MurphyA/hacker-news huggingface dataset:
by Daviey | 2025-07-12 07:54:55+00:00
Perhaps I misunderstood, but I read it that the account they got access to was a highly privileged account, which did have general access to all data.

The report didn't make it clear to me if an unauthorised user, or an account with low privilege can still access data they otherwise should not have access to.

If this is true, then I agree it is an IDOR, but I read it as they had access because of their current context.
by Etheryte | 2025-07-12 07:56:38+00:00
In general, interpolating statistics based on your personal world view is often misguided. Almost fifty percent of all Americans have tried drugs at least once in their lives [0], you simply won't know about it because most won't speak about it openly. Statistically you're unknowingly acquaintances with a number of people who fall into that category. To quote [1]:

> By the time they’re in 12th grade, 46.6% of teens have tried illicit drugs.

[0] https://www.addictionhelp.com/addiction/statistics/

[1] https://drugabusestatistics.org/teen-drug-use/
Show HN: Sage-AI – AI-Powered Writing Assistant
by jawwadjamiu | 2025-07-12 07:56:38+00:00
Hi Hacker News

I’ve been working on Sage-AI and am excited to share it with the community.

What is Sage-AI? Sage-AI: Is an AI-driven writing assistant designed to help creators, marketers, and students write better, faster, and smarter. It adapts to your writing style, remembers your brand voice, and generates high-quality content in seconds.

Features of Sage-AI: AI-generated writing templates for blog posts, emails, social media, and more.

Multilingual support for global content creation.

Brand voice memory that adjusts to your tone over time.

Team collaboration for group projects, assignments, or business teams.

Long-form content generation — not just short snippets.

Automatic segmentation for targeted email campaigns.

Why did I build it? I started Sage-AI out of frustration with existing tools. As a student/entrepreneur/content creator, I wanted a tool that would save me time while still helping me maintain high-quality output. Traditional tools didn’t cut it, so I built Sage-AI to be smarter, easier to use, and affordable for all users.

Current Status:

Beta launch

Collecting feedback and feature requests from early users

Join the waitlist [https://sage-ai-waitlist.vercel.app]

Feedback: I’d love to hear any feedback, suggestions, or thoughts on how we can improve.

If you’re looking to boost your writing productivity or supercharge your email marketing, feel free to join the waitlist for early access to Sage-AI.

[https://sage-ai-waitlist.vercel.app]
by KingMob | 2025-07-12 07:58:11+00:00
> Homeopathy is very complex

But it's not complex at all; a better word is "elaborate". And it doesn't matter how elaborate a system spun from incorrect premises is, if the premises fall, the whole thing does, and homeopathy's premises are easily dismissed.

Very basic tenets of homeopathy involve things like excessive dilution to the point that mere molecules of an active ingredient remain, but which somehow attach "memories" to water molecules to achieve their effects.

Atomic physics points out that this is nonsense. And medical knowledge is under-girded by physics, obviously, so it's not unrelated.

----

We can keep torturing the analogy if you like, but at the end of the day, Hickey's experience is not in static typing. His original background was in C++/Java, which have much simpler type systems, unlike Haskell/ML/Rust/Scala/Swift/etc.

Many people in the static typing world seem to think his criticism is just not that deep or subtle. Unnamed union types exist, existed at the time of Maybe Not, and just represent a different set of tradeoffs than named wrapper ones like Maybe. (Mostly around being explicit.)

It plays well at the conj, but most Clojurians are also inexperienced with modern type systems.
Upwork Suspended My Account Without Reason
by kerimn | 2025-07-12 07:58:36+00:00
A few months ago, I joined Upwork, spending weeks learning how the platform works and carefully building my profile with a strong portfolio and clear description so it would represent me well to clients. I thought Upwork would be a great place to land small projects, earn some side income and start my freelancing journey.

In May, I started actively applying for jobs and quickly landed my first project with an Italian client who wanted an Android kiosk app for restaurants in Italy. The client was reliable, kind, and had already spent over $200K on Upwork, so I was excited to start our collaboration in early June.

After I completed the first milestone and received payment, Upwork suddenly suspended my account and asked me to verify my identity - even though I had already done so twice before and had the "Identity Verified" badge on my profile. I immediately uploaded my ID card and residency statement because I didn't want to leave my client waiting, since I couldn't contact them while suspended. Six days later, I finally received an email saying my case was in the final review stage, and I felt some relief, thinking I'd soon get back to work. But yesterday, Upwork emailed me saying my account would remain permanently suspended because they "couldn’t verify my identity" despite having all the requested documents and previously verifying me twice. They also said they would not answer any further emails and that the decision was final. I reached out to ask why, offered to send additional documents, and even asked for a call with support. The only response I received was, "The decision is final." Even my client contacted Upwork to ask for an explanation, but they refused to share any details. I thought Upwork was a serious, professional platform, but it seems that's not the case. I invested significant time and effort to build a presentable profile, spent money on connects and a professional membership, only to end up permanently banned - without ever being told why.

What is your experience with Upwork? Has anyone experienced something similar?
by CJefferson | 2025-07-12 07:59:11+00:00
If the only choices are "my data gets deleted", or "$1,000 dollar bill", I think most students would choose data deleted.

And the whole "we are nice, we will waive bills for beginners who make mistakes" is in my experience, as a computing professor who has had multiple students hit this, not true. They seem to do waive fairly randomly to my eye, about a third of the time.
by thaumasiotes | 2025-07-12 08:00:04+00:00
None of those things need to happen. (Unless you get billed by the individual DNS query?) The cost of storing things that already exist is known perfectly in advance. It is trivial to include the cost of "maintain everything until the end of the month" in your estimate of how much the customer has already spent. Then, when the spending halt occurs, nothing needs to be deleted because that was already accounted for.
by fmajid | 2025-07-12 08:01:40+00:00
They have a staff of 7, and Google just hired 1,500 lawyers, on top of those they already had, to fight them. Interestingly, he was complimentary of the Trump administration’s efforts, including seeming no-brainers like vetting expert witnesses for conflicts of interests (e.g. Carl Shapiro, who he claimed did actual perjury).
by IshKebab | 2025-07-12 08:02:19+00:00
> £4800/yr is a shit ton of money

It's a shit ton of money for the government to just pay to people. I wasn't saying it's enough money to live on or anything. Obviously.

> Is that a bad thing?

The government is just a little short on money and they're wasting it by giving WFA and child benefit to people who definitely don't need it.

This should be obvious.
Ask HN: How to combine work, entrepreneurship and having a life
by Nadssat | 2025-07-12 08:03:24+00:00
Hi HN, I'm an electronics engineer and I work in that field, and I also have a side project and a life, haha. I'd like to know how you manage to achieve balance. It seems really difficult and feels like I'm constantly juggling. I'm not as involved with my family, friends, girlfriend as I'd like... I feel like the project isn't progressing as I'd like after three years. Any advice?
by OldfieldFund | 2025-07-12 08:04:08+00:00
LD50 in sheep:

1–5 mg/kg IV

1–2 mg/kg SC

85 mg/kg O

In mice:

75–115 mg/kg IP

48 mg/kg IV

113 mg/kg SC

278 mg/kg O

They were administering over 30mg to humans in trials. (Metzner (2013); Shulgin and Shulgin (1997); Ott (2001); Davis et al. (2018); Uthaug et al. (2020a))

Sheep are susceptible to toxicity from certain tryptamine alkaloids because of their physiology.

These alkaloids, especially those that are N,N-dimethylated, can trigger neurological symptoms in sheep, such as convulsions, spasticity, and gait issues. The alkaloids are suspected to affect the brain and spinal cord by interacting with serotonin receptors.

5-MeO-DMT is an N,N-dimethylated compound. Its full chemical name is 5-methoxy-N,N-dimethyltryptamine. That indicates the presence of two methyl groups attached to the nitrogen atom of the tryptamine backbone.

Stay safe, everyone!
by ben_w | 2025-07-12 08:04:41+00:00
> It's impossible to have green tech w/out rare earths, and impossible to have rare earth end products w/out creating radioactive waste.

Where do you get this idea from? (If it's NYT, paywall, can't read it).

Solar power does not leave us with radioactive waste.

Considering radiation and heavy metals as the same problem because they're both bad for you and involve remediation processes when things go wrong is like treating a lack of seatbelts in cars the same as sugar induced diabetes.

Closest I can think of for why someone might think "rare earths" are "radioactive" is lithium deposits come in salt flats, salt flats contain potassium, some potassium is radioactive. But that's already diffused everywhere on the planet making *all life* radioactive well before we arrived in the pre-neolithic.
by Thorrez | 2025-07-12 08:04:46+00:00
How can we know the dimensions of the pills in the article's picture?

I've seen a bunch of pills that look basically like those, and the most they have held is around 1000mg.

Here are some pills that look just like the ones in the article's picture:

https://www.amazon.com/NatureWise-Curcumin-Curcuminoids-BioP...

They are 2250 + 500 = 2750mg in a serving size of 3 pills. So each pill is slightly less than 1000mg.
Show HN: MailTion – AI-Powered Email Marketing for Businesses
by jawwadjamiu | 2025-07-12 08:04:55+00:00
Hi Hacker News

I’ve been working on MailTion and am excited to share it with the community.

What is MailTion ? MailTion is an AI-powered email marketing tool built to help small businesses, students, and entrepreneurs create, automate, and optimize email campaigns quickly. It offers real-time collaboration, AI-generated content, and advanced segmentation for improved engagement.

Features of MailTion: AI-generated writing templates for emails.

Multilingual support for global content creation.

Brand voice memory that adjusts to your tone over time.

Team collaboration for group projects, assignments, or business teams.

Long-form content generation — not just short snippets.

Automatic segmentation for targeted email campaigns.

Why did I build it? I started MailTion out of frustration with existing tools. As a student/entrepreneur/content creator, I wanted a tool that would save me time while still helping me maintain high-quality output. Traditional tools didn’t cut it, so I built MailTion to be smarter, easier to use, and affordable for all users.

Current Status:

Beta launch

Collecting feedback and feature requests from early users

Join the waitlist [https://mailtion-waitlist.vercel.app]

I’d love to hear any feedback, suggestions, or thoughts on how we can improve.

If you’re looking to boost your writing productivity or supercharge your email marketing, feel free to join the waitlist for early access to MailTion.

[https://mailtion-waitlist.vercel.app]
by lllllm | 2025-07-12 08:06:36+00:00
we kept all 1800+ (script/language) pairs, not only the quality filtered ones. the question if a mix of quality filtered and not languages impacts the mixing is still an open question. preliminary research (Section 4.2.7 of https://arxiv.org/abs/2502.10361 ) indicates that quality filtering can mitigate the curse of multilinguality to some degree, so facilitate cross-lingual generalization, but it has to be seen how strong this effect is on larger scale
by nrabulinski | 2025-07-12 08:11:15+00:00
Yes, it uses QEMU under the hood for VMs and runs LXC containers. But also, since recently, you can run docker images in it. Very handy, especially since it has 1st class remote support, meaning you can install only the incus client and when doing `incus launch` or whatever, it will transparently start the container/vm on your remote host
by cushychicken | 2025-07-12 08:11:21+00:00
I think I’ve finally figured out just what is that annoys me about the “software quality” crowd.

Quality is a measurement. That’s how it works in hardware land, anyway. Product defects - and, crucially, their associated cost to the company - are quantified

Quality is not some abstract, feel good concept like “developer experience”. It’s a real, hard number of how much money the company loses to product defects.

Almost every professional software developer I’ve ever met is completely and vehemently opposed to any part of their workflow being quantified. It’s dismissed as “micromanagement” and “bean counting”.

Bruh. You can’t talk about quality with any seriousness while simultaneously refusing metrics. Those two points are antithetical to one another.
by aenis | 2025-07-12 08:11:54+00:00
I am not pointing fingers at low level engineers - I specifically blame their senior tech staff. The lead architect who later became their CTO (and is since retired). Tha guy knew full well.

I dont deny the management was criminally complicit in the cover up, but it starts with bugs, then lies and dishonesty and cowardess of technical staff - and only then it has a chance of becoming what it became because of atrociously unethical management. They all belong in case studies taught to both tech and business majors.
by Laihela | 2025-07-12 08:11:57+00:00
These days the term "woke" has lost almost all meaning. It used to mean being "awake" i.e. aware of socio-economic factors in society. Today, as far as I can tell, it simply refers to whatever the big corporations/alt-right doesn't like. Just like how they refer to anything left of oligarchy as "communism". To me them calling themselves "very woke" reads as "we are against anti-human behavior", which is a good thing.
by defrost | 2025-07-12 08:13:47+00:00
> Where do you get this idea from..

a few decades in mineral and energy exploration, processing, etc. Several million line kilometres of environmental radiometric surveying, covering both exploration and industrial settling ponds across many countries. Had a 42 litre crystal pack and spectrometer airborne in Northern India over the 1998 Pokhran-II test series.

> (If it's NYT, paywall, can't read it).

Try archive.md et al.

See second link:

Unlocking Clean Energy: The Crucial Role of Rare Earth Minerals: What’s all the Fuss About?

Without an abundance of rare earth minerals, renewable energy technologies would not exist in their current form or would be highly inefficient when compared with traditional generation methods such as oil, coal and gas.

> Closest I can think of for why someone might think "rare earths" are "radioactive"

Any reason your "thinks" might be better than actual exposure to mineral processing IRL ?

China, Malaysia, other rare earth processing locations have concentrations of radioactive waste as a result of refining concentrates to end product (see NYT article).
by HolyLampshade | 2025-07-12 08:13:47+00:00
A long time ago I had a colleague turn me on to Sidney Dekker’s “Drift Into Failure”, which in many ways covers system design taking into account the “human” element. You could think of it as the “realists” approach to system safety.

At the time we operated some industry specific, but national scale, critical systems and were discussing the balance of the crucial business importance of agility and rapid release cycles (in our industry) against system fragility and reliability.

Turns out (and I take no credit for the underlying architecture of this specific system, though I’ve been a strong advocate for this model of operating) if you design systems around humans who can rapidly identify and diagnose what has failed, and what the up stream and down stream impacts are, and you make these failures predictable in their scope and nature, and the recovery method simple, with a solid technical operations group you can limit the mean-time-to-resolution of incidents to <60s without having to invest significant development effort into software that provides automated system recovery.

The issue with both methods (human or technical recovery) is that both are dependent on maintaining an organizational culture that fosters a deep understanding of how the system fails, and what the various predictable upstream and downstream impacts are. The more you permit the culture to decay the more you increase the likelihood that an outage will go from benign and “normal” to absolutely catastrophic and potentially company ending.

In my experience companies who operate under this model eventually sacrifice the flexibility of rapid deployment for an environment where no failure is acceptable, largely because of an lack of appreciation for how much of the system’s design is dependent on an expectation of the fostering of the “appropriate” human element.

(Which leads to further discussion about absolutely critical systems like aviation or nuclear where you absolutely cannot accept catastrophic failure because it results in loss of life)

Extremely long story short, I completely agree. Aviation (more accurately aerospace) disasters, nuclear disasters, medical failures (typically emergency care or surgical), power generation, and the military (especially aircraft carrier flight decks) are all phenomenal areas to look for examples of how systems can be designed to account for where people may fail in the critical path.
by defraudbah | 2025-07-12 08:15:04+00:00
yeah, I am mad :D, actually quite fine with people disagreeing and throw _hit at me. What I am not getting is why every opinion people disagree with gets downvoted, Maybe I don't understand how voting system is supposed to work here. What's wrong with grok becoming a mecha or liking new twitter payout model? I think it's fun and helps people, why be angree about it?

I can flame asses here and have fun, but I don't want to, I want people to be happy and enjoy their life.
by ozim | 2025-07-12 08:15:57+00:00
Question: does anyone run "Server GC" for the ASP.NET applications?

There is bunch of people copy pasting documentation to SO "explaining" server GC. I am running bunch of .NET stuff in VMs and never set "Server GC" and never ran into issues with default but also not sure if it is worth testing out.

I guess it does not matter much if you are running in containers but I am running on VMs in IIS.
by anonzzzies | 2025-07-12 08:15:58+00:00
I think CC is just far more useful; I use it for literally everything and without MCP (except puppeteer sometimes) as it just writes python/bash scripts to do that far better than all those hacked together MCP garbage bins. It controls my computer & writes code. It made me better as well as now I actually write code, including GUI/web apps, that's are always fully scriptable. It helps me, but it definitely helps CC; it can just interrogate/test everything I make without puppeteer (or other web browser control, which is always brittle as hell).
by sitharus | 2025-07-12 08:16:50+00:00
And that's why you don't trust AI.

As another commenter said the Airbus engine start/stop controls are located behind the thrust levers, and according to the A350 operations manual which I got my hands on there are two conditions required for the FADEC to command engine shut down: Run switch to off, thrust lever to idle.

So if that's correct on an Airbus aircraft you can't just switch off the engines when they're commanded to produce thrust. This also seems to be backed up by the difference in the guards for those controls in the Airbus cockpits.
by asdefghyk | 2025-07-12 08:16:52+00:00
I just automate it all.

Save every webpage I view - using browser extensions for several years..

Then when I want to recall something, just search for it. I worked out the storage space required once, my recollection is its one or 2 terabyte's a year

As a backup, I use history trends unlimited for about the last 3 years. I used to use pinboard archiving, but when my saved webpages got to a large number. I stopped using it, as I thought it was abusing the unlimited service offered. I loaded about 5 years of saved browser links into pinboard.
by mesmertech | 2025-07-12 08:17:16+00:00
Not the OP but this is smth I've vibecoded using cursor: https://bestphoto.ai/ MRR ~$150. It basically started as a clone of my other site: https://aieasypic.com (MRR 2.5k, 5-8k/mo rev) since I was having trouble keeping code context in mind and claude was pretty bad at doing full features with the tech stack I used for that site(Django BE, NextJS FE) making adding new features a pain, so I completely switched to a stack that claude is very good at NextJS fullstack(trpc BE) and now it can basically one-shot a feature request.

Just putting this here because a lot of times AI coding seems to be dismissed as smth that can't do actual work ie generate revenue, while its more like making money as a solo dev is already pretty rare and if you're working in a corp. instead you're not going to just post your company name when asked for examples on what you're using AI for.
by ojosilva | 2025-07-12 08:17:28+00:00
On my Tesla Model Y there's a hand brake on the push button of the right lever. On the left hand lever there's another push button, the windshield wiper liquid. Guess what have I mistakenly, and scarely, done twice already when driving at highway speeds when my windshield was a little dusty?

New designs are prone to ill decision-making from engineers, drivers and pilots alike. Every pathway of let's do it differently is the beginning of a journey of fine-tuning loops until stability.
by wuming2 | 2025-07-12 08:17:44+00:00
I came to realize spending few minutes every so many years to cast a vote in between the purchase of that great massage gun and groceries shopping, for party members who have been extensively vetted and not by you, doesn’t entitle to any control. Democracy is simply the most successful strategy to make believe into fairness and reduce costs of exercising power. With the capability to excise taxes and leverage them into debt that will always be repaid, one way or another, until the last citizen breathes government is, and always was, the greatest business of all times. Corporations who invest at every level, all the time, to make a buck do buy control. Mostly proportional to their investments into the wheels of government.
by Dylan16807 | 2025-07-12 08:20:34+00:00
> Mains is only regulated to a few % in frequency from what I've read.

You've read wrong. While it's a different network, there were articles talking about how if the Texas grid stayed under 59.4Hz for a few minutes longer, some generators would have started cutting out to prevent damage, and the whole thing might have collapsed. So that's a 1% deviation being defcon 1.

And I found a page saying this about the European grid: "The allowed mains frequency range in normal operation is thus obtained at 49.8 Hz to 50.2 Hz." "short term deviations until 800 mHz are allowed (49.200 Hz to 50.800 Hz)."

> But you can see 0.05 Hz deviations (or 1%aka 1000 ppm).

That's 0.1%