MurphyA/hacker-news huggingface dataset:
by graemep | 2025-06-26 07:46:21+00:00
It does not have to be a replica of of 50s society though. In particular, I do not think the model of "men go out to work, women look after home and kids" is a great one.

There are lot of alternatives. Men can be primary parents (I was, once the kids got to about the age of eight or so, and was an equal parent before that) and they could stay at home (I continued working, but I was already self-employed and working from home, and my ex never worked after having children).

I think the ideal set up (it would have been so for me) would have been for both parents to work part time.

Of course it still comes back to, you should be able to raise a family on the equivalent of one full time income.

Of course, if the leisured society predicted a few decades ago had come to pass it would be one part time salary.
by aaron695 | 2025-06-26 07:48:21+00:00
> > The U.S. can now employ quantum sensing to see stealthy opponents

Everything in the article is garbage and doesn't represent what Rob McHenry said. As you can see in the video for yourself - https://www.youtube.com/watch?v=oLYgv5h23bc

What Rob McHenry does say in the video is also garbage, stunningly wrong, the video is a waste of time don't watch it.

I too thought it would be about the many ways the abundance of tech is killing stealth.

Radar can see stealth planes, it's just not as good, and can be bombed, but cheap tech means you can install lots of them. Many solutions exist that might be viable as tech gets cheaper and computers can process the data to make stealth redundant.
by fredilo | 2025-06-26 07:49:49+00:00
> The maintainer could just write a wrapper around malloc that crashes on failure and replace all calls with the wrapper. It seems like an easy fix. Because almost no software can run where there is no heap memory so it makes no sense for the program to continue.

So could the reporter of the bug. Alternatively, he could add an `if(is null){crash}` after the malloc. The fix is easy for anyone that has some knowledge of the code base. The reporter has demonstrated this knowledge in finding the issue.

If a useful PR/patch diff was provided with the reporter, I would have expected it to be merged right away.

However, instead of doing the obvious thing to actually solve the issue, the reporter hits the maintainer with this bureaucratic monster:

> We'd like to inform you that we are preparing publications on the discovered vulnerability.

> Our Researchers plan to release the technical research, which will include the description and details of the discovered vulnerability.

> The research will be released after 90 days from the date you were informed of the vulnerability (approx. August 5th, 2025).

> Please answer the following questions:

>

> * When and in what version will you fix the vulnerability described in the Report? (date, version)

> * If it is not possible to release a patch in the next 90 days, then please indicate the expected release date of the patch (month).

> * Please, provide the CVE-ID for the vulnerability that we submitted to you.

>

> In case you have any further questions, please, contact us.

https://gitlab.gnome.org/GNOME/libxml2/-/issues/905#note_243...

The main issue here is really one of tone. The maintainer has been investing his free time to altruistically move the state of software forward and the reporter is too lazy to even type up a tone-adjusted individual message. Would it have been so hard for the reporter to write the following?

> Thank you for your nice library. It is very useful to us! However, we found a minor error that unfortunately might be severely exploitable. Attached is a patch that "fixes" it in an ad-hoc way. If you want to solve the issue in a different way, could we apply the patch first, and then you refactor the solution when you find time? Thanks! Could you give us some insights on when after merging to main/master, the patch will end up in a release? This is important for us to decide whether we need to work with a bleeding edge master version. Thank you again for your time!

Ultimately, it is a very similar message content. However, it feels completely different.

Suppose you are a maintainer without that much motivation left, and you get hit with such a message. You will feel like the reporter is an asshole. (I'm not saying he is one.) Do you really care, if he gets powned via this bug? It takes some character strength on the side of the maintainer to not just leave the issue open out of spite.
by lmm | 2025-06-26 07:49:57+00:00
> All I wanted to show that ROSI can make a compelling argument for buying insurance.

But it can't! In the real world, insurance will always be a bad idea in expected value terms (unless being sold by an insurance company with bad pricing that's about to go bankrupt). Your model doesn't work and the only way you can pretend it works is by making up unrealistic fake numbers.
by 9rx | 2025-06-26 07:53:23+00:00
> Sort of my whole point is that there is no situation in life that we can "fully" shape into what we want

I am not sure I intended for you to take it that literally, but to the extent that you can fully shape it within the constraints of reality. For example, it is abundantly clear that countrysides are not all equal. Even on the surface, countryside can vary from farmland, mountains, lakes, forests, etc. which each enable completely different lifestyles. Going deeper, the social experience can vary wildly from one countryside to the next. You get the idea. There are some countrysides I'd have no qualms about living in, and others I wouldn't even want to vacation in, let alone live there (even while others quite happily live there). That choice is something within your control.

> I grew into an adult and commuted to my local college from the countryside.

I assume this means that you carried on your stay still living with the same family? If so, I'm not sure that changes the calculus. It is not like something magical happens when you turn 20. The significance of being a teenager earlier was only in that it implied that you were following your parents around. If you continued that into your 20s, 30s, 40s, hell if you are 80 and living in a place of someone else's choosing rather your choosing then I'd say the same applies.

Let me ask this: If you, for some reason, were forced to move to the countryside today, are you choosing to move to the exact place your family chose all those years ago or are you going elsewhere? Assuming you give it some thought, my expectation is latter. The world is a pretty big place. The statistical likelihood that the place you ended up in as a teenager with presumably little to no input also being the best option you can independently find among all of the different countrysides is low.
by jeroenhd | 2025-06-26 07:53:32+00:00
Any programming language can be a solution, the programming language itself isn't the problem. Convincing device driver programmers around the world to come up with a universal API that includes all the possible features and works on every OS is.

In this case, the cross-platform libusb should make this code work on either Linux or Windows (if you install the signed Windows drivers). If other operating systems port libusb, they get this code for free.

Most "real" drivers still run in kernel mode, though, and not even Linux can keep their ABI stable (Windows has to, between releases, with the aid of compatibility wrappers that only work for a certain amount of releases).

It would probably be worth it more forbBespoke operating systems to implement either the Windows API (like ReactOS does) or the Linux API (pick an LTS version) to get existing drivers to work. Unless you pay them, most driver programmers aren't going to bother with anything than Windows, maybe Linux, possibly macOS.
by detaro | 2025-06-26 07:55:01+00:00
Hiring lots of people and setting grander goals (because you have lots of money and just hired tons of people) is an excellent way of slowing development down for a while, it doesn't make things go faster.

Bigger projects take longer, and many studios chased bigger and better, instead of aiming smaller. Which then meant that these things had to be standout hits to be considered successful, which puts more pressure on perfecting everything, which takes more time, ...

Then many studios have stories of either deep direction changes or large projects being cancelled as the money wasn't as available anymore and trends shifted. E.g. Sony alone has probably spent over a billion and multiple years of work of several studios on live-service games that they then scrapped, Dragon Age Veilguard pivoted a few times (and ended up a mess as a result), ... stories like that across the AAA space.
by graemep | 2025-06-26 07:55:03+00:00
I somewhat agree, and it is very harmful, but adults who did not have phones as kids can be just as bad. I have even seen someone posting on social media (with a photo of what was happening) to complain about a child not putting their device down!

It is not just sad, it is harmful. "What is life if full of care, we have no time to stand and stare". It is the opposite of mindfulness.
by chrisldgk | 2025-06-26 07:55:07+00:00
At our company we use better auth for every product that has any kind of user account logic. It’s great since it’s drop-in, the plugins give so much functionality that you’d have to roll on your own in so little time and the integrations with ORMs like drizzle and prisma mean that your schemas stay the SSOT that they should be, even for auth. It’s extensible where it needs to be and brings defaults that are more than sane. Also the RPC-like TypeScript client that you also get for free is so good I don’t know how I could live without that.

Glazing over, I just wanted to give props and say that whatever good happens to better-auth, it deserves it.
184,000 Ray AI Dashboards Exposed Online Without Authentication
by hacker_might | 2025-06-26 07:55:40+00:00
https://medium.com/@hacker_might/no-auth-no-problem-how-184-000-exposed-ray-dashboards-are-putting-ai-infrastructure-at-risk-fe737116afa8

While digging into a known Ray Dashboard vulnerability, I discovered something alarming—over 184,000 Ray dashboards are publicly accessible without any login or access control. These dashboards allow anyone to remotely run code, steal secrets, or hijack AI infrastructure.

I detail the exposure, how attackers could abuse it, and what teams can do to secure their setups. This goes far beyond misconfiguration—it’s a systemic oversight in how AI infra is deployed.

Would love to hear your thoughts or see if others have found similar cases.
by komali2 | 2025-06-26 07:55:41+00:00
OOookay yeah sure, human activities can have secondary consequences on people around them, that's true. So, what? The conversation was around mitigating risk...

Also, imo cars and their driver's dependence on them are a significantly greater cause of noise pollution than me and my stock pipe motorcycle, or even a harley. Hundreds of car tires rolling by on the road all day every day is so horrendously loud I can hear it from the 21st floor of my parent's apartment. When the 3 nearby red lights line up perfectly it's suddenly so quiet you can hear the cidadas on the mountain.

Not to mention the beeping, in the city I can hear a car beep from hundreds of meters away, echoing off the buildings. Or sometimes when I'm a pedestrian they'll dare to beep at me for the crime of walking in a way that inconveniences them, that's very very loud!

I take my motorcycle from my apartment straight into the basically unlived-on mountain roads, two weekends a month at most. I highly doubt I'm burdening anyone even a fraction what the average car driver does to tens of thousands of people every week.
by esperent | 2025-06-26 07:55:53+00:00
Also, if you're a small business without a dedicated tech team, what are your options that don't involve relying on a single big company?

Speaking for myself, running a bakery, I chose MS 365/Teams with regret but accepting that there's nothing else out there with the same value proposition except maybe Google workspace.

They have regional pricing so we get everything for the equivalent of $3.50 per user. Basically no other apps offer regional price - Slack alone would cost about $8 a user.

This includes chat, calls, messaging, 1tb of onedrive space per user, calendar, planner, emails, office, plus loads more.

Sure, it's janky but it basically works. The only thing I've found with a close value proposition (still slightly more expensive even if I limit to just a few gb of space per user) is self-hosted Nextcloud, which is about the same level of janky and requires a tech person or team to set up.
by _cs2017_ | 2025-06-26 07:56:11+00:00
This is incorrect. The data discussed in court is data freely visible on the web, not user data that the users sent to Google.

If the data is sent by a user to sub-unit X of Google, and X promised not to use it for training, it implies that X can share this data with sub-unit Y only if Y also commits not to use the data for training. Breaking this rule would get everyone in huge trouble.

OTOH, when sub-unit X said "We promise not to use data from the public website if the website owner asks us not to", it does not imply another sub-unit Y must follow that commitment.
by jeroenhd | 2025-06-26 08:00:10+00:00
I think they wrote the code more for the challenge of it than anything else. The final code doesn't seem to do more than the bare basics (which is probably enough for the author).

Plus, to port this to OpenRGB, you'd need to rewrite the code into C++ (ugly, old C-inspired C++, at that: https://github.com/CalcProgrammer1/OpenRGB/blob/master/CONTR...) which would take most of the joy out of it for me at least.
by guiriduro | 2025-06-26 08:00:24+00:00
We (the EU) should have a reasonable response for monopolistic or significant market share suppliers that may fall under the control of foreign governments that could mitigate this issue. Else I noted:

(the EU) doesn't need to throw out the baby with the (US-controlled) bathwater. The EU should present Microsoft with an ultimatum similar to what China might: setup a non-controlled european licensee to own and manage all MS & Azure infrastructure in the region, or have some legislators force a similar structure on them. Complete control, full sourcecode, EU-only support/access - as a condition for corp HQ being allowed to have a monopolistic market share. Either way, nothing the US might decide to do should have any effect in "EU Microsoft", short of severing US Microsoft off completely, in which case EU MS just becomes fully autonomous and bye-bye US. Clearly, a US-controlled Microsoft without this structure is a deep security risk to europe now.
by perihelions | 2025-06-26 08:01:35+00:00
Also,

https://news.ycombinator.com/item?id=44356890 ("Vera C. Rubin Observatory first images (rubinobservatory.org)" (169 comments))

https://news.ycombinator.com/item?id=44323389 ("Giant, all-seeing telescope is set to revolutionize astronomy (science.org)" (69 comments))
by _flux | 2025-06-26 08:01:35+00:00
Obviously I cannot show the code base, but when I pick a pre-existing solution from Stackoverflow or elsewhere—though it is quite rare—I do add a comment linking to the source: after all, in case of SA the discussion there might be interesting for the future maintainers of the function.

I just checked, though, and the code base I'm now working with has eight stackoverflow links. Not all are even written by me, according to quick check with git blame and git log -S..
by nojs | 2025-06-26 08:01:36+00:00
The best approach is never to get remotely close to the point where it auto-compacts. Type /clear often, and set up docs, macros etc to make it easy to built the context you need for new tasks quickly.

If you see that 20% remaining warning, something has gone badly wrong and results will probably not get better until you clear the context and start again.
by graemep | 2025-06-26 08:02:40+00:00
Proprietary source code would not usually end up training LLMs. Unless its leaked, how would an LLM have access to it?

> it would require speculative copyright owners to disassemble their binaries

I wonder whether AI might be a useful tool for making that easier.

If you have evidence then you can get courts to order disclosure or examination of code.

> And plenty of proprietary software has public domain code in it already.

I am pretty sure there is a significant amount of proprietary code that has FOSS code in it, against license terms (especially GPL and similar).

A lot of proprietary code is now been written using AIs trained on FOSS code, and companies are open about this. It might open an interesting can of worms.
by adrian_b | 2025-06-26 08:03:57+00:00
Any autonomous machines in a distant enough future will look neither as the present humans or animals nor like the present robots, because they will have to use a mixture of the technologies developed by living beings and by humans.

Humans have developed various things that are better for certain purposes than anything used by a living being, e.g. metals and semiconductor devices (most of the human-only technologies are a consequence of the control of fire, i.e. of the ability to perform manufacturing processes at high temperatures, unlike the living beings, which are limited to temperatures close to that of the ambient). On the other hand, for other purposes the use of organic substances and of the methods of chemical synthesis used by living beings are unbeatable.

So any future descendants will have to use hybrid technologies, like the "cyborgs" of many SF novels/movies, except that I have never seen any SF "cyborg" that combined the right parts from "machines" and from living organisms.

As an example, for the problem of energy storage for powering a machine, for providing short-time high power bursts capacitors and batteries are better than the chemical reactions used by living beings, e.g. ATP & phospho-creatine hydrolysis and anaerobic glycolysis. On the other hand for storing high-amounts of energy for long-time autonomy at a moderate power level, none of the fuel cell or battery technologies that have ever been attempted appears to have the potential to ever match the performances of the enzymatic oxidation of hydrocarbons that converts their chemical energy into ionic gradients in living beings, e.g. in our mitochondria. So an ideal autonomous machine would combine high-power capacitors/batteries with high-energy biologically-derived fuel cells.
by worthless-trash | 2025-06-26 08:04:34+00:00
> That's not to say they should be allowed to 'get away with it', but we need to take into account that it's not really the same thing as adults doing it.

However, they -clearly- do get away with it, continually the current method of punishment is not deterring them from crime. These are not 'oh he made poor decisions style crimes', you're not paying attention or are not living in this area if you think so.

I wish i could dig up the study from Townsville crime statistics (this is the closest i could find https://statements.qld.gov.au/statements/101697 )

The key takeway is:

“The residents living in these areas have been let down for too long under the former Government who allowed serious repeat youth offenders to avoid adequate punishment and let them continue to terrorise these communities,”

Current deterrents clearly are not working. There are only so many levers the government can pull. Children learn poor lessons and inadequate supervision from their families, but if they are taken from their home the media screams 'stolen generation' so in the end individuals terrorised by them have to deal with the burden of their continued long term criminal behavior.

You may believe that children can be rehabilitated, I'd dearly love this to be the truth, however my observations show that its not a reflection of reality.
by jillesvangurp | 2025-06-26 08:07:11+00:00
Worse, you have no idea what you will find on the other side and weather that includes somewhere that doesn't make the arctic poles on earth look like paradise. And you'll be traveling in a small confined space. For ages. The good news is, you'll probably be unconscious for the journey. The bad news is that a lot can happen in decades/centuries/milennia and there's no guarantee you'll actually wake up. And everything else you said.

That raises the question who would want to travel and why. And what's wrong with them. Because the profile for people that want this would be hard to distinguish from somebody that is depressed and suicidal.
by lfxyz | 2025-06-26 08:07:53+00:00
I attended one of their events a few months ago in Amsterdam. You have to hand in your phone when entering the venue and get it back afterwards. I spent around 2 hours reading my kindle in silence. It was really nice being in a space where everyone had put their phones away, but paying 10 euros for the privilege of doing so means I'm unlikely to turn up regularly when I could just go to a cafe and put my phone on airplane mode for free.
by dchest | 2025-06-26 08:07:58+00:00
It's 4-bit quantized (Q4_K_M, 2.5 GB) and still works well for this task. It's amazing. I've been running various small models on this 8 GB Air since the first Llama and GPT-J, and they improved so much!

macOS virtual memory works well on swapping in and out stuff to SSD.
Show HN: Free AI tool to generate SVG icons instantly
by zxcholmes | 2025-06-26 08:08:41+00:00
Tired of hunting for the perfect icon? I created a tool that generates custom SVG icons on demand using AI.

Just type what you need: "email icon", "settings gear", "user profile", etc. The AI creates clean, professional vector graphics that you can download immediately. Why SVG? - Scales perfectly at any size - Tiny file sizes - Easy to customize colors/styles - Works everywhere (web, print, apps) Built this because I was constantly buying icon packs or spending hours searching for "that one perfect icon." Now I just generate exactly what I need in seconds. The tool is free (5 daily generations) with optional credits for private/commercial use. All public icons are searchable in the community gallery. Try it out and let me know what you think!
by Frieren | 2025-06-26 08:09:02+00:00
Are that the average rich person?

I know very hard working people that created their companies and got rich, they treated their employees fairly and were smart and capable.

They are not your average rich person. Your average rich person is an average person with average intelligence, average knowledge but protected from reality what makes them more gullible and they have a hard time understanding many not so difficult concepts about the economy.

Exceptions exist. Your anecdotal evidence is confirmation bias for your world view, quite far from reality.
by graemep | 2025-06-26 08:09:12+00:00
From what point of view?

For someone using MIT licensed code for training, it still requires a copy of the license and the copyright notice in "copies or substantial portions of the software". SO I guess its fine for a snippet, but if the AI reproduces too much of it, then its in breach.

From the point of view of someone who does not want their code used by an LLM then using GPL code is more likely to be a breach.
by artdigital | 2025-06-26 08:09:17+00:00
Wanted to give it a proper try but because it's so overloaded, it almost instantly downgraded me to 2.5-flash. The vscode extension didn't even load, it just gave me a rate limit warning directly after logging in

Tried upgrading to the Standard plan through Google Cloud with the hope that it would allow me to do more, but after switching my account to the now-paid account, it still almost instantly downgraded me to 2.5-flash

For the times when I was able to use 2.5-pro, the output has been very good. But the moment it switches to flash, the quality goes down by about 80% and I would never let it code on anything