MurphyA/hacker-news huggingface dataset:
by mattrighetti | 2025-06-05 11:47:35+00:00
I agree with the overall JWT statements you made.

> This is the author's claim, but the code clearly DOES store data on the server, for the refresh token.

You're right, but I was making a different point about session IDs versus JWTs.

With session ids, each user request requires a server-side lookup to validate the session. For that reason, their ideal place would be something in-memory and that's what I was referring to with "data on the server".

While storing session IDs in a database is an option, in my case it would introduce noticeable latency because I self-host my projects on a cluster of Pis at home and even though I have a fast connection, a roundtrip to my external (I don't self-host it) database still takes a few milliseconds under low load.

JWTs allow me to avoid frequent server-side lookups. I can trust the client's data without hitting the database, except when issuing a new JWT - but even then, that happens every 2-3 minutes per user. While verifying JWT signatures and decoding claims does consume some CPU cycles, this overhead is minimal on my setup compared to the latency of database roundtrips.

Nothing against session ids, but I feel JWTs are better suited for my resource constrained setup.
by Fischgericht | 2025-06-05 11:47:45+00:00
I am aware that FSD has a different software stack. But it's the same hardware. So why would they make the detection of kids different on the standard firmware artificially worse? As Marketing for people who hate school kids?

I find it laughable that there still are Musk fanboys who after a decade of lies about this still believe in "Robotaxis". 90% of them clearly have never tried to drive a Tesla in a scenario where the minimal protections for kids to use public street space is not "kids should get a SUV to not get killed".

It is also amusing to watch videos of Tesla fanboys on YouTube who proudly show that their Tesla now can use FSD for up to 500 miles without a single crash (or "critical disengagement)". A human driver statistically causes a crash every 500,000 miles.

But yes, we will have flying Robotaxis in 2 weeks from now, that will solve this problem. Musk said so.

:)
by miroljub | 2025-06-05 11:47:54+00:00
Honestly, once you try aider, no other AI coding tool can reach that level of productivity.

What's the best about it, it's open source, costs nothing, and is much more flexible than any other tools. You can use any model you want, either combine different models from different vendors for different tasks.

Currently, I use it with deepseek-r1-0528 for /architect and deepseek-v3-0325 for /code mode. It's better than Claude Code, and costs only a fragment of it.

Once something, like in this case AI, becomes a commodity, open source beats every competition.
by AStonesThrow | 2025-06-05 11:48:46+00:00
[ad filtering] Accesses are resolved with the IP address 0.0.0.0

I remember the days I was running a Pi-hole at home, and after having no web server running on my desktop machine, I started an Apache web server, and there was a surprise in store for me, as suddenly 0.0.0.0:80 was responding to HTTP GET...!
by lingo334 | 2025-06-05 11:49:02+00:00
> My biggest recommendation is to just get familiar with the caching constructs that are available.

That doesn't help. They request seemingly random resources in seemingly random order. While they do often hit some links multiple times it's usually too few and far between for caching to be of any help.

As to the rest, "Just turn features off. No one uses them, trust me bro!"
by miav | 2025-06-05 11:50:09+00:00
Guys, the author presents an overall reasonable argument and I think it's more useful to engage with it in good faith than going "so it's all my fault just because I'm a man?" - no one's implying that.

At its simplest, the point is that much of programming language design is done with a masculine perspective that values technical excellence and very little feminine perspective that focuses more on social impact. Most, including myself, have a knee-jerk reaction to dismiss this argument since at first glance it appears to trade off something known useful for something that's usually little else than a buzzword, but upon further reflection the argument is sensible.

The theme of forsaking technological perfectionism in favor of reaching whatever end goal you have set is widely circulated on this forum and generally agreed with. Those of us that work as software engineers know that impact of your work is always valued more than the implementation or technical details. It's thus reasonable that when building programming languages, the needs and experience of the users should be considered. Not override everything else, but be factored into the equation.

I know if I were to write a programming language I'd probably focus on pushing the boundaries of what's technologically possible, because I find it fun and interesting. But I would have to agree that even if I did succeed in doing so, the actual impact of my work would probably be lower than that of Hedy - the author's language. Hedy is not novel technologically, but the fact that it makes it meaningfully easier to learn programming for significant numbers of people is real, undeniable impact.

Lastly, I want to note that the author's argument for underrepresentation of women in PL cannot be reduced to "those nasty men are keeping us out". Humans are tribal and any group of humans is bound to form complex social structures. Those are going to affect different people in different ways, linked paper investigates the effect on those structures on specifically women because the topic is close to the author. Whether you care about low numbers of women in PL design or not, the dynamics that have led to that being the case are worth investigating and are quite interesting on their own.
by robertlagrant | 2025-06-05 11:50:25+00:00
> [1] The thing I've alsways disliked most about Tesla actually — not a car "for the people" — way too rarefied, elite.

This seems a little crazy. They started with the fastest one, but it was still much cheaper than equivalents, and model 3s and model ys have been selling like hot cakes. These are cars for the people.
by diego_moita | 2025-06-05 11:51:58+00:00
I have a strange feeling: it seems that original insights and hallucinations are related. One seems to come very frequently with the other.

I've noticed that o3 is the one that lies with the most conviction (compared to Gemini Pro and Claude Sonnet). It will be the hardest to convince that it is wrong, will invent excuses and complex explanations for its lies, almost to a Trump level of lying and deception.

But it is also the one that provides the most interesting insights, that will look at what others don't see.

There might some kind deep truth in this correlation. Or it might be myself having an hallucination...
by blacklion | 2025-06-05 11:52:02+00:00
Why local Plex which you need to install & run (it is already Server) cannot provide its own UI to browser, without 3rd party sites? It is absurd design, IMHO. I'll never allow this in my network. It looks security nightmare. Today it shows me dashboard (of what? Several my Plex servers?), tomorrow it is forced to report pirated movies to police. No, thanx.
by sokoloff | 2025-06-05 11:52:17+00:00
The electric trim switches override MCAS (and indeed the crew of ET302 almost saved the aircraft by turning it back on and commanding aircraft-nose-down (AND) with the electric trim).

What is inexplicable is that they stopped doing that while leaving the trim system enabled after correctly disabling it via the memory item checklist.

Boeing’s not blameless here, nor should the crew of ET302 bear the primary fault, but they seem to have understood the issue (and it’s not possible they didn’t know about MCAS) and were frustratingly close to saving the flight.
by sorenjan | 2025-06-05 11:52:48+00:00
They reference ESA's research in "Guidance and Control Nets", and when looking at ESA's page for their "Advanced Concepts Team" [0] they in turn reference ETH Zürich's research in RL for drone control. Specifically [1] this paper from 2023: "Champion-level drone racing using deep reinforcement learning" [2]. They use a 2x128 MLP for the control policy.

[0] https://www.esa.int/gsp/ACT/

[1] https://www.esa.int/gsp/ACT/projects/rl_vs_imitation_learnin...

[2] https://www.zora.uzh.ch/id/eprint/257405/
by merksittich | 2025-06-05 11:52:52+00:00
Interesting detail from the court order [0]: When asked by the judge if they could anonymize chat logs instead of deleting them, OpenAI's response effectively dodged the "how" and focused on "privacy laws mandate deletion." This implicitly admits they don't have a reliable method to sufficiently anonymize data to satisfy those privacy concerns.

This raises serious questions about the supposed "anonymization" of chat data used for training their new models, i.e. when users leave the "improve model for all users" toggle enabled in the settings (which is the default even for paying users). So, indeed, very bad for the current business model which appears to rely on present users (voluntarily) "feeding the machine" to improve it.

[0] https://cdn.arstechnica.net/wp-content/uploads/2025/06/NYT-v...
by lopatin | 2025-06-05 11:52:53+00:00
That's a great question. Probably not. IDK. I'm also only paying this much to maintain momentum on a personal project. I also know in a year, these LLM products will change drastically, pricing tiers will transform, etc.. So I can't predict what will happen in a year but things will probably be cheaper.

Edit: On the other hand, the state of the art tools will also be much better in a year, so might keep that high price point!

Am I rationalizing my purchase? Possibly. If I'm not using it daily, I will cancel it, I promise :)
by bell-cot | 2025-06-05 11:52:53+00:00
> only about 60% of the school kids [...] The rest it would kill. [...] would probably kill about 10-20 kids per week.

I'm no Tesla fan - but it would be real-world obvious if even 0.1% of Teslas actually were that "eager" to kill children. In most western countries, covering up child-killing accidents scales very poorly.
by tinthedev | 2025-06-05 11:53:59+00:00
This is just nonsense.

Handling errors this way is possible in only very brittle and simplistic software.

I mean, you're contradicting your very own argument. If this was the primary/idiomatic way of handling errors... then Go should just go the way of most languages with Try/Catch blocks. If there's no valuable information or control flow to managing errors... then what's the point of forcing that paradigm to be so verbose and explicit in control flow?

None.
by christophilus | 2025-06-05 11:54:23+00:00
Dunno. I was working on a side project in TypeScript, and couldn’t think of the term “linear regression”. I told the agent, “implement that thing where you have a trend line through a dot cloud”, or something similarly obtuse, and it gave me a linear regression in one shot.

I’ve also found it’s very good at wrangling simple SQL, then analyzing the results in Bun.

I’m not doing heavy data processing, but so far, it’s remarkably good.
by CafeRacer | 2025-06-05 11:55:13+00:00
I've given up on cursor a while back. Too many updates, sometimes if produces shit when you don't need it to react at all, and sometimes for simple really useful autocompletions it hangs for a long time making snippets way more approachable.

Overall, I am having hard time with code autocompletion in IDE. I am using Claude desktop to search for information and bounce off ideas, but having it directly in IDE – I find it too disturbing.

Also there is this whole ordeal with VSCode Marketplace no longer available in Cursor.

I'm not saying AI in IDE is bad, it's just I personally can't get into it to actually feel more productive.
by olieidel | 2025-06-05 11:55:29+00:00
Sigh.

1. Looks like the cost of this project so far is already ~€1M. Does it really take you a million Euros to set up a DNS server?

(Just did a quick research in the EU's financial transparency system [1], I entered "dns4eu" in the subject field. €3m budgeted, €1M used already, most of it going to a company named "Whalebone sro" (?))

2. Why does every EU-funded software project have such a terrible website? As a visitor, you get the impression that the designers took great care to obfuscate the actual product as much as possible, while throwing in random text blurbs, useless buttons and boxes.

Stuff like:

> Looking for a fast, secure, and privacy-focused way to browse the internet? You're in the right place.

Yeah, sure.. just give me the product?

Reading on..

> Learn everything you need to know about DNS4EU Public Service – including where it's located, how to easily set it up on your device, and what configuration options are available to best suit your needs.

Yeah, sure.. just give me the product?

Compare this with the UI of Cloudflare's 1.1.1.1 [2] which gives visitors exactly what they need. It's awesome.

---

It's hard not to be cynical about EU projects, this one included. I've had the questionable pleasure of diving deep into EU software projects and their funding when analyzing and rebuilding [3] the EU medical device database [4], a simple database with ~500k entries (~10GB on disk), which has burned €45M (!) so far and employs a team of ~50 people. Link to website with budget tracker [5].

[1] https://ec.europa.eu/budget/financial-transparency-system/an...

[2] https://one.one.one.one

[3] https://openregulatory.com/articles/beudamed-better-eudamed

[4] https://ec.europa.eu/tools/eudamed/#/screen/home

[5] https://eudamedburn.com
by hddnncloset49 | 2025-06-05 11:56:16+00:00
Some "firsthand" experience. So I happen to follow a canoeing guy on OnlyFans and on Instagram. He doesn't actually post anything dirty or so, mostly covered nudity on OF, completely nice and fair, chill guy, on IG.

And with this submission I realised it's the same guy! I've heard about the affair, but didn't connect the dots.

I fully support his move, if this is what it takes to get funding, then it's fine (and it's a sign the system is broken).

PS That's just a throwaway account, unfortunately
by stackedinserter | 2025-06-05 11:56:38+00:00
Sigh. The tires on the planes thing is very clear to anyone who served in russian/soviet army.

> Hell, even hobbyist level DIY drone stuff can be easily programmed

Lock on a moving target and hit it is not the same as put waypoints in INAV. My point was that there's still no mass adoption of target locking or self-aiming drones, overwhelming majority of hits, on both sides, are done with regular FPV drones with very standard school hardware that's barely modified for combat use (namely: custom frequencies for VTX and ERLS).
by defrost | 2025-06-05 11:58:39+00:00
and post WWII landrovers, the ships of the desert, pre GPS, used star fixes to layout grid roads for the world's largest test range*.

https://www.beadelltours.com.au/lb_survey.html

* "the largest land-based test range in the western world"

https://en.wikipedia.org/wiki/RAAF_Woomera_Range_Complex
by alisonatwork | 2025-06-05 11:59:06+00:00
Depends on the processes in place at the company. Presumably if a backup is restored, some kind of replay has to happen after that, otherwise all the other users are going to lose data that arrived in the interim. A catastrophic failure where both two weeks of user data and all the related events get irretrievably blackholed could still happen, sure, but any company where that is a regular occurrence likely has much bigger problems than complying with GDPR.

The point is that none of these problems are insurmountable - they are all processes and practices that have been in place since long before GDPR and long before I started in this industry 25+ years ago. Even if deletion is only eventually consistent, even if a few pieces of data slip through the cracks, it is not hard to have policies in place that at least provide a best effort at upholding users' privacy and complying with the regulations.

Organizations who choose not to bother, claiming that it's all too difficult, or that because deletion cannot be done 100% perfectly it should not even be attempted at all, are making weak excuses. The cynical take would be that they are just covering for the fact that they really do not respect their users' privacy and simply do not want to give up even the slightest chance of extracting value from that data they illegally and immorally choose to retain.
by boltzmann-brain | 2025-06-05 11:59:12+00:00
SEEKING WORK | REMOTE

~~

20+ yoe as dev/IC. 10+ yoe in managerial and executive roles. Multiple great exits and acquisitions. I have recently built a software NGO with over half a million supporters and over a thousand active volunteers and major political and media networking. I have built tech for Tezos, Oracle, Shell, Digitas, Saatchi & Saatchi, Time Warner, Sparkasse, Bank of America.

If there's a problem related to tech, I can solve it, and build a team or company around it. Available for work as dev/IC, EM, Director, or CTO, with experience in each. Full-solution MVP development from scratch. Performance optimization and modernization of older systems. DSL and programming language design, compilers. Let me know if you're looking for experience that isn't below! HN posts are short. CV upon request.

If you think I might be able to help you, shoot me an email: damian.jobsites+hn@gmail.com

~~

Example engagement types:

- Long term dev / IC or managerial roles

- Security audits for cryptography and secure code

- Review your code and dev processes, 10-page report

- Short-term dev and research work

- One-shot meetings

(see reply for skill list)
by boltzmann-brain | 2025-06-05 11:59:32+00:00
Main tech skills:

- Backend Programming: Zig, Rust, Haskell, Python, JS, TypeScript, Node, Vue, React, Elm, Scala, C, C++, SQL, Perl, PHP, Clojure, OCaml, Erlang, Elixir, Theorem provers (TLA+, Isabelle HOL, Agda), ...

- Devops & co: NixOS, Terraform, AWS, Docker, Ansible, Linux admin, Distributed Systems, ... Quote from code review: "This is the most beautiful Bash code I've ever seen written"

- Fintech: Dev experience with banks and financial institutions. Launched Tezos and other major blockchains. Dozens of smart contract audits.

- Bizdev: Gamification, consumer modelling, data-driven retention and engagement

- AI: LLMs, predictive text, machine vision (trajectory tracking), DSP, Big Data, ...

- Infosec: Cryptography, Red team testing, RE, audits, threat modeling, ...

- Other tech: Godot game engine, audio engineering (mastering), Verilog, VHDL

Management and business: Minor in Psychology, led and managed teams between 2 and 30 people, product design and gamification, hiring, executive and political outreach, media appearances, and a lot of other experience that won't fit in this post.
by vascocosta | 2025-06-05 12:00:03+00:00
For me the value in Zig is its simplicity as a language (in a way similar to go's simplicity) and the explicit and very fine grained control over memory allocation. On top of that, I really appreciate tagged unions and error handling. It adds enough value on top of something like C to make it worth for me.

Still wherever I need absolute code correctness and production grade quality, I use Rust, my favourite language, at the expense of more code and spending more time doing it "the right way".
by codingdave | 2025-06-05 12:00:10+00:00
Same as we hear often: AI leader has rose-colored view of AI.

I don't know who is wrong or who is right. But I do see where the incentives fall, and I know human nature. So I find these overly positive predictions of where things are going to be untrustworthy when they come from people with a vested interest in AI being a good thing, no matter how smart or credentialed those people are.
by boltzmann-brain | 2025-06-05 12:00:11+00:00
SEEKING WORK | REMOTE ~~

20+ yoe as dev/IC. 10+ yoe in managerial and executive roles. Multiple great exits and acquisitions. I have recently built a software NGO with over half a million supporters and over a thousand active volunteers and major political and media networking. I have built tech for Tezos, Oracle, Shell, Digitas, Saatchi & Saatchi, Time Warner, Sparkasse, Bank of America.

If there's a problem related to tech, I can solve it, and build a team or company around it. Available for work as dev/IC, EM, Director, or CTO, with experience in each. Full-solution MVP development from scratch. Performance optimization and modernization of older systems. DSL and programming language design, compilers. Let me know if you're looking for experience that isn't below! HN posts are short. CV upon request.

If you think I might be able to help you, shoot me an email: damian.jobsites+hn@gmail.com

~~

Example engagement types:

- Long term dev / IC or managerial roles

- Security audits for cryptography and secure code

- Review your code and dev processes, 10-page report

- Short-term dev and research work

- One-shot meetings

(see reply for skill list)
by boltzmann-brain | 2025-06-05 12:00:24+00:00
Main tech skills:

- Backend Programming: Zig, Rust, Haskell, Python, JS, TypeScript, Node, Vue, React, Elm, Scala, C, C++, SQL, Perl, PHP, Clojure, OCaml, Erlang, Elixir, Theorem provers (TLA+, Isabelle HOL, Agda), ...

- Devops & co: NixOS, Terraform, AWS, Docker, Ansible, Linux admin, Distributed Systems, ... Quote from code review: "This is the most beautiful Bash code I've ever seen written"

- Fintech: Dev experience with banks and financial institutions. Launched Tezos and other major blockchains. Dozens of smart contract audits.

- Bizdev: Gamification, consumer modelling, data-driven retention and engagement

- AI: LLMs, predictive text, machine vision (trajectory tracking), DSP, Big Data, ...

- Infosec: Cryptography, Red team testing, RE, audits, threat modeling, ...

- Other tech: Godot game engine, audio engineering (mastering), Verilog, VHDL

Management and business: Minor in Psychology, led and managed teams between 2 and 30 people, product design and gamification, hiring, executive and political outreach, media appearances, and a lot of other experience that won't fit in this post.
by nedt | 2025-06-05 12:02:03+00:00
I've seen it being used.

Like on the frontend side with Facebook which thinks if I'm interested into cycling I will also be interested in cars (both are on the street, right?) or if I'm interested in some more dirty humor I also want to see more "naughty" stuff.

And also on the backend used by magazines and they mostly don't use the user profiles because it's too targeted and doesn't have enough audience. And if you make the targeting broad enough you'll have again people interested in chocolate so you target them with wine and whiskey.

Or even better on Amazon where you can buy a new TV and when you have done so it will suggest you even more TVs for the next months.
by jvanderbot | 2025-06-05 12:02:19+00:00
This is such a great attitude. I know LLMs are becoming the new Godwin's law, but I really wish this attitude was pervasive in LLM-based tooling. "If it's not working you're prompting wrong" is all we have. But I guess "wait 6 months" still applies (except then you're "NGMI").