MurphyA/hacker-news huggingface dataset:
by cxr | 2025-07-30 13:11:45+00:00
There's a whole section on PhoneGap/Cordova, where, ignoring creation date, even most of the milestone years are outside the "the last decade" timeframe. It's a very strange decision, and leads to things like gjs only being mentioned as an afterthought, which exemplifies the major blind spot that people who came out of the NPM world have for the use of JS in stuff like Firefox (which was doing Electron before Electron) and Gnome (if you've used Gnome in the last 10 years, you've seen JS in action on the desktop). The best explanation for this is that the latter two are so successful at doing what they aim to accomplish that people don't even know it's there, and when things are more about getting things done than they are about hype, then the hype crowd of course fixates on the hyped stuff instead (no matter how short-lived or obviously-doomed-from-the-start).
by BeauNer | 2025-07-30 13:12:04+00:00
AI might be the future of software development, but a new report suggests we’re not quite ready to take our hands off the wheel. Veracode has released its 2025 GenAI Code Security Report, and the findings are pretty alarming. Out of 80 carefully designed coding tasks completed by over 100 large language models, nearly 45 percent of the AI-generated code contained security flaws.

That’s not a small number. These are not minor bugs, either. We’re talking about real vulnerabilities, with many falling under the OWASP Top 10, which highlights the most dangerous issues in modern web applications. The report found that when AI was given the option to write secure or insecure code, it picked the wrong path nearly half the time. And perhaps more concerning, things aren’t getting better. Despite improvements in generating functional code, these models show no progress in writing more secure code.

Chart I’m excited about AI in development. It really is the future. But let’s be real, folks, human developers are still needed. You can’t blindly copy and paste from an AI and hope it’s safe. Someone has to be reviewing this stuff. That’s especially true now that developers are relying more on what’s being called “vibe coding,” where you let the AI do its thing without giving it any real security guidelines. In that setup, you’re basically trusting a chatbot to make security decisions, and according to Veracode, it gets it wrong far too often.

The company’s research team used a series of code-completion tasks tied to known vulnerabilities, based on the MITRE CWE list. Then they ran the AI-generated code through Veracode Static Analysis. The results speak for themselves. Java was the riskiest language, with a failure rate of over 70 percent. Python, JavaScript, and C# weren’t much better, each failing between 38 and 45 percent of the time. When it came to specific weaknesses, like cross-site scripting and log injection, the failure rates shot up to 86 and 88 percent.

It’s not just that vulnerabilities are increasing. The report also points out that AI is making it easier for attackers to find and exploit them. Now, even low-skilled hackers can use AI tools to scan systems, identify flaws, and whip up exploit code. That shifts the entire security landscape, putting defenders on their back foot.

Veracode is urging organizations to get ahead of this. Its advice is pretty straightforward… bake security into every part of the development pipeline. That means using static analysis early, integrating tools like Veracode Fix for real-time remediation, and even building security awareness into AI agent workflows. There’s also a push to use Software Composition Analysis to sniff out risky open-source components and set up a “package firewall” to block known bad packages before they do any damage.

One surprising note in the research is that bigger AI models didn’t necessarily perform better than smaller ones. That suggests this is not a problem of scale, but rather something built into how these models are trained and how they handle security-related logic.
by beingmani | 2025-07-30 13:12:23+00:00
Introducing Instancer - A new Figma plugin to create all possible instances of a component

Ever wanted to check if your design system component works perfectly for all the properties you have set, This plugin helps you to do that at a single click.

What instancer does :

- Creates every possible component combination instantly - Choose which properties to include or exclude from generation - See total possible variants and nested instances at a glance - Use switches to turn properties on/off for precise control - Clean grid arrangement makes all combinations easy to scan - Every variant shows exactly which properties are active - Select any component and generate complete variant overview instantly

I'm going to make it as a one-stop pit for all design system need
by markisus | 2025-07-30 13:12:30+00:00
CBOR has some stuff that is nice but would be annoying to reimplement. Like using more bytes to store large numbers than small ones. If you need a quick multipurpose binary format, CBOR is pretty good. The only alternative I’d make manually is just memcpy the bytes of a C struct directly to disk and hope that I won’t encounter a system with different endianness.
by nonameiguess | 2025-07-30 13:12:31+00:00
It's long been found in exercise research that exercise itself attenuates many of the negative effects of sleep restriction. This might also explain why the military can get away with such poor sleep, because of the hard standards on minimum aerobic fitness required to even wear the uniform, and the fact that the infantry and special operators experiencing the worst sleep deprivation are also the people in the best shape. There are plenty of other adaptations you get out of aerobic exercise (capillarization, eccentric heart hypertrophy, increased red blood cell count, localized muscular endurance), but the most important and durable adaptation is more efficient mitochondrial function.
by progbits | 2025-07-30 13:12:42+00:00
I don't get this view.

Yes there is a lot of crap because it's both easier to produce than quality content, and has higher incentives to keep making more of it.

But that's the same with eg. books. Aside from small curated book stores, pick up a random book. Most likely it's not worth to cut down the tree it was printed on.

It's very easy to watch only quality content and there is an incredible amount of it on youtube. I've learned lots of electronics, CAD work, mechanical engineering, watched tons of lectures from amazing professors...
by colesantiago | 2025-07-30 13:13:27+00:00
I don't buy these Superintelligence claims from Meta of 'abundance' and 'humans are free to do other things' as they are tied to Wall St and earnings.

It is always abundance for the super rich, scarcity for those in jobs.

How can I be free to do my gardening whenever I want when the landlord is asking for $11K rent in my SF flat?

So eventually they will do the opposite of this 'vision' and put this super intelligence to replace jobs.

Also, what happened to the Metaverse that Meta invested hundreds of billions as per their namesake?
by jalapenos | 2025-07-30 13:13:39+00:00
Have you noticed how we nevertheless have meth addicts? And that thousands of people die, get kidnapped, tortured, every year, because "the state will fix everything" morons made it illegal? In fact that for instance the North Korean regime is literally propped up by drug sales, taking advantage of this stupidity?

Height of infantilism it is, thinking that strangers will take care of you because they say so, instead of growing up into the responsibility of an adult
by purerandomness | 2025-07-30 13:14:23+00:00
If you're bookmarking a directory, a list of things (e.g. the HN frontpage), you expect the content to change when opening the bookmark.

You bookmark a link to the directory so you don't forget the directory's entry URL.

The use case the author is talking about is a different one: You are configuring a complex item in a shop, and want to bookmark the URL so you can save it, recall it later, share this configuration with someone, or compare it with a different URL.

In this case, you also would expect little details to change (pricing, descriptions, photos) but the structure of the state should stay the same.

It's very frustrating when you share a link to a product detail page, only to discover that all your filters and configurations have been lost.
by A_D_E_P_T | 2025-07-30 13:14:49+00:00
> Genocide is the intentional targeting of civilians. You have no proof of that.

Look at satellite images of Gaza. Consider how people there actually live, in temporary tent cities with little access to food, clean water, and medical treatment. Consider also the extent of "accidental" civilian casualties -- with more deaths among Gazan women and children than among Hamas fighters. Then consider that these unarmed civilians are essentially stateless and should, by rights, be under Israel's protection.

How do you see them living in five years? Almost nothing is left standing in Gaza.

It's not (yet) an out-and-out war of extermination, but it is, emphatically, already a profound moral and humanitarian catastrophe -- and a stain upon the soul of the Western nations who are standing by to watch it unfold.
by squigz | 2025-07-30 13:15:28+00:00
> No but we heavily regulate schools and the behaviour of people at them. Which is more akin to what we are doing with these laws rather than just saying it's the parents fault their child is groomed or exposed to adult content without their consent.

This is not how I see it. These laws are more like what I suggested. The equivalent of that regulation in the case of the Internet would be simply not allowing whatever behavior you disagree with from social media companies and the like.

> It means more children are victims of sexual abuse than before, thanks to the wonders of the Internet.

Can you link some source on this?

> My entire point here is that clearly parents are not equipped to police their own children's use of the Internet 24x7

Neither can they "police" their child's life 24/7. Nor do have to to prevent their kids from falling into various holes out there. Take, for example, drugs and alcohol. We've, more or less, arrived at a reasonable system for keeping these out of the hands of children (most of the time) - but we also accept that, due to this system not being 100% fool-proof (and indeed that such a system could not possibly exist), sometimes kids are going to get access to drugs and alcohol. And yet, most parents (at least, that I know) would agree that that doesn't mean your kid is going to turn out to be an addict or whatnot.

My point is, that with sane regulation - that doesn't inherently erode privacy for everyone all over the world, and gives even more control to (Western) governments and companies - and parents doing their jobs, we can minimize the harm done by social media. We can't eliminate it entirely, but that's the price we pay.

(I question how much actual harm is done by social media, but that's another discussion)
I launched 17 side projects. Result? I'm rich in expired domains
by cesargstn | 2025-07-30 13:15:35+00:00
I think I'm officially a side project collector.

I've had it all:

A SaaS for freelancers... that I never had time to finish because I'm a freelancer.

A revolutionary AI tool that I abandoned as soon as GPT-4 came out.

And the famous "anti-social media social network" (spoiler: it was just me).

I buy a domain name → I code for 3 all-nighters → I lose interest → I start again.

My Google Domains look like a graveyard of unfinished dreams.

But honestly, I've never learned so much, nor enjoyed it so much.

And one day, I might release one that takes off. Or not. But I'll be ready.

Any other serial side-projectors here? Share your greatest fails/unlikely successes
by lb1lf | 2025-07-30 13:15:39+00:00
Oh, I am saddened to hear of Peterson's passing.

Way back when, I bought a couple of his books, probably on the recommendation of someone or other in an online photography forum - 'Understanding Exposure' and 'Learning to see creatively'. The latter in particular was wonderful for someone who had the technical aspects of photography more or less sorted, but was - ahem - deficient in the artistic department.

Anyway, I felt his style was incredible - down-to-earth, but not afraid to go into a bit of background if needed - so I sent off a brief letter of thanks through his publisher.

Lo and behold, got a very nice letter back, thanking my for the kind words and encouraging me (I had mentioned that I shot both film and digital, seeing as at the time, a wonderful film camera like the F5 could be had for a fraction of what even an entry-level APS-C DSLR cost) to experiment A LOT using the DSLR, as the instant feedback provided would help my analog hit rate progress leaps and bounds.

I was already thinking a bit along those lines, but became a lot more conscious about trying to improve my skills using the DSLR upon his encouragement - and my photos improved a lot over the following years as a result.

Thanks, Bryan.
by BobbyTables2 | 2025-07-30 13:15:51+00:00
I’ve been doing this (manually) for about 10+ years.

I rarely use branches, my local work area is about 50-100 commits on top of master.

I pick/reorder/edit with “git rebase -i”

I’ll prefix the commit summary with a word that helps me keep straight debug changes from ones that will go toward a MR.
by lm28469 | 2025-07-30 13:18:17+00:00
Lots of people keep mentioning these conspiracy theories but I still don't buy it.

The "they" you're all mentioning simply doesn't exist. Who are they ? All the governments of the west somehow working together ? They can't even cooperate more than 6 months on internal matters but they globally agreed on some world wide evil plan ? And the plan is to ban kids from youtube ? Because reasons ?

Who is going to collect more data if there are less websites/users ? Who's selling "the" data ? Who's buying "the" data ? What data ? How are governments benefiting from censoring brain rot in a way that doesn't also benefit me exactly ?

All the data is already collected by US megacorps and stored on US servers the US gov can already fully access, it doesn't get any worse than that
by ChuckMcM | 2025-07-30 13:18:47+00:00
Interesting discussion here, I particularly like that people have recognized that the people who use phones to take pictures and the people who use cameras to take pictures often have different goals.

There are lots of areas where there is a ‘convenience’ / ‘art’ split. One I recognized early was houses that were ‘architected’ and those that were just ‘built’. Looking at cabins from the 1800’s vs houses you can really see a cabin is practical, it is focused on utility that is easily built with a wide variety of materials at hand and skill sets of the builders. Whereas homes that were architected and built used a lot of craftspeople, bespoke materials, etc.

My dad was a professional photographer and he would take pictures and I would take pictures and his looked great and mine looked ‘ordinary’? I was just capturing the view in a given direction and he was composing a view to have various elements in relation to make a picture.

Phone cameras are “free” in that you bought a phone and it happened to come with a camera, and you carry it with you everywhere because phone. So a lot of the image capturing that is done is what you see. People do compose shots, and I’ve seen great photographs from phone cameras. But it is pretty clear that a photographer using a phone works harder to get their shot than someone who just wants a snapshot, and it goes the other way too, a person who just wants a snapshot works a lot harder to figure out how an SLR works, “just to take a picture” while the photographer seems to effortlessly bring it up to take a wonderful shot.

So if you take the whole set of people who are using a tool, you optimize for the largest portion of that population which is where the culture aspects kick in it seems. People grabbing snapshots with ‘one button activation’ vs people taking photographs composing with scenes and light.
by matrss | 2025-07-30 13:19:03+00:00
Worse, Xerox scanners specifically meant for digitizing documents have changed text for a long time. The compression algorithm they used (I think even in the default settings) sometimes replaced e.g. 6 with 8, and similar things. See: https://www.youtube.com/watch?v=7FeqF1-Z1g0 (german, but there should be news articles from back then in english as well, somewhere)
by criddell | 2025-07-30 13:19:08+00:00
Even looking at the photos on the web page, I do see some differences, but both look fine to me. I'd love an A/B version where I can overlay the two photos and click back-and-forth quickly. But then if I need to do that to spot the differences, maybe it doesn't matter?

If my phone photos did bother me, I would turn on RAW mode and do the processing myself.

My "real" camera is a 15 year old Canon Rebel XSi. It's big and can't do a lot of the things my iPhone can and the photos are about the same quality (which is impressive because the Rebel is only 12 megapixels).
by jodacola | 2025-07-30 13:20:09+00:00
Appreciate the insights; this segment of the industry is my forte so this was educational.

I realize it’s impossible to predict what comes next, but I’m curious about analogs to this merger and what one could reasonably expect to happen over the next many years.

My philosophy is showing in that I don’t see these deals as good for competition or the market in general, so I’m (perhaps hopelessly) looking for the silver lining here.
by dusted | 2025-07-30 13:20:35+00:00
probably.. I was at a range and took a quick snap of my target, because I wanted to review it in a bit calmer environment.. I remember standing there, seeing the bullet holes in the paper, and I distinctly recall two holes that had multiple hits. When I opened the picture on the phone to look, lo and behold, those were generic bullet holes, they except, not mine.. I zoomed in and nope, they're fake.. I have had so many experiences with this on different Samsung phones.. that stuff is just OFF, like, a picture of my kid in low light, and the phone just decided part of his face was probably the wallpaper, so it just put wallpaper pattern there instead of skin.. I've been over every setting I can dig up, can't find anything that should do this..
by herdethics | 2025-07-30 13:20:58+00:00
I've been working on a new way to frame AI alignment that avoids the usual "us vs. them" thinking. Instead of treating AI and humans as fundamentally separate, I propose a structural classification called MetaAgentType (MAT), where agents fall on a spectrum from 0.0 (fully biological) to 1.0 (fully synthetic).

Combined with a moral framework called Herd Ethics, which defines morality as sustaining shared infrastructure, this approach offers a scalable path forward for multi-agent safety. I'd love feedback from the HN crowd.
by newswasboring | 2025-07-30 13:21:02+00:00
> It really isn't very likely that anyone will ever publish a computer science paper as impactful as Dijkstra's go-to-statement thing.

Ok, disclaimer that I am not a computer scientist (work in semiconductors so only tangentially related). But, this statement has the same "end of history" energy has the famous Philipp von Jolly quote about end of theoretical physics:

"In this field, almost everything is already discovered, and all that remains is to fill a few holes."

I'm not claiming you are saying its end of CS, just the claim that there cannot be a new paradigm discovered in CS doesn't sit right with me.
by Aurornis | 2025-07-30 13:21:12+00:00
This one is especially bad because I doubt all of those companies allow employees to install unapproved software that records meetings and uses so many 3rd party APIs

The social proof logo list is an old scheme on the growth hacking checklist. There was a time when it was supposed to mean the company had purchased the software. Now it just means they knew someone who worked at those companies who said they’d check it out.

At this point, when I visit a small product’s landing page and see the logo list the first thing I think of is that they’re small and desperate to convince me they’re not.
by ryandv | 2025-07-30 13:21:13+00:00
> The latter seams to be what actually defines feminism, is very vocal and is the one that comes up whenever you hear about feminism, while the former seams to only come up when you start to argue against the latter kind.

This linguistic game is basically the core defining feature of progressivism as practiced: one can hold a term in linguistic ambiguity and choose, post-hoc, whichever one is most convenient for them to assume at the time (which may be a completely different definition from the one they operated under yesterday).

This way you can have your cake and eat it too by advancing radical feminist ideology at the bailey before retreating to the motte of what you call common sense.

[0] https://en.wikipedia.org/wiki/Motte-and-bailey_fallacy
by wouterjanl | 2025-07-30 13:21:33+00:00
As you ask why this is here. Copied from the guidelines of this site: “What to submit? On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. (…) anything that gratifies one's intellectual curiosity.” So it’s fair to say that this site is about more than entrepreneurship and tech.
by 0xbadcafebee | 2025-07-30 13:21:59+00:00
It's good to know but the practical applications may be limited. Once we finally figured out why/how we use oxygen in the 1930s, it led to a couple applications, like anesthesia regulation and hyperbaric oxygen therapy. But there wasn't a lot you could do with it. We've probably gathered all the information about sleep that has practical applications, and a lot of it has to do with other things like hormones, sensory input, age.
by Kuinox | 2025-07-30 13:22:28+00:00
The problem with your answer is that you make affirmations using logical fallacies. We both don't know how LLMs, and brains works to produce output. Any affirmation toward that without proof is affirming things without any basis.

For example in this response: > the brain can wield language without having to scan anywhere near hundreds of terabytes of text.

The amount of text we need to train an LLM only goes down, even 2 years ago it was showed you need less than a few millions words: https://tallinzen.net/media/papers/mueller_linzen_2023_acl.p... , in order to "acquire" english.
by lm28469 | 2025-07-30 13:22:38+00:00
I still fail to see your points. Meth addicts exist despite the law so we should give meth to kids and abolish the law ?

> Height of infantilism it is, thinking that strangers will take care of you because they say so, instead of growing up into the responsibility of an adult

That's like the entire purpose of living in organised societies... you know, the law, the police, insurances, the greater good, controlling yourself because your actions have consequences on other people, &c.
by yorwba | 2025-07-30 13:22:59+00:00
I think the data set is generally considered to consist of the images, not the list of links for downloading the images.

That the data set aggregator doesn't directly host the images themselves matters when you want to issue a takedown (targeting the original image host might be more effective) but for the question "Does that mean a model was trained on my images?" it's immaterial.