MurphyA/hacker-news huggingface dataset:
by mtmail | 2025-06-26 00:32:06+00:00
The pricing page tries to sell that the pricing is easier to understand, no hidden fees etc. Then has to explain the top-up discounts multiple times. I'd remove the whole discounts, it's distracting.

"Wallet" sounds like crypto to me. Maybe it isn't but it's not clear enough "add money to your account" might be sufficient.

The "See The Difference" table. Is it really that different? The header lists a different amount of memory as the table cells. The price difference is about 20% (40 vs 48). Where's the 80% savings from the homepage.

"Perfect Resource Balance - 1:4:50:2000 ratio ensures all resources saturate equally." Sorry, I have no idea what the numbers mean.
by jemmyw | 2025-06-26 00:32:36+00:00
There's no such thing as de-evolution unless you consider evolution has some purposeful direction in the first place. The tomatoes are evolving into the niche that works. Just because there was a plant in the past that occupied that niche doesn't mean the current plants are going backwards - to do so would kind of imply that they know about their current genetic makeup and have decided it's too much effort and isn't working out.
by viraptor | 2025-06-26 00:34:29+00:00
It really depends how far you go. The basics - they're pretty good. But for the more complicated things they just ignore all context and pretty much restate the names of functions/arguments without explaining how/why things work. See for example https://learn.microsoft.com/en-us/windows/win32/api/tsvirtua... and https://learn.microsoft.com/en-us/windows/win32/api/tsvirtua... What does the terminal services renderer do? "It renders bitmaps you dummy, just look at those arguments!"
by bastawhiz | 2025-06-26 00:34:57+00:00
An AV system stopping because of a bug in a library is bad, but that's not because the library has a security bug. It's a security problem because the system itself does security. It would be wild if any bug that leads to a crash or a memory leak was a "security" bug because the library might have been used by someone somewhere in a context that has security implications.

A bug in a library that does rate limiting arguably is a security issue because the library itself promises to protect against abuse. But if I make a library for running Lua in redis that ends up getting used by a rate limiting package, and my tool crashes when the input contains emoji, that's not a security issue in my library if the rate limiting library allows emails with punycode emoji in them.

"Hogging all of the resources on a shared system" isn't a security bug, it's just a bug. Maybe an expensive one, but hogging the CPU or filling up a disk doesn't mean the system is insecure, just unavailable.

The argument that downtime or runaway resource use due is considered a security issue but only if the problem is in someone else's code is some Big Brained CTO way of passing the buck onto open source software. If it was true, Postgres autovacuuming due to unpleasant default configuration would be up there with Heartbleed.

Maybe we need a better way of alerting downstream users of packages when important bugs are fixed. But jamming these into CVEs and giving them severities above 5 is just alert noise and makes it confusing to understand what issues an organization should actually care about and fix. How do I know that the quadratic time regexp in a string formatting library used in my logging code is even going to matter? Is it more important than a bug in the URL parsing code of my linter? It's impossible to say because that responsibility was passed all the way downstream to the end user. Every single person needs to make decisions about what to upgrade and when, which is an outrageous status quo.
by snvzz | 2025-06-26 00:35:46+00:00
That sounds pretty bad, as it's 4.5 generations (sandy/ivy bridge, haswell+refresh and broadwell).

Fortunately, it doesn't matter anymore; Moved that 7900gre to my new machine (Ryzen 9800x3d + 2x 48G DDR5 w/ECC).
by energywut | 2025-06-26 00:35:48+00:00
Don't be facile.

Police reports aren't the only source of data. If this was a widespread impact then there would be other sources of data that could be used to build this case.

Additionally, we cannot make policy decisions on "just trust me, my friend said...". Maybe we can't get a perfect signal, but if you are going to challenge the prevailing data, I expect you to bring something novel beyond vibes. It doesn't have to be perfect, but a single anecdote plus "I believe it" is not sufficient to oppose what the data we do have is consistently saying -- crime is lower in Seattle, and has been consistently lowering over time.
by HeatrayEnjoyer | 2025-06-26 00:37:07+00:00
Ultimately trust must be placed in an entity of some type. A democratically elected body isn't perfect but I can't think of a better option. If the electorate don't care about digital privacy or elected lawmakers do not protect their rights, then that needs to be addressed first. Governments have a monopoly on violence. If a citizen can't trust their government to enact (or enact but then not follow) laws that protect human rights, they frankly have much bigger problems to solve.
by armada651 | 2025-06-26 00:37:13+00:00
> Besides, it's a cat and mouse game where the vendor is the mouse.

The goal of anti-cheat isn't to stop the world's most advanced cheaters. Those are already unstoppable because they now use Direct Memory Access over the PCI-E bus, so the cheats don't even run on the same computer anymore. However since those cheaters are few and far in-between they can be handled through player reports.

The goal is to stop the mediocre cheater who simply downloaded a known cheat from a cheating forum. If you don't stop those you'll get such a large wave of cheaters that you can't keep up with banning them quickly enough.
by aojdwhsd | 2025-06-26 00:39:01+00:00
I used to work at a different bank, and we were able to disable the auto billing update on a card so that when we went to close the card and send one with a new number, no merchants would be notified of the new account. Some workers didn't know this could be done... I'd be surprised if Wells Fargo didn't have a way to turn this off.
by halostatue | 2025-06-26 00:39:22+00:00
I have just started adding DCO to _all_ of the open source code that I maintain and will be adding text like this on `CONTRIBUTING.md`:

---

LLM-Generated Contribution Policy

Color is a library full of complex math and subtle decisions (some of them possibly even wrong). It is extremely important that any issues or pull requests be well understood by the submitter and that, especially for pull requests, the developer can attest to the Developer Certificate of Origin for each pull request (see LICENCE).

If LLM assistance is used in writing pull requests, this must be documented in the commit message and pull request. If there is evidence of LLM assistance without such declaration, the pull request will be declined.

Any contribution (bug, feature request, or pull request) that uses unreviewed LLM output will be rejected.

---

I am also adding this to my `SECURITY.md` entries:

---

LLM-Generated Security Report Policy

Absolutely no security reports will be accepted that have been generated by LLM agents.

---

As it's mostly just me, I'm trying to strike a balance, but my preference is against LLM generated contributions.
by jitl | 2025-06-26 00:42:54+00:00
OneMedical (now owned by Amazon) provides a version of this that also connects you with a general practitioner doctor who you're able to see in your area. They additionally have telehealth-style prescription requests in the app, but you end up with the FDA approved version coming from Amazon pharmacy for $5/month (on top of the $200/year for OneMedical), or for $cheap at your regular pharmacy. A++ would recommend.

However, when I get referrals from OneMedical to specialists like eg sleep apnea, those 3rd party specialists usually have like 8 month waiting lists. So, back to Hims-style online-only providers for that sort of thing.
by b00ty4breakfast | 2025-06-26 00:43:04+00:00
I have an online acquaintance that maintains a very small and not widely used open-source project and the amount of (what we assume to be) automated AI submissions* they have to wade through is kinda wild given the very small number of contributors and users the thing has. It's gotta be clogging up these big projects like a DDoS attack.

*"Automated" as in bots and "AI submissions" as in ai-generated code
by meerab | 2025-06-26 00:43:48+00:00
Interesting approach to transcript generation!

I'm implementing a similar workflow for VideoToBe.com

My Current Pipeline:

Media Extraction - yt-dlp for reliable video/audio downloads Local Transcription - OpenAI Whisper running on my own hardware (no API costs) Storage & UI - Transcripts stored in S3 with a custom web interface for viewing

Y Combinator playlist https://videotobe.com/play/playlist/ycombinator

and Andrej's talk is https://videotobe.com/play/youtube/LCEmiRjPEtQ

After reading your blog post, I will be testing effect on speeding audio for locally-hosted Whisper models. Running Whisper locally eliminates the ongoing cost concerns since my infrastructure is already a sunk cost. Speeding audio could be an interesting performance enhancement to explore!
by sien | 2025-06-26 00:44:22+00:00
There was a crime decline in many rich countries from the 1990s as well.

https://en.wikipedia.org/wiki/Crime_drop#Decline_since_the_e...

Maybe they were doing similar things with lead or something else is a big factor. Perhaps the rise of ever more cheap entertainment for young males who are most likely to commit crime. That's a global thing.
by patcon | 2025-06-26 00:45:11+00:00
Yeah, agree that none of the issues are problems without solutions.

The issue is vulture capitalism and misalignment of incentives for platform vs host vs participants. I've been a part of groups that solved these and grew to 8000-member communities. It's simply that meetup wasn't actually interested to solve the challenges because they needed to extract wealth and pass extraction down the chain (no incentivise to protect underlying communities as a commons)
by viraptor | 2025-06-26 00:46:43+00:00
> An AV system stopping because of a bug in a library is bad, but that's not because the library has a security bug.

(And other examples) That's a fallacy of looking for the root cause. The library had an issue, the system had an issue and together they resulted in a problem for you. Some issues will be more likely to result in security problems than others, so we classify them as such. We'll always deal with probabilities here, not clear lines. Otherwise we'll just end up playing a blame game "sure, this had a memory overflow, but it's package fault for not enabling protections that would downgrade it to a crash", "no it's deployments fault for not limiting that exploit to just this users data partition", "no it's OS fault for not implementing detailed security policies for every process", ...
by LanceH | 2025-06-26 00:46:58+00:00
Depends on what you're listening to. If it's a recap of something and you're just looking for the answer to "what happened?", that can be fine for 2x. If you're getting into the "why?" maybe slower is better. Or if there are a lot of players involved.

I'm trying to imagine listening to War and Peace faster. On the one hand, there are a lot of threads and people to keep track of (I had a notepad of who is who). On the other hand, having the stories compressed in time might help remember what was going on with a character when finally returning to them.

Listening to something like Dune quickly, someone might come out only thinking of the main political thrusts, and the action, without building that same world in their mind they would if read slower.
by lioeters | 2025-06-26 00:47:47+00:00
Thanks! I haven't heard of any person in that list - other than Chinua Achebe, author of Things Fall Apart. Oh and literally just this week I heard about Edward Said and his book Orientalism. Well I'm going to enjoy studying the works of these writers and thinkers.

> at the root we're all living in fractured relationship with each other

Indeed, and technology plays an increasing role in mediating and shaping those social relations. That's very relevant in the context of ChatGPT becoming a kind of oracle and object of worship.
by privatelypublic | 2025-06-26 00:47:52+00:00
Thanks for trying to expound on my expounding on the original. But, the response indicates they don't know and actively avoid learning. Thus, nothing would change their mind.

PS: to throw some shade- I'm surprised they didn't (mis)spell it M$- after all everything they mentioned is making me nostalgic for phpBB based tech forums in 2004.
by dontdoxxme | 2025-06-26 00:48:24+00:00
That example doesn't work, but an IPv6 address like: 3fff:0020::

Would be in the IP SAN as 3fff0020000000000000000000000000, which this code expands:

"3fff0020000000000000000000000000" .toLowerCase() .match(/.{1,4}/g) .join(":") .replace(/\b:?(?:0+:?){2,}/, "::") '3fff::20:0000:0000:0000:0000:0000:0000'

Which has one too many parts and doesn't parse as an IPv6 address. But like mentioned this is just presentation code. I don't want to waste time if this isn't actually a bug, but maybe someone on the LetsEncrypt trial could actually make a cert to see if IP addresses formatted like that are a problem in reality...
by mamcx | 2025-06-26 00:49:19+00:00
Well. this is clearly just a example of a hard problem where MS tools are good for.

The MOST common developer that work on MS stack is in business apps and web, data, integration stuff.

There is much better fit for MS and there is NO good counterpart in OSX or Linux.

One of the major shocks I get when starting to work on OSX is how much less developed EVERYTHING is outside the ms stack.

The only good reason you have a life working in OSX and less in Linux is because the web lower the playing field.

But if this were a contest of "native" vs "native" is clear MS stack is ahead.

(Much more before, because of course the web change the equation so you can claim things FOR THE WEB are better on linux and even osx)
by davidmurphy | 2025-06-26 00:49:29+00:00
As a CHM staffer who produced the Lisa@40 and Mac@40 events, I'm so gratified to hear these were as meaningful to you as they were to me! :)

So grateful to have you as a member. Don't miss our upcoming 1995 retrospective event focusing on Netscape's IPO and Windows 95 & Internet Explorer, on August 26! Should be a another fun nostalgic event: https://computerhistory.org/events/1995-the-internets-big-ba...

Oh, and I sat in on the interview with Bill Atkinson posted by OP and it's great to see this clip getting some love from HN. Our Oral History program is so awesome too. --David Murphy
by acedTrex | 2025-06-26 00:49:38+00:00
Oh hey, the thing I predicted in my blog titled "yes i will judge you for using AI" happened lol

Basically I think open source has traditionally HEAVILY relied on hidden competency markers to judge the quality of incoming contributions. LLMs throw that entire concept on its head by presenting code that has competent markers but none of the backing experience. It is a very very jarring experience for experienced individuals.

I suspect that virtual or in person meetings and other forms of social proof independent of the actual PR will become far more crucial for making inroads in large projects in the future.
by armada651 | 2025-06-26 00:49:42+00:00
This isn't exclusive to video games. Much of the improvements to world records in sports are due to improvements in gear, yet we don't consider those records to have been unfairly achieved.

Some games do impose limits though, for example Overwatch doesn't allow you to use an aspect ratio larger than 16:9 and selecting a wider aspect ratio actually cuts down on your vertical field-of-view rather than granting you more horizontal field-of-view. This lessens the potential advantage of ultra-wide monitors.
by gavmor | 2025-06-26 00:52:10+00:00
I just hope I live to see the day personal agents are empowered to make ad hoc use of paid services on our behalf—via eg AITP (Agent Interaction & Transaction Protocol), which is specifically designed to enable autonomous, secure communication, negotiation, and value exchange between agents across trust boundaries. AITP includes explicit capabilities for "Payments" (AITP-01) and "Data Request" (AITP-03), allowing structured sharing of sensitive information like addresses and passwords that can be programmatically verified and executed.

Similarly, the Coral Protocol aims to be an open and decentralized infrastructure for "The Internet of Agents," with "built-in economic transactions" at its core. This means agents can be compensated for their contributions via on-chain micropayments

Oh, damn, no, that sounds like an expense-tracking nightmare. Budgeting becomes the principal executive input.
by gunsle | 2025-06-26 00:52:17+00:00
Tretinoin is easily prescribed by seeing a dermatologist. What do you mean it’s a nightmare to get even with a prescription? I think a tube of cream cost like $10 at Costco. You don’t even need to use your own insurance to buy things from the pharmacy as long as you have a prescription. I never once had a problem filling it before I switched to Accutane.
by AJ007 | 2025-06-26 00:53:10+00:00
I understand what experienced developers don't want random AI contributions from no-knowledge "developers" contributing to a project. In any situation, if a human is review AI code line by line that would tie up humans for years, even ignoring anything legally.

#1 There will be no verifiable way to prove something was AI generated beyond early models.

#2 Software projects that somehow are 100% human developed will not be competitive with AI assisted or written projects. The only room for debate on that is an apocalypse level scenario where humans fail to continue producing semiconductors or electricity.

#3 If a project successfully excludes AI contributions (not clear how other than controlling contributions to a tight group of anti-AI fanatics), it's just going to be cloned, and the clones will leave it in the dust. If the license permits forking then it could be forked too, but cloning and purging any potential legal issues might be preferred.

There still is a path for open source projects. It will be different. There's going to be much, much more software in the future and it's not going to be all junk (although 99% might.)
by jitl | 2025-06-26 00:53:56+00:00
When I use LLM for coding tasks, it's like "hey please translate this YAML to structs and extract any repeated patterns to re-used variables". It's possible to do this transform with deterministic tools, but AI will do a fine job in 30s and it's trivial to test the new output is identical to the prompt input.

My high-level work is absolutely impossible to delegate to AI, but AI really helps with tedious or low-stakes incidental tasks. The other day I asked Claude Code to wire up some graphs and outlier analysis for some database benchmark result CSVs. Something conceptually easy, but takes a fair bit of time to figure out libraries and get everything hooked up unless you're already an expert at csv processing.
by jdiff | 2025-06-26 00:55:18+00:00
There's more on Instagram than photos. Lotta meme pages, lot of people just uploading random screenshots and photos they downloaded that have been turned over a million times. Heck, all it takes is someone downloading their own photo from SocialMediaX to reupload on SocialMediaY, or just uploading a the WebP that they exported for their website.
by wonderwonder | 2025-06-26 00:55:26+00:00
Hims is actually very expensive. I get the same Semaglutide for far cheaper either via my hormone dr. (provides a small, reliable dose of testosterone (trt) every month and legit access to hard to get compounds via a compounding pharmacy. No hoop jumping, they have a menu, I order from it. In real life I take 2 - 3x the testosterone dose when I am on but when I am coasting its easy no stress way to get what I want delivered monthly. When I am not using what they provide I just set it aside for the apocalypse :) )

GLP-1s are a miracle drug, people want it so will do what they must to get it. Unfortunately for many of them they cannot afford the $1,000 a month price tag that comes with legitimacy. On top of that, regular doctors make you jump through hoops to get it, having to see the exercise and diet department of whatever hospital group they belong too. this adds hundreds / thousands to the cost.

Let people have what they want. Hims parasitized the process but I don't blame them for it. They gave the people what they wanted and made a profit at the same time.

Adults should be empowered to make their own health care decisions but unfortunately so many of those decisions are made either by insurance companies or the attractive sales reps that frequent the doctor offices. GLP-1's, testosterone, peptides, whatever, remove the gate keepers and allow the free market to compete. The fact that you can go to jail for ordering a 10ml bottle of test cyp over the internet is madness. I rarely go to the doctor now, except for things that are clearly beyond my limits, xrays, colonoscopy etc. For everything else there is the internet and chatGPT. GLP-1s, peptides, steroids, even anti biotics, almost everything you want can be found if you look. The way it should be. I even order my own labs and have chatGPT interpret them for me.

I'm in the best shape of my life at 46 and haven't been to a non hormone doctor except for specialists in several years. Last time I went to the doctor I told them I wanted GLP-1s and they said no, I would have to go and see their diet department. I told them if they did not prescribe them I would just get them online but I would prefer to use them under the supervision of a dr. They just shrugged.

I'm on cycle currently but when I am done and coasting again I am going to hop on metformin to take a crack at stabilizing my liver levels caused by fatty liver before I took control of my own health. Because... why not? Think a doctor would prescribe this?

Let people be the decision makers of their own health. I'm not knocking doctors, they are often highly intelligent people doing good work but their power as gatekeepers does not come with neutrality and they are often beholden to their own bottom line as opposed to the patients well being.
by strken | 2025-06-26 00:56:45+00:00
Being a dick to people on the internet when you think they'll benefit from tough love (rightly or wrongly) does not translate into being a dick to new people who show up to their first club meeting looking excited and nervous.

I say this not to defend the self-confessed dick, but to encourage everyone else to show up to stuff. People are nicer when they're hanging out and doing something they love.
by noisy_boy | 2025-06-26 00:57:16+00:00
I asked it to do a comparatively pedestrian task: write a script to show top 5 google searches.

First it did the search itself and then added "echo" for each of them - cute

Then it tried to use pytrends which didn't go anywhere

Then it tried some other paid service which also didn't go anywhere

Then it tried some other stuff which also didn't go anywhere

Finally it gave up and declared failure.

It will probably be useful as it can do the modify/run loop itself with all the power of Gemini but so far, underwhelming.