MurphyA/hacker-news huggingface dataset:
by salawat | 2025-06-21 15:28:56+00:00
I have. Once.

Was doing a search on whether Case IH was doing the same shit John Deere had been doing in terms of adding software interlocks that brick Ag machines. Decided to try a few permutations of query just to see if a consistent answer could be wrung out, or if it was still a fundamentally statistical result.

The AI answer morphed itself depending on how much emphasis toward one direction or another that I put into the query. Yes and no answers were floated between with the same sources being quoted which notably, when looked at contained no information relating to the original query of "Is Case IH using software interlocks like John Deere has been?" Once I realized that, I've never gone back to it because I realized that all these things deliver is the illusion of surety, which I am most decidedly not into.

Kills me that people are seriously taking these types of answers at face value. This is anti-technology at it's finest. We've created the technical equivalent of a Bloody Stupid Johnson implementation of an information retrieval/summarization system.
Show HN: Pipo360 updated version- From Idea to Working API in 60 Seconds
by the_plug | 2025-06-21 15:29:03+00:00
Hey HN

We built Pipo360 — a tool that lets you describe your backend in plain English, and it generates production-ready backend code with routes, database schemas, and auth.

It supports:

Express, FastAPI, Django, Spring Boot (14+ frameworks)

PostgreSQL, MongoDB, Firebase, Supabase (10+ databases)

GitHub integration

Built-in API testing in the browser

The idea was to remove the repetitive setup steps and let devs go from idea → API in seconds.

You can try it here: https://pipo360.xyz

We'd really appreciate your feedback — especially from devs who’ve built a lot of backends manually. Curious if this helps or hurts your workflow.

Thanks
by woodruffw | 2025-06-21 15:29:29+00:00
I would consider the case-insensitive key handling in Go’s JSON parser and the malleability in the XML parser to both be “classic” examples of differential-prone behavior, which is the ultimate point made by the article.

(This is why the more formal definition of a parser is useful to ground on: a parser is a type of recognizer, and disagreements between recognizers that claim to recognize the same thing can be exploited. This doesn’t require a bug per se, only difference, which is why it’s a footgun.)
by loughnane | 2025-06-21 15:30:03+00:00
Surprised coming into this that I don't see anyone mentioning vale[0]. I've been using it for ~4 years now and love it.

I use grammarly briefly when it came out and liked the idea. Admittedly it has more polish than vale for people writing in google docs, &c. Still, I stick with Vale. Is there any case for moving to Harper?

[0] https://vale.sh/
by GuB-42 | 2025-06-21 15:30:20+00:00
The thing is that you are not looking for a new laptop while you are driving, but you may be looking for a gas station because your "low fuel" light just turned on. And how are you going to find that gas station (which may not be exactly on the road you are driving on) if there is no sign advertising for it?

You can tell me you can pull over and look at a map, or program it on your navigation app. Not only it is not the most convenient, maybe even unsafe, but how do you think that gas station ended up on that map? Most likely the business paid for that, making it an ad.

That's the idea, we dislike that laptop ad because we usually don't buy laptops while we are on the road, it is an irrelevant attention grab, especially when that billboard is disproportionately large. But a gas station, restaurant or convenience store is relevant to a significant fraction of the people on the road, and when the sign is reasonable, we don't usually call it a billboard, even though it is an ad and not a sign like a speed limit.
by BLKNSLVR | 2025-06-21 15:30:55+00:00
What about the gross content of their shorts clips?

I'm not the kind of person to be inclined to buy 'premium' because they progressively enshittified their free service to make premium seem like the only rational option, but I'm even less inclined to give money to a company that promotes the complete trash and borderline adult and often fraudulent content of their shorts.

I usually refuse to login to YouTube to find the occasional thing, and I'm always bombarded with this trash.

How can anyone support that? Gross.

Also, it should not be forgotten that the FBI, no less, recommend ad blocking just for general internet safety. YouTube has just as much scam advertising as the rest of the internet, since it's almost all Google (who don't seem to be able to police their own platform, and don't seem to be held to account for such dereliction of duty).
by codingdave | 2025-06-21 15:30:57+00:00
Agreed. I have a CMS project that uses both, but they are separated -- The CMS is a React front-end, with a node back-end. The sites maintained by that app are built by Astro via spawning a 'npm run build' in a separate Astro project that reads the CMS data, then writes the output to another directory from which I can deploy.

They do complement each other nicely... but there is little benefit to actually mixing them directly together.
by maqp | 2025-06-21 15:31:05+00:00
https://github.com/0xchat-app states it doesn't have desktop clients.

Also, the direct messages have three types

1) NIP-04 DM: "Most widely used", but also, "not recommended". Reeks of Telegram that also has non-secret chats being the most popular option

2) Gift-Wrapped DM: Uses different encryption algorithm but no forward secrecy? Forward secrecy has been around for 20 years.

3) Secret DM: Can't be recovered on different devices. Why can't the backup be self-contained database like Signal has?

Also "Secret chat requires consent from peer." Like what :D You have to wait for contact's approval to have a private conversation with them. Sounds like it incentivizes all chats to start with less secure protocols.

The nice part about writing your own chat system is the security agility in that you can bump any security property without having to fight with protocol standardization bodies. Having three DM protocols inside the same app is wild.
by securesaml | 2025-06-21 15:31:45+00:00
The correct conclusion is: https://news.ycombinator.com/item?id=44337330

The problem of trying to ensure that each parser behaves the same for all input is twofold: - JSON and XML specifications are complex, lots of quirks. So not feasible. - Does not solve the fundamental issue of the processing layer not using the same data that is verified in the verification layer.

Note: the processing layer parses the original input bytes, while the verification layer verifies a struct that is parsed using another parser.

Processed: Proc(input) Verified: VerifyingParser(input)
by averysmallbird | 2025-06-21 15:34:30+00:00
Not quite as clear cut. The EO triggers a national emergency under IEEPA, which is the basis of sanctions — so there is a well established legal underpinning. Unclear whether Microsoft has standing to challenge the designation of the ICC, and the courts give a lot of deference to the President on foreign affairs/national security. Microsoft is more “stuck” than “feckless” I think.
by toast0 | 2025-06-21 15:35:15+00:00
It's not really the brand that's the problem.

If Amazon partnered with an actually independent European company, provided the software and training, and the independent company set it up and ran it; in case of dispute, Amazon could pull the branding and future software updates, but they wouldn't be able to access customer data without consent and assistance of the other company and the other company would be unlikely to provide that for requests that were contrary to European law. It would still be branded AWS for Europe, and nobody would doubt its independence.

This way, where it's all subsidiaries of Amazon can't be trusted though.
by em-bee | 2025-06-21 15:35:56+00:00
this has been marked as a duplicate before, but it's not. other articles are talking about the Xlibre project it's potential, etc.

this article talks about the effect of the fork on Xorg itself. which is a very different topic, and one that is worth talking about.

for example i remember the fork of GCC and how it affected its development processes. unlike GCC i doubt that Xlibre will be merged back, but it has an influence on Xorg nonetheless. what are your thoughts?
by crdrost | 2025-06-21 15:36:10+00:00
We still can take it more seriously!

Here's a PDF handout from 2023 for handing to hospital admins, https://www.nerode.org/clean-air/medical%20clean%20air%20rel... . The same statistics can probably be looked up for children acquiring covid at school, because like where else do they get it. $100 HEPAs in every classroom, $40 reusable p100 masks for every teacher, ask parents to voluntarily mask their kids.

Just share stories. You see [1], go to your social media and share it, “she got COVID like 3 or 4 times and it seems to have caused chronic kidney disease, even with vaccines reducing the rate of straight up death, we need get this thing under control otherwise our generation's not going to live to see 80. Each time you get it there is another small chance of long covid, another rolling the dice hoping for no snake eyes. Masking is just saying you want to roll the dice fewer times.”

Organize or join a covid slack channel at work, there are other groups like https://publichealthactionnetwork.org/ , if BTS Army can connect over K-pop we can connect over wanting to protect others.

1. https://x.com/HollyMars2/status/1936235382816784443?t=A4RaLq...
by eesmith | 2025-06-21 15:36:59+00:00
I know very little of the recent exchanges. It sounds like you are saying that most of the Iranian response is acceptable under current conventions but one type is not?

What treaty or other convention says that a 2.5 km radius is okay but an 8 km one is not?

You characterized their use as "just to hit somebody and do some damage" but standard doctrine for decades is to use multiple warheads to make interception by anti-ballistic missiles more difficult.

That's why SDI - the US "Star Wars" defense system against a Soviet missile attack - was doomed from the start. It's a lot cheaper to use multiple warheads to get through a defense than it is for the defenders to target and destroy each warhead.

The Israeli missile defense system is famous, so using a cluster-like MRV system from a ballistic missile is the obvious way strategy.

So to me it seems not "just to hit somebody and do some damage", but also to make the war expensive to Israel, and likely also to exhaust Israeli defenses so future attacks can be more successful.

Do you know which missile/warhead systems are these? Are they MRVs or MIRVs? If they have independent targeting ability, then an 8km dispersion refers to the overall possible target area for all warheads, even if each warhead has a much smaller error.
by phendrenad2 | 2025-06-21 15:37:00+00:00
People really need to resist the urge to anthropomorphize corporations. Corporate behavior is well-established science at this point. They almost always do what is in their own financial interests. "Feckless" means "lacking initiative or strength of character". Corporations have one character: Making money. Fighting the government over a few user accounts has no short-term or long-term monetary value. It doesn't even win you a PR victory because it's unclear how many people support or don't support this.
by classichasclass | 2025-06-21 15:37:13+00:00
Alternatively, if you don't want to run the whole Electron app, the money is this line:

sudo.exec("/System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport en0 -z && ifconfig en0 ether `openssl rand -hex 6 | sed 's/\(..\)/\1:/g; s/.$//'`",
by oefrha | 2025-06-21 15:38:01+00:00
You mean extraordinary evidence like selling Apple Ads and associated attribution data that third parties aren't allowed to collect? Their ads revenue is now $10B+ and growing. You must know nothing about the mobile measurement industry if you think this very mundane claim is some extraordinary conspiracy theory; it's not even controversial there.

https://ads.apple.com/app-store/help/attribution/0093-adattr...
by hn_throwaway_99 | 2025-06-21 15:38:18+00:00
Blood type systems are defined by the single allele that encodes the antigens (as you point out, sometimes multiple antigens per allele). This table shows all of the different blood type systems, https://www.isbtweb.org/resource/tableofbloodgroupsystems.ht..., and the chromosomal location of the respective allele.
by iammjm | 2025-06-21 15:38:27+00:00
Disgusting. Yet another reason for Europe to ditch US-tech. Its also interesting to see how the US managed within a couple of month to destroy its trust, influence and soft-power it has built over many decades. Kinda like Musk did, but on a nation-wide scale. the orange emperor truly has a talent for wrecking anything he touches. maga all the way baby
by aDyslecticCrow | 2025-06-21 15:39:14+00:00
Harper is decent.

I've relied on Grammarly to spellcheck all my writing for a few years (dyslexia prevents me from seeing the errors even when reading it 10 times). However, I find its increasing focus on LLMs and its insistence on rewriting sentences in more verbose ways bothers me a lot. (It removes personality and makes human-written text read like AI text.)

So I've tried out alternatives, and Harper is the closest I've found at the moment... but i still feel like grammarly does a better job at the basic word suggestion.

Really, all I wish for is a spellcheck that can use the context of the sentence to suggest words. Most ordinary dictionary spellchecks can pick the wrong word because it's syntactically closer. They may replace "though" with "thought" because I wrote "thougt" when the sentence clearly indicates "though" is correct; and I see no difference visually between any of the three words.
by RadiozRadioz | 2025-06-21 15:39:29+00:00
Hmm. Here's what I read from this article: RedPanda didn't happen to use any of the stuff in GCP that went down, so they were unaffected. They use a 3rd party for alerting and dashboarding, and that 3rd party went down, but RedPanda still had their own monitoring.

When I read "major outage for a large part of the internet was just another normal day for Redpanda Cloud customers", I expected a brave tale of RedPanda SREs valiantly fixing things, or some cool automatic failover tech. What I got instead was: Google told RedPanda there was an issue, RedPanda had a look and their service was unaffected, nothing needed failing over, then someone at RedPanda wrote an article bragging about their triple-nine uptime & fault tolerance.

I get it, an SRE is doing well if you don't notice them, but the only real preventative measure I saw here that directly helped with this issue, is that they over provision disk space. Which I'd be alarmed if they didn't do.
by Spooky23 | 2025-06-21 15:40:07+00:00
This is why environmental activism is ineffective and counterproductive.

Where I live, the campaign against natural gas and an arbitrary timeline for decarbonization, combined with accelerating the shutdown of a major nuclear plant, just triggered a 30% increase in electrical delivery cost this year and is driving migration due to cost. (to places with dirtier electric and gas production, btw)
by toomuchtodo | 2025-06-21 15:40:25+00:00
Yeah, investors will take a hit but keep on investing, like every sovereign debt default before. Where else are you going to invest? There are only so many nations.

Similarly, do you think we’re going to pay off ~$36T in US debt? Of course not, there is no will to raise taxes and cut spending to achieve that, we’re going to extend and pretend forever (or at least until the music stops, whatever that looks like). The only difference is the US does it to maximize profits for the wealthy and keep the military apparatus running to project global power (at a cost of ~$820B/annually) while China does it to maximize their position as a global manufacturing engine and maintain domestic stability.

Profitability is irrelevant, focus on outcomes. “The purpose of the system is what it does.”
by DonaldFisk | 2025-06-21 15:40:48+00:00
The cons is integral to Lisp, and is used to construct the list, which is a purely functional data structure. Other languages also have lists, e.g. Prolog and Haskell (as well as similar pure functional languages).

Saying that they're a fundamental problem in Lisp is like saying that objects are a fundamental problem in Smalltalk or that arrays are a fundamental problem in APL.

If Xah doesn't like cons cells, there are other languages he can use instead. Lisp (as well as Prolog, Haskell, ML, etc.) programmers won't be persuaded to abandon cons cells or lists as they find them extremely useful.
by pdimitar | 2025-06-21 15:41:33+00:00
Wild overreactions is exactly what we need -- f.ex. the Linux kernel's gross negligence of security is no longer good enough is one thing that regularly comes to mind.

New geopolitics are in place, too. Our entire branch should do much, much better than they currently do.

One prediction: cybersecurity jobs might see some surge in the EU. Maybe.

In general though, I would work on transparently syncing world-wide database with partitions for personal data (photo galleries, contacts, calendars, media collections, game saves, anything at all) that is akin to, but much better than, torrents -- another very good example.

In general I am extremely mad at the privileged techies who just wrote philosophical essays about what "we" should be doing... while they themselves spent their riches on expensive (and likely sub-par quality) food in the restaurants of a certain coastal US city.
by appreciatorBus | 2025-06-21 15:41:33+00:00
I don’t think the concern is that they cannot type really really fast as in your comparison of professional drivers who don’t race.

In any domain where typing is the dominant activity, it would make sense to invest the small effort it takes to learn to touch type, and to learn basic keyboard shortcuts. You don’t have to reach 120 words per minute for the investment to pay off.

I used to be a one or two finger typist. Eventually, I took a touch typing class. For a long while it seemed like a waste of time. I could already type with one or two fingers at 40 words per minute. However, as I became proficient with touch typing, and as my touch typing speed approached my hunt and peck speed I started to realize what a powerful technique it was. I no longer needed to look at the keyboard, and my thoughts more easily flowed into the computer. This was a qualitative difference, not just about speed.

To continue the driving metaphor, IMO a driver who has had some basic driver education, and achieved some basic level of familiarity with the machine, will be a better driver, even if they never go faster than 40 miles an hour.
by netsharc | 2025-06-21 15:42:17+00:00
The ads probably get to you subconsciously anyway, IIRC there are studies done by psychology experts (some of them also work for the ad industry) that explains the presence of random ads.

For one thing, if you're suddenly in the market for a truck, you'll see the brand that was in an ad a long time ago and you think "Oh yeah I've heard of Ford, never heard of Isuzu, let's look at the Ford much closer.". Even a tiny nudge that the ad did helps, when selling to millions. Obviously a truck is a big purchase, and you individually probably would do more research, but the nudge applied to millions might move the needle in the heads of a few dozen people.
by hellovai | 2025-06-21 15:42:22+00:00
appreciate you tyring it. the reason it dropped the day was due to your type system not being understood by the LLM you're using.

the model replied with

{ "Text": "coffee liqueur", "Type": "Liqueur", "Liquor_type": "Liqueur", "Name_brand": null, "Unit_of_measure": "ounce", "Measurement_or_unit_count": "3/4" },

but you expected a { Text: string, Type: IngredientType, Liquor_type: LiquorType or null, Name_brand: string or null, Unit_of_measure: string, Measurement_or_unit_count: string, }

there's no way to cast `Liqueur` -> `IngredientType`. but since the the data model is a `Ingredient[]` we attempted to give you as many ingredients as possible.

The model itself being wrong isn't something we can do much about. that depends on 2 things (the capabilities of the model, and the prompt you pass in).

If you wanted to capture all of the items with more rigor you could write it in this way:

class Recipe { name string ingredients Ingredient[] num_ingredients int ... // add a constraint on the type @@assert(counts_match, {{ this.ingredients|length == this.num_ingredients }}) }

And then if you want to be very wild, put this in your prompt:

{{ ctx.output_format }} No quotes around strings

And it'll do some cool stuff
by dpeterson | 2025-06-21 15:42:35+00:00
Like many developers, I use AI to help me debug errors in production. I still run into huge log files that don't fit into the now large context windows of foundation models. I found myself going through those files to find the most relevant information and hand crafting what to paste in when asking the model what went wrong. Even new tools like Roo Code often error out and simplify too much when running their condenser tools. I created this to see if others find this tool useful and looking for feedback how to improve it.
by sksjvsla | 2025-06-21 15:42:36+00:00
I looked at Kamal, Dokku, and CapRover — all great tools if you want to abstract away server management. But for a HIPAA/ISO 27001 certifiable app, I need a higher level of control and auditability across the entire stack.

With Ansible, I can version everything — from server hardening to DB backups — and ensure idempotent, transparent provisioning. I don’t have to reverse-engineer how a PaaS layer configures things under the hood, or worry about opaque defaults that might not meet compliance requirements.

There's nothing wrong with these tools, but once you're in the mood for the ISO certification, and once you start doing these things yourself, they actually seem like a step backwards or add very little value.

I also prefer running my own DB backups rather than relying on magic snapshots — it's easier to integrate with encrypted offsite storage and disaster recovery policies that align with ISO requirements. This lets me lock down the environment exactly as needed, with no surprise moving parts.

Tools like Kamal/Dokku/CapRover shine for fast, developer-friendly deploys, but for regulated workloads, I’ll take boring, explicit, and auditable any day.
by a_bonobo | 2025-06-21 15:42:44+00:00
The NSDAP-style alignments went both ways: if the industry bigwig joined the party, he got access to lucrative contracts and insider information. The NSDAP also helped strike down strikes for the bigwigs, and later, supplied slaves from concentration camps for cheap. In turn, the party got to deeply control the bigwig: don't toe the party line and you're either out, or you're in danger. Join the party and publicly demonstrate your allegiance to the leadership.

See the secret industry meeting from 1933 as the prime example: https://en.wikipedia.org/wiki/Secret_Meeting_of_20_February_...
by lolinder | 2025-06-21 15:43:33+00:00
Right. So why does the fact that they targeted 34,500 ports show it was a well-engineered attack? By itself it's just evidence that they know how to iterate over ports. Coupled with the data size (7.3Tbps) we know they had an enormous botnet. None of this points to a well-engineered attack, it just means that lousy IoT has made botnets incredibly cheap.

A well-engineered attack would not draw headlines for its scale because it would take down its target without breaking any records.