MurphyA/hacker-news huggingface dataset:
by placardloop | 2025-07-14 12:25:11+00:00
These AI reports are just an acceleration of the slop created by similar human “researchers”. The real root cause of this is that most security “professionals” have been trained to do the bare minimum of work and expect a payday from it.

There’s an entire industry of “penetration testers” that do nothing more than run Fortify against your code base and then expect you to pay them $100k for handing over the findings report. And now AI makes it even easier to do that faster.

We have an industry that pats security engineers on the back for discovering the “coolest” security issue - and nothing that incentivizes them to make sure that it actually is a useful finding, or more importantly, actually helping to fix it. Even at my big tech company, where I truly think some of the smartest security people work, they all have this attitude that their job is just to uncover an issue, drop it in someone else’s lap, and then expect a gold star and a payout, never mind the fact that their finding made no sense and was just a waste of time for the developer team. There is an attitude that security people don’t have any responsibility for making things better - only for pointing out the bad things. And that attitude is carrying over into this AI slop.

There’s no incentive for security people to not just “spray and pray” security issues at you. We need to stop paying out but bounties for discovering things, and instead better incentivize fixing them - in the process weeding out reports that don’t actually lead to a fix.
by llm_nerd | 2025-07-14 12:25:15+00:00
It's a fairly obvious truth. Chrome has a 70% browser marketshare, with the only appreciable alternative being Safari. If Chrome (the actual Chrome and not just a skinned Safari) were allowed on Apple's platforms, overnight a crapload of websites would throw a "Made for Chrome" banner up, dismiss anyone on "unsupported" browsers, and we would rapidly move to a Chrome-only world.

We already went through this in the IE era, and it was an ugly period. We don't need to do that again. That isn't to say we need to endure the status quo, but we are in a dangerous situation where the fixes aren't easy or obvious.
by JKCalhoun | 2025-07-14 12:25:22+00:00
If you "know better" are you a "run-streaker" because of some innate need to not break a streak? Is the streak the thing that keeps you motivated?

I can see how you might worry that if you take off one day when you are sick that somehow you'll start taking more and more "sick days" out of perhaps laziness. But I also feel like someone with such a level of dedication would not be in much danger of doing that.
by scarface_74 | 2025-07-14 12:25:49+00:00
Then why aren’t profitable games based on web technology on Android if it is just Apple holding it back?

But it’s not about the technology even then. Games make money via in app purchases by whales. In app purchasing is easy and they are able to tap into kids spending money. Most parents aren’t going to put their credit cards on kids phones. They will let kids do in app purchases with parental controls that are available on the App Store.
by zihotki | 2025-07-14 12:26:16+00:00
3-4 years ago I was looking forward to the Stellantis's hybrid platform. These days I'm still looking forward... Constant supply issues (1), delays with release of new models, sky high prices, focus on luxury market section make Stellantis auto's hard to pick.

Speaking from NL perspective, the market here is well saturated with EV. But a lot of people are hesitating to get one due to charging issues - you simply can't charge the auto if there is no charger on a street or they are not available. Electric grid is also very saturated in urban areas and electricity is one of the highest in EU (€ 0,32 per kWh including energy tax and 21% VAT for a consumer). For many people hybrids make more sense than EVs.

(1) https://moparinsiders.com/stellantis-hybrid-push-triggers-pr...
by TamaraShlomov | 2025-07-14 12:26:24+00:00
Want your app to feel slick and modern like Gmail or Instagram? One small but powerful UX touch is a scroll-aware bottom navigation bar that disappears when you scroll down and reappears when you scroll up. It sounds simple, but building this buttery-smooth behavior in React Native requires a clever mix of animation and logic. In this post, I’ll walk you through exactly how to implement it.
Show HN: LeetPrompt – Leet Code for Prompts
by nzach | 2025-07-14 12:26:58+00:00
Why build this?

Yes, AI can whip up a function in seconds but if you don’t understand the code it spits out, you’re just rolling the dice. I was seeing devs blindly accept AI output because they’d never wrestled with the underlying concepts themselves.

LeetPrompt is an answer: a sandbox where you still need real coding insight(types, pointers, concurrency) but you express that insight as a prompt. If you don’t grasp the refactor, the AI won’t either. It’s the best of both worlds: you sharpen fundamental skills and learn to steer models with surgical precision.

https://www.producthunt.com/products/leetprompt
by otikik | 2025-07-14 12:27:26+00:00
It's a bit of a shame that the article is written only from the Japanese perspective. I would have been more interested in knowing China's position over this whole affair. Given that:

- The original investors were Chinese

- The video footage shown is hosted on a Chinese platform

- The signage on the videos for "restaurants" and "hospitals" in the videos is in Chinese

- "A Chinese-style drum would echo through the compound each time a deposit of over $100,000 was received"

And the fact that Thailand receives a great deal of Chinese tourists, I expect at least some of the kidnappings affecting Chinese citizens - and then some of the scam victims to be Chinese as well.

I would expect China to be more affected and to able to exert more influence over this situation than Japan.
by davydm | 2025-07-14 12:27:41+00:00
Only a problem if people trust llms, and that's only a problem because most people apparently believe the hype, so the problem is rooted in the same issue (greed) as pretty-much all other high-revenue streams in the world: the makers aren't going to admit the flaws, and the people are too lazy to check whether or not the emperor actually has any clothes on. And because there are some lucky strikes, the fake trustworthiness of the model is also loudly upheld by people with a dog in the fight (obviously, the vendor, but also all those people who have paid for ai services and need to convince themselves that they couldn't have possibly done their work without it).
by gibagger | 2025-07-14 12:28:14+00:00
Having ADHD myself, and a bunch of friends who also have it, I have noticed that the people with this condition rarely have a healthy relationship with food. There is either a tendency to overeat indulgent foods, or a tendency to not think about food that much.

I have also heard about people with ADHD being on GLP1 agonists that it does a lot for their reward seeking behavior and impulse control.

This makes me wonder two things:

- Whether at some point these molecules will also start being used for ADHD and addiction treatment in general. I think they hold a lot of promise for issues rooted in the reward system.

- Whether a sizable portion of people who struggle with their weight have co-morbid ADHD which creates or worsens their overeating issues.

Have you noticed anything along these lines in your practice?
by JKCalhoun | 2025-07-14 12:29:28+00:00
I'm allowing that maintaining the streak is perhaps the prime motivation when you are finding it hard to drag one's sorry ass out of bed every day. So maybe it's a good thing if it keeps you running.

I stopped running maybe 7 or 8 years ago. This thread has me wanting to go back to a mile a day or so — I'm past 60 years old now and more concerned about my health than I used to be.
by redhale | 2025-07-14 12:29:42+00:00
BAML is a language that gives you jinja-like templating. But it also provides structured output parsing and bindings in Python and TypeScript that allow you to execute prompts as typed functions in your code. They also have a VS Code "playground" extension that provides a way to quickly iterate on prompts. There's a bunch of other good stuff too, but these are the main reasons we use it.
by IAmBroom | 2025-07-14 12:29:45+00:00
Not true at all. Blackbody radiation goes to infinity with Wien's distribution; error bars aren't going to get you there.

Likewise, our 1/r^2 understanding of forces goes to infinity as distance goes to zero, but we currently can't resolve that problem with error bars for the nucleus of an atom, where Heisenberg tells us any two protons can sometimes appear closer to each other than the "radius" of the nucleus.

You can't make Schottky diodes using Maxwell and error bars.

That is the entire problem: the classical models weren't merely inaccurate; they predicted completely absurd (and provably wrong) results at extreme scales.
by pessimizer | 2025-07-14 12:29:52+00:00
> One phenomena I am seeing more that makes me boil with fury is infinite captchas in Firefox. If Firefox increasingly gets excluded "for security" then...

I can't figure out if this is true. I certainly get constant captchas, but everybody else I know who uses firefox is also ad-blocking, dropping cookies, resisting fingerprinting, forging referers, downloading embedded videos, etc. etc... A lot of us look like anonymous bot traffic because we are trying to look like anonymous bot traffic. I don't know what the solution would be.
by pyk | 2025-07-14 12:29:58+00:00
The 2010 Prius IV had this as an option - one of my favorite cars due to low maintenance (the lowest maintenance visits per year for its era). The solar panel air vent circulation is a nice feature (even if slightly gimmicky) and I suspect extends the hybrid battery life as well by preventing some marginal battery heat death while parked.

The newest (2023+) Prius brought back the solar roof as an option - and this time it charges the battery (albeit marginally / but not bad for those that drive minimally).
by walrus01 | 2025-07-14 12:30:07+00:00
If you were to theoretically have a perfect 400W PV panel on top of a car, and left in direct sunlight, it might be enough to run a medium sized peltier/TEC cooling unit to somewhat cool down the car while you leave it parked. Or a very small heat pump. Would definitely add a lot of extra cost in manufacturing and complexity.
by delusional | 2025-07-14 12:30:33+00:00
EUist as an insult is peak. I love it.

> a EU police arrested a comedian for mocking Putin or Trump

The EU doesn't have a police force, nor does it legislate the moral standards of the member states. Making this some sort of EU issue is ridiculous.

You have an unhealthy relationship with the laws if you decide to make the contrast that sharp. There is in fact a difference between making fun of your local politicians and making fun of a foreign dictator. I'm not saying that justifies differences in laws, I'm also not NOT saying that. I am saying you'd have to present at real concrete case for anybody to make any useful determination.
by sokoloff | 2025-07-14 12:31:17+00:00
I’m in favor of market forces in both cases.

Show me a way that LVT can applied referencing open market transactions for unimproved land in a developed area and I’m interested to learn more about it.

Grandma can decide to sell her house on the market if the property taxes get too high. That’s good. She shouldn’t be able to be targeted by the city for her land value alone increasing despite no or weak supporting comps.

LVT is theoretically good. My problems with it are practical ones.
by miningape | 2025-07-14 12:31:26+00:00
Just look at South Korea, with a birthrate less than 1 they are expected half their population by 2100. Sure, there are a million more Africans being born so the overall population on earth may remain the same but to pretend this won't have a devastating effect on the SK economy and culture is delusional.

https://www.populationpyramid.net/republic-of-korea/2080/
by DennisP | 2025-07-14 12:31:30+00:00
Even 10% in four months is pretty stout. But I suspect the UK has fairly precise bounds on their "estimates" of the size of the Russian fleet, and their losses.

In any case, maybe you could post sources?

From a quick google, Russia lost at least several other large ships, include troop ships and missile launchers. I don't know whether Ukraine destroyed them as they claimed, but if not, then Russia has rather serious maintenance issues.

From afar, all this might seem like minor issue, but over the past few decades the US has gone through several wars without losing any ships to enemy action, and I think the national freak-out if that changed would be pretty dramatic.
by conartist6 | 2025-07-14 12:31:35+00:00
Oh yes. AI has nothing to do with it! It is Totally Outrageous and Unexpected that AI would be abused to spew a lot of low value crap.

Haha, I kid. Make no mistake, this is the AI sales pitch. A *weapon* to use on your opposition. If the hackers were trying to win by using it to wear down the defenders it could not possibly be working better.
by hajile | 2025-07-14 12:31:36+00:00
He removed LuaJIT from the benchmark opting to use the much slower Lua (Lua is used for small embedded stuff and LuaJIT is used for high-performance stuff with a popular recent example being the game Balatro). Here's the Vercel version which uses LuaJIT. I have no idea if the benchmarks were deoptimized by him (as he did to several language he thought "were too fast").

https://programming-language-benchmarks.vercel.app/lua-vs-ja...

LuaJIT used to have a performance comparison page, but it was removed a couple years ago apparently. It shows that LuaJIT is an average of around 16x faster than standard Lua (geomean). Very impressive considering it was written by just one guy for years (Mike Pall) and even more impressive when you consider that the JIT is only around 0.5mb (compare that with v8 which comes in at somewhere around 28mb IIRC).

https://web.archive.org/web/20230605114058/http://luajit.org...
by scarface_74 | 2025-07-14 12:31:46+00:00
Trump is no moderate. He’s been a racist since the 80s when he advocated 5 black and Latino guys get Capital punishment for a crime they were later found not to have committed.

https://www.theguardian.com/us-news/2016/feb/17/central-park...

He started the dog whistle campaign of Obama not being an American way before he thought about running for President.

He’s been pro tariff since the 90s also.

During his first run and his first time in office, the institutionalist wing of the Republican Party fought him tooth and nail.
by DaSexiestAlive | 2025-07-14 12:32:14+00:00
yeah.. with any frontier or frontier tech it's the same story.. the folks that made it to the frontier.. they make all the calls.. they establish all the rules.. they do all the abusive things they want cus...

we plebs, who buy their frontier stuff?, just don't know any better.. and then one day, after living in the frontier/futureland sufficiently, it clicks, we recognize we are being had..

then we organize, we get politicians to fight back the tide of abuse..

and it's our time to correct things, make the abuse illegal..

good luck fellow plebs..

knowing how the system is rigged in so many dimensions, i don't have much hope..

but we can dream right?
by aesh2Xa1 | 2025-07-14 12:32:24+00:00
I disagree entirely. The total emissions are absolutely important, and our planet doesn't care about whether one ton of emissions served 1 or 1,000 people.

A complete picture of blame absolutely should include per-capita, ultimate use (who buys the end product of China's emissions), and historical contributions. However, to ignore China's absolute , ongoing contribution as the world's largest emitter (by far: https://ourworldindata.org/grapher/annual-co2-emissions-per-...) is clearly an error.

2023 totals:

China: 11.90 billion tons, trending up

USA: 4.91 billion tons, trending down
by llm_nerd | 2025-07-14 12:33:38+00:00
FWIW, there is a very high probability that Google's $20B yearly payment to Apple is going to vanish, pending a current trial.

Safari is actually a pretty great browser, both technically and from a user perspective, and the complaints often levied on sites like this usually boil down to "Why do alternatives to Chrome exist? So annoying! I'm incredibly lazy and want to just deploy whatever half-baked non-standard ad-benefiting nonsense Google threw into Chrome this month". There was a Safari for Windows for some time but they had a small enough uptake that they abandoned it.
by fluidcruft | 2025-07-14 12:33:42+00:00
It's pretty funny to contrast these practices against things IRBs can require. IRBs require informed consent and often require the entire "contract" be read aloud verbatim (no summarization) to people. This incentivizes making things as short and easy to comprehend has possible. Furthermore the IRB will decide whether the agreement is compressible to the intended audience.

Whereas in tech the opposite is true. The goal is to get people to agree to something they do not understand. This incentivizes long confusing walls of text and convoluted language so that people just click without reading.

Ultimately the difference is that when push comes to shove tech has not been required to prove people even read (much less understand) what they are signing.
by Bengalilol | 2025-07-14 12:33:49+00:00
After reading some articles, I became interested in understanding why no one was discussing this report in detail, even though it was being referenced as a document that had circulated. While reading it, I found myself wondering what I was supposed to take away from it and above all, how to determine whether the locking mechanism was actually malfunctioning.

You're absolutely right to question the wording. The term "disengaged" does create some ambiguity, especially since (as you noted) the locking tab is an integral part of the switch design, not something meant to be regularly engaged or disengaged like a mode or setting.

The bulletin indeed suggests that the locking tab can fail or be ineffective, but uses more cautious or indirect language (likely due to regulatory, legal, or technical communication norms?). That said, a clearer phrasing like “locking mechanism worn, broken, or missing” might have conveyed the issue more transparently.

So yes the core issue is a loss of the locking function, and you’re right that the wording could (and probably should) be more direct about it.
by dns_snek | 2025-07-14 12:34:12+00:00
> [...] My point is, you're wrong.

Image upscaling is not an LLM technology, using current-gen LLMs as conversational partners is highly undesirable for many reasons, and learning the basics of things IS indeed useful, but it doesn't even begin to offset the productivity losses that LLMs have caused by decimating what was left of the signal-to-noise ratio on the internet.

You haven't even tried to address my chief concern about QUALITY of information at all. I'm perfectly aware that you can ask ChatGPT to do anything, you can ask it to plan your wedding, you can ask it do decorate your house, you can ask if two medications are safe to consume together, you can ask it for relationship advice, you can ask it if your dating profile looks appealing, you can ask it to help diagnose you with a medical conditions, you can ask it to analyze a spreadsheet.

It's going to come back with an answer for all of those, but if you're someone who cares about correctness, quality, and anything that's actually real, you'll have a sinking feeling in your gut doubting the answer you received. Does it actually understand anything about human relationships, or is it giving you relationship advice based on a million Reddit threads it was trained on? Does it actually understand anything about anything, or are you just getting the statistically likely answer based on terabytes of casual human conversation with all of their misunderstandings, myths, falsehoods, lies, and confident incompetence? Is it just telling me what I want to hear?

> Literally same shit my parents would say while I was cross-checking multiple websites for information and they were watching the only TV channel that our antenna would pick up.

Interesting analogy, because I am the one who's still trying to cross-check multiple websites of information while you blissfully watch your only available TV channel.
by johnisgood | 2025-07-14 12:34:18+00:00
I agree with the global warming bit. Living in Hungary all my life, the temperature seems to be absurdly high. We used to have four distinct seasons which are not so distinct anymore. There is essentially no snow during winter anymore. When I was younger, our winter were truly cold and it has been snowing for weeks. Now, there is no snow at all. I have not seen a white (snowy) Christmas in a long time, unfortunately.

Our summers are getting unbearable, and there are many apartments where you will not get a permit for ACs as they require some repairments because from what I heard, the cables or whatever can't handle the ACs. So... I am left here with a fan that is not enough anymore, and I cannot get a permit for an AC. It is going to be a tough summer.
by lucideer | 2025-07-14 12:35:02+00:00
Leaving aside the (valid) sibling commenters here pointing out that it can be done well, but you're making a strawman argument - the gp never said anything about eliminating managers or organisational structure.

They specifically targetted two things:

1. directing funding towards Firefox development. Mozilla have been criticised for spending large portions of their income on non-Firefox endeavours while not publishing breakdowns of Firefox-specific spending in their annual reports

2. The CEO's salary: the commenter said nothing about not wanting the CEO position to exist, merely a desire for the funding to the Foundation to not be excessively funnelled into salary increases while the company's resources contract. Which seems reasonable.
by beingflo | 2025-07-14 12:35:21+00:00
updown.io also has a relatively new feature called cron monitoring[0] that allows you to regularly check in to signal success. If there has been no check-in in a configured time it will alert you. For backups you could add a simple curl somewhere into your backup process to do just that.

[0] https://updown.io/doc/how-pulse-cron-monitoring-works
by WallyCanada | 2025-07-14 12:35:24+00:00
Hey HN,

I’m an IT admin who got tired of jumping between random online tools filled with ads, trackers, or outdated interfaces. So I built https://sysadmin.ca – a collection of free, privacy-respecting, client-side tools designed specifically for sysadmins, IT pros, and network folks.

Everything runs locally in your browser — no data ever leaves your device. No accounts, no tracking, no BS.

Some tools live today:

Email header analyzer

JSON, YAML, XML formatters

IP/CIDR tools

Hash generators

Python playground (fully client-side)

Time/billable hour calculators (great for consultants)

And I’m adding more based on community needs. My goal is to make this the go-to toolbox for anyone managing systems, networks, or cloud environments — fast, secure, and free forever.
by leovingi | 2025-07-14 12:35:39+00:00
For the most part I can actually tell, but it also depends on the style of the art. A lot of anime-inspired digital images are immediately obvious - AI tends to add quite a lot of "shine" to its output, if that makes sense. And it's way too clean, sterile even. And it all looks the same.

But when the art style is more minimalist or abstract, I find it genuinely difficult to notice a difference and have to start looking at the finer details, hence the mental workload comment. Often times I'll notice an eye not facing the right direction or certain lines appearing too "repetitive", something I rarely see in the works of human artists. It's difficult to explain without actual inage examples in front of me.