MurphyA/hacker-news huggingface dataset:
by creddit | 2025-07-31 05:58:20+00:00
> "Infer?" Watch the demo video and see it happen.

I didn't know what you were talking about at first because I didn't remember seeing any video on the blogpost. If there had been video showing this happen, it would definitely be a good argument against it being inference! Instead, as best as I can infer, you mean the video on the home page and I watched the first ~1min where a photographer takes a photo and they didn't do any more fiddling than I have ever seen someone do with an iPhone and the couple having their photo taken didn't look uncomfortable at all! So not only is this not a video, afaict since I didn't watch the whole 5mins, of this particular set of photos being taken which means the inference made by the OP is very much so an inference but also I don't even think it shows an example of what they purported.

> That's why I said it doesn't surprise me no one in any of these samples wears a genuine smile.

Also, looks like you logged into your throwaway for this reply so now you've linked throwanem <> bdamm together.
by kergonath | 2025-07-31 05:58:21+00:00
I have other things to do with my day than vibe-coding yet another stupid chat app with fewer features than one I can just download and get running in minutes. It’s not helplessness or misery, it’s just the finite number of hours I have in a day and the fact that other things are more interesting than that. I don’t grow my own wheat or maintain my own OS, either.
by sitharus | 2025-07-31 05:59:48+00:00
Yeah I can't see it tearing down the message pipe, that would exit the app.

But what it is doing is first posting a message that will call `[NSApp stop]` then calling `[NSApp run]`. Which is odd, because `[NSApp nextEvent]` exists, but even if that doesn't work it's not the way I'd do it. However I'm sure there are very good reasons to do it this way when you know the emacs source.
by witnessme | 2025-07-31 06:00:34+00:00
Before deployment: Use tools such as codeql, sonarqube, etc. in your CI/CD pipeline. They scan the repo for known patterns and you can design your own patterns to automatically check before anything goes out.

After deployment: There was a post on HN some days back regarding a tool that you can deploy on your machine to check for common misconfigurations and you can potentially scan the logs to discover issues. Also, I have developed an AI agent to act as a penetration tester (without the knowledge of your codebase or internal system) and discover vulnerabilities. I have been improving it since last year and using it to continously pentest my infra. I'm thinking of opening this up for others. Let me know if you need access to this.
by atleastoptimal | 2025-07-31 06:00:56+00:00
Hire some UGC people, You'll surely go viral with a TikTok with the title "this app got me a 400k/yr job" or something like that. It legit has the potential for that, you just have to find whoever will deliver on that for you.

If you have to pay, then do it, it'll be worth it, there are lots of apps just like this, you have to win the mindshare game.
by wat10000 | 2025-07-31 06:01:14+00:00
These businesses are all about scale. Each user makes them a paltry amount of money, but they have an enormous number of users.

A single support incident that reaches a paid worker on their side costs them more than the profit you’ve brought them for the year. It probably costs them more than the profit you’ll bring them for your entire life.

With less scale-y businesses, it’s worth it for them to put some effort into fixing problems, as an investment in your future business. Here, the only reason would be to avoid reputational damage. And who’s going to stop using Google or Microsoft because some guy had trouble getting support?

There’s a story (no doubt apocryphal) about Bill Gates telling people working on Windows that a customer calling their support line cost as much as the profit they made selling that copy of Windows. The point was to make it so Windows users didn’t need to call support by making Windows work better. The modern equivalent of this would be to make sure that users can’t reach expensive support in the first place.
by icecheese | 2025-07-31 06:01:34+00:00
SAUCE has proven quite resilient and adaptable. I don't think it really works for describing newer developments like like Utf-8, 256 color or RGB ANSI art. It maybe misses some vintage platforms like ATASCII. But that could change with a format update. For MS-DOS and Amiga ANSI art packs, and some nicher formats like Xbin, it's pretty standard.

XBIN files have been scattered around artscene packs since the 90s, but since it is directly tied to VGA hardware, it remains niche. Some people really like it. I have always found it tricky to work with.

I like to think the DUR (durdraw) format can be adopted or extended to describe most text art, though custom font support like Xbin is not in the current version. I also like to think that DUR's JSON core makes it easier for mortals and programmers to play with than SAUCE's dense binary format (and ANSI escape codes, even), but that's a bit subjective.
by pjmlp | 2025-07-31 06:05:41+00:00
It certainly is not, it is quite common to use templates directly or indirectly via the C++ standard library, and P/Invoke cannot handle those.

Also during .NET 1.0 days, Microsoft had a Website where you could paste any well known Win32 API or related SDK, and it would spit the annotations.

What was never as good in .NET as it was in VB 6 and still is in Delphi and C++ Builder to this day, was creating and consuming COM, which is kind of annonying given how much Windows team loves it.

At least it isn't as bad as the multiple reboots in C++, which I will keep asserting that from all of those, MFC still has the best tooling to handle COM.
by frocodillo | 2025-07-31 06:06:07+00:00
That’s already addressed in the article; it’s like paying off credit card debt with another credit card.

I guess it all depends on your end goal. If you intend to make your vibe coded app into a profitable, maintainable product with any sort of reliability guarantees you better understand its failure modes and how to fix things when they break. It’s really hard to create recovery procedures for a black box.
by BrenBarn | 2025-07-31 06:06:12+00:00
> It has felt like matrix was just shy of fulfilling its promises for years now.

Unfortunately, their promises grow at a faster rate than the reality of the protocol and software. The biggest problem they have is that they constantly tout it as this amazing thing that people should start using, when in fact it's got tons of rough edges and it would be a big mistake for most average people to use it. It might eventually get there, but I think it's actually less likely with the kind of self-promotion they do. It leads to too many results like the article linked here, where people go "Wait, you said this would be great but it's actually just kind of barely usable" and they're permanently soured on the concept. It erodes trust in the organization and the product.
by ElasticBottle | 2025-07-31 06:06:35+00:00
All good questions and is the second piece aside from the agent.

1. We have proxy support right now and most traffic are already being proxied today. Might allow fine tuning of this over time 2. We have plans to allow this, but not currently available 3. We are leveraging some anti bot/captcha solving, but I do believe this will be a never ending problem in some sense
by w10-1 | 2025-07-31 06:07:09+00:00
Leaving aside the merits of the ban for a moment...

This is politically beneficial because Google and Facebook squandered historically broad and strong goodwill, and they made themselves a target in the culture wars.

Google would have survived just fine with its historically light touch on ads.

Both would have been ok without monetizing data collected from users.

Both would be successful allowing users to pick aspects they wanted (e.g., shorts or not), rather than coercing them.

Unfortunately, there's no market feedback for missed future opportunities, and weak positive benefits from PR that dampens and side-steps negative sentiment, so there's no correction.

Had Google taken the privacy tack that Apple did, we might all be storing our most critical data on their servers (given their high data center standards), and thus inclined to do most business on Google cloud.

Both companies have founders still directing a majority of shares. There's no excuse of corruption by short-sighted shareholders.
by ehnto | 2025-07-31 06:08:08+00:00
My two insights are:

Legacy code is difficult to work with because the reasons "why" something has to be some way are missing. The "whys" can change over time, be interwoven with business requirements not in the codebase, and compound/nest with other whys that have come and gone. Often only humans in the business know, and you have to figure out who and what to ask.

Second insight is that LLMs have so far been very bad at holding on to the thread of winding, changing requirements, which is something it would have to be good at in order to revisit old codebases. Even one it wrote itself. It would need some kind of historical changes to business requirements database, which I have never seen a business keep, it'sjust the collective human knowledge of the business. Otherwise it'll make changes without accounting for historic requirements as well as your new ones.

I think there are probably some workarounds, like getting it to write lengthy documentation to refer to. Long term perhaps it just gets smart enough. Legacy codebases are something I specialise in working with somewhat, I spent a long time consulting so I was often parachuting into unfamiliar codebases and trying to quickly understand years to a decade or more, of evolving requirements in a business/codebase. I have a lot more to say on the topic but those are two of my insights.
by IIAOPSW | 2025-07-31 06:08:47+00:00
Simplifying a bit, its because the train behind can be scheduled 3 min after the train ahead has pulled in rather than 3 min after the train ahead pulled out. Put another way, the safe stopping distance to maintain (while at speed) would be measured from the half way point of the platform rather than the start of the platform.

This lets you schedule them much closer together than the conventional 3 min while still being safe.
by jalapenos | 2025-07-31 06:10:14+00:00
I'm interested other people's view on this, do you feel the shape of the curve is like this, like a hockey stick of capability over time?

I just don't feel that. Using all AI tool's to the hilt, the curve feels more like a tapering-off one to me.

Once we've fully applied what's been invented, I think we'll be in exponential decay not growth, of its utility
by boie0025 | 2025-07-31 06:10:30+00:00
While I agree with your sentiment, there's a pretty good chance that at least some of this is, for example, data that inadvertently leaked while someone accidentally exposed an automatic index with Apache, or perhaps an asset manifest exposed a bunch of uploaded images in a folder or bucket that wasn't marked private for whatever reason. I can think of a lot of reasons this data could be "public" that would be well beyond the control of the person exposed. I also don't think that there's a universal enough understanding that uploading something to your WordPress or whatever personal/business site to share with a specific person, with an obscure unpublished URL is actually public. I think these lines are pretty blurry.

Edit: to clarify, in the first two examples I'm referring to web applications that the exposed person uses but does not control.
by flowerthoughts | 2025-07-31 06:10:56+00:00
The ASN.1 notation wasn't meant for parsing. And then people started writing parsing generators for it, so they adapted. However, you're abusing a text format for human reading and pretending it's a serialization format.

The BER/PER are binary formats and great where binary formats are needed. You also have XER (XML) and JER (JSON) if you want text. You can create an s-expr encoding if you want.

Separate ASN.1--the data model from ASN.1--the abstract syntax notation (what you wrote) from ASN.1's encoding formats.

[1] https://www.itu.int/en/ITU-T/asn1/Pages/asn1_project.aspx
by creamyhorror | 2025-07-31 06:12:41+00:00
> "An hour of debugging/programming can save you minutes of thinking,"

I get what you're referring to here, when it's tunnel-vision debugging. Personally I usually find that coding/writing/editing is thinking for me. I'm manipulating the logic on screen and seeing how to make it make sense, like a math problem.

LLMs help because they immediately think through a problem and start raising questions and points of uncertainty. Once I see those questions in the <think> output, I cancel the stream, think through them, and edit my prompt to answer the questions beforehand. This often causes the LLM's responses to become much faster and shorter, since it doesn't need to agonise over those decisions any more.
by galaxyLogic | 2025-07-31 06:13:06+00:00
Use the index 'n' of any element of the array. Unless that is the first element you can always take the elment n - 1 of the same array. That is the "previous element" of the elment at n. And so on.

I'm not saying that if you have value of any element you could derive the value of the previous or next element from it. I'm saying "it has a previous element" (unless it is the 1st element) meaning there is such a previous element and it is also possible to access that previous element if you know the index of the current element under investigation.
by rsecora | 2025-07-31 06:13:53+00:00
I was surprised when the 64bit fork appears in github.

The OpenLook 64bit fork is available at [1], it has 64bit & X11R7 patches. It has a miriad of changes related to ids sizes, %ul, function casts, and a migration from X11R4 to X11R7.

Sadly, if a legacy applications is old enough to be linked to OpenLook, it surelly require adaptation. They need their own migration to transition to 64 bits and X11R7. This openlook fork is the start of the journey to resurect them.

[1] https://github.com/ggodd/xview-64bit
by ForOldHack | 2025-07-31 06:14:26+00:00
I had an old one and it broke, so I went looking for a new one,and it just felt cheap. Then I saw a pair at a flea market for $10, and only one had been used. I use a black rubber tape on them for comfort and it makes it less prone to cracking on the handle, and store them in a black box. ( Less UV ). I do keep going back by the store, and hoping their cheap ones get discontinued... But they are still. There.

What are the best refills to use for them?
by bruce511 | 2025-07-31 06:15:14+00:00
This 100%. I'm in a space with developers and customers deploying web servers for the first time. This traffic freaks them out.

Basically a simple server listening on a port will experience hundreds of random script-probing attacks per day. And if any of them show the slightest hint of succeeding then that escalates quickly to thousands per minute.

You don't need a DNS entry to "expose" the IP address (there are only 4 billion). Moving to another port reduces, but doesn't eliminate the traffic.

Telling people this freaks them out. But as long as the server is done well its just noise.
by dlcarrier | 2025-07-31 06:15:48+00:00
It's worse than that. It's due to some weakening in the checks and balances system of US federal regulations, as well as a hole in the system.

Historically, laws were written by the legislative branch (congress), enforced by the executive branch (the office of the president), and overseen by the judicial branch (federal courts). When oversight works, all three have to agree for an enforcement action to take place.

In somewhat recent history, congress has been passing regulations much less, instead passing authorizations for the executive branch to write their own regulations. On top of this, the judicial branch had, until last year, allowed executive organizations to use their own judges, without juries, and follow their own interpretation of laws and regulations, when it conflicted with a literal interpretation. See https://en.wikipedia.org/wiki/SEC_v._Jarkesy and https://en.wikipedia.org/wiki/Loper_Bright_Enterprises_v._Ra... for the recent rulings overturning those precedents.

The effects of those last two cases are still working their way through the relevant bureaucracies, so until then, the FAA will keep with their current interpretation of gaining experience as a form of commercial income (https://www.faa.gov/media/15611) and having a reputation as form of advertising (https://www.faa.gov/documentLibrary/media/Advisory_Circular/...).

Even then, there's a hole in the system that especially impacts overly broad definitions of commercial activity, which as far as I'm aware, no other executive organization has taken anywhere close to the extreme of the FAA.

That hole is that even with the precedent of the recent supreme court rulings, they only take effect when something goes to the courts. With real commercial activity, this happens regularly and often preemptively, because the costs and resources needed to take something to court are easily recovered by the extra income or savings of a ruling that follows proper checks and balances.

On the other hand, there is no incentive to spend the money and resources needed to regain rights for non-commercial activities, like carpooling (or airplanepooling) where no one is earning anything.
by didibus | 2025-07-31 06:16:27+00:00
Hum, personally I've always found git having more features than those, though I don't know them all, at least when git released it distinguished itself by its features mostly, specifically the distributed nature and rebase. And hg/bzr never looked to me like they had more features, more so similar features +/-, so they'd be a good example of git has the same features+faster so it won.
by bhawks | 2025-07-31 06:16:39+00:00
Optimizing struct layouts is cool. but if your motivation is to pack more monsters in your game definitely consider transposing your row oriented monster struct into a column oriented entity using Entity Component System.

Example framework:

https://github.com/skypjack/entt?tab=readme-ov-file

It has benefits besides memory/cache optimizations. It organizes logic in a much more composable way that is friendly for reuse.
by BrenBarn | 2025-07-31 06:17:13+00:00
Yeah, agree. If you look at their list of SDKs things look great, but in my experience once you actually look into them, you find many are missing important features. The protocol is still getting changes that are, if not exactly backwards-incompatible, definitely backwards-inconvenient. There's also a catch-22 in that, due to this problem, usage is heavily skewed towards Element, which means that Element's behavior becomes a de facto spec.
by kalleboo | 2025-07-31 06:17:48+00:00
All of the tech giants have really broken account recovery flows. They've all been glomming on recovery options, single sign-on, 2FA, etc features and none of it is coherent, with lots of dead ends where the optional recovery option it suggests isn't actually supported.

Amazon has a lot of issues with accounts shared between their national storefronts. I lost a Google account that owns a YouTube channel since it wants to 2FA to a long-gone phone number. Apple has a lot of oddities when you used different emails for your Apple ID, iTunes Connect, and iTunes before they unified everything.

One great example though is Facebook

My wife's Facebook account recently got hacked, and I managed to recover it though this crazy workflow:

The hacker had removed her email address and phone number from the account, changed her password, and added their controlled Meta account as a connected account. This connected account had an email but no password, so it could not be removed without adding a password to it, which required verifying the attackers email address.

None of the account recovery tools worked (including the “this wasn’t me” link in the Facebook “did you just delete your phone number” email - what is the point of that link) - they couldn’t find her account by email or phone number, and even though the Facebook app itself was still logged in, none of the account center tools allowed us to do anything without the new password. It also did not allow us to remove the connection to the hackers Meta account or log it out from their devices because it had no password and it would become orphaned with no login.

What seems to have worked for us:

1. Open the still-logged-in FB Messenger app on her phone. It now asks to add a phone number to enhance security. We did this.

2. Now install WhatsApp and sign up using the phone number.

3. Now go into the Facebook app, change password, I forgot my password, and use WhatsApp as 2-factor authentication.

4. Now we have control of the password again! We also added a app (TOTP) 2-factor authentication and iOS passkey to her account at this point to add more options for control.

5. Go to Meta Quest website (meta dot com), and log in via Facebook. This logs us into the attackers account!

6. We could now add a 2-factor authentication to the hackers account, after which it also now let us change the password of the attackers account without knowing the old one.

7. With a password on the account, we can now log them out of all other devices (the attackers phone).

8. We could also now change the permissions so the attackers Meta account could not be used to log in to her Facebook account, but it’s still listed as a related account since it requires email confirmation to remove.

9. Managed to use the 2-factor code to reset the email address on the attackers meta account, so now we own it completely!
by bubblyworld | 2025-07-31 06:17:51+00:00
Formalising natural language statements is a minefield of difficulties, for (imo) essentially the same reasons that writing code which interacts with the real world is so difficult. Concepts you take for granted like identity, time, causality... all of that stuff needs to be fleshed out carefully and precisely in the formalism for facts to be relatable to each other (or even expressible in the first place).

Not to discourage you - it's a cool problem! OpenCog comes to mind as a project that tried to take this all the way, and there's a field devoted to this stuff in academia called KRR (knowledge representation and reasoning). The IJCAI journal is full of research on similar topics.

(also see all the different logics philosophers use to formalise different kinds of argument involving time/modality/probability - there are a lot, but they aren't very "modular" and can't easily be mixed unless someone has solved that since I last looked into it)
by anshumankmr | 2025-07-31 06:18:10+00:00
> LLMs have consumed the entire fucking Internet and are still useless.

They aren't useless. Otherwise, ChatGPT would have died a long time back

> Where the fuck is the rest of the data going to come from?

Good question. Personally, I think companies will start paying more for high quality data or what is at least perceived as high quality data. I think Reddit and some other social media companies like it are poised to reap the rewards of this.

Whether this will be effective in the long run remains to be seen.
by rhubarbtree | 2025-07-31 06:18:22+00:00
I do agree for safety critical systems, you’re right.

But I don’t think we are engineers. Software dev isn’t like engineering. You can’t change the structure of a bridge after it has been built by deploying code to prod in a minute. Software dev is just software dev, it’s not engineering or science. It has some parallels with craftsmanship, but it’s unique.