MurphyA/hacker-news huggingface dataset:
by cyberax | 2025-06-20 13:56:03+00:00
> but doesn’t want to hijack multiple DNS server IPs because that’s more work

No. I'm saying that you can _not_ hijack a DNSSEC-enabled DNS name, even if you have a full control over the network.

The DNSSEC public keys for the domain are stored in the top-level domain zone. Which in turn is protected by a signature with the key from the root zone.
by briangriffinfan | 2025-06-20 13:56:10+00:00
There's something that feels tremendously off to me about these defenses which are to the effect of "What's so wrong with this? In principle, there's nothing saying a human couldn't also make one of these errors."

I think about the AI vending machine business simulation. Yes, LLMs were able to keep it running for a long time, but they were also prone to nosediving failure spirals due to simple errors a human would spot immediately.

People point to an infinity in the distance where these LLMs cross some incredibly high threshold of accuracy that lets us thoughtlessly replace human workers and thinkers with them... I have not seen sufficient evidence to believe this.
by esskay | 2025-06-20 13:56:10+00:00
> In a statement, Perplexity said: "The BBC's claims are just one more part of the overwhelming evidence that the BBC will do anything to preserve Google's illegal monopoly."

That's got to be the most delusional response they could've given. It's not BBC or any other news publishers job to preserve Google's monopoly. The comparison would only even work if Google was replacing a link to a BBC article in the search results with a direct copy of said article on the Google search results page.
by bitlax | 2025-06-20 13:56:31+00:00
It's gone up among many demographic slices, including the two we're discussing. At this point I don't have to experience it. The commenters here --including yourself-- think that I do and some think that I should, and I'm wondering how I would continue to prevent it. They've provided no clear answers, only insults and condescension. And that's fine! I just leave here unconvinced and will not follow their prescriptions.

> sorry for the bad news

Sorry you didn't realize that supporting legal pot would make you smell more pot.
by daxfohl | 2025-06-20 13:56:37+00:00
Yes. I tried the prolog style requirements last night too and it wasn't great either. Some things are easier to say in "rules" and some things are easier to say in "steps". Trying to get all the way to "rules" ends up sounding like Yoda talk in places. Where with "steps" you feel the need for a GOTO, with "all rules" you feel the need for the infamous COMEFROM keyword in places.

So, yeah, I think what you say is the only logical conclusion. Waterfall development doesn't work well for humans, and it's probably not going to work for AI either. In fact, spending a ton of time formalizing a huge requirements doc is going to be even more of an antipattern with AI. When you can just have a conversation, hammer out details, identify nuances, plan for the future, all while seeing the feature in real time, that's going to be a million times more productive. The requirements doc can come with a full demo and a green button to launch it into production immediately after (or during) the review meeting.

So yeah, we'll probably never have "English as code", but rather an iterative process that leads to both English and code descriptions of the feature.

As far as DSLs, I think they still fit. If you see a pattern that makes sense to encode in a DSL, the LLM will happily do that, and doing so could help the AI optimize its limited context and make the invariants of the domain much more explicit.

Fun times.
by aleph_minus_one | 2025-06-20 13:56:51+00:00
> Then you're highly unusual (in a good way). Look at the amount of comments on social media with outcries over "too short" sentences for example, and the lack of political support for shortening sentences or improving prison standards.

I live in Germany.

When I observe the whole societal and political situation in the USA from the outside, it seems to me that it is rather "two blocks where in each of these there is somewhat an internal consensus regarding a quite some political positions. On the other hand, each of these two blocks is actively fighting the other one."

On the other hand, for Germany, I would claim that the opinions in society rather consist of "lots of very diverse stances (though in contrary to the USA less pronounced on the extreme ends) on a lot of topics that make it hard to reach a larger set of followers or some consensus in a larger group, i.e. in-fighting about all kinds of topics without these positions forming political camps (and the fractions for different opinions can easily change when the topic changes)."

Thus, in the given example, this means for a person out-crying "too short" sentences on social media, you will very likely find one who is out-crying the opposite position.
by zimzam | 2025-06-20 13:57:52+00:00
Yeah, the following has happened to me multiple times when I ask copoilot to fix something. It updates my code to version A, which is still broken. Then I share the error messages asking for a fix, resulting in version B, which is also broken. Then I share the error messages and copilot confidently changes things back to version A, which is still broken.

It will confidently explain version A is broken because it isn't version B, and version B is broken because it isn't version A. There's no "awareness" that this is cycle is happening and it could go on indefinitely.
by vbezhenar | 2025-06-20 13:58:00+00:00
Most people actually do need a distributed system.

They want their system to be reliable to hardware failures. So when the server inevitably goes down some day, they want their website to continue to work. Very few people wants their website to go down.

They want their system to scale. So when the sudden rise of popularity hits the load balancer, they want their website to continue to work.

In the past, the price to run a distributed system was too high, so most people accepted the downsides of running a simple system.

Nowadays the price to run a distributed system is so low, that it makes little sense to avoid it anymore, for almost any website, if you can afford more than $50/month.
by danaris | 2025-06-20 13:58:04+00:00
They are, however, falling afoul of the generalized version of Poe's Law [0]. If you want to satirize positions like this on the internet, you really need to leave some indication that that's what you're doing. If you just remain committed to the bit, you will look exactly like the very real assholes who believe these things unironically.

[0] https://en.wikipedia.org/wiki/Poe%27s_law
by DonaldFisk | 2025-06-20 13:58:35+00:00
I understand that Wayland doesn't support Xlib function calls. What are the options for those of us who rely on C code which which uses Xlib for 2d graphics and event handling? If I have to switch to e.g. GTK, I'd not only have to rewrite all the Xlib calls, but all the code which depends on this, as Xlib and GTK do graphics ad events quite differently.
by pavan_panto | 2025-06-20 13:59:00+00:00
There is a lot of fuss around Apple's new paper The Illusion of Thinking.

Many have jumped to the conclusion that reasoning models don’t actually reason.

We deep-dived into the paper and found it says something very different.

When we look at the problem through the lens of code reviews, we see there’s real substance in what Apple is pointing out.

At Panto, we’ve observed the same patterns. Reasoning alone doesn’t cut it. The real gains come when models are paired with the right context — Jira tickets, documentation, repository history, and feedback loops.

We discussed this in detail in our new blog. Worth a read if you care about how AI truly performs on complex engineering tasks.
by b800h | 2025-06-20 13:59:21+00:00
The Oklo region has now-exhausted Uranium deposits.

From Wikipedia:

"Some of the mined uranium was found to have a lower concentration of uranium-235 than expected, as if it had already been in a nuclear reactor. When geologists investigated they also found products typical of a reactor. They concluded that the deposit had been in a reactor: a natural nuclear fission reactor, around 1.8 to 1.7 billion years BP – in the Paleoproterozoic Era during Precambrian times, during the Statherian period – and continued for a few hundred thousand years, probably averaging less than 100 kW of thermal power during that time. At that time the natural uranium had a concentration of about 3% 235U and could have reached criticality with natural water as neutron moderator allowed by the special geometry of the deposit."
by disgruntledphd2 | 2025-06-20 14:00:05+00:00
Every function in human society has hidden complexity. Like, reality is very very detailed. Everytime I learn something new I discover oceans of complexity and nuance.

That's just the way the world is.

Now, software is hard because the complexity isn't as visible to most of the org, but also because software people tend to be less than good at explaining that complexity to the rest of the org.
by throwanem | 2025-06-20 14:00:50+00:00
So I guess what I'm hearing is that PMs will be less likely to (summarizing the commonest apparent theme in comments on pseudonymous 'water cooler' forums eg here, Blind, Reddit) waste engineers' time on their path to inevitable failure and also will no longer have same as a blame sponge for same, and I'm supposed to think somehow that's a bad thing?
by TheAncientGeek | 2025-06-20 14:01:17+00:00
There's a lot of weird ideas on the fringes of EA...but they are on the fringes. Everyone is eye rolling at shrimp guy.

https://www.greaterwrong.com/posts/5JB4dn7hEvZCYDvCe/a-very-...

https://www.greaterwrong.com/posts/MHBJ436AiKyN83DCB/thinkin...

https://www.greaterwrong.com/posts/58ajesm2C38wi3WSJ/insect-...
by bee_rider | 2025-06-20 14:02:03+00:00
Accessibility seems to be the only real weakness of the open source “contribution drives focus” ethos. If I don’t like the way the window manager ecosystem is growing, it is fine if the only thing that blocks me from fixing it is my own laziness. It must not be that big a concern.

But, if an ecosystem that excludes people through no fault of their own grows up, that sucks.
by disgruntledphd2 | 2025-06-20 14:02:10+00:00
> There's something that feels tremendously off to me about these defenses which are to the effect of "What's so wrong with this? In principle, there's nothing saying a human couldn't also make one of these errors."

The big difference is that (most) humans will learn from this mistake. An LLM, however, is always a blank slate so will make the same mistakes over and over again.

And more generally, because of how these models work, it would be very strange if they didn't make the same mistakes as humans.
Show HN: Picomatch – A tiny C library for evaluating regular expressions
by beariish | 2025-06-20 14:02:27+00:00
Hi! I wrote this over a couple afternoons after wanting to embed regex into another project I'm working on, and found most implementations to either be far too big a dependency or lacking too many features.

It's not very fast, it's (probably) not very correct.. but if you have a C standard library availible, this is an option now :)
by p_l | 2025-06-20 14:02:45+00:00
Wayland early on decided that security is hard and the way forward is to just... not have the functionality. I remember when there was serious discussion copy-paste should be handled by D-Bus service provided by DE and implemented by "major toolkits". Same for anything else that might require permissions (this is how we got portals and their brokeness).

And yeah, nothing in it was related to "woke" (that's just certain dev's personal weirdness), and a lot was related to really weird community situation that X.Org (which is not X11 itself) got itself in, like the costly and failed switch to autotools (they switched, but didn't get the results they undertook that pain for). Meanwhile they were operating from "lowest common denominator" code base that got extended a lot but never truly redone (compare Xsgi, which was a compositing X server and made extensive use of multiple visuals to ensure optimal resource usage).
by hotmeals | 2025-06-20 14:03:49+00:00
>online performative self-hate and classic elite-liberal virtue signaling

The "all opinions I don't like are not held honestly, it's a trick" meme is very tiring. In respect to your original point, no this isn't some unique critique that singles out SV. The SV disruptor is just a shorthand for the rich and landed that will always be opposed to new housing. This could be drop-in replaced with a mid-career NYC finance bro, or successful Texan oil & gas professional, just exchange some things for prayer and bootstraps.

They are the same because in all those cases their wealth (real o perceived potential) depends in housing value go only up.
by wizzwizz4 | 2025-06-20 14:03:57+00:00
> GNOME’s Wayland session is now stable and usable with Orca.

They did that via an out-of-band D-Bus protocol, rather than going full Wayland. I'm all for keeping D-Bus around for backwards-compatibility (lots of things use AT-SPI2, and I certainly don't want a repeat of the CORBA -> D-Bus migration), but Wayland's AT support should be first-class, not relegated to proprietary GNOME extensions.

Per Matt Campbell's article https://blogs.gnome.org/a11y/2024/06/18/update-on-newton-the..., this decision has something to with security:

> Assistive technologies or other accessibility clients currently connect to the compositor through a D-Bus protocol, defined in the Mutter repository linked above. By exposing this interface via D-Bus rather than Wayland, we make it easy to withhold this communication channel from sandboxed applications, which shouldn’t have this level of access.
by sylwester | 2025-06-20 14:04:25+00:00
I’ve been building a CLI tool to automate i18n string translation based on JSON files (like used in i18n frameworks).

It currently implements Google Gemini or Ollama support with flexible model choices. Also deduplicates across files and caches results to avoid repeats and reduce API usage, plus it uses dynamic batch sizing. Additionally, it implements also a MCP server, supports batch processing, doing translations to multiple languages at once with filename templating etc.

Would love feedback or ideas from others working on similar things.
by wslh | 2025-06-20 14:04:56+00:00
Yes, I always find these kinds of screenshot restrictions more of a friction than real security. After all, anyone can still take a photo of the screen, less convenient, but it bypasses the restriction entirely. I understand the goal is to prevent malware from taking screenshots, but true security should come from a better model, like customizable capabilities. If needed, add 2FA or some form of consent before allowing a screenshot: the solution should be smarter, not just restrictive.
by brianjking | 2025-06-20 14:05:58+00:00
Latent Space.

"Claude Code is also the most direct way to consume Sonnet for coding, rather than going through all the hidden prompting and optimization than the other products do. You will feel that right away, as the average spend per user is $6/day on Claude Code compared to $20/mo for Cursor, for example. Apparently, there are some engineers inside of Anthropic that have spent >$1,000 in one day!"

Link: [https://www.latent.space/p/claude-code](https://www.latent.space/p/claude-code)
by noisy_boy | 2025-06-20 14:06:21+00:00
Given fairly well made mainstream distros like Ubuntu basically just work nowadays, I think it is a bit rich to shit on Linux with snarky remarks. Nobody is denying that there is certain lack of cohesiveness, niggling issues that annoy us but most of the time they are not dealbreakers. There used to be a thousand papercuts but not anymore - sure its not zero. Afterall it is made by volunteers for free because they have an itch to scratch or they like programming or want to give back something to the world etc.

You didn't pay a dime for it, except with your time on things that annoy you, which is indeed not free. But if your time is that precious and you are that exacting, maybe Linux isn't a good fit for you. Maybe you should try paying for the perfectly crafted commercial alternatives. Except in the real world, those alternatives are far from perfect and have tons of issues like spyware, bloat, ads being shoved down the users throat and so on - on top of the papercuts/annoyances that sometimes take years to fix.
by azangru | 2025-06-20 14:06:34+00:00
> In Big Agile, engineering = new features.

I find it so odd that 'agile' is something that people chose to hate. What dysfunctions did 'agile' itself bring that had not been there before? Didn't managers before 2001 demand new features for their products? Did they use to empathise more with engineering work? If they hadn't yet learnt about t-shirt sizes, didn't they demand estimates in specific time periods (months, days, hours)? Didn't they make promises based on arbitrary dates and then pressed developers to meet those deadlines, expecting them to work overtime (as can be inferred from agile principle 8: "agile processes promote sustainable development ... Developers should be able to maintain a constant pace indefinitely)? What sins has 'agile' committed, apart from inadvertently unleashing an army of 'scrum masters' who discovered an easy way to game the system and 'break into tech' after taking a two-day course?
by cbeach | 2025-06-20 14:07:52+00:00
Dark Castle!

Dad had an Apple Lisa when I was young. Apple kindly gave it to him as he was developing an accountancy suite for Apple.

I took this incredible machine for granted, and only used it for games and MacPaint at the time. Among Dad's collection of 3.5" disks was one labelled "Dark Castle." For reasons I don't recall, it wouldn't work on the Lisa, but I guessed it was a game, and it killed me that I couldn't play it. I was beguiled by this mysterious disk.

Well fast forward to 2025... I just launched the Infinite Mac System 7 emulator https://infinitemac.org/1991/System%207.0

My heart skipped a beat. Inside the "Games" folder - there it is! Dark Castle.

Three decades later, I'm finally able to play this game!

The graphics are charming. Elements of a Sierra classic, Kings Quest, and some Prince of Persia too.

https://en.wikipedia.org/wiki/Dark_Castle

That's my evening sorted!
by vbezhenar | 2025-06-20 14:08:33+00:00
> Or, crash, in which case, the ReplicaSet controller will restart the app for you.

This does not work good enough. Right now I have an issue, where keycloak takes a minute to start and dependent service which crashes on start without keycloak, takes like 5-10 minutes to start, because repicaset controller starts to throttle it and it'll wait for minutes for nothing, even after keycloak started. Eventually it'll work, but I don't want to wait 10 minutes, if I could wait 1 minute.

I think that proper way to solve this issue is to develop an init container which would wait for dependent service to be up before passing control to the main container. But I'd prefer for Kubernertes to allow me to explicitly declare start dependencies. My service WILL crash, if that dependency is not up, what's the point to even try to start it, just to throttle it few tries later.

Dependency is dependency. You can't just close your eyes, pretending it does not exist.
by tom_ | 2025-06-20 14:08:39+00:00
It's quite possible that there are just people flagging things without commenting. I do this all the time if the discussion looks particularly stupid, unproductive, bad-tempered, pointless, and so on - or some combination thereof. (I haven't done it in this case, but only because I was silly enough to comment. This thread has been quite reasonably flagged, I'd say.)

This is part of the how this particular site works. If you don't like it, that's fine, but you will have to go elsewhere to avoid it. And even if it is indeed the admins working away behind the scenes, a committee of shadowy puppetmasters directing their every move, suppression of X11 forks just one probing toothed tendril of this multi-armed octopus - well, this place was never a democracy anyway.
by pif | 2025-06-20 14:09:06+00:00
> The problem with strlcat and strlcpy is that they assume that it's okay to arbitrarily discard data for the sake of preventing a buffer overflow. The buffer overflow may be prevented, but because data may have been discarded, the program is still incorrect. This is roughly analogous to clamping floating point overflow to DBL_MAX and merrily continuing in the calculation.

He was not that wrong!
by cyberax | 2025-06-20 14:09:07+00:00
I loved the "stripy" windows. Things lining up perfectly on the horizontal stripes were somehow so visually pleasing.

I tried to replicate this look in my Java Swing UI using a commercial Aqua-like look&feel, but got hit by issues with controls rendering their own background, resulting in stripes being misaligned.

I was so disappointed when Apple phased it out later.
by jeroenhd | 2025-06-20 14:09:18+00:00
I'm not going to touch the Holocaust or AfD shtick, but when it comes to "causes of the second world war", the things the allies did to Germany after the first world war are pretty high up there.

Should the Germans have started invading countries and slaughtering millions of innocent people? Obviously not. But the way the German people were treated was going to lead to war, eventually, and it almost seems like the treaty of Versailles was engineered that way. Unfortunately, the guy that managed to unite enough German people to start the war was a nazi instead of a Napoleon.

When it came to the war itself, the allies and the Germans were no worse than each other. Obviously the mass murder the Germans were doing makes their side the "bad" side of the war, but if it hadn't been for the Holocaust I doubt the lines would be all that clear. At the end of the war, cities were bombed and razed to the ground out of revenge and bloodlust, not out of military strategy. It's amazing what you can get away with if you're on the "right" side at the end of a war.

I think this guy's speech is full of right wing rethoric that's often a dog whistle for the far right, but he's not "defending WW2 Germany" as a reactionary. If I were German, I'd be happy that Hitler's legacy is in crumbles and that many of the horrible people doing his bidding got what they deserved, but I'd be pretty pissed off that Churchill and his people never had to face any tribunals.
by vladms | 2025-06-20 14:09:24+00:00
If a project does not have several hundreds of bad ideas, then probably it is not popular. I don't follow that many projects in detail, but all that I follow get a lot of bad ideas in time.

I think being qualified as a jerk or not is orthogonal to the need of gatekeeping (required in my opinion) or the quantities (higher for more popular).
by the_snooze | 2025-06-20 14:09:54+00:00
The internet is a low-trust environment. Any scammer can reach you from anywhere in the world and try to take advantage of that desire for serendipity. You mention Omegle specifically, which was a hunting ground for sexual predators: https://en.wikipedia.org/wiki/Omegle#Child_sexual_abuse

It's the things that don't scale and instead have high barriers to entry that are most likely to produce actual healthy human connection.
by tianqi | 2025-06-20 14:10:28+00:00
I can just sense how far it's from reaching my limit, and my sense is quite accurate. I can also sense when a conversation is about to reach its own maximum length, so I use the last resource to generate a summary so that I can start a new conversation and resume progress. Ironically, these AI tools have become part of my biological clock. Besides Claude, every Wednesday is like a new kind of Sunday for me, because my ChatGPT's weekly limit is reset on Wednesdays.