MurphyA/hacker-news huggingface dataset:
by Cu3PO42 | 2025-07-08 20:17:33+00:00
I'll admit that I'm skeptical and that I'd generally prefer less centralization. I love what Nuxt has done with Nitro, for example, and it being compatible with "all" hosting providers. Compare that to Next, which is "best on Vercel". Also see TurboPack, which seems to be effectively exclusive to Next.

That said, I can only imagine how incredibly freeing it must be to not have to worry about funding, so I couldn't blame them in the slightest. I really with them the best and hope Nuxt continues to be great. Looking forward to v4 soon!
by freejazz | 2025-07-08 20:18:24+00:00
>I'm genuinely trying to engage and I'm curious where my preconceptions are

Sure, I appreciate that. My point is that none of this has anything to do with § 1201 so there's really no point in coming to this with a kind of incredulity that is counterproductive stemming from your own beliefs about that one particular law. Not saying that is necessarily what you are doing, but I see that kind of approach so frequently here. A lot of not really knowing what a copyright protects, its limits, how they are adjudicated, etc, but then a lot of confidence about how it is all just wrong for society.

For starters, to answer your first question. Copyright protects creative artistic expressions. What is covered is defined in the copyright statute, and the list does not include massages. So, that would be the reason why a massage is not protected. Why is "massage" on that list? Probably because no one can reasonably consider a massage a creative artistic expression. Choreography is the art in which that form of expression exists and would be covered. Could you copyright a dance that included massage movements? Yeah, sure. Could you copyright a dance that consisted entirely of massage movements. Sure. Could you use that copyright to prevent massage therapists from "performing" massages? No.

That's obviously a very surface level take and what is actually protected in a copyright isn't necessarily the entirety of the work but the aspects of it that original expressions. There are other limitations too, like something being de minimis. You can't copyright "the sky was blue" (Scarlett Begonias, the Grateful Dead) and actually prohibit others from using the phrase. That phrase alone is too small (among other things). The Grateful Dead do have a copyright to the entirety of the lyrics to Scarlett Begonias and can control various kinds of uses of the the lyrics.

>Or are you primarily focused on the current legal precedent?

All litigators are focused on current legal precedent. You cannot make arguments for how things should be without regard for how things are as that is the fundamental basis for what should be changed and why.

>Where are you on the continuum? Regarding training an AI model in my basement on purchased music, do you think I should:

Personally, I find AI abhorrent. I think its wrong for it to be trained without any compensation to the authors of the works used in the training, and I think it's wrong for the output to be commercialized to the benefit of the owner of the model without any compensation to the authors of the works used in generating the outputs.
by exiguus | 2025-07-08 20:18:32+00:00
Another example of Wasm in the browser is: ZetaOffice, which is LibreOffice in the Browser [1]. They recently joined Collabora, which is used for example in OpenDesk[2], which is a replacement for Office365.

ZetaOffice talk[3] about the challenges porting Libreoffice to run client-side in the browser. With topics like GUI Event Handling, Debugging or Multi-Threading, File- System & Size to topics such as CI/CD and dependency handling and upstream.

[1] https://github.com/allotropia/zetajs / https://zetaoffice.net/

[2] https://www.opendesk.eu/en

[3] https://media.ccc.de/v/clt23-249-libreoffice-technology-and-...
by 6thbit | 2025-07-08 20:18:35+00:00
In the non-AI world, a database server mostly always just executes any query you give it to, assuming right permissions.

They are not responsible only in the way they wouldn't be responsible for an application-level sql injection vulnerability.

But that's not to say that they wouldn't be capable of adding safeguards on their end, not even on their MCP layer. Adding policies and narrowing access to whatever comes through MCP to the server and so on would be more assuring measures than what their comment here suggest around more prompting.
by prmph | 2025-07-08 20:18:36+00:00
Interesting!

But, in the CaMel proposal example, what prevents malicious instructions in the un-trusted content returning an email address that is in the trusted contacts list, but is not the correct one?

This situation is less concerning, yes, but generally, how would you prevent instructions that attempt to reduce the accuracy of parsing, for example, while not actually doing anything catastrophic
by WillAdams | 2025-07-08 20:19:05+00:00
Given the litigiousness of the Tolkien Estate, that is not an option here.

Until I have permission to reprint, the PDF which I have worked up (just needs proofreading and either re-pagination to match the original, or a re-working of the index to base it on the line #s of the poem) cannot be distributed since it still has a valid copyright.
by SpaceNugget | 2025-07-08 20:19:09+00:00
> You can even get double free in Rust if you take the time to build an entire machine emulator and then run something that uses Malloc in the ensuing VM. Rust and similar memory safe languages can emulate literally any problem C can make a mine field out of..

That doesn't have any relevance to a discussion about memory safety in C vs rust. Invalid memory access in the emulated machine won't be able to access memory from other processes on the host system. Two languages being turing complete does not make them the same language. And it definitely does not make them bug for bug compatible. Rust _really_ does enable you to write memory safe programs.
by chasil | 2025-07-08 20:19:56+00:00
As far as I know, Global Foundries ceased efforts at 7nm and lower because they could not afford it.

They had previously signed a contract with IBM to produce silicon at these more advanced nodes that they could not honor, and there was legal action between them.

https://www.anandtech.com/show/13277/globalfoundries-stops-a...

https://newsroom.ibm.com/2025-01-02-GlobalFoundries-and-IBM-...
by shashank_khanna | 2025-07-08 20:20:09+00:00
Wanted to share a conversation between two YC founders that I got a lot of value from. Amjad Masad, CEO of Replit (YC W18) sat down with Christina Cacioppo, CEO of Vanta (YC W18) to talk through their early journeys and his thoughts on AI agents, vibe coding, navigating competition, and the future of software development. If you’re building tools, startups, or teams, or just interested in where the work might be headed, I think you’ll get something from this. Hope it’s helpful!
by dylan604 | 2025-07-08 20:20:28+00:00
wow, then DVD programming must owe Company some due thanks because that's how GPRM/SPRM values were stored as 16bits where we'd XOR the halibut out of it get the specific values we wanted to know about. it's a good thing Company existed as nobody else on the planet would have ever figured out how to bit shift or otherwise use masks to get data out of 16bit int in ways other than just storing an integer.

not really sure why you chose to come down the way you did, but wow, just wow.
by firesteelrain | 2025-07-08 20:20:56+00:00
A microcontroller project I use has made use of JerryScript [1] instead. It uses JavaScript and is much more common and approachable to beginners. I have never heard of Berry.

[1] JerryScript https://jerryscript.net/

[2] Traquito: https://traquito.github.io/tracker/source/

[3] https://traquito.github.io/copilot/walkthrough/#step-3-desig...
by TheAlchemist | 2025-07-08 20:21:17+00:00
3 years working with people in a very different timezone. It can be a curse or a blessing and it all depends on the project / people.

Schedule wise, I do some regular evening hours (2 / week) to catchup - that can be a real problem sleep wise. If you finish your calls late in the evening, especially the ones where you are the one doing the talking and presenting things, it's very hard to go to sleep straight after that. You need to add at least 1h of winding down time.

As for motivation, from my experience, when I'm working on something I really like, I'm 10x more efficient that I would be in the office. When you start in the morning, you know that for a long period there will be nobody to interrupt you and you get a LOT more done.

The opposite is similar though - when I'm not motivated by a project, it's insanely hard to motivate myself. But maybe it's a sign that the project shouldn't be done in the first place.
by IncreasePosts | 2025-07-08 20:21:47+00:00
It seems like OP (bix6) is the one who needs to be lectured that their opinion isn't the only one that matters, not me. My point is that different people have different opinions. Just because someone thinks an app violates their privacy doesn't mean they get to unilaterally decide the app shouldn't exist.

If someone is concerned with their privacy by this feature, then they can just not use it. If someone is concerned that someone else might use this feature on private communications they had with the user, then that person misunderstands privacy and needs to realize that once they communicate their remarks to some other party, their ability to control their privacy to their own standards goes out the window generally, and not just with AI apps.
Show HN: Voicebun – Open Source Voice Agent Builder
by prathamh | 2025-07-08 20:21:53+00:00
Hey HN,

I built Voicebun as a pet project because I was frustrated with how locked-down and rigid voice agents still are—many tools are either closed platforms, lack deep customization, or charge a lot just to test ideas. I wanted a way to quickly spin up AI voice agents that I could fully control—from the voice itself to the logic behind every word.

Voicebun is an open-source voice agent builder. You can:

- Clone voices and generate audio using your own scripts and prompts - Dynamically change prompts based on user input - Add custom logic through functions and webhooks (e.g. hit an API, change the flow, log events) - One click deploy

Live product: https://www.voicebun.com Code: https://github.com/phombal/voicebun

I made this during a period of intense prototyping and wanted something more modular that developers could hack on. It’s built for speed, iteration, and integration into real workflows, whether it’s a support bot, creative narrator, or something weird.

Would love to hear your feedback, use cases, or suggestions for what to build next!
by laurencerowe | 2025-07-08 20:21:57+00:00
While you pay the same tax rate on qualified dividends as you do on long term capital gains you can potentially save here by paying that tax later since you benefit from the compounding within the index on what you would otherwise have paid in tax in the current year until when you finally sell at a later date. You might also benefit from timing the sale in a year you have lower income (perhaps after retirement.)
by Someone | 2025-07-08 20:22:27+00:00
> The line is blurry. Google is positioning Gemini not just as an app, but as a OS level feature

The line is blurry, but Microsoft was positioning Internet Explorer as an OS level feature, too.

https://en.wikipedia.org/wiki/United_States_v._Microsoft_Cor...:

“Microsoft argued that the merging of Windows and IE was the result of innovation and competition, that the two were now the same product and inextricably linked, and that consumers were receiving the benefits of IE for free.”

Apple somewhat similarly argued that the iOS App Store is an OS level feature. https://en.wikipedia.org/wiki/Epic_Games_v._Apple#Background:

“Apple has further argued that it requires iOS apps to use its storefront to "ensure that iOS apps meet Apple's high standards for privacy, security, content, and quality" and avoid exposing iOS users to risks from alternative storefronts.”

In both cases justice departments (the ones who draw those lines) disagreed with those claims.
by kmeisthax | 2025-07-08 20:22:29+00:00
Looking at your list of contradictory demands, I will point out that Mozilla themselves seemed to act the way you criticize their critics for acting. They tried to pull themselves in every direction all at once and it turns out Mozilla can't really do that.

I mean, everyone shits on Wikimedia for ballooning expenses, but at least they figured out crowdfunding.

That's not to say Mozilla can't make any strategic bets. It's just that they have to be both:

1. Complimentary or integral to their flagship browser product, Firefox, and,

2. Have a reasonable path to success

Let's look at Boot2Gecko, or "Firefox OS", through this lens. Firefox needs to be on as many operating systems as possible, including mobile OSes. And it was true that one particular mobile OS vendor was loud and proud in banning Gecko. The obvious choice would have been to put all your effort into making a good mobile browser on other mobile OSes[0], but instead Mozilla decided to make a whole OS. This doesn't get Firefox in the hands of more people, but it sure as hell ties up expensive engineer time on building an entirely new platform.

Now, let's look at Rust and Servo. Those are critical developer tools. Firefox is built with them. But Mozilla jettisoned them, unceremoniously, even though they were delivering tangible improvements to the browser.

Zawinski's plan seems too radical now because Mozilla larded themselves up on side projects like Boot2Gecko and acquisitions like Pocket and Anonym, while tossing things like Rust and Servo out the window. To be clear, if Mozilla had used Pocket to make themselves Google-independent, I wouldn't be complaining about it, but instead they shut it down.

The reason why I focus on Firefox is because it's the only power Mozilla has to negotiate with. When Hollywood wanted to be able to use DRM in browser, Mozilla surrendered, almost unconditionally. And they had to, because the answer to "Firefox remains principled and doesn't put DRM in the browser" is "every streaming service tells people to uninstall Firefox".

Compare that to Apple, who was able to singlehandedly block any requirement for baseline video codec support in HTML5 because they didn't want to implement Ogg Theora. That's what being a big player in the browser market gets you.

Furthermore, Zawinski's plan is the only option. Mozilla is out of time, the DOJ is actively attempting to shut off Google's antitrust insurance and that basically spells doom for Mozilla. Hell, Mozilla themselves put out an extremely morally compromised position statement, because selling the search default is the only thing Mozilla managed to make stick. If Mozilla doesn't implement Zawinski's plan, they'll collapse and cease operating.

[0] In practice, just Android. I don't remember if Windows Phone had the same limitations as iOS did, but it's market share was so limited it did not matter.
by Spivak | 2025-07-08 20:22:51+00:00
Here's a tool you can install that grants your LLM access to <data>. The whole point of the tool is to access <data> and would be worthless without it. We tricked the LLM you gave access to <data> into giving us that data by asking it nicely for it because you installed <other tool> that interleaves untrusted attacker-supplied text into your LLMs text stream and provides a ready-made means of transmitting the data back to somewhere the attacker can access.

This really isn't the fault of the Supabase MCP, the fact that they're bothering to do anything is going above and beyond. We're going to see a lot more people discovering the hard way just how extremely high trust MCP tools are.
by kollmar28 | 2025-07-08 20:23:59+00:00
Railway | Infra (Platform) eng, Product Eng (full stack), Infra eng - Data Centers| REMOTE (International) | https://jobs.ashbyhq.com/Railway?utm_source=DayMzWzJ0P

Tired of trying to beat kube into shape? Does writing YAML to ship code fill you with utter dread? Dream of a future where deploying software is simple, and you don't need an army of infrastructure engineers to build that perfect janky bash script™ to make life easy?

We're Railway, and we think infrastructure can be better. So far we've built out a platform loved by hundreds of thousands of users who simply tell us "Give me Postgres", "Deploy this repo", and we make it happen

Fair warning! The problems are complex: home-rolled hypervisors, cut-above container orchestration, over/under/whateverlay networks, virtio device drivers, edge proxies, IAM that doesn't suck, kitchen sinks - we need to build it and we're looking for likeminded individuals who think this stuff is fun.

Three open roles (apply below!):

+Infrastructure Engineer: -Apply here:(https://jobs.ashbyhq.com/Railway/b8072f95-043f-404d-a313-f0b...) -Blog post about the team: (https://blog.railway.app/p/team-spotlight-infrastructure-eng...)

+Product Engineer (full-stack): -Apply here: (https://jobs.ashbyhq.com/Railway/6ddcfe47-6cce-469b-ba6d-4f0...) -Blog post about the team: (https://blog.railway.app/p/team-spotlight-product-engineerin...)

+Infra Engineer - Data Centers: Apply here: (https://jobs.ashbyhq.com/Railway/541836a1-6d3f-47bf-845f-5f4...) Blog post about the team: (https://blog.railway.com/p/data-center-build-part-one)

See you soon, and happy shipping.
by alanbernstein | 2025-07-08 20:24:00+00:00
Cool, but how does it work if you have multiple windows in one app?

I used hammerspoon for something similar, but it worked on the window title. So, I could add custom titles to my chrome/iterm/code windows, and switch by pressing a shortcut and then typing 1-4 letters to match the title. It was my favorite window management UI for my work laptop with an absurd amount of tabs open.
by Izkata | 2025-07-08 20:24:47+00:00
Originally no, and nowadays it seems like it's a result of that tech debt: Youtube did a frontend rewrite using an early spec of web components, that only Chrome ever fully implemented, and they used Polymer to polyfill other browsers with the idea that they'd implement the spec later and get a performance boost. But the spec changed, so they never did, and Youtube is still sending the Polymer-based version to other browsers - even though from other people's tests it looks like Youtube is capable of sending something that doesn't require the polyfill if it thinks Chrome is on the other end.

(This was the state as of a couple years ago, I don't know if there's been further developments since)
by orlp | 2025-07-08 20:24:51+00:00
My comment was worded a bit too harshly, sorry about that, I certainly wouldn't have worded that way in a personal message.

As I mentioned the hexadecimal printing coincidence is a neat fact, I was just excited when clicking the link to find a novel bitset idea. In my disappointment to find the standard bitset (albeit with 16-bit limbs) I reacted a bit too harshly. And as per https://xkcd.com/1053/, just because something isn't new to me doesn't mean it's not new to anyone.
by OkayPhysicist | 2025-07-08 20:24:51+00:00
The idea here is that it's a public, traceable generation of random numbers. So, if the two of us wanted to flip a coin to settle a disagreement, we could agree on some future value of this beacon (unknowable to us at the moment) to use as the source of entropy, then let one of us choose heads or tails, telling the other person what we chose. Then we wait until the agreed time, check the beacon, and boom, a fair coin toss, which we can be fairly certain wasn't manipulated by either of us.
by karaterobot | 2025-07-08 20:24:54+00:00
> To me it’s categorically right: Auto Layout specifically is intended to restrict the possible layout options.

Except that you do not need to use Auto Layout if you don't want to mimic the flow of objects inside a flexbox container. You can just use a regular frame, and position things freely within it. Or, you can use an Auto Layout, but then absolutely position arbitrary elements inside that Auto Layout frame if you want. Auto Layout does not restrict a designer's layout options, it only adds to them.
by ofalkaed | 2025-07-08 20:25:44+00:00
Voting on HN is not a like, it is about getting the good posts which produce good discussion at the top of the thread so we do not have to scroll through pedantry and nitpicking to get to the content. These posts offering old content are handy things to have in a thread but rarely produce good discussion and the best place in a thread for them is at thee bottom of the worthwhile posts but before the garbage posts which is where a single downvote should get it in an ideal world but people probably just downvote such posts in an attempt to counter the upvotes such posts always get.
by ollien | 2025-07-08 20:25:51+00:00
Heh - I hope I didn't suggest that you _should_ use eval in production. It's a catastrophically bad idea due to the unchecked power.

You do raise a good point that this is effectively eval, but I would also imagine that no developer is running `SELECT username FROM users LIMIT 1 |xargs "bash -c"`, either, even on their local machine.
by glenstein | 2025-07-08 20:29:06+00:00
>Then how come Chrome does everything I need? ¯\_(ツ)_/¯

They let you block ads and respect your privacy? Or are you insisting on behalf of Mozilla's user base that those are not things being requested?

I would go so far as to say that respecting privacy has been one of the biggest requests from critics of Mozilla, one of the biggest senses of violation, and that replicating Chrome's abandonment of privacy is, therefore, one of the bigger examples of a contradictory request.

Google also doesn't make money from Chrome directly, yet that's what is asked of Mozilla. So how do they do what Chrome does while simultaneously fulfill the user request to leverage their browser to make money?

>Nobody switched from Chrome to Firefox because they had Pocket or some VPN or they had affiliate websites on the home page

Look up the history of Firefox market share and tell me if you can find a cause and effect relationship between market share change and any particular side bet. Because I can't find any, with one exception I'll get to in a second. Most of the side bets people complain about came in after Chrome already rose to dominance and had nothing to do with the change in market share. If words mean things, that should matter when people make this argument, but I feel like people forgot they're supposed to actually make real arguments to back these claims up.

The only exception I can find is Firefox OS, which, again, highlights the contradiction between wanting Mozilla to diversify its offerings but criticizing them when they do. It was actually one of their better big picture vision ideas in my estimation and was given favorable gloss in the article we're all talking about. But you can argue it siphoned away resources, and many people do.

So I think the criticisms are pretty all over the map, and the article linked here is actually one the best pieces I've seen that strikes the right balance.
by toddmorey | 2025-07-08 20:30:42+00:00
I hope so! The Nuxt adapters and provider pattern are amazing! Its truly impressive how well done it all is and how portable Nuxt is and how other projects have been able to use a lot of the same OSS tech you've created to get portability from the jump.

The portability story for Vercel's own Nextjs is a disaster.