MurphyA/hacker-news huggingface dataset:
by gortok | 2025-07-09 12:47:30+00:00
I am baffled by the irrational exuberance of the MCP model.

Before we even get into the technical underpinnings and issues, there's a logical problem that should have stopped seasoned technologists dead in their tracks from going further, and that is:

> What are the probable issues we will encounter once we release this model into the wild, and how what is the worst that can probably happen.

The answer to that thought-experiment should have foretold this very problem, and that would have been the end of this feature.

This is not a nuanced problem, and it does not take more than an intro-level knowledge of security flaws to see. Allowing an actor (I am sighing as I say this, but "Whether human or not") to input whatever they would like is a recipe for disaster and has been since the advent of interconnected computers.

The reason why this particularly real and not-easy-to-solve vulnerability made it this far (and permeates every MCP as far as I can tell) is because there is a butt-load (technical term) of money from VCs and other types of investors available to founders if they slap the term "AI" on something, and because the easy surface level stuff is already being thought of, why not revolutionize software development by making it as easy as typing a few words into a prompt?

Programmers are expensive! Typing is not! Let's make programmers nothing more than typists!

And because of the pursuit of funding or of a get-rich-quick mentality, we're not only moving faster and with reckless abandon, we've also abandoned all good sense.

Of course, for some of us, this is going to turn out to be a nice payday. For others, the ones that have to deal with the data breaches and real-world effects of unleashing AI on everything, it's going to suck, and it's going to keep sucking. Rational thought and money do not mix, and this is another example of that problem at work.
by westpfelia | 2025-07-09 12:47:31+00:00
Did you do any due diligence around what Claude told you was possible or did you blanet trust it?

Because you MUST be the first person to ever have an AI tell you something confidently that was wrong or doesnt exist.

Seriously the ven diagram of AI users and notion users is a circle. There is a discord. You could have reached out and asked people what their experience was. This is 100% on you. And why dont they have instant support? Like 1000 people work at Anthropic and maybe 10 of those people are in support. Between you and the millions of users they probably miss a lot. And its not like at 200$ a month you have some SLA terms.
by kevindamm | 2025-07-09 12:47:54+00:00
It's a power saw, or screw gun, but not a Tunnel Boring Machine. When the task is big enough, it goes a little off the rails. With guidance, and persistence, you can churn out a lot of code with barely more than supervisory effort.

I somewhat agree with both your and GP perspectives. It's getting more hype than it has earned, and the promise that this path leads to AGI, despite 10× sizes of models yielding diminishing returns on performance. But it's not vaporware, it can produce fluent text faster and cheaper than humans, so it doesn't go in the "why are they buying?" bin with NFTs.

The questions getting lost in the middle is "do we need to churn out even more code and trust that it's been reviewed?" and "is using this going to semi-permanently disable most of the knowledge workers?"

If there's even a chance that my executive functions and related mental faculties are degraded by using LLMs then I would rather not. I try it a little and keep a finger on the pulse of the community that are going all-in on it. If it does transform into something that's 99% accurate and with a knob letting me dictate volume of output, I'll put more effort into learning how to hold it. And hopefully by then we'll be able to confirm or refute any of the long-term side effects.
by shrubble | 2025-07-09 12:48:00+00:00
In a corporate environment, for internal use, I often see egregiously specced VMs or machines for sites that have very low requests per second. There's a commercial monitoring app that runs on K8s, 3 VMs of 128GB RAM each, to monitor 600 systems; using 500MB per system, basically, just to poll it each 5 minutes, do some pretty graphs, etc. Of course it has a complex app server integrated into the web server and so forth.
by rhubinak | 2025-07-09 12:48:03+00:00
Slovak here living in Czechia. Adopting euro would give you a seat at the ECB granting influence over monetary policy in the whole Eurozone. You'd also get cheaper money (think mortgage rates going from ~7% (current rates in Poland) to less than 4% (current rates in Slovakia)). Do you have to exchange money when traveling abroad? Now imagine buying/selling stuff abroad as a company and multiply that by a lot. You get the picture. For countries that deal mostly with Eurozone based countries (which are most countries in Europe) you get massive savings that'll make the country more attractive to outside investors. Any potential price increase would be dwarfed by the rise in wages. All of this happened in Slovakia (and would be great to happen in Czechia if not for previous eurosceptic governments that massaged public opinion heavily). Sadly, the successive corrupt governments of Robert Fico ate many of the benefits to ordinary folks and Russian propaganda machine left some people questioning the value of euro and EU membership. But even 15+ years after adopting € the approval rating in Slovakia is very strong. All of this would be much worse without the euro. Personally, I'm all for everything that gets Europe closer to federalization and strengthens it.
by tgv | 2025-07-09 12:48:13+00:00
I think there are other difficult scenarios as well, and that you might underestimate the size of an island. There are isolated cities, e.g. Perth with 2M inhabitants, and practically nothing around it.

One option --but it might require some centralization-- is that people announce they're going to travel, and stash a bunch of messages. If the sender can provide information about the geographical destination, that could help.

About monetization: remember what money did to the internet. But the above option would practically invite some form of payment. Thinking of Perth, that would lead to a kind of "Mad Max meets Johnny Mnemnonic".
by remon | 2025-07-09 12:48:56+00:00
Well, it's a fact, not a narrative. I think the actual debate is whether or not boosting economies of countries in the EU that for one reason or another were or are behind on the curve is a net win. I think it is. Just as it is perfectly justified for other countries to feel a bit hard done by if that same country after an estimates 280 billion euro injection is still rejecting the shared currency of that body.
by OrvalWintermute | 2025-07-09 12:49:27+00:00
There is an acute lack of agency here

LLMs telling you to do something, when we know that they hallucinate, in no way frees you from the responsibility that you have to do your own due diligence.

Take a lesson from defense & space and adopt a TRL mindset towards LLM advice in verifying…

TRL 1: You’ve got a basic idea for a new software feature or tool, backed by some research. It’s just a spark, like reading about a new algorithm and thinking it could solve a problem.

TRL 2: You sketch out how the idea could work in an app or system, but it’s still on paper or a whiteboard—no code yet, just a rough plan.

TRL 3: You write some experimental code or a small script in a test environment to see if the core idea holds up, like a proof-of-concept for a new feature.

TRL 4: You build and test individual pieces of the software (like modules or functions) in a controlled setting, ensuring they work together in a lab-like environment.

TRL 5: Your code is tested in a setup that feels closer to the real world, like running it on a staging server with simulated user data.

TRL 6: You’ve got a working prototype of the software that runs in a realistic environment, like a beta version tested with actual user workflows.

TRL 7: The software is nearly complete and tested in a real-world-like setting, such as a pilot project with actual users or live data.

TRL 8: The software is fully built, tested, and debugged, ready to be deployed to production after passing all checks, like a release candidate.

TRL 9: The software is live, running successfully in production, and reliably handling real users or tasks, like a fully launched app.

Generic advice:

Verify with primary sources

Ensure features exist before payment

Cross-check examples

Expect LLM errors

Consider prompt & context engineering
by steve_taylor | 2025-07-09 12:49:32+00:00
It can cover as much of the back-end that your front-end uses directly as you’d care to deploy as one service. Obviously if you’re going to have a microservices architecture, you’re not going to put all those services in the one Next.js app. But you can certainly build a hell of a lot more in a monolith that a personal blog serving a handful of .md files.

In terms of the front-end, there’s really no limit imposed by Next.js and it’s not limited to a narrow band of the problem (whatever that gibberish means), so I don’t know what you’re even talking about.

> How are we solving that today with Islands or RSCs?

Next.js/RSC solves it by loading JavaScript only for the parts of the page that are dynamic. The static parts of the page are never client-side rendered, whereas before RSC they were.
by bluGill | 2025-07-09 12:49:32+00:00
It was also the result of Europe (now the EU) choosing not to oppose the US (at least mostly - they did in small areas). The EU has more people and combined could - if they wanted - be more powerful than the US. However they have never seen any point - they mostly (not entirely) agree with the US and so it would be a waste of their limited time to do that instead of what they were doing instead.
Show HN: XKCD comic battle! (ELO rating)
by sipsofchai | 2025-07-09 12:49:44+00:00
As an xkcd fanboy, I always wanted to find out what peoples' favourite xkcd comic was. So, inspired by the Tom Scott video where he "finds out what the best thing is", here is my attempt to find the "best" comic using a 1v1 battle format.

Pairings are completely randomised, and it uses the Elo rating system to calculate the leaderboard.
by monocasa | 2025-07-09 12:49:44+00:00
It absolutely will. Your process is only assigned a single processor group at process creation time. The only difference now is that it's by default assigned a random processor group rather than inheriting the parent's. For processes that don't require >64 cores, this means better utilization at the system level. However you're still assigned <=64 cores by default per process by default.

That's literally why 7-zip is announcing completion of that manual work.
by jaxr | 2025-07-09 12:49:44+00:00
Lost me un the first section. It's like when anti-vaxers say vaccines are bad because they were developed unethically. It's just a bad argument.

Also, I learned about Bitcoin when it was worth 8 USD and got obsessed with the tech but always thought it was over hyped. I never owned one Satoshi. I still think crypto ended up being hype and not adding real value to the world. But I could be very very wealthy if I had jumped to that hype train XD.

I think with all the hype, AI does provide some real value to the world. That's the train I'm jumping in.
by aswerty | 2025-07-09 12:50:11+00:00
It's clear to me that the frontend conversation space is broken. Not even just the ecosystem being a mess.

Boiling down the conversation I see in the article, it just seems to be: the browser as a HMI vs the browser as a an application runtime. Depending on what you want to do one might be a better fit than the other. But the points it puts forward are fluff arguments like "it's a breadth of fresh air" or "it loads faster".

It's difficult to articulate the source of just how broken the discussion space is; nor have I made a particularly strong argument myself. But I think it's important to keep pushing back on conversations that position framework's like they are brands winning hearts and minds. Ala the fashion industry.
by darkwater | 2025-07-09 12:50:17+00:00
Yes, but then you have a hard-dependency on HA for inter-network communication, which I try to avoid as much as possible (but I fail to, for a couple of subsystems). My failure model is:

1) no electricity, everything down but fiber, wifi, HA and the doorbell (they run off an UPS)

2) internet down: no problem, you just cannot reach the home automation from outside

3) Home assistant down: zigbee devices are paired together (like buttons + bulbs) or I have physical zigbee relays controlling dumb bulbs.

But, as said, I have some subsystem not fully working when (3) happens, like a zigbee button controlling a tasmota-based fan control.
by danbruc | 2025-07-09 12:50:40+00:00
According to Wikipedia the two variants exist because the digits of large numbers used to be grouped into groups of six digits but in order to improve readability this was eventually changed to groups of three digits and some insisted that with that also the naming should be adjusted. A long scale trillion has three digit groups when using groups of six digits (1,000000,000000,000000) and six after the switch to groups of three (1,000,000,000,000,000,000) which then should be a short scale sextillion but somehow it ended up as a quintillion.
by brabel | 2025-07-09 12:50:50+00:00
That's such a shame. I bought quite a few IKEA devices as they were the cheapest in the market and were Zigbee-driven, which meant I could use it with my custom-made SmartHome software (which does what Home Assistant does but without a heavy runtime) and they connected with other manufacturer's devices (they form a mesh, so as long as you have a Zigbee device every few 10s of meters, the devices can communicate with the central hub even from very far away). I wonder if I will be able to connect to Thread devices at all now.
by arp242 | 2025-07-09 12:51:33+00:00
> Computers didn’t exceed 64 logical processors per system until around 2014.

Server systems were available with that since at least the late 90s. Server systems with >10 CPUs were already available in the mid-90s. By the early-to-mid 90s it was pretty obvious that was only going to increase and that the 64-CPU limit was going to be a problem down the line.

That said, development of NT started in 1988, and it may have been less obvious then.
by ecballer17 | 2025-07-09 12:52:25+00:00
We recently wrote this whitepaper on how we’re building our decentralized protocol for LLM training and fine-tuning. Would appreciate any feedback! DM me on twitter or LinkedIn if you’re interested in chatting!

Twitter: https://x.com/eshanchordia LinkedIn: https://www.linkedin.com/in/eshanc/
by bob1029 | 2025-07-09 12:52:54+00:00
JSON can work surprisingly well as a blob column up to a point. The part that is interesting is that point varies dramatically depending on where and how that blob is being serialized.

If you are storing json blobs in SQLite and using a very fast serializer (gigabytes/s), then anything under a megabyte or so won't really show up on a hot path. Updates to complex entities can actually be faster, even if you're burning more IO and device wear.

If you need to join across properties in the JSON, I wouldn't use JSON. My canary is if I find myself using the built in json query functionality, I am too far into noSQL Narnia.
by GolDDranks | 2025-07-09 12:52:59+00:00
And in East Asia, we use a system based on exponents of 10000. I kind of like it, except when I have to think about it and the short/long scales at the same time.

10000^1 = 万 10000^2 = 億 10000^3 = 兆 10000^4 = 京
by rob_c | 2025-07-09 12:53:01+00:00
Same reason the same models don't fundamentally understand all languages. They're not trained to. Frankly the design changes to get this to work in training is minimal but this isn't the way English works so expect most of the corporate LLM to struggle because that's where the interest and money is.

Give it time until we have true globally multi lingual models for superior context awareness.
by wkat4242 | 2025-07-09 12:53:41+00:00
Yeah and matter needs internet access in many cases. It was supposed to be the saviour of open home automation. But in practice it leaves too many strings attached that the manufacturer can take advantage of.

And despite it not being open enough for open source enthusiasts, it's also got a bad name with manufacturers. I work for one and I asked why we wouldn't implement matter and thread and it was laughed off because apparently marketing will never give up their own app as a data collection and cross selling vehicle. Of course those are exactly the reasons I don't want this.

I didn't even know about the certification that only big players can do and the locked firmware requirements. It's ridiculous. Why were thread and matter hailed as the open revolution when they're exactly the opposite?
by mromanuk | 2025-07-09 12:54:31+00:00
According to Runpod pricing page, you can run H100 for $2.39, it can go as lower as $528,629.76

WARNING: This is highly speculative and napkin math

H200 (141 GB HBM3 - $3.99/h - 1.4x perf) 216 x 24 x 17 = 88128h = 351.895,104 (17 days and 216 cards)

B200 (192 GB HBM3e - $5.99/h - 2.8x perf) 158 x 24 x 9 = 34128h = $204.426,72

Probably wrong math, should be more efficient and cheaper. Doubt that they have 100/200 cards available for that long.

Source: I've only trained using RTX4090 and stuff like that with 8 cards.

Not affiliated in any way with Runpod.
by amluto | 2025-07-09 12:54:39+00:00
As I understand it, Thread can transparently extend its mesh over regular IPv6 (Ethernet, Wi-Fi, etc), whereas extending a Zigbee (or Z-Wave) mesh beyond useful mesh range is a mess. I have a Z-Wave network that uses two controllers, and it sucks. It’s utterly obnoxious to maintain, the whole concept of multiple controllers is barely supported by zwave-js-ui, it is far to dumb to recover quickly on its own if it transiently loses connectivity to a node, and roaming between controllers is a complete non-starter.

I haven’t tried Thread yet, but I’m delighted by the concept of having a couple of easy-to-maintain base stations (routers or whatever they’re called) connected to the local network and having devices automatically roam between them.

I am not delighted by the fact that an Apple Home Thread network, a Google Home thread network, and a Home Assistant native thread network appear to be different things that are not entirely compatible with each other.
by scarface_74 | 2025-07-09 12:56:08+00:00
I would too. If we agree that monopolies are bad for private industry, why isn’t it just as bad as having one world power. I think Trump and MAGA are uninformed idiots. But they have caused the EU to start building up their own military industry, countries to focus more on their own research and decouple themselves from the US. I can’t see how that’s a bad thing.

The US has given me all sorts of opportunities I wouldn’t have anywhere else in the world as a native born citizens. I plan to extract as much as I can from it and keep my eyes open to retiring somewhere else.

I continuously vote and advocate for policies like universal healthcare, pre-K education, etc. But what are you going to do when voters vote for politicians thst ars against their own interests - getting rid of FEMA when the states that need it the most are Republican, Medicaid, etc.

This isn’t a pie in the sky shrill “I’m leaving the US tomorrow”. But my wife and I already did the digital nomad thing domestically for a year starting in late 2022 and going forward starting next year, we are going to be spending more time out of the country in US time zones while I work remotely starting with Costa Rica.
by lxgr | 2025-07-09 12:56:23+00:00
They were apparently able to extract an eUICC's private key:

> As a result of eUICC compromise, we were able to extract private ECC key for the certificate identifying target GSMA card.

This is supposed to be impossible, even with knowledge of SAT applet management keys. (In other words, individual eSIM profiles are still not supposed to be able to extract private eSIM provisioning keys from any eUICC.)

In the security architecture of eSIMs, compromising any eUICC's key means that an attacker can obtain the raw eSIM profile data from any SM-DP trusting it (which would be any, if it chains up to a CA part of the GSMA PKI) and do things that are supposed to be impossible, such as simultaneously installing one profile on multiple devices, or extract secret keys from a profile and then "put it back" to the SM-DP, let the legitimate user download it, and intercept their communications.
by owebmaster | 2025-07-09 12:56:31+00:00
> Because they didn't, their original comment stands as logical fallacy, ad-hominem.

I do not want to make the same mistake as you, turning discussions into personal attacks (aka ad-hominem), but you were the only one using ad-hominem in this discussion, if you felt attacked because OP said that western leaders use Putin as a scapegoat, I think that is totally on you.
by steveklabnik | 2025-07-09 12:57:19+00:00
It's a bit weirder than that, in my opinion. Ruby didn't really gain "unicode support" in the sense we mean it today until 1.9.

Before that, Ruby did "support encodings" in a sense, but a lot of the APIs were byte oriented. It was awkward in general.

https://web.archive.org/web/20180331093051/http://graysoftin...
by josephg | 2025-07-09 12:57:31+00:00
I've been getting into photography lately too and running into the same question. There's no way I'm getting an adobe subscription. But I'm not sure what tools do I want to pick up instead. Apple Photos has gotten me pretty far, but I'm hitting the limits of what it can do. And my photo library is getting pretty big now - big enough that I want some software to manage where my photos live as well.
by keiferski | 2025-07-09 12:57:34+00:00
The point is that "feeling a bit hard done by" rings a little hollow if the country feeling this way is the reason the recipient country needs investment in the first place. 280 billion euro is still less than a third of the estimated amount of damage from WW2 alone.

https://en.wikipedia.org/wiki/Polish_material_losses_during_...
by westpfelia | 2025-07-09 12:58:13+00:00
OK but what does that look like. Does valve monitor every single game? Do they force developer to provide snapshots of every single version? Or is it up to the developers to support it and valve just gives them the tools to do so? In which case basically no one would do it. Because its a lot of work.

Also what does it look like if you use multiple DRM's? Does Apple Fairplay have a carve out in their contract that doesnt let me also have Denuvo? This is honestly a minefield and as smart as the poster might be, I dont think he has answers even he would like for all these questions.
by ozim | 2025-07-09 12:58:37+00:00
Author is a software dev and still 90% of what he understands from it is “there is a box you ask smart machine silly questions and it answers like human does or can generate a funny cat”.

There is more to it but it requires more effort to learn and see for yourself instead of repeating laundry list of “why is it bad” things posted by all the other AI doomers.