MurphyA/hacker-news huggingface dataset:
by oblio | 2025-06-24 22:16:48+00:00
The bigger problem in Python has been its slowness and reliance on C dependencies.

Maven solved Java packaging circa 2005, for example. Yes, XML is verbose, but it's an implementation detail. Python still lags on many fronts, 20 years later.

An example: even now it makes 0 sense to me why virtual envs are not designed and supposed to be portable between machines with the same architecture (!). Or why venvs need to be activated with shell-variety specific code.
by __MatrixMan__ | 2025-06-24 22:17:07+00:00
I'll take a CLI over http ten times out of ten. However, I'm skeptical that that's the ideal long term interface because it gives the model too much freedom.

I want to be the one deciding which CWD to use, which user to run as, whether to see the whole filesystem or to restrict to a chroot, etc.

So far it hasn't been malicious but I've had a number of cases while using cursor where the model has gotten confused and is now editing repos outside the open workspace.

Maybe the answer is still a CLI, but I want a standardized interface for equipping that CLI with handcuffs.
by bravesoul2 | 2025-06-24 22:17:16+00:00
It's a suggestion engine. An autocomplete (I am not saying GPT is just autocomplete of course it is more advanced) but end if the day you need to verify everything it does right now. May not be true in the future though.

Search finds you sources then you can decide if you trust them. AI generates code and you have no idea if what it generated was perfect, slop or almost perfect but bad in some major way.
by StopDisinfo910 | 2025-06-24 22:17:22+00:00
> And they debunk it by pointing out that classic literary fiction is still being read

Not at all.

Classic fiction is still far out of the most sold books nowadays which is entirely non fiction. That’s in the first half of the article by the way so I might not be the one with reading comprehension issue. I can somehow excuse you because the article author constantly confuses fiction and non fiction readership and fails to comprehend what should be seen in absolute numbers and when proportion actually matters for most of the article.

To address specifically the unconvincingly point that classic sell in absolute numbers, this should be unsurprising to anyone who has gone to school: contrary to modern fiction classics are actually studied and are part of various curriculum.

The other points against the influence of internet (and television before) are equally empty and hinge on a confusion between absolute number of readers (stable) and actual readers of serious fiction (vanishing).

I have little interest in actually commenting the virtues of the article to be frank - it’s garbage. The author opinion that postmodern authors are somehow written for critics is laughable. It’s so devoid of substance. It ignores both the actual critical consensus around those books when they were written (far from universal praise) and what they contain. The rest of the arguments are barely better sadly. And let’s not talk about what the article entirely fails to address: the rise of YA, book tok, the modern fiction bestsellers from Crichton to Dan Brown, the impact of movie adaptation (ever heard of Harry Potter, yes me too).

Anyway, I was merely replying to the comment above mine.
by rstuart4133 | 2025-06-24 22:18:14+00:00
Yes, Hamas played right into Netanyahu's hands, gifting him the rational he needed to deal crippling blow to Hamas itself, and inflict untold misery on the Palestinians who elected them. Possibly they did it with Iran's encouragement but in the end, sowing the seeds of Gaza's destruction was their choice to make.

While Trump took the first step down that lead to this path of destruction, but we would not have gotten to where we are now without the enthusiastic help of a cast of cretinous politicians just like him. A pox on all their houses.
by nomel | 2025-06-24 22:18:55+00:00
I think it's because you don't maintain much python code, or use many third party libraries.

An easy way to prove that this is the norm is to take some existing code you have now, and update to the latest versions your dependencies are using, and watch everything break. You don't see a problem because those dependencies are using pinned/very restricted versions, to hide the frequency of the problem from you. You'll also see that, in their issue trackers, they've closed all sorts of version related bugs.
by asciimov | 2025-06-24 22:19:16+00:00
Maybe we have a different Google AI down here in south Texas, but the Google search AI results I receive are laughably bad.

It has made up tags for cli functions, suggested nonexistent functions with usage instructions, it’s given me operations in the wrong order, and my personal favorite it gave me a code example in the wrong language (think replying Visual Basic for C).
by moffkalast | 2025-06-24 22:19:37+00:00
Obligatory falsehoods programmers believe about time:

https://gist.github.com/timvisee/fcda9bbdff88d45cc9061606b4b...

In a nutshell if you believe anything about time, you're wrong, there is always an exception, and an exception to the exception. And then Doc Brown runs you over with the Delorean.
by ayushrodrigues | 2025-06-24 22:19:47+00:00
Adapty looks cool! Kind of similar to Revenuecat?

I think the offering is similar -- both manage entitlements and paywalls. And while we do have a proportion of users that use us for mobile apps we're pretty focused on SaaS / web.

I can imagine Adapty would go deeper on features like AB testing, paywall designing etc

Our users handle lower volume of subscriptions but require more flexibility and depth on the pricing models they want to support.
by gamerdonkey | 2025-06-24 22:19:50+00:00
The current default is that missing a rent payment can harm your credit score, but paying on time will never improve it.

https://www.experian.com/blogs/ask-experian/can-late-rent-pa...

This benefits the landlords for the reasons you outlined, and tenants must interact with the credit industry through additional (often predatory) means in order to build a credit history that may allow them to buy their own home. Further, landlords have an incentive against providing this positive feedback, as doing so makes it more likely that tenants would exit a relationship that is profitable to the landlord.
by analognoise | 2025-06-24 22:20:49+00:00
To me the "opendesk" effort looks like a lot of not-open source "licensed" software ("with less than x% closed source") and a handful of wrappers around other people's open source software (diagrams.net wrapped as cryptpad, for example). In fact they recommend the "enterprise edition" which is NOT fully open source, right?

It says all the right words and has a flashy landing page, but doesn't seem very open or impressive; am I wrong in my assessment?
by karmakaze | 2025-06-24 22:21:37+00:00
Two things that aren't really covered:

- system clock drift. Google's instances have accurate timekeeping using atomic clocks in the datacenter, and leap seconds smeared over a day. For accurate duration measurements, this may matter.

- consider how the time information is consumed. For a photo sharing site the best info to keep with each photo is a location, and local date time. Then even if some of this is missing, a New Year's Eve photo will still be close to midnight without considering its timezone or location. I had this case and opted for string representations that wouldn't automatically be adjusted. Converting it to the viewer's local time isn't useful.
by ggm | 2025-06-24 22:22:10+00:00
Thats a fair point. I think you may be right this falls on the test of public interest, where minimum seat dimensions and exit/emergency safety doesn't.

I don't personally LIKE LCC and the unbundling, I tend to believe evidence that when you are driven to LCC pricing and then factor back in the unavoidable costs it can be more expensive than the cheaper bundled product from mainlines.

Maybe the limit of regulatory control here should be "final total cost must be shown before committing" so that all taxes, airport levies, state charges, and other unavoidable costs (card processing fees?) are shown in the pricing, because I am led to believe a $99 fare can wind up $150 or more once all the unavoidable extras in that price are factored in.

Basically, I concede.
by jjcm | 2025-06-24 22:22:30+00:00
> Microsoft's decision to name this product Copilot has to be the result of some form of internal sabotage

If you look at this in isolation, yes. If you look at this historically, it's totally on-brand for Microsoft. Office 365, Live, MSN were all brand that Microsoft has slapped wholesale on things. Microsoft has always been reactive when it comes to branding, rather than proactive.
by smithkl42 | 2025-06-24 22:24:05+00:00
We're paying for Copilot for Office365. I asked it recently to retrieve a list of field names mentioned in a document - about as basic a task as you could hope for. It told me it couldn't do so.

My precise request: "Extract the list of field names in Exhibit A."

Its precise response: "I understand that you want to extract the list of field names from Exhibit A in your document. Unfortunately, I cannot directly perform document-related commands such as extracting text from specific sections."

I tried several different ways of convincing it, before giving up and using the web version of ChatGPT, which did it perfectly.

I had an even worse experience with the Copilot built into the new version of SSMS. It just won't look at the query window at all. You have to copy and paste the text of your query into the chat window ... which, like, what's the point then?
by throwaway390209 | 2025-06-24 22:24:49+00:00
Thanks for the sympathetic reply, but luckily I left the automotive industry a while ago, and I did it because of AUTOSAR. I honestly felt uncomfortable working on AUTOSAR projects, and I mean ethically, they were safety critical components I was working on and no one understood anything, being able to understand a system is a hard prerequisite to being able to sign off on it, and I could not work under those conditions with a clear conscious.

I will have to take your word on seeing projects worse than AUTOSAR ones, I have seen terrible non-AUTOSAR projects, but the only good projects I have ever seen in the automotive industry have been non-AUTOSAR ones.
by hn_throwaway_99 | 2025-06-24 22:25:29+00:00
I would argue that, at least for me, gen AI helps me learn things much faster.

E.g., like I said, previously I would have been turned off from doing some projects because I wouldn't have spent a ton of time dicking around with things that are just inefficient. Now I have gen AI create a starting point, and it's very clear to me "Ah, this is how I would use grid layout to get what I want". I can tweak things and it's very clear to me how things are working.
by zesterer | 2025-06-24 22:25:44+00:00
I think what you've identified is the "certain kinds of learning" I mention in the post.

If I want to learn about the structure of ELF binaries, I don't figure it out from first principles. I can't: the decisions that went into its design where highly specific to its history and the sensibilities of its creators, and in a modern context a lot of those decisions are near enough random. These are the sorts of things you should use specs, docs, Google, and maybe an LLM for.

What I'm talking about is, I guess, 'constructive' learning. I might not be able to build my own ELF parser through guesswork, but I probably can write a binary format of my own and a simple OS kernel to read it, given enough time. It probably won't look much like ELF, but the process of discovery that'll happen will teach me about why ELF came to be and what problems is solving, and also about the wider design space that sits around it.

My suggestion is that you should not use an LLM's help for the latter.

I like to think of it this way: if you bolted me to a chair in a room with nothing but a laptop, a text editor, and a compiler, what might I be able to create if you left me for 10 years? What couldn't I create because I wouldn't have sufficient implementation-specific information?
by Anushri_B | 2025-06-24 22:26:22+00:00
Name: Anushri Bhansali Remote: Open Willing to Relocate: Yes Technologies (Languages): Python, JavaScript, TypeScript, C/C++, SQL Frameworks & Tools: React, Node.js, Flask, PostgreSQL, MongoDB, Docker, Git, REST APIs, TVM, PyTorch, TensorFlow, Figma, JIRA, Postman, AWS (basic) Focus Areas: Full-Stack Development, AI/ML, Responsible AI, Developer Experience, UX, Data-Driven Design

LinkedIn: https://www.linkedin.com/in/anushri-bhansali/ Email: anushri.bhansali.14@gmail.com Resume: https://github.com/AnushriBhansali/Resume/blob/main/Anushri%...

Recently graduated from NC State University with a strong foundation in software engineering, user experience, and AI-driven systems; I’m passionate about creating seamless customer experiences and have contributed across the stack from building scalable backend systems to crafting intuitive, AI-driven product features that align with user needs and business goals.

With hands-on experience in both infrastructure and UX-focused roles, I bring a thoughtful, user-centered approach to problem-solving. I thrive in fast-paced environments where I can wear multiple hats and collaborate closely with cross-functional teams to drive impactful solutions.

I’m eager to connect with teams focused on solving meaningful problems — whether in early-stage startups or established organizations — and I’m ready to contribute from day one!
by AnimalMuppet | 2025-06-24 22:26:57+00:00
I dunno. I'm very much not a Trump fan, but I don't see how restricting access to "national information" would help him. And if it would, how does restricting access to one of them help him?

I could more see this as being just random action without any real purpose, or aimed at petty revenge on someone, or something.
by ggm | 2025-06-24 22:27:17+00:00
I appreciate analogous cases are often not helpful, but in the UK some institutions like the national library of scotland are so-called "copyright libraries" and they have always restricted access to people who register and declare an interest grounded in research, or some gatekeeping around legitemate need otherwise. In many instances the documents held in these institutions are both rare, and contextually unique. Like paleological holotypes their role is different to objects on display in museums and collections.

I also believe in the general public's right to see and access things which relate to government. I'm just trying to point out that whilst this probably is reactive to current affairs (cost management? risks? FUD?) there are reasons and situations outside the USA where this is normal, and I do not mean "has been normalised to disadvantage you" -I just mean that identifying who you are and why you want to do something isn't that unusual, in archive access.
by switchbak | 2025-06-24 22:27:49+00:00
Oh that's long lost to the trashbin of history. As I recall it was a combination of:

- Log4j + MDC's so we could get a timestamp and thread ID easily

- some python scripting

I can't remember if it was PDF or SVG, but I do remember having to choose something that would allow for huge graphs and lots of scrolling!

These days there's better options on github, but nice to see I was on a decent path.
by ndriscoll | 2025-06-24 22:28:38+00:00
GP isn't saying "why can't you take on top UFC fighters?" They're saying "why would you try to take on top UFC fighters?" It's exactly that one-sided battle that makes it so avoiding the engagement is necessary. A lot of effort is no doubt spent developing psychological weapons to use against me. Fortunately there are very few channels for any of them to use to reach me.
by felineflock | 2025-06-24 22:28:51+00:00
It is a new nature of abstraction, not a new level.

UP: It lets us state intent in plain language, specs, or examples. We can ask the model to invent code, tests, docs, diagrams—tasks that previously needed human translation from intention to syntax.

BUT SIDEWAYS: Generation is a probability distribution over tokens. Outputs vary with sampling temperature, seed, context length, and even with identical prompts.
by lordfrito | 2025-06-24 22:29:08+00:00
This doesn't surprise me. Here's my hot take, having worked building these kinds of ecosystems in automotive and related industries (RV), and also working with German automotive/caravan companies in those spaces.

1) They don't want to invest in building vehicle software ecosystems as it's expensive, time consuming, and not exactly in their wheel house. Wireless and cloud connectivity just aren't their language.

2) They don't want to work with existing proprietary off the shelf ecosystem solutions -- they feel that because it's "their vehicles" they should "own" the technology and IP. They don't want vendor lock in, so they avoid existing proprietary solutions they can't "take over". And by "take over" I mean "have the vendor give their proprietary stack to them for free, so they can then share it with their other suppliers".

3) They expect the vendor base to "partner" to develop "open" software stacks for free -- which most vendors aren't keen on doing as there is little upside for the vendor to spend their own internal NRE building a system that their competitors benefit from and can quickly undercut them on. They generally refuse to pay for the development of a stack that they can own and build upon.

The root cause seems to be magical thinking from the higher ups - "Hey connectivity stuff is everywhere, it can't be hard, why should we pay for this?"

They don't want to build it. They don't see the value in paying for it. So of course open source is the obvious solution. Hey, just have the nerds build it! They love doing that kind of work for free.
by esafak | 2025-06-24 22:29:08+00:00
> When SeattlePI asked Bill Gates about this particular email last week, he chuckled. “There’s not a day that I don’t send a piece of e-mail… like that piece of e-mail. That’s my job.”

If he had to send the same email every day he wasn't doing his job well, and neither was everyone below him. Even a fraction of that list is too much.
by ggm | 2025-06-24 22:29:12+00:00
Many (from a small sample set) of my google and ex-google colleagues concede that they would neither want to, nor succeed in gaining entry to google status, if they had to enter the current front door. It's a classic situation, has flavours of the Groucho Marx club thing, and "in order to save cambodia, it was necessary to bomb it"
by bonoboTP | 2025-06-24 22:29:25+00:00
> It's different but not in ways that make such interventions irrelevant e.g. why would we only care about lost sales? If copyright has been violated as a necessary means to generate new value, haven't the content creators earned this value?

Indeed the company should purchase the books. If they obtain copies in a process that violates copyright, then that's indeed a violation of copyright.

The current decision does not rule on the legality of obtaining the books without purchasing.
by linguae | 2025-06-24 22:29:39+00:00
Yup, Jony Ive was hired before Steve Jobs returned to Apple. In fact, he worked on the 20th Anniversary Macintosh, though he wasn't the sole designer. If I remember correctly, Ive was considering leaving Apple around the time Jobs returned, but Jobs and Ive ended up hitting it off, and the rest became history, as Ive's designs and Jobs' encouragement helped revitalize Apple, beginning with the iMac.
by lcnPylGDnU4H9OF | 2025-06-24 22:30:23+00:00
Realpage offers payments on their website and landlords typically pass on the service costs to their tenants in the form of a $5 “service fee” as itemized by Realpage. Compared to a $10 fee to get a cashier’s check to pay in person (because ACH is done by Realpage), you’re saving $5/mo. (Cash is generally not accepted because they don’t want to be storing cash on location.)
by fb03 | 2025-06-24 22:31:10+00:00
This. If you are running your agent loop, MCP does nothing.

MCP is an inter-process (or inter-system) communication standard, and it's extremely successful at that. But some people try to shoehorn it into a single system where it makes for a cumbersome fit, like having your service talk to itself via MCP as a subprocess just for the sake of "hey, we have MCP".

If you own your loop AND your business logic lives in the same codebase/process as your agent loop, you don't need MCP at all, period. Just use a good agent framework like PydanticAI, define your tools (and have your framework forward your docstrings/arguments into the context) and you're golden!
by dkdcio | 2025-06-24 22:32:31+00:00
I think you're looking for something like this (the important part being embeddeding a REPL call toward the end after whateve rsetup): https://gist.github.com/lostmygithubaccount/77d12d03894953bc...

You can make `--interactive` or whatever you want a CLI flag from the script. I often make these small Typer CLIs with something like that (or in this case, in another dev script like this, I have `--sql` for entering a DuckDB SQL repl)
Show HN: VSCan - Detect Malicious VSCode Extensions
by shadow-ninja | 2025-06-24 22:32:54+00:00
Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices.

I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for:

- Hidden malware and obfuscated code

- Dangerous permissions and API misuse

- Vulnerable dependencies and suspicious network connections

Users have already found hundreds of vulnerabilities in extensions. VSCan generates a clean, developer-friendly security report to help you understand what you're installing.

Try it out: https://www.vscan.dev

I have also developed custom sandboxing security architecture to restrict extensions from malicious activity during runtime. There is no existing technology that does this, so if you would be interested in trying it out or learning more, please reach out!

I would greatly appreciate any feedback and thanks for your help!

_______________________________________________________________________________

Here are some numbers as to what I have detected from a sample of 1077 extensions that are available on the Marketplace:

- 3 extensions are marked as malicious by VirusTotal - 7 extensions use malicious network connections (verified by VirusTotal) - 33 extensions have dependencies with critical vulnerabilities - 39 extensions have sensitive information (I have seen api keys, usernames, passwords, etc.) - 204 extension have poor development practices as marked by OSSF - 71 extensions have very high permissions (while not bad can be indicator of potential malicious activity)

As an example here is the link to an extension analysis with malicious network endpoints: https://vscan.dev/?analysisId=9e6c1849-3973-402b-a4ff-3b4023...
by karmakaze | 2025-06-24 22:32:59+00:00
It's very rare for me to not find a way to work well with most managers I've had. What I find the larger problem is what's lost in communication/translation going up and down the org chart. This isn't usually a problem for small or shallow orgs, or in rare cases larger orgs that have strong technical leadership. What does happen is that there's layer(s) of middle-management that's typically where technical details are lost. The best way to combat this is to have flatter structures, or isolate divisions/units. Microservices is one way of solving this communication/autonomy human problem, by forcing system interfaces to sweat the communication details.