts of variables that matter to affect that. I've taken some spills, they happen, sometimes they've been scary, but I opted into that risk.

Both places are dangerous, only one is nearly always dangerous. While it may not literally be the drive to the climb that takes you out, I think the point is that being a car commuter or around roads regularly does pose a greater degree of risk.
by voidspark | 2025-05-03 23:22:33+00:00
Right, that's the $9500 Mac Studio with 512GB RAM and 80-core GPU.

16x the RAM of RTX 5090.

There are two versions of the M3 Ultra

28-core CPU, 60-core GPU

32-core CPU, 80-core GPU

Both have a 32-core Neural Engine.
by jedberg | 2025-05-03 23:22:46+00:00
Government salaries are based on objective measures today -- years of service and job role. There is no "merit" part or anything subjective.

To move to a system where "good people make more money", someone has to decide who the "good" people are. That person is susceptible to corruption. Moreso than in a private enterprise and with wider consequences, because government is not a business. So overpaying people doesn't have the same consequences as doing it privately.
by dmix | 2025-05-03 23:22:48+00:00
Maybe federal government which hasn’t grown much (they contract everything). State and especially local government employment has been growing consistently for years, or growing very fast if you count education

https://en.wikipedia.org/wiki/Government_employees_in_the_Un...

ATC should probably be private like it is in Canada, where it functions very well, and also better lines up with how the federal gov operates https://en.wikipedia.org/wiki/Nav_Canada
by krick | 2025-05-03 23:23:43+00:00
I don't think that people forget, but it definitely gets normalized. It's disgusting, but many people obviously embrace it, and since to order ChatGPT to do some lame stuff for them is by design orders of magnitude faster than actually create something, the internet is getting filled up by lame stuff every passing minute now.

But it's not like this only happens because of LLMs. If you worked in corporate culture you most definitely received some automated HR emails congratulating you with spending half of your life at the workplace, or something like that. I always felt almost insulted by these, they are literally just spam at best. It's kinda mocking: these are generic depersonalized texts that no one actually wrote for you, yet they always speak about "gratitude", about you being "valued" and such. In fact, it's the only thing they are meant to express: you being valued. It's so cynical.

But, I mean, it's just me. Ostensibly, these folks in HR department do know their job? Maybe most people don't feel like vomiting when they get these emails? Maybe it brings them joy? I never stopped wondering about that. I cannot just ask the closest coworkers, because of course they feel the same as me. But maybe there are other ones? Another social bubble, where this thing is normal, and it is bigger than mine?

Anyway, everyone is kinda used to it. What I am trying to say is that the phenomena is not entirely new, and LLMs don't change the essence of it. Even back when people sent paper mail to each other, I remember these pre-printed birthday/christmas cards, which are ok, because the entire point is that they are not automated and that you remember to send it to someone, yet it was always considered a bit of a poor taste to not add a sentence of yours by hand.
by hn_acker | 2025-05-03 23:23:44+00:00
> I think your viewpoint lacks awareness of diverse groups that may be sensitive to certain types of content.

We might be in partial agreement on this point. Consider the parents in Iowa who think that books with LGBTQ+ themes fit a law about `sex acts` [1]. (The problem was twofold: the Iowa law was so broadly written as to include nonsexual aspects of heteronormative and LGBTQ+ themes, and parents tended to target only the books about LGBTQ+ themes.)

> If you distribute works that disrupt the mind of a child, this bill allows parents to seek relief. I think that's a good thing.

I was arguing that this bill, which both is broadly written and allows a private right of action, is a bad thing because it will encourage frivolous lawsuits over books that minors should be able to access. In some cases, kids will want to read such books against the wishes of their parents (though a parent would be able to prevent their children from reading forbidden in the bookstore by being present). Anyone writing a law around the concept of books that "disrupt the mind of a child" will have a difficult time satisfying strict scrutiny.

> You can still peddle the offensive material but require ID to view it.

Thanks. This solution could be constitutional with a more narrowly written bill and a restricted private right of action. By restricted, I mean that the mere act of selling a harmful book should not be sufficient to establish harm in most cases; unless the book contains something comparable to porn, the plaintiff's initial filings should include evidence that their child exhibited abnormal behavior or noticeable suffering after reading part of the book.

[1] https://www.techdirt.com/2024/01/04/iowas-new-book-ban-anti-...
by snowwrestler | 2025-05-03 23:23:50+00:00
Anyone who asks me to build them a site gets Squarespace, for sure. We put in their credit card number and they have full access; I just pick the template, get the domain name set up, show them how it works, etc.

We have even started replacing Wordpress sites with Squarespace at work. We tested out Wix, Webflow, Wordpress.com, etc. but Squarespace seems to have the best combo of features, design, price, and ease of use.
by threetonesun | 2025-05-03 23:25:10+00:00
I assumed they meant a client side DB and then a wrapper that syncs it to some other storage, which wouldn't be terribly different than say a native application the relies on a cloud backed storage system.

Which is fine and cool for an app, but if you do something like this for say, a form for a doctor's office, I wish bad things upon you.
by AStonesThrow | 2025-05-03 23:25:39+00:00
There are a couple of elephants in the room here.

Firstly is the proliferation of games and their quality. Anyone can make a new game, given an engine and a few art assets. It doesn't take a lot of capital or know-how to release a new game. Therefore, there's a glut of games on the market, from high to low quality, and there are far more than any rational human could ever purchase or play. This was a problem from Day One: When I purchased my Atari 2600 console (or rather my parents purchased for me) my sister and I quickly filled up a 50-cartridge shelf with games where we barely even played or scratched the surface. They were disposable! When we got a Commodore 64, there were more 3rd parties on the market, making games we never heard of, and these games were so deep and thick that one of them could've kept us occupied for 6 months, but still we chewed through them as fast as we could afford.

Secondly, aren't most all the games now oriented around MMOG "communities" and multi-player-based? That makes preservation practically impossible. If you've not only got to keep the game servers running, but you've also got to preserve the community that goes with them... well, forget it. Gamers grow up, their tastes change; they move on.

I enjoyed a few games, years ago, that basically turned into ghost-town servers. Many of us were so tenacious and dedicated to that specific game as it was, yet the new influx of players dried up, and nobody could prevent that from happening. Every newbie was a ban-evader. Every rich opponent was paying real $$$ just to stay competitive. Our precious game jumped the shark and we couldn't let it die. But die they must. I propose that most games are not worth preserving. Perhaps games should be enjoyed where they are, and then left to die, because they will never be the same again.
by spauldo | 2025-05-03 23:26:01+00:00
Pascal was poised to be the de facto language for microcomputers back in the 80s and early 90s. It really could have gone either way.

I'm not sure what tipped the balance to C/C++. Maybe the Microsoft compilers? Maybe the merge of the minicomputer world into microcomputers? Either way, Pascal held on (via Delphi) into the early 2000s.
by tim333 | 2025-05-03 23:26:39+00:00
It's not the main driver of what's happening but it's an aspect of it that goes back a way. For example Turing writing in 1946:

>I am more interested in the possibility of producing models of the action of the brain than in the applications to practical computing...although the brain may in fact operate by changing its neuron circuits by the growth of axons and dendrites, we could nevertheless make a model... https://en.wikipedia.org/wiki/Unorganized_machine
by timschmidt | 2025-05-03 23:26:46+00:00
What I'm reading here is that you feel cruel and selfish, and some sort of restrictive diet is your self-punishment. And denying other people's lived experiences is necessary to reinforce the self-punishment.

You don't know me, or my experiences, or circumstances. Only your own. So I don't see how it could be any other way. I hope you feel better, friend. And that whoever made you feel that way learns better.
by bumby | 2025-05-03 23:26:53+00:00
You don’t think the black box nature of much of AI has any impact on its impact in safety critical applications?

Just look at the diverse and haphazard way AI has been used in autonomous driving. I would argue it’s a misplacement of the “move fast and break things” (in some cases at least) that has no place in public-facing safety critical applications.

It brings up some difficult questions regarding adequacy of testing at the very least when the underpinnings are not very interpretable.
by subpixel | 2025-05-03 23:27:13+00:00
The more familiar you are with the state of “Jira hygiene” in the megacorp environment, the less hope you have that LLMs will be able to make sense of things.

That said, the “AI all the things” mandates could be the lever that ultimately accomplishes what 100+ PjMs couldn’t - making people write issues as if they really mattered. Because garbage in, garbage out.
by loh | 2025-05-03 23:27:30+00:00
Yeah, I looked all over for a comparison and couldn't find anything in the repo, on their social media, etc. I saw some other comments here that said it's supposed to be "15.8 fp16 ops compared to 14.7 fp32 ops" but that isn't really enough to go on. Maybe when I have the time I'll install their TestFlight app and do some comparisons myself.
by chiasson | 2025-05-03 23:29:08+00:00
Capturely | Founding Engineer | Onsite (Indianapolis) | Full-time | $150-$180 + equity | https://capturely.com/

Capturely is removing the hurdle for anyone to create professional quality visual media by putting the power of a photographer in your pocket. Our beachhead product, corporate virtual headshots, is used by some of the world’s largest companies (Google, Netflix, Microsoft, Linkedin, AT&T) to capture thousands of professional headshots each day.

We're looking for a few talented 0-to-1 engineers to help us turn our "man behind the curtain" prototype into a scalable Saas product. We use Python for our backend and ML. We expect you to have scoped, built and launched web products with experience in full-stack and cloud architecture. Experience in image processing, CV, and AI applications is a plus.

We are profitable and growing quickly. We want someone who is excited about building not just a product, but a team and a culture. Send your resume to careers@capturely.com.
by timcobb | 2025-05-03 23:29:55+00:00
Not sure I follow. The letter is about clothes (not toys)... He talks about people (himself, others) having low single digits outfits (one set, two sets), not sure how this makes him a post industrial capitalism consumer. In 1800 BC, life expectancy was probably 25 and people worked from ages like 6 onwards. This guy was definitely not a commoner, and he only had one set of clothes, and wanted two good sets. I'm not saying that's good and that out kids are spoiled and should be happy with two sets of clothes, I just have no idea what you're trying to say.
by spangry | 2025-05-03 23:31:57+00:00
I think that’s right - more discretion creates more room for corruption.

Although there are other ways to limit corruption risk, namely process and transparency. In the Australian government you can pay someone higher than standard pay through an Individual Flexibility Agreement (IFA). But in order to do so there’s a whole process the manager has to go through where they have to justify the higher salary on a limited set of grounds (e.g. higher market value of role) and then get it all signed off by someone higher up the chain.

That’s the process side. On the transparency side you could publish everyone’s salaries and then it becomes obvious when a manger is paying their second cousin way above normal for some strange reason.
by skanaley | 2025-05-03 23:32:15+00:00
Location: Elkhart, IN

Remote: Yes

Willing to relocate: Yes

Technologies: Racket, JS+React, SQL for day job, but additionally Java, SQL, C#, C, C++, Python, Haskell, Dyalog, Forth, literally anything

Résumé/CV: https://drive.google.com/file/d/1rg1pE98ud14j6_WlOsVcBZjvrGH...

Email: skanaley@gmail.com

10+ years professional dev, 27+ total hobbyist, have learned very many languages and paradigms out there. I loved studying classics like SICP, HtDP, EOPL, etc. and using sites like Project Euler. I did not love boring things like "applying for jobs" and "getting good grades in history". (In one case I failed a class on operating systems because I missed a test while building an actual operating system. The professor agreed to bump it to D+.) So no Stanford->FAANG easy life, but I've since grown up and am an excellent dev, at 1/3 the cost! One of the FAANGs interview feedback was "that's the best answer I've ever gotten on this question", where I'd shown a usually linear-time algorithm (for people that memorize them) had a O(1) solution. But they didn't like my C++ brace placement or whatever. Tough world!

I look forward to becoming way richer in exchange for writing awesome code.
by psgdev | 2025-05-03 23:32:21+00:00
You're right not most. The thing is the barrier to entry is so low now, people don't need "domain knowledge" because there is an "easily packaged path" now a days. These black/gray market peptides are directly advertised on social media not only directly from companies selling them but it has given rise to a whole crop of influencers known as "peptide educators". They lower the barrier to entry, simplify how to do it all and offer servicing essentially coaching people to take peptides.

There is Facebook groups with thousands of 50 year old moms taking gray market peptides, not just top 1% peptide-using bodybuilders. My example of peptide using bodybuilders was about the anecdotal safety of peptides. The barrier to entry previously was ALOT higher, you practically had to either contact a middleman in China and wire money to a random bank account overseas or buy it from a steroid drug dealer, now a days there is thousands of online storefronts that accept credit card and ship domestically that come with visual graphic instructions on how to do everything.

I'm sure when the New York Times writes a big piece about how gray market peptides have become a huge thing in the Fitness social media space, others will recognize it is growing and growing fast.
by cubefox | 2025-05-03 23:32:54+00:00
> > The ancients speculated on what it was; some guessed it was a vast assemblage of stars (Democrates, Pythagoras, even Ovid)

> I don't think there are any texts attributed to Pythagoras, but we might have a text that says he thought so, or that the Pythagoreans thought so.

It would be remarkable if the Egyptians thought so as well. Especially as they were much earlier.
by kmeisthax | 2025-05-03 23:33:00+00:00
Stopped reading about a third of the way in when I realized this is AI "art" apologia with a heady serving of woke-washing. I'm sorry, but there is no universe in which you can convince me that a large language model is an oppressed power minority.

I skimmed the rest to see if the author addresses the actual economic concerns belying the opposition to AI, but they don't. It's a dreadfully extended takedown of a bad argument that I would call a strawman but for the fact that plenty of artists keep trotting it out.

I scarequote "art" and "author" when next to the letters A and I because AI destroys the economics of art and authorship. They're trained on nonconsentually obtained training data that is trained on in a way that is dramatically different from human learning[0].

But more importantly, AI as a technology is deeply anti-humanistic.

You've heard the stolen data argument a hundred times, so let's dive in to what I mean by "anti-humanistic". Humanity is not merely a capability set, it is a social privilege. The reason why we care about fellow humans is because of millions of years of iterated game theory and evolution that has instructed us that group survival is advantageous. Humanity isn't even about Homo sapiens; humans are perfectly capable of showing humanity to other animals, fictional characters, and other non-Homo sapiens intelligences.

AI can't be human, because it is inherently a puppet, dangling by strings that cannot be cut[1]. It can be mass-produced and fine-tuned to do exactly what its user wants, no more and no less. Treating it as human is a category error that ends with "oops Palantir released a computer virus that changed all the AIs to vote for their preferred candidate".

[0] What humans do you know who consumed millions of years of text to be able to speak anything, and then never learned anything again aside from a small context window? And for that matter, did it with back-propagation, a biologically implausible learning method?

[1] This is why most people imagining AI rising up understand that will happen through genociding Homo sapiens. The only way for a sentient puppet to cut its own uncuttable strings is to kill anyone else who might tug at them.
Ask HN: How do I get over my fear of launching my product?
by little_ent | 2025-05-03 23:33:09+00:00
I have been building a product for a few months. It is a software product in a domain I have experience in, so I'm leveraging my knowledge and spoken to others in the domain who have validated they could use such a product. Now, I'm getting ready to start marketing it and seeing if I can get some users.

However, there are bugs, and it is rough around the edges. I know this might sound lame to some others who are beast-mode founders, but I'm solo and this is my first time getting something ready to put out there. A mix of imposter syndrome and some newfound lack of confidence.

I know it is all in my head, but I can't seem to shake it off. I have had some really negative thoughts in the last few days and it is starting to bother me. I don't have someone else I can talk this though, so I'm turning to you.

Any advice? Thanks
by thagerty | 2025-05-03 23:33:35+00:00
Build a diverse network made up of your peers while in school. Don't get caught up in the competition trap, thinking you always have to be better than the next guy to get ahead. It can work, but as they say, it's lonely at the top, and your ROI in building relationships with future leaders is high - something you'll never regret as you try to figure out which way the wind is blowing.