MurphyA/hacker-news huggingface dataset:
by roguecoder | 2025-07-24 18:11:31+00:00
How bodies related to food varies _wildly_. For example, my body has difficulty processing certain foods, so I lost a ton of weight switching from "healthy" fruits and veggies and plant-based protein to mostly pre-processed carbs and fatty meat. (Low FODMAP, for folks who are curious: be ready to learn chemistry to figure out what is safe to eat.)

That diet isn't going to have the same effect for most people, but in my case it significantly lowered my inflammation and general discomfort, which led me to lose 90lbs with no actual effort on my part.

I knew one dude who was always hungry and it turned out he just desperately needed B12. Now he snacks on B12 gummies and feels much better. Debugging our bodies is more complicated than debugging a software program, but no programmer would say "Just run the program less!" if someone complained a program was eating up all the CPU.

The one thing that is always good for humans, whether we lose weight or not, is some physical activity. Whatever we can enjoy enough to do regularly, without injury, is a great choice.

I wish the medical profession would stop focusing on diet, when it doesn't understand it and calorie restrictive diets are one of two lifestyle components we know actually do contribute to obesity.
by Swizec | 2025-07-24 18:11:56+00:00
> The EV slows down much more quickly when slowing down, to the point where it's a good replacement for the brake

Are you comparing to an automatic ICE or a manual?

In my experience of driving EVs their engine braking is sub-par to what I'm used to at least from my motorcycle. Bikes have silly high compression compared to their weight. You def have to be careful about chopping the throttle.
by ashoeafoot | 2025-07-24 18:12:03+00:00
A joke? Even without trump gutting the agency, reality of the us spiraling into isolationism and the great game resuming without the us and without us armament suppliers, reveals the Centralized Incompetence Aggregated organisation as just a public rainmaking scam. Its whole nimbus nothing but left imagination with distinct racist overtones. Has that mighty CIA ever existed ? Is it in the room with us right now?
by 1234letshaveatw | 2025-07-24 18:12:13+00:00
For your own mental health, you need to take a breath and try and not take alternative viewpoints as personal attacks. The post I responded to referenced "efforts to try to reduce the number of cars on the roads instead of just replacing them 1:1 and calling it a day." i.e. reducing personal car ownership. Don't ignore the fact that people do extremely useful things with their cars- lifesaving activities. You obviously are attached to your phone, the same way people are attached to their personal cars. A little bit of empathy would go a long way here
by bitpush | 2025-07-24 18:12:33+00:00
> To send push notifications on Android, it is necessary to use a mechanism that requires storing device IDs. [..]

> [..] Apple’s ecosystem allows for push notifications to be sent without requiring us to store any user-identifiable information. This ensures that ICEBlock remains completely anonymous and secure.

So in one case the developer stores the mapping, and in the other case Apple stores the mapping. And that's a good thing?

It takes 1 subpoena to get access to that data from a large company.
by mingus88 | 2025-07-24 18:12:53+00:00
You are essentially asking what is safer than running arbitrary code from the internet sight unseen directly into your shell and I guess my answer would be any other standard installation method!

The OS usually has guardrails and logging and audits for what is installed but this bypasses it all.

When you look at this from an attackers perspective, it’s heaven.

My mom recently got fooled by a scammer that convinced her to install remote access software. This curl pattern is the exact same vector, and it’s nuts to see it become commonplace
by jgilias | 2025-07-24 18:13:05+00:00
Was it that common? Where I’m from that’s “winter driving mode” because it’s safer on slippery surfaces, but rarely anyone would do that in the summer time.

My EV is set on max regen mode though, and I sometimes drive without pressing the brakes, as there’s a paddle I can use to use regen for all my braking needs bar an emergency. It even has a name - single pedal driving.
by efitz | 2025-07-24 18:13:23+00:00
When I start a nontrivial coding task with AI, I added a “context” directory, instructions in the tool prompts how to use the files in that directory, and then I spent a couple hours using a thinking chat AI to generate the documentation I wanted (like “build me an API document for this library, the source code is at this URL and here are some URLs with good example code).

I’ve had generally good results with this approach (I’m on project #3 using this method).
by kube-system | 2025-07-24 18:13:25+00:00
Some vehicles repurpose shift paddles as a way to trigger regen braking. But they're pretty gimmicky and not really useful for driving. If you want to use regen in a vehicle that supports it, the brake pedal does that. And when regen is not enough, the hydraulic brakes are also used. But a "sometimes brake" pedal that only support regen sounds like a bad idea. Vehicle controls as essential as braking need to be consistant in how they respond to input behavior.
by gpm | 2025-07-24 18:13:52+00:00
There's a reason why rust devs qualify it as "memory safe" so frequently, we tend to agree that rust is, like virtually every current programming language, unsafe in other ways.

Memory safety is just the source of bugs that we've figured out how to eliminate. It's a significant source of really bad (hard to debug due to action at a distance, high impact, etc) bugs so that's worth a lot, but it's not perfect. And even then we have a more frequently used escape hatch to the memory-unsafe world than would be ideal from a safety perspective for practical reasons.

A more complete version of safety would be achieved with a language that proves code correct to arbitrary specifications. We aren't there yet for there being such a language that is practical for every day use. Personally I'm increasingly optimistic we'll get there sooner rather than later (say, within 20 years). Even then there will probably be specification level bugs that prevent a claim of complete safety...
by Kirby64 | 2025-07-24 18:14:36+00:00
'Main processor' meaning the SoC used in a modern high performance device. Phones, tablets, or computers.

Plenty of lower power or older stuff (RPI included) use older nodes just because that's available. Microcontrollers tend to use higher nodes (22, 40, or 55nm) just because they don't need the super high speed stuff.

Also, the RPI5 uses 16nm, not 22nm. Still not modern, but not unheard of for stuff like SBCs where performance is not particularly important compared to cost.
Ask HN: How are you checking the security of your vibecoded personal projects?
by lenerdenator | 2025-07-24 18:15:00+00:00
Last night I had a computational use case itch that needed scratching and some time to kill, so I did something I haven't done before: I sat down with GitHub CoPilot in agentic mode to vibecode. I'm a Python backend dev, and wanted a GUI-based program to view and edit .ADIF files on MacOS.

I worked through prompting it to make an Electron.js app (which I have no experience with) written in React (which I have only a slight amount of experience with) that can open the files and display their contents in an Ag-Grid element. I confirmed that it will at least open a test file before quitting for the evening.

I know generally what to look for when it comes to Python code and security, but am not so sharp with Electron.js and React. I could just throw the program out there as something to use on GitHub, but would like a minimum amount of QA and security review first, even if those come via AI.

It seems to me that vibecoding is a double-edged sword: no way could I have written that application in an evening by myself, but by the same token, I'm not familiar enough with the caveats of the software being generated to make a firm judgment on security and reliability risks. Even though this is just a little hobby-related project, I'd like to know I'm not shoving a piece of malware out there if there's a compromised JS library or the like in my project.

What tools, techniques, etc. do the denizens of HN use to accomplish this task?
by mrkeen | 2025-07-24 18:15:03+00:00
The only decisions that matter for languages that get adopted are the decisions that cause adoption.

JS went without static types, Go went without generics, PHP was just a tool for reducing html boilerplate. New languages love to stick null right in there. Rust isn't what Graydon Hoare wanted it to be. Chris Lattner called Swift a failure.

It's all up for criticism.
by tim333 | 2025-07-24 18:15:14+00:00
On the other hand China didn't ban petrol but has heavy incentives for electric and is now at about 50% EVs, similarly Norway is at about 90%. Not exactly pricing the externalities but it kind of works. Like in China I think if you want a vehicle you need a permit and can get one straight away for EVs but have to wait 8 years for petrol or something like that.
by bccdee | 2025-07-24 18:15:37+00:00
> Or that the game engine couldn't handle big boobs assets?

Given the choice between creating new "big boob" asset models for most of the many outfits in the game and simply capping breast size, it's hardly surprising that the developers chose the cheap, easy option.

Anyway, what alternative explanation are you proposing? Prudishness? The game has plenty of sex scenes, so it's not that.

> The breasts slider was just an example

Well it was a bad example. Dunno what to tell you.
by dmartinez | 2025-07-24 18:15:53+00:00
This is a great point.

In-person work has higher bandwidth and lower latency than remote work, so for certain roles it makes sense you wouldn't want to farm it out to remote workers. The quality of the work can degrade in subtle ways that some people find hard to work with.

Similarly, handing a task to a human versus an LLM probably comes with a context penalty that's hard to reason about upfront. You basically make your best guess at what kind of system prompt an LLM needs to do a task, as well as the ongoing context stream. But these are still relatively static unless you have some complex evaluation pipeline that can improve the context in production very quickly.

So I think human workers will probably be able to find new context much faster when tasks change, at least for the time being. Customer service seems to be the frontline example. Many customer service tasks can be handled by an LLM, but there are probably lots of edge cases at the margins where a human simply outperforms because they can gather context faster. This is my best guess as to why Klarna reversed their decision to go all-in on LLMs earlier this year.
by jchw | 2025-07-24 18:16:01+00:00
But correctness is not binary, it's more like a multidimensional spectrum. Your choice of programming language has some influence, as does standards and conventions, the ecosystem of your programming language, use of automated tooling like linting and testing, or even just ol' unreliable, discipline. Being a relatively greenfield language, Go is not in a terrible place when it comes to most of those things. Tons of automated tooling, including tools like the Checklocks analyzer or the many tools bundled with golangci-lint. Uber has done a pretty good job enumerating the challenges that remain, and even working at improving those issues too, such as with NilAway.

The question isn't "wouldn't you prefer more correctness?" it's "how much would you pay for how much of an improvement in correctness?".

Rust is still growing rapidly though, whereas Go is probably not growing rapidly anymore, I think Go has at least saturated it's own niche more than 50% and is on the other end of the curve by now. Last I checked Rust is the trendiest language by far, the one that people most wish they were writing, and the one that you want to be able to say your project is written in. So it would be extremely surprising to hear if there wasn't a growing Rust presence basically everywhere, SaaS's included.
by fn-mote | 2025-07-24 18:16:15+00:00
While I am not a fan of privacy-invading work, the ship sailed with Facebook/Meta a long time ago.

At least this is a little company, and the work they are doing is being directly sold to others.

I’m confident Meta (and other large AdTech companies) have more time and effort invested, but it’s not available to your company directly, only whatever the giants want to sell to you.

So at least as long as they are a small business, I’m guardedly supportive.
by pydry | 2025-07-24 18:16:21+00:00
You remind me of the haskell hype of ~2016-2018 where the community wrote tons of blog posts and passionate comments on HN about the theory of types and the "productivity boost" of their language while simultaneously producing a paltry output of actual useful software in the hands of actual users.

Im sure they were completely genuine in how they felt, just as i am sure you are too.
by MichaelNolan | 2025-07-24 18:16:39+00:00
In addition to food being much tastier than ever before, it’s also much cheaper. Despite current inflation and cost of living concerns, we spend far less on food than any time in history. Food in the 1960 was almost twice as expensive as it is today. Food costs used to be higher than housing costs!

https://www.ers.usda.gov/amber-waves/2020/november/average-s...

https://www.theatlantic.com/business/archive/2012/04/how-ame...
by scarface_74 | 2025-07-24 18:16:42+00:00
So go out and try to change the values of your typical rural evangelical Christian about gay rights or trans issues today. I’m not going to speak about other religions that I don’t know about personally.

When was the last time you hung around a group of conservative Christians? I am emphasizing a certain cohort of Christianity. I am well aware of the more liberal Christian churches that fight/fought for civil rights and treating all human beings decently.

How much time have you spent in the Bible Belt?

There are places in the south that held segregated proms as recently as 2014.

Once (the royal) you hurt my family or insult anyone I care about because of the color of their skin or about their sexuality, I don’t owe you forgiveness or an explanation for my right to exist overall or be in “your space”.
by layman51 | 2025-07-24 18:16:44+00:00
I was wondering about this because there is a part in the blogpost that specifically says his developer friend would not even do real-time copying from the other screen. Personally, I think that makes more sense to try to learn because I think if I am good enough at typing, I can get into a flow state where I’m just typing code that I’m not really making much sense of. There are moments where I realize that I don’t understand what I’m typing and that’s when I have to decide to keep transcribing or to slow down and read documentation.

It is also just a little bit tricky to do this if you are working with an LLM that is able to add additional code or do some other kind of refactoring.
by SkiFire13 | 2025-07-24 18:16:52+00:00
TBH segfaults are not necessarily a sign of memory unsafety, but _unexpected_ segfaults are.

For some examples, Rust (although this is not specific to it) uses stack guard pages to detect stack overflows by _forcing_ a segfault (as opposed to reading/writing arbitrary memory after the usual stack). Some JVMs also expect and handle segfaults when dereferencing null pointers, to avoid always paying the cost for checking them.
by tialaramex | 2025-07-24 18:17:10+00:00
Originally Rust is something altogether different. Graydon has written about that extensively. Graydon wanted tail calls, reflection, more "natural" arithmetic with Python style automatic big numbers, decimal for financial work and so on.

The Rust we have from 1.0 onwards is not what Graydon wanted at all. Would Graydon's language have been broadly popular? Probably not, we'll never know.
by reverendsteveii | 2025-07-24 18:17:30+00:00
>the link between economic development and obesity is likely related to food (dietary intake) [rather] than daily activity.

--you

>Food — not lack of exercise — fuels obesity

--the article headline

I'm being genuine and not at all snarky when I say I'm having a hard time seeing daylight between these two positions. I would love for someone to help me understand better please.
by lossolo | 2025-07-24 18:17:49+00:00
I can show you a trivial POC in C/C++ where someone opens a socket and ends up with a buffer overflow or UAF, both cases leading to memory corruption due to sloppy programming, and both easily exploitable for RCE.

Can you show me any reasonable proof of concept (without using unsafe etc.) in Go that leads to similar memory corruption and is exploitable for RCE?
by bawolff | 2025-07-24 18:17:50+00:00
> The study compares energy expenditure across different economic groups i.e. western people sitting in offices versus hunter-gatherers in Africa, and found that difference in energy expenditure does not account for differences in obesity, so points to consumption as the likely reason.

That seems like a kind of large assumption to make. Obviously it seems like it has to be either diet or exercise, but if the obvious answer was always right we wouldn't need to do studies in the first place.
by TMWNN | 2025-07-24 18:18:04+00:00
>Run 10 km 4 times a week and you will loose weight.

No.

I ran 10km three times a week and didn't lose a pound. <https://np.reddit.com/r/running/comments/1vq3k1/should_i_do_...> Every bit of my weight loss has always come from counting calories.
by spease | 2025-07-24 18:18:07+00:00
Whose interests corporations act in is not arbitrary, it’s tied to how they make money.

Meta and Google make their money primarily from advertisers, Apple makes money from consumers buying iPhones. One of the upsides to paying for something is that the company is incentivized to keep you paying or get you to pay more.

Something I remind people who buy cheaper Android phones and then complain about ads - the OS development is being subsidized by those ads. From Google’s perspective, securing their revenue stream is the justification for Chrome and Android’s existence. It’s not a purely altruistic move to fund their open source development.

Charts of the revenue stream for some major tech companies:

https://www.visualcapitalist.com/charted-how-does-meta-make-...

https://www.visualcapitalist.com/alphabets-revenue-breakdown...

https://www.visualcapitalist.com/charted-how-apple-makes-its...

https://www.visualcapitalist.com/how-amazon-makes-its-billio...

https://www.visualcapitalist.com/how-microsoft-makes-its-bil...

Older aggregate chart:

https://www.visualcapitalist.com/how-big-tech-makes-their-bi...
by JohnFen | 2025-07-24 18:18:09+00:00
I deeply disagree. Copyright is far more important than genAI is. Copyright makes it reasonable for people to publish things publicly. Without it, far less stuff is made public and we're all the poorer for it.

I do agree that current copyright law is overly burdensome and badly needs reforming, but I don't agree that it isn't important.
by analog31 | 2025-07-24 18:18:12+00:00
Musicians are still trained this way. The tunes in the Suzuki violin books are the ultimate covers. You can go to a beginning violin recital anywhere in the world and hear exactly the same tunes.

Musicians still use transcriptions of past recordings for their own performances.

Jazz musicians learn "standards." Even jazz improvisation, which you'd think should be 100% original, is taught using virtually the same short list of tunes, such as "Autumn Leaves."

Many musicians don't bother with original material at all, until they're absolutely sick of the standards.
by nikeee | 2025-07-24 18:18:12+00:00
I proposed a primitive for this in TypeScript a couple of years ago [1].

While I'm not entirely convinced myself whether it is worth the effort, it offers the ability to express "a number greater than 0". Using type narrowing and intersection types, open/closed intervals emerge naturally from that. Just check `if (a > 0 && a < 1)` and its type becomes `(>0)&(<1)`, so the interval (0, 1).

I also built a simple playground that has a PoC implementation: https://nikeee.github.io/typescript-intervals/

[1]: https://github.com/microsoft/TypeScript/issues/43505
by nemothekid | 2025-07-24 18:18:50+00:00
I might be missing something (We use sqlite for our embedded stores) - but I feel like "failing silently" is alarmist here.

1. If the WAL is incomplete, then "failing" silently is the correct thing to do here, and is the natural function of the WAL. The WAL had an incomplete write, nothing should have been communicated back the application and the application should assume the write never completed.

2. If the WAL is corrupt (due to the reasons he mentioned), then sqlite says that is that's your problem, not sqlite's. I think this is the default behavior for other databases as well. If a bit flips on disk, it's not guaranteed the database will catch it.

This article is framed almost like a CVE, but to me this is kind of like saying "PSA: If your hard drive dies you may lose data". If you care about data integrity (because your friend is sending you sqlite files) you should be handling that.
by thegreatpeter | 2025-07-24 18:19:07+00:00
I moved out of Lincoln Park (Chicago) 2 years ago because my wife almost got hit by a teenager stealing a car.

It wasn't the first or last car theft we witnessed.

Chicago is safe 90% of the time. Statistically speaking, you won't be a victim of a crime. That doesn't mean the crime isn't happening and it doesn't mean it's getting properly reported either. Crime is here.
by gpderetta | 2025-07-24 18:19:09+00:00
IIRC the point was that there was no sequence point between argument evaluation, so for example f(++i, ++i) was UB. Or maybe it was only for builtin operators?

Cppreference is not authoritative[1], but seems to support my recollection. In fact it states that the f(++i, ++i) was UB till C++17.

[1] https://en.cppreference.com/w/cpp/language/eval_order.html, Pre C++11 Ordering Rules, point (2).
by fxtentacle | 2025-07-24 18:19:21+00:00
"Tang skipped the fourth, fifth, and sixth grades in order to enroll at the University of Texas at Austin at the age of 14."

Oh wow, that is either insanely cool, or a huge loss. At my university, there were so many great parties that I feel like you'd be seriously left out of everything social going on if you're underage when joining.
by TheDong | 2025-07-24 18:19:42+00:00
> ZFS is usually not recommended for databases

Say more? I've heard people say that ZFS is somewhat slower than, say, ext4, but I've personally had zero issues running postgres on zfs, nor have I heard any well-reasoned reasons not to.

> What filesystems in the wild typically provide for this is weaker than what is advisable for a database, so databases should bring their own implementation.

Sorry, what? Just yesterday matrix.org had a post about how they (using ext4 + postgres) had disk corruption which led to postgres returning garbage data: https://matrix.org/blog/2025/07/postgres-corruption-postmort...

The corruption was likely present for months or years, and postgres didn't notice.

ZFS, on the other hand, would have noticed during a weekly scrub and complained loudly, letting you know a disk had an error, letting you attempt to repair it if you used RAID, etc.

It's stuff like in that post that are exactly why I run postgres on ZFS.

If you've got specifics about what you mean by "databases should bring their own implementation", I'd be happy to hear it, but I'm having trouble thinking of any sorta technically sound reason for "databases actually prefer it if filesystems can silently corrupt data lol" being true.