MurphyA/hacker-news huggingface dataset:
by solarwindy | 2025-06-21 11:35:57+00:00
Not a bad idea. For an effective ruse, there ought to be real company formation records, website, job listings, press mentions, and so on.

Stepping back for a second though, doesn’t this all underline the safety researchers’ fears that we don’t really know how to control these systems? Perhaps the brake on the wider deployment of these models as agents will be that they’re just too unwieldy.
by anticodon | 2025-06-21 11:35:58+00:00
Was situation in Tibet really good before China came?

I've recently learned that movie "7 years in Tibet" is full of lies, starting with the fact that the main character was hardcore Nazi follower in real life.

There are a lot of things that we don't know because media are not interested in enlightening people. They are interested in pushing the current agenda.

E.g. Tibet was a poor feudal state with slavery, but you won't easily find this information, because all you can find now if you search for it is: "China is bad, bad, and Tibet is very good, enlightened people, very warm and kind". It is not like that.
by phoe-krk | 2025-06-21 11:36:54+00:00
When you do writing as a form of art, rules are meant to be bent or broken; it's useful to have the ability to explicitly write new ones and make new forms of the language legal, rather than wrestle with hallucinating LLMs.

When writing for utility and communication, though, English grammar is simple and standard enough. Browsing Harper sources, https://github.com/Automattic/harper/blob/0c04291bfec25d0e93... seems to have a lot of the basics already nailed down. Natural language grammar can often be represented as "what is allowed to, should, or should not, appear where, when, and in which context" - IIUC, Harper seems to tackle the problem the same way.
by justinludwig | 2025-06-21 11:36:59+00:00
More about what you actually do -- I'd suggest something like "Secure, Sustainable Open Source: We partner with open source projects to monitor their upstream dependencies for security fixes, and automatically rebuild and distribute our partners' projects with those fixes. Our partners don't have to change what they do, and we share 70% of our subscription revenue with them."

Also:

> New SecureBuilds are created whenever upstream CVEs are available, with a 6-day SLA for critical vulnerabilities.

Surely this should be "New SecureBuilds are created whenever upstream fixes for CVEs are available" -- you cut new builds for the fixes, not the bugs, no?
by FirmwareBurner | 2025-06-21 11:37:41+00:00
>devs that can't touch type.

Hey, that's me :)

Out of curiosity, why is this a yardstick for SW developers? I assumed the more valuable skill of the profession would be critical thinking and problem solving skills, not finger dexterity on pressing buttons without looking. That's why I didn't become a secretary or court stenographer.

I mean, a lot of doctors can't hand write for shit, but is that in anyway relevant to being a good doctor?

What about SW devs with handicaps or mobility issues?

Touch typing feels like a pretty niche hill to die on.
Show HN: MyRead – simple book tracker with BYOK AI recommendations
by Krasnopolsky | 2025-06-21 11:37:55+00:00
Hi HN!

I'm Ivan, a developer and avid reader who was constantly frustrated by the "what to read next?" problem after finishing a great book.

I tried tracking books on my phone, but it felt clunky and unreliable—I worried about losing my data when switching devices. When I looked at existing online solutions, they felt overly complex and bloated for what should be a simple task.

So I built MyRead: a fast, modern book tracker that's both private and persistent, running entirely in your browser.

Core philosophy: your data belongs to you. Everything is stored exclusively in your browser's localStorage, making the app fast, offline-capable, and completely private.

Key features:

- All data lives in your browser. No cloud, no sign-up required. - Back up your entire library or move between devices using JSON/CSV files. Your data is never locked in. - Instead of a black box, plug in your own API key (OpenAI, Google AI, or OpenRouter). The app generates detailed prompts based on your library and sends them directly from your browser to your chosen provider. I never see your data or API key. - Clean interface for progress, notes, and ratings, plus a Tinder-like swipe UI for discovering recommendations.

Technical details: - Stack: React, TypeScript, Vite, Tailwind CSS, shadcn/ui - Fully client-side PWA - Client-side prompt generation analyzing your books, wishlist, genres, authors, and past recommendation feedback

The BYOK model is central to the privacy approach—your reading data and AI interactions stay completely between you and your chosen provider.

Try it at: https://myread.space/about

I'll be here all day for questions and would love feedback from the HN community. Thanks for checking it out!
by AlexandrB | 2025-06-21 11:38:32+00:00
Don't know about some of the other titles, but Sega absolutely ruined Sonic CD classic. 1.0 shipped as a svelt ~20 MB game developed by the folks behind Sonic Mania. It was great[1]. At some point, Sega decided it needed to go free to play, so they added ads and tons of bloat to the game[2]. It now sits at ~200 MB with in app purchases to disable the ads (which don't seem to work for some people). A real shame.

[1] https://www.cnet.com/tech/mobile/retro-rings-sonic-cd-hits-i...

[2] https://powerupgaming.co.uk/2016/10/27/sonic-cd-goes-free-to...

Edit: Looks like the "end of life" version (4.0?) disables the ads but keeps the bloat which is better than I hoped for.
by firesteelrain | 2025-06-21 11:40:32+00:00
I don’t disagree that trust is at the core of this shift. Sovereignty efforts are a response to broader geopolitical dynamics not just cloud tech choices. But framing it as the EU cutting ties out of betrayal or drama misses the point. It's about strategic independence. This is like how the US wouldn't outsource core infrastructure to Alibaba. That's not hostility. It’s basic statecraft.
by torginus | 2025-06-21 11:40:36+00:00
First of all job replacement is not hard, and doesn't require AI.

As an example, we had release train engineers whose job was to make sure the right versions of submodules made it into the release, etc. Lots of running around and keeping track of things.

We scripted like 95% of that away, and now it most of it happens automatically.

The people who do that now do something else.

I just turned a page of notes and requirements into a working app of 1k+ lines with Cursor. Without AI I'd have taken a couple days to do the same.

So you could say my job was partly replaced. AI reduced my workload, so management doesn't need to hire as many people.

I will probably feel the reduction in demand in that I can't negotiate as good a salary, I won't get as many offers etc.
by potamic | 2025-06-21 11:41:38+00:00
Every bank of repute also has a web portal for internet banking. If it were about security, leaving this open while closing the mobile route doesn't make sense. The web is also vulnerable to scammers hosting trojan websites but somehow that doesn't seem to be a big problem.

If a bank (or any entity for that matter) needs to control the client in order to make their systems secure, then it's bad security. The system must be secure despite the client.
by the_plug | 2025-06-21 11:41:45+00:00
Hey HN!

We just launched v2 of Pipo360 — a tool that turns plain-English descriptions into full backend code with routes, auth, DB schemas, and docs — all production-ready.

What’s New in v2: Built-in API testing (no more Postman juggling)

14+ frameworks supported (Express, FastAPI, Django, Spring Boot, etc.)

10+ database options (PostgreSQL, MongoDB, Supabase, etc.)

GitHub integration (push directly from the editor)

Advanced in-browser code editor (edit & deploy instantly)

Traction so far: 1,000+ devs onboard

5,000+ backends generated

<60s avg generation time

Pricing: 1 free backend generation (no signup)

$19/month for unlimited usage

Why we built this: We were tired of boilerplate hell, Postman tabs, and piecing tools together. Pipo360 is designed to feel like an AI co-dev that handles backend logic while you focus on shipping.

Try it here https://pipo360.xyz

Would love your feedback — brutal honesty welcome!
by anticodon | 2025-06-21 11:43:11+00:00
I'm not surprised about 90% of savings. I remember that initially AWS was promoted everywhere as being "cheaper" than your own hardware, colocation or VPS/VDS hosting.

Once I was working in a quite small company (around 100 employees) that hosted everything on AWS. Due to high bills (it's a small company that resided in Asia) and other problems, I migrated everything to DigitalOcean (we still used AWS for things like SES), and the monthly bill for hosting became like 10 times lower. With no other consequences (in other words, it haven't become less reliable).

I still wonder who calculated that AWS is cheaper than everything else. It's definitely one of the most expensive providers.
by freedomben | 2025-06-21 11:43:17+00:00
> The coal miner would have to pivot to being someone who knows a lot about coal instead of someone that actually obtained it, they’d become more of a coal-advisor to the person making decisions about what type of or how much coal to get/what’s even possible with the coal they’re getting.

I definitely agree that there will be some jobs/roles like that, and it won't be 100% destruction of SWEs (and many other gigs that will be affected), but I can't imagine that more than a small percentage of consultants will be needed. The top 10% of engineers I think will be just fine for the reasons you've said, but at the lower levels it will be a blood bath (and realistically maybe it should as there are plenty of SWEs that probably shouldn't be writing code that matters, but that feels like a separate discussion). Your point about other skills/knowledge is good too, though I suspect most white collar jobs are on the chopping block too, just maybe shortly behind.

Your future is one that I'm dreaming about too (although I have a hard time believing Apple would allow you to do that, but on Android or some future 3rd option it might be possible). Especially as a Linux user there have been plenty of times I've thought of cool stuff that I'd love to have personally that would take me months of work to build (time I've accepted I'll never have until my kids are all out of the house at least haha). I'm also dreaming of a day when I can just ask the AI to produce more seasons of Star Trek TOS, Have Gun - Will Travel, The Lieutenant, and many other great shows that I'm hungry for more, and have it crank them out. That future would be incredible!

But that feels like the smooth side of the sword, and avoiding a deep cut from the sharp side feels increasingly important. Hopefully it will solve itself but seeing the impacts so far I'm getting worried.

I appreciate the discussion and optimism! There is too much AI doomerism out there and the upsides (like you've mentioned) don't get talked about enough I think.
by sksjvsla | 2025-06-21 11:43:50+00:00
> Cost of DIY and support: You’re absolutely right that 24x7 ops could eat up any savings if you built everything from scratch without automation or if you needed dedicated staff watching dashboards all night. In our case:

• We heavily invested upfront in infrastructure-as-code (Terraform + Ansible) so that infra is deterministic, repeatable, and self-healing where possible (e.g. auto-provisioning, automated backup/restore, rolling updates).

• Monitoring + alerting (Prometheus + Alertmanager) means we don’t need to watch screens — we get woken up only if there’s truly a critical issue.

• We don’t try to match AWS’s service level (e.g. RTO of minutes for every scenario) — we sized our setup to our risk profile and customers’ SLAs.

> True cost comparison:

• The migration was done as part of my CTO role, so no external consulting costs. The time investment paid back within months because the ongoing cost to operate the infra is low (we’re not constantly firefighting).

• I agree that if you had to hire more people just to manage this, it could negate the savings. That’s why for some teams, AWS is still a better fit.

> Business vs. cost drivers: Honestly, our primary driver was sovereignty and compliance — cost savings just made the business case easier to sell internally. Like you, our European customers were increasingly skeptical of US cloud providers, so this aligned with both compliance and go-to-market.

> Terraform / YAGNI: Fair point! Terraform probably is more than we need for the current scale. I went with it partly because it fits our team’s skillset and lets us keep options open as we grow (multi-provider, DR regions, etc).

And, finally, because this, I am posting about it. I am sharing as much as I can, and just spread the work about it. I just sharing my experience and knowledge. If you have any questions or want to discuss further, feel free to reach out at jk@datapult.dk!
by jstummbillig | 2025-06-21 11:43:51+00:00
What is the reason? This is a stress test. You can tell that by reading the first sentence of the article: "We stress-tested 16 leading models from multiple developers". In a stress test you want things to fail, otherwise you have learned very little about the stress the thing you are testing can take.

For physical things that has early limitations, but not for software. I would be very confused to see an AI stress test that did not end in failure, and would always question the test instead of thinking "wow, that must mean the thing is ready for autonomous action!"
by FirmwareBurner | 2025-06-21 11:43:54+00:00
>I’ve yet to see a secure piece of software come out of China in my 30+ years of coding.

SW coming out of Korea's domestic industry giants isn't any better. Because they used to treat SW like a cost center or another item on the BoM.

IIRC, the only way to do online banking in Korea years ago, was you needed Internet explorer and some active-X plugin that supported encryption.

Some Korean giants do have good SW, but a lot of it is developed internationally by offices outside of Korea.
by danaris | 2025-06-21 11:44:16+00:00
...Where on earth do you get that idea?

Of course, one does have to be careful with one's definitions when talking about "capitalism", because I've seen people mean everything from "the current, specific, late-stage capitalist system and nothing else" to "the basic concept of exchanging currency for goods and services" and everything in between. Personally, I'm in favor of abolishing the former and some of the stuff in the middle, but I'm skeptical that even in a fully post-scarcity society we would abandon the need for the latter.

As for US hegemony...I think that the current situation demonstrates very well why it's a serious problem. We're a single point of failure, and the polarization here has been rising for decades, leaving something like this all but inevitable. Indeed, even if someone like Trump had not come along and normalized hatred and fascism, we would still have likely been in a situation where every 4-8 years the US's policies on a wide range of things flipped violently back and forth.

No; while I fear that the transition will be very rocky, the world will be better off if a broader coalition of nations can collectively take up the role of attempting to enforce the notion of universal human rights across the globe. While they're at it, maybe they'll finally be able to get the US to agree to things like the UN Convention on Rights of the Child, and the authority of the International Criminal Court.
by ToJans | 2025-06-21 11:45:16+00:00
We're in the process of migrating away from azure. Currently lots of cloudflare, but also some stuff runs on Hetzner.

If I manage to get https://uncloud.run/ or something similar up & running, the platform will no longer matter, whether it's OVH, Hetzner, Azure, AWS, GCP, ... It should all be possible & easy to switch... #FamousLastWords
by Rover222 | 2025-06-21 11:46:21+00:00
You’re an outlier. Most people don’t do long road trips often, and when they do they don’t care to drive 1000 miles with minimal stops, and their gas cars don’t have that much range in a tank of fuel.

Yes, EVs do slow down long road trips a bit. But it’s really not much of a difference. I just did 3000 miles in 10 days in one.
The silver bullet for solving problems in business
by daniilkhanin | 2025-06-21 11:46:21+00:00
For the last 10 years, I have been telling businesses about a magic framework - unit economics, which allows them to manage business processes. At the same time, I see that not everyone understands its value, and many don't even understand what it is about or what it is for.

My attempts to talk about it are met with deletion of posts, bans, etc. Tell me, what is wrong? Why is there rejection? Do entrepreneurs not need to know how to implement a data-driven approach to process management? Don't you have problems in your business? Don't you have problems that you don't know what to do and how to do it? So why is there such rejection? Or am I doing something wrong? And if it's me, what can I do to be heard?
by pcthrowaway | 2025-06-21 11:46:37+00:00
People are taking note.

Maybe it's because I'm mainly doing anti-fascist organizing and work now, but it seems like everyone I know is using Signal. Even people who don't care as much and for whom it's not their primary driver still have it and communicate with people who use it.

My family were the last hold-out but they've moved over recently as well because they knew it would be the only way to stay in touch with me
by anticodon | 2025-06-21 11:46:47+00:00
Is there a single proof? Like some Russian citizen was caught ruinining infrastructure project and it was proved that a) he is a citizen of Russia or was paid by Russian authorities, b) that the person in question had indeed done some damage to the infrastructure project.

I don't remember a single such case. I remember reading a lot of speculations like "it's highly likely that it was done by Russians" every single time without a trace of evidence.
by throwanem | 2025-06-21 11:46:49+00:00
That's an interesting contrast, in that the Wild West is a halfway house for Civil War burnouts and the Matrix is a deliberately and expensively constructed and maintained, largely successfully hyperreal (in the original sense, ie so convincing that whether it's 'real' ceases to be either distinguishable or meaningful) simulacrum of what the Wachowskis were astute enough in its own historical moment to recognize as the highwater mark of American hegemony.

Oh, the Matrix is also parasitic, certainly; before it was smoothed over for mass appeal it was I think a story much more obviously inspired by They Live, the central conceit being that the system both runs on and exploits human neural cognitive capacity, ie the brains are the thing being farmed as components of the Machines' own computers, with the rest of the human (including consciousness and experience!) basically tolerated as the best available life support system for the 500 grams or so of brain tissue that's actually worth having. But a cow can live a long and happy life on a farm, be genuinely loved, and still end up as cutlets. Looking at it even from Daisy's end, how unjust can we honestly call that deal?

For you and me, the gunslinger's life has a decided appeal, sure. If that and Buy-n-Large World are the only two options on the table - which so far they have been, though I agree the real answer is to add a better third - can we really say that, for everyone, the Matrix isn't the less worse of the two?
by Freak_NL | 2025-06-21 11:46:54+00:00
Pff… You wish. Depending on the sector you are in, ISO 27001 can either be a hard requirement (either directly or through national standards built upon it, like the Dutch healthcare NEN 7510) or completely irrelevant. If this company needs it, you can bet their customers need it — usually because they in turn are required to do so because of regulations.
by randomtoast | 2025-06-21 11:46:54+00:00
> Don't get me wrong; I'm actually considering making a similar move but more for business reasons (some of our German customers really don't like US hosting companies) than for cost savings

There will be a new AWS European Sovereign Cloud[1] with the goal of being completely US independent and 100% compliant with EU law and regulations.

[1]: https://www.aboutamazon.eu/news/aws/aws-plans-to-invest-7-8-...
by joshstrange | 2025-06-21 11:46:55+00:00
I might test this out, but I worry that it suffers from the same problems that I ran into the last time I played with LLMs writing queries. Specifically not understanding your schema. It might understand relations but most production tables have oddly named columns, potentially columns that changed function overtime, potentially deprecated columns, internal-lingo columns, and the list goes on.

Granted, I was using 3.5 at the time, but even with heavy prompting and trying to explain what certain tables/columns are used for, feeding it the schema, and feeding it sample rows, more often than not it produced garbage. Maybe 4o/o3/Claude4/etc can do better now, but I’m still skeptical.
by rcxdude | 2025-06-21 11:48:06+00:00
The main thing is it gives the capability to adjust almost every detail, and they have a tendency to become important in embedded applications. To give one extreme example, an embedded intel board had a hardware errata which basically meant a very common sequence of instructions was unreliable, and the workaround involved patching the compiler to avoid emitting it, but then basically everything needed building with the patched compiler. Yocto lets you do that, it's even fairly easy, most traditional distros would struggle (Gentoo and nix are the other options, but I don't know how well they can do cross-compilation, which is also a big part of Yocto).
by squishington | 2025-06-21 11:48:11+00:00
Hey mate. I don't want to be patronising, but it seems like you're suffering a bit and might benefit from some professional help. I get it, phones can become a stand in attachment figure for people who are experiencing personal difficulties. There are ways to overcome this but it requires professional expertise. I hope you can get some relief from this. These technologies are omnipresent in modern life and for many of us it isn't a simple matter of choosing to disengage. All the best.
by freedomben | 2025-06-21 11:48:38+00:00
Hot damn, that's a great point! Although I fully expect the models at some point to say stuff like, "I'm sorry I can't generate a <whatever> because that would violate Apple's/Google's/Whatever IP" and then have them enforce it with the power of government (copyright/patent/regulation/etc). There's also lots of industries where compliance requirements create a moat that might be difficult to get past, though that's probably just a short/medium-term problem.
by JackFr | 2025-06-21 11:49:38+00:00
1) the properties of a field is missing closure under the operation. This is kind of assumed from context, but I would include it.

2) the reduction step up multiplication of nth order polynomials (to keep them nth order) is missing (or at least I missed it after a couple of readings.)

Apart from those quibbles, this was really good overall though. I enjoyed it.
by dannymi | 2025-06-21 11:51:00+00:00
It stops at GNU Mes and hex0.

Bootstrapping everything is exactly how it's done correctly--and how it's actually done in practice in Guix.

I mean sure if you have a business to run you outsource this part to someone else--but you seem to think it's not done at all.

Supply chain attacks have been happening pretty much non-stop the past years. Think it's a good idea to use binary artifacts you don't know how they were made (and thus what's in them)? Especially for build tools, compilers and interpreters.

>And why is that location more valid of a decision than the one that doesn't require building the build system from source?

Because you only have to review a 250 Byte binary (implementing an assembler) manually. Everything else is indeed built from source, including make, all the way up to Pypy, Go, Java and .NET (and indeed Chromium).