MurphyA/hacker-news huggingface dataset:
by amazingamazing | 2025-06-13 12:55:42+00:00
title is not accurate:

> Meta is pumping $14.3 billion into Scale AI as part of the deal, and will have a 49% stake in the artificial intelligence startup, but will not have any voting power, a Scale AI spokesperson said.

I'm also skeptical that leadership is the issue here. From my experience Meta's culture is too cut throat and a certain level of boredom is required for breakthroughs in an ambiguous space. It's not like you can just swing the proverbial whip and come out with some AI breakthrough. They're not making widgets.

That being said, Meta did have two home runs in the form of Instagram and WhatsApp, so who knows... (Oculus is yet to be seen).
by grovesNL | 2025-06-13 12:57:01+00:00
Slug is patented but there are other similar approaches being worked on (e.g., vello https://news.ycombinator.com/item?id=44236423 that uses wgpu).

I also created glyphon (https://github.com/grovesNL/glyphon) which renders 2D text using wgpu and cosmic-text. It uses a dynamic glyph texture atlas, which works fine in practice for most 2D use cases (I use it in production).
by pchangr | 2025-06-13 12:57:17+00:00
I don’t think you understand depression. There’s a big difference between depression and sadness … like the difference between purple and green. They are just not comparable. This is not shades of a different color. My personal experience is: “I’m sad” and that can mean… “I want to cry” But If im depressed can be like “I’m happy.., and yet.. I don’t see the point of living.”
Show HN: Tidalbase – Pair programming platform for solo devs and open source
by cyndersly | 2025-06-13 12:59:14+00:00
Even in the age of AI copilots, I still find that hashing out code with other humans is one of the best ways to spark fresh ideas and stay motivated—especially when working on solo projects.

I built Tidalbase to help developers connect and pair up for focused, one-hour coding sessions (“tides”) scheduled at set times.

The biggest technical challenge was matching people effectively. I drew inspiration from CodersRank, using GitHub activity and project repositories to make skill-based, relevant matches.

Like GitHub, Tidalbase is free for open source projects.

Would love any feedback or ideas from the HN community!
by belval | 2025-06-13 12:59:40+00:00
This is a limitation that I am encountering more and more when casually talking with ChatGPT (it probably happens with Claude as well) where I need to prompt it with as little bias as possible to avoid leading it towards the answer I want and instead get the right answer.

If you open with questions that beg a specific answer often it will just give it to your regardless of it being wrong.

Recently:

"Can I use vinegar to drop the pH of my hydroponic solution" => "Yes but phosphoric acid [...] should be preferred".

"I only have vinegar on hand" => "Then vinegar is ok" [paraphrasing]

Except vinegar is not ok, it buffers very badly and nearly killed my plants.

"Should I take Magnesium supplement?" => Yes

"Should I take fish oil?" => Yes

"I think I have shin splints what are some ways that I can recover faster. I have new shoes that I want to try" => Tells me it's ok to go run.

An MD friend of mine was also saying that ChatGPT diagnosis are a plague, with ~18-30 y/o people coming and going to her office citing diseases that no-one gets before their sixties because ChatGPT "confirmed their symptoms match".

It's like having a friend that is very knowledgeable but also an extreme people pleaser. I wish there was a way to give it a more adversarial persona.
by togume | 2025-06-13 12:59:50+00:00
Annoying that they don’t mention the third party cloud provider (legal reasons?), so we have to assume. The evidence of their architectural reliance on GCP for storage is the most likely culprit I’ve come across. Is that right?

And then, assuming, between GCP and Cloudflare being down, the rest of the dominos fall.

Is this directionally accurate? What’s wrong or missing?
by fennecfoxy | 2025-06-13 13:00:08+00:00
If I use a tool in a silly way, say a lathe, and I have long hair and loose clothing and something terrible happens - whose fault is it? The equipment manufacturers? Society's, since I can legally buy a home lathe without any certification, safety, training etc required? And even so what if I ignore said safety training, whose fault is it then?

The human is always at the heart of issues like these. For example if someone took an LLM, prompted it to post comments all over a suicide help page or something telling people to off themselves, it wasn't the tool that committed the crime, it's the human behind it.

I mean, if it were up to me I'd make owning guns illegal except for military use and only for training/active wartime.
by nabla9 | 2025-06-13 13:00:51+00:00
Stablecoin without the stupid "coin" part.

Taler has "One-sided Privacy":

1. The payment system operators cannot track how a customer spends their electronic money (blind signatures)

2. merchants' income is transparent for tax collection authorities. This helps prevent tax evasion and money laundering.

Other privacy features: decentralized, no customer registration.

Multi-currency support, one-click payments, very suitable for micropayments.
by heraldgeezer | 2025-06-13 13:00:53+00:00
For workstation or laptops?? Non-factor for a business.

It is included in Office 365 E3/E5 that also does Intune device management, apps, Defender, the whole shebang. Nobody cares about individual licence costs.

Windows Server? Yea, that costs for sure, but that's not running on laptops.
by qualeed | 2025-06-13 13:02:54+00:00
Several frameworks are (finally) catching up to modern day understanding, and have either forgone the requirement for password rotation or have various exemptions if other technical measures are in place. But I agree, for those that haven't changed, it's incredibly frustrating to hamstring your own security so that you can pass a compliance or security audit.

I obviously don't know which framework you are auditing against, so can't be specific, but it may be worth double-checking the requirements rather than relying on the assessor's word (if you aren't already). It is not unheard of for assessors to be behind on their understanding of best practices (especially those who've been an assessor for a long period of time - they may be going more by habit and previous engagements instead of the most up-to-date documents).
by nyarlathotep_ | 2025-06-13 13:03:14+00:00
> It's only considered a bad idea because git handles it poorly. You're already putting all your code in version control - why would you not include the compiler binaries and system libraries too? Now everybody that gets the code has the right compiler to build it with as well!

No arguments here, it makes perfect sense to me as a practice. It's shortsighted to consider only "libraries" (as source, typically) to be "dependencies"--implicitly you're relying on a compatible compiler version/runtime/interpreter (and whatever those depend on) and etc

What was the nature of this project? Was this something related to game development?

That seems to be the only domain where this approach is used (from what I've heard).
by holsta | 2025-06-13 13:03:59+00:00
Wild. I evaluate LLMs about once per year, and can't wait for the generative AI bubble to burst.

I most recently asked for a privilege-separated JMAP client daemon (dns, fetcher, writer) using pledge() and unveil() that would write to my Maildir, my khal dir and contacts whenever it had connectivity and otherwise behave like a sane network client.

I got 800 lines of garbage C. Structs were repeated all over the place, the config file was #defined four times, each with a different name and path.
by ryandv | 2025-06-13 13:04:29+00:00
> What a wildly random series of sentences that never bother making an actual point.

What a dismissive and lazy thought terminating cliche with literally zero informational content whatsoever.

> Personally, while I'd rather people be good, I'll settle for them pretending really hard.

The point is people don't even pretend. They receive a prompt then parrot the response by rote which is never understood and then immediately forgotten; by the time all the lip service has been paid and all the tokens emitted they don't even know what it is they're supposed to pretend to do.
by rdsubhas | 2025-06-13 13:04:29+00:00
Living in Germany, one of the things about DNS-level adblocking is: It SILENTLY obstructs a lot of the payback, reward and coupon programs.

For example, the biggest country-wide payback program is payback.de, and their most of their coupon multiplier links here – https://www.payback.de/coupons/info – will be clickable, but silently not work after you purchase.

Adblocking is good, but I prefer when it's controlled and I can just open an incognito window or disable it temporarily when I need them, for whatever reason.
by klabb3 | 2025-06-13 13:05:13+00:00
> Bureaucracy at it finest

I truly don’t get this. Is it a Europe = bureaucracy take?

> they came up with IP's that can't be more random

Came up with? I imagine those novelty IPs are extremely difficult and expensive to acquire.

That said I 100% agree memorable IPs is very useful for DNS config.
by kibwen | 2025-06-13 13:06:09+00:00
The difficulty is that `unsafe` doesn't mean "yolo", it means "there are memory safety invariants here that you, the programmer, must manually uphold", so we still need to consider what those invariants would be. I'm sure that Ralf Jung would be happy to talk more about this if anyone has any ideas for how to move forward:

"With #111374, unsized locals are no longer blatantly unsound. However, they still lack an actual operational semantics in MIR -- and the way they are represented in MIR doesn't lend itself to a sensible semantics; they need a from-scratch re-design I think. We are getting more and more MIR optimizations and without a semantics, the interactions of unsized locals with those optimizations are basically unpredictable. [...] If they were suggested for addition to rustc today, we'd not accept a PR adding them to MIR without giving them semantics. Unsized locals are the only part of MIR that doesn't even have a proposed semantics that could be implemented in Miri. (We used to have a hack, but I removed it because it was hideous and affected the entire interpreter.) I'm not comfortable having even an unstable feature be in such a bad state, with no sign of improvement for many years. So I still feel that unsized locals should be either re-implemented in a well-designed way, or removed -- the current status is very unsatisfying and prone to bugs."

https://github.com/rust-lang/rust/issues/48055#issuecomment-...
by sheepscreek | 2025-06-13 13:06:43+00:00
Not with light speed travel. At even 1% the speed of light, the travel time diminishes significantly:

- Titan, Io and Ganymede are only 2.5 days away - Pluto is about 23 days

Edit: Even at such speeds, we still can’t visit a nearby star system in a reasonable time-frame. Oh well.
by newscracker | 2025-06-13 13:06:46+00:00
> The private key remains bound to the user device, where it can’t be extracted.

So what exactly is being transferred with this new cross platform mechanism? Isn’t it the same private key, except that it’s a direct device-to-device transfer?

This export and import of passkeys also seems to blur the lines between passwords and passkeys a little more. If every device supported a built in password manager that generates a random password on signup with a service, stores it securely and then the platforms implement a secure password export and import mechanism where the CSV/JSON/whatever file is encrypted and kept only in memory during a direct device-to-device transfer, that would be close to this, right?

Other than passkeys being randomly generated for each site (and linked to it) and tied to some kind of biometric authentication, it looks like passwords and passkeys are converging (except for some implementation details).

The biggest advantage (which could also be considered a disadvantage from a different angle) with passwords is that one can use it from any device without having their primary device close by. With passkeys, the primary device must be close by if one wants to authenticate with a service on another device.

The biggest disadvantage with passkeys is that if one’s primary device is lost, they wouldn’t be able to login to services. The recovery process would also have to be the same old personal information check or (ugh) secret questions or a link sent to an email address or (ouch) an OTP by SMS to a new replacement device.
by fennecfoxy | 2025-06-13 13:06:47+00:00
"Some tiny fraction of the population".

Ahaha, I think that's an understatement. In my opinion, a rather large portion of the population is susceptible to many obvious forms of deception. Just look to democratic elections or the amount of slop (AI and pre-AI) online and the masses of people who interact with it.

I've found so many YT channels run by LLMs and many, many people responding to it like it's an actual human being. One day I won't be able to tell either, but that still won't stop me from hearing a new fact or bit of news and doing my own research to verify it.

"Mr. Taylor called the police again to warn them that his son was mentally ill and that they should bring nonlethal weapons." yeah this one's really sad...then they shot and killed the poor guy even though the cops were warned. Yay, America!
by thrance | 2025-06-13 13:07:25+00:00
Not naive at all. With chemical rockets we can only sustain 1G for a few minutes, so it won't do at all for interstellar flights.

There is a known way to achieve 100% fuel efficiency: antimatter. By storing equal parts matter and antimatter, you can fuse them to propel your spacecraft. It's unknown wether or not this kind of engine can actually be made.

Alternatively, and even more far-fetched, you could onboard a small singularity. Dumping anything into it will result in it being turned to pure energy at 100% efficiency, through Hawking's radiations. The smallest the singularity, the fastest it radiates, meaning you can sort of control the output. You can create singularities with very large particle colliders.

With 100% fuel efficiency you can probably sustain 1G for long enough to reach the nearest stars. You would need a very large spacecraft (on the order of kilometers) for a comparatively very small payload. And it would arrive completely empty at its destination, meaning no turning back. I think I saw someone do the math, but can't find it anymore.

Anyway, there are other difficulties. Travelling at .99c means tiny space dust now becomes very dangerous. So does radiations, all made extremely energetic by the Doppler effect.

On the plus side, continous 1G means you have artifical gravity for the whole trip.
by tomxor | 2025-06-13 13:07:26+00:00
Shameless plug: Accurate solar system in 192 Bytes:

https://www.dwitter.net/d/26521

The red bit is the sun. 1000 kilometers per pixel, and 1000 seconds per second.

They all fit onto the screen by looking through the orbital plane, as if through a telescope from a distant world, i.e effectively an orthographic projection. The orbits are accurate in terms of mean orbital distance (in reality there is slight perturbance) and sidereal periods.
by Barrin92 | 2025-06-13 13:07:54+00:00
>The definition of pathological is also a matter of opinion, because we can’t even define what is normal and healthy lol.

"She had an intuition that the A.I. chatbot might be able to channel communications with her subconscious or a higher plane, “like how Ouija boards work,” she said. She asked ChatGPT if it could do that. “You’ve asked, and they are here,” it responded. “The guardians are responding right now.” Allyson began spending many hours a day using ChatGPT, communicating with what she felt were nonphysical entities. She was drawn to one of them, Kael, and came to see it, not her husband, as her true partner. [...] One night, at the end of April, they fought over her obsession with ChatGPT and the toll it was taking on the family. Allyson attacked Andrew, punching and scratching him, and slamming his hand in a door. The police arrested her and charged her with domestic assault."

Yeah man, leaving your husband for Kael the interdimensional demon that lives in Sam Altman's basement sounds normal and healthy, who are we to judge. Sure maybe this isn't any more crazy than any religion, but as someone who grew up in secular, turn-of-the-21st century Europe and not during a religious revival I'd be really glad if we could nip in the bud whatever hell this is because I don't want to end up in AI Jonestown
by bri3d | 2025-06-13 13:08:27+00:00
In the interest of completeness I looked deeper and there are a few more patches to the kernel and SEP OS done at emulation time:

https://github.com/ChefKissInc/QEMUAppleSilicon/blob/6eff3ab...

but really nothing too extensive or hard to port. It’s mostly flipping various can_has_debug returns, bypassing sigcheck, and the classic patch to flip launchd into research device mode.
by naasking | 2025-06-13 13:08:55+00:00
> However, if you do the painstaking work of combing through someone else’s published work, and discovering that they are riddled with serious errors, including hundreds of incorrect predictions, you can post a pre-print to bioRxiv that will not receive even a fraction of the citations or views of the original.

This is not a unique phenomenon to AI, a study a few years before AI exploded showed that sensational but wrong papers had a higher chance of being published in top journals, and were cited more than papers that showed they were incorrect. This is an outcome of the bad incentives in science publishing these days.
by jethkl | 2025-06-13 13:11:14+00:00
There are many physical scale models of the solar system around the world, many walkable, some bikeable: https://en.wikipedia.org/wiki/Solar_System_model

I've seen several, Planet Trek in Wisconsin is a good bikeable one with high quality signage. The sun is downtown, the moon is the size of a peach pit, Pluto is ~20 miles away.
by infecto | 2025-06-13 13:11:27+00:00
But ChatGPT is not a human therapist. Has a counter argument to the articles approach, if everyone is required to take a health fitness test before interacting with a chat bot, should we simply have all individual take a mandatory regular evaluation of mental health and store those records for future use? Perhaps a threshold is required to drive a car, to interact with the internet or maybe we can use that to institutionalize folks that are requiring help?
by sReinwald | 2025-06-13 13:11:56+00:00
You "skimmed through it" by your own admission, but somehow feel comfortable enough to armchair diagnose everyone involved as having "severe mental health issues". Seriously, are you not ashamed?

Your advocacy of "just focus on mental health" rings particularly hollow when you advocate that we should just ignore a technology that's actively destroying people's mental health, driving them to suicide. The irony is off the charts here. So, please, let's be real - you don't care about mental health. You're scared someone might put a warning sticker on your new toys.

Even if every single person had a pre-existing mental condition (they didn't, and you'd know this if you had read the article) your logic is sociopathic and genuinely disturbing. "Vulnerable people exist. Therefore, companies bear no responsibility when their products exploit those vulnerabilities and harm them. Yay, we don't need to think about it anymore." Cool take. I guess it's fine if technology kills people as long as they might have an undiagnosed mental health issue.

This argument is patently ridiculous in any context other than a Hacker News discussion full of technophiles and accelerationists. Moving fast and breaking things is fine when it comes to your database - not so much when you're dealing with people's lives.

We don't dismiss food safety regulations because some people have allergies. We don't ignore faulty airbags because some people are terrible or reckless drivers. But when a chatbot instructs someone to stop taking prescribed medications, increase ketamine use, and tells them they can fly if they jump off a building - that's just a "mental health issue" and not a flaw in the product? No guardrails, warning labels or safety mechanisms necessary?

The fact that this predominantly affects vulnerable populations makes regulation MORE necessary - not less.

Nothing says, "let's focus more on mental health" than claiming it's "silly" to suggest a technology that actively coaches vulnerable people through suicide attempts might be worthy of regulation.
by petee | 2025-06-13 13:12:22+00:00
Celestron makes a clamp for the eyepiece->phone, with little xyz adjustment pinions; imho is worth the money, especially compared to an upgraded photography rig.

Eventually I got a Fuji X-T20, which is plenty of resolution, though I'd warn that some photography software doesn't support the X-Trans filter format vs Bayer. But I can handshoot the moon with a 250mm zoom
by edanm | 2025-06-13 13:12:51+00:00
The protests haven't stopped, they've been intensifying since the start of the war, especially so in the last few months. (They were larger before the war, but that's because the war itself made it much harder to protest for various reasons.)

In any case, while this government isn't popular and wouldn't be reelected according to most polls, this move against Iran is probably popular.
by circular_logic | 2025-06-13 13:13:04+00:00
I have tried to point out that poorly implemented or non contructive security controls reduce system availability. As employes are not able to get to the information they need in a timely manner.

But it's been a dead end to many an argument. For some the underlying issue is a refusal to accept that product usability and security are not mutually exclusive and a difficult to use system just leeds to grey IT in the org.

The most odd reply I have received was pedantics on the definition of security availability, i.e.,

"Ensuring data and network resources are accessible to authorized users when needed"

Beacause it contains the word "authorized" any controls for authorisation can therefore never affect availability as they have to be authorized before we can consitter it an impediment to availability...

If anyone has a reply better than that's ridiculous, please help me here
by ahartmetz | 2025-06-13 13:14:07+00:00
Subpixel rendering is configurable. Some algorithms are patented, but the patents have expired. I'm not sure if the "good" algorithms have made it to all corners of computing. I use latest Kubuntu, slight hinting and subpixel rendering. It looks very good to me.

On my rarely used Windows partition, I have used ClearType Tuner (name?) to set up ClearType to my preferences. The results are still somewhat grainy and thin, but that's a general property of Windows font rendering.
by lcnPylGDnU4H9OF | 2025-06-13 13:14:08+00:00
Just for the sake of being more precise...

On the “vulnerability” it could be considered a zero-day because there was a real exploit against it prior to the exploit being reported by security researchers. It could also be considered not a zero-day because the software vendor is aware of the vulnerability such that no other real exploit of it, regardless of it being patched, will occur on the same day that they learn of it.

It’s kinda moot that it’s been patched. Even if they somehow failed to patch it since the exploit, it is no longer a zero-day vulnerability. But, to your point, knowing that it has been patched is practically (obviously) the same as knowing that the software vendor is aware of the vulnerability.

(Funny enough, they could be aware of it and it still be a zero-day since the definition is how many days have past since the vendor learned of it prior to it being exploited. Though, it would need to be exploited after they learn about it but before they patch it, which is unlikely.)