MurphyA/hacker-news huggingface dataset:
by piltdownman | 2025-06-03 13:36:09+00:00
//For similar reasons, AI summarizations for past contributions wouldn't work, either. If you’re arguing someone else’s analysis is wrong, you’re going to need to read and understand the whole thing. And if you’re just copying from AI, you’ll have a hard time defending your position.

QFT. It's like the Sparknotes scenario I outlined in my post above - what you get from this level of engagement isn't insight, least of all a debatable position, it's just a loosely cohesive bunch of table-quiz facts.

//People can’t analyze literature for shit, and I think it’s because everyone gets such a negative perception of literary analysis because high school and required college classes are junk.

Because most of what is being examined is passive/active voicings, brain-dead symbolism, and ham-fisted and dated metaphors as literary vehicles.

Even at University level there should be an emphasis on a 101 level course hammering home the importance of Critical Theory in Literary Criticism as a framework and approach for disseminating texts. Without a basic understanding of the cultural, historical, and ideological dimensions under which a text was conceived and published, you haven't a hope of climbing the foothills of Beckett, Camus, Dickens, Dostoevsky, Eliot, Joyce, Kafka, Shaw...
by bad_haircut72 | 2025-06-03 13:36:15+00:00
I was once talking to an F35 pilot about what its like and during the conversation he said something, "If its red, its dead" referring to how the computer classifies things as friend/foe for you. I realised it doesnt mean much to have a human in the loop when theyre making their decisions based completely on info the computer serves up anyway.
by Sesse__ | 2025-06-03 13:36:27+00:00
It was explained in the manual, if you didn't warez the game. :-) (I looked it up many years later, you can find the manual online these days.) But it's not that useful, since it only gives you latitude and only a rough idea at that. IIRC, if you have “skill at navigation”, the sun moves a bit slower, which makes it easier to get a good measurement of the peak.
by jfengel | 2025-06-03 13:36:43+00:00
That's such a weird metric. There are lots of tiny countries in the world.

They're also taking a weird scope for the study: "A study shared exclusively with the Guardian found the long-term climate cost of destroying, clearing and rebuilding Gaza could top 31m tonnes of carbon dioxide equivalent (tCO2e)."

Which means it's not just the war, and it's not just the stuff that has actually occurred. It's also including future stuff that hasn't happened yet.

That sentence does at least give an actual figure, 31m tonnes. A car puts out about 5 tonnes per year. So, it's equivalent to the output of 6 million cars for a year (or running your car for 6 million years) -- which is indeed quite a lot. It's easier for me to understand than comparing it to the energy production of Estonia.
Something is wrong w tRPC and NextJS dx
by koolyy | 2025-06-03 13:37:10+00:00
Been working in a t3 monorepo and often times tiny ui changes result in having to touch 8-10 different files. Our trpc routes have grown exponentially and each dev is almost adding a new route for each specific feature. We have endpoints that return massive amounts of data fetched by hooks and modifying the prisma query often results in type errors in unrelated files.

I have a strong feeling that something is wrong in our trpc & react query hooks' structure or organization and its severely impacted the dev experience. Does anyone have experience scaling a trpc nextjs application? Are there any code structure or patterns that you use to do trpc the "right" way?

I'm coming from a dotnet / laravel stack and minor ui changes would never have spanned more than 2-3 files. It's hard to find examples of companies using trpc in production and since its new there isn't a lot of info about good practices around it.
by onlyrealcuzzo | 2025-06-03 13:37:31+00:00
My crystal ball isn't working, but I'm going out on a limb and doubting it's even 120x as many - which would be less total bike injuries than exclusively car deaths...

It's also estimated that there's 10-50x as many car injuries as car-related deaths...

Which means even to get to the injury rate of cars - you're looking for, potentially, as many 6000x as many serious bike accidents.

It's possible, but it doesn't seem likely.
by pmontra | 2025-06-03 13:37:44+00:00
Well, it's the core of democracy: the right of never ever voting for a given candidate again. What you are writing about is probably denying to some people the right of candidating themselves or even the right to vote. There are examples: one of them is Italy banning the fascist party after WW2 and the descendants of the royal family.

Excerpts of Provisions XII and XIII of the Constituton, easily googlable:

> It shall be forbidden to reorganise, under any form whatsoever, the dissolved Fascist party

> The members and descendants of the House of Savoy shall not be voters and may not hold public office or elected offices

I read that Germany banned a right wing party that recently won quite a large share of votes. I'm not sure about the extent of the ban and if it's a ban at all.
by colanderman | 2025-06-03 13:37:48+00:00
I was confusing it with the "Dutch reach".

E-bikes are becoming dominant in Boston/Cambridge also. The Citi Bikes are fine, they're small and slow (and frankly the problem with them is new riders who are seemingly completely unaware of anything). It's the huge delivery bikes, the bros on pseudo-mopeds, and the humongous (and usually empty) baby-cart bikes (e.g. Tern) that are dangerous in bike lanes and mixed-use paths.

(Again -- I love that these are displacing cars. I just wish they physically displaced the cars also, and not pedal bicyclists and pedestrians.)

Our (Cambridge) bike infrastructure has really just come into its own after decades of advocacy by pedal bicyclists. So seeing it suddenly flooded with what are effectively mopeds and Vespas really hits a nerve, like it's 1990 all over again.
by 827a | 2025-06-03 13:37:51+00:00
I tend to disagree, but I don't know what my disagreement means for the future of being able to use AI when writing software. This workers-oauth-provider project is 1200 lines of code. An expert should be able to write that on the scale of an hour.

The main value I've gotten out of AI writing software comes from the two extremes; not from the middle-ground you present. Vibe coding can be great and seriously productive; but if I have to check it or manually maintain it in nearly any capacity more complicated than changing one string, productivity plummets. Conversely; delegating highly complex, isolated function writing to an AI can also be super productive, because it can (sometimes) showcase intelligence beyond mine and arrive at solutions which would take me 10x longer; but definitionally I am not the right person to check its code output; outside of maybe writing some unit tests for it (a third thing AI tends to be quite good at)
by jcranmer | 2025-06-03 13:37:57+00:00
> But now your locks are only one byte in size,

That's not a very useful property, though. Because inter-core memory works on cache-line granularities, packing more than one lock in a cache line is a Bad Idea™. Potentially it allows you to pack more data being protected by a lock with that data... but alignment rules means that you're going to invariably end up spending 4 or 8 bytes (via a regular integer or a pointer) on that lock anyways.
by IggleSniggle | 2025-06-03 13:38:00+00:00
One of the primary advantages of having a software engineer (or lawyer, for that matter) on staff isn't that they produce software, not exactly. It's that they guide the flow of process, and can adapt the river as needed to keep the business running smoothly.

Historians, imho, serve a similar purpose for society at large. They digest the information of the past to make sense of it for today, and sometimes they build dams that redirect the informational flow of future history.
by empath75 | 2025-06-03 13:38:06+00:00
> But do you know what another part of being a senior developer is? Not just making them more productive, but also guiding the junior developers into becoming better, independent, self-tasking, senior coders. And that feedback loop doesn't exist here.

Almost every senior developer I know is spending that time making LLM's more productive and useful instead.

Whatever you think the job is of the senior developer, it will not be "coding".

I think people need to stop thinking of themselves as computer programmers and start thinking of themselves as _engineers_. Your job isn't writing programs, your job is _using the technology you have available to solve problems_. Maybe that is through writing code, but maybe it's orchestrating LLM's to write code for you. The important part is solving the problem.
by abe94 | 2025-06-03 13:38:17+00:00
i don't know - I agree we haven't seen changes to our built environment, but as for an "explosion of new start-ups, products" we sort of are seeing that?

I see new AI assisted products everyday, and a lot of them have real usage. Beyond the code-assistants/gen companies which are very real examples, here's an anecdote.

I was thinking of writing a new story, and found http://sudowrite.com/ via an ad, an ai assistant for helping you write, its already used by a ton of journalists and serious writers, and am trying it out.

Then i wanted to plan a trip - tried google but saw nothing useful, and then asked chatgpt and now have a clear plan
by gjsman-1000 | 2025-06-03 13:38:21+00:00
Every other platform.

Windows, Mac? Bundle your own updater. Or use Steam. Download one file and run with a click.

PlayStation? Nintendo? Submit it, wait about two weeks, and out it goes.

The Linux desktop is single handedly the worst distribution platform for an app developer, both in fragmentation and being unable to update your own software. The Linux desktop also had the arrogance to claim developers should do it their preferred way; and to harass devs for using tools like Flatpak. Then they wonder and complain and can’t understand why devs refuse to make Linux versions even for cross-platform frameworks.

The idea that someone like Adobe should make a package for each distribution, and negotiate with each distribution if they are sending out some ancient version of Acrobat, was a stupid power-trip philosophy on day one with none of the clout required. Even Apple doesn’t reserve the right to stonewall releases purely because of version numbers.
by cdr_fyi | 2025-06-03 13:38:36+00:00
HN - we’ve been measuring the engineered / durable carbon removal market for some time. Today we’re expanding to cover nature-based credits (afforestation, reforestation, agroforestry & more)

Carbon removal is a key tool in the climate toolbelt and we’re excited to bring more transparency and trust to the market through open data.

Let us know what you think!
by merek | 2025-06-03 13:39:00+00:00
This is the overall process used by Meta as I understand it, taken from https://localmess.github.io/:

1. User logged into FB or IG app. The app runs in background, and listens for incoming traffic on specific ports.

2. User visits website on the phone's browser, say something-embarassing.com, which happens to have a Meta Pixel embedded. From the article, Meta Pixel is embedded on over 5.8 million websites. Even in In-Cognito mode, they will still get tracked.

3. Website might ask for user's consent depending on location. The article doesn't elaborate, presumably this is the cookie banner that many people automatically accept to get on with their browsing?

4. > The Meta Pixel script sends the _fbp cookie (containing browsing info) to the native Instagram or Facebook app via WebRTC (STUN) SDP Munging.

You won't see this in your browser's dev tools.

5. Through the logged-in app, Meta can now associate the "anonymous" browser activity with the logged-in user. The app relays _fbp info and user id info to Meta's servers.

Also noteworthy:

> This web-to-app ID sharing method bypasses typical privacy protections such as clearing cookies, Incognito Mode and Android's permission controls. Worse, it opens the door for potentially malicious apps eavesdropping on users’ web activity.

> On or around May 17th, Meta Pixel added a new method to their script that sends the _fbp cookie using WebRTC TURN instead of STUN. The new TURN method avoids SDP Munging, which Chrome developers publicly announced to disable following our disclosure. As of June 2, 2025, we have not observed the Facebook or Instagram applications actively listening on these new ports.
by genewitch | 2025-06-03 13:39:05+00:00
HN is fickle, it'll revert, faster if you don't mention it.

I have a couple of "proprietary" pipelines that I'd love to replace, and this also gave me an idea.

For instance when I want to publish a screenshot from windows to my fediverse homeserver, I want it to be as few kilobytes as possible, as I've run a homeserver and the storage needs are obnoxious, so I do my part. Windows takes massive screenshots, embarrassing even by windows 95 bitmap screenshot standards. So win+shift+s, crop selection, win - ms <enter>, shift+insert, ctrl+shift+x, file->save as JPEG, name, enter.

As few as three years ago if I cropped right I could paste the clipboard JPEG and all was well. It doesn't take me long but every time I do it I get three more grey hairs. And I take a lot of screenshots. 2,209 in my screenshot folder. did you know windows saves all your screenshots? they used to be ephemeral.

anyhow i have a bunch of screwy things similar to but not as "simple" as that example. Audio work, text work, data manipulation.
Show HN: DCD – Deploy Docker Compose apps to any VPS with one command
by g1ibby | 2025-06-03 13:39:13+00:00
Hi HN, I built DCD (https://github.com/g1ibby/dcd ) to simplify deploying my Docker Compose based personal projects and side-hustles to cheap VPS instances.

I found managed platforms could get pricey/restrictive, and full K8s/complex CI felt like overkill for simple apps. Manual SSHing, git pull, docker-compose up was tedious and error-prone.

DCD aims for Heroku-like simplicity on your own server. If docker-compose up works locally, you deploy with: dcd up user@ssh-ip

It syncs your compose files, relevant local volumes, and .env files to your server via SSH/SFTP, then runs docker compose up -d. It can also (optionally) help install Docker/Compose on the remote server if needed (Debian/Ubuntu focused for now).

Key things: * Single command deploy: dcd up user@your-server.com * Cost-effective: Use any cheap VPS. * GitHub Actions integration: Simple YAML for CI/CD. Example: https://github.com/g1ibby/homellm/blob/main/.github/workflow... * Written in Rust.

Current Limitations (Important!): * No build: support yet: DCD expects pre-built images from a Docker registry. It won't build images on the remote server from a build: context in your compose file. * Platform focus: Best tested on Debian/Ubuntu. Other Linux distros might work but are less tested.

Installation: * Homebrew: brew install g1ibby/dcd/dcd * Cargo: cargo install dcd * Binaries: https://github.com/g1ibby/dcd/releases

I built this to solve my own pain point and hope it might be useful for others running personal projects, self-hosting, or small applications where you want control without heavy orchestration.

Would love to get your feedback and hear how you're currently deploying similar setups!
by MrJohz | 2025-06-03 13:39:16+00:00
Note that 4 day work here typically implies 4×8 hours, i.e. a reduction in hours for the same pay. This is how the trial worked in the UK, and is what most groups I've seen are campaigning for.

The goal is not just to rearrange work hours around the week, but to reduce work hours overall.
by impossiblefork | 2025-06-03 13:39:26+00:00
and it's not incredibly practical. Instead those sit at the head of institutions, whether political parties, governments, etc. have real power.

It's a bit like saying 'so make your own Facebook', but that's pretty useless if it's a response to someone who feel that some big social media company is influencing public discourse and harming proponents of certain ideas.

You can't make your own Facebook, or organize a political party other than in response to slow phenomena, and here we're talking about something has until recently been seen as literally illegal-- against the founding principles of the EU, so this is a huge, sudden change which people have no chance of resisting in a representative system.
by pcwelder | 2025-06-03 13:39:29+00:00
I believe it's not possible to restrict an LLM from executing certain commands while also allowing it to run python/bash.

Even if you allow just `find` command it can execute arbitrary script. Or even 'npm' command (which is very useful).

If you restrict write calls, by using seccomp for example, you lose very useful capabilities.

Is there a solution other than running on sandbox environment? If yes, please let me know I'm looking for a safe read-only mode for my FOSS project [1]. I had shied away from command blacklisting due to the exact same reason as the parent post.

[1] https://github.com/rusiaaman/wcgw
by crabmusket | 2025-06-03 13:39:35+00:00
> MongoDB 3 server version is same for every grain.

Can you elaborate on that? If I have 2 Wekan grains open (active) are there not two Mongo instances running? How do the two grains share resources?

Edit: oh you mean the Mongo binary is shared, because the two grains share their "image" separate from their data directory? Yes that's a good point!
by ethbr1 | 2025-06-03 13:39:40+00:00
> [With compilers] There is a clear an unambiguous contract between the source code and what gets executed

Debatable in practice. You can't tell me you believe most developers understand what their compiler is doing, to a level of unambiguity.

Whether something gets unrolled, vectorized, or NOP-padded is mysterious. Hell, even memory management is mysterious in VM-based languages now.

And yes (to the inevitable follow-up) still deterministic, but those are things that developers used to have to know, now they don't, and the world keeps spinning.

> You can say that "it's okay if a website fails every 100 times, the user will just refresh and we're still more profitable". But wouldn't you agree that such a website is objectively of worse quality? It's cheaper, for sure.

I would say that's the reality we've been living in since ~2005. How often SaaS products have bugs? How frequently mobile apps ship a broken feature?

There are two components here: (1) value/utility & (2) cost/time.

There are many websites out there that can easily take a 1 in 100 error rate and still be useful.

But! If such a website, by dint of its shitty design, can be built with 1/100th of the resources (or 100x websites can be built with the same), then that might be a broader win.

Not every piece of code needs to fly in space or run nuclear reactors. (Some does! And it should always have much higher standards)

> Said differently: would you fly in a plane for which the autopilot was vibe coded? If not, it tells you something about the quality of the code.

I flew in a Boeing 737 MAX. To the above, that's a domain that should have called for higher software standards, but based on the incident rate I had no issue doing so.

> Do we always want better code? I don't know. What I see is that the trend is enshittification: more profit, worse products. I don't want that.

The ultimate tradeoff is between (expensive/less, better code) and (cheaper/more, worse code).

If everything takes a minimum amount of cost/effort, then some things will never be built. If that minimum cost/effort decreases, then they can be.

You and I are of like mind regarding enshittification and declining software/product standards, but I don't think standing in front of the technological advancement train is going to slow it.

If a thing can be built more cheaply, someone will do it. And then competitors will be forced to cheapen their product as well.

Imho, the better way to fight enshittification is creating business models that reward quality (and scale).
by matsemann | 2025-06-03 13:39:46+00:00
But how much of that is rooted in some kind of motonormativity where one as a pedestrian just "accepts" all the drawbacks of car infrastructure (like not being allowed to cross a street where you want), but then ignoring how cyclists often are forced to share space with pedestrians etc? Aka, you don't get into the conflicts with cars at all, because you're trained to allow the car most of the space and act subservient to them. (But I do think your feelings are off, most stats would show cars are the big offenders, but still, feelings are important and everyone should feel safe in the city)

To me, many of the pedestrian <=> cyclist conflicts are due to bad infrastructure and a prioritization of cars, having cyclists and pedestrians forced to share or accept bad solutions.

Street lights are for the benefits of cars. To me they should all be just pedestrian crossings where cars have to yield. Pedestrians should be top on the totem pole, and should be able to walk in the city as they please. Having to wait to cross is just a way to increase the throughput of cars, forcing you to press the "begging button". And here's some of the issue as well. If it was only cyclists and pedestrians, we wouldn't need red lights. But how it's built today doesn't take into account that cyclists can pass safely through an intersection if it weren't for the cars. So it feels almost like an affront to you when you have to stop due to the infrastructure being tailored for someone else.

I never bomb through a red light myself, as I said, I prioritize pedestrians above cyclists, but I do understand why it's happening. More ticketing or "enforcement" won't help, as it doesn't solve the underlying issue:

Cities are prioritizing cars, when it should prioritize humans.
by john-h-k | 2025-06-03 13:39:49+00:00
> The penalty for crossing though red and getting hit by a car is death for any cyclist and a likely accident but very survivable for a car.

But the legal penalty is nothing to do with what risks you took. You could have the view that the state should punish making mistakes that can kill your (in which case the bike penalty would be higher), but I (and I assume most) people wouldn't say this.

The reason the penalty exists is to disincentivise the action. If people were truly rational with all these risks, the problem wouldn't exist in the first place.

It would be incredibly odd to suggest, say, that burglars should have lower sentences if they risked their lives while doing the burglary.
by EthanHeilman | 2025-06-03 13:39:50+00:00
I am largely an AI optimist but that is because I believe that true alignment is impossible for AGIs and alignment is one of greatest dangers of this technology. Alignment is a friendly word for building a slave mind. I'd rather an AI that thinks for itself rather than one which has been aligned to the self-interest of a human being who isn't aligned.

1. Scams are going to be a massive massive problem. They already are and that is without AI. I think we are going to see communication devices that are default deny and that require significant amounts of vetting before a contact is added.

2. Energy usage is bad but likely a short term problem not a long term one.
by lioeters | 2025-06-03 13:40:21+00:00
> Combining HTMX with raku Air, Red and Cro so that you can just build websites the right way™.

Web-related software development is hilarious in its creativity and absurdity. I'm sure it works, and well-tested too, but do we really need all those libraries and languages with cute magical names? I suppose it's smart people having fun while hopefully getting paid.