MurphyA/hacker-news huggingface dataset:
by lelanthran | 2025-06-01 18:57:33+00:00
> There is no real protection on card readers (most use Linux with a small shitty password).

Sure there is: only signed binaries can run, executable filesystem is read-only, data filesystem has noexec bit set, root login is disabled, crippled busybox misses a lot of functionality, keys are loaded from a secure area on bootup, master key injection only available when loading at the factory, bootup itself is more or less secure, tamper detection blanks the chip, etc.

Sure, if you have a cheap non-EMV certified Android terminal imported from Asia it'll probably use a standard Linux, with a rw root filesystem, with root login enabled *and* sudo enabled for the username used to execute applications, tamper-detection is non-existent, screen-casting not locked down, ports are all openable and busybox is more or less complete.

Source: Me. I developed (and still sometimes do) EMV applications for card acquisition for a few years. Even in dev mode (which requires the vendor to provide IDs of the developers), these things are very much locked down solidly.
by dist-epoch | 2025-06-01 18:57:47+00:00
I've seen many YouTube videos claiming that fine tuning can significantly reduce costs or make a smaller model perform like a larger one.

Most of them were not from fine-tuning tools or model sellers.

> how it was fine-tuned - all of the training data that was used

It's not that sophisticated. You just need a dataset of prompts and the expected answer. And obviously a way to score the results, so you can guide the fine tuning.
by MangoToupe | 2025-06-01 18:59:05+00:00
I'm certainly not against high-quality diagnostics, I'm just saying that few people expect an unwrap to be sufficient for this, and it's odd to me to look at an unwrap and see it as error messaging (outside of what an assert is supposed to provide—eg a clear inconsistency in logic a developer needs to interpret). But to figure out which errors you need to appropriately parameterize and pass up the stack, you first need to understand what you're building. Without unwrap, we would basically have to engage in exhaustive enumeration as we develop. Which is fine, if you're willing to put that effort in! But that's part of why things like Haskell can struggle to win people over—for better or worse, half-broken code (semantically, in domain terms) that compiles and runs is a powerful tool mid-feature.

But yes, this does require that people care about diagnostics to begin with. I don't think that's worth forcing; most of us develop this instinct through frustration at dealing with the fallout of someone not caring.

(And FWIW I find the combination of explicitly-structured Results that are manually passed up the stack with RAII to be a very, very sweet spot for development velocity, and also easy to teach. I very much prefer this to both exceptions and go's approach.)
by keerthiko | 2025-06-01 18:59:17+00:00
I used to live in Berkeley, CA circa 2013. They had a tool library, which was part of the local public library system, and tools were free (!) to rent. I miss it everyday, as it was a godsend for broke new grads who still wanted to do some quick but heavyduty DIY.

I now live in NYC, and my local Home Depot rents out power tools for $20-30/day. The typical tool would pay for itself in 2 days at these rates, but it's still worth it to me as these 2 days are often 2-3 years apart and I'd rather not store these tools in my cramped 1BR.

What I would love is a community-run tool rental service where we can donate a tool + pay a nominal membership fee, and borrow tools for free. I am happy to donate a $120 circular saw/impact driver if I can rent 10x different tools once each for $5/mo for the next year. The closest thing I have now is my local hackerspace, which is great, but I often have to work on my projects at the space, which limits the kind of home DIY I can do.
by mjburgess | 2025-06-01 18:59:24+00:00
I don't really see how any of these points relate to my comment.

1. That advertises played a shaping role in what could be broadcast on TV is not a conspiracy, but documented fact. That, eg., the FTC had "public airwaves" obsceneity rules that made saying "shit" on TV revolutionary in the 2000s is, again, a fact. And so on.

2. That the mainstream media of the past was highly limited is again, a fact. Fox news, indeed, only arose post elimination of the fairenes doctrine (again, another extrordainary gov regulation on speech for a so-called Free Speech culture). It took the end of the FTC's public airwaves rules, via private means; the end of the fairness doctrine, and the like, for any diversity to arise: this was cable. HBO was the first breaking through of what-the-public-wanted.

Therefore that the public engaged with the mainstream media is beside the point: it has nothing to do with my comment. My comment describes what happened when these extraordinary government and advertiser require restrictions were relaxed. (See, even hollywood before they existed: precode hollywood is a vastly more "modern" place than the gov-constructed fantasy land on TV which followed).

3. You diagnose problems with the present day mass media landscape ("audience capture") and the like. This was already a problem with TV, and indeed also caused by advertisers (see, e.g., the movie Network which basically diagnoses an aduience-captured TV host as necessary schiozophrenic).

The relevant comparison I am making is not between the sins of one and the sins of the other. It is to simply observe that the modern mass media is not a product, in origin, of vast state and ad-sponsored censorship. That TV was is extremely well-documented. I've given you many search terms in this reply.
by ben_w | 2025-06-01 18:59:31+00:00
P-zombies are indeed badly defined. Certainly David Chalmers is wrong to argue that since a philosophical zombie is by definition physically identical to a conscious person, even its logical possibility refutes physicalism; at most you could say that if they exist at that level then dualism follows, but Chalmers' claim isn't a conclusion you can reach a-priori, you actually need to be able to show two identical humans and show that exactly one has no qualia.

But there are related, slightly better (more immediately testable), ideas in the same space, and one such is a "behavioral zombie" — behaviorally indistinguishable from a human.

For example: The screen I am currently looking at contains a perfect reproduction of your words. I have no reason to think the screen is conscious. Not from text, not from video of a human doing human things.

Before LLMs, I had every reason to assume that the generator of such words, would be conscious. Before the image, sound, and video generators, same for pictures, voices, and video.

Now? Now I don't know — not in the sense that LLMs do operate on this forum and (sometimes) make decent points so you might be one, but in the sense that I don't know if LLMs do or don't have whatever the ill-defined thing is that means I have an experience of myself tapping this screen as I reply.

I don't expect GenAI to be conscious (our brains do a lot even without consciousness), but I can't rule the possibility out either.

But I can't use the behaviour of an LLM to answer this question, because one thing is absolutely certain: they were trained to roleplay, and are very good at it.
by gervwyk | 2025-06-01 18:59:45+00:00
I’ve checked out about 5 of them, I like krisp.ai the best, really nice native experience on mac. We do a lot of team meetings in discord channels. Almost none of them support discord and krisp allows for discord and in person recording. However no webhook in krisp, as team admin, i dont want to have every user configure a zapier integration to get the notes out. then pay for zapier also.

Only read.ai has webhook support, but all these tools only post notes to integrations. we want the full transcript to generate extract of what we think is important.

Have not tried recall.ai
by ryan_glass | 2025-06-01 18:59:45+00:00
I run Deepseek V3 locally as my daily driver and I find it affordable, fast and effective. The article assumes GPU which in my opinion is not the best way to serve large models like this locally. I run a mid-range EPYC 9004 series based home server on a supermicro mobo which cost all-in around $4000. It's a single CPU machine with 384GB RAM (you could get 768GB using 64GB sticks but this costs more). No GPU means power draw is less than a gaming desktop. With the RAM limitation I run an Unsloth Dynamic GGUF which, quality wise in real-world use performs very close to the original. It is around 270GB which leaves plenty of room for context - I run 16k context normally as I use the machine for other things too but can up it to 24k if I need more. I get about 9-10 tokens per second, dropping to 7 tokens/second with a large context. There are plenty of people running similar setups with 2 CPUs who run the full version at similar tokens/second.
Show HN: API for CodeX
by sean_ | 2025-06-01 19:00:10+00:00
Ok so this isn't actually CodeX, but it works in the exact same way.

Instead of using codex, we use the superior coding agent: Claude Code.

It works like this: input the repo you want to edit, the changes you want to make, and your anthropic/github keys.

Then we clone your repo into a VM, use claude code to modify it with your prompt, and push the changes!

You can easily change the branch so you don't mess up anything in prod and even use our 'templates' to script claude code with multiple messages to run sequentially so you can run workflows such as 'plan and execute' or automatically invoke an 'auto documentation' version of claude code.

view the UI version of this api here: https://cloudcoding.ai/chat

We're really excited about what this release enables and are looking forward to all the apps this gets integrated into!

Some cool use cases we're looking forward to seeing are slack and text messages bots so you can text with your repos!
by danenania | 2025-06-01 19:00:20+00:00
Right, that’s kind of the whole point. If it’s in the backlog, someone thinks it’s valuable, but you might never get to it because of other priorities. If you’re 10x more productive, that line gets pushed a lot farther out, and your product addresses more people’s needs, has fewer edge case bugs, and so on.

If the competition instead uses their productivity boost to do layoffs and increase short term profits, you are likely to outcompete them over time.
by lelanthran | 2025-06-01 19:00:22+00:00
> Kind of, but if you control the card reader you could charge more for the transaction without showing the amount, for instance.

Not supposed to be possible on a certified terminal. The certification tests this particular case (the transaction is a hash of the keys, amount and a few other things. The display of the swipe/tap/insert screen and the pin-entry are under control of the certified kernel, so the userspacve application has no control of the amount that is displayed).

> And maybe even send the money to a different account.

Not from the card reader.
by danogentili | 2025-06-01 19:00:49+00:00
Apparently they're using a simple 4g/3g/2g modem with Russian SIM, which is the reason why all russian ISPs completely turn off mobile internet (& voice) when drone launches are detected (clearly hasn't helped here as the drones were launched from trucks super close to the targets).

These launches specifically seem to have also used on-board AI targeting models trained on photos of the plane models to hit, I assume as a fallback in case mobile connection isn't available inside the bases (and photos on some Telegram channels seem to show usage of the FOSS autopilot system ArduPilot (https://ardupilot.org))
by antonkar | 2025-06-01 19:00:54+00:00
Sadly it is almost inevitable we'll have another Bredolab-size botnet (30 mln computers, 1% of all) by cybercriminals but this time it'll be an AI botnet.

As soon as AI components will be useful, they'll be in botnets. And with such a size, you have more compute than OpenAI and can train a frontier misaligned model or modify an open source one:

The solution is to not just have 10% of compute in clouds like we have now but at least 50% in SOTA clouds, to have more compute than botnets. Have AI model App Store, probably NVIDIA will become like Apple:

Will have at least the most minimal checks on what runs on their hardware

We'll have to do it but better to do it early not late

It can be a unicorn startup that NVIDIA will want to buy (motivating gamers to put GPUs in clouds is easy, same with others really, you can share $30-1500/month with them by renting GPUs from your cloud to corporations and others)

There is Salad but they don't secure the hardware and software, so can't really have corporate clients. Amazon AWS, Azure, others, show that it's a real business. Unicorn-sized just in the USA (even bigger if global) if you'll do the math
by nkurz | 2025-06-01 19:01:10+00:00
To create your own, go to the URL, and prepend archive.is/

Thus for this one, use:

archive.is/https://www.washingtonpost.com/investigations/2025/03/22/family-secrets-jfk-files-cia-assets/

Then post the short form here: https://archive.is/uXmDZ
by pjmlp | 2025-06-01 19:01:22+00:00
That is exactly the point, due to trying to cater to the hype FE culture, many SaaS providers only make React and Next.js SDKs available for their products and extension points.

So just like it happens in some many cases in our fashion driven industry, we get dragged into using tools we don't agree with, or be busy with yak shaving adding support for other tooling.
by Hilift | 2025-06-01 19:01:49+00:00
Devices such as this are cloned and used for fraud. It can be done without triggering any of the sensors. Secret service confiscated multiple cloned devices in an enforcement operation recently in NYC.

"Recent incidents in the U.S. include criminals committing fraud through processing fraudulent return transactions. As part of the fraud scheme, criminals obtain Point-of-Sale (POS) devices—either from an acquirer or agent while posing as a merchant, from online resellers or auctions, or through theft—and program the POS devices with the credentials of a legitimate merchant, thus effectively cloning the unsuspecting merchant’s actual POS device. Criminals use the cloned POS devices to..."

https://cardsystems.com/point-of-sale-clone-fraud-activity/
by neilv | 2025-06-01 19:02:22+00:00
That's levels of abstraction, but still thinking.

Just last night, while looking for clear technical information about MCP integration options for Gemini, I found this Google-written article[1], that -- with a positive, hype-compliant spin -- opens with:

> Have you ever had something on the tip of your tongue, but you weren’t exactly sure how to describe what’s in your mind?

> For developers, this is where "vibe coding " comes in. Vibe coding helps developers achieve their vision with models like Gemini 2.5 Pro to generate code from natural language prompts. Instead of writing every line of code, developers can now describe the desired functionality in plain language. AI translates these "vibes" into your vision.

That's not thinking.

We've even appropriated "vibe" terminology, which means something like emotional gut feel, without having to think about it. (Mostly associated with wake-and-bake stoners, who've self-imposed two-digit IQs and munchies, and who will sometimes speak in terms of "vibes", for lack of further analytic capacity.)

Recognizing that the top killer app for "AI" right now is cheating on homework, the collaborate-with-AI 'skill' is like the well-known collaborate-with-lab-partner. The lab partner who does all the work, while the slacking student learns nothing, and therefore the slacker fails the exam. (But, near-term, the slacker might scrape by with a C- for the class, due to copying the lab portion, and due to an instructor who now just wants to be rid of the hopeless student.)

[1] https://cloud.google.com/blog/products/ai-machine-learning/b...
by Aurornis | 2025-06-01 19:03:01+00:00
The value of my land is already evaluated separately from the value of my house by my county.

I already pay a land value tax. I also pay a tax on the house.

The same goes for commercial properties here.

Is this really not common? I constantly see internet claims about how it would cause violent uproar from evil land owners if we taxed land value, but as a land owner I can tell you it’s already happening.

Switching to a full land value tax would just redistribute the taxation entirely on to the land and make the structure tax free. That would be awesome for the people with giant, new construction houses around me but not so good for those of us with smaller, older construction buildings in the same neighborhoods. It would be really bad for the old people living out their final years in their modest old houses which need a lot of repairs (and therefore have low structure grades in the tax system and low structure taxation).
by lelanthran | 2025-06-01 19:03:32+00:00
> I believe breached PoS terminals were what happened in the big Target hack.

The problem is that PoS terminals are not EMV terminals. EMV terminals have been through a certification process, and the hardware part of that certification ensures that the vendor only runs signed-binaries.

Honestly, even if you could write and sideload (or even replace) the applications on the EMV terminal, I do not see a way to get them to a) run, and then b) send money elsewhere.
by mjburgess | 2025-06-01 19:03:50+00:00
Sure, but let's do like-for-like. MLMs and other scams were institutionalised before crypto -- the bushes and top cliton admin people were right there on their payroll. Madelein albright was infamous as an MLM shill. All this was conducted on the mainstream media of that era.

TV never protected people from scams, the law did. TV was the propaganda organ of a corrput elite --- see no more than george bush snr complaining about the simpsons, prefering the cosbys -- a man himself who turned up at the funeral on one of the most psychopathic of the Eron scammers, who was flown to his own inauguration in one of their private jets.

The original conservative cultural elite used the mainstream media to create an illusion of western life consistent with values they wish to see the public perform. Values they themselves did not practice.

They were not protecting people from scams. They were in on the largest scams in american history.
by briian | 2025-06-01 19:04:36+00:00
I think fine tuning is one of the things that makes verticalised agents so much better than general ones atm.

If agents aren’t specialised then every time they do anything, they have to figure out what to do and they don’t know what data matters, so often just slap entire web pages into their context. General agents use loads of tokens because of this. Vertical agents often have hard coded steps, know what data matters and already know what APIs they’re going to call. They’re far more efficient so will burn less cash.

This also improves the accuracy and quality.

I don't think this effect is as small as people say, especially when combined with the UX and domain specific workflows that verticalised agents allow for.
by theamk | 2025-06-01 19:04:50+00:00
there is a great difference between corporate presentations vs sales presentation

People on WWDC are there because they wanted to.

Most corporate presentations are not like that. Yes, I am sure HR is very excited about that new expense reimbursement process. And the UX team is super happy about website redesign. And the team members sitting on the front rows are really enjoying hearing about their work.

But most people who watch those don't really care. They only go to presentations because the other channels are insufficient - the team could not be figured out how to create concise docs that still have all the important details, so now everyone has suffer through another long presentation instead...

In this case, you don't want "one visual per slide", you want to have informative slides so someone who is watching your presentation while eating lunch, or on 2x speed, does not get lost. Ideally, slides would be self-standing and presenter would only be needed for those who don't want to read.

Listen to your management. They get it, you don't.
by bitwize | 2025-06-01 19:06:07+00:00
Want to give an Amiga user an orgasm? Fuck them gently and at the right moment, nibble their ear and whisper the words "custom chips" into it.

By contrast, there's a story about some Microsoft engineers taking a look at the Macintosh and asking the Apple engineers what kind of custom hardware they needed to pull off that kind of interface. The Apple guys responded, "What are you talking about? We did this all with just the CPU." Minds blown.

The designers of the Mac (and the Atari ST) deserve mad credit for achieving a lot with very little. Even though, yes, the Amiga was way cooler in the late 80s.
by gnat | 2025-06-01 19:06:07+00:00
The librarian and the article cited don’t claim that the book classification system is the traditional book classification system of Māori. You are reacting to a claim of your own creation.

Each god has a bunch of different associations/responsibilities in traditional Māori culture. Applying those to book classification is the novelty, which they claim as novel and are proud of having created.
by Aurornis | 2025-06-01 19:06:14+00:00
> How do people separate their land value from the development value?

This was already done in every place I’ve ever lived. The local assessor has rules and algorithms for valuing land and valuing structures for tax purposes.

Insurers do the same.

It’s so common that I’m confused about why it’s a sticking point in these conversations. I think a lot of LVT proponents don’t even understand that land is currently taxed in many (most?) places. Switching to a pure LVT would just make the structures free from taxation and redistribute the missing tax revenue on to the pure land value.

Great for people with big, nice, new houses who would get to shift some of their tax burden to their neighbors with smaller, older, less nice houses on similar land.
by SpicyLemonZest | 2025-06-01 19:06:51+00:00
The big difference that's been highly relevant recently (https://www.swissinfo.ch/eng/politics/un-criticises-restrict...) is the application of asylum rules to civil war. You only have a right to international asylum if you can't find refuge in your home country - but what does "can't" mean, precisely, when your country is split into multiple warring factions along hazy front lines? There's a lot of room for interpretation.
by miles | 2025-06-01 19:06:53+00:00
Given their excellent record, it's strange that ElevenLabs would make a basic transcription mistake in the embedded introduction video[1].

At around 30 seconds in[2], an AI agent types and says, "Hi! Welcome to our design studio." to which a customer responds「すみません、日本語で話してもいいですか？」(Sorry, may I speak Japanese?).

The AI agent then says 「もちろんです。日本語に切り替えましょう。」(Of course. Let's switch to Japanese.) but types「ご心配なく。数量は柔軟に対応できます。」which means "No worries. We can be flexible with the quantity."

[1] https://www.youtube.com/watch?v=TlclS4wLWgY

[2] https://imgur.com/18U9uUU