MurphyA/hacker-news huggingface dataset:
by chuckadams | 2025-08-19 17:21:18+00:00
It sounds like a pretty bad approach in general to have to "filter out the bad stuff" on a case-by-case basis. It should be as simple as launching everything from a sanitized parent environment, and making it impossible to launch any tool otherwise. Or better, make that sanitized environment the default and make privileged operations be the thing that jumps through hoops to talk to a bastion/enclave/whatever that holds the actual keys.
Show HN: I built a app to find your first users by listening to Reddit community
by cosmosfr | 2025-08-19 17:21:35+00:00
Hey Hacker News,

We all know Reddit marketing can be a minefield. There's a fine line between being helpful and being a spammer. We've seen founders find their first users by genuinely engaging, but finding the right moment to add value manually is nearly impossible to scale.

I built Reddit Genius AI to fix this. It’s a "listening tool" designed to help you do outreach the right way.

It monitors relevant subreddits for keywords—pain points, competitor mentions, requests for help—and flags conversations where you can make a real contribution. The AI assistant then helps you draft a thoughtful comment, turning a cold outreach into a warm, helpful interaction.

The goal is to automate the tedious 90% of searching so you can focus your energy on the critical 10%: actually helping people.

I’m trying to build tools that keep us on the right side of the spam line. Is this a fool's errand, or is there a real need for this? I'd love your perspective.
by m3047 | 2025-08-19 17:21:50+00:00
If the report is correct, then I think something else is being inferred / implied.

If dnsmasq was only caching the ANSWER section, then the only thing which could be poisoned would be the qname. If cache poisoning for arbitrary domain names is being observed, then it would seem that information from the ADDITIONAL or AUTHORITY is being cached as well.
by retroflexzy | 2025-08-19 17:21:50+00:00
I once attempted to use XSLT to transform SOAP requests generated by our system so the providers' implementation would accept them. This included having to sufficiently grok XSD, WSDL el at to figure out what part of the chain is broken.

At the end of the (very long) process, I just hard-coded the reference request XML given by the particularly problematic endpoints, put some regex replacements behind it, and called it a day.
by simianwords | 2025-08-19 17:21:58+00:00
CEO wages increasing are due to competition amongst a few candidates who have the experience and competency required to run a big organisation and this drives up the wages.

If you have a company you want the best person to run it and if the best person costs a lot you might still want to hire them. Why do you think they are being paid that much? Its because the company gets back way more than they spent on the CEO wages.

Profits increasing for the company is a good thing - you can use it to further improve your company by hiring more people or hiring better people by paying them more. Profits increasing is also good for the country - more taxes collected.
by beklein | 2025-08-19 17:22:07+00:00
Very cool tool, and always amazing what Emacs can do...

If this isn’t your _daily_ use case and you only need to edit video from time to time, just ask your preferred LLM to give you the FFmpeg commands to cut, speed up, mute, flip, add text, etc. This has worked quite well for me with simple use cases, and well no need to learn Emacs.
by ragmondo | 2025-08-19 17:22:42+00:00
Here's a weird relationship between consecutive primes that I discovered while bored trying some python...

Take the last digit (in base 10) of consecutive primes. Now ignore 2 and 5 as .. well they only occur once, and look at the mapping between 1->3, 1->5, 1->7, 1->9 ... 3->1 etc etc..

You would think that they would pretty much all be equal, I mean primes are "random" right?

WRONG!

There are statistically significant differences in those edges, and no-one knows why.
by mytailorisrich | 2025-08-19 17:22:55+00:00
> The EU considers privacy a right, i.e. something you can’t sell away in a contract

You can sell your privacy in a contract in the EU. This actually highlights the incoherence here, and my point to some extent.

And there is no geopolitical spin since I am an EU citizen myself. It is just that I think that the EU is going to shit a little more every day.
by bongodongobob | 2025-08-19 17:23:10+00:00
Depends on the compensation of the other employees that actually do the work. 4000 employees making 61k to 250k/yr. I don't know if they get stock or not, but people are pretty tired of this massive imbalance. Give him 10 million and give everyone else an extra 35k. He is still filthy rich and 4000 people get a potentially life changing raise.
by Duralias | 2025-08-19 17:23:35+00:00
If you have a developer who can code and isn't just vibe coding blindly, then that is an extra layer of security, sure it isn't amazingly more secure, but anyone that codes has at least some sense to not write in wildly insecure code like an LLM would, regardless of if it was tricked by things mentioned in the article or not.
by viega | 2025-08-19 17:23:52+00:00
Fair. That was meant as tongue in cheek-- sysv was impressive for its day, and its day lasted a long time.

I appreciate that not everyone loves my style of humor, but I know when I read things with similar styles, it keeps me more engaged with the material.

Still, I am not trying to make jokes at the expense of actual people, so I'll take the note and try to avoid, thanks.
by Imustaskforhelp | 2025-08-19 17:24:12+00:00
I think that's because that for me personally, I am genz and my generation / my school friends are just hooked up onto it. Literally 99% of my schoolmates were there.

It was the only way that I can keep in touch with my schoolmates / friends for years and though I have their number, we don't have any group chat aside from instagram and I use beeper to actually make it sane to use
by simianwords | 2025-08-19 17:24:40+00:00
> nobody would care if they could afford the same standard of living as their parents

This is untrue - the consumption patterns (after accounting for inflation) of the bottom 20% in 2025 are way higher than in 1970s. Almost 60-70% higher. Almost everyone is better off today than before. https://www.cbo.gov/publication/59510 has some clues.

I encourage you to do your own research on it. Try to answer this question: are we as a society materially better off today than 50 years ago?

Surprisingly your image while it doesn't show the full picture, still shows that the living standards haven't reduced.
by iamlintaoz | 2025-08-19 17:24:48+00:00
That’s right. You can simply choose GPL and ignore the AGPL part for EloqKV. The reason we use both is that, in other projects, we need to support both GPL and AGPL. EloqKV and all its dependencies are either developed by us or licensed under more permissive terms, so you can choose either license. However, EloqDoc is under AGPL (https://github.com/eloqdata/eloqdoc) and we cannot relicense it under GPL because it includes some AGPL-licensed code from MongoDB.
by rasz | 2025-08-19 17:25:15+00:00
It does seem to run things. video with no sound from 2023 of pico-xt (pico-286 was based on it) https://www.youtube.com/watch?v=9F0lXviwLE8 and one review from 2024 https://habr-com.translate.goog/ru/articles/842292/?_x_tr_sl... with actual useful info:

-performance ~8MHz 286 on rp2040

-“VGA and EGA modes on pico-xt are supported to a very limited extent (there is little memory in the microcontroller) and 90% of games will not work in them” but that was 2 years ago

-Prince of Persia and Monkey Island run

-“King’s Bounty just doesn’t start”
by johnnyanmac | 2025-08-19 17:25:32+00:00
The vision is interesting and encapsulates a bit of old and new apple. It's clearly well made and best in class so in some ways they did wait to bring out something, quality, rather than something during the hype.

On the other hand, you can argue that they didn't wait long enough because the tech to really pull off this vision simply wasn't there yet (or is there but is obscenely expensive, which is saying something given this headset was already lambasted for cost). It's marketing (after looking back at some commercials) for what it offers was half "oh this is pretty useful" (a workststion with very little footprint) and half "oh this is black mirror" (lying along on a couch watching movies, interacting with kids as you have a giant headset on you). Maybe it's the nature of thr medium, but Apple tended to do a good job is making it feel like their technology brought people closer. Here the socialization felt hollow.
by kstrauser | 2025-08-19 17:25:44+00:00
If you're running a blockchain on a single node, it's exactly like running Git on that single node. You can mutate the data locally, even with something as simple as reverting to a backup. Voila, it never happened.

If you're running Git on multiple nodes, it's exactly like running a blockchain on multiple nodes. You can mutate your own local copy, but that doesn't mutate mine, and the set of commits is functionally identical to the union of commits from every node. You can't delete a commit without deleting it from every clone.
by jjice | 2025-08-19 17:25:52+00:00
Very neat! I've also seen that some will use Linear Feedback Shift Registers [0] for the candle effect, or maybe that's the same thing you're talking about.

Edit: I see the article in a sibling comment makes note of this too.

[0] https://en.wikipedia.org/wiki/Linear-feedback_shift_register
by nikeee | 2025-08-19 17:26:08+00:00
Hard to find these days, but it remindes me of this [0]:

> "- Google had a plan called "Project NERA" to turn the web into a walled garden they called "Not Owned But Operated". A core component of this was the forced logins to the chrome browser you've probably experienced (surprise!)"

To "not own but operate" seems to go into the direction of the parent comment.

Also this: https://news.ycombinator.com/item?id=28976574

[0]: https://web.archive.org/web/20211024063021/https://twitter.c...
by dahart | 2025-08-19 17:26:35+00:00
Oh man as someone who is concerned about the censorship and in favor of religious freedom, I really wish we could have a serious discussion about this, but HN probably isn’t the place. Are the sins you’re referring to mainly centered around sexuality, e.g. homosexuality? What happened to caring about adultery, maliciousness, perjury, faithlessness, boastfulness, arrogance, slander and deceit? Those are all things Trump has done and continues to do. Trump’s “character” happens to cover a pretty big subset of the sins mentioned in Romans 1. I’m very curious why people believe Trump’s claims that he’s on the side of Christians, given how often and how severely he misrepresents the truth in order to serve his own power. It is obviously pandering, and as such is deceitful in the name of religion. Doesn’t that concern you gravely? Doesn’t his selling bibles with his name on it, and with gold and camo covers, do anything for you? To me it seems extremely crass, gross, and disrespectful to God, Christ, and the Bible.
by red-iron-pine | 2025-08-19 17:26:36+00:00
> On the "agree" side, I saw a quote somewhere that said, "that's why it's called 'faith' instead of 'reading comprehension'." If it were that cut and dried, then it would just be a matter of objectively evaluating the evidence, without even any "probably".

"I don't comprehend what's going on and can hardly read, therefore my views about an invisible sky, man which cannot be proven in any way, are valid"
by Klonoar | 2025-08-19 17:26:53+00:00
Setting aside the discussion of the linked issue itself (tone, comments, etc), I feel like I need to throw this out there:

I don't understand the point in having a JS polyfill and then expecting websites to include it if they want to use XSLT stuff. The beauty of the web is that shit mostly just works going back decades, and it's led to all kinds of cool and useful bits of information transfer. I would bet money that so much of the weird useful XSLT stuff isn't maintained as much today - and that doesn't mean it's not content worth keeping/preserving.

This entire issue feels like it would be a nothing-burger if browser vendors would just shove the polyfill into the browser and auto-run it on pages that previously triggered the fear-inducing C++ code paths.

What exactly is the opposition to this? Even reading the linked issue, I don't see an argument against this that makes much sense. It solves every problem the browser vendors are complaining about and nothing functionally changes for end users.
by j0057 | 2025-08-19 17:26:53+00:00
It's not like the browsers can just switch to some better maintained XSLT library. There aren't any. There are about 1.5 closed-source XSLT 3 implementations, Altova and Saxonica. I don't want to sound ageist, but the latter is developed by the XSLT spec's main author, who is nearing retirement age. This library is developed behind closed doors, and from time to time zip files with code get uploaded to GitHub. Make of that what you will in terms of the XSLT community. For all of its elegance, XSLT doesn't seem very relevant if nobody is implementing it. I'm all for the open web, but XSLT should just be left in peace to slide into the good night.
by tonymet | 2025-08-19 17:27:36+00:00
i agree partially. I think both outliers will post. the good ones for bragging rights.

But don't be too quick to dismiss. there's an entire industry in tesla battery repair to address the loss in value. That wouldn't exist if the batteries were at the claimed level.

and there are many other indications.

It's funny how "statistics" from tesla will be taken at face value, whereas other real experiences from owners are dismissed as "anecdotal".

They are all just stories. Who do you want to listen to?
by jstummbillig | 2025-08-19 17:27:43+00:00
This line of thinking always leaves me confused about other peoples experience in the Pre-AI world. People and systems around me fail all the time because evaluation fails. Yes, the failure modes are different but I don't consider them favorable without AI. In fact, I consider that they are better.

For example, consider what happens in this video: https://www.youtube.com/watch?v=AZhCYisIQB8&t=2s

Please don't make this mistake of thinking "aha, but you see, a human intervened!" This will never happen in the real world for the vast majority of humans in a similar scenario.
by latexr | 2025-08-19 17:27:44+00:00
That’d be an awful way to cut video, because it wouldn’t help with the most important part: visualising and extracting the exact initial and final time stamps.

Especially if you don’t do this regularly, a GUI makes much more sense and saves you the frustration of having to sift through potentially wrong commands and figuring out what exactly to edit to fix the mistakes.
by PenguinCoder | 2025-08-19 17:27:46+00:00
> And if you, as a person that demands more pay, then just ask. If you get a no, quit. It's as simple as that.

You speak from a position of privilege. It is not as simple as that. It is expensive to exist in this current day, and quitting a job when you don't have another source of income lined up, is not smart; or doable for the majority of the working class. Bills and debt collectors don't care about your moral high ground.
by NanoCoaster | 2025-08-19 17:28:13+00:00
There's a difference between web technologies and "the web" as an amorphous philosophical construct. Web technologies, as you stated, are obviously doing just fine. I'd argue the latter isn't. To be more specific, the latter as it was envisioned (in a way that I, and I speculate, GP also still subscribe to) 20+ years ago.
by dc396 | 2025-08-19 17:28:42+00:00
> Query ID prediction attacks are not in fact the point of DNSSEC

Do you deny DNSSEC's goal is to protect DNS data? Do you deny "Query ID prediction attacks" (or more generally, flooding attacks) aim to corrupt DNS data? Do you deny the 16-bit transaction ID allows for effective flooding attacks?

As for "almost nothing in the DNS is signed", while it's true the percentage of second-level domains aren't signed, the DNS root is signed, all generic top-level domains, and the vast majority of country code TLDs are signed. In some countries (e.g., The Netherlands) more than 50% of the zones in their ccTLD are signed. As we've seen empirically, with improved automation/tools and authoritative servers that turn on DNSSEC-signing by default, the percentage will go up.
by olehtsyupa | 2025-08-19 17:29:11+00:00
Hi HN! I built PDFTrackr because document tracking shouldn't cost $45/month.

Currently 100% FREE while I gather feedback:

- Track who views your PDFs (page-by-page analytics)

- See time spent on each page

- Password protection & link expiration

- 500MB uploads (vs 100MB on most competitors)

- GDPR compliant with proper privacy controls

- Virus scanning on every upload

Tech stack: Next.js, PostgreSQL, Docker, PM2 clustering, Cloudflare

I'm planning paid tiers ($4-$19/month) for more storage and features. You can join the waitlist if interested.

Try it: https://pdftrackr.com

Looking for feedback on:

1. What features are must-haves that I'm missing?

2. Is the analytics data useful enough?

3. Would you pay $4/month for this?

Thanks for checking it out!
by iamlintaoz | 2025-08-19 17:29:22+00:00
TiKV is a great project and we have a lot of respect for their work. EloqKV is based on a very different architecture [1], and we also have MySQL compatible [2] and MongoDB compatible [3] databases build on top of the same architecture. They all inherit the extreme performance, scalability, fault tolerance, and ACID properties due to the common underpinning.

[1] https://www.eloqdata.com/blog/2025/07/14/technology

[2] https://github.com/eloqdata/eloqsql

[3] https://github.com/eloqdata/eloqdoc
by mindslight | 2025-08-19 17:29:42+00:00
The problem is that the mainstream American conception of liberty has come to mean liberty for corpos, inverting the thrust of the individualist/revolutionary spirit to effectively undermine individual liberty. And we're actually well into using those boxes - effectively at the jury box stage but with the president doing the legal nullification rather than juries. And the useful idiots are still clamoring to move on to the ammo box. The worse it gets, the harder they demand their self-defeating quack cures.
by bigyabai | 2025-08-19 17:29:47+00:00
It's Apple's fault. They abandoned principled security a long, long time ago if you were paying attention. Chinese iCloud users have no protection against state-authorized backdoors since Apple removed the hardware security modules[0] that protect user encryption keys (at the PRC's request). Apple doesn't care about protecting their users above and beyond the reach of the state, state surveillance is an inevitability.

When you start down a slippery slope like this, you burn trust and make people demand transparency. It's impossible for me to say that I'm any more secure as an American user - no trusted third-parties actually audit Apple's American iCloud servers for such backdoors. Users trusting Apple for security are (unfortunately) fish in a barrel, same as ever.

[0] https://www.nytimes.com/2017/07/12/business/apple-china-data...
by throwup238 | 2025-08-19 17:29:53+00:00
I believe they were the HK628 and UM3561 chips which were launched in the 1980s for toys. You can actually hear that alarm sound on some toys from that decade. They were simple chips that stored 8-16 preprogrammed sounds and the urban legend is that the car companies just kept the alarm demo sound (I think there were two different ones). The chips ended up everywhere: toys, care, appliances, industrial machinery, etc.
by jwilber | 2025-08-19 17:30:00+00:00
Nowadays, basically no architecture with an API is using standard attention anymore. There are all kinds of attention alternatives (e.g. Hyena) and tricks (e.g. Sliding Window, etc.) that make this analogy, as presented, flat out incorrect.

In addition, for the technical aspect to make sense, a more effective article would place the points should be shown alongside evals. For example, if you're trying to make a point about where to put important context in the prompt, show a classic needle-in-the-haystack eval, or a jacobian matrix, alongside the results. Otherwise it's largely more prompt fluff.
by diggan | 2025-08-19 17:30:11+00:00
> The reason for CEO comp to keep growing is because they’re largely compensated in equity (performance-based compensation), which keeps growing.

Does it really matter why or how the inequality keeps growing? Shouldn't the focus be on that it is increasing, and potential ways of decreasing it instead?

> Niccol’s pay package as an example of the widest pay gap between the top executive and median employee of one of the biggest US companies. Niccol’s annual pay was more than 6,666 times greater than the total pay for the median employee, a part-time barista, who earns about $15,000 a year, according to company filings.

Niccol could be paid in cars, legos or flowers for all I care, it doesn't change the fact that the difference of compensation is 6,666 times.
by dikobraz | 2025-08-19 17:30:21+00:00
We explored a network-attached KV-cache for consumer GPUs to offset their limited VRAM. It doesn’t make RTX cards run giant models efficiently. Still, for workloads that repeatedly reuse lengthy prefixes—such as chatbots, coding assistants, and multi-turn threads—it delivers a 2–4× speedup in RPS and time-to-first-token on 7B and 70B models.

How it works: On return visits, instead of re-running the prompt through the model, we fetch previously computed KV blocks from network storage and skip re-computing those tokens (i.e., we avoid re-running prefill on repeated prefixes). This is helpful when VRAM can’t hold all sessions, and users pause between messages, which is almost always the case.

Why RTX benefits: Prefill is the computationally intensive part (quadratic attention, numerous reductions, and inter-GPU traffic). Without NVLink, PCIe becomes the choke point in multi-GPU setups. KV-caching cuts repeated prefill, leaving mostly the lighter decoding step—something PCIe-only RTX nodes handle well.

Results & endpoint: - 2–4× speedup on multi-turn benchmarks (RPS & TTFT) with RTX 4090. - We’ve opened one free public endpoint for demos, not production grade (https://console.cloudrift.ai/inference?modelId=meta-llama%2F...). Ping us at hello@cloudrift.ai if you need a reliable setup.

Technical Notes: - Works with consumer and data-center GPUs. In theory, you can even split roles: NVLink boxes do prefill, while cheaper RTX pods serve as decoders using stored KV. - We use special hardware to reduce fetch overhead and offload the CPU, but you can reproduce this at home with a regular NAS (with lower peak performance). - For a more in-depth walkthrough of the math and architecture of a KV-cache solution, please watch this video from the KV-cache solution vendor (https://www.youtube.com/watch?si=T69vxku8xPr6p7I0&v=CV4FYMTF...)
by nermalcat69 | 2025-08-19 17:31:02+00:00
Personally, It Feels like this will change the whole ai assistant industry the way chatgpt and claude. But again it requires multiple examples the way vercel did it for themselves at vercel.com/templates.

Even perplexity, scira work with beautiful ui generation for visualizing data to the user but they have to do it manually as far as i know.

I'm currently building coldran.com to compete with customer chatbots but with better experience and how customers can interact with teams to get better experience and features as fast as possible.

But I'm genuinely curious why would anyone use this instead of building their own unique ui because of branding reasons other than that this seems cool.

Internal Dashboard Chatbots can allow people to interact with some api endpoints which other components use within the website with a prompt and then the ui appears ~ that would be cool like creation of projects or changing the git connection from one repo to another without changing the pages.

but this has a market but people are clueless about the usage

ps: i haven't used tambo at the moment but this is very cool