MurphyA/hacker-news huggingface dataset:
by 93po | 2025-07-08 19:32:55+00:00
there are tons of free mastadon servers that cost nothing to end users and perfectly capture the functionality of twitter/facebook/whatever. yes there is root cost at its core, but its distributed across people who volunteer to pay for it on smaller scales becasue they enjoy running those services.

agreed its trickier when its gets to stuff like youtube, but piracy being free and widely spread is an example of how its possible, just not well developed right now

there's also options where it's pay-as-you-go with stuff like bitcoin (e.g. i pay $0.01 to watch a video) where it's effectively free but on large scale does cover the costs of infra
by btown | 2025-07-08 19:33:12+00:00
It’s a great reminder that (a) your prod database likely contains some text submitted by users that tries a prompt injection attack, and (b) at some point some developer is going to run something that feeds that text to an LLM that has access to other tools.

It should be a best practice to run any tool output - from a database, from a web search - through a sanitizer that flags anything prompt-injection-like for human review. A cheap and quick LLM could do screening before the tool output gets to the agent itself. Surprised this isn’t more widespread!
by ack_complete | 2025-07-08 19:33:20+00:00
Note that this issue also affects NEON. Two examples are vmull_p64(), which requires the Crypto extension -- notably absent on RPi3/4 -- and vqrdmlah_s32(), which requires FEAT_RDM, not guaranteed until ARMv8.1. Unlike Intel, ARM doesn't do a very good job of surfacing this in their intrinsics guide.
by lubujackson | 2025-07-08 19:33:59+00:00
Interesting debate. I would argue that AI as students use it solves a problem for the student and certainly doesn't help them learn. But that has nothing to do with AI "rotting the brains of our youth" just as rock music or the Internet before it.

It is naive to discuss any of this while ignoring the real issue which is that most people don't go to college for an education, they go for a degree and ultimately a job. When the stakes get raised over and over again with pricing and inflated grades you can't wring your hands about kids cutting the line when you have institutionalized grade manipulation, adjuncts teaching classes, stadium seating and all the rest while steadily increasing costs.

The problem isn't AI or the kids, it's the system. Maybe AI will finally kill it, and good riddance to what it's become.
by mschuster91 | 2025-07-08 19:34:09+00:00
I've seen that shit happen on devices with >4GB of RAM. The fact that opening the bank's 2FA app can be enough to destroy the session of the app requesting payment is telling a few things:

a) phone manufacturers play ridiculous games when it comes to hiding that their SoCs are dogshit

b) so. many. apps. just outright suck at testing because they test their apps in emulators where there isn't Facebook and tons of other background crap running and thus never test their implementation of the "application is about to be killed off for lack of resources, save state to persistent storage" code path.

c) Facebook plain sucks. Their iOS app [1] and their android app [2] are both ridiculously bloated and that has led to problems well over a decade ago, and it hasn't gotten better.

d) Advertising, tracking, data mining and other spyware SDKs are just as bad as Facebook. The amount of code and RAM that each application carries just for this crap is insane, partially made worse by neither iOS nor Android supporting code deduplication and shared libraries.

[1] https://quellish.tumblr.com/post/126712999812/how-on-earth-t...

[2] https://news.ycombinator.com/item?id=28533119
by FridayoLeary | 2025-07-08 19:34:42+00:00
I was being facetious. But the crusades and the inquisition are actually really dark stains on the history of spain and the church. As for the French i meant it in jest, but really their abysmal military record speaks for itself. Also the actions of Vichy France shouldn't be glossed over, even though the overwhelming majority of France were against the Nazis and the Free French fought with distinction and bravery.

As to your last point, i view myself largely as an unaffected observer, who likes to poke holes in certain liberal narratives.
by OneDeuxTriSeiGo | 2025-07-08 19:35:07+00:00
Chrome does everything you need because Chrome is your baseline that you are used to and because of that your requirement is "it does what Chrome does".

Firefox has features that people "need" but they only know they want it because they already use it and they won't switch away from Firefox unless whatever they'd switch to has the same feature.

Ex: I will never switch away to another browser unless it has extensions that allow you to group tabs and "store them in the background" like you can with Firefox's Simple Tab Groups. Likewise I know people who won't switch to a manifest v3 browser because they don't want their adblock crippled.

TLDR: Your requirements are "whatever I currently use but better". You will never win users by trying to beat a better funded and better staffed project at that. Instead you have to try to do new things and discover what can make your project stand out.
by lcnPylGDnU4H9OF | 2025-07-08 19:35:21+00:00
> next time he talks about emulating Nintendo games or whatever

This seems like a straw man, though? What if they just... continue to not do that? (I think this is what the other commenter meant with "concern trolling".)

> Not to begin to even mention now some shady criminal might hold a grudge against Daigle.

This is 1) not a problem a lawyer will help you with and 2) not a practical concern for most people in the US and Canada. For example, Brian Krebs continues to (read: he's not dead or otherwise intimidated into silence) put his name behind many similar reports of illegal activity. There is a reason law enforcement investigates and prosecutes violent crime.

I don't really see a practical reason for this person to avoid putting their name behind this report. The only reason that seems to make sense is if this group is not a criminal enterprise. Then they might be at all inclined to file a lawsuit.
by l33tbro | 2025-07-08 19:35:29+00:00
> Information to warez groups: Since the source is open, it should be simple to turn the demo into a fully featured version. Please let me know of any problems.

Makes sense as their name suggests that they are affiliated with one of the original warez crews, Radium, who were around in the late 90s. Or that the name is an homage to Radium, who did a lot of massive releases that these developers may have grown up on.
by Someone | 2025-07-08 19:35:34+00:00
I have worked with testers 9 hours off my schedule.

That worked out very nicely. We developed during the day, sent out a mail with test instructions, went home, and had a mail message with test results in the morning. So, it felt like you never had to wait for test results.

9 hours also isn’t too large a difference for the occasional phone meeting (one side would take the call from home, either before coming to work, or after getting home, and would take compensation time typically on the same day).

It does require people in both teams who can write clearly, though.
by Lockal | 2025-07-08 19:35:38+00:00
"trivial modification of an existing exploit"...

Why git does not use Landlock? I know it is Linux-only, but why? "git clone" should only have r/o access to config directory and r/w to clone directory. And no subprocesses. In every exploit demo: "Yep, 
it goes to a square hole
 it launches a calculator".
by davetron5000 | 2025-07-08 19:35:38+00:00
I thought hard about this decision. Every time I use MiniTest, I end up wanting a bit more that RSpec has and then switching to it. I also have been surprised over the years that the `expect(x).to eq(y)` seems to be relatively intuitive to people, despite the fact that it doesn't seem like it ought to be.
by grepfru_it | 2025-07-08 19:35:59+00:00
One TSA agent sees me removing my lacrosse ball from my bag. He says “no that can stay in there”. I say no your scanners always stop me because of it. He replies “you will be fine” and I put it through in my luggage. I go through security and sure enough my bag is stopped. After they pull it out, swab it down like it’s contraband, they say I can go I say no, I’d like a supervisor. I ask the supervisor to bring the other agent over that told me it would be ok. Supervisor immediately sees the problem and begins to tell me ways to avoid the security theater including ignoring the agents and removing things that are constantly flagged. It makes both of our lives easier he said. Just made me wonder what the point of all of this was.

In the end he told me avoid lines with multiple TSA agents at a single station since they are in training and will stop almost everything. I smile, thank him for giving away all of their opsec and walk away shaking my head. It’s all a joke.
by echelon | 2025-07-08 19:36:21+00:00
Imagine if life had evolved on Earth or Theia prior to impact. Imagine if it was intelligent and played witness to the giant cataclysm.

Given that intelligence took an awfully long time to emerge from LUCA, that seems implausible. But it's fun to imagine pre-Theia "Silurians". That sort of impact would have scorched earth of any trace or remnant of their existence. It feels as though there must be sufficiently advanced civilizations out there witnessing this exact scenario play out without the necessary technology to stop it. Though that fate would be horrifying.

Another thing to think about is that shortly after the Big Bang (if there was one, Lamda-CDM or similar models holding up), was that shortly after the Big Bang the temperature of the early universe was uniformly 0-100 degrees Celsius. It may have been possible for life to originated in this primordial interstellar medium without even so much as needing a host planet or star! Just life coalescing in space itself.

That early primordial soup, if it existed, could have seeded the whole universe. Most aliens might have matching molecules and chirality if those decisions predate our galaxy.
by GarnetFloride | 2025-07-08 19:37:06+00:00
You would think we would have to take a statistical approach to AGI.

Look how we learned physics. Aristotelian physics was "An object in motion tends to come to a stop." That looked right most of the time a bowling ball on sand, grass, or even dirt comes to a stop pretty fast. But once you have a nice smooth marble floor the ball goes a lot further.

Newtonian physics solved that and several other issues and works fine, most of the time, but has corner cases when going very fast or getting near a high gravity location. Then relativity and the rest.

We need to build a system that we can teach like we do children that lets them reason that something is true under certain circumstances but may not hold generally so have to update what true is. And that looks like statistics.
by tareqak | 2025-07-08 19:37:13+00:00
I would agree with you if the BBC simply chose to not report any news on the Israel/Palestine conflict.

However, as luck would have it, the BBC published 3 separate pieces of news about Israel/Palestine today.

1. https://www.bbc.com/news/articles/c1mz8gxzg82o

2. https://www.bbc.com/news/articles/c8rp31lk7mzo

3. https://www.bbc.com/news/articles/c2k14n9d8y9o

I’ve read all three articles, and I skimmed them again quickly to verify that none of the three mention that “At least 78 Palestinians have been killed since the morning” like Al Jazeera does (https://www.aljazeera.com/news/liveblog/2025/7/8/live-israel...).

If the BBC is willing to publish 3 separate articles about recent developments in the Israel/Palestine conflict in the same day, then why does the BBC not also report the casualties of said conflict that happened on said day? Not even breaking news with reports of unknown casualties. Just nothing about it and no indication of anything having happened at all.
by mschuster91 | 2025-07-08 19:37:25+00:00
LOL this could have been written by my wife, I'm just as guilty of that. But only on Apple devices... even on a measly 8GB M2 MBA, Chrome can easily deal with 200+ tabs. But an 8GB Lenovo ThinkPad X1 with Windows? Performance goes down the drain at about 15-20 open tabs. It's utterly ridiculous.
by Imustaskforhelp | 2025-07-08 19:37:44+00:00
Thanks!

To be honest, if I might argue then that this is one of the best truly open source models that we have got.

There is AllenAI and (Elmo?) and there is also this one which does distributed training but I think this looks a lot like SOTA for 3B parameters to me.

Thanks for telling me, I am not going to lie, I am going to try to test it now! (Ima try some GGUF since ollama convenience)
by s_dev | 2025-07-08 19:37:47+00:00
It's the density that is counter intuitive for me and the key takeaway. The others aspects of the method seem pretty intutive.

It's counter intutitive because a lot of gardening or agriculture or artificial horticulture in general is very spaced out intentionally for access for humans to care and maintain.

In hindsight though it does make sense, the density stops certain fauna and flora from competing making the ring fenced area immediatley established.
by PaulHoule | 2025-07-08 19:39:10+00:00
Personally I find tabs destroy my productivity completely almost immediately and I have to be aggressive about closing them.

The consistent failure of bookmark managers is notable, doesn't matter if they are pure web-based or implemented as browser extensions the story is always that they're a "roach motel", somebody put in 30,000 bookmarks and realizes a few years later they didn't look back at them once.

A counter-example is my Fraxinus bookmark manager/personal webcrawler/image sorter that I've been running for about 15 months and probably accumulated about 1 million images (was 700k last I looked) I look at images from it every day. The backlog of image galleries in the primary classification queue is about 1000 and I dunno, I could probably put "bigtags" [1] on another 1500 galleries but I don't feel like I have to, it's not like I don't have enough content already.

I wish I had some consistent and simple way to export both bookmarks and history into all my devices so I could feed them into my AI, make them portable, etc.

[1] tags engineered to work with automated classification, namely it is possible for tags to be positive/indeterminate/negative
by kragen | 2025-07-08 19:39:13+00:00
I think the non-hypothetical value that came from this comment in this case is that it surfaced good reasons for writers to use generative AI and showed that many people support doing so. I would have liked to see that happen in a much more civil fashion, but I don't think it could happen at all without some openly stated form of the initial objection to writers using generative AI. So I think that's the wrong aspect of the initial comment to taboo.

My concern is that the flagblasting and moderator-scolding, while certainly justified by the comment in question, will cause the collateral damage of discouraging politer versions of such comments in the future. So I think it's worthwhile to affirm that criticizing people's behavior to their face is not in fact inherently dickish, but rather a much better alternative to doing it behind their back, or to finding ways to silently exclude them, or people you suspect of being like them.
by dexwiz | 2025-07-08 19:39:17+00:00
That's my point, it's still calling JS at the end of the day. Unless you have some computationally expensive functionality that needs optimization like a large Canvas or Excel-esque table, what's the advantage? Just avoiding JS is not enough of a reason for me.

In principle I support WASM, but in actuality I think it falls short for the majority of applications. It's much easier to learn JS than the web platform. Might as well learn it in the primary language.
by ollien | 2025-07-08 19:39:27+00:00
You're technically right, but by reducing the problem to being "just" another form of a classic internal XSS, missing the forest for the trees.

An XSS mitigation takes a blob of input and converts it into something that we can say with certainty will never execute. With prompt injection mitigation, there is no set of deterministic rules we can apply to a blob of input to make it "not LLM instructions". To this end, it is fundamentally unsafe to feed _any_ untrusted input into an LLM that has access to privileged information.
by FirmwareBurner | 2025-07-08 19:39:47+00:00
I used Opera before FF due to its unique and innovative features, then FF when Opera became Chinese, then Chrome when FF went to shit by changing its UI for the worst every week.

None of the new features FF introduced did I ever need, and judging by its market share I am not alone. FF just focuses on useless features that nobody asked for. If you asked for those feature, congrats, you're part of the 0,001% userbase, too bad that's irrelevant. Bad leadership. You can defend FF all you want but the market share speaks for itself.

They had unlimited money from Google and they squandered it. That's like playing a game with cheat codes and coming in last every time. Mozilla leadership should resign and go flip burghers at McDs instead as they're shit at their tech jobs.

Mozilla had to just not fuck with the UI, features and put ads, and it would have been as easy win.
by goalieth | 2025-07-08 19:40:06+00:00
Stack Influence | Technical Operations & Lead Data Analyst | Remote (US) | Full-time | $125k – $175k USD + equity

VC-funded, remote-first, creator marketplace connecting everyday social-media users with e-commerce brands. You will be a Data-focused operations leader. We seek technical-business hybrids with SQL, analytics, and integration skills. This role has executive-track potential in a profitable, high-growth startup doubling revenue YoY ($6M ARR).

Apply to join small team of ex-FAANG talent: https://stack-influence.breezy.hr/p/73780a0cf961
by stouset | 2025-07-08 19:40:26+00:00
Do you mind elaborating on what more you end up wishing you had?

Most of the additional features RSpec adds seem worthwhile but just end up being more complicated/confusing in the end, in my experience. Shared contexts/examples, for example. Others like let blocks should… just be methods.

I will say the change in… I think it was RSpec 3(?) to the expect(x) syntax was a hugely positive change, particularly in not having to monkeypatch the world.
by albertomm | 2025-07-08 19:40:47+00:00
Location: Portugal (EU) Remote: Yes (preferred)

Willing to relocate: Open to short/medium-term relocation if the fit is exceptional

SEEKING WORK | Remote (GMT/EST) | Will overlap with US timezones (EU based)

Technologies:

* AI/LLM: OpenAI APIs, LangChain, Pinecone, RAG, vector DBs * Backend: Python, FastAPI, Django, Flask, Node * Frontend: TypeScript, React, React Native, Angular * Infrastructure: Docker, AWS, Redis, Celery * Databases: PostgreSQL, MySQL, MongoDB, SQLite * Dev Focus: RESTful APIs, microservices, memory handling, agent orchestration

Personal website: https://albertommoura.com/

GitHub: https://github.com/MMnemonic

Résumé/CV: https://www.linkedin.com/in/albertommoura/

Test project: https://github.com/MMnemonic/project-management-app

Loom demo: https://www.loom.com/share/4818471e8ec44096975c5f6b064d11e6?...

Email: alberto@albertommoura.com

Availability: Full-time freelance (40 hrs/week) – immediate start

Hello HN, I’m Alberto — a full-stack engineer with 10+ years of experience, now focused on building LLM-based agents, AI workflows, and smart fullstack infrastructure. I’m especially interested in projects exploring autonomy, reflection, long-term memory, and tool-augmented reasoning.
by tptacek | 2025-07-08 19:41:33+00:00
This to me is like going "Jesus H. Christ" at the prompt you get when you run the "sqlite3" command. It is also crazy to point that command at a production database and do random stuff with it. But not at all crazy to use it during development. I don't think this issue is as complicated, or as LLM-specific, as it seems; it's really just recapitulating security issues we understood pretty clearly back in 2010.

Actually, in my experience doing software security assessments on all kinds of random stuff, it's remarkable how often the "web security model" (by which I mean not so much "same origin" and all that stuff, but just the space of attacks and countermeasures) maps to other unrelated domains. We spent a lot of time working out that security model; it's probably our most advanced/sophisticated space of attack/defense research.

(That claim would make a lot of vuln researchers recoil, but reminds me of something Dan Bernstein once said on Usenet, about how mathematics is actually one of the easiest and most accessible sciences, but that ease allowed the state of the art to get pushed much further than other sciences. You might need to be in my head right now to see how this is all fitting together for me.)
by ang_cire | 2025-07-08 19:41:34+00:00
> repeatedly refused actual begging to accept payment for things

I don't claim to know Mozilla's internal workings, but my wife works for an education-space 501c3, and there are very strict rules about how they can fundraise, how they can spend money that's been donated, etc. I'm sure Mozilla Foundation is large enough to manage this stuff, but things like per-project bank accounts and tax records are still overhead they would have to deal with. I know one of their (my wife's org's) thorniest areas is around what money can be spent on non-"core mission" expenses.
by deathanatos | 2025-07-08 19:41:44+00:00
Some of TFA is more grounded. That particular paragraph though…

It exemplifies why beneficial change is so hard sometimes. The loudest voice in the room can go "here are the problems", we can all nod along in agreement, and then "and here's what we should do" … and it's just out there. I've seen this happen numerous times — borderline continuously — in politics.

Even ealier in the article, they (rightly, IMO) skewer Mozilla for laying off the Rust and Servo teams, but then TFA utterly undercuts its own thesis with,

> It shouldn't be trying to capitalize on [projects such as Rust or Servo].

What? What's the point of Rust, or Servo, then, if not to develop a better Firefox?
by mschuster91 | 2025-07-08 19:41:46+00:00
> Both Mozilla and the Wikipedia Foundation seem to have the same problem of doing everything but focusing on their core raison d'être.

At least for Wikimedia... running Wikipedia itself isn't expensive, they're not running it as a resume-driven-development project in some hyperscaler that brings associated costs, they run bare metal servers to this day (and so, notably, does StackOverflow who run a ridiculously lean setup).

Wikimedia's mission from the start was to be more than just "run Wikipedia and make sure it isn't bought off by some corporate interest", it always had outreach and social responsibility at its core. The problem is, for some people being a responsible citizen of society is already political in itself and, thus, bad.