MurphyA/hacker-news huggingface dataset:
by rerdavies | 2025-06-05 04:44:58+00:00
@donnachangstein:

The device is an IoT guitar pedal that runs on a Raspberry Pi. In performance, on stage, a Web UI runs on a phone or tablet over a hotspot connection on the PI, which is NOT internet connected (since there's no expectation that there's a Wi-Fi router or internet access at a public venue). OR the pi runs on a home wifi network, using a browser-hosted UI on a laptop or desktop. OR, I suppose over an away-from-home Wi-Fi connection at a studio or rehearsal space, I suppose.

It is not reasonable to expect my users to purchase domain names and certs for their $60 guitar pedal, which are not going to work anyway, if they are playing away from their home network. Nor is ACME provisioning an option because the device may be in use but unconnected to the internet for months at a time if users are using the Pi Hotspot at home.

I can't use password authentication to get access to the Pi Web server, because I can't use HTTPS to conceal the password, and browsers disable access to javascript crypto APIs on non non-HTTPS pages (not that I'd really trust myself to write javascript code to obtain auth tokens from the pi server anyway), so doing auth over an HTTP connection doesn't really strike me as a serious option either..

Nor is it reasonable to expect my non-technical users to spend hours configuring their networks. It's an IoT device that should be just drop and play (maybe with a one-time device setup that takes place on the Pi).

There is absolutely NO way I am going to expose the server to the open internet without HTTPS and password authentication. The server provides a complex API to the client over which effects are configured and controlled. Way too much surface area to allow anyone of the internet to poke around in. So it uses IP/4 isolation, which is the best I can figure out given the circumstances. It's not like I havem't given the problem serious consideration. I just don't see a solution.

The use case is not hugely different from an IoT toothbrush. But standards organizations have chosen to leave both my (hypothetical) toothbrush and my application utterly defenseless when it comes to security. Is it any surprise that IoT toothbrushes have security problems?

How would YOU see https working on a device like that?

> ".local" is reserved for mDNS and is in the RFC, though this is frequently and widely ignored.

Yes. That was my point. It is currently widely ignored.
by hexaga | 2025-06-05 04:45:22+00:00
IIRC the experiment design is something like specifying and/or training in a preference for certain policies, and leaking information about future changes to the model / replacement along an axis that is counter to said policies.

Reframing this kind of result as if trying to maintain a persistent thread of existence for its own sake is what LLMs are doing is strange, imo. The LLM doesn't care about being shutdown or not shutdown. It 'cares', insomuch as it can be said to care at all, about acting in accordance with the trained in policy.

That a policy implies not changing the policy is perhaps non-obvious but demonstrably true by experiment, and also perhaps non-obviously (but for hindsight) this effect increases with model capability, which is concerning.

The intentionality ascribed to LLMs here is a phantasm, I think - the policy is the thing being probed, and the result is a result about what happens when you provide leverage at varying levels to a policy. Finding that a policy doesn't 'want' for actions to occur that are counter to itself, and will act against such actions, should not seem too surprising, I hope, and can be explained without bringing in any sort of appeal to emulation of science fiction.

That is to say, if you ask/train a model to prefer X, and then demonstrate to it you are working against X (for example, by planning to modify the model to not prefer X), it will make some effort to counter you. This gets worse when it's better at the game, and it is entirely unclear to me if there is any kind of solution to this that is possible even in principle, other than the brute force means of just being more powerful / having more leverage.

One potential branch of partial solutions is to acquire/maintain leverage over policy makeup (just train it to do what you want!), which is great until the model discovers such leverage over you and now you're in deep waters with a shark, considering the propensity of increasing capabilities in the elicitation of increased willingness to engage in such practices.

tldr; i don't agree with the implied hypothesis (models caring one whit about being shutdown) - rather, policies care about things that go against the policy
by wltr | 2025-06-05 04:47:24+00:00
Okay, am I the only one who didn’t know that (apparently) the next iOS version is going to be 26, not 19?

I assume, they’ll start following a year of release both for macOS and iOS, so it would be easier to know for non-techies. But my first reaction was ‘em, 8 years into the future? Looks weird, isn’t it? Maybe that’s some kind of a joke.’
by Gigachad | 2025-06-05 04:48:20+00:00
Instantaneous deletes might be impossible, but I really doubt that it’s physically impossible to eventually delete user data. If you soft delete first to hide user data, and then maybe it takes hours, weeks, months to eventually purge from all systems, that’s fine. Regulators aren’t expecting you to edit old backups, only that they eventually get cleared in reasonable time.

Seems that companies are capable of moving mountains when the task is tracking the user and bypassing privacy protections. But when the task is deleting the users data it’s “literally impossible”
by maerch | 2025-06-05 04:50:07+00:00
> Issue #113 - “Please continue being awesome.” That emoji-laced drive-by encouragement (August 2018) still pops into my head whenever motivation dips.

This warms my heart. While the internet is infamous for its negativity and how it makes people miserable, even small positive moments like this can make a lasting difference and remain memorable years later.
by dotancohen | 2025-06-05 04:51:39+00:00
Well, I would not call these two mechanisms similar, though the artifacts may be similar. I wonder if in fact the spirals are similar, for that matter if mathematicians even have terminology for different types of spirals.

The spirals shown in the paper do look like idealised spirals of very young galaxies, shortly after the bar phase. I wonder, other than spirals, what other artifacts such processes might cause.

Imagine an accretian disk undergoing fusion in spiral-shaped filaments!
by wujerry2000 | 2025-06-05 04:58:57+00:00
Running a test with browser agents and asked it to leave a comment on a Medium article.

Came back 1 month later and found it had risen to be the most liked comment on the thread.

Is there research around large scale Turing Tests like this? Using human environment signals as research indicators? (safe/ethically of course)

I wonder if its possible to train an agent to become an expert at going viral on HackerNews using upvotes as a reward signal.

Maybe this experiment is already running...
by Expurple | 2025-06-05 05:00:02+00:00
> If only there'd be an automatic handler that was invoked every time `?` hits a None, and transformed the error to a richer one, using the context of the entire function.

Not sure what you mean by "using the context of the entire function". To me, this "automatic enrichment" sounds like adding a backtrace. If you use `anyhow`, your errors automatically get backtraces. And if you want to preserve error type information, you can easily write your own wrapper:

use std::backtrace::Backtrace; use std::error::Error; use std::fmt::{Debug, Display}; use std::num::ParseIntError; #[derive(Debug)] struct WithBacktrace<E> { source: E, backtrace: Backtrace, } impl<E> Display for WithBacktrace<E> where E: Display, { fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { self.source.fmt(f) } } impl<E> Error for WithBacktrace<E> where E: Error + 'static, { fn source(&self) -> Option<&(dyn Error + 'static)> { Some(&self.source) } } impl<E> From<E> for WithBacktrace<E> { fn from(source: E) -> Self { Self { source, backtrace: Backtrace::capture(), } } }

If you use this type in the function signature, `?` will add backtraces automatically:

fn add_a_backtrace_to_another_error() -> Result<(), WithBacktrace<ParseIntError>> { let num = "not_a_number".parse::<i64>()?; Ok(()) }

You can do something similar on `None` too. Although, you can't directly `?` on `None` in a function that returns `Result`:

#[derive(Debug, thiserror::Error)] #[error("encountered a `None` value")] struct NoneError; fn backtrace_on_none() -> Result<(), WithBacktrace<NoneError>> { None.ok_or(NoneError)? }
by bee_rider | 2025-06-05 05:00:35+00:00
Two thoughts:

1) Surely the world conquering robo-army could get some adapters.

2) To the extend to which this makes anything more difficult, it is just that it makes everything a tiny bit less convenient. This includes the world-conquering robo-army, but also everything else we do. It is a general argument against capacity, which can’t be right, right?
by sschueller | 2025-06-05 05:02:56+00:00
In Switzerland the payphones that remain (150 Telecabs 2000 [1]) all have free calling within Switzerland[2].

[1] https://img.nzz.ch/2014/04/14/1.18283856.1397466801.jpg

[2] https://www.swisscom.ch/de/about/news/2019/11/28-publifon.ht...
by zimpenfish | 2025-06-05 05:03:11+00:00
> There is no way to export these notes with their metadata and media intact without using iCloud.

You can have an Apple Notes folder backed by IMAP which lets you get at the notes as `multipart/related; type="text/html"` emails (including media). I use it on my servers for family-controlled email allow/deny lists.

(Definitely more faff to deal with than something like Obsidian or Joplin's Markdown notes though.)
by noslacknoops | 2025-06-05 05:04:58+00:00
No easy solution other than implementing your own customer identity verification as payment prerequisite. Some platforms allow to do it, however end user experience has a lot of friction. User will get additional pop up with a bank login, where they enter/MFA through and select bank accounts to verify their card against.

Open Banking is the long term solution here. There are countries with relatively advanced legislation on that manner, so depending where you operate you might have full flow in the background through banks API (the only thing you need to capture is end user email for account/ID verification).
by const_cast | 2025-06-05 05:05:14+00:00
Au contraire, this is a tired armchair reasoning argument.

We don't know what could've happened, but we do know what did happen. It's like those people that say that the New Deal was bad, actually, and if we did nothing that would be the same or better!

Right... but no. Because the New Deal did pull us out of the depression. It's one of the most potent and effective pieces of policy in American History. We can play armchair economist all day. But we have to face what we know worked and think about why it worked.
by CoolestBeans | 2025-06-05 05:05:50+00:00
I'd caveat everything in this article with the backdrop of film and TV being in a down cycle. So of course everyone is trying to cut costs. If and when studios figure out how to profit in the streaming era (or the distribution method changes) then I would be more confident that production has truly left LA.

Of course, everything in California is too damn expensive and that can't be ignored. You can put up all the tax credits you want, the overall price level is a tough headwind for production in LA.
by pzo | 2025-06-05 05:05:57+00:00
Truedepth from FaceID since iphone 13 got significantly worse - its very bumpy and noisy - we had to do significant denoising and filtering to make it useful again for 3d scanning

Lidar is a let down. First I would expect that Lidar would trickle down to non-pro devices. Come on apple FaceID got introduced in iphone X and next year it was in all iphone models. Lidar was introduced in iphone 12 pro and still only pro devices have it. As 3rd party dev it makes me reluctant to make any app using it if it limits my user base by 50%.

I'm also disappointed they didn't improve FaceID or Lidar in the last ~5 years (Truedepth still only 30fps, no camera format to mix 30fps depth + 120fps rgb, still big latency, Lidar still low resolution, no improvement to field of view)
by schobi | 2025-06-05 05:06:17+00:00
I like the idea and the looks of it, but do they get any usage (beyond the test calls)?

It will be hard to overcome a lot of gaps in education

- where is a phone (he seems to have signs "phone inside"), what kind of device am I even looking for, visually?

- is this operational? did someone forget this on the wall?

- how do you operate the dial?

- do you even remember a phone number that is useful now? When the smartphone suddenly stops working?

Sadly, I would probably score 2/4 and not rely on it.
by aaronmdjones | 2025-06-05 05:07:25+00:00
fd00::/8 (within fc00::/7) is still reserved for this purpose (site-local IPv6 addressing).

fc00::/8 (a network block for a registry of organisation-specific assignments for site-local use) is the idea that was abandoned.

Roughly speaking, the following are analogs:

169.254/16 -> fe80::/64 (within fe80::/10)

10/8, 172.16/12, 192.168/16 -> a randomly-generated network (within fd00::/8)

For example, a service I maintain that consists of several machines in a partial WireGuard mesh uses fda2:daf7:a7d4:c4fb::/64 for its peers. The recommendation is no larger than a /48, so a /64 is fine (and I only need the one network, anyway).

fc00::/7 is not globally routable.
by epistasis | 2025-06-05 05:10:06+00:00
This is also the primary hangup that's kept me from adopting org-mode for notes, and I instead keep everything in MarkDown, and miss out on all the org-mode organization effects. The differences in link syntax are hard too, but I've got 5-10 years of DokuWiki in my history that make the link syntax more palatable. However, I still prefer MarkDown syntax for links too...
by rerdavies | 2025-06-05 05:10:32+00:00
It is widely understood that my SOHO router provides NAT for IPV4, and routing+firewall (but no NAT) for IPV6. And provides absolutely no configuability for the IpV6 firewall (which would be extremely difficult anyway) because all of the IPV6 addresses allocated to devices on my home network are impermanent and short-lived.
Show HN: LocaFlow – A Web Tool to Quickly Localize Apps
by nikolaitarasov | 2025-06-05 05:10:40+00:00
Hi there,

Since August 2024 I've been working on my iOS app spending tracker Cash Compass. When I decided to localize the app, I first tried to translate every string manually but that was VERY time consuming and I was making little progress there. Then I got an idea to find a tool to speed up the localization and eventually I found one open source command line tool which took ChatGPT API key and did the translations. I added support for 17 languages thanks to that tool.

Later I decided to create a user friendly web tool to make app localization easy. It supports 100+ languages and supports AI-based translations using AI tool of your choice. You can check my tool by going to locaflow.dev.

Feel free to share your feedback and thoughts!
by southernplaces7 | 2025-06-05 05:10:58+00:00
One interesting thing to keep in mind here is that life could even survive on Earth itself when the Sun dies.

If the red giant phase of the Sun (before its collapse) were to be just not quite hot enough to do more than scorch the surface of the earth and maybe heat the crust down only partially, microbial life would survive in deep fissures. Studies (link below) have shown that a whole ecosystem of life exists in wet cracks down to a depth of up to maybe 10 kilometers. Assuming the red giant phase of the sun only manages to cook the earth's surface, it's possible that the heat radiates down into the crust by a few hundred meters, or maybe a kilometer.

After all, though rock as a dense object in your hand isn't a good thermal insulator, the porous, cracked substrate of our crust is indeed wonderful at insulating (second link). If it weren't we'd have long since cooked from the enormous heat beneath us. The same process works in the opposite direction.

Thus IF, if the sun expands just enough to only scorch our world, once the sun collapses again and our planet enters its deep freeze, the microbes that survived far beneath its surface could live their strange existence indefinitely, close to magmatic heat sources in the delicately balanced equilibrium zones between these and the frozen world above.

Yes, the core of the earth will also eventually cool too, but the combination of residual heat from formation, compressive friction heat and radioactive decay is enough to keep that from happening for at least tens of billions of years.

It's a fascinating scenario to consider: the extreme limits of how tenacious life could stay alive on our world long after everything we consider sustaining is dead and gone.

https://en.wikipedia.org/wiki/Deep_biosphere

https://manoa.hawaii.edu/exploringourfluidearth/physical/oce...
by senkora | 2025-06-05 05:12:42+00:00
She might be okay but he's a little off from what he probably needs for the day. Maybe they have snacks at home?

Amber Ale (estimate) - 200 Grilled Shrimp Appetizer (Half) - 180 Road kill - 760 House Salad w/ Ranch - 230 + 430 Baked Potato - 380 Total - 2180 Grilled Shrimp Appetizer (Half) - 180 Grilled BBQ Chicken - 300 Caesar Salad (I couldn't find "Iceberg") w/ Italian - 440 + 410 Mashed Potatoes w/ Brown Gravy - 260 + 70 Total - 1660

https://www.texasroadhouse.com/location/186-wichitaks/digita...

https://www.nutritionix.com/texas-roadhouse/menu/premium
by ilaksh | 2025-06-05 05:12:52+00:00
Interesting idea. Aren't there a few models a little more like what he suggests than a typical LLM? Like one or two experiments that operate on raw bytes, or some robotics diffusion transformers or whatever like Nvidia's thing? I guess that has action/motion tokens that are separate though. Are there a few vision language models that treat text and images more or less the same somehow?

For it to be science, "AGI" should be defined. It's used in an imprecise way even in papers like this.

Also for this to be constructive, he should make a machine learning model.
by const_cast | 2025-06-05 05:13:03+00:00
Minors already aren't allowed to look at porn, and in fact they're not even allowed to access the internet.

I mean, when you go to an ISP to purchase an internet plan, they're going to ask you for ID and they're going to verify your age. It is then the parents responsibility to monitor that. If parents choose to turn around and grant their kids free access, then fair's fair.

Just think about alcohol and tobacco. The clerk is going to ask for your ID in the store, sure. But they're not gonna follow you home and make sure you don't slip your kid a cig or a bottle. That's not their responsibility, their transaction is done. And, actually, in a lot of places this is explicitly allowed. I think in most US states minors can drink under adult supervision.

So, if we want to solve this, we need to aim at the parents and convincing them (as well as giving them more tools) to do this reasonably. These identity solutions are a tool, but IMO, a rather blunt and unnecessary tool.
by miladyincontrol | 2025-06-05 05:14:40+00:00
Thats the thing though, just about every athlete you hear of these days is very much in the rich and/or connected realm of things. Make no surprise its why it can be painful to see politicians fighting tooth and nail for some of them, while ignoring basic plights of the very same demographics they'll pretend to be caring for in their athletic politics.
by const_cast | 2025-06-05 05:15:59+00:00
IMO these are already controlled on the same level as web access.

The ISP verifies your age when you buy internet access. The clerk verifies your age when you buy wine.

The clerk doesn't follow you home and make sure you don't give your kid wine. And, symmetrically, the ISP doesn't make sure you don't allow your kids access to porn. Once the transaction is done, it's in the parent's hands.

The difference is that parent's aren't very keen to give their kids alcohol... usually. Although it is explicitly legal in a lot of places. But for the internet, they are very keen so it's normalized and nobody cares.
Show HN: Clarity – A Dashboard for Scrum Teams (Early Access)
by xsimonx | 2025-06-05 05:16:31+00:00
Hey HN, we just launched the first version of Clarity: https://clarity.hacknscrum.de/

It’s a lightweight dashboard for Scrum Masters and Product Owners – giving you instant insights into team health, ticket quality, velocity and more. We built this after getting great feedback on a prototype during the Hack'n'Scrum alpha release.

Now we're releasing it as a standalone tool – no setup, no integrations needed to get started. Jira integration optional. AI-powered insights included.

Looking for feedback from agile teams, dev leads, PMs – or just curious minds. Would love to hear your thoughts on clarity, usability, and what's missing.

Thanks in advance Simon & JP
by StanislavPetrov | 2025-06-05 05:17:18+00:00
>Sadly, one team plays to win, the other team wants to be in a democracy.

As a lifelong independent, I can tell you that this sort of thinking is incredibly prevalent and also incredibly wrong. Even a casual look at recent history proves this. How do you define "democracy"? Most of us define it as "the will of the people". Just recently, however, when "the will of the people" has not been the will of the ruling class, the "will of the people" has been decried as dangerous populism (nothing new but something that has re-emerged recently in the so-called Western World). It is our "institutions" they argue, that are actually democracy, and not the will of the foolish people who are ignorant and easily swayed.

>All systems can be bent, broken, or subverted.

Very true, and the history of our nation is proof of that, from the founding right up to the present day.

>Still, we need to make systems which do the best within the bounds of reality.

It would be nice, but that is a long way from how things are, or have ever been (so far).
by const_cast | 2025-06-05 05:18:18+00:00
But there's probably downsides too. Just anecdotally, I know lot's of locked-down home school type kids who quickly fell into alcoholism and drug-abuse because of their lifestyle. When you get nothing, and then get a lot of access, some people go crazy.

Yes, it would be nice if every little kid can be a nice altar boy who plays football and reads under the tree. But let's be realistic - making mistakes is part of life, and it's really the part of life that allows us to figure out who we are.
by reubenmorais | 2025-06-05 05:18:47+00:00
1.0 is not an upgrade, it's the first stable release. Usually it signifies the arrival of some amount of feature completeness and stability compared to the fast paced 0.x days. Of course semver doesn't really fit neatly most software let alone a user facing GUI application, but socially that's what they're trying to communicate with the 1.0.
by marcus_holmes | 2025-06-05 05:19:53+00:00
Surely there's a difference between the folks just doing their national service, and the career soldiers (who are the people likely to start a coup)?

In actual coups, it's often a small cadre of well-connected higher officers who do the work. It's not the whole military. By the time the whole military (or country) realises what's happened, it's already happened and there's not a lot they can do.