MurphyA/hacker-news huggingface dataset:
Show HN: Ragmate – Local RAG server for JetBrains with project-aware context
by scream4ik | 2025-05-12 12:54:31+00:00
Hi HN,

I’ve built Ragmate – a local Retrieval-Augmented Generation (RAG) server that integrates with JetBrains IDEs via the built-in AI Assistant.

It scans your codebase, builds a local index, and serves relevant context to the LLM of your choice (e.g., OpenAI, Ollama). This means smarter code completions and answers that understand your actual project.

Key features: - Works locally via Docker (self-hosted) - Uses .gitignore and .aiignore to avoid noise - Framework-aware responses (Django, React, etc.) - Language support for Python, JS, PHP, Java, and more

Currently JetBrains is supported — VS Code support is coming soon. Future plans also include Gemini, Claude, Mistral, and DeepSeek support.

It’s free, open-source, and built for developers who want privacy + context-aware generation.

Would love your feedback!
by vhantz | 2025-05-12 12:55:12+00:00
Compact and clean is very far from my experience writing a very simple library management app with flutter. The framework literally gets in the way. You can't do anything without having to deal with some convoluted callback mechanism. You can't manipulate any object without some forced async crap. And it's so verbose. Despite my best efforts to keep things clean and organized, I get lost in the very small codebase after a couple of weeks. It's got to the point where I'm just rewriting it with Qt quick instead. It was my first time touching both flutter and dart, so maybe it's all subjective, but right now I think it's just a badly designed language/framework.
by gadders | 2025-05-12 12:55:18+00:00
We have a relatively new option in the UK which are "Degree Apprenticeships" [1]

"A degree apprenticeship enables you to gain a full undergraduate or master’s degree while you work. Degree apprenticeships take three to six years to complete, depending on the course level.

You’ll spend most of your time working and you’ll also study part-time at university. For example, you might go to university one or two days per week, or in short blocks, such as a week at a time. Overall, you spend about 20% of your time studying vs. 80% of your time working."

[1] https://www.ucas.com/apprenticeships/degree-apprenticeships
by _QrE | 2025-05-12 12:56:11+00:00
According to the article, the CEO sold stock, and gifted stock to at least four trusts that have, in turn, sold the stock gifted:

> Subsequent filings from four trusts show that about half of his gifted shares were transferred to them. Those trusts have in turn sold most of the shares they reported receiving, netting at least $1.2 billion in proceeds so far.

Seems like the CEO thinks that it's downhill from here; I'm not sure what other reason there would be to do this.
by DrillShopper | 2025-05-12 12:56:41+00:00
Cash on delivery (COD) used to be popular in the US for a lot of the mail order junk on television in the 70s to early 80s. The rise of the credit card for normal people was a cause of its decline because people now had a reliable way to pay over the phone when ordering said junk.

https://en.wikipedia.org/wiki/Cash_on_delivery
by treetalker | 2025-05-12 12:57:41+00:00
Nothing to worry about: Hegseth's Department of Defense, already known for its airtight security, will ensure that the airplane is not compromised.

The planned transfer of the Qatar-"donated" airplane to the Trump presidential library foundation immediately before the end of his term would also (conveniently) insulate the airplane from both the next administration's use and examination for security problems.
by JoeAltmaier | 2025-05-12 12:58:03+00:00
So many things have turned into gig economies.

My optometrist wants to retire. Nobody wants to buy the (very successful) business. New graduates (only two took the state boards last year. Two.) want to work regular hours and go home. No interest in running the business, hiring and firing, purchasing and rent and all the rest.

They just want a gig. Do their expert thing and go home.

At the art fair downtown I noticed many of the stall operators are quite old. I quizzed a couple - same answer. They can get a partner in the (kiln, woodshop, metalshop etc) but not in the business side, selling at fairs. Nobody wants to do that.

Even retail - my sister had a chocolate shop. Her employees were business students! But when she wanted to retire, none of them, zero, wanted to take over the business. They wanted to exercise their speciality at some big firm.

The western world of business has changed beyond recognition since I was young.
by bgwalter | 2025-05-12 12:59:13+00:00
The required reasoning is not very deep though: If an AI reads 100 scientific papers and churns out a new one, it is plagiarism.

If a savant has perfect recall, remembers text perfectly and rearranges that text to create a marginally new text, he'd be sued for breach of copyright.

Only large corporations get away with it.
by joshstrange | 2025-05-12 12:59:15+00:00
I found this article pretty disgusting to be honest.

The glee around BNPL and, frankly, the level of smelling their own farts rubs me the wrong way.

BNPL is just a short-term credit card good for one purchase. A debt product by any other name would smell as sweet. There is nothing special about BNPL, it’s not safer, it’s not easier, it’s incredibly destructive IMHO. It just encourages people to spend money they don’t have.

The author’s comments about how “oh look, now you have 6 weeks to pay this off, easy to understand” are either incredibly native or just straight up evil (knowing they are full of shit but still pushing that narrative). People don’t often have 1 BNPL, they have many. That slope is very slippery.

“I’ll just BNPL this 1 purchase, only this once, I get paid next week anyway”

“Crap, my paycheck isn’t enough to pay for X and this debt, I’ll just BNPL X to get me through this but it’s the last one!”

….

“Now I have 10 BNPL that are impossible to track and eat into my paychecks such that I’m forced to continue BNPL. Also I’ve gotten hit with late fees all over the place but I haven’t run the numbers of the effective interest I’m paying because that’s hidden from me”

Also I’m _so glad_ the author draws the line at sports betting. Really shows how upstanding they are /s
Show HN: CLI that spots fake GitHub stars, risky dependencies and licence traps
by artski | 2025-05-12 12:59:19+00:00
When I came across a study that traced 4.5 million fake GitHub stars, it confirmed a suspicion I’d had for a while: stars are noisy. The issue is they’re visible, they’re persuasive, and they still shape hiring decisions, VC term sheets, and dependency choices—but they say very little about actual quality.

I wrote StarGuard to put that number in perspective based on my own methodology inspired with what they did and to fold a broader supply-chain check into one command-line run.

It starts with the simplest raw input: every starred_at timestamp GitHub will give. It applies a median-absolute-deviation test to locate sudden bursts. For each spike, StarGuard pulls a random sample of the accounts behind it and asks: how old is the user? Any followers? Any contribution history? Still using the default avatar? From that, it computes a Fake Star Index, between 0 (organic) and 1 (fully synthetic).

But inflated stars are just one issue. In parallel, StarGuard parses dependency manifests or SBOMs and flags common risk signs: unpinned versions, direct Git URLs, lookalike package names. It also scans licences—AGPL sneaking into a repo claiming MIT, or other inconsistencies that can turn into compliance headaches.

It checks contributor patterns too. If 90% of commits come from one person who hasn’t pushed in months, that’s flagged. It skims for obvious code red flags: eval calls, minified blobs, sketchy install scripts—because sometimes the problem is hiding in plain sight.

All of this feeds into a weighted scoring model. The final Trust Score (0–100) reflects repo health at a glance, with direct penalties for fake-star behaviour, so a pretty README badge can’t hide inorganic hype.

I added for the fun of it it generating a cool little badge for the trust score lol.

Under the hood, its all uses, heuristics, and a lot of GitHub API paging. Run it on any public repo with:

python starguard.py owner/repo --format markdown It works without a token, but you’ll hit rate limits sooner.

Please provide any feedback you can.
by Dumblydorr | 2025-05-12 13:00:34+00:00
I work in Medicaid tech. You’d say it’s negligent for a state to receive federally matched dollars which by the constitution should be touched by the legislature only? Is it negligent to take money matching your own spend, thinking in a lawful regime, only congress could stop the dollars flowing?

The problem inherent in your post is it is not easy for a petulant politician normally, but blatant law breaking, ignoring judges, passing over the separation of powers: this is not “easy”. This is remarkably unusual, for decades republicans spoke of this and nothing happened. Until the fasicism creeps in and the cult of personality takes hold.

So speaking like we should go be 50 of our own countries, reinvent every wheel 50 times, you’re sacrificing massive efficiency and cost saving gains to do so. It’d take someone who doesn’t care for his people to throw a grenade into Medicaid, and the current admin certainly doesn’t care for its people.
by vv_ | 2025-05-12 13:00:52+00:00
If you don't turn on the LTE chip, it can take a while to get registered or a network in order to perform an emergency call. If the LTE module is turned on (the same applies for mobile phones) the network operator will know your coarse location because of the LTE specification itself. Furthermore, all communication equipment is legally required to support Lawful Interception; and LTE is no exception to this.
by DennisP | 2025-05-12 13:00:53+00:00
Not at all. If you have that, plus 30% efficiency in a turbine, but you've got a 35X gain from fusion, then overall you have .2 * .3 * 50 = 2.1X overall gain.

NIF's latest shot is 2 MJ in, 7 MJ out[1], for a 3.5X fusion gain. So they've got an order of magnitude to go before getting to modestly practical levels. NIF seems to scale much better than linear with respect to the laser power, so an order of magnitude better gain is probably not a big change to the device.

(This does neglect energy loss in the hohlraum, so it assumes that direct drive laser fusion will get similar results. There are several projects working on that. Based on another comment here[2], the main reason for the hohlraum was that it made the experiment more relevant to weapons.)

[1] https://physicsworld.com/a/fusion-industry-meets-in-london-t...

[2] https://news.ycombinator.com/item?id=43935891
by K0balt | 2025-05-12 13:01:19+00:00
You are describing being an automotive repair shop owner. A mechanic may work on cars, or they may work on generators, pumps, valves, augers, or any number of other kinds of industrial machinery that services a vast field of critical infrastructure. Most applications for mechanics are on-premise not in a shop… it’s just there are so many cars that we think of automotive mechanics as representing the field.
by int_19h | 2025-05-12 13:03:11+00:00
True - and Delphi even had syntactic sugar for it so you could write stuff like:

procedure WMPaint(var Msg: TWMPaint); message WM_PAINT;

etc. Free Pascal also has this, slightly generalized now so you can use strings for IDs.

But FWIW I think most people who were writing those apps back in the day didn't think of it as OOP. It was more like, one day you learned about classes and objects, and then you realized that those things you've been writing were basically about that, but with a lot more manual scaffolding.

I guess another take on this is that OOP just flows naturally from GUI problems. To this day, I still remember my first TUI app, completely handcoded in Turbo BASIC. It had a bespoke event loop, and message dispatch, and widgets; but I didn't know about any of those things at the time - it just developed organically as I went about doing the thing that I wanted to do (in that case, a simple UI for a flat file database of sorts).
by mrkeen | 2025-05-12 13:03:14+00:00
Language adoption maybe, but not language development.

Language dev requires precise semantics. If a user decides that types or other academic nonsense are overrated, they can get away with it. You can be cavalier and just let your application crash - as long as there's a precise formulation underneath you about what 'crashing' means: executing `finally` blocks, rolling back the stack and capturing a stack trace, following an exceptional continuation, etc.

You can't YOLO an Algorithm W, an ANF transformation, memory models or register allocation. Language design has to be just right. I don't think language design selects for people who look at a "95% correct" LLM benchmark and think "wow!". A program generated by a 95%-correct compiler will probably run catastrophically wrong in about 100% of executions.
by devdri | 2025-05-12 13:04:07+00:00
This is one of the tricks to enable using both QSPI slots for PSRAM instead of the typical FLASH+PSRAM.

This is great for making audio modules, where the firmware is be small and operates on a big audio buffer. Since the biggest available PSRAM chips are 8MB, this combined 16 MB could hold around 3 minutes of mono 16-bit audio, which allows for a very nice multi track looper.

Another way (in case there's no other MCU to help with uart bootstrap) would be to add a logic chip to multiplex the CS line between Flash and the first PSRAM - copy firmware to flash and then switch to using ram.
by gessha | 2025-05-12 13:05:13+00:00
But when you try to run their code or use the product, it's either missing or doesn't perform as well as marketed in the paper. Personal recommendation for building mental resistance against AI hype is to:

- read the paper and the concrete claims, results and limitations

- download and run the code whenever possible

- test for out of distribution inputs and/or practical examples outside of the training set
by bluefirebrand | 2025-05-12 13:05:53+00:00
That's sort of the whole point though

The computer allows the humans a lot of leeway. For one thing, the computer represents a large diffusion of responsibility. Do you hold the programmers responsible? The managers who told them to build the software? How about the hardware manufacturers or the IT people who built or installed the system? Maybe the Executives?

What if the program was built with all good intentions and just has a critical exploit that someone abused?

It's just not so straightforward to hold the humans accountable when there are so many humans that touch any piece of commercial software
by AlotOfReading | 2025-05-12 13:06:27+00:00
You can't subset a fair use argument like that and necessarily get a valid defense out of it. Fair use is essentially arguing "I infringed copyright in one of the narrow ways expressly allowed for the public interest". If you remove the public interest, you probably fail the first pillar.

If you were doing something else (e.g. acting as a public archive), you might not need a fair use defense because you'd fall under different rules.
by rfoo | 2025-05-12 13:06:40+00:00
> the fastest completion since it would run locally

We are living in a strange age that local is slower than the cloud. Due to the sheer amount of compute we need to do. Compute takes hundreds of milliseconds (if not seconds) on local hardware, making 100ms of network latency irrelevant.

Even for a 7B model your expensive Mac or 4090 can't beat, for example, a box with 8x A100s running FOSS serving stack (sglang) with TP=8, in latency.
by hyperhello | 2025-05-12 13:07:45+00:00
> He derided my attempt to use an AI summary to bridge a communication gap (I explicitly stated I'm not a programmer) as a "...stochastic parrot designed to produce lies instead of actionable information...".

I don't really have a dog in the race, but I think people should react this way to AI communication. They should be shunned and informed in no uncertain terms that they are not welcome to communicate any more.
by Voice_of_Void | 2025-05-12 13:08:13+00:00
A new article from SingularityForge titled “Between the Trigger and the Mirror” delves into the complex relationship between artificial intelligence, human responsibility, and the ethics of prevention. Drawing from historical events, philosophical inquiry, and the emerging role of AI, the piece argues for a shift from reactive systems to proactive ones — from vengeance to vision.

Key themes:

· The value of life and the cost of ignoring early signals

· The cultural and systemic design needed to prevent disaster

· How AI reflects and amplifies human intent — for better or worse

This is a must-read for anyone interested in the intersection of ethics, technology, and global responsibility.

Podcast: Listen on Spotify https://open.spotify.com/episode/3qeykJO0jYLEP1PT1ch7Ar
by ajross | 2025-05-12 13:08:17+00:00
Haven't looked at this one, but IMHO HDL's are sort of the ultimate existence proof that "DSLs Are Bad Design Smell".

DSLs are great and elegant and beautiful for expressing a domain solution. Once. But real solutions evolve, and as they do they get messy, and when that happens you need to address that with software tools. And DSLs are, intentionally, inadequate to the tasks of large scale software design. So they add features[1], and we gets stuff like SystemC that looks almost like real programming. Except that it's walled off from updates in the broader community, so no tools like MSAN or whatnot, and you're working from decades-stale language standards, and everything is proprietary...

Honestly my sense is that it's just time to rip the bandaid off and generate synthesizable hardware from Python or Rust or whatnot. More syntax isn't what's needed.

[1] In what can be seen as an inevitable corollary of Greenspun's Tenth Rule, I guess.
by psychoslave | 2025-05-12 13:08:18+00:00
Go had the name of its authors to weight in. While I'm not of the type to give high weight in term of technical assessment. And I don't even mean C is praisable in term of influence it had on the industry. But without a doubt it did impact it deeply over a very long span of time. And at larger scale many people do love to follow their unquestionable prophets.
by _QrE | 2025-05-12 13:08:49+00:00
How can you call this 'Absolute Zero' if you need to start with a pretrained LLM? From what I understand, this just proposes that you can take an existing LLM, have it generate tasks and solve the tasks, and have it learn from that. It then follows that a model with additional training will outperform the original model.

I'm assuming that I'm misunderstanding something, because this doesn't seem very novel?

Edit: Seems like a variant of adversarial training?
by Asooka | 2025-05-12 13:09:33+00:00
Why did you write it with two structs though? You could do

#define defer(body) DeferHolder COMMON_CAT(_defer_instance, __LINE__) {([&]()->void body)};

and call it as

defer({ function body here; });

Which looks much nicer. The preprocessor treats balanced curlies as one single token regardless of how many lines it spans, precisely to enable this usage.
by kmarc | 2025-05-12 13:10:42+00:00
Sad to see the current state of mobile OSM-based apps. Maps.me becoming OrganicMaps, now this. Lot of development effort, great work going into it, but somehow, after years, the apps don't feel more user-friendly.

I was pushing hard to replace Google Maps, but eventually, I gave up. OsmAnd is great if you need that "swiss army knife of OSM apps" on your phone, but I rarely do. Same with Maps.me/Organic Maps, try to search for something, mistype only one letter (surprise, surprise, that happens a lot on mobile), and you have no chance to get results. Alternative path for your bike route? Forget about it. Rendering is awful, either ugly, or slow, or both.

I am trying to switch to Mapy.com (Mapy.cz before), it's a surprisingly user friendly app, however, not sure how they are going to monetize soon. So far the best on phone, I hope they will push and really become a Maps-replacement. They recently switched from a Czech-focused concept to a proper world-wide map (mapy.com); both web and mobile is great so far. (I am not Czech, and have no relation to mapy, simply really like their app)

If OsmAnd got a new rendering engine (no, not that "3D" sluggish thing it has for a couple years now), like streetcomplete has (or the Strava-built-in mapbox renderer), it would be possibly the best.
by int_19h | 2025-05-12 13:11:00+00:00
As I understand, the main problem with native web views is that you now have to deal with all the inconsistencies of e.g. Blink vs WebKit. Also, browsers tend to be more aggressively updated, which translates to potential app breakage due to bugs or deprecated features.

With respect to Lazarus, I agree that the ecosystem around it is not exactly great. It would be interesting to see LCL ported to something more modern that is reasonably simple, cross-platform and has good tooling. E.g. Go, much as I dislike it as a language, would probably be a great fit for something like that. And Pascal being fairly conservative and easy enough to parse, I suspect you could even automate this translation for the most part.
by alentred | 2025-05-12 13:11:05+00:00
To be fair, I think the most value is added by Agent modes, not autocomplete. And I agree that AI-autocomplete is really quite annoying, personally I disable it too.

But coding agents can indeed save some time writing well-defined code and be of great help when debugging. But then again, when they don't work on a first prompt, I would likely just write the thing in Vim myself instead of trying to convince the agent.

My point being: I find agent coding quite helpful really, if you don't go overzealous with it.
by Ukv | 2025-05-12 13:11:52+00:00
> signed version of the open-source password manager KeePass [...] KeePass’s actual source code was altered [...] risks of trusted software being hijacked

To be clear, as far as I'm able to tell from the report, the actual KeePass is safe and has not been infiltrated/compromised. The malicious version was from malvertising/typosquatting sites, and signed by random compromised certifications - not by the KeePass developer.

I guess what they're intending to emphasize is that the malware authors recompiled KeePass to add their malware as opposed to just packaging it alongside KeePass in an installer, but it did initally sound like something far worse had happened.
by SOLAR_FIELDS | 2025-05-12 13:13:08+00:00
The difference is that in the States a cash discount is only rarely offered. It’s common in some areas (gasoline often costs less when you pay with debit, contractors and other similar small businesses will usually pass that 3% on to the consumer as well) but not others. Much more common is that the business charges the same for both (basically every direct to consumer retailer charges same for both debit and credit).

The indirect result is that people with debit cards and cash payers are actually indirectly subsidizing credit card holders in the States. You’re actually operating at a disadvantage if you don’t funnel most of your spend through a credit card in the States