MurphyA/hacker-news huggingface dataset:
by comprev | 2025-07-23 19:50:55+00:00
> code editor [with] high-performance collaboration with humans and AI

When investors are involved this immediately changes to:

> Our goal is to build a product which will hopefully return more than our financial investment.

I get the feeling many HN contributors to this discussion forget that Zed is not a software project like Neovim, Nano or Emacs (etc.) which rely on donations and/or sponsors to either pay developers or cover required infrastructure costs.

It's a product backed by investors who - one day - will demand their pound of flesh, and "features" like AI are added to market the product to _more_ investors.

Perhaps the use of AI itself inside the product will also be tracked to steer potential opportunities for the investors themselves.

Like many fellow HN'ers, I use Zed on a daily basis, and it's no different than Google search or Facebook - "If a product from investors is free, YOU are the product"
by shadowgovt | 2025-07-23 19:51:19+00:00
Yes, good idea. We should all go in together to build our own datacenter in The Dalles! Who's with me?

(More seriously though: the real challenge to this approach is that cloud compute resources are a game changer and they can be at best approximated with the high-latency connections of hundreds of distributed users. The problem to solve goes a bit past "everyone should host their own email..." And even that is a tall order if you want your email to actually be sent and received and to not drown in spam).
by TheFreim | 2025-07-23 19:51:36+00:00
> But it sounds like one big "no girls allowed" kind of treehouse

There is absolutely nothing wrong with this. It's actually completely fine, and good, for people to voluntarily form social groups based on a shared interests and traits. The movement to oppose this sort of thing has been a large factor in the deterioration of social life for many people. You are not entitled to membership in a community of close-knit friends.
by kurmiashish | 2025-07-23 19:51:37+00:00
This article explores how AI coding agents (GitHub Copilot, Claude Code, etc.) operating in CI/CD environments introduce novel security risks that traditional EDR solutions can't detect. The key insight: these agents have elevated privileges to create branches, open PRs, and execute code based on natural language instructions - but organizations have zero visibility into what they're actually doing behind the scenes. The post highlights real attack scenarios where agents can be manipulated through behavioral exploitation rather than direct compromise. For example, tricking an agent into generating subtle vulnerabilities in PRs that human reviewers might miss, or having them trigger malicious workflow runs through seemingly innocent issue comments. Most interesting is the "context gap" problem - traditional security tools see low-level system calls but miss the AI decision chain that led to those actions. When an agent downloads from gist.githubusercontent.com, is it fetching legitimate dependencies or malicious code? Without CI/CD-aware monitoring, you can't tell. The article is part of a series examining these risks and demonstrating runtime monitoring approaches specific to AI-powered development workflows.
by cyberax | 2025-07-23 19:51:49+00:00
You can easily do this. Protobuf supports pluggable writers, and iterating over a schema is pretty easy. We do it for the JSONB.

I'm not sure the purpose, though. Protobuf is great for its inflexible schema, and CBOR is great for its flexible data representation.

A separate CBOR schema would be a better fit, there's CDDL but it has no traction.
by reliabilityguy | 2025-07-23 19:52:01+00:00
Google, Meta, MSFT, Apple, and many many others.

My (perhaps moronic, but hey, I’m not an expert) metric is this: if a company X constantly buys other companies just for the sake of preventing competition —- it’s bad, and we risk to have a monopoly. Which, we almost do have with Google, Apple, and many others.

I mean, it’s a fine line to thread: companies should be able to do M&As, but at the same time, they should not be allowed to become monopolies.
by crazygringo | 2025-07-23 19:53:00+00:00
Which is a bizarre suggestion.

You don't slice individual portions of meat before serving. If I order a pork chop or a ribeye at a restaurant, I'd be horrified if it came pre-sliced.

And for something like an entire roast, you want to slice shortly before serving so it doesn't get too cold.

Just account for carry-over cooking and cook it less initially, or sous vide.
by thewebguyd | 2025-07-23 19:53:10+00:00
> My guess is there would have been some grumbling about not having anything new to offer, but also relief that bugs were being fixed. It would have been a bit of a non-event.

Depending on what Google has to say about Pixel & Gemini in August, I think it would have been much more than grumbling. Apple is in a damned if they do damned if they don't situation. Under the surface of liquid glass, there really isn't even anything new coming unless they have some hardware limited features planned for the iPhone 17 launch.

It's clear this "redesign" was as you said, a panic project to cover for not delivering on AI, again for a second year and having nothing to show for WWDC. Just coming out with "we fixed some bugs" would cause a PR shitstorm. Even more so if Google gets any further ahead integrating Gemini into Pixel w/ personal context like what Apple wanted to achieve with Siri/AI, plus their own redesign (Material 3 Expressive, which is actually looking really nice IMO).

> This seems more like a seismic negative event, with a lot of criticism from all quarters.

Except from normal users/non enthusiasts. My kids and her friends all installed the dev beta and are absolutely enamored with liquid glass and think it's the coolest thing ever. Mind you, these are generations of folks that weren't around for Vista/7 Aero, etc and are now obsessed with that era from a fashion and design POV. "Fruitigier aero aesthetic" and all that. These are also people that would never switch platforms no matter what Apple does because of iMessage and social status/social pressure, so Apple is in no danger of losing any marketshare over this unless Google/Android somehow becomes "cool" again and can generate enough social pressure amongst the youth.
by kelnos | 2025-07-23 19:53:15+00:00
I've been running testing/trixie since the end of 2023 or so. (I generally always run testing, but stick with stable for ~6 months after stabilization, in order to avoid lots of package churn in new-testing.)

It's been what I expect from Debian: boring and functional. I've never run into an issue where the system wouldn't boot after an update (I usually update once every 2-4 weeks when on testing), and for the most part everything has worked without the need to fix broken packages or utter magic apt incantations.

Debian has always been very impressive to me. They're certainly not perfect, but what they can do based on volunteers, donations, and sponsors, is amazing.
by echelon | 2025-07-23 19:53:42+00:00
> The hard part is these workers are doing the job to survive life.

Tech companies used to hire all the brilliant engineers because they were worried about startups eating their lunch.

Without antitrust enforcement, they've grown large enough that they can essentially bleed money in any of their non-core markets for decades without it impacting them. So this clearly isn't the case anymore.

We need to:

(1) get the DOJ/FTC/EU/ASEAN/etc. to slap the FAANG / Mag 7 hard. Bust them up into many companies. It would probably even result in greater market value being created as these companies are inefficiently sitting on gold mountains that they do not monetize and also making insane malinvestments that simply waste millennia of human engineering in stupid ways that have absolutely no potential of succeeding. But more than anything, this oxygenates the field for competition and provides greater upside to the financial / labor / innovation capital that are actually doing the work.

(2) start lots of startups that erode the key money makers of these companies. They're quite vulnerable right now. And they've laid off a lot of highly skilled labor.

Google should be four or five companies, at minimum. And it's time that the governments of the world demand it.
by Forgeties79 | 2025-07-23 19:54:02+00:00
“Attack” doesn’t exclusively mean physical assault/restraining people. It’s called a “DDoS attack” after all. You’re creating a strict and narrow definition that most of the world does not subscribe to.

If I say “stop attacking me” during a heated argument no one thinks you’re physically assaulting me. That would be ridiculous.
Show HN: Vacation Maximizer – Maximize PTO by taking days off around holidays
by belchiorb | 2025-07-23 19:54:13+00:00
Hey! In my last job I was constantly wondering when it would be best to take days off so I could enjoy the most days off in a row, so I made this tool!

It tries to schedule PTO around holidays so that you get the most consecutive time off while spending as few days as possible.

You can set some constraints, customize the holidays and define mandatory vacation days (in case your company mandates them).

If you try for 2025, you should see results for the rest of the year. If there are unscheduled days, it's because there isn't a particularly good period to take them off. (I should make this clearer in the site, to be honest).

Let me know if you have any questions or comments and hope you get value out of it!

Bernardo
by krapp | 2025-07-23 19:54:28+00:00
We're not comparing the sum total of all possible means by which humans can die, we're comparing ideologies committing willful murder, and more abstractly, theism versus atheism.

Religion has been killing people for thousands of years, whereas Nazism and Communism haven't even existed for centuries.

There is no rational calculus by which one can justify banning Nazi and Communist ideology because of their death tolls and extremism and not also ban the practice of every major religion.
by jasonthorsness | 2025-07-23 19:54:33+00:00
The last time I had checked (this was over a year ago) there was nothing that provided world-wide data in a consistent format except the paid APIs, of which only one had a good historical data service.

I could switch my site to just use NWS and be US only I suppose; better than just being completely off. Adding all the weather services of every country in the world is too much for me (and why I guess the paid services are value-add).
by LinchZhang | 2025-07-23 19:54:42+00:00
The Rising Premium of Life, Or: How We Learned to Start Worrying and Fear Everything.

In this article, I argue that “our premium for life” – that is, our willingness to keep living, and our willingness to pay to avoid incremental chances of dying – has gone up over time. I argue that this cannot be explained by wealth alone. I trace three main factors that might result in this change: wealth effects, safety-risk feedback loops, and secularization, and argue that this shift has had profound implications for how we organize society.
by serbuvlad | 2025-07-23 19:55:24+00:00
The one thing I love about VSCode is how trivially I can fire it up on a container or on a remote machine via SSH. If Zed had this I would switch tomorrow.

So my question for Zed users is: does it?

The UI is a tad idiosyncratic on Linux (can't speak for Macs) but DAMN is it fast, I love the generality of tasks.json (haven't played with debug.json yet), by far the best system I've ever used, and everything just works well out the gate.
by adamgordonbell | 2025-07-23 19:55:37+00:00
“Air your weirdness” is great advice. It’s framed here as “start a blog,” which can feel trite, but the larger point is powerful: don’t hide what makes you different.

I spent years smoothing out my quirks until I realized those quirks are what people find compelling. Ironically, aspiring influencers sometimes fake eccentricity. Think “Liver King”, when genuine oddity is far more interesting.
by open-meteo | 2025-07-23 19:55:39+00:00
I’ve been building an open-source weather API over the past few years. It pulls in data from a wide range of global and local high-resolution weather models. The API is free to use without an API key, though there are commercial options available. I'm the sole owner behind it. No VC funding or outside backing.

The core tech is tuned for performance, using local gridded files instead of a traditional database or response caching. This efficiency is what allows it to stay free.

You can try it here: https://open-meteo.com
by nickf | 2025-07-23 19:56:08+00:00
Not quite that simple, no. It's a good reason, and while CRL and OCSP don't really work well - CRLite/OneCRL, CRLsets and valid all go some way to making revocation reasonably effective. Having an effective way to rotate all certificates, quickly, is a bigger reason. 1k -> 2k RSA took too long. SHA1 -> SHA2 took waaaaay too long. Changing anything about the webPKI takes too long unless everyone is on short lifetimes. The post-quantum bogeyman looms, too. Heartbleed and unforced CA errors become way less of a problem is everyone is forced to rotate monthly.
by mmcnl | 2025-07-23 19:56:21+00:00
You are absolutely right. Most people here are probably commenting from their MacBooks while their personal information is being sent to the cloud by Apple Intelligence and somehow that's fine. Both Brave and Signal are seeking attention by doing performative active that do absolutely nothing to increase the privacy of the end user.

Recall is already opt-in. It's fully on-device, nothing gets sent to the cloud (unlike Apple Intelligence which gets no hate at all but is worse because it sends your data to the cloud). You can disable Recall for specific apps at the OS level.

Both Brave and Signal add a feature that already exists at the OS level and then write ludicrous attention-seeking blog posts about it. Why? If you don't trust the OS to honor your settings and not spy on you, then you should consider the device compromised and you shouldn't be using it anyway. And if you're somehow still using it, why would you enable Recall on a device that you don't trust? That scenario simply doesn't exist, yet both Brave and Signal fail to mention that in their blog posts they write to gain internet points on communities like HN.
by mattlondon | 2025-07-23 19:56:25+00:00
Hypothetically, it be possible to achieve the same thing with a shared tailscale network, right? But can you kinda "federate" tailnets like this? So independent tailnets owned and run by individuals, but networked together into an inter-tailnet?

You miss the fun and games of running your own DNS infra etc I guess.
by treetalker | 2025-07-23 19:56:30+00:00
Imagine Bondi or any other prosecutor stating that sex crimes against children will not be prosecuted because doing so would require the disclosure or use of child-pornography material. Nonsense.

This really underscores Bondi's lack of values and her pattern of saying and doing whatever is most expedient to benefit herself. Instead of doing what is best for the victims (an important part of being a prosecutor) and what is best for the American public and America's governmental institutions (an important part of being the US Attorney General), she is helping to insulate and hide those responsible (likely including her boss). That is the same type of behavior that her underlings at DOJ are encouraged or commanded to prosecute as conspiracies or aiding and abetting crimes. Shame!
by worik | 2025-07-23 19:56:35+00:00
I use duckduckgo. Their AI assistant is very useful and has improved the quality of their search results, immeasurably IMO

I have avoided Google search for over a decade

I did try the searches mentioned in the article and it fools duck.al just like Googl. It links to Eduardo Valdés-Hevia's site, so the lesson is "follow the link"

The search results themselves are hopelessly polluted by SEO rubbish
by xori | 2025-07-23 19:56:45+00:00
I've been wanting to do this for ages. Originally I wanted to do this at the home router level, but that quickly got shut down when I got a test net up and running and my friends could control the Chromecasts in my house.

For us a "tailscale" equivalent with SoftEther is what we used to manage the DNS/Tunneling for our fileshare/services.

So cool to see more people playing in this space. Please post more! <3
by deepsun | 2025-07-23 19:56:50+00:00
Browsers layout engines are pretty smart, and also optimized for speed at the same time, which makes them very complex. I can do one or the other in my code, but both is too hard. Now add there security.

But Google having more people working on Chrome than on Android I would say all the low-hanging optimizations have already been optimized, and all that's left is pretty complex even for teams of thousands.
by kybernetikos | 2025-07-23 19:57:02+00:00
Yes, I worry that we're in for an age of stagnation, where people are hesitant to adopt radically new languages or libraries or frameworks because the models will all be bad at them, and that disadvantage will swamp any benefit you might get from adopting an improved language/library/framework.

Alternatively every new release will have to come with an MCP for its documentation and any other aspects that might make it easier for an LLM to talk about it and use it accurately.
by Jerry2 | 2025-07-23 19:57:38+00:00
I'm convinvinced that CEO-employee wage gap is due to this not-so-well known legal case from 1919: Dodge v. Ford Motor Co. [1]

Basically, in 1919, Henry Ford sought to reinvest the Ford Motor Company’s profits into raising employee wages and expanding hiring, arguing that sharing success with workers would strengthen the economy and the company’s long-term prospects. However, minority shareholders John and Horace Dodge (who also ran their own competing auto company) sued Ford, claiming that his actions violated the fiduciary duty to maximize profits for shareholders.

The Michigan Supreme Court ruled in favor of the Dodges, declaring that a corporation’s primary obligation was to serve the financial interests of its shareholders and not broader social goals or even the well-being of its employees. This decision established a legal precedent that continues to shape corporate law even today and reinforcing the doctrine of "shareholder primacy" and limiting the ability of companies to prioritize stakeholders (like workers or communities) over investor returns.

It's been downhill for employees since.

[1] https://en.wikipedia.org/wiki/Dodge_v._Ford_Motor_Co.
by bee_rider | 2025-07-23 19:57:50+00:00
I’m not sure of that. I expect most of the posters here are more like the equivalent of a skilled blacksmith.

I mean, it is a little weird because compensation these days usually includes stock, so, some ownership of the company. But not much real decision making power beyond the limited-scope decisions around we implement their will.

Maybe a consultant could be considered like a vassal?
by GCA10 | 2025-07-23 19:57:50+00:00
My father was one of the scientific Principal Investigators (PIs) who analyzed the Apollo 11 lunar samples, back in 1969. Flipping through some of his notes from back then, it sounds as if a rotating assortment of bureaucrats injected themselves into the chain-of-custody with weird and embarrassing effects. To wit:

Some Agriculture Department folks decided that their legal authority to quarantine soil samples brought into the U.S. applied to lunar soils, too. They insisted on building a three-week quarantine facility with slivers of lunar samples, exposed to "germ-free mice born by cesarean section." Only after the mice survived this ordeal was it safe to release the fuller batch of samples.

Another character insisted that the aluminum rock boxes be sealed, while on the moon, with gaskets of indium (soft, rare metal) which would deform to create a very tight seal. The geochemists on earth protested, in vain, that this procedure would ruin their hopes of doing any indium analysis of the samples themselves, shutting down an interesting line of research. No luck in changing the protocol. Turns out that the indium seals didn't work, and the rock boxes reached the earth-based quarantine facilities with normal air pressure anyway.

There's more silliness about trying to keep the lunar samples in a hard vacuum while designing rigidly mounted gloves that could be used to manipulate/slice/divide the samples without breaking the vacuum. Maybe we know today how to sustain flexible gloves in such an environment. We didn't, back then.
by shellfishgene | 2025-07-23 19:58:37+00:00
Yes the 0.02% thing is a bit disingenuous because he knows better: the bases the chip covers were specifically picked because they are variable in the human genome. They don't have "your genome", but as most of it is the same for everyone those 640k snps give much more information than 0.02% of the letters of a book would.
by palata | 2025-07-23 19:58:46+00:00
It's kind of playing on the words to make a prediction that couldn't be wrong:

> I predict that 70% of engineers will transition into systems integration-like roles within five years.

Arguably, this already the case. Most software engineers already "integrate libraries" (or do you rewrite your libc for every project?). Most hardware engineers already "integrate components".

> Most engineers will no longer design or build. They’ll integrate.

But integrating is designing and building.

So the whole article boils down to "AI tools will probably stay".
by thewebguyd | 2025-07-23 19:58:51+00:00
> They could, at the very least, only use the touch screen for things that you don't want to adjust while driving.

My 2019 crosstrek is like this, and I dread the day I need to retire it. Physical controls for everything, supports carplay+android auto, and the only thing the touch screen is used to adjust are sound balance, and auto-headlight sensitivity.
by spacechild1 | 2025-07-23 19:58:52+00:00
> Rust is fantastic for writing HTTP servers, microservices, and desktop applications.

In which world is Rust fantastic for writing desktop applications? Where are the mature Rust UI frameworks?

> Desktop apps sing when written in Rust.

What does this even mean?

> A lot of AI powered desktop apps are being written in Rust now.

For example? And what do you mean by "AI powered desktop apps"?
by recursive | 2025-07-23 19:59:05+00:00
LLMs can make false statements. The distinction about real vs simulated intent doesn't seem useful.

LLMs can have objectives. Those objectives can sometimes be advanced via deception. Many people call this kind of deception (and sometimes others) lying.

If we have these words which apply to humans only, definitionally, then we're going to need some new words or some new definitions. We don't really have a way to talk about what's going on here. Personally, I'm fine using "lying".
by westurner | 2025-07-23 19:59:09+00:00
"Fourier lightfield multiview stereoscope for large field-of-view 3D imaging in microsurgical settings" (2025) https://www.spiedigitallibrary.org/journals/advanced-photoni... :

> Abstract: We present the Fourier lightfield multiview stereoscope (FiLM-Scope). This imaging device combines concepts from Fourier lightfield microscopy and multiview stereo imaging to capture high-resolution 3D videos over large fields of view. The FiLM-Scope optical hardware consists of a multicamera array, with 48 individual microcameras, placed behind a high-throughput primary lens. This allows the FiLM-Scope to simultaneously capture 48 unique 12.8 megapixel images of a 28 × 37 mm field-of-view, from unique angular perspectives over a 21 deg × 29 deg range, with down to 22μm lateral resolution. We also describe a self-supervised algorithm to reconstruct 3D height maps from these images. [ to 11 μm ] [ ... ]

48 x 12.8 megapixels = 614.4 megapixel lightfield microscope