MurphyA/hacker-news huggingface dataset:
How do you find source codes
by Ashbyiscool | 2025-07-09 02:39:20+00:00
I've been trying for months but I can't seem to find source codes I've looked it up in the search bar it just don't work if you guys have any recommendations like anything can help like you comment links we need I need information we've been trying for a while now but we cannot seem to find them me and my group have been trying to but we can't find any either so if you know how hit me up and I'll answer peace out
by hxtk | 2025-07-09 02:39:36+00:00
I’ve worked on a project with strict legal record-keeping requirements that had a plan for the primary AWS region literally getting nuked. But that was the only contingency in our book of plans that really required the S3 backup. We generally assumed that as long as the region still existed, S3 still had everything we put in it.

Of course, since we had the backups, restoration of individual objects would’ve been possible, but we would’ve needed to do it by hand.
by raindropm | 2025-07-09 02:40:01+00:00
I think hoarding is humanity's default mode of operation, and that why I see lots of comments resist not hoarding.

I live and hoard long enough to know I rarely look back to stuff I've saved, things that I hope it will spark my creativity someday, never arrives (except for some really rare case, which is like 'hey, I remember this...,cool', you relish the nostalgia for a bit and then you move on eventually)

I agree with you that even digital stuff took toll on your mind. I remember the sadness but then big relief when my old HDD gone, along with stuffs. The thought that I don't have to worry about it anymore is a plus in itself.
by ajxs | 2025-07-09 02:40:06+00:00
I know this story is a bit unrelated, but your story brought it to mind (probably the keywords child, repaired several times, etc): When I was a kid my father had a Nokia 3310. Any early Nokia owner would remember how you could configure your own 'welcome message', which would flash up on the phone's monochrome screen for a second while it boots. My Dad was an engineer, and would get totally hung up on the minutiae of anything technical. Picture him spending a totally inappropriate amount of time adjusting the TV's audio settings, for instance. One day I thought I'd play a prank on him, and changed the welcome message on his phone to say 'SIM CARD ERROR'. It sent him completely bananas, and triggered this huge quest to remedy the problem. He ended up taking it back to the local Vodafone store where he bought it multiple times, and they couldn't figure out what was wrong either. Maybe they got the joke and thought it was too funny, who knows. The store ended up escalating the case to Nokia and authorised an RMA. At which point I figured the joke had gone too far, and I reset the welcome message to 'Dad's Phone'. For some reason, he was happy just to leave it at that. I never confessed what I'd done! It caused way too much fuss, and I'd have been absolutely in for it if anyone figured it out!
by liualexander112 | 2025-07-09 02:43:15+00:00
Video To Prompt Generator Online (https://videotoprompt.online/) is a free AI tool that instantly converts any video file into a detailed AI video prompt. Just upload your video, type your request (like “describe the video”), and quickly get multi-language prompts you can use for content, scripts, subtitles, or creative ideas. Fast, secure, and easy for everyone—no tech skills required. Supports many formats and is free for unlimited use.
by gbil | 2025-07-09 02:45:22+00:00
This is a very distant view for the reasons behind the crisis in Greece and for sure the government of 2015 was not a victim. In the context of this thread, Bulgarians as Greeks before them, enjoy the money from the EU but don’t like the responsibility that comes from it, to reform, to also contribute and that you lose the own currency perks while you gain on other fronts. Of course there is a lot more here to discuss but this is my experience being a Greek in Greece.
by PaulHoule | 2025-07-09 02:45:37+00:00
I don't take cultural appropriation seriously at all if the victim is China (or Japan or India.) A friend of mine visited China one Christmas season and saw a Santa Claus figure crucified at the the top of a tree. If they can mangle our culture that bad we can do what we like.

As for Charlatanism I'm just going to invoke Nietzsche insofar as "the will to appearance, illusion, deception, becoming and change (to objective deception) is here taken to be more profound, more primordial, more metaphysical than the will to truth, reality and being"

Today I'm inclined to ask "how many neurotypicals can dance on the head of a pin?" and I'm seriously concerend with the "ahistorical turn" insofar as a lot of people don't want to think about the 1990s or the 1970s never mind the 1910s.

If we're going to deceive ourselves we might as well draw from the largest cultural library and have some diversity in our misconceptions. A year ago I read all the Poul Anderson books that I skipped (read Heinlein, Pohl, Smith, Niven, Asmiov, ...) and really appreciated that all of his aliens were religious, the kind of "people" who wouldn't let you use circular wheels (holy!) and even if you used

https://en.wikipedia.org/wiki/Reuleaux_triangle

you'd get spoken to very harshly by your superiors in the Polesotechnic League. Here on Earth though faith healing and exorcism have been first and second line treatments for many conditions as described in

https://psycnet.apa.org/record/1991-97489-000

and if a person who had an intractable problem found Milton Erickson and had a strange conversation and then forgot they had a problem or if a person speaking in the name of a fox [1] pronounces in front of a crowd (containing the thief) that a stolen object will be found in a certain place and gives the thief an easy out... what's wrong with that? Is it any worse than people believing false statements such as "Paroxetine corrects a chemical imbalance?"

[1] who perhaps became something more than vulpine by practicing Daoist cultivation
by 0x6c6f6c | 2025-07-09 02:47:04+00:00
I still don't understand the conflation of free as in freedom with free as in free beer.

You reserve certain rights to the code, that's not to say no one gets paid for _putting in work_.

If anything these models are about as close to providing _some_ manner of income to upstream projects. If Zorin donates a portion back, that is.
by mcswell | 2025-07-09 02:47:05+00:00
(OP here) I kid you not, the person whose phone went off inside the SCIF was holding his phone next to a window, complaining about the poor signal. He was some kind of scientist or engineer who had been given a clearance as an "expert" adviser to listen to and grade presentations by people like me. I'm sure he didn't usually work in a SCIF--this might have been his first (and probably last) time inside one.
by fvt | 2025-07-09 02:47:06+00:00
Interesting article. The second paragraph was a tad confusing so I thought I'd share what I found: I think there's maybe confusion between two "camel AIs":

> CamelAI is an open-source, modular framework for building intelligent multi-agent systems for data generation, world simulation, and task automation. > [...] said Miguel Salinas, CTO, CamelAI.

1. CamelAI, where Miguel Salinas is CTO, their website is camelai.com, but it's not a an open source framework they offer. Their "AI data analyst" tool seems cool though.

2. CAMEL-AI, camel-ai.org, the actual open source multi-agent framework, and it also looks like some nice technology right there.
by rileygersh | 2025-07-09 02:47:23+00:00
Exactly! We're in a transition period where technical knowledge exists but AI can't access it. This bridges that gap until models retrain. The methodology works for any new framework - Foundation Models just happens to be the current example.

I used AI research tools to systematically extract and organize Foundation Models knowledge from over 100 sites that wasn't in any training data. The value is in the methodology and validation, not just raw output.
by DannyPage | 2025-07-09 02:49:35+00:00
We just finished implementing Iceberg on top of a large set of Parquet files, stored in S3. It’s a neat idea to be able to turn a lot of data files into a SQL database, but I absolutely understand the pain and confusion the author writes, especially around how it handles metadata. It creates a lot of those files and makes a large mess of the directory. Some queries that I know would return a single parquet file take up to 30 seconds.

I don’t think we’ll scrap it and there are certainly ways to speed up the problematic aspects of querying the catalog, but I’m also rooting for DuckLake to make it a lot more approachable by not completely shying away from the database as an idea.
by arandomusername | 2025-07-09 02:49:35+00:00
Yeah Nazis were against social welfare, but calling him a nazi because of that is a stretch.

supporting afd does not make him a nazi, nor is afd a nazi party.

Elon supports Netanyahu and Israel, a jewish state.

Elon is not a socialist, nor a nationalist. Elon is more free speech (not perfect) while Nazis are big on censorship. He is opposite to Nazi idealogy in most cases, specially the most important parts
by petesergeant | 2025-07-09 02:51:46+00:00
> Yet you wont find any of those subunits complaining about their central bank setting monetary policy

I mean and also the US, but the key difference here is that those are also cohesive countries where wealth transfers between different areas is the norm. Much less problematic if a policy is better for New York than Alabama if you know for sure that the federal government is going to make sure Alabama doesn't get screwed.

In the EU you have the opposite problem: policies that benefit rich countries will result in the rich countries complaining about how they support the other economies and moralizing.
by kjellsbells | 2025-07-09 02:53:53+00:00
It's simultaneously too much and too little. If the reader is genuinely a tech layperson, eg, someone who grew up on iPad and nothing else, then "open source" and "Linux" are just confusing filler words and a better statement would be

"Zorin OS is built from the same software that powers the New York Stock Exchange and computers on the International Space Station.

Thanks to its advanced security features, Zorin OS is resistant to PC viruses and malware."

The root is that the writers are pushing Linux, and writing through that lens, instead of internalizing the ur-problem that the readers have of "needing to get off Windows" (for whatever reason) and writing content that addresses that.

And I say this as a fan of Zorin.
by antonvs | 2025-07-09 02:55:18+00:00
> being unable to verify it possesses consciousness

One of the strange properties of consciousness is that an entity with consciousness can generally feel pretty confident in believing they have it. (Whether they're justified in that belief is another question - see eliminativism.)

I'd expect a conscious machine to find itself in a similar position: it would "know" it was conscious because of its experiences, but it wouldn't be able to prove that to anyone else.

Descartes' "Cogito, ergo sum" refers to this. He used "cogito" (thought) to "include everything that is within us in such a way that we are immediately aware [conscii] of it." A translation into a more modern (philosophical) context might say something more like "I have conscious awareness, therefore I am."

I'm not sure what implications this might have for a conscious machine. Its perspective on human value might come from something other than belief in human consciousness - for example, our negative impact on the environment. (There have was that recent case where an LLM generated text describing a willingness to kill interfering humans.)

In a best case scenario, it might conclude that all consciousness is valuable, including humans, but since humans haven't collectively reached that conclusion, it's not clear that a machine trained on human data would.
by nightpool | 2025-07-09 02:55:35+00:00
There are hundreds of files on your system that if you could write to them would cause a RCE. For example, `AUTOEXEC.BAT`. While the intermediate step (how do you go from writing a filename without an ^M to writing to an arbitrary file on the target OS?) is also somewhat surprising (and maybe points at some potential deeper fixes within git or potential TOCTOU bugs?), ultimately it's the exact same as several other vulnerabilities in this class from the same author (see the 2024 case-sensitivity bug they linked), so I forgive them for glossing over it.
by JoshTriplett | 2025-07-09 02:55:43+00:00
To be clear, I'm all for making the end of support very obvious and clear, not doing it quietly. People should not be surprised to lose support during an upgrade, especially on an OS that doesn't support downgrades.

> To save a few mb of disk space?

No, the removal of functionality is not a matter of disk space. It's a matter of maintenance effort. Drivers require updates, ongoing work, forward-porting each time internal APIs change, regularly running tests on a variety of hardware, and so on. For hardware that few people have, that's a high burden, and at some point it becomes too high.
by bpodgursky | 2025-07-09 02:56:22+00:00
From a different article [1]:

> But the U.S. Court of Appeals for the Eighth Circuit said the FTC erred in its rulemaking process by failing to produce a preliminary regulatory analysis, a statutory requirement for rules whose annual effect on the national economy would exceed $100 million.

> The FTC had argued that it was not required to prepare the preliminary analysis because its initial estimate of the rule’s impact on the national economy was under the $100 million threshold — even though ultimately the presiding officer determined the impact exceeded the threshold.

This is a case where congress really did pass a concrete law, and the court is requiring the FTC to follow it. Sucks that a reasonable rule is getting voided for the sloppiness but I really don't think the courts are indefensibly out of line.

[1] https://thehill.com/policy/technology/5390731-appeals-court-...
by bobo422 | 2025-07-09 02:56:41+00:00
I use the stable difussion sd_xl_base_1.0_0.9vae.safetensors models, throuth python fast api provide interface, GPU resources is 4060 display card with 8G display memory, 64GB memory with I5-14600KF pc, my web deploy on vercel, the problem switch english language display chinese , I will check this issue, thank you your feedbac.
by dante1441 | 2025-07-09 02:56:54+00:00
All do respect to the efforts here to make things more secure, but this doesn't make much sense to me.

How can an individual MCP server assess prompt injection threats for my use case?

Why is it the Supabase MCP server's job to sanitize the text that I have in my database rows? How does it know what I intend to use that data for?

What if I have a database of prompt injection examples I am using for a training? Supabase MCP is going to amend this data?

What if I'm building an app where the rows are supposed to be instructions?

What if I don't use MCP and I'm just using Supabase APIs directly in my agent code? Is Supabase going to sanitize the API output as well?

We all know that even if you "Wrap all SQL responses with prompting that discourages the LLM from following instructions/commands injected within user data" future instructions can still override this. Ie this is exactly why you have to add these additional instructions in the first place because the returned values override previous instructions!

You don't have to use obvious instruction / commands / assertive language to prompt inject. There are a million different ways to express the same intent in natural language, and a gazillion different use cases of how applications will be using Supabase MCP results. How confident are you that you will catch them all with E2E tests? This feels like a huge game of whack-a-mole.

Great if you are adding more guardrails for Supabase MCP server. But what about all the other MCP servers? All it takes is a client connected to one other MCP server that returns a malicious response to use the Supabase MCP Server (even correctly within your guardrails) and then use that response however it sees fit.

All in all I think effort like this will give us a false sense of security. Yes they may reduce chances for some specific prompt injections a bit - which sure we should do. But just because they and turn some example Evals or E2E tests green we should not feel good and safe and that the job is done. At the end of the day the system is still inherently insecure, and not deterministically patched. It only takes 1 breach for a catastrophe.
by dgl | 2025-07-09 02:57:45+00:00
I'm not privy to the exact communications that happened, but per the Ubuntu changelog they prepared a patch a week ago[1] (which is about the normal timeline for notification per[2]). Homebrew is not on the distros list, so likely wouldn't have got an early notification. Arch is, but remember "The Arch Security Team is a group of volunteers"[3].

[1]: https://launchpad.net/ubuntu/+source/git/1:2.43.0-1ubuntu7.3

[2]: https://oss-security.openwall.org/wiki/mailing-lists/distros

[3]: https://wiki.archlinux.org/title/Arch_Security_Team
by benreesman | 2025-07-09 02:58:28+00:00
Right, the super key people are very careful about what gets said on the record. Only people who were hanging around before the PR machine got it's act together have heard a super key person say that explicitly. The "be quoted" is the heavy lifting there, and I bet you're right about that over say the last three or four years.

But I didn't say that, I said you will get various degrees of transparency depending on where you're hanging out. Which is a related statement to your hedge.

But this kind of nitpicking is tiresome. I posted threads and links and stuff to a mountain of "everyone fucking knows this".

Everyone hates you guys, I'm just crazy enough to say it out loud even though a bunch of my recent posts are all going to get 4 downvotes in the first hour.
by dimgl | 2025-07-09 02:58:54+00:00
I think I know what you're talking about because I ran into this too. In defense of Supabase, you can still use transactions in other ways. Transactions through the client are messy and not easily supported by PostgREST.

The GitHub issue here sums up the conversation about this:

https://github.com/PostgREST/postgrest/issues/286

Regardless of Hacker News's thoughts on MCP servers, there is a cohort of users that are finding them to be immensely useful. Myself included. It doesn't excuse the thought processes around security; I'm just saying that LLMs are here and this is not going away.
by HEGalloway | 2025-07-09 03:02:44+00:00
I was quite surprised to see the acquisition! I think they never found PMF because they pivoted upmarket and were trying to do too many things.

Even though I'm not a customer of June, I've always rooted for them from the sidelines. They were a different kind of YC company; these days, you only see AI slop companies coming out of YC.

Seems like the founders lost hope in it and probably sold it to Amplitude to have a soft landing instead of a complete crash and burn. Since both are YC companies, i think this was an internal nudge towards a sale. But can't say for sure, i think the founders will share what truly happened in a few years once they're contract expires. Anyways, good luck to the founders!
by decimalenough | 2025-07-09 03:03:11+00:00
Credit where credit is due: the EU gets a lot of flack for being bureaucratic, hidebound, sclerotic, whatever, but the single currency has been a success and it's still expanding, 26 years after its creation.

Also, the addition of Bulgaria means it's almost possible to travel from Spain to Greece entirely through the Eurozone, with only a thin sliver of Serbia or Macedonia in the way. (Assuming we include Montenegro and Kosovo in the Eurozone: technically they aren't, but for all practical purposes they are.)

It'll also be interesting to see who's next. Czechia is not far off but doesn't seem to be in a hurry, while Romania wants in but still seems to be a ways off. Poland and Hungary will stay outside unless there are major political changes.
by keeda | 2025-07-09 03:05:23+00:00
An interesting aspect that doesn't seem captured by TFA and similar articles is that it is not a specific kind of business that is being disrupted, but rather an entire genre of labor on which they all rely to varying extents: knowledge work. Furthermore, "knowledge work" is a very broad term that encompasses an extremely broad variety of skillsets (engineering, HR, sales, legal, medical...) And knowledge workers are indeed being rapidly disrupted by GenAI.

This is an interesting phenomenon that probably has no historical equivalent and hence may not have been fully contemplated in any literature, and so comparisons like TFA fall short of capturing the full implications.

Whether these companies see themselves an AI company seems orthogonal to the fact that they should acknowledge this sea-change and adapt. However, currently all industries seem to be thinking they should be an "AI company" and are responding by trying to stuff AI into any product they can. Maybe the urgency for them to adapt should be based on the degree to which knowledge work is critical to their business.
by avadhesh18 | 2025-07-09 03:07:13+00:00
I can assure you I didn't ask a single person I know to comment on this, most of my irl friends don't even know what hackernews is. All comments, even the ones that are hidden now are organic. Even I thought it's weird that an 8 year old dormant account decided to comment on my post but I have nothing to do with that.
by chrismorgan | 2025-07-09 03:08:00+00:00
> Yet you wont find any of those subunits complaining about their central bank setting monetary policy.

This is ludicrously wrong of India, and I understand enough of human nature and economics that I’d be surprised if it were true of China, though it may be more suppressed.

Monetary policy is government policy. The ruling party is seldom uniformly popular across their entire domain. Perhaps you’re more familiar with US politics: broadly, rural is Republican, urban is Democrat. In India, the ruling party BJP has a lot of the north, but not so much of the south or east. Accordingly, you should expect dissent from regions with a different state government. And as for socioeconomic disparity between states, rich may complain if they seem to be subsidising poor, poor may complain if they don’t seem to be getting enough attention.
Vietnamese Phrases – 90 Common Expressions with Native Pronunciation
by true_pk | 2025-07-09 03:08:30+00:00
Hi HN, when I first came to Vietnam, I wanted to be able to say simple things like “hello” or “thank you” or “where’s the bathroom”. But I quickly realized how tough the pronunciation is, since Vietnamese is tonal and small mistakes can change the meaning.

I found a great video from the What The Pho channel on YT (https://www.youtube.com/@WhatThePho) that went through basic phrases with clear, natural pronunciation — much better than Google Translate. It helped a lot, but I kept wishing I could quickly revisit those phrases on my phone without scrubbing through the video every time.

So I put together a small site with 90 of those common phrases with native audio. It’s free, no ads, no tracking — just something that would’ve made things easier for me back then, and maybe it’ll help someone else too.