MurphyA/hacker-news huggingface dataset:
by brainless | 2025-08-21 04:22:30+00:00
So you mean to say you have never seen a founder launch a software that had bugs?

And also, I am not selling Let's Order. I am selling vibe coding, building a product around it, content and coaching - and yes I have customers for this.

I understand people getting mad. I am an engineer, 16 years of building products. I would be mad if I had a cushy job in the US which I felt is under threat from AI. I switched to vibe coding because I see the benefits for the rest of the world, which most engineers with cushy jobs never cared about. And there is money in this for someone like me, driving this solo from a life that is far away from VC funded startups.
by SilverElfin | 2025-08-21 04:23:10+00:00
The prices are insane for all fast food near me. Taco Bell and Subway are also like this. Six bucks for a single chalupa or whatever? Fifteen bucks for a foot long sub? Might as well go to a nicer restaurant. The speed isn’t enough to justify it.

But also the menus have changed. I noticed during COVID lockdowns many of them eliminated breakfast all day, and other things. It’s not just the prices. The experience is itself different. I’m not sure lowering prices will bring back customers.
by mdaniel | 2025-08-21 04:24:11+00:00
This may be heresy in an AWS thread, but as a concept Bicep actually isn't terrible: https://github.com/Azure/bicep/blob/v0.37.4/src/Bicep.Cli.E2...

It does compile down to Azure Resource Manager's json DSL, so in that way close to Troposphere I guess, only both sides are official and not just some rando project that happens to emit yaml/json

The implementation, of course, is ... very Azure, so I don't mean to praise using it, merely that it's a better idea than rawdogging json
by necovek | 2025-08-21 04:25:38+00:00
There is no need for being nasty, especially when you are wrong.

More importantly, you didn't think it through: this is really what I am doing, but this executes a script which needs to have permissions to push certificates to another VM (I do it with passphrase-less SSH), and then needs to have permissions to reconfigure my mail server with those updated certificates as they are on the same domain (using sudo from the unprivileged user) — how this script breaks through security barriers is what's the issue, not running the script.

ACME protocol does not help there: certbot needs tomupdate my DNS zone (has my full API keys), then I need to securely share only the certs (private part too) and nothing else (I admit to not have bothered to restrict it too much), and the target, upon receiving updated certs, needs to reconfigure the mail server to use them. Really, an exploit in certbot (imagine a MITM attack) would get the attacker access to my DNS, and my mail server configuration. Custom stuff could help (eg. I could be pushing cert to a secrets store on one end, and pulling it down on another), but that's more work, and has its own risks.

My point is that I am not doing the most encapsulated thing, and there will be plenty others who do even worse, thus exposing themselves to even worse security risks.

That's what we need to look at to evaluate if a change is more or less secure.
by heavyset_go | 2025-08-21 04:25:43+00:00
LLMs quite literally work at the level of their source material, that's how training works, that's how RAG works, etc.

There is no proof that LLMs work at the level of "ideas", if you could prove that, you'e solve a whole lot of incredibly expensive problems that are current bottlenecks for training and inference.

It is a bit ironic that you'd call someone wanting to control and be paid for the thing they themselves created "selfish", while at the same time writing apologia on why it's okay for a trillion dollar private company to steal someone else's work for their own profit.

It isn't some moral imperative that OpenAI gets access to all of humanity's creations so they can turn a profit.
by throwmeaway222 | 2025-08-21 04:27:07+00:00
Agents.md is just wrong altogether. if you're using claude just let it summarize for you and save it in its own way. There is absolutely no reason to standardize because the agentic code may have different ways of picking stuff up anyway.

Too big to fit all this crazy stuff?

Project overview Build and test commands Code style guidelines Testing instructions Security considerations

The only thing that might be useful is this:

ui is a CRA app, it uses yarn dev (even that is more than you need)

server is a Python app and it uses make

yeah everything else both claude and cursor easily find, build and run tests autonomously without even describing these projects.
by danpalmer | 2025-08-21 04:27:49+00:00
The article mentions Waymos and other self-driving taxis, but I think this is also a generational issue.

I would never consider getting a black cab because my perception is that they are expensive, opaquely priced, and with little oversight. I'd instead get an Uber where I know the price up front, it's cheaper (I think), and I can get in touch with someone if there's an issue.

My parents though got black cabs for years so would probably consider it over Uber, or at least alongside Uber as an option.

Uber killed the black cab, it just takes decades to change the habits of millions of people.
by jbmsf | 2025-08-21 04:28:04+00:00
Recently, I've been wondering about the point of code review as a whole.

When I started my career, no one did code review. I'm old.

At some point, my first company grew; we hired new people and started to offshore. Suddenly, you couldn't rely on developers having good judgement... or at least being responsible for fixing their own mess.

Code review was a tool I discovered and made mandatory.

A few years later, everyone converged on GitHub, PRs, and code review. What we were already doing now became the default.

Many, many years layer, I work with a 100% remote team that is mostly experienced and 75% or more of our work is writing code that looks like code we've already written. Most code review is low value. Yes, we do catch issues in review, especially with newer hires, but it's not obviously worth the delay of a review cycle.

Our current policy is to trust the author to opt-in for review. So far, this approach works, but I doubt it will scale.

My point? We have a lot of posts about code review and related tools and not enough about whether to review and how to make reviews useful.
by mdaniel | 2025-08-21 04:28:46+00:00
As for "go all in on terraform," I pray to all that is holy every night that terraform rots in the hell that spawned it. And that's not even getting into the rug pull parts, I mean the very idea of

1. I need a goddamn CLI to run it (versus giving someone a URL they can load in their tenant and have running resources afterward)

1. the goddamn CLI mandates live cloud credentials, but then stright-up never uses them to check a goddamn thing it intends to do to my cloud control plane

You may say "running 'plan' does" and I can offer 50+ examples clearly demonstrating that it does not catch the most facepalm of bugs

1. related to that, having a state file that believes it knows what exists in the world is just ludicrous and pain made manifest

1. a tool that thinks nuking things is an appropriate fix ... whew. Although I guess in our new LLM world, saying such things makes me the old person who should get onboard the "nothing matters" train

and the language is a dumpster, imho
by oehpr | 2025-08-21 04:30:24+00:00
I don't find highlighting text on mobile to be too difficult, so I don't see that as a barrier imo.

for disabilities well... That one I dunno. I don't have a good concept of what kinds of UI are most convenient for each type of accessibility case.

And it's a little tempting to get lost in the weeds of who watches the watchers, but to be honest even if implemented in hacker news case, the mods themselves could vet flags for anomalies. Just this on its own would serve as a force multiplication for HN mods.

For more decentralized forms of moderation. One method might just be a simple flag appeal. Circles back to the community, they can discuss if the rule that is cited is fair, and if it wasn't possibly remove or limit flagging abilities of those who cited the rule incorrectly. And possibly some increased punishment if the appeal fails? There are lots of options there. Big wide design space.

I do think the direct text highlighting has a few important features. The Sybil attack resistance is one. That was one of the OP's primary concerns. Also, clarity on what rule was broken and why is very important, and a given rule can be verbose. It might not be obvious what specifically in a given rule was the reason for the violation. Direct highlighting lets flaggers more directly communicate what the issue is, without opening the communication channel up for a flame war.
by bpodgursky | 2025-08-21 04:32:18+00:00
> In a seismic 2024 ruling with direct relevance to Sun Valley, SCOTUS ruled that citizens are entitled to a jury trial when hit with civil penalties imposed by administrative law judges.

"Citizens are entitled to a jury trial". Is this really the hill you're going to die on — arguing that it's a terrible thing that people are entitled to defend themselves in court?
by wmf | 2025-08-21 04:33:07+00:00
I keep seeing people credit Yarvin with the rise of the alt-right or MAGA but I don't see any elements of NRx in MAGA other than the edgy attitude. None of his ideas have been implemented or if they have it's by accident. Of course his writing is so obfuscated I guess he could use hindsight to twist his own words into something like a correct prediction.
by TheDong | 2025-08-21 04:34:46+00:00
We almost all have IC Chip readers in our pocket (our cell phones), so if the government issues a card that has a private key embedded in it, akin to existing GnuPG SmartCards, you can use your phone to sign an attestation of your personhood.

In fact, Japan already has this in the form of "My Number Card". You go to a webpage, the webpage says "scan this QR code, touch your phone to your ID card, and type in your pin code", and doing that is enough to prove the the website that you're a human. You can choose to share name/birthday/address, and it's possible to only share a subset.

Robots do not get issued these cards. The government verifies your human-ness when they issue them. Any site can use this system, not just government sites.
by monkeyelite | 2025-08-21 04:35:41+00:00
y/n of strict logical checking the least interesting part of a proof. It's the insight into why it's true or false that's valuable, and that insight of Wiles was enough to convince the rest of the math community.

In other words, the chance that we find gaps and mistakes in the written proof? 100% - the chance we find out it's false due to sloppy logic? 0%.
by TranquilMarmot | 2025-08-21 04:36:59+00:00
I wanted to try out Zed. It looked fine on my laptop screen but as soon as I tried it on a 1440p monitor, the font and icon rendering fall completely flat and are a blurry mess. If your product is a text editor focused on code, your font rendering better be *top of class*.

https://github.com/zed-industries/zed/issues/7992
by bprimal | 2025-08-21 04:37:10+00:00
final system design round at openai and i'd be working on the coolest shit, making $3 mil a year in today's valuation. but, i failed. well, it was bound to happen when you make a 21 year old take system design interview. i knew the concepts but had 0 sys design interview experience.

anyway, BlackboardLM is a mock system design interview partner powered by multimodal blackboard. Just like you, he can talk, read, write, and draw on the blackboard.

i would love y'all's feedback. if you are practicing for your system design interviews, please join this discord server: https://discord.gg/MQ5eQ6xU i would love to hear from you.
by coffeemug | 2025-08-21 04:38:18+00:00
idk man, I have the opposite experience. I've always followed my instincts, and am now stuck with consequences of bad decisions that are not easy to undo. My life is good, but I feel like I squandered a real shot to be world class and am now stuck in the top echelon of mediocrity, maybe permanently.

Grass is always greener, I guess.
by elevation | 2025-08-21 04:38:21+00:00
FT8 has such a small payload that you couldn't fit an emoji, much less an average English sentence.

There's no authentication so anyone can pretend to be you. Traditional methods of verifying the sender (HMAC) would take so many hours to transmit that the physical propagation paths you're communicating through will probably collapse before you deliver the smallest verified message.

If you need to communicate information, FT-8 is not for you.
by paulmooreparks | 2025-08-21 04:38:45+00:00
I find myself acting as a brutal code reviewer more than a collaborator when I lean too heavily on an agent. I literally just typed this into the agent's chat pane (GPT-5, in this case), after finding some less-than-optimal code for examining and importing REST API documentation.

> Testing string prefixes or file extensions is bound to fail at some point on some edge case. I'd like to see more robust discovery of formats than this. This reeks of script-kiddie code, not professional-quality code.

It's true more often than I'd like that the quality of code I see generated is script-kiddie level. If I prompt carefully beforehand or review harshly after, it generally improves, but I have to keep my guard up.
by neilv | 2025-08-21 04:38:55+00:00
In Step 5, it's a bit of a "first, draw 3 circles, then draw the rest of the owl, but here's a picture of the space shuttle instead".

Semantically, that example "DAG" graph looks like a data flow diagram (not a state diagram, nor a control flowchart), which is more for modeling ongoing processes, often infinite.

The text talking about the "DAG", however, sounds more like it wants a Gantt chart. And a Gantt chart will start with hierarchical decomposition (i.e., starting with a big task, and breaking it down into progressively smaller pieces, recursively). And have interdependencies among those subtasks (e.g., task get-first-job.get-network-engineer-job can't start until task learn-networking.get-network-engineer-certification.take-the-test produces the cert; and that task has a dependency on studying for the exam). This will also show you what can and can't be parallelized. And when you start putting durations and resource allocations on your Gantt, you can even estimate when you'll hit various milestones.

If you made an example diagram for accomplishing life goals, rather than picking a random "DAG", then it would be more clear to the reader.
by hari_data | 2025-08-21 04:38:57+00:00
Most vector search tools I’ve seen focus on one type of input — like text or images. But in practice, a lot of real-world data lives in tables with a mix of text, numbers, and categorical fields.

I ran into this while trying to find similar stocks, tools, and products across multiple fields (e.g., description, sector, p/e ratio, etc.). Text-only search gave poor results. Naive feature concat didn’t work either.

So I built this small Python package: It handles mixed-column similarity search using block-wise embeddings + cosine similarity. No training required. Just plug in your tabular data and run.

Some use cases it supports:

Similar stocks → description + sector + p/e + market cap

Similar movies → plot + crew + year + ratings

Similar tools → task + specs + geometry

Would love feedback or thoughts if you’ve struggled with something similar.

repo: https://pypi.org/project/hybrid-vectorizer/
by lern_too_spel | 2025-08-21 04:39:59+00:00
The Debian experience on my kid's Chromebook in Crostini is truly fantastic. The Android experience, on the other hand, leaves a lot to be desired. I had hoped a convertible Chromebook could give them access to all the learning apps across Linux, the web, and Android on a single device; but a lot of Android apps tell the Play Store they aren't compatible, and I have to jump through hoops to get them installed.
by defrost | 2025-08-21 04:40:39+00:00
There are many metrics that can be sampled, many challenges to normalization.

eg: https://ext.to/browse/?sort=seeds&order=desc&cat=1&q=2019

is a listing of 2019 movie torrents ranked by seeds (number of clients holding full copies of a torrent version).

A normalization challenge is to group torrent variations (1080p rips and 720p rips and WEB-DL's and BluRay and etc.) and tally up and rank interest in various films over time.

Clearly Ne Zha (2019), a Chinese Animation, Fantasy, Adventure movie was a global pirate star of that year .. should it be "normalized" by population of country of origin to smooth out the home team having a billion+ in population "bias" ?

One advantage of ranking films by year and pirate copies is it provides a pragmatic measure of "staying power"

https://ext.to/browse/?sort=seeds&order=desc&cat=1&q=1964

My Fair Lady, Dr Strangelove, Rudolph the Red-Nosed Reindeer, Mary Poppins, A Fistful of Dollars, and Goldfinger are still being hoarded 60 years after their release.

* https://www.themoviedb.org/movie/615453

* https://www.rottentomatoes.com/m/ne_zha
by GoatInGrey | 2025-08-21 04:42:08+00:00
It's the writing pattern of younger Gen Z and older Gen Alpha. Combined with minimal-to-no punctuation, it can be very distracting to read. However, this is typically used in informal settings like group chats. It is very odd to see it in formal, serious, or professional settings outside of, again, DMs and the like.

I personally only made it about thirty seconds before I had to stop reading the article. The excessive line breaks and paragraphs-that-are-just-run-on-sentences on top of sporadic sentence casing and missing punctuation presents the writer as partly illiterate. I just can't shake the feeling that I'm reading the words of an, for lack of a graceful term, idiot.
by yndoendo | 2025-08-21 04:42:45+00:00
That was a puff piece void if any details. The only idea that rings out is a separation of power.

Said the USA seems to be going into the consolidation of power. SOTUS has stated that being an expert in a field and subject is meaningless, politicians should have complete say. The continuation of allow tariffs by executive order versus legislative branch, as written in law, is another example of the consolidation of government.
by 0_-_0 | 2025-08-21 04:43:25+00:00
Something isn't right with this, though. I don't remember if there was a "wide" mode, but this font, while it feels very accurate, is somehow stretched wider than what would have been default. Here's an image of something from an MX-80 that looks more like what I remember: https://technicallywewrite.com/images/2024/07/epson2.png (taken from https://technicallywewrite.com/2024/07/01/dotmatrix). Still, thanks for sharing this!

EDIT: Now I know what the issue is! Per the link above: "Like other impact printers, the Epson series of dot matrix printers used a 6x9 grid to arrange the dots for each letter. Dots could also be printed halfway between each vertical line on the grid, effectively providing a higher resolution of 12x9 for each printed character." Here's an illustration: https://technicallywewrite.com/images/2024/07/epson1.png
by aidenn0 | 2025-08-21 04:43:57+00:00
I've seen it in public school systems. It's never "this is the right thing to do" or "this is the wrong thing to do" it's "I can't justify this to my boss" so you meet with their boss who similarly passes the buck. Eventually you get high enough that it becomes "I delegated that to Person X." Then you meet with Person X who says "I don't have the power to make that decision."
by somenameforme | 2025-08-21 04:44:47+00:00
I don't understand how any person can come to a conclusion like this from this account. Some employees lied about their qualifications, showed up to work, were unable to do they work they claimed they knew how to do, were unwilling to learn or even try to do so, they quit, and the government then decided this company owed those employees 3/4 of the entire salary they would have been paid had they completed the entire crop year.

In the other issue, their representative mistakenly clicked the 'kitchen provided' food option in the paperwork instead of 'meals provided', with the government claiming there was some conspiracy to defraud the employees into taking meals instead of receiving a food stipend, when they'd been providing home cooked meals to the employees for decades, as the DOL had observed countless times.

In both cases, there was no harm to the employees whatsoever.
Show HN: SecretMemoryLocker – Q&A-Style Archive for Your Digital Life
by SecretML | 2025-08-21 04:45:44+00:00
Passwords, accounts, and digital files get lost more often than we admit. Traditional password managers don’t solve the problem of organizing everything for the long term. SecretMemoryLocker is a secure archive that works like a Q&A system for your digital life. It helps you recover lost information, keep accounts organized, and also prepare for digital legacy if needed.

I’d love to know: how do you currently handle digital data recovery and organization? GitHub: https://github.com/SecretML/SecretMemoryLocker
by thayne | 2025-08-21 04:46:12+00:00
I can't find any documentation that says Anubis does this, (although it seems odd to me that it wouldn't, and I'd love a reference) but it could do the following:

1. Store the nonce (or some other identifier) of each jwt it passes out in the data store

2. Track the number or rate of requests from each token in the data store

3. If a token exceeds the rate limit threshold, revoke the token (or do some other action, like tarpit requests with that token, or throttle the requests)

Then if a bot solves the challenge it can only continue making requests with the token if it is well behaved and doesn't make requests too quickly.

It could also do things like limit how many tokens can be given out to a single ip address at a time to prevent a single server from generating a bunch of tokens.
by noodletheworld | 2025-08-21 04:46:48+00:00
This isn't realistic.

Wanting things to be true does not make them true.

“Get a promotion this year, be a manager next year, manage the division in three years” is not a plan you can execute.

This is just the old self affirmation stuff you hear all the time: you won't succeed if you want it a bit. You wont succeed if want it and do nothing. You will succeed if you go all in, 100%.

It is BS.

You wont succeed if you go all in, statistically.

You might get a different outcome, but you wont hit your goal.

It is provably false that everyone who goes all succeeds; Not everyone gets to be an astronaut, no matter how hard they work.

The reality is that some people will put a little effort in and succeed, and some people will put a lot in and succeed. Other people will fail.

Your goals are not indicators of future success.

Only actual things that have actually happened are strong signals for future events.

The advice of having goals is helpful, but the much much more important thing to do is measure what actually happens and realistically create goals based on actual reality.

Try things. Measure things. Adopt things that work. Consciously record what you do, how it goes, how long it takes and use that to estimate achievable goals, instead of guessing randomly.
by physicsguy | 2025-08-21 04:49:31+00:00
Well, I think to a degree that depends what you're targeting.

Single socket 8 core CPU? Yes.

If you spent some time playing with trying to eke out performance on Xeon Phi and have done NUMA-aware code for multi socket boards and optimising for the memory hierarchy of L1/L2/L3 then it really isn't that different.
by dranudin | 2025-08-21 04:49:31+00:00
Well, I was never taught otherwise. However lots of the other kids later in high school had developed another way of writing. So me writing cursive, now, as a grown man, is a little strange. I still write with the fountain pen, because it is much nicer to write. You need almost no pressure and that is good for your fingers, if you need to write for a longer time.