MurphyA/hacker-news huggingface dataset:
by khalic | 2025-07-23 12:28:39+00:00
Depends, I have a prompt ready for changes I made manually, that checks the diff, gets the context, spits a conventional commit with a summary of the changes, I check, correct if needed and add the ticket number. It’s faster because it types really fast, no time thinking about phrasing and remembering the changes, and usually way more complete then what I would have written, given time constraints.

If I’m using a CLI:

the agent already has: - the context from the chat - the ticket number via me or when it created the ticket - meta info via project memory or other terminal commands like API call etc - Info on commit format from project memory

So it boils down to asking it to commit and update the ticket when we’re done with the task in that case. Having a good workflow is key

For your question: I still read and validated/correct, in the end I’m the one committing the code! So it’s the usual requirements from there. If someone would use their LLM the results would vary, here they have an approved summary. This is why human in the loop is essential.
by Foxboron | 2025-07-23 12:29:12+00:00
>Thanks to updates to sbctl, you can create keys with `sbctl create-keys` rather than typing out complex openssl commands. sbctl's `enroll-keys` should also make the key enrollment procedure easier.

I mean, reading Rod Smiths post is what originally made me write secure boot tooling many years ago. I didn't understand why it had to be soooo complicated.

If you read the original `efi-roller` project I started out with you'll see it's largely just a wrapper around the stuff in Rod Smiths book, that was later refined by actually implementing a proper library in Go and tooling on top.

https://github.com/Foxboron/efi-roller
Show HN: I built a free math-based puzzle game called Equatile
by bbx | 2025-07-23 12:29:31+00:00
Hi,

I built Equatile, a logic-based puzzle game where you arrange number tiles on a grid to make every row and column equal their target values.

It's built using Expo and is available for free on iOS, Android, and the Web.

It's a game I've had in mind for almost 10 years now but never got to actually develop, until I came across Expo which made the process incredibly easy. I might open source the code on GitHub.

I hope you enjoy playing it!
by pivo | 2025-07-23 12:29:41+00:00
After reading the third link I desperately wanted to install the 1913 dictionary on my mac but the DictUnifier app that does the installation crashes. Torture!

The app appears to be open source (https://github.com/ponychicken/DictUnifier) so I'll see if I can manage a patch.

Thank you for this and your wonderful article!
by logicchains | 2025-07-23 12:30:03+00:00
I just asked Gemini 2.5 Pro to write a function in Haskell to partition a list in linear time, and it did it perfectly. When you say you were using ChatGPT and Claude, do you mean you were using the free ones? Plain GPT 4o is very poor at coding.

-- | Takes a predicate and a list, and returns a pair of lists. -- | The first list contains elements that satisfy the predicate. -- | The second contains the rest. partitionRecursive :: (a -> Bool) -> [a] -> ([a], [a]) partitionRecursive _ [] = ([], []) -- Base case: An empty list results in two empty lists. partitionRecursive p (x:xs) = -- Recursively partition the rest of the list let (trues, falses) = partitionRecursive p xs in if p x -- If the predicate is true for x, add it to the 'trues' list. then (x : trues, falses) -- Otherwise, add it to the 'falses' list. else (trues, x : falses)
by K0balt | 2025-07-23 12:30:55+00:00
I think an often overlooked aspect of training data curation is the value of accurate but oblique data. Much of the “emergent capabilities “ of LLMs comes from data embedded in the data, implied or inferred semantic information that is not readily obvious. Extraction of this highly useful information, in contrast to specific factoids, requires a lot of off axis images of the problem space, like a CT scan of the field of interest. The value of adjacent oblique datasets should not be underestimated.
by MisterTea | 2025-07-23 12:31:00+00:00
> However, I don’t think Firefox is important anymore (I’m a loyal user).

This sounds defeatist. What is the alternative then? Vendor specific browsers? For me that's not happening because I don't and won't buy MS or Apple products so no safari or edge.

Honestly, web complexity is out of control and browsers are beyond comprehension for mere mortals being. The fact that you need billion dollar companies to prop them up is a telling sign.
by constantcrying | 2025-07-23 12:31:13+00:00
>I dunno, I see more under-engineering than overengineering.

Really? Every large Software project I have seen from the inside was as total architectural mess.

>Software salaries are actually pretty good for Europe now, as far as I know, especially... in automotive.

Not compared to the US. In the US a software engineer in a good position makes exceptional money, especially compared to other engineers. In Germany that is not the case, especially in automotive, where salaries are often union negotiated and Engineers are all on identical pay scales.

>The inital Cariad CEO was just some nondescript car industry guy - they may have tried to have a different culture, but why put a guy in charge who represents the old culture? The current Cariad CEO is a mechanical engineer by education and previously worked in production and logistics. It's baffling. They can't be that stupid (right?), so I think it's mechanical engineering resisting a loss of power and importance.

I just think that there really isn't anybody else. Is there any person somewhere in the German industry who has the ability for leadership and great software expertise? The biggest Software company in Germany is SAP and surely, hiring some SAP manager would have been an even worse decision.
by jajko | 2025-07-23 12:31:30+00:00
> When will AI's progress be fast enough for a vibe coder never to need to bother with technical problems?, that's the question.

If we reduce the problem into this, you don't need developer at all. Some vague IT-person who knows a bit about OS, network, whatever container and clustering architecture is used, and can put good enough prompts to get workable solution. New age devopsadmin sort of.

Of course it will never pass any audit or well setup static analysis and will be of corresponding variable quality. For business I work for, I am not concerned for another decade and some more.
by troupo | 2025-07-23 12:31:49+00:00
Which draw calls result in "changing border width will cause a full page re-flow in some browsers, and bot others"?

Which draw calls are "literally any animation will cause the full re-flow of the document unless you make sure an element is not a part of the document, but then you'll have issues with positioning, weird gaps etc."

Which draw calls teach you that "well, this primitive animation consumes 15% of CPU, but will only consume 6% if you go out of your way to make it 'performant'"?
by Foxboron | 2025-07-23 12:32:27+00:00
The Linux `vmlinuz` binary is an EFI executable that implements a minimal stub loader to load rest of the kernel and initrd.

You can use `efibootmgr` to insert the `vmlinuz` binary as a boot entry. But honestly, you are better off using a proper bootloader as it makes things a lot simpler for you to manage.

The UEFI bootloader menu is mediocre if you are lucky, terrible in most cases.
by mola | 2025-07-23 12:32:54+00:00
I supportthe two state solution.

Alas hamas killed that one in The 90s when they decided to send suicide bombers to Israeli busses during the peace process that Israel initiated.

Also Israel accepted the two state solution in 1948, alas all Arab countries decided to attack the newly idndependent country.

Saying "we" stole the land is a bit odd. The arabs leaving in Israel didn't call themselves Palestinians until after 1948.

Israel is not in the Arab peninsula, arabs living here came from there, hence they are Arabs.

I still support their right to their national claim. But pretending it's some ancient construct that "we" stole from is not historical. Palestinian nationalism is a modern construct.
by Tade0 | 2025-07-23 12:33:17+00:00
There's a limitation in the form of inaccessible domains which is, predictably, also used by employers.

No need to go all 1984 on children because those who can bypass such restrictions will figure out a way to see what they want.

Like with everything about parenting your main weapon against the evils of this world is the trust your child puts into you.
by vdupras | 2025-07-23 12:33:18+00:00
I have a question. I'm curious.

I see two comments here on this subject, complaining about the churn of dealing with security advisories. Sure, it's churn.

... but isn't this problem dwarfed by the implications of having used a compromised package? Presumably, if the project you work on has a compromised dependency, it means you've ran it on your development machine. Presumably, you might have a couple of secrets (private keys, AWS credentials and other whatnots) lying around, which might have leaked to a malicious actor.

Wouldn't you need to review all the development, staging and production machines for all your projects and rotate secrets everywhere?

Wouldn't it be, by far, the biggest churn involved, so much that mentioning "npm audit" difficulties not worth mentioning at all, because of the ridiculous comparison in effort magnitude?
by scotty79 | 2025-07-23 12:33:39+00:00
I don't think you can have too strong bs detector. After it rejects something it's not forever. When the thing you rejected occurs in new contexts or produces new results you will reevaluate and either reject it again or withdraw your rejection. That's the point where intelligence comes in so that you won't withdraw your rejection too soon or reject a valid thing too persistently. But from what I noticed evaluation made at this stage are rarely a problem. The bulk of the problem is not strong enough bs filter for the initial rejection to happen. And once someone believes in something it's very hard for him to lose that belief. Garbage sticks.
by ljf | 2025-07-23 12:33:51+00:00
No STEM here - but I'm not an engineer, I'm a tech interested product guy who has worked for online companies all my career (2002 onwards)

I did a Media Studies (theory) degree, but all the way through university I was making websites for fun and for profit (badly), and managed to get into web 'producer' roles before moving to 'Product Owner' type roles. Though I am non-technical, I took the time to learn about the technologies we use, likely more than my peers.

These days I work in IT strategy and support the CIO - though most of the leadership team I work with do have engineering backgrounds, many of people my level do not.
by southernplaces7 | 2025-07-23 12:34:50+00:00
>They have huge areas of farm land, valuable in times where climate change makes farming impossible in other regions

Have you put any genuine thought into what you're saying about that specific war? If any country on Earth aside from maybe Canada would benefit agriculturally from warming climate, it's Russia. I can assure you that despite its many problems, feeding its badly decreasing population isn't one of them even now, and especially not to the point of having to invade another state over it.

Let's not misplace blame here in ridiculous ways. Putin started that particular heap of idiocy, with zero climate-related need to do so. He did it for a bunch of half-baked political/social/historical reasons pulled right out of his own ass.
by ImPostingOnHN | 2025-07-23 12:35:46+00:00
> How radon works: Cellular repair in the body is stimulated, the number of free radicals is reduced.

Yikes! Not only are free radicals increased, because you're being bombarded with ionizing radiation, but any cellular repair stimulated is because of the cellular damage done!*

I have to assume "the number of free radicals is reduced" is intentionally written awkwardly and in a passive voice, to avoid adding "...after the "radon therapy" stops.

* - And it's not gonna be a net positive!
by Tuna-Fish | 2025-07-23 12:35:55+00:00
> Rules of thumb

> Processors can 'learn' thousands of branches: benchmark over massive inputs.

> Pick a solution without branches when it provides the same performance.

Note that it is terrible idea to benchmark small parts of your software individually and compose together the parts that are individually the fastest. Branch history tables and branch target buffers are a shared resource, and performance can crater horribly if you routinely exceed what's provided. You should generally favor straight-line code even when it's slightly slower in microbenchmarks.
by Lex-2008 | 2025-07-23 12:36:06+00:00
Let's start with an extreme example: each day more people die in traffic accidents, than by falling from a 10-story building. But still, we all can agree that driving a car is safer than falling from a building.

Why? Because driving a car you get more chance to get to your destination safely than falling from a building. ChatGPT estimates 0.01% chance to die in car accident per year, when driving every day, and 90-99% to die when falling from a building, once.

However, since there are many millions of people who drive a car every day, multiplying very little chance to die in car crash by millions of people, we get thousands of traffic-related death per day. Compare that to single-digit number of people falling from buildings, even if all of them die from it.

Back to Covid, let's imagine a village with simple numbers like this:

10 people were NOT vaccinated, 100 people WERE vaccinated.

Of 10 people who were NOT vaccinated, all 10 got hospitalized.

Of 100 people who WERE vaccinated, 20 got hospitalized.

_Correct_ way to look at this village would be:

ALL people who were NOT vaccinated, got hospitalized - 100% hospitalization rate.

But among those who WERE vaccinated, only 20% got hospitalized.

Hence, it's better to be vaccinated - this way you'll get 80% chance of not being hospitalized :)

I'm not a real statistician, and don't have actual numbers on hand, but situation with real world numbers is similar: among people who were vaccinated, less percent were hospitalized than among those who were not. It's just that we had so many many vaccinated people, that their small hospitalization rate, when multiplied by total number of vaccinated people, outweighs number of not-vaccinated and hospitalized people.
Show HN: I built Keynote but for creating motion graphics (with Excalidraw)
by chunza2542 | 2025-07-23 12:37:29+00:00
five months ago, I launched Inscribed.app [1], a tool based on Excalidraw for making step-by-step explanatory sketches (like slides) that I can easily embed to explain concepts on my blog.

as I later expanded into video, I found myself returning to Excalidraw, hacking things together to make motion graphics. so I've decided to spin off a new project focused specifically on this called StoryMotion.

try it yourself: https://storymotion.video

---

with StoryMotion, you can:

1. sketch things out quickly using an Excalidraw with additional features like multi-scenes, Google Fonts integration, and keyboard shortcuts.

2. assign animated effects to any element on the canvas, which you can later edit the timing of in the effects timeline editor.

3. export the video to edit further in professional video editing software like Final Cut Pro.

---

think of it as: “Keynote, but for creating motion graphics.”

my plan is to add more animated effects, scene transitions like Keynote's Magic Move, AI voiceover, and polish the UX of both the main Excalidraw canvas and the timeline editor.

my target audience is anyone who makes educational videos, but if you find this useful for something else, please let me know.

any feedback is welcome and appreciated :)

---

[1] https://news.ycombinator.com/item?id=43078555
by rafaelmn | 2025-07-23 12:38:00+00:00
What are you talking about - there are quotes from all top tech CEOs bar maybe Apple (who are not on the bandwagon since they failed at executing with it), I listed some above. This is an industry wide trend and people justifying hiring decisions based on this, shelling 100m signing bonuses, etc., not some random YC startup guy tweeting.
by jonahbenton | 2025-07-23 12:38:12+00:00
You don't mention what wall you ran into looking at source for vulnerabilities, but- with the rapid rise of LLM generated source code, at the file, module and whole repo via agents level, a systematic analysis of vulnerabilities commonly introduced by such models, of prompt types that introduce more or fewer vulnerabilities, of agentic patterns that detect vulnerabilities, etc etc- this is a HUGE space that seems nearly completely unexplored.
by naikrovek | 2025-07-23 12:39:03+00:00
> Take pride in what you do.

Hahah, that's great. This is 2025, man. Corporations abandoned the idea of letting people take pride in what they do long ago. Corporations have no room for slowpokes to take their time to do it correctly. There is only room for ramrod fuckheads who pump out code as fast as possible and then file 400 bugs on that same code after it's in production. And, yes, they knew of the problems when they pushed it to production. Everyone must move faster. Always. Faster tomorrow than today, without exception. The idea that people have the time to even imagine a day when they could CRAFT anything is long gone.

Profits above all. Always.

Speed, speed, speed. Always.

You must always go faster. If you are not going faster then you are a liability.
by delusional | 2025-07-23 12:39:27+00:00
DRM'd content was never implemented out of fear of "copyright infringement" it was built to solidify corporate connections. Microsoft implements DRM mechanisms to incentivize copyright holders to provide better service on their platforms.

AI doesn't have less respect for Copyright than any other tech company. AI has less need for the corporate connections to those copyright holders.

This of course comes from the neoliberal philosophy where the only remedy you have is to withdraw service. We've gutted the actual rights of actual creatives.
by soco | 2025-07-23 12:39:29+00:00
Yes I meant above the smoke point. There are pans (Tefal?) which get red when the they get too hot, but as it depends a lot on the type of the oil and anyway the pan bottom is covered by the very food you're overheating... not helping. I understand there are better vegetal options (coconut, refined avocado) but still animal fat looks to be the safest. Or just pay good attention when frying.
by wongarsu | 2025-07-23 12:40:51+00:00
If you push the shim to JavaScript then it isn't direct DOM access. But you could push the shim into the C++ browser code, providing one DOM API to JavaScript and slightly smaller shimmed version to WASM. Then you cut out the JavaScript middle-man and can call it "direct DOM access".

Of course you couldn't provide idiomatic versions for every language, but the JS shims also can't really do that. Providing something close to idiomatic C would be a huge step up, the language libraries can then either offer a C-like API or choose to build new abstractions on top of it
by jc__denton | 2025-07-23 12:41:26+00:00
Really no direct replacements for me if funding collapses such that both Firefox and Thunderbird go. Firefox's multi-account containers are unparalleled in their ease of separation. This was really the feature that lured me back from Chrome, which is all too happy to merge your "identities" into a single "profile." Yes, you can do multiple profiles, but not on a per tab basis. Thunderbird would also be a great loss as it's always been my go-to for HTML email management and it actually had decent GPG support. Sigh...

I kind of wonder if they simply tried to hard to pivot into being a big tech company. It felt like at one point there was a new product announcement every few weeks. Very few of those exist today.
by mananaysiempre | 2025-07-23 12:41:28+00:00
> One weird thing was how he said because of 1 byte/cycle is 4GB/s things are "easily CPU bound" while I feel like I've been "fighting The Memory Wall for at least 3 decades now..." even just from super-scalar CPUs

I mean, he’s right? For mostly-linear processing like Lemire’s projects that he mentions in his talk (simdutf, simdjson), memory latency is completely absorbed by the prefetcher, so only memory bandwidth matters. You can’t saturate DDR4 bandwidth, or even a tenth of DDR5 bandwidth (or, like Lemire is fond of mentioning, even PCIe Gen 4 SSD bandwidth) if your code (after autovectorization) is structured around doing a thing per byte. Probably not even a thing per UTF-16 code unit. So in those cases—no, you’re not hitting the memory wall. Not even close. You’re hitting the clock-speed wall.
by sailingparrot | 2025-07-23 12:41:59+00:00
> With 44GB of SRAM per Cerebras chip, you'd need 45 chips chained together. $3m per chip. $135m total to run this.

That's not how you would do it with Cerebras. 44GB is SRAM, so on chip memory, not HBM memory where you would store most of the params. For reference one GB200 has only 126MB of SRAM, if you tried to estimate how many GB200 you would need for a 2TB model just by looking at the L2 cache size you would get 16k GB200 aka ~600M$, obviously way off.

Cerebras uses a different architecture than Nvidia, where the HBM is not directly packaged with the chips, this is handled by a different system so you can scale memory and compute separately. Specifically you can use something like MemoryX to act as your HBM which will be high speed interconnected to the chips SRAM, see [1]. I'm not at all an expert in Cerebras, but IIRC you can connect up to like 2PB of memory to a single Cererbas chip, so almost 1000x the FP16 model.

[1]: https://www.cerebras.ai/blog/announcing-the-cerebras-archite...
by abrooks43 | 2025-07-23 12:42:03+00:00
After years working with everyone from startups to billion dollar organizations on digital transformation, we kept seeing the same problem:

Everyone’s trying to redesign processes or roll out new tools—but no one knows how work actually happens across teams and systems. What's on the slides rarely matches reality.

So we built ClearWork—a lightweight browser extension + backend system that captures real user interactions (across apps like Salesforce, Workday, SAP, etc.) to give transformation leaders a clear view of what’s really happening.

Think: • Process discovery for workflows • “Flight recorder” for user journeys • Instant insight into friction, workarounds, and shadow processes

We're still early, but opening up early access to get feedback from builders, operators, and transformation geeks like us.

Would love your take on what we’ve built so far: https://www.clearwork.io

Happy to answer any questions!
by snickerbockers | 2025-07-23 12:42:20+00:00
people who have to support windows do this sometimes because MS has gone for almost forty years now without ever specifying a default directory where libraries go. This is in spite of the fact that being the creator of the OS, the most-popular compiler, and the SDK should in theory give them enormous leverage to dictate where dependencies get saved.

There's this bizarre cultural difference you see between people who learned to program on windows compared to people who learned to program on unix wherein the Windows crowd don't see the value of having an easily reproducible build system because. Usually this results in some combination of needlessly-complicated scripts and checking binary builds of dependencies into version-control.

Requiring you to include a header-file while also defining a specific constant in only one place that turns the header file into a c-file is actually one of the more benign workarounds you see.
by bertil | 2025-07-23 12:42:29+00:00
That summarizes a common pattern where chat bots are not fixing the cost of having humans handle your problems, but the fact that either the app or the human process doesn’t have the permission it needs, and chatbots have not been optimized against those yet.

It’s an indictment of how decisions are made at those companies, not a vote for the relevance of chatbots.