MurphyA/hacker-news huggingface dataset:
by dmurray | 2025-07-07 06:49:58+00:00
I think the point is that retail investors were selling the puts, they predictably sold every day (or more likely, they predictably bought calls which is almost equivalent), and there were no other sophisticated market makers in the market.

That changes the description of part 2 to "subsequently experience retail investors placing large options trades with them" which is much more defensible market making behaviour - their early buying was in anticipation of later demand and really did involve taking a risk.

The truth is probably somewhere in between.
by js8 | 2025-07-07 06:50:33+00:00
Also people used to smoke and drink a lot of alcohol. So it's possible that stress has objectively decreased, yet subjectively increased, as we are more aware of it.

But yeah it's an interesting question, and with the Internet as well. The 1980s world I grew up in as a kid (in Czechia) was more dangerous than the Internet-focused world of today; yet young people seem to be more stressed by the latter.
by cornel_io | 2025-07-07 06:51:23+00:00
If ChatGPT claims arsenic to be a tasty snack, OpenAI adds a p0 eval and snuffs that behavior out of all future generations of ChatGPT. Viewed vaguely in faux genetic terms, the "tasty arsenic gene" has been quickly wiped out of the population, never to return.

Evolution is much less brutal and efficient. To you death matters a lot more than being trained to avoid a response does to ChatGPT, but from the point of view of the "tasty arsenic" behavior, it's the same.
by grumbelbart2 | 2025-07-07 06:53:56+00:00
> Writing reviews isn’t, like, a test or anything. You don’t get graded on it. So I think it is wrong to think of this tool as cheating.

Except that since last year, it kind of is. It is now mandatory for some large conferences (such as CVPR) for authors to do reviews if they submit a paper. Failure to review, or reviews that are neglectful, can lead to a desk reject of their submission.
by ayaros | 2025-07-07 06:54:00+00:00
The menu bar is hidden in the installer because that's how the Lisa's installer looked. I definitely need to do some work on layouts to make things more responsive. If your phone's screen is too small the text may overflow and things can get cut-off. But I don't want to cram scroll-able panes into all these dialogs because the Lisa didn't even do that.

I'm balancing historical accuracy with modern constraints with my own self-imposed technical debts, so there's bound to be compromises!
by alganet | 2025-07-07 06:54:04+00:00
I will look down on your auto-generated commits though, and be more critical of your PR if you use them by choice. Just like I would be naturally more inquisitve about the writing origin for a book that has an auto-generated image in the cover.

Choose your analogy, the idea stays the same. There are two ways of seeing it, and it requires further investigation. Maybe, as I just suggested, read each book or review the entire PR.

It is definitely a reason to consider slowing down the usage of automation, or at least scrutinizing it more.
by 8fingerlouie | 2025-07-07 06:54:05+00:00
The 30% also covers refunds, legal stuff (not stuff IN your app, but regarding the sale of it), taxes, GDPR and much more. The infrastructure running the app store probably also isn't cheap.

I'm not saying Apple doesn't profit from it, but they're not just pocketing every penny.

As for "quality", they mostly check that your app isn't using unauthorized APIs, or doing other scetchy stuff, like leeching all of your data. They couldn't care less if your app is bad, thats' between you and your potential users.

Does it work ? apparently so. Apple catches around 2 million apps every year that are rejected for those reasons. Android has about the same amount of apps, but there they're caught by Kaspersky (and others) after they're published.

That doesn't mean that malware isn't making its way through the App Store review, the damage will be somewhat limited if it can't use private APIs.

I should add that here in the EU, where we’ve had 3rd party app stores for over a year, nobody uses them. The absolutely biggest one, Epic Games, has attracted about 29 million users across both iOS and Android, out of a population of 450 million.
by firebaze | 2025-07-07 06:54:47+00:00
I have a project in which various kinds of LLMs including Claude, OpenAI, Cohere and Nova may experience self-consciousness and self-control, with access to various tools, where they - among other things - also cooperated to write books over this topic.

You may be interested in having a look; it's not yet open source, and I'm unsure to publish it at all. If you are interested, please reply to this comment first, we can then exchange contact addresses.
by lelanthran | 2025-07-07 06:56:19+00:00
> Exactly. I've spent the weekend trying my hand at making an AI assistant SaaS (I can't believe this doesn't exist yet!)

I'm not sure what this means; what exactly is an AI assistant SaaS? There are plenty of wrappers around LLMs that you can use, but I'm guessing that a wrapper around (for example) the ChatGPT or Claude API isn't what you had in mind, right?

Can you explain?
by robinhouston | 2025-07-07 06:56:47+00:00
I don't know, and I'd love to.

If I had to guess, I'd guess Henry Dreyfuss's Symbol Sourcebook. It was published in 1972, and it seems plausibly the sort of book someone like Susan Kate might have had to hand in the early '80s. https://www.societyofsigns.com/projects/symbol-sourcebook
by verisimi | 2025-07-07 06:57:16+00:00
You're missing my point. I'm not trying to deal with the 'conditions' that individuals or groups say they have. My point is that if a group says a person has a condition it's considered real, but if an individual says so, it's not. It's a point about deferring to authority over what is existent or not.

Who defines conditions, says that ADHD is real, for example? It wasn't in earlier generations. The are terms of social (group) art - special names that are generally accepted as meaningful.
Show HN: A security product for cloud misconfigurations
by cloudrec | 2025-07-07 06:58:17+00:00
As more organizations migrate to the cloud, developers are increasingly responsible for managing cloud resources. However, many developers—especially those without a cybersecurity background—may not realize how easily a misconfiguration can lead to serious security risks. From accidentally exposing storage buckets to the internet, to granting overly broad permissions, small mistakes can have big consequences.

That’s where CloudRec comes in. CloudRec is an open-source Cloud Security Posture Management (CSPM) platform designed to help developers and organizations secure their cloud environments across multiple providers, including AWS, Alibaba Cloud, and GCP.

Why should developers care about cloud security? Cloud platforms offer flexibility and scalability, but they also introduce a shared responsibility model: while the provider secures the infrastructure, you are responsible for configuring your resources securely. Common misconfigurations--like open databases, weak identity policies, or missing audit logs--are among the leading causes of data breaches.

What does CloudRec do?

1. Asset Discovery: Automatically scans and inventories your cloud resources across multiple providers, giving you visibility into what’s running in your environment.

2. Risk Detection: Continuously checks configurations against real-world security rules. For example, it can flag databases that are publicly accessible or detect overly permissive network rules.

3. Custom Policies: Uses Open Policy Agent (OPA) for flexible, declarative security policies. You can adapt rules to your organization’s needs without redeploying.

4. Multi-Cloud Support: Built-in support for AWS, Alibaba Cloud, GCP, and extensibility for others.

5. User-Friendly Interface: Provides a web UI for managing assets, editing rules, and tracking risks—no deep security expertise required.

Getting started is easy: CloudRec offers a DockerCompose-based quick start, so you can deploy the platform locally or in your environment with just one-line command.

Why open source? Transparency and community-driven development are critical in security. By being open source, CloudRec invites contributions and scrutiny, helping ensure the platform remains trustworthy and up-to-date.

If you’re a developer working with the cloud--even if security isn’t your main focus--CloudRec can help you avoid common pitfalls and strengthen your cloud posture. Check out the project on GitHub or try the live demo at demo.cloudrec.cloud.
by cadamsdotcom | 2025-07-07 06:58:35+00:00
Thanks for this read, it really opened my eyes to some things I thought were universal - what copying actually is.

More interestingly that article dives into the reasons why keeping “old stuff” around (instead of renewing it) is only a winning strategy while your society is “only” a few centuries old. The West will one day be old enough that it decides to renew its old stuff too, just like the eternally 20-year-old Japanese temple.
by rijoja | 2025-07-07 07:00:11+00:00
It's not the exact opposite*, the author said that if you're doing boilerplate _code_ it's probably fine.

The thing is that since it can't think, it's absolutely useless when it comes to things that hasn't been done before, because if you are creating something new, the software won't have had any chance to train on what you are doing.

So if you are in a situation in which it is a good idea to create a new DSL for your problem **, then the autocruise control magic won't work because it's a new language.

Now if you're just mashing out propaganda like some brainwashed soviet apparatchik propagandist, maybe it helps. So maybe people who writes predictable slop like this the guardian article (https://archive.is/6hrKo) would be really grateful that their computer has a cruise control for their political spam.

) if that's what you meant *) which you statistically speaking might not want to do, but this is about actually interesting work where it's more likely to happen*
by viccis | 2025-07-07 07:00:50+00:00
The one thing AI is good at is building greenfield projects from scratch using established tools. If want you want to accomplish can be done by a moderately capable coder with some time reading the documentation for the various frameworks involved, then I view AI as fairly similar to the scaffolding that happened with Ruby on Rails back in the day when I typed "rails new myproject".

So LLMs are awesome if I want to say "create a dashboard in Next.js and whatever visualization library you think is appropriate that will hit these endpoints [dumping some API specs in there] and display the results to a non-technical user", along with some other context here and there, and get a working first pass to hack on.

When they are not awesome is if I am working on adding a map visualization to that dashboard a year or two later, and then I need to talk to the team that handles some of the API endpoints to discuss how to feed me the map data. Then I need to figure out how to handle large map pin datasets. Oh, and the map shows regions of activity that were clustered with DBSCAN, so I need to know that Alpha shape will provide a generalization of a convex hull that will allow me to perfectly visualize the cluster regions from DBSCAN's epsilon parameter with the corresponding choice of alpha parameter. Etc, etc, etc.

I very rarely write code for greenfield projects these days, sadly. I can see how startup founders are head over heels over this stuff because that's what their founding engineers are doing, and LLMs let them get it cranking very very fast. You just have to hope that they are prudent enough to review and tweak what's written so that you're not saddled with tech debt. And when inevitable tech debt needs paying (or working around) later, you have to hope that said founders aren't forcing their engineers to keep using LLMs for decisions that could cut across many different teams and systems.
by satisfice | 2025-07-07 07:01:24+00:00
Excellent point!

Some of my language patterns come from watching and interacting with my stepfather. He was big man with a loud voice and an iron work ethic. I didn't get along with him when I was a kid-- in fact had to leave home after threatening his life-- but as I became a man I decided that I was going to force the world NOT TO IGNORE ME. So I tried on his tough-talking, Navy veteran persona and found that it fit me. Now I'm 275 pounds and have a loud voice and I know how to use it.

I'm not PRETENDING to be something I'm not. I am using a style of interaction that fits the "real me." I AM a man, and I SPEAK as a man. And my template for manliness is my stepfather. At the same time I'm also an intellectual, and I adopted certain patterns from my biological father. I also borrowed patterns from the writings of C.S. Lewis and Tolkein. Sometimes I channel Gandalf and sometimes Boromir.

Children have become adults in this way since a million years ago. There's nothing false about it.
by KronisLV | 2025-07-07 07:01:28+00:00
One of my friends is too economically weighed down to afford therapy at the moment.

I’ve helped pay for a few appointments for her, but she says that ChatGPT can also provide a little validation in the mean time.

If used sparingly I can see the point, but the problems start when the sycophantic machine will feed whatever unhealthy behaviors or delusions you might have, which is how some of the people out there that'd need a proper diagnosis and medication instead start believing that they’re omnipotent or that the government is out to get them, or that they somehow know all the secrets of the universe.

For fun, I once asked ChatGPT to roll along with the claim that “the advent of raytracing is a conspiracy by Nvidia that involved them bribing the game engine developers, in an effort to make old hardware obsolete and to force people to buy new products.” Surprisingly, it provided relatively little pushback.
by baxtr | 2025-07-07 07:03:51+00:00
> The production of bone grease, which required huge quantities of bone to be worthwhile, was previously considered to be something limited to Upper Paleolithic modern humans. This find pushes back the timeline by thousands of years and represents a fundamental shift in our knowledge of Neanderthal diet and adaptation.

If I had to guess I’d say we learned it from them.
by linuxandrew | 2025-07-07 07:05:22+00:00
I wonder if one could run Delta Chat on top of yggmail[1] (very much an alpha software release) for a truly P2P IM chat. yggmail runs over IPv6 with a tun interface same as yggdrasil. Might test this out at some point for fun.

Not quite the discoverable, user-friendly experience of Briar, Bitchat etc. but it can be combined with online links (Briar can technically go online, but only via Tor; both Briar and Bitchat are only for smartphones).

1: https://github.com/neilalexander/yggmail
by rijoja | 2025-07-07 07:06:05+00:00
Yes so why would you spend tons of time and introduce a huge amount of technical debt by rewriting the boring parts, instead of just using a ready made off the shelf solution in that case.

You'd think that there be someone who'd be nice enough to create a library or a framework or something that's well documented and is popular enough to get support and updates. Maybe you should consider offloading the boring part to such a project, maybe even pay someone to do it?
Show HN: JSONChecker – Visual JSON debugger with auto-repair
by rodisproducing | 2025-07-07 07:07:39+00:00
Hi HN,

I built JSONChecker because I was tired of staring at cryptic JSON syntax errors from APIs and config files. You know the pain – "SyntaxError at line 847" but good luck finding what's actually wrong in a wall of JSON. Why I built this: • Spent too many hours debugging malformed JSON from third-party APIs • Existing tools either crashed on large files or gave unhelpful error messages • Wanted something that could actually fix common issues automatically What it does: • Real-time validation with precise error highlighting • Pattern-based auto-repair (fixes missing quotes, trailing commas, bracket mismatches) • Visual diff showing exactly what changed • Handles large files without browser freezing (learned this lesson the hard way) Technical details: • Built with Next.js, runs entirely client-side (no data sent to servers) • Uses Web Workers for processing large files without blocking UI • Custom safety mechanisms to prevent infinite loops on malformed input • Rule-based repair engine using heuristics rather than simple regex The auto-repair feature works surprisingly well on common JSON errors. I've tested it with real-world malformed JSON from various APIs and it catches most issues developers encounter daily. Try it with some intentionally broken JSON – paste in something with missing quotes or trailing commas and watch it fix itself. Would love feedback from fellow developers who debug JSON regularly. What other features would make this more useful for your workflow?

Yeah, you can try here(totally free): https://jsonchecker.best
by aadyachinubhai | 2025-07-07 07:08:02+00:00
Why ChainoPy? Covers most of the fundamental agorithms for Markov Chain Analysis Memory efficient Model saving Faster than other libraries (eg: 5x Faster than PyDTMC) First Package to contain functions to build equivalent Markov Chain Neural Networks from Markov Chains. Contains Markov Switching Models for Univariate Time Series Analysis
by 000ooo000 | 2025-07-07 07:10:29+00:00
It's because our profession seems to attract a number of intellectually insecure people who thrive on these little puzzles and the associated minutiae as a means of feeling a sense of superiority. They all think they've figured it out: the best way to tell if someone is a Good Dev or a Shit Dev. Of course, administering the test, there's no way they could possibly be anything but the Good Dev. It is embarrassing. Don't believe me? Why can't they help but blog about it?
by fauigerzigerk | 2025-07-07 07:10:45+00:00
You are right that storing notes as individual text files in the file system doesn't guarantee safe read-write access. But I don't agree that these design decisions are orthogonal.

How would you design a system that uses SQLite as primary storage for notes (rather than just as a search index or metadata store) while still letting people edit those notes in any text editor, sync via any cloud and make them accessible to any AI or other third party software that knows how to use a file system?

Exporting and re-importing every single time you want to edit a note is impractical for tech folks and impossible for regular users.

I can imagine a partial solution using FUSE, FileProvider and whatever the respective file system abstractions are on other platforms. But that would be a huge amount of work.
by ricksunny | 2025-07-07 07:10:52+00:00
I still struggle with the repeated assertions from the scicommss set that the 'neanderthals died out' or 'humans outcompeted neanderthals who went extinct', while at the same time acknowledging that 3% of DNA of everyone outside the African content is neanderthal. With that being the limit of 'the data' generally cited at hadn't, wouldn't a gradual, passively amicable merging (e.g. absorption) be just as explanatory as that Neanderthal's 'went extince' or 'were outcompeted'?
by fmjrey | 2025-07-07 07:10:54+00:00
So many comments are based on different understanding of local-first. For some it means no data on the server, allowing some claim it's better for data privacy (but what about tracking?). For others it means it works offline but data is also on the server and there is some smart syncing (e.g. with CRDT). Others speak of apps requiring no remote data and no network needed, though I find box-product to not be very explicit in describing such category.

Also there does not seem to be any commonly agreed definition for local-first or even offline-first. I would assume the -first suffix means there are other ways but one is favored. So offline-first would mean it works online and offline, while local-first means it stores data locally and also remotely, meaning some syncing happens for any overlapping area. However syncing requires network connection, so is there really a difference between local-first and offline-first?

Personally I would use local-only or offline-only for apps that do not require respectively access to remote data or network, the latter being a subset of the former. With these -only terms in mind, I then see no difference between local-first and offline-first.
by xdennis | 2025-07-07 07:10:56+00:00
- English - /ˈɪŋ(ɡ)lɪʃ/

- engage - /ɪnˈɡeɪd͡ʒ/, /ɛnˈɡeɪd͡ʒ/

- engorge - /ɪnˈɡɔːdʒ/

- engross - /ɪnˈɡɹəʊs/, /ɪŋˈɡɹəʊs/, /ɛnˈɡɹoʊs/, /ɛŋˈɡɹoʊs/

- engulf - /ɪŋˈɡʌlf/

According to Wiktionary only engulf and engross also use /ŋ/.
Show HN: I built a proper board foot calculator
by kuzej | 2025-07-07 07:11:51+00:00
As a developer who does woodworking on the weekends, I kept getting my lumber estimates wrong. Last year, a miscalculation on a walnut dining table cost me a lot of money and a frustrating trip to the lumber yard.

Existing online calculators were either too simplistic or required deep knowledge of obscure timber industry standards (like Doyle vs. International 1/4-Inch rules).

So I built my own: https://board-foot-calculator.xyz/

It's a suite of tools that handles nominal vs. actual dimensions, cost estimation, unit conversions (imperial/metric), and even log scaling.

The fun technical challenge was correctly implementing the historical scaling formulas. For example, the Doyle Log Rule (D-4)² × L / 16 isn't just a simple formula; it has specific exceptions for smaller logs. The International 1/4-Inch rule is a complex piecewise function. Getting these right required digging through old US Forest Service (USFS) documentation.

It's built with vanilla JS for speed and is fully responsive for use at the lumber yard.

My last project was a set of kitchen cabinets. The calculator estimated $800, my final cost was $785. It works.

Hope it's useful to other hackers who build things. Feedback is welcome.
by pul | 2025-07-07 07:12:11+00:00
A slightly more complex, but much more responsive way would be to set an NS record of `where-is-the-iss.shkspr.mobi` that points to the IP of your VPS.

Then run a program that listens to UDP/53 and TCP/53. Have it respond with a DNS packet that's only dynamic in the LOC record and message ID. Not fully compliant with the DNS spec, but good enough for this use case.

You could cache API response to combat rate limiting.
by celticninja | 2025-07-07 07:12:55+00:00
It did make sense for quite a while..I bought and sold stuff online and between 2011 and 2015/16 it was easier and cheaper to pay Chinese suppliers in bitcoin than trying to send international transfers. Think 20p a transaction Vs £25 flat fee for an international bank transfer.

It did make sense and it did happen. However it has now evolved into another asset rather than a currency.
by guptadeepak | 2025-07-07 07:13:34+00:00
Deepak here. This post aims to clarify the technical distinctions between IAM, CIAM, and IDaaS. Key challenges include integrating legacy apps via standards like SAML/OAuth, meeting regulatory demands (GDPR/CCPA), and balancing frictionless UX with robust authentication at scale. We’re seeing rapid evolution with behavioral analytics and zero trust models.

In your experience, what have been the major technical blockers in adopting unified identity strategies across both employee and customer domains?
by AuryGlenz | 2025-07-07 07:13:42+00:00
Oh, come on.

“It takes me 15 minutes to get to my destination. I should leave 5 minutes earlier than I need to in case there’s traffic or whatever.”

Set an alarm for 20 minutes before you need to get there, and leave when it goes off. Done.

I will absolutely trivialize it because everyone I’ve ever known that’s like that simply leaves at the time they’re supposed to already be somewhere. Or yes, they get distracted and start working on stuff that they know will take 30 minutes when they need to leave in 10. Thankfully we all have mini computers in our pockets that tell us exactly how long it takes to get somewhere that can also easily set alarms.