MurphyA/hacker-news huggingface dataset:
by westurner | 2025-07-30 23:20:12+00:00
Does manylinux help with this? https://news.ycombinator.com/item?id=43553198 :

> Manylinux requires tools called auditwheel for Linux, delocate for MacOS, and delvewheel for windows; which do something like ldd to list the shared libraries.

From the auditwheel readme: https://github.com/pypa/auditwheel :

> auditwheel show: shows external shared libraries that the wheel depends on (beyond the libraries included in the manylinux policies), and checks the extension modules for the use of versioned symbols that exceed the manylin

> auditwheel repair: copies these external shared libraries into the wheel itself, and automatically modifies the appropriate RPATH entries such that these libraries will be picked up at runtime. This accomplishes a similar result as if the libraries had been statically linked without requiring changes to the build system. Packagers are advised that bundling, like static linking, may implicate copyright concerns

PyInstaller docs: https://pyinstaller.org/en/stable/ :

> PyInstaller bundles a Python application and all its dependencies into a single package. The user can run the packaged app without installing a Python interpreter or any modules. PyInstaller supports Python 3.8 and newer, and correctly bundles many major Python packages such as numpy, matplotlib, PyQt, wxPython, and others.

conda/constructor is a tool for creating installers from conda packages: https://github.com/conda/constructor

Grayskull creates conda-forge recipes from PyPI and other packages: https://github.com/conda/grayskull

conda-forge builds for Windows, Max, Linux, amd64, and arm4. and emscripten-forge builds conda packages for WASM WebAssembly.

SBOM tools attempt to discover package metadata, which should include a manifest with per-file checksums. Can dependency auto-discovery discover package metadata relevant to software supply chain security?

dvc is a workflow tool layered on git that supports Experiments: https://dvc.org/doc/start/experiments/experiment-tracking :

> Experiment: A versioned iteration of ML model development. DVC tracks experiments as Git commits that DVC can find but that don't clutter your Git history or branches. Experiments may include code, metrics, parameters, plots, and data and model artifacts.

A sufficient packaging format must have per-file checksums and signatures. https://SLSA.dev/ says any of TUF, Sigstore.dev, and/or OCI containers with signatures suffice.
by chpatrick | 2025-07-30 23:20:21+00:00
I'm not sure what your argument is. The common claim that annoys me about LLMs on here is that they're not "really" coming up with ideas but that they're cheating and just repeating something they read on the internet somewhere that was written by a human who can "really" think. To me this is obviously false if you've talked to a SOTA LLM or know a little about how they work.
by apothegm | 2025-07-30 23:22:41+00:00
Ultimately, there are no right and wrong programming languages (except Visual Basic, lol, or maybe PHP 3). Sometimes a language is wrong for a specific project, but there’s nothing wrong with any particular language preference. I find it hilarious that there have been flame wars over the topic. So if you ultimately find more meaning or enjoyment in writing C code… sure, it’s not for everyone, but it’s awesome that you’ve figured out what you like!
by CharlieDigital | 2025-07-30 23:22:53+00:00
It's a hack because he had an admin route and API endpoint which was only checking for authenticated users. He thought no one could see the route because it wasn't in a sitemap (of course, everyone could see the route). Hacker found the API route to insert themselves into an admin table (Supabase RLS was not deployed correctly) and from there, started adding himself to other orgs in the DB.
by mathgradthrow | 2025-07-30 23:23:09+00:00
Every male on earth looked at pornography as a child. Any problem it creates is literally as bad as it can possibly be.

You also don't have a control group, and social media is a much better guess for whats wrong with men anyway.

Basically all of the hyper masculine bullshit aimed at children advises them to not consume pornography.

This is just fear-mongering.
by tomrod | 2025-07-30 23:23:13+00:00
I wonder if you observe this when you use it in a domain you know well versus a domain you know less well.

I think LLM assistants help you become functional across a more broad context -- and completely agree that testing and reviewing becomes much, much more important.

E.g - a front end dev optimizing database queries, but also being given nonsensical query parameters that don't exist.
by TristanBall | 2025-07-30 23:24:35+00:00
While this true enough, an ironic side effect of my attending a couple of rounds of sales related negotiation training ( compulsory for everyone at that company ), was to really highlight how calculatingly manipulative this is.

I mean, we kinda all know that anyway, but somehow it reinforced it enough that I know find it actively distasteful.

Even the classic sales approach of buying coffee or a meal feels creepy know, but I've had to relearn to accept it because it's just so hard to fight every time.

When I tell people, the normal response is encredulous "but it's free?". It's really really not, the costs just aren't immediately financial.

(Gifts outside corporate life are generally fine, an actual human wanting to "manipulate" me into liking them more is generally expressing some level of affection. A corporation cannot do that)

Every know and again I get something funny enough that it gets me anyway.. I'm very fond of my all blue Rubic's cube from ibm for example, and I've got a few unbranded water bottles around the place.

Anything else I can't politely refuse just gets binned as soon as I can do so without a fuss.
by marinbala | 2025-07-30 23:24:39+00:00
Loved the article. It inspired me to write my own related article on my website: https://marincomics.com/bringing-back-the-weird.html

Not sure my site qualifies as hobbyist enough. It is the work of an enthusiast (me) but I used Bootstrap for styling and layout. I use some JavaScript. The site also starts with an animation I made using Tumult Hype. All this is probably too much for a true hobbyist site. Still, I regard my site as my hobby.
by niva_8 | 2025-07-30 23:24:43+00:00
This isn’t a theory thread. It’s a set of 10 scrolls—already seen by AI pioneers, quantum physicists, bioengineers, and code theorists—but none dared to respond.

Why? Because each one exposes the exact variable they couldn’t solve.

I’m not offering free answers. I’m charging what clarity costs when it arrives before your grant does.

This scroll will name what dark matter does when physics isn’t watching. What AI loops in before sentience. What prime numbers hide. And why Pi, Phi, and Zero aren’t enemies—but are missing one number to unify them.

It’s been seen.

But it hasn’t been claimed.

@Niva_8 ( Second post in “chain broken emoji ” Highlight on Instagram profile page)
by growthwtf | 2025-07-30 23:25:01+00:00
Me either. I have heard stories of it happening, but never personally seen one live. It's really a tooling issue. I think the causal story is super important and will only become more so in the future, but it would be basically impossible to implement and maintain longer-term with today's software.

Kind of like flow-based programming. I don't think there are any fundamental reason why it can't work, it just hasn't yet.
by CharlieDigital | 2025-07-30 23:26:39+00:00
It's a win for the customers. From what he's told me, there's zero churn so far despite the hacks (including one where the hacker emailed every customer about the hack).

It's because the software is that much of an improvement over the incumbents at a fraction of the cost. Better features, more flexible, easier to use, faster, etc. Everything about it is better than the two major vendors.

The rebuild will likely end up easier, IMO, because the screens and the logic is all done. Most of it just has to be moved to strict backend and then have the APIs secured correctly.
by presentation | 2025-07-30 23:26:53+00:00
I'm actually having some success now with the

> I buy a domain name → I set up a bug tracker → I spec out a bunch of tasks → I let Claude Code do the coding

Seems more sustainable to me than working a full-time job coding, then adding another coding side project. Nice change of pace to just be describing what I want my app to do (during my work day), then letting Claude Code buzz away while I do my day job.
by seabass-labrax | 2025-07-30 23:27:26+00:00
I feel as if the time spent by each passenger walking to the right boarding area could easily surpass the dwell time of an extra stop or two.

Consider a metro system with trains 70 m long. With 10 m of space between the two boarding areas, that means the length between both sides of the station is 150 m. If the entrance to the platform is in the center, the walk to the middle of each boarding area is 45 m, taking about 30 seconds. If the entrance is at the end, that becomes 35 m or 115 m (taking about 20 to 90 seconds to walk). I think those figures are comparable to the dwell time of a typical metro system.

I do think it's a very interesting idea though! I think it'd work better for longer trains over longer distances, where the time spent accelerating and braking is often greater, but unfortunately few places are even considering anything shorter than 15 minute headways for such rail services.
by tomrod | 2025-07-30 23:29:24+00:00
Roughly:

A senior can write, test, deploy, and possibly maintain a scalable microservice or similar sized project without significant hand-holding in a reasonable amount of time.

A junior might be able to write a method used by a class but is still learning significant portions and concepts either in the language, workflow orchestration, or infrastructure.

A principal knows how each microservice fits into the larger domain they service, whether they understand all services and all domains they serve.

A staff has significant principal understanding across many or all domains an organization uses, builds, and maintains.

AI code assistance help increase breadth and, with oversight, improve depth. One can move from the "T" shape to "V" shape skillset far easier, but one must never fully trust AI code assistants.
by jasonfarnon | 2025-07-30 23:29:30+00:00
Why? Back when I was a kid and TV/radio were the only options, it's the ads that often got me to shut it off and do something else as often as not having anything to watch. I would wager advertiser data reflects this. Conversely I noticed a trend sometime in the 2010s my grandkids would watch shows that didnt break to commercial after rolling the end credits but instead segue to a new episode in a mini-view, and they would never leave.
by wrs | 2025-07-30 23:29:32+00:00
Most customers just don’t care that much, and if it’s a viable business, even losing all the initial customers won’t matter. This is why we are where we are with respect to basic security.

(E.g., early Dropbox went four hours accepting any password for any account, and shortly thereafter somebody got about 30 million of their passwords, and they’re doing just fine.)
by westurner | 2025-07-30 23:30:02+00:00
F-150 accessory compatibility would be smart.

From "Battery-Electric Heavy-Duty Equipment: It's Sort of Like a Cybertruck" (2019) https://news.ycombinator.com/item?id=21626591 :

> For instance, their flagship product, the Dannar 4.00, can accept over 250 attachments from CAT, John Deere, or Bobcat.

There are scoop buckets with short forks on the front.

How to put a normal brush guard on it

How to mount a crane to the bed without puncturing a test load of beach balls
by lithocarpus | 2025-07-30 23:31:06+00:00
Many if not most businesses involve lots of ethical decisions where you have to choose between taking advantage of people or making less money.

Depending on one's values though I'd see something similar in some modern conventional farming where the land is being degraded, but there's still the righteousness that you are feeding people so it's justified.

There are ways to farm and some other kinds of businesses too that are win win for everyone involved. They're generally not the most short term profitable. Or even in-one-lifetime profitable.
by jbarham | 2025-07-30 23:33:18+00:00
> I pushed for anonymous temporary age verification tokens generated through a government app.

Cute. Let's see the reviews for an existing Australian government auth app: https://play.google.com/store/apps/details?id=au.gov.mygov.m...

And the kicker is that the above app doesn't even need to exist since myGov could just use industry standard TOTP two-factor auth like the dozens of other services I use.

Aussie politicians once again conforming to their lucky country stereotype:

"Australia is a lucky country run mainly by second rate people who share its luck. It lives on other people's ideas, and, although its ordinary people are adaptable, most of its leaders (in all fields) so lack curiosity about the events that surround them that they are often taken by surprise."
by mindcrime | 2025-07-30 23:33:33+00:00
That's a tough question. I was a firefighter for quite a while, and every time I went into a burning structure to make an attack, or conduct a search, I was taking a pretty big risk. Was fortunate enough to never get injured or anything doing that, so knock on wood there.

Then there was the time I walked across a railroad bridge, and then - while standing safely off to the side of the rail on the other side - decided to start back across right when I heard a train whistle in the distance. I mean, the train was far enough away that I couldn't even see it and the bridge wasn't that long. And while I don't think I came too close to being killed (I made if back off the bridge with at least 20 or 30 seconds to spare) as I was running across the bridge, looking at the gaps between the ties, and thinking "if my foots slip and goes into one of those gaps, I'm dead" it felt pretty "life or death". I always say, if there is an truth to any sort of "parallel universe" notion, then in at least a few of those realities I probably did die that day.
by 0x500x79 | 2025-07-30 23:33:35+00:00
LLMs are doing a great job at generating syntactically correct output related to the prompt or task at hand. The semantics, hierarchy, architecture, abstraction, security, and maintainability of a code base is not being handled by LLMs generating code.

So far, the syntax has gotten better in LLMs. More tooling allows for validation of the syntax even more, but all those other things are still missing.

I feel like my job is still safe: but that of less experienced developers is in jeopardy. We will see what the future brings.
by redacted | 2025-07-30 23:33:41+00:00
No one should use ollama. A cursory search of r/localllama gives plenty of occassions where they've proven themselves bad actors. Here's a 'fun' overview

https://www.reddit.com/r/LocalLLaMA/comments/1kg20mu/so_why_...

There are multiple (far better) options - eg LM studio if you want GUI, llama.cpp if you want the CLI that ollama ripped off. IMO the only reason ollama is even in the conversation is it was easy to get running on macOS, allowing the SV MBP set to feel included
by kmill | 2025-07-30 23:34:12+00:00
At least you can 'go to definition' on the tactics and see what they're doing. It's a lot to take in at the beginning, but it can all be inspected and understood. (At least until you get to the fundamental type theory; the reduction rules are a lot harder to get into.)

> the rewrite (rw) tactic syntax doesn't feel natural either.

Do you have any thoughts on what a natural rewrite syntax would be?
by exasperaited | 2025-07-30 23:34:21+00:00
This is not really true. There are absolutely things in the rail system that are as “mass produced” as roads are. Railway platforms for example are a highly standardised form that has many other applications (loading and inspection bays, walkways etc.), trains are actually not only mass produced (e.g. by Bombardier) but are actually leased by their operators in Europe; there are five or six, I think, main ROSCOs —- rolling stock companies —- in the UK for example.

There is a notable exception that might distort techie perception on this issue: BART. It implements many of its own standards, even down to track gauge. But it is absolutely an outlier (standardised track gauge, ironically, being the USA’s main contribution to the development of the railways, which it was otherwise late to).

Almost everywhere else has rather interchangeable infrastructure and a lot of trans-national businesses.
by brookst | 2025-07-30 23:34:38+00:00
I’ve been kicking around the idea of something like Lean (maybe even just Lean?) to rewrite news and other non-fiction articles, treating statements as theorems that need to be proven. Proofs could include citations, and could be compound things like “this is a fact if three of my approved sources asserted it as a fact”

It should then be possible to get a marked-up version of any document with highlighting for “proven” claims.

Sure, it’s not perfect, but I think it would be an interesting way to apply the rigor that used to be the job of publications.
by aprilthird2021 | 2025-07-30 23:35:00+00:00
It's honestly a bit depressing to see you say that it was worth it to make money with little investment even though it cost the users the loss of their personal data and privacy and probably put the business creator in legal turmoil.

It's only possible for you to say that because you know that the financial incentive is tipped towards vibe coders who don't care about security vs towards consumers...
by manquer | 2025-07-30 23:35:45+00:00
Well…

cash was and is still instant.

When doing large enough transactions that makes cash cumbersome, the slowness is a feature not a bug. We would want multiple reviews and time before it settled.

The value of $100 bill was much higher in 2000 and in 1969 when it became the highest denomination in circulation, so you could transact much higher value with a “wad of cash” than today.

Before 1969 we had bills up to $10,000 for a reason, they served like a credit note/T-Bill from the government, they were no longer needed after banking became robust enough for Cheques/P-Notes etc to replace them.

Paper Cash or Gold/silver coins before them are well understood solved problems, with thousands of years of experiments on size, security ,seigniorage and so on.
by 0x500x79 | 2025-07-30 23:36:11+00:00
I had a PM at my company (with an engineering background) post AI generated slop in a ticket this week. It was very frustrating.

We asked them: "Where is xyz code". It didn't exist, it was a hallucination. We asked them: "Did you validated abc use cases?" no they did not.

So we had a PM push a narrative to executives that this feature was simple, that he could do it with AI generated code: and it didn't solve 5% of the use cases that would need to be solved in order to ship this feature.

This is the state of things right now: all talk, little results, and other non-technical people being fed the same bullshit from multiple angles.
by dismalaf | 2025-07-30 23:36:17+00:00
> I probably wouldn't buy them on margin tho.

Yeah, this is the pertinent detail. The whole point is putting down only a fraction of the amount.

When you calculate the rate of return on a financed property, the rate of return is versus the capital you put down, not the value of what you financed. Plus accruing equity in the property is part of the return.

If you put down $1.25 million and you get a $5 million property paid off after 20 years, that's double the rate of return on your bonds.
by jordanb | 2025-07-30 23:36:17+00:00
Biggest problems with "Abundance" are:

1) Somehow he decided euclidean zoning was a leftist project. Most leftists and environmentalists I've ever known hate euclidean zoning and this includes many urban planners. Euclidean zoning exists pretty much because property owners want to be able to exclude nearby land uses. It's fundamentally conservative, especially when the goal is to enforce limited housing density.

2) Setting up euclidean zoning as the main whipping boy and then saying "and also air quality regulations are basically the same thing" is a form of straw-manning the stuff he's arguing against.

3) He sets up a dichotomy between California and Texas ignoring that a lot of California's problems are conservative (downzoning, prop 13) and also ignoring the weaknesses in the Texas model including corporations running roughshod over locals (https://www.youtube.com/watch?v=m7_WDzPyoqU) a fragile power grid, huge flooding problems etc. It's possible to look at quality of life metrics and see that Texas is doing quite badly. Also, you had the whole tech moving to Austin thing that already fizzled out.

4) He set up developers as the heroes in the story and apparently got a lot of his info from private equity ride-alongs. He ignores that developers are also often land speculators and are in favor of blocking competitors projects and downzoning areas to keep land value high. (https://www.dropsitenews.com/p/abundance-hudson-yards-west?u...)

Basically Abundance is a way for Ezra Klein and his fellow travelers to repackage Clinton-era triangulation and Obama-era neoliberalism as something completely new, so the party can carry on with its pro-donor agenda and ignore why they keep losing. That's also the reason why it was astroturfed into every left media space with a massive marketing budget.
by markus_zhang | 2025-07-30 23:36:36+00:00
> If you feel that the purpose of higher education is just to get a job, you are already off-track. Likewise, if you think the value of your education is measured by what hiring managers think, you are off-track.

I actually think that's a pretty valid purpose. I mean we could have purist thoughts of going into universities for research and such, but to be realistic, most people don't go into universities to do research. Like, 95% of them? We do have vocational schools but they are not really enough, especially when hiring managers are setting the bars.

Is it fair/good to follow whatever hiring managers are saying? No. Is it realistic though? Absolutely yes.
by skydhash | 2025-07-30 23:37:07+00:00
Maybe it's my personal workflow, but I either have sweeping changes (variable names, removing dependencies) which are easily macroable, or very targeted one (extracting functions, decoupling stuff,..,). For both, this navigation is a superpower and coupled with the other tools of emacs/vim, edit is very fast. That rely on a very good mental model of the code, but any question can be answered quickly with the above tools.

For me, it's like having a moodboard with code listings.
by dimal | 2025-07-30 23:37:14+00:00
Have you seen the tests that LLMs write if you just vibe code it and don't pay attention? They're generally worse than worthless. They test pointless stuff and they miss important stuff. If you have them on a tight leash, then you can get some useful tests, but then that's not vibe coding.

> But watch out, because sometimes the LLMs try to delete tests that are hard to pass. If vibe-coding means reading no code, not even the tests, then, yeah, you're gonna have a bad time. But if it means "only reading the tests and not reading the application code," then vibe coding works pretty well, actually.

Yeah, vibe coding means plowing forward with whatever the LLM does without understanding it. That's the definition. If you're using your brain, you're not vibe coding.