MurphyA/hacker-news huggingface dataset:
by unoti | 2025-06-04 21:24:19+00:00
> Is it enough to play Human Resource Machine!?

That is fun. But this one truly is enough: Turing Complete. You start with boolean logic gates and progressively work your way up to building your own processor, create your own assembly language, and use it to do things like solve mazes and more. Super duper fun

https://store.steampowered.com/app/1444480/Turing_Complete/
by dml2135 | 2025-06-04 21:25:12+00:00
> Because the only thing people do on a Nintendo Switch is game.

Well, this becomes a bit of a circular argument, but certainly part of the reason for that is the only thing one can do on a Nintendo Switch is game, due to its restrictive software.

And, strictly speaking, this statement is false. The only thing most people do on a Nintendo Switch is play games, but there is a subset of people that hack their switches and install things like Android TV. The thing is basically just an Nvidea Shield, hardware-wise. Not being able to do everything an Nvidea Shield can do is a software restriction.

I do see your point re: Apple's ambitions being far vaster than Nintendo's. But in terms of controlling their own markets, they are still seeking similar levels of control.
by paxys | 2025-06-04 21:25:44+00:00
> Most users don't know what's running on localhost or on their local network, so they won't understand the risk.

Yes, which is why they also won't understand when the browser asks if you'd like to allow the site to visit http://localhost:3146 vs http://localhost:8089. A sensible permission message ("allow this site to access resources on your local network") is better than technical mumbo jumbo which will make them just click "yes" in confusion.
by xp84 | 2025-06-04 21:25:57+00:00
#1 use case would be a password manager. It would be best if the browser plugin part can ping say, the 1password native app, which runs locally on your pc, and say "Yo I need a password for google.com" - then the native app springs into action, prompts for biometrics, locates the password or offers the user to choose, then returns it directly to the browser for filling.

Sure you can make a fully cloud-reliant PW manager, which has to have your key stored in the browser and fetch your vault from the server, but a lot of us like having that information never have to leave our computers.
by gbacon | 2025-06-04 21:26:51+00:00
Your intuition about starting and ending with the same symbol is correct. This is a good example of why the unbounded memory rule of thumb is not perfect.

The NFA you described recognizes

(01)* ∪ (10)*

All strings in the above language will begin and end with different symbols and have only even lengths. (Balanced means not only equal in number but that they nest properly, e.g., )()()( and ())( have equal numbers of left- and right-parentheses but not in balance.) The empty string ε does belong to the language, and your NFA — but not your regular expression — correctly accepts it. The language from Sipser’s lecture has strings of odd length as well, the shortest being 0 and 1 that an equal number (namely, zero) of 01 and 10 substrings.

Your regular expression is close. It looks like HN’s markdown formatting ate your Kleene stars. Always account for the empty string, and in your case it does need to appear explicitly.

ε ∪ 0 ∪ 1 ∪ 0(0 ∪ 1)*0 ∪ 1(0 ∪ 1)*1

Because this is a simple enough language, I suggest building a DFA rather than an NFA. You know that your automaton will have two branches: one for strings beginning with 0 and the other for those that begin with 1. That accounts for three states so far, and your initial state q0 has both of its transitions defined. Let’s say that q1 is the state after reading the initial 0. (Remember that you can interpret each state in a finite automaton’s transition graph as “I have read …”) When you’re in q1 and read a 0, where do you go? When you’re in q1 and read a 1, where do you go? You’ll know you completed this branch when you have defined 0 and 1 transitions for all its states. Then move on to completing the branch for strings that begin with 1. The intuition is it ought to have similar structure to the first branch. Finally, label your final or accept states. Always remember to account for the empty string!

What’s really interesting is the NFA you defined has, after conversion to DFA and minimization, almost the same structure as the correct DFA: the only difference is which are accept states.
by kccqzy | 2025-06-04 21:27:09+00:00
> but if you're inside our network perimeter and you look up their name, you get a private IP address and you have to use this IP address to talk to them

In the linked article using the wrong DNS results in inaccessibility. GeoDNS is merely a performance concern. Big difference.

> why would I want my private hosts

Inaccessibility is different. We are talking about accessible hosts requiring different IP addresses to be accessed in different networks.
by sveinatle | 2025-06-04 21:27:29+00:00
I remember being blown away by a TED talk were "minimum snap trajectories" are planned for quadcopters to fly through hoops and slots.

It's really cool to see this happening fully autonomously and at such high speed. I wonder if the use of AI means that the approach is fundamentally different, or if it uses the same principle of minimizing snap?

https://www.ted.com/talks/vijay_kumar_robots_that_fly_and_co...
by fc417fc802 | 2025-06-04 21:28:20+00:00
Is it not self evident? A subject doesn't have to be particularly difficult to impact how you think. Being exposed to algebra provides you with new ways of looking at the relations between things. Being exposed to even basic world history gives you perspective that you wouldn't otherwise have had about society at large. I've observed the effect in both myself and those around me to the extent that it appears self evident to me.

Unfortunately any of the obvious metrics you might use to quantify this would seem to be hopelessly biased. The more advanced the degree someone holds the farther above average that individual tends to be in various ways. I doubt it would be possible to control for such large cross correlations.

Perhaps asking people who learn multiple languages could provide subjective evidence since that doesn't have nearly as much of a correlation with other abilities.
by hu3 | 2025-06-04 21:28:26+00:00
Same for VSCode which is ubiquitous and offers free Github Copilot quotas with SoTA models, for 6 months now:

https://code.visualstudio.com/blogs/2024/12/18/free-github-c...

Mistral needs to realize they don't stand a chance against AI giants that are giving out stuff for free or nearly free.
by bluGill | 2025-06-04 21:28:26+00:00
250k for a single mold if they don't have drawings of the final size of the last is reasonable - high but reasonable. Building molds is still a lot of trial and error that CAD cannot help with. Plus time for one off on an assemble line is not cheap since it is often half an hour of nobody in the factory working except the two people switching out the mold. once you have a mold you can make thousands and so the cost ammortizes out if you need that many.

my company has looked into spending billions for a chip fad of obsolete processes just to get some no longer in prodction parts. So far not worth it.
by ordinaryradical | 2025-06-04 21:28:33+00:00
You’ve been hearing it’s eminent because most of Chinese history has played out this way and the Chinese world view sees government as dynastic and cyclical as opposed to progressive or something else.

It’s plausible because it’s culturally coherent but that does not necessitate it. Communism could have easily been too alien to succeed but Mao made it contextual, so it unified the society instead.

The way I look at it, every government has an existential risk of getting out of sync with its host culture. When that happens, the system breaks and you get an irruption—revolution, civil war, Balkanization; is the current Chinese system and its overall direction compatible with its cultural inheritance? The degree of that answer is the degree of risk.
by LegionMammal978 | 2025-06-04 21:28:40+00:00
The idea is, the malicious actor would use a 'simple request' that doesn't need a preflight (basically, a GET or POST request with form data or plain text), and manage to construct a payload that exploits the target device. But I have yet to see a realistic example of such a payload (the paper I read about the idea only vaguely pointed at the existence of polyglot payloads).
by xp84 | 2025-06-04 21:28:52+00:00
Either way they'll click "yes" as long as the attacker site properly primes them for it.

For instance, on the phishing site they clicked on from an email, they'll first be prompted like:

"Chase need to verify your Local Network identity to keep your account details safe. Please ensure that you click "Yes" on the following screen to confirm your identity and access account."

Yes, that's meaningless gibberish but most people would say:

• "Not sure what that means..."

• "I DO want to access my account, though."
by Aloisius | 2025-06-04 21:29:09+00:00
You mean the guy the administration smeared as an ineffective, incontinent drug addict and who had to duck out because of the harm to his companies? The guy who promised trillions in cuts an managed to deliver almost none? The guy who is now railing against the budget bill and being ignored by those actually in power?

His power is nothing compared to actual oligarchs in real oligarchies in history. The Thirty Tyrants could pass laws, sit in judgement and execute anyone they wanted for any reason (and did). They controlled every aspect of Athens. Musk got some people to retire early, got some people fired (often temporarily), was overruled by the judiciary and the administration regularly and was generally ineffectual.

Calling him an oligarch is extreme hyperbole.
by guywithahat | 2025-06-04 21:29:43+00:00
My understanding was you could have to pay 500 a day (inflation adjusted to ~600) for each day you're late. That's a quarter million after a little over a year.

When I last incorporated with stripe atlas they told me I had to do it, although maybe they just wanted an extra fee. Either way I maintain this sort of thing adds complexity and makes it hard for people to start businesses who are experts in things other than incorporation law
by BrandonSmith | 2025-06-04 21:29:55+00:00
I tend to copy Markdown content from other sources into Apple Notes. Being able to paste into Notes and have it format in the view is a big win.

It is possible reporting is getting this wrong and the Markdown feature and it is just to serve use case above. As an example, Google Docs recently enabled "Paste from Markdown" that also is a huge convenience.
by bitwize | 2025-06-04 21:30:09+00:00
Machine code ceased to be scary, or at least mysterious, to me when I opened the rudimentary debugger on a TRS-80. It was really more of a monitor, and it showed the contents of a certain chunk of memory in the top half of the screen. I loaded a program I was working on into it, and began changing instructions in memory, using the assembler output as my guide, and jumping into the program to see what the effects were. After that the little lightbulb went off. Oh, these are just bytes in memory that correspond to CPU instructions, and the CPU just reads them off and executes the instructions.
Show HN: Glue is thread-first team chat with MCP support
by kainosnoema | 2025-06-04 21:30:14+00:00
Glue is team chat optimized for AI. Today we're releasing support for MCP tools right in your Glue team conversations. Just like MCP in Cursor or Windsurf, you can now use any tool in a private AI chat or any Glue team thread while pulling in its full context to help. Using team chat context for MCP is kind of game-changing, letting you do anything from creating a calendar event or Linear issue to looking up data from an internal system. Our team has been using MCP tools as part of core team workflows for a few weeks now, and it's fantastic.

We're particularly fans of remote-hosted MCP servers with OAuth support, such as Linear's, which are a breeze to setup and use. I personally feel like this approach will be the preferred way to use MCP in the near future, and we're hoping to see many more soon.

Along with MCP support, we're creating a new Glue "Labs" feature category. Labs features are available to everyone, with the understanding that these features are in active development and will be improving rapidly as you give us feedback.

If you haven't tried Glue yet, now is a great time to do so—sign up, invite your team, and get everyone (even the non-devs!), using MCP to accelerate their daily workflows.
by novosel | 2025-06-04 21:30:17+00:00
I agree, Dasher is a beautiful piece of software design.

I am ok with the long-form reply. We are all sentient, one can scan for the information or insights that are valuable to him/her. On the other hand, I dislike when information is withheld from me.

I was researching different input methods, and stumbled upon Dasher. What I like the most is:

- the fact that I can write with one hand (like with a fountain pen, remember those?) - right edge of the interface is literally The Library of Babel of J. L. Borges
by thuanao | 2025-06-04 21:30:37+00:00
In my experience the paper forms are so much easier and more reliable than using tax software. A pen and a form just works. No account logins and passwords, no janky UI, no advertisements, no issues saving your progress... The instructions are much better too. Each box is numbered and there's an instruction manual detailing what to put in that box. If you make mistakes the IRS will simply correct you.
by rvz | 2025-06-04 21:31:17+00:00
> Because at competent companies juniors and mid-level employees aren't just cranking out code, they're developing an understanding of the domain and system.

So many companies like Microsoft, Meta, Salesforce and Google (who are actively using AI just did layoffs) are some how not 'competent companies' because they believe with AI they can do more with less engineers and employees?

> This doesn't make any sense. I asked ChatGPT and it couldn't parse it either.

Made total sense for the companies I mentioned above, who just did layoffs based on 'streamlining operations' and 'effciency gains' with AI just this year (and beat their earnings estimates).

> This much is true but tech salary inflation was, again, largely a ZIRP phenomenon and has nothing to do with AI. Junior developers were never really worth $150k/year right out of university.

It's more than just that, including an increasing over-supply of software engineers in general and lots of them with highly inflated salaries regardless of rank. The point is that it wasn't sustainable in the first place and roles in the junior to mid-level will see a reduction of salaries and jobs.

Once again, knowledge workers still have a lot more to lose, rather than gain if they don't use AI.
by saulpw | 2025-06-04 21:31:25+00:00
Because you don't just hurt, you suffer. Across the spiritual spectrum people report that "enlightenment" brings a radical reduction or elimination of self-inflicted suffering, and a profound inner peace. This jives with my limited experience of it as well.

Someone kicks you in the shin, it causes pain. If it triggers a whole internal loop of fear and worry and anger and revenge and trauma and suffering, then you've hit upon your ego which you're unable to let go of. If your internal experience isn't sticky, then before you know it, the pain has dissipated and you're on to whatever the next present moment brings.

That internal loop is what there is to "fix".
by timewizard | 2025-06-04 21:31:40+00:00
The same reason the US moves more of the worlds money through commercial and investment services hosted here.

Ask anyone in the EU who has lived in one country and earned a paycheck from a different one.

Anyways, give it time, the EU is currently working to make it's tax system more complicated to solve some of the long standing continental issues, and to make the EU system more like the US one.
by yreg | 2025-06-04 21:32:03+00:00
Ha, did you just update the styles based on my complaints? :)

I believe there are multiple reasons why the styles are better now. Even the first-use red links are much more accessible now. And you are now presenting the same content to the users using screen readers or other assistive technologies as for the typical users.

By the way, I think your analysis of the Apple situation sounds absolutely spot on.
by Refreeze5224 | 2025-06-04 21:33:13+00:00
If I found an application by some random developer, whose purpose was completely unrelated, doing this, I would categorize it as malware, or spyware at the very least.

By Facebook does it, and it's a "miscommunication." I have personally considered them a surveillance, and therefore spyware company, for years. I hope more people will realize it. Especially all people right here on HN who work for Facebook, and Google as well. Please realize what you're doing is wrong, and damaging, and that you should work somewhere else doing something less objectively harmful.
by BudaDude | 2025-06-04 21:33:27+00:00
I love Cursor, but it feels like a ticking time bomb with extensions not being updated at the same rate as VSCode.

Also another issue I am starting to see is the lack of shared MCP servers. If I have VSCode, Cursor, and Claude open, each one is running its own instance of the MCP server. You can imagine that with a dozen or so MCP's, the memory footprint becomes quite large for no reason.
by bluGill | 2025-06-04 21:33:32+00:00
That pairing is for theft reasons - chop shops will steal a car, take the parts off and sell them. However the expensive computers are paired and so they won't work when sold this way thus making the value of a car to a shop shop much less and so helping prevent that theft mode.

Though I think there should be a process to get the parts paired after verifying the car isn't stolen. I'm not sure what that would be though.
by ninetyninenine | 2025-06-04 21:35:21+00:00
Then we're in agreement. It's clearly not a religous debate, you're just mischaracterizing it that way.

The original comment I replied to is categorically wrong. It's not sane at all when it's rationally and factually not true. We are not projecting endlessly. We are hitting a 1 year mark of a bumpy upward trendline that's been going for over 15 years. This 1 year mark is characterized by a bump of a slight diminishing return of LLM technology that's being over exaggerated as an absolute limit of AI.

Clearly we've had all kinds of models developed in the last 15 years so one blip is not evidence of anything.

Again we already have a datapoint here. You are a human brain, we know that an intelligence up to human intelligence can be physically realized because the human brain is ALREADY a physical realization. It is not insane to draw a projection in that direction and it is certainly not an endless growth trendline. That's false.

Given the information we have you gave it an "agnostic" outlook which is 50 50. If you asked me 10 years ago whether we would hit agi or not I would've given it a 5 percent chance, and now both of us are at 50 50. So your stance actually contradicts the "sane" statement you stated you agree with.

We are not projecting to infinite growth and you disagree with that because in your own statement you believe there is a 50 percent possibility we will hit agi.
by paxys | 2025-06-04 21:35:40+00:00
It's crazy to me that this has always been the default behavior for web browsers. A public website being able to silently access your entire filesystem would be an absurd security hole. Yet all local network services are considered fair game for XHR, and security is left to the server itself. If you are developer and run your company's webapp on your dev machine for testing (with loose or non-existent security defaults), facebook.com or google.com or literally anyone else could be accessing it right now. Heck think of everything people deploy unauthed on their home network because they trust their router's firewall. Does every one of them have the correct CORS configuration?
by 0xCMP | 2025-06-04 21:35:56+00:00
IIUC this should not break redirects. This only affects: (1) fetch/xmlhttprequests (2) resources linked to AND loaded on a page (e.g. images, js, css, etc.)

As noted in another comment this doesn't work unless the server responding provides proper CORS headers allowing the content to be loaded by the browser in that context: so for any request to work the server is either wide open (cors: *) or are cooperating with the requesting code (cors: website.co). The changes prevent communication without user authorization.
by ben_w | 2025-06-04 21:36:03+00:00
I think you're underestimating the scope/magnitude of the problem.

But first: Governments can't function if they're not the top power — sovereign — in their territories. If they don't effectively block the growth of criminals, they always lose, and then the criminals replace them. This argument also applies to foreign governments intelligence agencies interfering locally.

For scope, consider: if some government was actually serious about road traffic laws, how long would it be before everyone that drove in their jurisdiction was banned from driving? I think the answer is between a week and a month.

If the UK fully enforced just its heroin laws and gave up literally everything else, the net effect is it would triple their prison population. If they tried to enforce all drugs laws, they'd bankrupt themselves building prisons.

A true panopticon government cannot function without commensurate liberalisation.
by const_cast | 2025-06-04 21:36:05+00:00
1. Please don't say "Huh?", you know what the person is talking about. You don't need to feign that their argument is so stupid it befuddles you.

2. Off-shoring didn't go away, sure, but it's pretty costly because you have to constantly translate culture differences, time differences, etc. Also reading code is harder than writing it, so just dumping more people to write code doesn't help much.
by dtagames | 2025-06-04 21:37:40+00:00
Cool to see this becoming a thing. This is like an API revolution in progress because devs outside the company can build apps that use their real data -- through LLM prompts.

I think we are starting to see the cracks in the old model of carefully pre-designed user interfaces controlled by a single party, in favor of smaller and more modular, custom interfaces that access the kind of information Turkish is providing here.
by haswell | 2025-06-04 21:37:40+00:00
> maybe i just appreciate the difference between the product and support for the product. for support, i understand a more-bespoke pricing model

I'm trying to frame this sentence so it doesn't sound like a jab because that's not my intent, but based on what you've written, I don't think you understand the kind of software I'm describing.

In your mind, what is the distinction between the two, especially for an enterprise solution hosted by a vendor? In my experience, the two are often not so different at all, and the clean lines you imagine here are not lines that exist in practice. This will depend on the nature of the software, and the kind of support customers need (i.e. infrastructure vs. implementation).

> but it'd be nice if there was at least some upfront inkling of how much i have to open my organization's veins in exchange for a working implementation.

You are assuming this is not part of the model, but it is. Not publicly listing a pricing sheet does not in any way mean a customer doesn't have clarity about how much their deployment will cost before they sign a contract.

> interacting with capital is a cynical act.

Your use of "cynical" is in a different category than what I was describing above. If we go with your definition, there is no reason to differentiate between bespoke pricing and up-front published pricing.