MurphyA/hacker-news huggingface dataset:
by Veserv | 2025-05-30 18:41:12+00:00
You have presented no evidence of dishonesty to justify your claim that "this specific individual has been dishonest". The only argument you have presented is asserting the person is dishonest, therefore they must have engaged in nefarious schemes to cover their dishonesty so there is no evidence, therefore they are dishonest.

Again, show me a single video where "Cruise control will no brake. Accelerator pedal is pressed" or similar message is clearly visible at any time. In fact, show me a single video where any claimed manipulation is clearly visible. And no, "You can not see the accelerator pedal in this video, therefore I imagine they must have their foot on it it since I assume that is the only way to get the demonstrated outcomes." is not a valid example.

That argument is even further double wrong because the Tesla promoters made up that claim so much the Dawn Project improved the camera angles to show the accelerator pedal so the Tesla promoters could not keep lying about it. And no, you can not argue that increased transparency to dismiss fabricated claims about non-visible elements is reverse time-travel proof of past nefariousness. By that logic, any increase in transparency or data reporting in any field is proof of fraud which is pants-on-head stupid.

So, show any video which clearly demonstrates any claimed manipulation in the video contents themselves which allows you to be so convinced that dishonesty must have occurred. That is how we got here, right? You saw a video which obviously and directly reveals dishonesty in a way that no reasonable person could ignore?

And besides, we are not arguing about videos over 14 months old. This thread is about a linked video demonstrating FSD currently runs down child mannequins. There is no warning message on the screen, the accelerator is clear visible and not pressed. If you claim the only reason it ran down child mannequins in earlier videos is because the accelerator is pressed and indicated by that imagined message, this video demonstrates those claims to be objectively false. Unless you are arguing that it used to only run down child mannequins when the accelerator pedal was pressed, but now it has "improved" and will do it unprompted.
by overfeed | 2025-05-30 18:41:35+00:00
> Can't imagine it makes a big difference to them whether google pays out 50k or 2x 50k for high quality bugs

You're brushing over important implemention details - it's not Google running this program but a specific team inside the company that has a fixed budget, a limited headcount and doing the best with what they have.

Your argument is similar to "America has trillions in GDP and could afford to provide twice the number of free treatments to kids with cancer" - it sounds reasonable in aggregate, but breaks down in the specifics; the individual hospital systems, teams and care providers are currently working close to their limits.
by jerf | 2025-05-30 18:42:11+00:00
That's not enough for proof purposes. It allows you to build a test that deterministically tests one path, but it does not give you control over all possible tests.

In fact I seem to be a bit iconoclastic on this matter but I'm not even a fan for testing purposes. Even non-proof-based testing needs the ability to test that goroutines may execute out of order. Nothing prevents a goroutine scheduled for 2ms from now to run all the way to completion before a goroutine scheduled to run 1ms from now even starts, but AFAIK this approach doesn't let you test that case. Such logic is not valid in a multithreaded system; it is at most the most likely progression, not the only possible progression.

But since we live in the world where the question is more will anyone write a concurrency test at all, moaning about not having a perfect one is missing the point, I suppose. I won't deny a deterministic test is better than a non-deterministic test in general.
by iteria | 2025-05-30 18:43:04+00:00
Okay. Let's say everything you said was true. Why is it acceptable for white men to say, "hey, I'm being discriminated against, I would like to oppress everyone else so I can feel better" instead of what historically oppressed minorities do which is advocate for the better of their demographic even in the face of opposition.

This difference in action is why I think that people have a hard time having empathy. These said to be white men are not pushing for bettering themselves by making an equal environment, they are pushing to better themselves by knocking everyone else down. We can't say that others would do the same in their shoes because they didn't.
by sinisterMage | 2025-05-30 18:43:36+00:00
Yeah, so here’s the full story: when I first uploaded the W++ VSCode extension to the Marketplace, it took off faster than I expected — over 33,000 downloads in under 2 hours. A few days later, it was suddenly removed.

Only later did I find out it had been labeled as malware by Microsoft — no details, no warning. I emailed their support to clarify what triggered the flag, but I never got a response.

Since then, I’ve made the entire source public here, including the VSCode extension, so folks can inspect and use it freely. If anyone has experience navigating these kinds of takedowns, I’d definitely appreciate insights.
by goatlover | 2025-05-30 18:43:55+00:00
> a literal reading suggests agi is here. any claim to the negative is either homocentrism or just vibes.

Or disagreeing with your definition. AGI would need to be human-level across the board, not just chat bots. That includes robotics. Manipulating the real world is even more important for "human-level" intelligence than generating convincing and useful content. Also, there are still plenty of developers who don't think the LLMs are good enough to replace programmers yet. So not quite AGI. And the last 10% of solving a problem tends to be the hardest and takes the longest time.
by cgriswald | 2025-05-30 18:44:26+00:00
Not only is it worse, but I doubt it is even true in any meaningful sense. Even if the humans aren't 'listening in' and only the student gets the feedback directly, surely there are logs that contain at the very least metadata which a human can very much 'listen in' on and absent regulation with heavy penalties, will listen in on either individually or in aggregate and which could be hacked and sold.
Show HN: I built an open-source local vibe coding tool with Electron
by willchen | 2025-05-30 18:44:49+00:00
Hi HN -

Just wanted to share a local vibe coding tool that I created. You can download it here (free, no sign-up): https://dyad.sh/

It's open-source and on GitHub: https://github.com/dyad-sh/dyad

If you've used one of the popular vibe coding tools like lovable, v0 and bolt, but want something more flexible and without the lock-in, I think you'll like dyad.

Here's a few things that makes it different:

- Runs locally, making it fast and frictionless. Because your code lives locally, you can easily switch back and forth between Dyad and your IDE like Cursor, etc.

- Run local models using the Ollama and LM Studio integration (https://www.dyad.sh/docs/guides/ai-models/local-models), which lets you build with your favorite local LLMs.

- Free and bring-your-own API key. This means you can use your free Gemini API key and get 500 free messages/day with Gemini Flash 2.5!

Note: Dyad isn't an IDE (and not another VS code fork :) and instead is focused on people, esp. non-engineers, who want an all-in-one tool to build+preview web apps in a simple desktop UI.

If you're interested in my experience building an Electron app (e.g. the pain of code signing, cross-platform issues, weird Node.js quirks), please let me know, I'm thinking about writing a technical blog post.

I’d love any feedback about the project. Thanks!
by didroe | 2025-05-30 18:45:42+00:00
How do you know it's safe to redeploy? If your entire operation may be compromised, how can you trust the code hasn't been modified, that some information the attackers have doesn't present a further threat, or that flaws that allowed the attack aren't still present in your services? It's a large company so likely has a mess of microservices and outsourced development where no-one really understands parts of it. Also, if they get compromised again it would be a PR disaster.

They're probably having to audit everything, invest a lot of effort in additional hardening, and re-architect things to try and minimise the impact of any future attack. And via some bureaucratic organisational structure/outsourcing contract.
by MattSayar | 2025-05-30 18:46:15+00:00
Can you talk about assembly without the internet?

I fully understand your point and even agree with it to an extent. LLMs are just another layer of abstraction, like C is an abstraction for asm is an abstraction for binary is an abstraction for transistors... we all stand on the shoulders of giants. We write code to accomplish a task, not the other way around.
by nswizzle31 | 2025-05-30 18:46:44+00:00
Totally get your perspective and appreciate the thoughts. In full transparency, this idea comes directly from my experience joining a fraternity and making a group of ~10 lifelong friends that I still get together with a few times a year.

We have so little in common interest wise, but we bonded over just being in the same place repeatedly. I'm not in contact with anyone from my engineering program. That says a lot to me about shared interests as a (non-)driver of lasting friendships compared to shared EXPERIENCE, but I'm just one person.

Obviously "frat culture" has an extreme negative connotation, but I will just say that not every fraternity is full of gym bros... they exist for every type of guy and I truly think the socially awkward guys I know who joined fraternities made significantly more meaningful relationship than the cool, good-looking guys who didn't.
by dexwiz | 2025-05-30 18:46:50+00:00
> Google’s own AI Overviews feature for Search has also repeatedly made mistakes, offering poor quality and inaccurate information at times.

I see this quoted over and over, but I've literally never seen it myself. I never trust it 100%, but usually its just summarizing the top search result. If its wrong, its generally because the result is wrong, which really isn't the AI's fault.
by goatlover | 2025-05-30 18:47:08+00:00
Because we're not seeing mass unemployment from large scale automation yet. We don't see these AGIs walking around like Data. People tend to not think a chatbot is sufficient for something to be "human-level". There's clear examples from scifi what that means. Even HAL in the movie 2001: A Space Odyssey was able to act as an independent agent, controlling his environment around him even though he wasn't an android.
by overfeed | 2025-05-30 18:47:09+00:00
No matter how smart an AI is, it's going to get unplugged if it reduces profitability - the only measure of alignment corporations care about.

The AI can plot world domination or put employees in mortal danger, but as long as it increases profits, its aligned enough. Dunking on the CEO means nothing if it beings in more money.

Human CEOs and leaders up and down the corporate ladder cause a lot of harm you imagine a smart AI can do, but all is forgiven if you're bringing in buckets of money.
by chatmasta | 2025-05-30 18:47:56+00:00
The Co-Op (grocery store chain) was hacked around the same time in likely the same incident. It took three weeks for them to get food back on the shelves at my local store. I don’t understand how that’s even possible… what happened to all the meat and vegetables in the supply chain? They just stopped flowing? They rotted? Why couldn’t they use pen and paper? It’s unbelievable to me that a business would go three weeks without stocking inventory.
by thephyber | 2025-05-30 18:48:00+00:00
The myth has some truth to it.

The impact of the average Windows exploit was higher than the average Linux exploit because non-NT Windows didn’t use best practices such as multiple accounts + least privilege. And for years there were daemons on Windows that would get exploited with RCE just idling on a network (eg. Conficker).

It took Microsoft several years of being a laughing stock of security before Bill Gates made the decision to slow new feature development while the company prioritized security. Windows security then increased. I believe that was around the time that Microsoft started reusing the NT kernel in the consumer versions of Windows.

Also, the myth ignores the fact that cybersecurity risk has components of likelihood (a percentage) and impact (an absolute number, sometimes a dollar value). This conflation of two components invites lots of arguments and confusion, as commonly seen when certain CVEs are assigned non-obvious CVS scores.
by zackmorris | 2025-05-30 18:48:29+00:00
This is great!

I'd like to see a formal container security grade that works like:

1) Curate a list of all known (container) exploits 2) Run each exploit in environments of increasing security like permissions-based, jail, Docker and emulator 3) The percentage of prevented exploits would be the score from 0-100%

Under this scheme, I'd expect naive attempts at containerization with permissions and jails to score around 0%, while Docker might be above 50% and Microsandbox could potentially reach 100%.

This might satisfy some of our intuition around questions like "why not just use a jail?". Also the containers could run on a site on the open web as honeypots with cash or crypto prizes for pwning them to "prove" which containers achieve 100%.

We might also need to redefine what "secure" means, since exploits like Rowhammer and Spectre may make nearly all conventional and cloud computing insecure. Or maybe it's a moving target, like how 64 bit encryption might have once been considered secure but now we need 128 bit or higher.

Edit: the motivation behind this would be to find a container that's 100% secure without emulation, for performance and cost-savings benefits, as well as gaining insights into how to secure operating systems by containerizing their various services.
by teleforce | 2025-05-30 18:49:13+00:00
Great stuff, imagine doing radio astronomy with this more capable RFSoC SDR platform with 50% discount for academics at around USD2K [1]. It also has free textbook to go with it [2].

[1] RFSoC 4x2 Kit:

https://www.amd.com/en/corporate/university-program/aup-boar...

[2] RFSoC book:

https://www.rfsocbook.com/
by perlgeek | 2025-05-30 18:49:19+00:00
The answer to "why?" is really just "Evolution". It's not satisfying at all, but for example sleep could have been an evolutionary accident that happened to have enough upsides and little enough downsides that it persisted.

As such, it could really be like the article described that it's kinda of a mis-feature of some other neurological mechanism, and the downsides weren't big enough to be selected against.

There may also be an upside, I recently came across a study that claimed that participants that had a song stuck in their head for a longer time were more likely to hit the correct pitch when singing it. Not sure how that would translate to selective advantage though, if at all...
by paxys | 2025-05-30 18:49:33+00:00
It isn't surprising at all. There's a reason why tech companies have insanely large engineering teams even though it feels to an outsider (and inept management) that nobody is doing anything. It takes a lot of manpower and hours to keep a complex system working and up to date. Who validates the backups? Who writes the wikis? Who trains new hires? Who staffs all the on-call rotations? Who organizes disaster recovery drills? Who runs red team exercises? After the company has had repeated layoffs and fired, outsourced or otherwise pushed out all this "overhead" eventually there's no one remaining who actually understands how the system works. One small outage later, this is exactly the situation you end up in.
by wagwang | 2025-05-30 18:49:33+00:00
Pedantry, this counterfactual idea that tesla or EVs would be as big as it is in America without Musk is just absurd. The company was bought when it had like 3 people and a 250k concept car which was completely redesigned and rebuilt under Musk. The real reason why tesla is important is because it was the first one to execute big on charging networks, no other manufacturer had the balls to even conceive of a nation wide network.
by maxgrinev | 2025-05-30 18:49:59+00:00
Fair point - 'intuitive' is subjective and depends on your background. Let me explain where each technology fits: HTTP request configuration (URL, headers, parameters) is pretty intuitive and similar to Postman that most people know. Python is used mainly for response parsing - without a general-purpose language in this place it would be very limiting. Templating is mainly for variable substitution, familiar to anyone using frameworks like dbt. And SQL stays separate from Python - they're not mixed together.
by weinzierl | 2025-05-30 18:51:33+00:00
True, but there is something else we all can do to prevent cases like MinIO and all the others that cause outrage on HN every couple of weeks:

Only contribute to projects that:

1. Have a Copyleft license

2. Have no CLA and do not require copyright assignment

3. Have enough independent contributors to make relicensing practically impossible

Bonus points if the project is governed by a 501(3) (not a 501(6)).

MinIO fails point 2. Redis failed point 1. Happy to hear a good example for failing point 3. Basically a (A)GPL product that was only developed by employees.
by jaredklewis | 2025-05-30 18:51:41+00:00
Ok, but it still seems to be quite rare? I don’t live in the woods or anything and I’ve never been the victim of a “gotcha.” I’ve definitely offended people on various occasions (which I mostly felt bad about), but none of those people ever felt so strongly they tried to ruin my life over it. Nor have I ever known anyone that was “gotcha”-ed as you described.

I unfortunately have known people that have died in car crashes, which is very tragic, but I don’t refuse to drive anywhere as a result. There’s no data on this but I suspect we have far more car deaths than we do individuals who have been socially ostracized as a result of someone spinning their comments as racist/misogynistic/etc…

Basically, it seems like a bad way to run your life. “I might get hit by lightning, better not go outside.”
by goatlover | 2025-05-30 18:52:00+00:00
Can you explain how the superhuman AIs will prevent themselves from being physically disconnected from power? Or being bombed if the situation became dire enough? You need to show how they will manipulate the physical world to prevent humans from shutting them down. Definitionally is not an argument.

It is quite possible for software to be judged as superhuman at many online tasks without it being able to manipulate the physical world at a superhuman level. So far we've seen zero evidence that any of these models can prevent themselves from being shut down.
by pvg | 2025-05-30 18:52:40+00:00
If the premise behind something is bad the whole thing is bad.

Then find a thread where the premise is being discussed, if that's how you feel, or write your own post about the faults of the premise. "The premise of your whole thing is invalid" is not something you can grumpdump on someone showing their work. The, well, premise of Show HN is people showcasing their work specifically - it's not an invitation for everyone to express their views on general things they dislike.
by TrapLord_Rhodo | 2025-05-30 18:53:24+00:00
They've issued a stay. So, this is a giant nothing burger until 9 June, and then it's a giant nothing burger until it gets to the supreme court, because they can issue a stay until they've ruled on it.

Trump seems to be in control of the supreme court, so i imagine this will all end in a giant nothing burger.
by its_down_again | 2025-05-30 18:55:34+00:00
FWIW I built a streamlit app to extrapolate tribal knowledge in excel trackers into markdown wikis for vector database ingestion. Instead of uploading raw tables, it maps sheet headers to real headings to wrap each section in wiki-type format context pages. The UI lets you pick out QA sections from local files, but I’m stuck on how to persist selections and configs for repeat runs. Curious how others would tackle the issue of repeatable settings.

Code’s here: https://github.com/devin-liu/excel-to-markdown
by staticcaucasian | 2025-05-30 18:55:54+00:00
Does this actually need to be local? Since the chat bot is open to the public and I assume the course material used for RAG all on this page (https://canvas.illinois.edu/courses/54315/pages/exam-schedul...) all stays freely accessible - I clicked a few links without being a student - I assume a pre-prompted larger non-local LLM would outperform the local instance. Though, you can imagine an equivalent course with all of its content ACL-gated/'paywalled' could benefit from local RAG, I guess.
by ijk | 2025-05-30 18:56:26+00:00
Sort of, but the "experts" aren't easily divisible in a conceptually interpretable way so the naive understanding of MoE is misleading.

What you typically end up with in memory constrained environments is that the core shared layers are in fast memory (VRAM, ideally) and the rest are in slower memory (system RAM or even a fast SSD).

MoE models are typically very shallow-but-wide in comparison with the dense models, so they end up being faster than an equivalent dense model, because they're ultimately running through fewer layers each token.
by littlestymaar | 2025-05-30 18:56:29+00:00
The definition is indeed a bit a tricky question, but there's a clear difference between the reflex of protecting oneself from danger or pain and higher level behavior that show that the subject realizes its own existence (the mirror test is the most famous instance of such an effect, but it's far from the only one, and doesn't only apply to the sense of sight).
by pickleglitch | 2025-05-30 18:56:46+00:00
I think this is a myopic view of critique. A good critic helps potential consumers gauge the likelihood they will or won't enjoy a given work, and offers insights that facilitate a deeper engagement with the material. Of course one's own taste is the final arbiter of enjoyment, and of course every critic's own taste is going to flavor their criticism, but that doesn't mean they must believe their own tastes are superior, or that non-critics should take their views as objective facts, or that the whole enterprise serves no purpose for anyone other than practicing artists.

For example, if I watch a movie and don't understand it I could shrug it off and forget about it and there would be nothing wrong with that. But I could also go read critiques of the film and maybe gain an understanding which makes my interaction with the film more enriching, even if it doesn't necessarily change my overall opinion.

I think it's true that critique can never be as valuable as the work it examines, but art only becomes part of culture when it is discussed by the culture. That is what critics are doing.
by c0rleyma | 2025-05-30 18:56:52+00:00
Dremio has a Model Context Protocol (MCP) server implementation: https://www.dremio.com/dremio-mcp-server/

imho, your best bet is to align your company on using the enterprise offerings of one of the major providers (OpenAI, for example). Once you make that purchase, you can integrate your Dremio lakehouse with their tooling using the MCP approach: https://platform.openai.com/docs/guides/tools-remote-mcp