MurphyA/hacker-news huggingface dataset:
by losvedir | 2025-05-26 19:47:21+00:00
I guess I don't really get the attack. The idea seems to be that if you give your Claude an access token, despite what you tell it that it's for, Claude can be convinced to use it for anything that it's authorized for.

I think that's probably something anybody using these tools should always think. When you give a credential to an LLM, consider that it can do up to whatever that credential is allowed to do, especially if you auto-allow the LLM to make tool use calls!

But GitHub has fine-grained access tokens, so you can generate one scoped to just the repo that you're working with, and which can only access the resources it needs to. So if you use a credential like that, then the LLM can only be tricked so far. This attack wouldn't work in that case. The attack relies on the LLM having global access to your GitHub account, which is a dangerous credential to generate anyway, let alone give to Claude!
by MrJohz | 2025-05-26 19:48:15+00:00
I'm not suggesting a custom framework here, I'm suggesting no DI framework at all. No reflection, no extra configuration, no nothing, just composing classes manually using the normal structure of the language.

At some point this stops working, I agree — this isn't necessarily an infinitely scalable solution. At that point, switching to (1) is usually a fairly simple endeavour because you're already using DI, you just need to wire it together differently. But I've been surprised at the number of cases where just going without a framework altogether has been completely sufficient, and has been successful for far longer than I'd have originally expected.
by AtlasBarfed | 2025-05-26 19:49:15+00:00
The black box rooms in the telecom forms two decades ago beg to differ

What you are talking about is small fry law enforcement.

If you don't think the new has total access to the databases of the thousands of social network and advertising/data collection firms, I don't know what to tell you.

Maybe something totally encrypted, but even then there is hardware backdoors, and the NSA can simply pay an employee to legally let them in.
by alwa | 2025-05-26 19:49:17+00:00
> Is that really happening at any meaningful scale?

Anecdotally: oh yes. I don’t know anybody who pays, although that may say more about the populations I work with and hang out with.

I hear there’s plenty of headroom for the direct economics to work, if you’re reselling for less than the ~EUR100/month range the commercial providers charge [1]. Gross median income in Spain is on the order of EUR27000 annually, for reference [2]—so I’m not sure how many of the pirate viewers would be able to afford the legit product if the pirate channels dried up.

I also hear [0] there’s a robust side trade in exploiting pirate viewers’ machines though malware-style techniques while they’re there and feeling enticed to click yes to things…

[0] https://www.webroot.com/blog/2021/05/12/we-explored-the-dang...

[1] https://www.reddit.com/r/LaLiga/comments/1fksf3i/how_much_do...

[2] https://www.ine.es/dyngs/INEbase/en/operacion.htm?c=Estadist...
by DonHopkins | 2025-05-26 19:49:32+00:00
I've got that card in my wallet too, alongside my Leigh Bowery Fan Club Card and Nina Hagen Fan Club Card!

Let's hope lightning strikes again.

https://www.youtube.com/watch?v=tJdljxrvPqo

Here's "The Nomi Song" documentary of his amazing and tragically short life:

https://www.youtube.com/watch?v=W0PszBID3Lk

It covers the story behind his epic SNL performance with Joey Arias and David Bowie:

https://youtu.be/W0PszBID3Lk?t=2038

"So, to get ready for Saturday Night Live, he said to Bowie, 'Well so what are you doing, what's going to happen? Are you doing a staging, or are you doing costumes? What are you doing?'"

"And he said, 'Yeah, and they're making me this copy of a Tristan Tzara design from some performance art thing from the 30's.' So we look at this thing, and it's, it's beautiful."

https://lemodalogue.com/2017/07/31/histoire-dun-costume-dada...

Page Wood, Nomi's Art Director:

"I remember Pat Gibbons, who was Bowie's manager at the time. He comes up and he goes, 'Well you're going to have to have something. You're going to have some costumes.'"

"And he whips out a big wad of cash, and he goes, 'How much do you need?', and he starts peeling off bills. And Joey and Klaus look at him, and their eyes widen, and they look at each other, and they go, 'We're going to need shoes, too.'"

One of my favorite performances of all time, The Man Who Sold The World lyric "We must have died alone, a long long time ago." was especially poignant given Nomi's sad fate.

At 1:42 in this video, just after that tragic lyric, Blondie's keyboardist Jimmy Destri stares gothically up into the camera.

https://donhopkins.com/home/nomi/DavidBowieAndKlausNomi-TheM...

Then they did "TVC15":

https://www.davidbowieworld.nl/david-bowie-tvc-15/

>[TVC15] was inspired by an episode in which Iggy Pop, during a drug-fueled period at Bowie’s LA home, hallucinated and believed the television set was swallowing his girlfriend. Bowie developed a story of a holographic television, TVC 15. In the song, the narrator’s girlfriend crawls into the television and afterwards, the narrator desires to crawl in himself to find her.

https://donhopkins.com/home/nomi/DavidBowieAndKlausNomi-TVC1...

Finally right the end of the live performance of "Boys Keep Swinging", Bowie pulled one over on the censors by whipping out his puppet penis on live TV, and then grinning impishly!

https://donhopkins.com/home/nomi/DavidBowieAndKlausNomi-Boys...

The night David Bowie brought a nude puppet to SNL:

https://www.avclub.com/read-this-the-night-david-bowie-broug...
by zzzeek | 2025-05-26 19:49:36+00:00
So I think people who grew up in Europe surrounded by many languages have a huge language learning advantage over mono-lingual Americans. Also exercises like "get a pen and paper and learn vocab by repeatedly writing it down" this is exactly what language applications have you do, just minus the pen and paper. (I'm not a young person so I have deep familiarity with pens and paper)
by NAHWheatCracker | 2025-05-26 19:49:39+00:00
I hated performance reviews. My manager would always keep stuff vague. He tried to protect people and he didn't really observe my work. His feedback was based mostly on emails asking people what I'm good and bad at.

Every three months for 5 years, he would send me some blurb that basically said "NAHWheatCracker is a great engineer. Sometimes he's difficult to work with." We would have a one-on-one to review the performance review. I would ask about the "difficult to work with" part.

My manager wouldn't say who said what. He wouldn't discuss circumstances. He wouldn't facilitate having a discussion with whomever for specifics. It could be an issue that came up once, a chronic problem, or a minor complaint on a bad day.

I wanted something specific to improve on. It wasn't hard to make assumptions, but assumptions aren't clear. Non-clarity drives greater wedges between people. I shut down in conversations lest someone say something to my manager.

The idea of it being made more dehumanizing by having an AI slop out a performance review seems even more depressing. That said, I think bad managers will ruin this process regardless of AI. You can't get much worse than being less than useless.
by strobe | 2025-05-26 19:49:53+00:00
In most cases is enough to have emacs installed as part of OS with all required general cli tools and then open project specific shell with all project dev dependencies like compilers and libs.

However is some cases when it could be little more tricky, for instance I'm using LSP for Scala (https://scalameta.org/metals/) which on start trying to automatically detect JDK version for project from environment. So if my project depends on JDK 11 it might required for me manually start LSP from nix-shell to force it use right JVM version.

With Rust is in someway similar, I need to bring some shell with 'rust up' setup so it could install everything for rust-analyzer then emacs can use it.

Regardless emacs itself is few options to manage emacs packages in nix way but for me it not really gives anything so I just use it as on any other OS.
by kazinator | 2025-05-26 19:50:07+00:00
> The couple’s alleged crime? Disparaging emails and WhatsApp messages about their daughter’s primary school.

Well, what is the content of those e-mails?

Dear The Economist, your story is not worth the paper it isn't printed on without the goddamned specifics.

The content of those communications could well be reasonably actionable by police. Of course, those who were paid a visit by police will claim that they made nothing but some disparaging remarks.

It is an extraordinary claim that a school called the police over mere disparaging remarks, and that the police subsequently arrested someone on specific charges. Extraordinary claims require backing evidence.

A BBC story says that: "Maxie Allen and his partner Rosalind Levine, from Borehamwood, told The Times they were held for 11 hours on suspicion of harassment, malicious communications, and causing a nuisance on school property." It's possible that the school simply distorted the facts to bring about an arrest, dragging the police into it.

That same county's own PCC (Police and Crime Commissioner) made these decent statements:

"There has clearly been a fundamental breakdown in relationships between a school and parents that shouldn't have become a police matter."

and

"While people should be courteous and go through the proper channels when raising concerns about a public service, the public should be able to express their views without worrying they'll get a knock at the door from the police."

So The Economist simply made up this stuff about someone arrested over "disparaging remarks". There were allegations of harrassment and causing a nuisance. Maybe the police went a bit overboard, but they can't just ignore such allegations either. That's why the prank known as swatting works.

> Another man criticised pro-Palestine protesters, tweeting: “One step away from storming Heathrow looking for Jewish arrivals.

That sounds like a legitimate target for investigation by police; it can be reasonably interpreted as a threat to carry out some action. If that individual did storm Heathrow and cause a violent incident, and it came to light that the police had known about his plan from an online posting, they would face heat.

Nothing here but rage clickbait.
by _DeadFred_ | 2025-05-26 19:50:27+00:00
You are comparing ACTUAL recovered wage theft numbers to industry trade group estimated numbers and making claims/drawing conclusions off of two totally differently types of numbers?

Why not compare recovered to recovered, which are pretty close to each other? https://hayesinternational.com/news/annual-retail-theft-surv...

That business appears to steal as much from their workers as criminal theft rings surely is kind of a big deal (based on the matching ACTUAL recovery numbers).
by nobodyandproud | 2025-05-26 19:50:31+00:00
I’m so sorry to see this American mindset infect Europe.

As an American, I can’t realistically retire until 65.

65 is when Medicare is available.

I’d prefer Medicare started from 21 paying out-of-pocket as an option; then the payment starts slowly phasing out at 65. Not this abrupt, all-or-nothing.
Show HN: Chatfile – AI in a Textfile
by fernmyth | 2025-05-26 19:50:36+00:00
Work didn't let me paste our code into online web tools like ChatGPT. But we trust Amazon. So I built the simplest chat interface I could think of, using AWS Bedrock as a backend. Just write:

#@ hi

Save it as foo.chat, run `$ chatfile foo.chat`, and watch the AI response appear at the end of the file.

This turns out to be quite convenient! Text feels smoother in my editor than a webpage, and I can run it from a shortcut. I can prune history and retry as I like. Shell commands give the model exactly the context I choose.

I know there are other people like me on HN who demand close control over their tools. To broaden the audience, I've extended `chatfile` to use multiple model providers and sanded off some of the rough edges. I hope you find it useful!
by dahart | 2025-05-26 19:50:51+00:00
What school are you thinking of? I’ve never met someone whose CS degree consisted of intro to Python, and I’ve been interviewing people with CS degrees for a couple of decades. Mine included a year of introductory CS (basic algorithms and data structures) in Lisp, a year of advanced algorithms & data structures in C/C++, a year of OS’s and compilers in C++, a year of computer graphics, a year of hardware and CPU design, a year of theoretical CS, a year of software engineering (with a senior project), classes on discrete math, databases, networking, computer vision, and scientific visualization. I think I’m missing a bunch there too. The math & physics requirements were super useful to this day both in my CS career and in life, and the credit hours overlapped and counted for some of the gen eds, btw, which were maybe 25% of my time. The gen eds were also very useful and help shaped my thinking, I wish more programmers were into learning for learning’s sake and understood and cared about economics, government, history, art, music, etc. Strictly vocational / apprentice / work-experience education for CS would make the field generally worse not better IMO. I value my time spent in university.

If none of that is convincing, just look up the average pay of people with and without degrees. Whether or not you enjoy learning and education or feel like the time is wasted, the sad fact is that the good jobs are being given to people with degrees, by and large. I honestly thought 4 year degrees probably gave, statistically, like maybe 15% pay advantage. That would be a pretty big boost, it’s already pushing 4 years of raises for most people. However, the reality published by The Fed is that people in the US with 4 year degrees earn twice what people without degrees earn. I was blown away when I learned that. It’s probably not fair, and it doesn’t mean people with degrees are smarter or harder working than people without, but that is the surprising reality of the job market.
by tetris11 | 2025-05-26 19:50:54+00:00
I did every German module on Duolingo in a 5-month preparation for moving to Germany for my job, and I got the coveted Golden Owl to prove my proficiency...

... only for me to get to Germany and realise very early on that I would need to do a basic A1 language course.

The app was gibberish; the pronunciations were wrong, the genders were misleading, and the daily interactions they tried to drill in me were far from useful.

The overinflated proficiency instilled in me by the app, made me genuinely believe I could interact easily with a German - a delusion I was quickly and painfully made aware of, much to my chagrin.
by bigyabai | 2025-05-26 19:51:04+00:00
It's implied because it's true. Throw away the content-adressable cache index and you're back to 2 hour development velocity, so the Nix guy probably gave himself a decade and a half of runway for a workload that mostly amounts to periodically running `nix flake update` and shuffling around version hashes.

We already saw this same trend happen where "the CMake guy" or "the Xcode guy" gets wheeled in to solve their domain-specific issue in large enough orgs. I was impressed by this guy's initiative to carve out an equally indispensable niche.
by Spivak | 2025-05-26 19:52:09+00:00
Python made a choice to have default values instead of default expressions and it comes with positive and negative trade-offs. In languages like Ruby with default expressions you get the footgun the other way where calling a function with a default parameter can trigger side effects. This kind of function is fine in Python because it's unidiomatic to mutate your parameters, you do obj.mutate() not mutate(obj).

So while it's a footgun you will be writing some weird code to actually trigger it.
by rzz3 | 2025-05-26 19:52:11+00:00
So I agree they go over the top with it, _but_ I reached fluency in Spanish in about 2.5 years and Duolingo was an indispensable part of it.

> if the users aren't actually becoming proficient by using the app

Learning a language to fluency requires real commitment, and I’d say an app could never possibly do it on its own. One of the most key things Duolingo gave me was consistency and a lack of an excuse to constantly practice and learn. But you also have to (and I did) use the language daily, watch content in the target language, travel and speak with locals in the language, etc. I’m not sure where Duolingo ever claimed that it alone was enough to actually reach proficiency or fluency.

Duolingo’s gamification and streaks and leaderboards gave me a reason to put a lot of effort into learning the language, and I don’t know where I’d be without it. There’s a lot of things about Duolingo I don’t love but I’m incredibly grateful that it exists.
by refulgentis | 2025-05-26 19:52:24+00:00
> You don't have multiple choices.

The comic depicts "Netflix" -> "Netflix Amazon Apple Disney+ Hulu YouTube", and you later implicitly say there are multiple choices, but, you don't think it works well. "If we had a mandatory-licensing regime, I'd expect multiple choices would work great."

> Services couldn't survive on "Only we have The Office/Game of Thrones/Bluey" alone and would have to differentiate based on other factors like "best discovery tools" or "built to better suit your specific devices"

I'm not sure how either of those are differentiators for people selling content, rather than people coding apps.

Let's avoid that simple argument.

Let us instead assume mandatory licensing exists, which I presume means that as soon as content is released, it is a right to be able to license it, i.e. pay the content creator to have it on your service.

I have a hard time understanding how that would lead to all content being on all services - surely, this adds up to some finite sum, but is that finite sum enough to mean its trivial to license everything, so there's no differentiator anymore?

And that's before we bring in that, presumably, we have some shared understanding that it's more expensive to license, say, Bluey Game of Thrones Edition, than, idk, hmmm...Karate Kid.

Let's set all those little things aside.

A screen is a piece of glass with pixels behind. A video takes up the pixels.

Is there room to "build to better suit your specific devices"?

Can we avoid an example that ends up creating exclusive content in the process?

Let's set that aside: what are discovery tools?

Are they differentiable? Or does it boil down to "a way of presenting N choices I might like"?
by tredre3 | 2025-05-26 19:52:26+00:00
It's a common need to have an empty array be the default value to an argument. In any programming language, really. I don't know what to make of the fact that you've never seen that in the wild.

Maybe you were blessed with colleagues, for the past 14 years, that all know about how dangerous it is to do it in Python so they use workarounds? That doesn't negate the fact that it's a concern, though, does it?
by 7thaccount | 2025-05-26 19:52:35+00:00
I'm familiar with SICP and t3x. Sorry if my statements made it sound like only a genius could figure this out. I think most coders I know are just trying to solve a concrete problem with the existing building blocks. Really smart (or interested) people tend to go a bit broader and deeper. I don't think HN folks are very representative of the overall coding industry - not even close.
by Cereal | 2025-05-26 19:52:38+00:00
Hi everyone, Just for fun, I've tried to build a Python package to build a CLI application using only standard packages as dependencies.

Comments are welcome :)

P.S. The 'mustiolo' is the smallest mammal in the world, weighing about 1.2-2.5 grams as an adult. It is present in Sardinia, in the Italian, Balkan, Iberian peninsulas and in North Africa.
by sandruso | 2025-05-26 19:53:02+00:00
Can a fiber run completely isolated from others? Can you spawn multiple untrusted isolated functions?

I'm experimenting with this right now and there is no language that has sandboxing capabilities built-in. We need runtime that is capable of go-like routines that can be completely isolated. There shouldn't be need for containers/jails/seccomp et al.
by cddotdotslash | 2025-05-26 19:53:18+00:00
Wut.Dev - a "better" AWS console (https://app.wut.dev)

I got tired of using the AWS console (the UI is inconsistent across services, resource-heavy, and loaded with things I don't need)

I've built a handful of features, mostly to scratch my own itch, including:

• Multi-region mode (select 2+ regions and see all your resources on the same page)

• Automated diagrams (tree-style resource relationships)

• Easy export to CSV

• Reference matrix of AWS service/region availability

The best way to explain it is with a demo, so I built a demo version: https://app.wut.dev/?service=acm&type=certificates&demo=true
by FearNotDaniel | 2025-05-26 19:53:30+00:00
I used Duolingo maybe ten years ago to get myself up to approx A1, mid-A2 level German. Back then every new piece of grammar actually had an explanatory page that you could study before jumping in to the quiz games. As the enshittification began, they made these harder to find so that instead encountering a new linguistic concept in the quiz felt like a cruel guessing game.

For beginners to German these days, I heartily recommend the free “Nicos Weg” course from DW that goes up to B1 at least. Also has, unusually for language classes, a cast of likeable characters played by reasonably good actors carrying a consistent, building storyline throughout the lessons.
by paganel | 2025-05-26 19:53:31+00:00
But then you'd also lose the capability of making diesel engines for good, and, again, they're not used only for tanks when it comes to warfare.

Just look at the hole the US has dug for itself when it stopped producing civilian sea-ships, nowadays the cost of producing or even repairing its war-oriented sea-ships is way too high. And not only that, but it doesn't have the people with the knowhow to build those ships anymore, no matter the money thrown at the problem.
by RhysU | 2025-05-26 19:53:39+00:00
Thank you for the detailed response.

> Humans are a K-selected species - the optimal strategy for passing on our genes is to invest as many resources as possible into the smallest viable number of offspring.

It's certainly fashionable these days in the West. I don't know that I would call it optimal. Optimal now for passing along genes is probably donating at a sperm bank after getting into a regionally swanky university. A joke, of course, but notice it stacks! Certainly the donating to the sperm bank plus what you profess dominates what you profess in isolation. Since I just improved the strategy, it wasn't optimal.

> People reproduced much more when food, medicine, and housing were much more scarce.

Yet the population was smaller. You're talking per capita rates and I am not.

We successfully produce more viable adults now in absolute terms than ever before, the number of live births notwithstanding. Otherwise, global population would drop. Which it hasn't. Definitely slower growth but not shrinking: https://www.worldometers.info/world-population/#growth rate

That site says "The latest world population projections indicate that world population will reach 10 billion persons in the year 2060 and 10.2 billion in 2100."

> Humans are quite a bit different from micro-organisms

Humans increasingly inhabit inhabitable parts of the Earth with increasing density. This species-wide growth, regardless of the optimal reproductive strategy for any single individual, is like a microorganism spreading across a petri dish. We're starting to run into the edges of the dish so we're slowing down a tad. But, likely growth for at least the next 75 projected years per the above 10.2B people in 2100 projection.

Going back a step: My point is there's no end in sight for needs around housing, food, and medicine. Human beings aren't special. We consume all available resources, in part due to population growth. I did not expect population growth to be such a controversial topic. Population, it grows.