MurphyA/hacker-news huggingface dataset:
Show HN: We bootstrapped a Vercel alternative – Brimble
by klefcodes | 2025-06-18 12:12:07+00:00
We’ve been building Brimble — a modern hosting platform for developers to ship fullstack apps easily.

It’s just two of us. No funding. No marketing team. We’ve shared Brimble a bit on X(twitter), but never really launched it properly.

Brimble lets you: - Deploy fullstack apps (Next.js, Laravel, Node, etc.) - Access multiple AI models via a single API - Host static sites and Docker apps - Deploy MCP servers - Provision databases in one click - Manage custom domains directly

It actually works. People are using it. But we’re now ready to really put it out there and see what the dev world thinks.

If you’re building and want to try something fresh — we’d love your feedback.

https://brimble.io
by pvg | 2025-06-18 12:12:35+00:00
Imagine if they pushed an update of the app out with the vuln to only some users, or users in {country} in their app release configs

"Imagine an arbitrarily powerful adversary operating in arbitrarily narrow, undetectable ways" is not meaningful threat modeling beside being a kind of Universal Goalpost Moving technique. It is not a 'meme' that WhatsApp is e2e encrypted if that's the form and content of your objection. The other thing is still the meme!
by amininho | 2025-06-18 12:13:10+00:00
Hi folks,

I'm a software engineer and engineering leader, and over the years, I've developed a habit of curating tech content — from blog posts to podcasts and talks. I usually consume and bookmark them for myself, but I recently figured: why not have them all in one place and receive a daily notification?

So I started a Telegram channel called TechGrub. Every day, I post links and a short description of stuff I’ve found valuable. Could be engineering, leadership, product, or AI topics.

I’d love to receive feedback, ideas, or suggestions on great sources you follow. Thanks for reading
by SiyeN21 | 2025-06-18 12:13:21+00:00
Core Security Engine: Our platform provides AI-specific threat detection and prevention that monitors AI systems in real-time to identify and block adversarial attacks - subtle input manipulations designed to deceive AI models and cause critical failures. Unlike traditional cybersecurity that focuses on networks and applications, our engine understands AI model behavior patterns and can detect when inputs are specifically crafted to exploit AI vulnerabilities. Data Protection Layer: We implement advanced encryption and access controls specifically designed for AI training data and datasets. This protects against data poisoning attacks where malicious actors corrupt training data to degrade model performance and integrity. Our solution ensures data lineage tracking and validates the integrity of datasets throughout the AI development lifecycle. Model Integrity Monitoring: Our software continuously validates AI model behavior in production, detecting unauthorized access attempts and preventing model theft - where proprietary AI models worth millions in R&D investment are duplicated or extracted. We monitor for unusual model queries, extraction patterns, and behavioral changes that indicate compromise. Lifecycle Integration: The platform integrates directly into AI development pipelines from data ingestion through model deployment and monitoring. We provide APIs and SDKs that work with popular AI frameworks, ensuring seamless integration without disrupting existing workflows. Compliance & Reporting: Our software generates compliance reports for emerging AI regulations (EU AI Act, US AI frameworks) and provides audit trails for AI security incidents, helping organizations meet regulatory requirements while maintaining operational transparency. The software essentially creates a security perimeter specifically designed for AI systems' unique vulnerabilities that traditional cybersecurity cannot address.
by ninkendo | 2025-06-18 12:14:19+00:00
I certainly know how to debug each of the services in my environment, but how do you step-through debug a single request across services? Like, if service A make a gRPC call to service B, are you saying you can “step into” the call from A and your debugger is able to break on the corresponding call in B? And frames from the call in A are there in a logical “stack” from the breakpoint in B?

(Honest question… if such a workflow is possible I’d love to hear about it. Debugging just a single service at a time in isolation is boring and obvious, but if there’s something I’m missing I’d be really curious.)
Ask HN: What types of tasks have coding agents reliably completed for you?
by meshugaas | 2025-06-18 12:15:05+00:00
Really curious about specific use-cases that folks have found coding agents, like Claude Code, to be consistent and effective. The marketing is vague hyperbole, mostly focused on getting projects started or generic "it can fix bugs by itself" type examples.

In my experiences, it worked really well to setup linter/formatters for my codebase, but failed miserably adjusting the config for a database client.

Would love to hear what has worked (or what hasn't!) and is consistent for others.
by jiggawatts | 2025-06-18 12:15:38+00:00
> It's not an Apple format

Create a HDR HEIC file on anything other than an Apple Device.

Upload it to an Apple Device.

Now use it any way: Forward it, attach it to a message, etc...

This won't work.

It won't ever work because the "standard" is not what Apple implements. They implement a few very specific subsets that their specific apps produce, and nothing else.

Nobody else implements these specific Apple versions of HEIC. Nobody.

For example, Adobe Lightroom can only produce a HEIC file on an Apple device.

My Nikon camera can produce a HDR HEIC file in-body, but it is useless on an Apple device because it's too dark and if forwarded in an iMessage... too bright!

It's a shit-show, comparable to "IPv6 support" which isn't.
Show HN: BYOK Gemini AI Mind Map
by bagusfarisa | 2025-06-18 12:17:35+00:00
Features: - BYOK Gemini API (can use the free tier one) - Built in search grounding (thanks to Gemini 2.5) - Export as JSON - Import the JSON - Light/dark mode - Locally saved to your browser storage

Limitation: - As of now, only uses Gemini 2.5 Flash
by infecto | 2025-06-18 12:17:41+00:00
Either your head is in the sand or you have not been on HN much. Practically every week there are multiple articles that make the front page either for or against LLM tooling, in each of those people, including myself, will share anecdotes from their own experiences. And you will also get a number of folks like the person I responded too who post a negative or positive comment without any evidence or attempt to learn on their own before making a claim. You say you never see people talking about their experiences but there is usually nothing but experiences being posted in these comments every week. It’s an absurd claim.

Don’t misjudge me either, I am not suggesting there should not be critical comments but that if you make a critical comment you should at least have an idea what your talking about.
by fuzztester | 2025-06-18 12:17:52+00:00
why did you embed the c++ code in the .nix file?

just to have everything in one file? how to show how to do it with nix?

because it seem simpler to have a separate C++ file, and a simple shell script or makefile to compile it.

e.g. although I could figure out roughly what the .nix file does, many more people would know plain unix shell than nix.

and where is $out defined in the .nix file?
by quotz | 2025-06-18 12:18:06+00:00
Another fun fact, from Wikipedia, the name Frisia "stems from Latin Frisii, an ethnonym used for a group of ancient tribes in modern-day Northwestern Germany, possibly being a loanword of Proto-Germanic *frisaz, meaning "curly, crisp", presumably referring to the hair of the tribesmen."

In German Frisur, and in south slavic languages Фризура, means hairstyle, which is also related to the english word Frizz
by specy_dev | 2025-06-18 12:18:07+00:00
I made a react component for Apple's liquid glass by using a 3D piece of glass.

Learn how it works here: https://specy.app/blog/posts/liquid-glass-in-the-web

In short, it uses a screenshot of the website and embeds it inside a three.js scene to run the glass "simulation".

I also made it a react component and published on npm at https://www.npmjs.com/package/@specy/liquid-glass-react
Show HN: AskMedically – a research-backed AI copilot for clinical questions
by arunbhatia | 2025-06-18 12:21:08+00:00
Hi HN,

We’re the team behind AskMedically – an AI copilot that helps doctors, specialists, and medical students find science-backed answers to their clinical questions.

Doctors often resort to Google, ChatGPT, or outdated PDFs during patient consultations or academic prep — and end up with unstructured, sometimes unreliable information. We wanted to fix that.

AskMedically lets you: •Ask any medical question in plain English •Get concise, contextual answers •Backed by real research from PubMed, NEJM, Cochrane, etc.

Think of it as a cross between a smart clinical search engine and an AI assistant trained on real-world medical evidence. We’re currently focusing on general practice, internal medicine, and medical education. It’s free to try – no login required.

https://www.askmedically.com

We’d love feedback from the HN community – especially anyone in healthtech, medical education, or search/NLP.

What would you expect it to do better? How would you trust or verify its answers? If you’re a doctor — would this save you time?

Happy to answer any questions. – The AskMedically team (reach us at iisc.arun@gmail.com)
by tzs | 2025-06-18 12:21:34+00:00
On the outside. Based on my experiences with Japanese vs American cars I'd not be surprised if they are bigger on the inside. :-)

Seriously, when I bought a Civic in 1989, I looked at both the smaller Japanese cars (Civic, Sentra, Corolla) and bigger American cars. I'm tall and big and had trouble fitting comfortably in the American cars. No problem in the Japanese cars.

Next time I was car shopping, sometime around 1999, I decided to take a look at SUVs which had become pretty popular by then. Again I tried the American ones. They were very large--and very cramped inside. Then I tried a Honda CR-V. It was way smaller than the American SUVs but just as with the Civic there was plenty of room.

It struck me as absurd. How the heck are car companies of Japan, a country whose people average over 2" (5 cm) shorter than Americans and weigh about 2/3 what Americans weigh, so much better than American car companies at making cars that can fit tall fat Americans?
by matteason | 2025-06-18 12:21:57+00:00
I had a quick look - it's sample-based (eg organ has 4 preloaded samples, http://terpstrakeyboard.com/web-app/sounds/organ440.mp3 plus 110, 220 and 880Hz variants), and different notes are created by adjusting the playbackRate of the closest sample

It's also all just vanilla JS which probably helps keep it snappy
by glkindlmann | 2025-06-18 12:22:25+00:00
I suggest trying to quantify "extraordinarily", using the actual spectral response curve for the tetrachromat's fourth cone, called "Q" in the paper shared by varunneal. Most people casually equate the short (S), medium (M), and long (L) cones with blue, green, and red, with the idea that these are all as different as can be, but the M and L cones are very similar to each other, compared to S. The L, M, S curves are independent but far from orthogonal in the way you may be thinking as you say "extraordinarily". The Q curve is just another wide bump, with a peak in between that of M and L, so again, very far from being orthogonal. Whatever 4th dimension of color perception is accessed by the Q curve, it is a relatively cramped dimension, so reliably detecting perception along it requires some carefully designed stimuli.
by _0ffh | 2025-06-18 12:22:27+00:00
> Here we present the room-temperature preparation of molecular N6 (hexanitrogen) through the gas-phase reaction of chlorine or bromine with silver azide

Hmmm, chlorine and bromine - off to a good start - then we come to silver azide.

"Azide" immediately rings all my Derek Lowe bells, and yeah... it's exactly what you'd expect.
by Intermernet | 2025-06-18 12:22:34+00:00
Which is still interesting. I'm not sure why people won't name these companies. tptacek says it's not interesting, but that's pretty obviously not true. Why won't people name these companies? If they're so insulated from normal commerce, and so specialised that they only provide these services, it shouldn't really matter if anyone knew who they were. They're companies. Unless they're obviously engaged in actually illegal activities (which they may well be, but it's currently not possible for me to determine that) they shouldn't be taboo to discuss. I find it weird that people want to claim "oh yeah, they definitely exist, trust me bro, they're all really secretive, but also totally legit" but they won't mention any names.

I can only assume that there are actually some industry or professional repercussions for disclosing any specifics, because otherwise the only other logical explanation for such tight lipped discussion is that people are somewhat afraid to talk about these companies.

Also, Google, Apple, Microsoft, Meta probably have some of the most respected vulnerability research labs in the world. They, despite their many and varied other flaws, tend not to weaponise and profit from said research. I mean, they might, but they also do a pretty good job of actively and responsibly publishing this research.
by whodidntante | 2025-06-18 12:22:48+00:00
There is quite a lot of info from many diverse sources. Even assuming a lot of misinformation or incorrect information, there is just too much to say there is nothing here.

Common sense also needs to take into account that Iran already does have a working civilian reactor, and its fuel is supplied by Russia. Given the state of Iran's economy, there is no rational reason for it to be spending vast sums to build so many facilities simply to supply fuel to a reactor that is already supplied by someone else. They would be far better off spending their much needed resources building additional civilian reactors.

Is Iran close to producing an actual bomb ? Don't know. Is Iran investing huge sums to produce weapons grade nuclear material ? There is quite a lot of information to indicate that this is so, and there is only one reason to do this - to produce a nuclear bomb.

https://en.wikipedia.org/wiki/Nuclear_facilities_in_Iran

Long list of nuclear sites, cross referenced from many diverse sources. Assume half is misinformation, there is a lot of evidence of a wide ranging program

https://isis-online.org/isis-reports/detail/analysis-of-iaea...

Analysis of the many IAEI reports. I am not sure of the reputation of the authors, but I have read through similar findings from different sources.

https://www.npr.org/2025/06/12/nx-s1-5431395/iran-nuclear-en...

"Iran isn't complying with its nuclear obligations for the first time in 20 years" from an IAEI report, reported by NPR
by infecto | 2025-06-18 12:23:06+00:00
I don’t know why it would be delusional. There is definite opportunity for these tools to be force multipliers, it depends on the team and the codebase but I am not sure how you can so easily say it’s delusional. The vast majority of code in companies is not novel. The unique parts, the business logic, is usually not requiring specialization and the rest of the code is all the same.
by bgwalter | 2025-06-18 12:23:08+00:00
To each his own. I'm completely drained after 30 min of "discussing" with an LLM, which is essentially an overconfident idiot.

Pushes never come from the LLM, which can be easily seen by feeding the output of two LLMs into each other. The conversation collapses completely.

Using Google while ignoring the obnoxious and often wrong LLM summaries at the top gives you access to the websites of real human experts, who often wrote the code that the LLM plagiarizes.
by squircle | 2025-06-18 12:23:20+00:00
> in practice, these businesses are usually not very expensive to set up and mainly serve as a way to recover the initial investment, rather than generate significant profit.

Okay, so this makes me think, perhaps, you might want to expand the definition of what you're attempting. Network with small business owners and, I dont know, set up a billboard where they can advertise their wares, or a (temporary) boutique stand/stall for local craftspeople to sell on consignment, with an agreement that a small amount of proceeds go to funding what, to me, sounds like a community center. Do you already have a designated location and permission to do this if the funds come in? Look into "B Corporations" and read "The Lean Startup" if you're not familiar.

> As for Tajik music...

Nice. Thank you for the recommendations.

If it is not too presumptuous/uncouth to ask... Are you a native English speaker or, what language is your mother tongue? Asking only because someday I would like to actually learn to speak a second language conversationally... superficial spanish/latin/french/german doesn't get you very far. Russian or Chinese seems like they would be the most fun to learn.
by JohnKemeny | 2025-06-18 12:24:32+00:00
It's that time of year again. I like A* as much as the next one, but it seems a bit excessive a times.

Title should have a (2014) in it: Introduction to the A* Algorithm (2014).

1 points, 8 months ago, 1 comments: Introduction to the a* Algorithm (https://news.ycombinator.com/item?id=41897736)

202 points, 3 years ago, 30 comments: Introduction to the A* Algorithm (2014) (https://news.ycombinator.com/item?id=30287733)

4 points, 5 years ago, 1 comments: Introduction to the a* Algorithm (https://news.ycombinator.com/item?id=24146045)

201 points, 7 years ago, 14 comments: Introduction to A* (2014) (https://news.ycombinator.com/item?id=18642462)

5 points, 7 years ago, 0 comments: Introduction to A* (https://news.ycombinator.com/item?id=16190604)
by al_borland | 2025-06-18 12:26:05+00:00
I was also thinking back to when I used TiddlyWiki almost 20 years ago. If this tool is effectively just HTML, CSS, and Javascript... could they bake it all into a single HTML file. Download a template, design your app offline, and save your work to a file that can run on its own, offline, in a browser window. Maybe the about of JS they need to bake in, or images, would make that impractical.

Of course, as it stands, the examples were so simplistic that they could easily be vibe coded. I just tried it with the attendance counter and ChatGPT gave me that's only 50 lines. I'm sure I could make that much shorter doing it manually. Granted, a project like this has to start somewhere, but as it stands it's adding a lot of infrastructure without adding enough value to make it worth it, when AI is pretty good at these really basic things, like "give me a text box with a button to increment it".
by lotharcable | 2025-06-18 12:26:13+00:00
Meta works by identifying users, modelling their behavior, and then combining that data with third party sources (typically your financial activities) and then selling access to that data to third parties. Mostly for advertising.

When you use credit or debit cards your transactions and data related to it is collected and sold. When you apply for mortgages and close on a house all that information you put in there is collected and sold.

When you put your address in for the post office, when you apply for a drivers or fishing license... Your local governments collect that information and sell access to it.

Meta tries to then tie in your online and app/phone activity with your legal/financial identity it can obtain through partner data brokers.

This is Facebook's businesses model.

So, yes, this data is available to pretty much anybody that is willing to pay for it. Which includes governments.

None of this should be surprising to anybody at this point. Apple, Google, Microsoft, etc.. all of these companies will do this to greater or lesser extents nowadays since has worked out so well for Meta's bottom line.
by weatherlite | 2025-06-18 12:26:38+00:00
> Of course it was wrong and no wonder things are 100x worse (if that) as a result.

OR you could say the pro U.S phase of Iran kept things alright (relatively to after the Islamic revoltion) until it was over and we have the freak show we have today. It is true that the Shaa was a corrupt dictator , but it is not clear to me that the U.S should have disengaged from him. Qatar, Saudi Arabaia, Egypt and Jordan are all different kinds of dictatorships that are relatively pro Western and that the U.S engages with (sometimes even by supporting the regime financially/militarily as with Egypt and Jordan). All in all, pro U.S/West Arab governments are in much better shape than Iran is today.
by ninkendo | 2025-06-18 12:26:58+00:00
In my experience you just slap minikube or k3s on your dev machine, and treat it as any other environment. Argo, helm, kustomize, whatever can all work against a local single-node cluster just fine. It takes some effort to make sure your configs are overridable per-environment, but it’s worth doing. (And something you’re hopefully doing anyway if you’re doing any kind of integration/test environment.)

It also requires that each of your services can scale down as well as they can scale up… none of them should be so huge that your whole cluster can’t fit on a single machine, if you’re just simulating one “request” at a time. (Single instances of everything, don’t reserve memory, etc.) There’s use cases where this isn’t practical, but in most cases it’s very doable.
by bapak | 2025-06-18 12:28:20+00:00
How many programmers did you need 40 years ago to write MS DOS programs? As you become more productive, more is expected of you. Instead of spending 10 days coloring pixels on the screen, now you're expected to push whole UIs in the same amount of time. Whether this is enabled by high-level languages, tools or AI is irrelevant.
by Youden | 2025-06-18 12:28:23+00:00
I think this depends too much on your car and how you use it to make generalizations like "is usually overkill".

With an 11kW charger and assuming 12h in the garage, I can charge 132kWh in a day, which is far more energy than my battery can store. Thanks to this, when I park my car and decide whether to plug it in, all I need to think about is whether the car has enough charge now for my needs tomorrow. If it does, I leave it. If it doesn't, I plug it in.

With a 1.8kW charger, I'd only get 21.6kWh overnight. In my car, this is ~100km of range (~60mi) and about 30% of the battery. Now I either need to charge it every day (and add the hassle of unplugging/plugging every time I use the car) or I need to think about it more.

It's a matter of individual preference whether it's worth a few hundred dollars to avoid that friction but to me it's more than worth it for something that's part of my daily life.
by panick21_ | 2025-06-18 12:29:18+00:00
This just false. There are libraries you can use to get most what you need and you can only change the things you care about related to window manager. And many systems have done that. Libraries are somehow a good way to share software, but not when it comes to display managers?

The claim about OpenSource manpower is also false. We have multiple high quality compositors and despite any issues, there is quite a large amount of homebrew and other compositors.

If you want something like X11, you can built on something like Mir.
by orbital-decay | 2025-06-18 12:29:46+00:00
I've traveled across Mongolia on a motorcycle many years ago, and one thing I never expected is how absolutely everyone living in a permanent house also has a yurt in their backyard, regardless of how good the house is. This made no sense to me as an outsider (like, do you really need a second house?) so I asked a local about this, and was given a funny look. Yurts are just hardwired into the culture, it's a status symbol, it's where you invite a guest, it's what you use when living outside, it so many things at once.