MurphyA/hacker-news huggingface dataset:
by dang | 2025-07-19 21:57:15+00:00
Of course it's not fine.

If you see a post that ought to have been moderated but hasn't been, the likeliest explanation is that we didn't see it. You can help by flagging it or emailing us at hn@ycombinator.com.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
by dang | 2025-07-19 21:58:35+00:00
No, that's certainly not the case.

If you see a post that ought to have been moderated but hasn't been, the likeliest explanation is that we didn't see it. You can help by flagging it or emailing us at hn@ycombinator.com.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

The other thing, though, is that views differ about how such comments should be classified. What seems like an outrageous "general attack" to one reader (especially if you feel passionately about a topic) may not at all land that way with the rest of the community. For this reason, it's hard to generalize; I'd need to see specific links.
by Doxin | 2025-07-19 22:00:23+00:00
> They're not stuffing it in a mattress

How do people get (and stay, and get ever more) rich if not by accumulating wealth? They aren't stuffing it under a mattress, no, but they also aren't spending it significantly.

What do you expect a millionaire to do if you hand him $10? how about giving a homeless person $10? My intuition is that money is going to get spent a lot quicker by the latter.

We've tried trickle-down economics and it clearly doesn't work. Let's try trickle-up economics for a while, see what that does.
by bvrmn | 2025-07-19 22:00:33+00:00
I consider built-in buffering as a huge win.

* For example python gives you buffered by default streams. It's an amazing DX.

* In case of Zig you as a developer should be explicit about buffer sizes.

* You could opt-out to unbuffered any time.

* Allows for optimization without leaky "composable" io stack.
by torginus | 2025-07-19 22:00:52+00:00
Thing is, for example, all of classical physics can be derived from Newton's laws, Maxwell's equations and the laws of Thermodynamics, all of which can be written on a slip of paper.

A sufficiently brilliant and determined human can invent or explain everything armed only with this knowledge.

There's no need to train him on a huge corpus of text, like they do with ChatGPT.

Not sure what this model's like, but I'm quite certain it's not trained on terabytes of Internet and book dumps, but rather is trained for abstract problem solving in some way, and is likely much smaller than these trillion parameter SOTA transformers, hence is much faster.
by tialaramex | 2025-07-19 22:01:03+00:00
Take optimisation, another task like interpolation which the machine does to transform our program text into an executable

We'd like exhaustive optimisation, in fact that can't be done and today we're used to a relatively aggressive optimisation which would not have been possible fifty years ago, but we're nowhere close to optimal for non-trivial programs.

Or correctness, it seems as though global static analysis should be possible, at least for something modest like a typical Unix utility - nope, that is known to be mathematically impossible for even quite modest software, only local analysis is at least plausible and its effects are much more limited than we might hope.
by hmry | 2025-07-19 22:01:07+00:00
I strongly dislike "this feature could be abused, so we won't add it" as reasoning for language design decisions. It just doesn't sit right with me. I think designing to avoid "misuse" (i.e. accidentally shooting yourself in the foot) is great, but avoiding "abuse" just reads as imposing your taste onto all users of your language. I don't like this, so nobody should be able to do it.

But oh well, if you're using Zig (or any other language using auteur-driven development like Odin or Jai or C3) you've already signed up for only getting the features that the benevolent dictator thinks are useful. You take the good (tightly designed with no feature bloat) and the bad ("I consider this decision unlikely to be reversed").
by mrosett | 2025-07-19 22:01:32+00:00
Checkpoint inhibitors (which are the primary driver of improved cancer treatment over the last 15 years and generate > $50B/year in sales) generally don't look very good preclinically. Even their clinical data can be hard to interpret prior to a large scale trial, which led to them almost being shelved.

The catch here is that only two targets (PD(L)-1 and CTLA-4) turned out to work well in humans. All of the other immunotherapies that looked mediocre preclinically turned out to also be mediocre or entirely ineffective in humans.
by maxwellg | 2025-07-19 22:02:15+00:00
> Why does the ID Token have a signature?

The ID Token can be passed from the Identity Provider to the Relying Party (RP) in a few ways.

When `response_mode=id_token` is used, the ID Token can be passed in the front channel directly to the RP during a browser redirect. Since the ID Token is coming from the browser, it must be signed to ensure that a malicious actor can't tamper with it. Otherwise an actor could swap out a `sub` or an `email` claim and the RP would be none the wiser.

The ID Token can also be returned from the `/token` endpoint after exchanging an authorization code. Since the `/token` endpoint is a back channel call over HTTPS, the ID Token doesn't necessarily need to be signed here to avoid tampering. The RP can trust that TLS gets the job done. However, there are substantial benefits to having it be signed:

- If ID tokens were only signed sometimes, we'd have two different standards for how to construct and handle an ID Token, which would be quite confusing.

- Signed ID Tokens can be passed around to assert identity to other entities within the system. For example, there are some promising draft specifications that explore exchanging ID Tokens for access tokens in other systems. This is only possible because the ID Token cannot be tampered with.

https://datatracker.ietf.org/doc/draft-parecki-oauth-identit...
by stack_underflow | 2025-07-19 22:02:15+00:00
It sounds like they're doing something similar to Seagate's Field Access Reliability Metrics (FARM) log where IIRC it's much harder to reset or forge their wear-leveling/usage stats, vs SMART metrics which certain manufacturers seem to clear when drives are re-certified[0]. I've seen this tool[1] mentioned often in /r/DataHoarder discussions about checking whether second hand drives have had this stat-reset done. I'm assuming it compares `smartctl --log=farm` output with the attribute/device-statistic log counter values.

A friend and I have been building our own solution[2] for monitoring these wear-leveling attributes on NVMe and SATA drives, with the focus being on tracking and visualizing trends over time. We both have a large collection of drives in various servers and laptops and found that SMART metrics can be reported somewhat inconsistently from vendor to vendor so what started as a simple shell script to scrape `smartctl` output has now turned into a lightweight desktop agent that attempts to normalize all these inconsistencies and let us focus on the actual signals while also allowing us to define alerts/notify us of anomalies via email - maybe something HN users will find useful.

Fun fact: did you know that most drives maintain a pool of spare sectors/cells that are used by the firmware to replace blocks that have failed? It's one of the many metrics we like to track and visualize in Sentinowl [2]!

[0] https://github.com/gamestailer94/farm-check/tree/main

[1] https://www.heise.de/en/news/Fraud-with-Seagate-hard-disks-D...

[2] https://sentinowl.com/
by matheusmoreira | 2025-07-19 22:03:16+00:00
We agree. I consider Bolsonaro a cowardly rat who betrayed everyone who ever supported him. He was in the USA while people were protesting in his name and literally going to jail for him.

He's still the person who managed to revive brazilian nationalism against all odds and despite the hipocrisy. Surely that's not in dispute here?
by readthenotes1 | 2025-07-19 22:03:49+00:00
Because using one word for two different things can lead to confusion, and over time will simply lead to us creating a different word.

They, as you probably know, is 3rd person plural.

You might look up the history of thee, thou, and you. And then consider why y'all is taking the world by storm.

Sweden has "hen". I often use it while writing
by cosmic_cheese | 2025-07-19 22:03:49+00:00
I’ve been saying for a while now that browsers need something closer to a proper UI toolkit, or at minimum “batteries included” primitives built in for ages now. It’d be a much-needed paving of a desire path that’s been so heavily trodden it’s become a canyon.

The WASM approach holds promise too and is interesting to me for opening up support for non-JS languages, but a built in UI toolkit would bring the advantage of not needing a compiler or toolchain (just like the traditional web) which can be advantageous and lowers the bar for entry.
by homebrewer | 2025-07-19 22:03:57+00:00
This will break many things that rely on installation scripts to work properly.

Use a better package manager that always disables installation scripts and lets you whitelist only those you absolutely need (like pnpm — which asks you post-install if any scripts were necessary, and reruns those you confirm).

Also avoid horrible tire fires like eslint that require several hundreds of unvetted dependencies. If you work alone and are disciplined, it's perfectly possible to write good TS without a linter. If not — use biomejs.dev (zero external dependencies) or `deno lint`.

Also node can easily be isolated from the rest of the system through bubblewrap/firejail:

$ ls -a ~ . .. code

https://wiki.archlinux.org/title/Bubblewrap

https://wiki.archlinux.org/title/Firejail
by muglug | 2025-07-19 22:04:22+00:00
No, this is very much an AI overview thing. In the beginning Google put the most likely-to-match-your-query result at the top, and you could click the link to see whether it answered your question.

Now, frequently, the AI summaries are on top. The AI summary LLM is clearly a very fast, very dumb LLM that’s cheap enough to run on webpage text for every search result.

That was a product decision, and a very bad one. Currently a search for "Suicide Squad" yields

> The phrase "suide side squad" appears to be a misspelling of "Suicide Squad"
by cultureswitch | 2025-07-19 22:04:27+00:00
It is entirely unreasonable to prevent a general purpose model to be distributed for the largely frivolous reason that maybe some copyrighted works could be approximated using it. We don´t make metallurgy illegal because it's possible to make guns with metal.

When a model that has this capability is being distributed, copyright infringement is not happening. It is happening when a person _uses_ the model to reproduce a copyrighted work without the appropriate license. This is not meaningfully different to the distinction between my ISP selling me internet access and me using said internet access to download copyrighted material. If the copyright holders want to pursue people who are actually doing copyright infringement, they should have to sue the people who are actually doing copyright infringement and they shouldn't have broad power to shut down anything and everything that could be construed as maybe being capable of helping copyright infringement.

Copyright protections aren't valuable enough to society to destroy everything else in society just to make enforcing copyright easier. In fact, considering how it is actually enforced today, it's not hard to argue that the impact of copyright on modern society is a net negative.
by crawshaw | 2025-07-19 22:05:13+00:00
We are in a strange world today because our MTU was decided for 10mbps ethernet (MTU/bandwidth on a hub controls latency). The world is strange because 10mbps is still common for end-user network connections, while 10gbps is common for servers, and a goodly number of consumers have 1gbps.

The range means MTU varies from reasonable, where you can argue that an IW of anything from 1-30 packets is good, to a world where the MTU is ridiculously small and the IW is similarly absurd.

We would probably be better off if consumers on >1gbps links got higher MTUs, then an IW of 10-30 could be reasonable everywhere. MTU inside cloud providers is higher (AWS uses 9001), so it is very possible.
by MichaelZuo | 2025-07-19 22:05:49+00:00
The only reason any businesses using tricks can get away with it, for any significant time, is because their customers rather pay less and endure some tricks than pay more to the honest upright folks elsewhere.

So it’s the customers themselves intentionally seeking out less than completely honest businesses to spend their money at because it’s X% cheaper.

Hyatt is typically considered an above average chain but I don’t think any HN reader would have thought them to be 100% honest and straightforward in 100% of locations.
by Jtsummers | 2025-07-19 22:05:55+00:00
What's "noise dived"? I presume you mean "nose dived".

But it did not explode, it crashed. The cause of the accident was FOD (Foreign Object Damage). Debris on the runway, a 17"x1" strip of titanium, caused damage to the tire which caused additional damage and ultimately the crash.

Perhaps less dramatically, but that's not a unique-to-Concorde kind of accident. FOD is taken seriously in the aviation industry.
by GeekyBear | 2025-07-19 22:06:46+00:00
More information on the new node:

> TSMC's A14 is brand-new process technology that is based on the company's 2nd Generation GAAFET nanosheet transistors and new standard cell architecture to enable performance, power, and scaling advantages. TSMC expects its A14 to deliver a 10% to 15% performance improvement at the same power and complexity, a 25% to 30% lower power consumption at the same frequency as well as transistor count, and 20% - 23% higher transistor density (for mixed chip design and logic, respectively), compared to N2. Since A14 is an all-new node, it will require new IPs, optimizations, and EDA software than N2P (which leverages N2 IP) as well as A16, which is N2P with backside power delivery.

https://www.tomshardware.com/tech-industry/tsmc-unveils-1-4n...
by charlieyu1 | 2025-07-19 22:07:01+00:00
This answer from o3 looks better. There are still some holes, Lemma 1 works on the four right-most columns, then the model tries to apply it to any four columns. "Hence at least four columns lack a vertical line; take the last four columns above." is a slip in logic, and Lemma 1 doesn't work for any two columns. For example, if we choose columns 1, 3, 5, 7 as columns lacking a vertical line, then we can take a sunny line with slope -1/2 and this will meets at all these four columns. Still, this looks more promising than what I got.

Interesting result from Gemini, I don't know its thought process but it seemed like Gemini tried to improve from its own previous answer and then got there.
by bob1029 | 2025-07-19 22:07:01+00:00
I think the cleanest, most compelling backup strategies are those employed by RDBMS products. [A]sync log replication is really powerful at taking any arbitrary domain and making sure it exists in the other sites exactly.

You might think this is unsuitable for your photo/music/etc. collection, but there's no technical reason you couldn't use the database as the primary storage mechanism. SQLite will take you to ~281 terabytes with a 64k page size. MSSQL supports something crazy like 500 petabytes. The blob data types will choke on your 8k avengers rip, but you could store it in 1 gig chunks - There are probably other benefits to this anyways.
by FireBeyond | 2025-07-19 22:07:08+00:00
Hah, an apartment complex I was at had me go sit in the PM's office prior to our move out inspection. "She'll be with you in a minute". Without snooping (I just caught my name on a form on her desk out of the corner of my eye), I noticed that it was my move out inspection form.

It already had remarks on it like "blinds dirty, need professional cleaning", "scuffs on drywall, needs painting", "carpet stains, need professional cleaning".

Huh.

She comes in, grabs the paperwork from her desk and says "Alright, let's do this". "Actually, I couldn't help but notice you'd already started charging me for things before we've even inspected the apartment". Cue some stammering. "Oh... uhh... that's strange. That must have already been on the form when I copied it from someone else's" (Oh, really, the printed form with my info with blue pen writing?).

And then there was the time that I needed a six month lease, but the PM company didn't want to do less than 12. I said "what it I pay the six months in full, up front, and the lease has no extension, so you know that I'll be gone and you can be planning for the next tenant in advance?". They talk to the owner, sure, that will work. I write a check for $14,000, six months rent at $2,000/mo, plus a security deposit. "That will be $18,000, actually." Huh? "We also need first and last month." Uhhh, what? It took far too long to explain to them that they were getting first, last, and the intermediary in the form of $12K. And got the distinct impression, from the stubborn inability to "comprehend" and "explain" that they thought that I wouldn't question it and just hand over another $4,000.
by FirmwareBurner | 2025-07-19 22:08:07+00:00
There is no such thing as "global cooperation" in our reality for things beyond platitudes. That's only a fantasy for sci-fi novels. Every tribe wants to rule the others, because if you don't, the other tribes will rule you.

It's been the case since our caveman days. That's why tribes that don't focus on conquest end up removed form the gene pool. Now extend tribe to nation to make it relevant to current day.
by TacticalCoder | 2025-07-19 22:08:45+00:00
> So you could either use readonly media (like Blurays) or PULL is mandatory.

Or like someone already commented you can use a server that allows push but doesn't allow to mess with older files. You can for example restrict ssh to only the scp command and the ssh server can moreover offer a chroot'ed environment to which scp shall copy the backups. And the server can for example daily rotate that chroot.

The push can then push one thing: daily backups. It cannot log in. It cannot overwrite older backups.

Short of a serious SSH exploit where the ransomware could both re-configure the server to accept all ssh (and not just scp) and escape the chroot box, the ransomware is simply not destroying data from before the ransomware found its way on the system.

My backup procedure does that for the one backup server that I have on a dedicated server: a chroot'ed ssh server that only accepts scp and nothing else. It's of course just one part of the backup procedure, not the only thing I rely on for backups.

P.S: it's not incompatible with also using read-only media
by antonkar | 2025-07-19 22:09:09+00:00
Imagine taking the whole Web, removing spam, duplicates, bad explanations

It will be the free new Wikipedia+ to learn anything in the best way possible, with the best graphs, interactive widgets, etc

What LLMs have for free but humans for some reason don’t

In some places it is possible to use copyrighted materials to educate if not directly for profit
by zahlman | 2025-07-19 22:11:07+00:00
> why python needs N built-in ways to [do something where there should ideally be only one obvious way]

It's the same every time: because some people are unsatisfied with the existing ways and want new ones added, but other people will rain fire and brimstone if you remove the old ones.

(BTW: the exact — non-obvious — way the dashes are placed for that line of the Zen is apparently a deliberate joke.)
by cultureswitch | 2025-07-19 22:11:54+00:00
Let's see, how many times did I get robo-called in the last decade? Zero :)

Sometimes the regulations are heavy-handed and ill-conceived. Most of the time, they are influenced by one lobby or another. For example, car emissions limits scale with _weight_ of all things, which completely defeats the point and actually makes today's car market worse for the environment than it used to be, _because of_ emissions regulations. However, it is undeniable that that the average European is better off in terms of privacy.
by desolate_muffin | 2025-07-19 22:11:56+00:00
In addition to what others have complained about, another issue I haven't seen highlighted as much in the comments is the infuriating explosion of content length.

AI responses seem to have very low information density by default, so for me the irritation is threefold—it requires very little mental effort for the sender (i.e., I often read responses that don't feel sufficiently considered); it is often poorly validated by the sender; and it is disrespectful to the reader's time.

Like some of the other commenters, I am also not in a position to change this at work, but I am disheartened by how some of my fellow engineers have taken to putting up low effort PRs with errors, as well as unreasonably long design docs. My entire company seems to have bought into the whole "AI-first company" thing without actually validating if the outputs are worth the squeeze. Maybe sometimes they are, but I get a sense that the path of least resistance tends toward accepting lower quality code and communication.
by wtallis | 2025-07-19 22:12:02+00:00
If your "cost per transistor" calculation includes amortization of the fixed costs of taping out a chip, over the expected production volume, then you can sometimes genuinely end up with newer process nodes being more expensive. Design for more advanced nodes keeps getting more expensive, and mask sets keep getting more expensive. Even more so if you're pricing out a mature process node compared to early in the production ramp up of a leading edge node.

There's significant demand for older process nodes and we constantly see new chips designed for older nodes, and those companies are usually saving money by doing so (it's rare for a new chip to require such high production volumes that it couldn't be made with the production capacity of leading-edge fabs).

Intel and AMD have both been selling for years chiplet-based processors that mix old and newer fab processes, using older cheaper nodes to make the parts of the processor that see little benefit from the latest and greatest nodes (eg. IO controllers) while using the newer nodes only for the performance-critical CPU cores. (Numerous small chiplets vs one large chip also helps with yields, but we don't see as many designs doing lots of chiplets on the same node.)
by daneel_w | 2025-07-19 22:14:17+00:00
With valuable I should've elaborated that it's my set of constantly changing daily-use data. Keychain, documents and notes, e-mail, bookmarks, active software projects, those kinds of things.

I have a large amount of memories and "mathom" as well, in double copies, but I connect and add to this data so rarely that it absolutely does not have to be part of any ongoing backup plan.
by Aurornis | 2025-07-19 22:16:06+00:00
> Regulation with active enforcement is the only civil way.

What regulation? What enforcement?

These terms are useless without details. Are we going to fine LLM providers every time their output is wrong? That’s the kind of proposition that sounds good as a passing angry comment but obviously has zero chance of becoming a real regulation.

Any country who instituted a regulation like that would see all of the LLM advancements and research instantly leave and move to other countries. People who use LLMs would sign up for VPNs and carry on with their lives.
by anal_reactor | 2025-07-19 22:16:17+00:00
I wouldn't say it has a good function on its own, but rather it's a mitigation strategy. People's fragile egos are a fact and this is not going to change anytime soon. So if you want to have a big organization, eventually you'll need to accommodate those who can't tolerate anything even remotely offending. Only organizations that aren't focused on growth can afford having a personality.