MurphyA/hacker-news huggingface dataset:
by vinhatson | 2025-07-10 13:22:31+00:00
In the high-stakes arena of cybersecurity, Microsoft Defender stands as a cornerstone of Windows security, integrating a sophisticated array of defenses: the Antimalware Scan In terface (AMSI) for runtime script scanning, Endpoint Detection and Response (EDR) for real-time telemetry, cloud-based reputation services for file analysis, sandboxing for iso lated execution, and machine learning-driven heuristics for behavioral detection. Despite its robust architecture, attackers increasingly bypass these defenses—not by exploiting code-level vulnerabilities within the Microsoft Security Response Center’s (MSRC) ser vice boundaries, but by targeting logical vulnerabilities in Defender’s decision-making and analysis pipelines. These logical attacks manipulate the system’s own rules, turning its complexity into a weapon against it. This article series, Strengthening Microsoft Defender: Analyzing and Countering Logi cal Evasion Techniques, is designed to empower Blue Teams, security researchers, threat hunters, and system administrators with the knowledge to understand, detect, and neu tralize these threats. By framing logical evasion techniques as threat models and providing actionable Indicators of Compromise (IoCs) and defensive strategies, we aim to bridge the gap between attacker ingenuity and defender resilience. Our approach is grounded in ethical research, responsible disclosure, and practical application, ensuring that defenders can anticipate and counter sophisticated attacks without crossing legal or ethical lines.
by taeric | 2025-07-10 13:22:55+00:00
Oh, I know that that must be the case for a lot of folks. The movie Trainspotting did a pretty good job communicating some of that.

The surprise on my end is usually that new people smoke. Anyone that had already developed the habit, I am not surprised still does it. In that regard, it is not unlike any other drug.

I also realize I should count myself incredibly lucky that smoking does not impact me at all. I literally feel nothing when I try a smoke or cigar. Can barely even taste it. Reminds me of my grandfather who used to smoke to be social. When he found out they were bad for you, he just stopped. Had no withdrawal at all. Yay genetics. :D
by lcnPylGDnU4H9OF | 2025-07-10 13:22:59+00:00
That’s not really a reason not to treat the agent like it’s “rogue”. The point is, if it accepts any untrusted inputs then, from a security perspective, it is possible for any given (untrusted) input to contain a prompt injection payload that jailbreaks the model and tells it to do things it shouldn’t do.

As such, it can be told to do bad stuff in a way that can’t be prevented and therefore should not be given read access to anything you don’t want others to know about, nor write access to any data of which you care about the integrity.
by robwwilliams | 2025-07-10 13:23:10+00:00
Amazing to me that this article did not breath a word on technological innovations over the same period of projections. Factory automation is not a fantasy. The advent of sophisticated AI systems is not top secret. Strides in robotics and in farming and cow milking and even care of elderly are not secret.

If you are doing projection in just one dimension you can be assured to be wrong.
by consumer451 | 2025-07-10 13:23:58+00:00
> You can cut & paste your entire source code file into the query entry box on grok.com and @Grok 4 will fix it for you!

> This is what everyone @xAI does. Works better than Cursor.

This makes no sense to me whatsoever.

https://xcancel.com/elonmusk/status/1943178423947661609
by thegeomaster | 2025-07-10 13:24:13+00:00
A detail that is not mentioned is that Google models >= Gemini 2.0 are all explicitly post-trained for this task of bounding box detection: https://ai.google.dev/gemini-api/docs/image-understanding

Given that the author is using the specific `box_2d` format, it suggests that he is taking advantage of this feature, so I wanted to highlight it. My intuition is that a base multimodal LLM without this type of post-training would have much worse performance.
by nativeit | 2025-07-10 13:24:28+00:00
So…do it. Sounds like it’d make a great case study that would get a person tons of attention and praise on HN, a real feather to put in one’s cap.

Literally nothing stopping anyone in this thread from opening a PR with this reportedly “very easy” fix that’s eluded developers for nearly two decades, and is so terrible folks swear off Thunderbird forever because I guess for email very basic rules for backing up data don’t apply (or something?) and/or Gmail and Outlook are implicitly trustworthy?
by oersted | 2025-07-10 13:24:35+00:00
The article does state that professors did do research, but in their free time.

For the examples you listed, were their famous research achievements really part of their university job description?

Otherwise it’s more like Nietzsche working as an undertaker or Einstein working in the patent office just to support themselves. Naturally many such people would opt to be teachers to get by, that doesn’t necessarily mean that the university was a research institution.

Earlier many philosophers and mathematicians were also priests or monks, that’s also a lifestyle that allows for research without worrying about supporting yourself. Similarly during the scientific revolution it was mostly hobbyist aristocrats that drove it, those who had the means to support themselves while doing free research.

It’s the same story with most famous artists actually, even now. Most of open-source even operates that way, and it’s an important foundation of our modern world.

I don’t really know what to do about that, it’s not like giving everyone universal income would work either, most people do not have this impulse. And grant systems are pretty flawed too. But there is some important insight in the observation of how much has been achieved by people trying to do cool things as a hobby. It’s just really hard to support that systematically, almost by definition.
by stefs | 2025-07-10 13:24:41+00:00
a nuclear power plant is very expensive and takes a long time to build. they're also designed to deliver constant output (i don't know how fast they can de-/increase output), so if power prices get into negative territory due to overwhelming solar output, nuclear power plants might have to operate at a loss, making its product comparably expensive. there are environmental factors (need for water sources for cooling), political/nimbyism and fuel dependency from foreign powers. so nowadays you have trouble finding willing investors. also, due to low demand there are few nuclear plant building companies left.
by bhouston | 2025-07-10 13:25:05+00:00
There is no one challenging Apple on hardware right now. And all of these AI tools can run on Apple machines. So I am not sure that I see Apple falling from its current situation.

That said, Apple isn't really riding this wave of AI. So I feel that Apple isn't benefiting, thus it could likely be growing more than it is if it has an AI strategy that was effective.

So I don't think Apple is a "loser" but it also isn't a "winner." It is more of a spectator who is still strong in their own domain, at least for now.
by ulfw | 2025-07-10 13:25:19+00:00
Apple worries me a bit lately and by lately I mean in the last five six years. It seems Covid did a thing and all innovation and development efforts halted since 2000 or so. The Apple Car project was a huge boondoggle. Meanwhile Xiami delivered and succeeded with the SU7 and now YU7. Apple will finally introduce a foldable phone in late 2026, with specs rumored to be worse than today's Android flagships such as Oppo Find N5, which I use or the new Samsung Fold 7 and Honor Magic V5 etc. And let's keep in mind we are in the 7th iteration of such devices already. Vision Pro might have been technically nice but there is no market for it, let alone for it's price point and hence barely any developers jumped on it.

The iPhone has stagnated so much I got the Oppo after having had every single iPhone since the original one in 2007. I legit cannot list a single notable thing that is new in the 16 Pro vs. the 15 Pro. The only thing that came to mind was the 48mp ultra wide sensor chip married to such a shitty lens that it legit has worse quality than my 15 Pro's old 12mp chip. I tested them back to back.

I've been a huge fanboy for decades but lately absolutely nothing from the company excites me anymore as they just can't deliver. The big new Apple Watch update that was rumored never came. Meanwhile we have so much better looking rounded OLED ones from competitors.
by jcranmer | 2025-07-10 13:25:30+00:00
The systemic white genocide isn't really a thing. Sure, there is political violence against whites in Africa, but South Africa ain't anywhere near the worst offender there, and the rate of violence there is comparable to the rate of political violence against LGBT in the US, so if you're going to call the political violence in South Africa white genocide, you shouldn't object to calling Musk genocidal for his transphobic views.

More to the point, though, even talking about it as a genocide is really about cheapening the definition of genocide and denying the existence of problems that don't affect one or the community one lives in by drawing false equivalencies.
by mitchitized | 2025-07-10 13:25:55+00:00
Definitely not seeing the horrendous collapse of the once mighty Apple.

That said, they have always been behind the curve with AI, and recent product releases/updates have been, uh, suboptimal. Latest Logic Pro is a disaster (e.g. unstable/crashing, removed key shortcuts killing productivity) and don't get me started on the dumbing-down of iOS.

They are for sure headed in the wrong direction, but they are just too big to fall overnight.
by Alifatisk | 2025-07-10 13:26:14+00:00
This https://www.perplexity.ai/comet/gettingstarted should be the home page, the current homepage should be somewhere else, you want to quickly introduce the app / service and answer the visitors first question, "what is this?"

Instead the home page hijacked my scrollbar and walked me through Perplexitys core values, principles and then introduced the whole planetary system before ending up in a FAQ!? Wth

Team Perplexity, you can do better than this, your business is all about distilling fluff into concrete answers, your website should portray the same message, this does not
by Nursie | 2025-07-10 13:27:15+00:00
You’re not wrong, I guess my point is that “the community” that produces guides and tools may be wider than the specific popular device, whether deliberately or by accident.

Everyone does start somewhere, and as much as the breathlessness over Raspberry Pi in the early days irritated me (many people seemed to think there had been no Linux on ARM before then), you absolutely can’t fault them for building a community and getting people interested in the whole area, and lowering the informational barriers to entry.
by thomassmith65 | 2025-07-10 13:27:19+00:00
Our branch of the thread seems to be drifting away from the original issue.

Whatever combination of user behaviors it is that HN's moderation promotes, it appeals to some people more than X, 8chan, gab, reddit, etc.

Perhaps some of the other sites contain the 20% of comments - with its pearls of contrarian wisdom - that HN flags. There is an audience of people (like me) to whom that absence doesn't matter.

I have no interest in wading through posts where there's no minimum bar for garbage. Some people do, and good for them: they can pan for gold on reddit, etc.

HN works well, as-is, for a certain segment of the public.
by potato3732842 | 2025-07-10 13:27:25+00:00
>Wet concrete is already pretty nasty stuff if it gets on the skin, though.

Only in the most "condo to cube and back" frame of reference. Yeah it can chemical burn you, a little but it takes some serious exposure. Of all the chemicals on a construction site that make internet comment sections act like chicken little concrete is probably one of the most mild.
by bhouston | 2025-07-10 13:27:57+00:00
> That said, they have always been behind the curve with AI

I am reminding when Android phablets were really cutting into the marketshare of Apple a decade ago. Apple was reluctant to release larger phones for a couple years and it was an opening.

But then all of a sudden Apple did release larger phones and the capabilities gap disappeared and then Apple's phone quality + CPU speeds + surrounding ecosystem of devices made the Android competitors pretty irrelevant.
by JohnMakin | 2025-07-10 13:28:05+00:00
I don’t mind apple devices but one really frustrating thing to me is how bad Siri is. It’s always been frustrating, but the fact that they were one of the first to enter a voice assistant market that could try to do advanced natural language processing and execute tasks, never really delivered that, and despite massive gains in this space that AI has enjoyed, they’re somehow still behind there.

I am disabled and would pay buckets of money for certain things that siri obviously should be able to do but can’t. If I suffer a fall alone and yell “hey siri, I fell, call 9-11” I’m not entirely certain she can reliably do that and that’s insane to me.
by csomar | 2025-07-10 13:28:06+00:00
Mechanical automation took off in the 70s-90s. Today, most people in developed countries work in service jobs, often behind screens. If AI becomes advanced enough, many of these jobs could disappear.

Here's another angle: In poor countries where farming is the main occupation, birth rates tend to be high. But as farming becomes automated, birth rates drop. Following this pattern, AI could push people out of service jobs and potentially impact birth rates in a similar way.

Of course this is just my mind making stuff up. Who know how it'll turn up.
by shanilss | 2025-07-10 13:28:14+00:00
well, infrastructure cannot be switched if people hate it. The same could be said about new setup in the future. If people are not able to find what they need, then its a training issue.

M365 or GSuite are collaboration stack that facilitates teams to work together. While it's a part of RevOps engine, its mostly backend. RevOps should focus on frontend process which is the order to cash workflow - the marketing efforts, sales pitch and customer success and how are there teams working together. RevOps has its own systemic flow that can be facilitated through CRM systems that can be customized to follow a blue print.
by pickleglitch | 2025-07-10 13:28:21+00:00
Is this really a crisis? Or is it only a crisis because we've built the global economy around the idea that "number go up" forever? Growth at all costs, even cooking the planet, is central to capitalist mindset that dominates the world.

We're also currently devoting an absurd amount of resources developing technology aimed at replacing as much human labor as possible. All this while Western culture continues to indoctrinate us with the belief that our lives are meaningless without the jobs they are also trying to eliminate.
by taeric | 2025-07-10 13:28:23+00:00
Trust me, it isn't that annoying. Having sea lions that won't stop barking all day is annoying. Coyotes in mating season is obnoxious. A rooster that has decided to not be quiet is annoying.

So sure, kids doing kid things can be loud and obnoxious. But it is not really any more annoying than anything else. The ice cream truck playing a jingle is just not that big of a deal.

Now, I do suspect some folks have obnoxious trucks that play far far louder than they need to? In this vein, it is a lot like cars going down the street. At a base level, it makes noise and it doesn't really make sense to complain about it. That said, it is extra obnoxious to have people trick out cars and motorcycles to be loud on purpose. And those I have no sympathy for getting banned.
by dackle | 2025-07-10 13:28:38+00:00
In Vancouver in the 1990s, if you wanted to buy a six-pack of beer at 10pm after the government-run liquor store closed, you would walk into a local pub and ask the bartender if they did "off-sales". If yes, they would sell you a cold six-pack for a very small markup.

Also, in Ontario in the 1990s, one-eighth of an ounce of weed was called a "half-quarter", ha ha.
by shanilss | 2025-07-10 13:29:06+00:00
well, infrastructure cannot be switched if people hate it. The same could be said about new setup in the future. If people are not able to find what they need, then its a training issue.

M365 or GSuite are collaboration stack that facilitates teams to work together. While it's a part of RevOps engine, its mostly backend. RevOps should focus on frontend process which is the order to cash workflow - the marketing efforts, sales pitch and customer success and how are there teams working together. RevOps has its own systemic flow that can be facilitated through CRM systems that can be customized to follow a blue print.

- Shanil
by aussieguy1234 | 2025-07-10 13:29:08+00:00
Let's say you want to use the tool `ssh` and let's imagine ssh has just been released and it's not in the AI agents training set yet.

It won't know in this case how to use the ssh command line tool.

MCP provides a standard way to tell an AI agent how and when to use tools. So if you had an SSH MCP server, you'd simply plug that in, now your AI agent automagically has SSH capabilities.
by vjvjvjvjghv | 2025-07-10 13:29:10+00:00
One important data point is that houses have become much more expensive compared to income in the last decades. When I lived in CA, my plumber neighbor told me he bought his house in the 70s for 80000 on a salary of 40000. Today he would probably pay 800000 for the same house but make maybe 100000 or a little more.

It's definitely harder to buy a house these days.
by palata | 2025-07-10 13:30:16+00:00
I don't vibe code, but I maintain open source projects where vibe-coded contributions are coming.

Before, I had some amount of code reviews where I would ask "why are you doing this, instead of that cleaner/easier way?" and people would usually make the change. I would assume that they probably didn't know better.

Now, I still have some amount of reviews where I ask the exact same question, and people say "that's because [your favourite agent here] did it like this". So now I consider they don't really care.

Not sure how much it changes: as a maintainer, one couldn't trust contributions before and one cannot trust them now. People were opening PRs with code that they had never tested and that did not compile before vibe coding, so that doesn't feel very different. I guess it just feels a bit more frustrating to think that you are putting more effort into reviewing than they spent... well not "coding it" but "asking their agent to make it".
by mrweasel | 2025-07-10 13:30:56+00:00
> Apple "needs the AI story because that's what's being rewarded in the market,"

Okay, so it's not actually because the users need something that can only be provided by an Apple AI. It provides little to no tangible benefit to Apples customers. It's just that the stock market would like to be able to tick the "Has AI" box on the APPL stock.
by resource_waste | 2025-07-10 13:32:06+00:00
The comments here are amusing.

I imagine those anti-bitcoin and anti-AI, missed the train and are digging in their heels.

Instead of adjusting to the new realities, they must stand with their prior convictions or admit they were not wise. I've seen this IRL. Some people make a great fanfare about the moment they switch to the new realities. Some people quietly adjust.

I think denial of all usecases makes people look foolish. I'm no absolutist visionary on both AI and Bitcoin, but I understand there are usecases.
by ryanrasti | 2025-07-10 13:32:17+00:00
Hi HN, I'm Ryan, the creator of Typegres.

For years, I've felt stuck between two unsatisfying options for talking to my database: use a traditional ORM that forces you to learn its quirks instead of Postgres itself, or write raw SQL strings and sacrifice type safety and composability.

ORMs discourage you from using the database's powerful native features, forcing you to pull data into the backend to transform it. Raw SQL is powerful but error-prone, and dynamic queries quickly become a tangled mess of string concatenation.

That frustration led me to build Typegres, my take on a new kind of query builder with a simple philosophy: minimal abstraction, maximum surface area.

Instead of hiding SQL, Typegres embraces it. It code-generates a type-safe TypeScript method for every one of Postgres's 3000+ built-in functions and operators. This approach has a huge benefit for iterating faster: since everything is a method, you get full discoverability via autocomplete. The ultimate vision is that Typegres not only helps you write safe queries, but actually helps you learn Postgres as you type.

Some of the things I'm most excited about:

* Full(er) Postgres Coverage: If you can do it in Postgres, you can do it in Typegres, with type-safety. This includes first-class support for advanced features like set-returning functions (e.g., `jsonb_each`).

* Composable & Type-Safe: Build complex queries from smaller, reusable parts—including subqueries—while maintaining complete type safety from start to finish.

* Ergonomic Operator Syntax: SQL operators like `+`, `=`, or `>` are just methods, allowing for natural chaining with auto-complete: (e.g., `.where(u => u.age['>='](21))`)

* Compile-Time Safety: The type system understands SQL rules. For example, it will show a TypeScript error if you try to select a non-aggregated column in a `groupBy` clause.

The coolest part is the in-browser playground, which is powered by Sam Willis's incredible PGlite project. You can try out the full library with zero setup.

A quick note on its status: this is an early developer preview. My main goal today is to see if this philosophy resonates with other developers. The core type-safety is robust, but there's many edge cases to still cover and it's not yet ready for production use. Following the project on GitHub is the best way to stay updated on the journey to 1.0.

Starting with this level of fidelity to Postgres opens the door to some pretty exciting future features— the tl;dr is that I'm optimistic this route can make significant headway into tackling the object-relational impedance mismatch (see the github README for more). Because Typegres understands the database so deeply, it can create healthier, more powerful abstractions.

I'd love to hear all your feedback in the comments. Thank you!

Playground: https://typegres.com/play

GitHub: https://github.com/ryanrasti/typegres
by combinator_y | 2025-07-10 13:32:38+00:00
I am wondering if there is a different approach that 'peaks' better in terms of perf, like instead of doing : - Optimization 1: Do not allocate a Vector when tokenizing - Optimization 2: Zero allocations — parse directly from the input bytes - Optimization 3: Do not use Peekable - Optimization 4: Multithreading and SIMD - Optimization 5: Memory‑mapped I/O

Example : - Optimization 1: Memory‑mapped I/O - Optimization 2: Do not use Peekable - Optimization 3: Do not allocate a Vector when tokenizing - Optimization 4: Zero allocations — parse directly from the input bytes Conclusion - Optimization 5: Multithreading and SIMD

I might be guessing, but in this order probably by Optimization 3 you would reach already a high throughput that you wouldn't bother with manual simd nor Multithreading. (this is a pragmatic way, in real life you will try to minimize risk and try to reach goal as fast as possible, simd/Multithreading carry a lot of risk for your average dev team)
Show HN: FFmpeg in plain English – LLM-assisted FFmpeg in the browser
by bjano | 2025-07-10 13:32:49+00:00
I found that I am using ChatGPT more and more to get the FFmpeg command I need, but the process can be a bit tedious: copy-pasting commands, dealing with input file names and locations, making sure the prompt contains enough info about the input files.

This site attempts to solve that. You just describe what you want to do, pick the input files and an LLM (currently DeepSeek) generates the FFmpeg command. You can then run it directly in your browser or use the command elsewhere.