MurphyA/hacker-news huggingface dataset:
by dylnuge | 2025-07-25 13:43:56+00:00
And from what they do show, it doesn't look like the sites.google.com link was actually clickable, which will reduce the success rate of the attack substantially. I'm not sure if it's not clickable because the OAuth App Title field that the phishing contents is put in won't produce clickable URLs, because the email itself has been flagged by Gmail as suspicious and disabled links, or possibly both.

From what we do see we can also clearly see the "forwarded message" details are present at the top of the email. Then the author writes that the email has "no typos" while ignoring that it has very suspicious formatting. It's still likely people will fall for it, but the article author clearly is being deceptive about how sophisticated this attack actually appears.
by LeafItAlone | 2025-07-25 13:44:07+00:00
>You can't just run several tasks in parallel hoping for one of them to complete.

Not only can you, some providers recommend it and their tools provide it, like ChatGPT Codex (the web tool). Can’t find where I read it but I’m pretty sure Anthropic devs said early on that they kick off the same prompt to Claude Code in multiple simultaneous runs.

Personally, I’ve had decent success from this way of working.
by netdevphoenix | 2025-07-25 13:44:11+00:00
> I think we should also encourage people to build interesting things, even if it's not clear how one could make money from these ideas.

That would be more of a indie engineers kind of community to be honest. The money focus on indie hackers is fairly implicit. And the fact that they are sponsored (or acquired) by Stripe tells you everything you need to know
by JKCalhoun | 2025-07-25 13:44:17+00:00
This is what I am trying to do as well. Switch out bad habits for healthy ones. But it looks like I also need to dial down the quantity — maybe drop to two meals a day.

> Easy one was not keeping soda in the house anymore

Yeah, no shit. As I mentioned in another comment, that was a low hanging fruit that saw me lose nearly 10 pounds when I cut that out of my diet.

I want to scream at people when I see them hanging 6-packs off the sides of their grocery carts — or seem them stacking cases of soda in the cart undercarriages.

U.S. grocery stores are depressing places when you come to recognize, as has been said, that more or less the whole store minus the end-aisles (where produce, deli, etc. are) is just processed crap.
by pierre | 2025-07-25 13:44:24+00:00
Main issue is that token are not equivalent across provider / models. With huge disparity inside provider beyond the tokenizer model:

- An image will take 10x token on gpt-4o-mini vs gpt-4.

- On gemini 2.5 pro output token are token except if you are using structure output, then all character are count as a token each for billing.

- ...

Having the price per token is nice, but what is really needed is to know how much a given query / answer will cost you, as not all token are equals.
by 542354234235 | 2025-07-25 13:44:30+00:00
To add to what magicalhippo said about the extremes of medical issues, the extremes of parenting seem appropriate. "Average" parenting follows a trajectory of intense parenting of a newborn, and end at light/no parenting of an adult. For an overwhelming majority of families with kids with DS, the intense parenting requirement last long and more progresses slowly and the trajectory plateaus at around the tween stage, where a significant portion of your day, every day, is dedicated to managing and caring for your child. I would say that spending tens of thousands of additional hours, likely up until your own death, caring for an adult child would count as extreme needs.
by Goronmon | 2025-07-25 13:45:08+00:00
Most likely what's happening here is that the issuers (not Visa/MC) see a large number of chargebacks/fraud for adult content sites and have determined that it's much easier if they don't accept transactions from these sites.

That's definitely what I would claim if I wanted to take down content I didn't want. Who is going to prove them wrong?
by WhyNotHugo | 2025-07-25 13:45:15+00:00
Indeed.

There's a strong correlation between "women force to cover themselves" and "women's bodies being an object of obsessive desire".

Countries where women MUST cover their bodies as much as possible have more of an incell culture. In countries where it's normal for women sunbathe topless, breasts aren't as sexualised of fetishised.
by pizlonator | 2025-07-25 13:45:21+00:00
When those US government articles about how we should switch to memory safe languages come out, they refer to Java as a “memory safe language”.

They also count data race freedom as part of memory safety, which I think is wrong (and contradicts their inclusion of Java and even Go in the list of memory safe languages).

So no, I’m not an authority. I’m just following the general trend of how the term is used.

And ive never heard “memory safe” used in relation to not having null pointer exceptions. That’s a new one and sounds nonsensical, frankly
by mvieira38 | 2025-07-25 13:46:16+00:00
Banking apps are spyware, that's why they avoid open source OSes, not because they want to vendor-lock you. Smartphone data collected by a banking app is basically the most valuable in the world for advertisers, as they get the telemetry instantly crossed with a full(ish) picture of your spending habits and all the KYC identifiers too.
by _Algernon_ | 2025-07-25 13:46:54+00:00
If your water company stops delivering water to you because you post furry porn it becomes a problem. The problem is when a company becomes so big that it is a natural monopoly (or effectively part of a cartel), while basically being necessary infrastructure to operate in a modern society.

These payment networks fit that description, and should either be broken apart so that you get the necessary competition, or be regulated so that they have to provide service for legal goods and services in a given jurisdiction.
by kbolino | 2025-07-25 13:46:57+00:00
> I assume this implies that common processor architectures (x86_64, aarch64) lack trap-on-overflow variants of their integer arithmetic instructions?

Yes*. But all modern instruction sets have condition flags and conditional instructions, so it's still very much possible to implement the checks robustly in machine code. However, doing so would generally require injecting at least one additional conditional-branch instruction, and in some cases, switching from non-flag-setting instructions to flag-setting instructions (which can be slower).

* = true "trap on overflow" existed in 32-bit x86 but was tricky to use and got removed when going to 64-bit
by Sanzig | 2025-07-25 13:48:15+00:00
Interstellar space is pretty empty, and we have good models for it thanks to the radio astronomy community. Dispersion is low enough to be nearly negligible, even over tens of light years.

Determining theoretical interstellar link rates is a fairly straightforward link budgeting exercise, easier in fact than most terrestrial link calculations because you don't have multipath to worry about.
by etempleton | 2025-07-25 13:48:54+00:00
I do have repeated, annoying instability with my Ryzen 5900X desktop. I find AMD to have a much narrower setup window in terms of memory speed, timing, etc. and that is before any kind of overclocking. And the motherboard / bios firmware situation always seems a bit more sketchy for AMD.

Maybe it is just bad luck on my end, but I have not had those issues with Intel in the past or currently.
by jmclnx | 2025-07-25 13:48:54+00:00
It is nice that he created a cloud environment for a pointy/clicky people :)

But if I where to do such a thing:

1. Cloud only used to send and store locally encrypted compressed backup data

2. Open an ssh port to the public, but deny logins. Only allow logins using ssh keys.

3. Download data from my system using sftp/scp

This protects you from being chased by DRM lawyers because the system is not public. Plus it is very simple to setup.

Setting up a Cloud System like described here is very great for end users, but it could get you into court, or at the very least lots of take-down notices.
by coldpie | 2025-07-25 13:49:30+00:00
> Is it controversial that companies aren't allowed to refuse service based on gender or race (in the US at least)?

Those are legal categories known as "protected classes," and yeah, it was and is pretty controversial[1]. I think you'd have a hard time getting purchasers of porn games declared a protected class.

[1] https://en.wikipedia.org/wiki/Civil_Rights_Act_of_1964 ; further reading, https://en.wikipedia.org/wiki/Protected_group
by burntsushi | 2025-07-25 13:49:51+00:00
What is TXR? Was this implementation really "industrial"? Did it have the caching present in RE# to avoid worst case exponential compile times? Did it support Unicode? Did it have prefilters? What kind of match semantics did it support?

"industrial" in this context to me means something like, "suitable for production usage in a broad number of scenarios."

IDK if RE# lives up to that, but their benchmark results are impressive. This paper is a year old. In which production systems is RE# used?
The magic wand that solves agent memory
by fokkedekker | 2025-07-25 13:49:51+00:00
I spoke to hundreds of AI agent developers and the answer to the question - "if you had one magic wand to solve one thing, what would it be?" - was agent memory.

We built SmartMemory in Raindrop to solve this problem by giving agents four types of memory that work together:

Memory Types Overview

Working Memory • Holds active conversation context within sessions • Organizes thoughts into different timelines (topics) • Agents can search what you've discussed and build on previous points • Like short-term memory for ongoing conversations

Episodic Memory • Stores completed conversation sessions as searchable history • Remembers what you discussed weeks or months ago • Can restore previous conversations to continue where you left off • Your agent's long-term conversation archive

Semantic Memory • Stores facts, documents, and reference materials • Persists knowledge across all conversations • Builds up information about your projects and preferences • Your agent's knowledge base that grows over time

Procedural Memory • Saves workflows, tool interaction patterns, and procedures • Learns how to handle different situations consistently • Stores decision trees and response patterns • Your agent's learned skills and operational procedures

Multi-Layer Search That Actually Works

Working Memory uses embeddings and vector search. When you search for "authentication issues," it finds memories about "login problems" or "security bugs" even though the exact words don't match.

Episodic, Semantic, and Procedural Memory use a three-layer search approach: • Vector search for semantic meaning • Graph search based on extracted entities and relationships • Keyword and topic matching for precise queries

This multi-layer approach means your agent can find relevant information whether you're searching by concept, by specific relationships between ideas, or by exact terms.

Three Ways to Use SmartMemory

Option 1: Full Raindrop Framework Build your agent within Raindrop and get the complete memory system plus other agent infrastructure:

```hcl application "my-agent" { smartmemory "agent_memory" {} }

```

Option 2: MCP Integration Already have an agent? Connect our MCP (Model Context Protocol) server to your existing setup. Spin up a SmartMemory instance and your agent can access all memory functions through MCP calls - no need to rebuild anything.

Option 3: API/SDK If you already have an agent but are not familar with MCP we also have a simple API and SDK (pytyon, TypeScript, Java and Go) you can use

A couple of helpful links to get started

For signup check: https://liquidmetal.ai/ For concepts documentation check: https://docs.liquidmetal.ai/concepts/smartmemory/ For implementation documentation check: https://docs.liquidmetal.ai/reference/resources/smartmemory/ For quick start check https://docs.liquidmetal.ai/tutorials/smartmemory-app-deployment/
Ask HN: What Makes a Meaningful Pursuit for an Early-Stage Startup?
by _yjlee | 2025-07-25 13:50:22+00:00
When building a product as a startup, it’s almost inevitable that you’ll reach a point where you need to pivot, whether it’s at the hypothesis stage or after launching a product. But how can we ensure that a pivot becomes more than just a change in direction and actually leads to real growth for the team and product?

My conclusion was this: we need to clearly define the domain we want to focus on and pivot only within that space.

This is because I believe that the insights, experiences, and networks gained from each attempt should directly contribute to the next challenge. Of course, there are many teams that have succeeded in other ways, but for us, this approach felt like the most efficient path for fast growth and real progress.

That’s why I decided to focus on “Agent.”

I am well aware that there are skeptics who argue “Agents are just hype” or “The buzz is already over.” But the market is still paying attention to agents and game-changing products are continuing to emerge. Protocols like MCP and A2A are also being released leading to rapid growth of the agent ecosystem.

Rather than debating whether it’s a red ocean or blue ocean, I see this pace of growth and ecosystem development as an opportunity that can’t be disregarded - and the inevitable challenges that arise from this fast-pace development are both the problem startups are meant to solve and chances which startups should take.

I have been building LLM applications since early 2023, even before the concept of “agents” became mainstream. Thanks to my existing network, I have a network of hundreds of potential users; this greatly influenced my decision to concentrate on this field - agent.

Now it’s your turn. How are you navigating your own startup journey? I am always eager to learn from others.
by formerly_proven | 2025-07-25 13:50:23+00:00
There is a native export function in Health but it generates about 1-2 GB of XML per year, since the schema is extremely verbose, so it takes a while. On the other hand, it’s very literally self-describing. But no need for handing access to Health to more or less dubious apps. I also think you can „export“ select data points to „CSV“ using a ten step Shortcut. Might be quicker.
by hellojesus | 2025-07-25 13:50:34+00:00
> it is funny to see in particular Americans when you talk about nude beaches or mixed saunas and the general Freikörperkultur (lit: free body culture) that was so common and still has carried over

How is general nudity of adult men considered by those participants? I always assumed that my nakedness would be perceived as a display of mateability, and I am concerned that my penis size relative to other men would reduce my attractiveness to women.

Note: I am not sure how I compare to others in the general population, as I live the typical American lifestyle. Also, I think Germans are statistically one of the greater endowed populations, so maybe this isn't as much an issue for them.
by ApolloFortyNine | 2025-07-25 13:50:35+00:00
>I'm not sure if I would call this a "bypass" -- this is the typical way FOSS software has always worked, and it's part of the reason why FOSS is popular :)

Any other packages you know of that are open source but have a trap license where if you download it through the package manager you owe them money? :)

Plus the license mentions the binaries have to be distributed with the same license. Attaching a "if you click this download button you owe us $10000" button doesn't seem very typical to common FOSS values :) I'd say a big reason FOSS is so popular is the free and open source nature :)
by atoav | 2025-07-25 13:50:40+00:00
As someone who worked a lot in realistic VFX I concur with the observation that nearly no game is doing tone mapping right and my guess to why that is always has been the fact that doing it right is just very complex.

There are many, many things artists need to do correctly, many of which have no idea of the whole pipeline. Let's say someone creates a scene with a tree in it. What is the correct brightness, saturation and gamma of that trees texture? And if that isn't correct, how could the lighting artist correctly set the light? And if the texture and the light is wrong the correct tone lmap will look like shit.

My experience is that you need to do everything right for a good tonemap to look realistically, and that means working like a scientist and having an idea of the underlying physical formulae and the way it has been implemented digitally. And that is sadly something not many productions appear to pull off. But if you pull it off everything pops into place.

The added complication with games is of course that you can't just oprimize the light for one money shot, it needs to look good from all directions. And that means it is hard to make it look as good as a film shot, because that risks making it look like crap from other directions which studios aren't willing to risk.

The dragon in The Hobbit isn't just about the tonemapping, it is at least as much (if not more so) a lighting issue. But the two can influence each other in a bad way.
by EGreg | 2025-07-25 13:50:45+00:00
This is exactly what I’ve been building for a decade, but it’s not just a “community hosted cloud platform”, it is an entire reimagining of Facebook, Twitter, Reddit, LinkedIn, Telegram and all the other community platforms, for an open source world.

Here is an overview of how the payments work: https://qbix.com/ecosystem

And here is the software you can try for yourself over a weekend: https://github.com/Qbix

If any of you do, let me know what you think!

I have interviewed a lot of people on my channel, including founders of Freenet and MaidSAFE (now called Autonomi) which do in fact replace “the cloud” already, through entirely peer-to-peer nodes.

https://news.ycombinator.com/item?id=34179795

If anyone here knows Ted Nelson, please put us in touch! I would love to interview him about his vision for Xanadu

For my part, however, I am embracing a different model, where a “QBOX” black box would be hosted by our franchisees in the cloud, among other places. Placing the protocols inside the EC2 instances makes them untouchable by Amazon. Because AWS, Google et al legally are not allowed to go inside those boxes and mess with the software, or even read the contents of the RAM. And I don’t remember any story of them ever doing it even for the NSA. Do you?
by michaelt | 2025-07-25 13:50:57+00:00
> This was solved a long time ago by marking such cookies as "HTTP only"

That stops the attacker from exfiltrating your cookies with their evil JavaScript - but they can still have their script make http requests, and they’ll be made with your cookies.

Or they can throw up a fake login page, which will fool plenty of users because it’s on the right URL, and do what they like with your inputs. Lots of attack options.
by _mlbt | 2025-07-25 13:51:01+00:00
A big thing that put me off about Colbert and other similar shows is that it’s all way too one sided. There was so much comedy gold being provided by the Biden administration and they refused to cover any of it.

All of them other than Gutfeld are fighting over their personal slice of less than half of the pie. No wonder they are all struggling to turn a profit.
by cjbarber | 2025-07-25 13:51:04+00:00
This reminds me of a principle I like: Once you understand your key traits and the key things customers come to you for, it's good to embody them everywhere!

F1 is largely about speed. (I fondly remember going to various races as a child with my grandparents, in Melbourne. Everyone seemed in awe of Schumacher). So of course your website should be about speed!

This could then apply to everything: ticket turnstiles that measure themselves on time per guest scanned, food vendors that do the same thing, websites that measure and rank on speed.
by OutOfHere | 2025-07-25 13:51:09+00:00
Spreading gossip on anyone is extremely evil. It's even more evil when there is a dearth of evidence-seeking objectivity as is commonly the case in society.

Doxxing someone's personal details is independently evil.

Defamation is simply illegal.

There have existed background search services, video chat, location sharing, ID exchange, test results exchange, etc. which do the job without gossip.
by alerighi | 2025-07-25 13:51:12+00:00
It's something trivial to write (~20 lines of code), there is no point for standard library to provide that kind of functions in my opinion.

You do after the fork() (or clone, on Linux) a for loop that closes every FD except the one you want to keep. In Linux there is a close_range system call to close a range of in one call.

POSIX is an API designed to be a small layer on the operating system, and designed to make as little assumption as possible to the underlying system. This is the reason why POSIX is nowadays implemented even on low resources embedded devices and similar stuff.

At an higher level it's possible to use higher level abstractions to manipulate processed (e.g. a C++ library that does all of the above with a modern interface).
by oguz-ismail | 2025-07-25 13:51:17+00:00
It's not hard, just a bit too long:

#include <fcntl.h> #include <spawn.h> int main(void) { posix_spawn_file_actions_t file_actions; posix_spawn_file_actions_init(&file_actions); posix_spawn_file_actions_addopen(&file_actions, 0, "/dev/null", O_RDONLY, 0); posix_spawn_file_actions_addopen(&file_actions, 2, "/dev/null", O_WRONLY, 0); posix_spawnp(NULL, "ls", &file_actions, NULL, (const char *[]){"ls", "-l", "/proc/self/fd", NULL}, NULL); posix_spawn_file_actions_destroy(&file_actions); }
by matiasmolinas | 2025-07-25 13:51:23+00:00
Anthropic just launched a "sub-agents" feature for Claude Code, which lets you define specialized agents in Markdown files that the main agent can delegate tasks to. This is interesting to me because a month ago, I launched an experimental project called LLMunix. The core idea was to build an OS-like framework for an LLM where agents and tools are defined as simple, version-controllable Markdown files. The system would achieve a user's goal by creating a plan and then orchestrating these components. A key part of the architecture was delegation. Since Claude didn't have this natively, I built a run_agent tool. It's essentially a shell script that takes the path to an agent's Markdown file and some JSON arguments, then spawns a separate, non-interactive Gemini CLI or Claude Code sub-process to execute it. It was a hack, but it worked to prove the concept of a higher-level orchestrator using specialized, file-based agents. The new native implementation is strikingly similar: Agents are defined in Markdown files with YAML frontmatter. They live in a specific directory (.claude/agents/). The orchestrator (Claude Code itself) delegates to them based on their description. The native version is obviously superior – it offers true context isolation, proper tool permissioning, and is much cleaner than my sub-process hack. I'm now planning to refactor LLMunix to use these native sub-agents directly. It will simplify the codebase significantly and make the project a much better example of this emerging architectural pattern. To me, this confirms that the future of complex AI work isn't a single monolithic model, but an orchestrator delegating tasks to a collection of specialized, human-readable components. It's a fun bit of parallel evolution, and I'm excited to build on top of the real thing now.

Curious to hear what others think of this multi-agent, file-based approach.
by tomhow | 2025-07-25 13:51:28+00:00
I've temporarily buried this because it links to a tag index, with several articles, which is too broad/diverse to generate a good discussion on HN.

Submitter (diginova), please let us know which of the articles is the best to read and discuss and we'll make that the url and title.

(Best to email us at hn@ycombinator.com to be sure we get the message, as we might not remember to check back here).