MurphyA/hacker-news huggingface dataset:
by incomingpain | 2025-06-05 18:00:14+00:00
>> The statement "Elon is snowball" is a misunderstanding

I had no idea what you meant. I asked Deepseek qwen3 8b. 7 seconds later, explained the whole thing in good depth.

>Is it just their model, or is it something fundamental to LLMs? How long until LLMs can make this link all by themselves?

Obviously not a LLM problem because I guess I knew the whole elon musk is a career snowball guy; but really had no idea what was meant here until after an LLM explained it.

What Elon does is rather simple. 100 years from now, what will exist that doesnt right now. Lets do it; no fear no doubt. We'll do the blood sweat and tears and be the one to do it.

Usually isn't the very first on the scene, optimus robot was started long after boston dynamics had lots of success. Tesla? There were loads of electric self-conversions on the road long before lithium ion batteries were commercialized. He just said it's time to do it.
by eyberg | 2025-06-05 18:00:31+00:00
I kinda see the different side of the coin.

"a determined and amoral adversary" - I'd kinda disagree with this (the amoral adversary part being necessary). If you crawl through the vast data breach notification lists that many states are starting to keep - MA, ME, etc. there are so many of them (like literally daily banks, hospitals, etc. are having to report "data breaches" that never ever make the news) - not all of them are happening cause of ransomware. Sometimes it's just someone accidentally not locking a bucket down or not putting proper authorization on a path that should have it. It gets found/fixed but they still have to notify the state. However, if someone doesn't know what they are looking at, or it's a program so it really has no clue what it's looking at and just sees a bunch of data - there's no malicious intent but that doesn't mean that bad things can't happen because that data has now leaked out.

Guess what a lot of these LLMs are training on?

So while Andrey's software is finding all sorts of interesting stuff there's a bunch of crap being generated inadvertently that is just bad.
by meltyness | 2025-06-05 18:00:32+00:00
By my memory, a cron runs a script that checks my cert file's last modified daily. When it is a certain number of days since (flavored Bash statements) the file last modified I'll certbot and install whatever comes back.

It's very under-engineered, maybe a trifold pamphlet on light A11 printed with a laser jet running out of ink.

I've probably spent more time talking about how much it sucks than I have bothered considering a proper solution, at this point.
by zamadatix | 2025-06-05 18:01:02+00:00
I'd say my comment could refer to any law attempting to curtail consumption of content itself by purely trying to limit distribution channels only. Social media laws aren't really about limiting consumption of the content, they are about limiting who can sign up to actively contribute and otherwise participate as an active member to the social media site. What checks are or aren't done by the laws is a bit besides that point as they aren't what make such laws ineffective (though they can be problematic for other reasons depending what and how). This includes ZKPs as they, similarly, only increases the burden on those actually attempting to consume the content legitimately.

If you want to prevent most teens from consuming porn on the internet then they're the ones you have to somehow convince the risk isn't worth it. If you're not willing to do that in a meaningful way (which most, reasonably, aren't) then no amount of technobabble or pages of law are going to put a dent in their porn consumption.
Show HN: ClickStack – Open-source Datadog alternative by ClickHouse and HyperDX
by mikeshi42 | 2025-06-05 18:01:21+00:00
Hey HN! Mike & Warren here from HyperDX (now part of ClickHouse)! We’ve been building ClickStack, an open source observability stack that helps you collect, centralize, search/viz/alert on your telemetry (logs, metrics, traces) in just a few minutes - all powered by ClickHouse (Apache2) for storage, HyperDX (MIT) for visualization and OpenTelemetry (Apache2) for ingestion.

You can check out the quick start for spinning things up in the repo here: https://github.com/hyperdxio/hyperdx

ClickStack makes it really easy to instrument your application so you can go from bug reports of “my checkout didn’t go through” to a session replay of the user, backend API calls, to DB queries and infrastructure metrics related to that specific request in a single view.

For those that might be migrating from Very Expensive Observability Vendor (TM) to something open source, more performant, and doesn’t require extensive culling of retention limits and sampling rates - ClickStack gives a batteries-included way of starting that migration journey.

For those that aren’t familiar with ClickHouse, it’s a high performance database that has already been used by companies such as Anthropic, Cloudflare, and DoorDash to power their core observability at scale due to its flexibility, ease of use, and cost effectiveness. However, this required teams to dedicate engineers to building a custom observability stack, where it’s difficult to not only get their telemetry data easily into ClickHouse but also struggling without a native UI experience.

That’s why we’re building ClickStack - we wanted to bundle an easy way to get started ingesting your telemetry data whether it’s logs & traces from Node.js or Ruby to metrics from Kubernetes or your bare metal infrastructure. Just as important we wanted our users to enjoy a visualization experience that allowed users to quickly search using a familiar lucene-like search syntax (similar to what you’d use in Google!). We recognise though, that a SQL mode is needed for the most complex of queries. We've also added high cardinality outlier analysis by charting the delta between outlier and inlier events - which we've found really helpful in narrowing down causes of regressions/anomalies in our traces as well as log patterns to condense down clusters of similar logs.

We’re really excited about the roadmap ahead in terms of improving ClickStack as a product and the ClickHouse core database to improve observability. Would love to hear everyone’s feedback and what they think!

Spinning up a container is pretty simple: `docker run -p 8080:8080 -p 4317:4317 -p 4318:4318 docker.hyperdx.io/hyperdx/hyperdx-all-in-one` In browser live demo (no sign ups or anything silly, it runs fully in your browser!): https://play.hyperdx.io/ Landing Page: https://clickhouse.com/o11y Github Repo: https://github.com/hyperdxio/hyperdx Discord community: https://hyperdx.io/discord Docs: https://clickhouse.com/docs/use-cases/observability/clicksta...
by byt3bl33d3r | 2025-06-05 18:01:28+00:00
I've written tailored offensive security tools and malware for Red Teams for around a decade and now work in the AI space.

The argument that LLMs will enable "super powered" malware and that existing security solutions won't be able to keep up, is completely overblown. I see 0 evidence of this being possible with the current incarnation of "AI" or LLMs.

"Vide coded" malware will be easier to detect if the people creating it don't understand what the code is actually doing and will result in incredible amount of OpSec fails when the malware actually hits the target systems.

I do agree that "vide coding" will accelerate malware development and generally increase the amount of attacks to orgs. However if you're already applying bog-standard security practices like defense in depth, you shouldn't be concerned about this. If anything, you might want to start thinking about SOC automations in order to reduce alert fatigue.

Stay far away from anyone trying to sell you products to defend against "AI enabled malware". As of right now it's 100% snake oil.

Also, this is probably one of the cringiest articles on the subject I've ever read and is only meant to spread FUD.

I do find the banner video extremely entertaining however.
by blibble | 2025-06-05 18:02:53+00:00
the nvidia/AMD/apple chips all require proprietary firmware blobs, it can be enforced in there

yes you won't get people that won't ever update, but you'll get the overwhelming majority

and the hardware the never-updaters use will eventually fail and won't be able to be replaced

also: ban the release of new "open" models, they will slowly become out of date and useless

combine these, and the problem will solve itself over time
by WalterBright | 2025-06-05 18:03:12+00:00
My dad flew in two wars, bombers and fighters and transports, propeller and jet, for 23 years. He also was an instructor for instrument training, and was given the job of accident investigation for a while. He ran base operations at Galena AFB in the Vietnam war. He owned thousands of books on aviation, wrote two books about it, and wrote articles for aviation magazines and books.

Why wouldn't I ask his opinion?
by Freak_NL | 2025-06-05 18:03:14+00:00
> “The goal for all the reverse logistics stuff,” says Roberson, “is to keep things out of the landfill.”

Or rather, to make sure these things are bought and thrown out by consumers instead. Getting rid of unused products costs money unless you have a loophole that allows offloading it onto some poorer country (cf. Atacama desert clothing dump).
by mandevil | 2025-06-05 18:03:27+00:00
https://www.copyright.gov/title17/92chap1.html#110 seems to this non-lawyer to be a specific carve out allowing movies to be shown, face-to-face, in non-profit educational contexts without any sort of license. The Fair Use Four Factors test (https://www.copyright.gov/title17/92chap1.html#107) isn't even necessary in this example.

Absent a special legal carve-out, you need to get judges to do the Fair Use Four Factors test, and decide on how AI should be treated. To my very much engineer and not legal eye, AI does great on point 3, but loses on points 1, 2, and 4, so it is something that will need to be decided by the judges, how to balance those four factors defined in the law.
by fazlerocks | 2025-06-05 18:04:06+00:00
Learn prompt engineering and how to effectively use AI coding assistants… that's immediately useful and will save you hours daily.

Vector databases (Pinecone, Weaviate) and building RAG systems. Tons of companies need this now and most devs don't know it yet.

Understanding model fine-tuning and when it's worth it vs just better prompting. Also get comfortable with AI ops - monitoring model performance, dealing with hallucinations, cost optimization. The boring stuff that actually matters in production.

And yeah, just stay curious and adaptive. Half the tools we use today didn't exist 18 months ago.
by lupusreal | 2025-06-05 18:04:14+00:00
Guess she doesn't know what snakes eat. Usually if there are snakes around it's because you have rodents. If you're smart you leave the snakes to their business and try to address the rodent problem instead.

Same deal with spiders, they're obligate carnivores. If there are spiders around, that's because there are other bugs about.

Honestly I understand wolf culls a lot more. I don't agree with them, but I understand the rational motive of people who have livestock, pets, or even children.
by citizenpaul | 2025-06-05 18:04:17+00:00
>(HN) is probably the worst place to voice this out loud

Yeah. I got some hate on HN for saying some store that basically sold what I call "store to landfill" junk was. Well exactly that and it probably is not worth being upset that it was going out of business. As you said it was all about the HN feelings while ignoring the massive wasteful reality for a brief spike of endorphin.

10 Chinese children lived lives of abject poverty in a factory so you can have a $5 rubber monkey mask for a 30 second work gag at the scrum standup. But hey you don't have to see them so who cares.
by gausswho | 2025-06-05 18:04:22+00:00
I would say it has improved substantially in the past years

To your items, and my experience on Pixels 7, 9, and 9a running GrapheneOS regularly for the last two years:

1. I use Uber and Lyft semi-regularly (disabled when not actively using) and don't recall experiencing any crashes. Can't speak to ev or parking apps.

2. It may not meet your definition of modern, but I am very happy with Syncthing Fork on phone alongside Syncthing on linux laptop and desktop (where I run restic nightly backups.) It takes some effort to set up compared to handing the keys to the big corps, I will give you that. I'm still unsatisfied with GrapheneOS backups, but mainly because I want them written to storage where my syncing can send them along, and be able to flash a new phone as if it were a regular drive. But that's maybe asking a lot on phone hardware?

3. Pixel Camera app I pull down from Aurora Store, decline Network permission, and takes photos seamlessly even without Play services. It won't let you actually view photos in app without the Google Photos app which is a bummer. I've taken to using Files to view them, which is cumbersome. Maybe I should just install Photos and decline network.
by righthand | 2025-06-05 18:04:27+00:00
Correct I mentioned it. If Twitter wasn’t a US company we’d never be having a conversation about freedom of speech so be ignorant about that all you want. However it’s silly you choose that reasoning.

Isn’t your suggestion to remember the words of “sticks and stones” the same as you advocating for how everyone should protect themselves from bad words?

I don’t use either platform because I find short form writing utterly valueless for anything than marketing purposes. You may say “but I read a lot of good discussions on there”. Great for you but the discussions are still mostly short form rhetoric with little value other than “talking out loud”. The other half of discussions is split between jobless comedians and hate-speech-as-freedom-of-speech advocates. I will never get my science, news, etc from a quote box. There’s a reason I deleted my account 10 years ago.
by PaulHoule | 2025-06-05 18:05:40+00:00
My take on it is that certain people's image, likeness or name are commonly used to induce a state of disorientation and manipulate people. For the past 20 years for instance any site like Yahoo Finance has pictures of Warren Buffet that are used to sell the exact opposite of Buffet's value investing. There was that fad for Dr. Oz. Similarly people today see Elon as either a villain or a savior. It's bad enough that I think of hitting the flag button on any post about him whether it is positive or negative.

Somebody who thinks this way training an AI would try to discourage it from making aimless speculations about him or talking about him any more than necessary.
Show HN: iOS Screen Time from a REST API
by anteloper | 2025-06-05 18:06:21+00:00
We're Oliver and Royce and we're the founders of Clearspace. We build tools to help people reduce their screen time (here’s us two years ago: https://news.ycombinator.com/item?id=35888644)

We get all kinds of requests from users for ways they'd like to use their screen time data.

- “Auto-donate $x to charity every time I exceed a limit or try to bypass it”

- “My 75 Hard group has a screen time requirement, can we set up group visibility?”

- “Let my personal agent know if it’s a good time to tackle things on my todo list”

- “Auto-report large deviations in my screen time to my therapist “

We aren't able to build for all of them, so we're releasing this API.

This is the first time iOS Screen Time is accessible on the web. Apple doesn’t expose it, but since we measure it ourselves, we can - via UI or API. We're launching this API so developers can build all these tools and more. Our goal is to enable more solutions to what we believe is the biggest problem in the world - the misalignment of human attention and intention in the digital world.

Here's a quick demo of setting up and using the API: https://drive.google.com/file/d/1QahETj3xaaIsn0JiNbuqvTaSLdx...
by nancyminusone | 2025-06-05 18:06:23+00:00
>I don’t want it, but what am I supposed to do? It will end up in the garbage one way or another. I stuff it in my bag.

This seems to be the common thread here - judging by the pictures, the stuff in these bins seems to be 95% junk. It's trash brand new in the package. Hard to believe anyone would pay any amount for it. Almost seems like you're losing money by not dumping it directly into the ocean.

Apparently, I'm wrong enough that there's hundreds of these stores in business.
by skybrian | 2025-06-05 18:06:38+00:00
Also, people in Singapore seem to be particularly vulnerable to scams:

> Pang is just one of tens of thousands of Singaporeans to fall foul of scams last year, who lost a total of S$1.1bn, according to police, a 70 per cent increase on the previous year. The true figure could be even higher, according to the Global Anti-Scam Alliance, which estimates that more than two-thirds of Singaporean victims did not report their experience.

> This is a small part of a global criminal enterprise worth an estimated $1tn, but Singaporeans, affluent, digitally advanced and compliant, are particularly vulnerable to these scams. As one person involved in the recovery of assets put it: “They are rich and naive”.

https://archive.is/fCmW1
by joshmlewis | 2025-06-05 18:07:13+00:00
Yeah, exactly. For everyone who might not know, the chat apps add lots of complex system prompting to handle and shape personality, tone, general usability, etc. IDE's also do this (with Claude Code being one of the ones that are closest to "bare" model that you can get) but at they are at least guiding it's behavior to be really good at coding tasks. Another reason is using the Agent feature that IDE's have had for a few months now which gives it the ability to search/read/edit files across your codebase. You may not like the idea of this and it feels like losing control, but it's the future. After months of using it I've learned how to get it to do what I want but I think a lot of people who try it once and stop get frustrated that it does something dumb and just assume it's not good. That's a practice and skill problem not a model problem.
by drawnwren | 2025-06-05 18:07:27+00:00
Very strange. I find reasoning has very narrow usefulness for me. It's great to get a project in context or to get oriented in the conversation, but on long conversations I find reasoning starts to add way too much extraneous stuff and get distracted from the task at hand.

I think my coding model ranking is something like Claude Code > Claude 4 raw > Gemini > big gap > o4-mini > o3
by aiauthoritydev | 2025-06-05 18:07:42+00:00
> In a pilot program launched in Singapore, the tech giant now blocks the installation of certain sideloaded apps—particularly those requesting sensitive permissions such as SMS access or accessibility services—if they are downloaded via web browsers, messaging apps, or file managers. The move, developed in partnership with Singapore’s Cyber Security Agency, is designed to prevent fraud and malware-enabled scams.

This is a reasonable restriction and I am surprised this restriction is coming now and not ten years ago.

Sideloading must be limited to tech savvy users only who know what they are doing.
by Pxtl | 2025-06-05 18:07:51+00:00
Worth noting - was that before or after Google started getting painful decisions in court battles on the App Store thing?

Because this is not going to be super positive for them on that front.

> victims would also be guided to disable Google Play Protect that helps to prevent harmful downloads.

I feel like there's only so much a company can do when it comes to balancing protecting users from themselves vs allowing users free rights over their own computers, especially when users have gotten habituated to ignoring incessant safety warnings caused by attempts to protect users.

I also keep wondering how safe the Play store is from this stuff. The very existence of obscenely detailed public GPS datasets about Android users show that even "official store" apps are somewhat malicious.

I don't see a real solution besides giving a smart and friendly 3rd party admin rights over the devices of susceptible users.
by zdp7 | 2025-06-05 18:08:05+00:00
"SECTION 1. Section 631 of the Penal Code is amended to read: 631. (a) A person who, by means of a machine, instrument, or contrivance, or in any other manner, intentionally taps, or makes an unauthorized connection, whether physically, electrically, acoustically, inductively, or otherwise, with a telegraph or telephone wire, line, cable, or instrument, including the wire, line, cable, or instrument of an internal telephonic communication system, or who willfully and without the consent of all parties to the communication, or in an unauthorized manner, reads, or attempts to read, or to learn the contents or meaning of a message, report, or communication while the same is in transit or passing over a wire, line, or cable, or is being sent from, or received at any place within this state; or who uses, or attempts to use, in any manner, or for any purpose, or to communicate in any way, information so obtained, or who aids, agrees with, employs, or conspires with any person or persons to unlawfully do, or permit, or cause to be done any of the acts or things mentioned above in this section, is punishable by a fine not exceeding two thousand five hundred dollars ($2,500), or by imprisonment in the county jail not exceeding one year, or by imprisonment pursuant to subdivision (h) of Section 1170, or by both a fine and imprisonment in the county jail or pursuant to subdivision (h) of Section 1170. If the person has previously been convicted of a violation of this section or Section 632, 632.5, 632.6, 632.7, or 636, the offense is punishable by a fine not exceeding ten thousand dollars ($10,000), or by imprisonment in the county jail not exceeding one year, or by imprisonment pursuant to subdivision (h) of Section 1170, or by both that fine and imprisonment. (b) This section does not apply to any of the following: (1) A public utility, or telephone company, engaged in the business of providing communications services and facilities, or to the officers, employees or agents thereof, where the acts otherwise prohibited herein are for the purpose of construction, maintenance, conduct, or operation of the services and facilities of the public utility or telephone company. (2) The use of any instrument, equipment, facility, or service furnished and used pursuant to the tariffs of a public utility. (3) A telephonic communication system used for communication exclusively within a state, county, city and county, or city correctional facility. (4) A commercial business purpose. (c) For purposes of this section, “telephone company” has the same meaning as defined in paragraph (3) of subdivision (c) of Section 638. (d) Except as proof in an action or prosecution for violation of this section, evidence obtained in violation of this section is not admissible in a judicial, administrative, legislative, or other proceeding." Did you read this? It exempts commercial business purposes from the consequences of tapping communications without authorization.