MurphyA/hacker-news huggingface dataset:
by mindslight | 2025-08-07 15:33:11+00:00
It's the old dynamic when customary things are made into digital systems, those digital sytems need to be perfect because exploiting the flaws is also made extremely efficient.

Someone else sitting next to you follows meatspace rules. They need to know a minor, be trusted enough to be reasonably left alone with said minor, and they will also be aware of possible legal consequences for facilitating a minor's access to porn. Society has been dealing with this for quite a long time.

This extends to directly using someone else's ID from behind a keyboard - whether they trust you (above scenario), or you've got remote access to their system (rare), or it's the type of ID that is copyable from data leaks (revokable, I guess). The barrier is still pretty high.

Whereas if parties are able to run any software of their choosing, the ZKP approach allows anybody on the Internet to decide to "help out" with minors viewing porn. Either for some ideological cause (which might not even be about helping 17 year olds access porn, but rather just about privacy with distrust of fancy crypto), or simply for money or other things of value.

The basic promised properties of the ZKP approach are that that the ID provider won't know what sites you're going to, and that sites won't be able to get your identity, right? The first one removes the downside to an individual creating extra credentials for others - they must just like porn sites more than the average person. And the second one makes it so abuse of issued proofs can't be traced back to the person granting use of their ID. So in real world usage, something has to give about this situation.

With the way the computing landscape is setup, that something is likely to be focusing on the ability to split the client into two parts being run by different parties. There are alternative responses, of course - one would be to gradually walk back the security provided by the ZKP, spilling more and more information to the site.

But treacherous computing (aka computational disenfranchisement) seems to be what people used to customary meatspace systems reflexively reach for when confronted with the frustrating realities of clients having computational freedom. And as I pointed out, the UK system is already demanding treacherous computing, and Google has already been pushing it for their own purposes.
by dist-epoch | 2025-08-07 15:33:13+00:00
People said the same thing 2 years ago about NVIDIA, that their stock price didn't make any sense given their revenue, that is was an obvious bubble. Now their revenue is 10x higher, justifying the stock price from 2 years ago.

People today still say NVIDIA is overvalued, that the stock price doesn't make sense given their revenue today.
by abeppu | 2025-08-07 15:33:15+00:00
Absolutely anger is sometimes justified. But people are also angry when e.g. someone cuts them off in traffic. The initial feeling of anger may not be appropriate. A cue to help you avoid reacting immediately from hostility isn't so much deciding whether anger is appropriate but giving you the space to make that judgement reflectively rather than impulsively. Even if anger is appropriate, the action you want to take on reflection may not be the first one that arises.

"The eastern mystics" managed to do a lot of things, but often with a large amount of dedicated practice. Extremely practiced meditators can also reach intense states of concentration, equanimity etc, but the fact that it's not strictly necessary to have supportive tools to develop these skills doesn't mean that supportive tooling wouldn't help a lot of people.
by owenversteeg | 2025-08-07 15:33:18+00:00
Anyone here for Georgism? https://en.wikipedia.org/wiki/Georgism

The tax upon land values is, therefore, the most just and equal of all taxes. It falls only upon those who receive from society a peculiar and valuable benefit, and upon them in proportion to the benefit they receive. It is the taking by the community, for the use of the community, of that value which is the creation of the community. It is the application of the common property to common uses. When all rent is taken by taxation for the needs of the community, then will the equality ordained by Nature be attained. No citizen will have an advantage over any other citizen save as is given by his industry, skill, and intelligence; and each will obtain what he fairly earns. Then, but not till then, will labor get its full reward, and capital its natural return. — Henry George, Progress and Poverty, Book VIII, Chapter 3

Very relevant to this particular article: https://en.wikipedia.org/wiki/Georgism#/media/File:Everybody...

>"EVERYBODY WORKS BUT THE VACANT LOT" I paid $3600, for this lot and will hold till I get $6000. The profit is unearned increment made possible by the presence of this community and enterprise of its people. I take the profit without earning it. For the remedy read "HENRY GEORGE"
by wmdavis90 | 2025-08-07 15:33:18+00:00
It’s a local code analysis engine that builds a semantic index of your repo (symbols, imports, comments, etc.), adds vector embeddings, and exposes search + context tools you can plug into LLM workflows. Think smarter code search + context assembly, but offline and fully under your control.

My devs like that it doesn’t try to be too “magical” it’s predictable, hackable, and works well with existing workflows (like Aider or LiteLLM).

As a PM, I like that it respects privacy, is extensible, and helps us experiment with AI-assisted workflows without vendor lock-in.

If you’re exploring custom LLM agents or just want better context for local dev tooling, it’s worth a look.
by deanmoriarty | 2025-08-07 15:33:37+00:00
When employees are underpaid (see Windsurf), HN be like: investors and C-suites take all the gains, off with their heads!

When employees are generously (and proactively) compensated for the financial milestones of the company, HN be like: it’s a bubble, it’s irresponsible, investors are fools, off with their heads!

I applaude OpenAI and its investors for approving these moves. Even if it’s a bubble, sharing some of it with employees “before it bursts” is a noble action. I worked in startups where management kept employees in complete illiquidity until full wipeout inevitably happened, while many senior folks were able to take some off the table in targeted secondary transactions.
by beagle3 | 2025-08-07 15:33:53+00:00
Lisp done idiomatically is terse, incredibly so. It's been a while since I've worked in Lisp, but I never used a class, nor did anyone I worked with.

I purposely type everything when coding[0], which makes me painfully aware of all the verbosity and boilerplate. I last wrote Java about 12 years ago (first wrote Java 25 years ago), and it was among the worst at every point in time; I have very little desire to see what it evolved into, but if you can link to a terse, modern Java codebase I will take a look.

chaining a-la Ruby does not make code terse; good selection of primitives, and good idioms do. APL family including J & K are at the extreme, and nothing else comes remotely close.

[0] need to get on the AI assistant bandwagon .. haven't yet
by potato3732842 | 2025-08-07 15:34:34+00:00
Ask yourself why and by what/who the incentives of living in society have been so thoroughly perverted that there is demand for "unproductive" (seriously, listen to yourself, this stuff is a liability) land for "finance bullshit magic" reasons? The perversions are what prevent "buy and do something to generate value" from outcompeting "buy and hold".
by justonceokay | 2025-08-07 15:34:40+00:00
If the economy in my life has taught me anything, it’s that there will always be another bubble. The Innovators Dilemma mentions that bubbles aren’t even a bad thing in the sense that useful technologies are often made during them, it’s just that the market is messy and lots of people end up invested in the bubble. It’s the “throw spaghetti at the wall” approach to market growth. Not too different than evolution, in which most mutations are useless but all mutations have the potential to be transformative.
by anon191928 | 2025-08-07 15:34:42+00:00
it's all coming from the debt that is approved by congress 2 months ago. they get few million cause there is no real moat for OPENAI. It's nice extra bribe so they don't challange, lmao. Becauses now VCs have extra cheap debt too. Any top or mid lev openai employee reading this, as a group you worth 10x for this, to OUR DEBT lords. Simple.
by saalweachter | 2025-08-07 15:34:47+00:00
It's a bargain I expect most people would take, even with what I'm about to say next, but I also predict this is going to be a situation rife with abuse, with employees being pressured to "work extra hard" (eg, live in the office) during these two years, and plenty of people being fired for under-performing (eg, not living in the office) so they can avoid paying out the bonus to as many people as possible. Also, most new hires will have the impression that another 1.5M 2-year retention bonus is right around the corner, but won't actually get one.
by eddythompson80 | 2025-08-07 15:35:03+00:00
Only in an abstract threat model sense. In real world phishing its pretty different.

Its super odd if you land on facebook.com-profilesadfg.info/login thinking its just Facebook and try to login but get a "password reset" email. Most people would be confused as they don't want to reset their password.

Having it for every login means that just missing the website URL, everything else is 100% legit.
by jedisct1 | 2025-08-07 15:35:22+00:00
Poly1305 is straightforward to implement and also scales with the width of SIMD vectors, just like other polynomial-based MACs. BLAKE3 is nice but tricky to implement and optimize; a textbook implementation performs very poorly.

Avoid using Rust implementations for serious benchmarks, especially in the context of symmetric cryptography.

For really fast ciphers on general-purpose hardware, check out AEGIS and HiAE. https://github.com/hiae-aead/benchmarks https://datatracker.ietf.org/doc/draft-irtf-cfrg-aegis-aead/ https://datatracker.ietf.org/doc/draft-pham-cfrg-hiae/
by tracker1 | 2025-08-07 15:36:08+00:00
It's not like it started a day after I first took the drug, my gastro issues got worse over the course of the time I was on it. I didn't know it was being caused by it. I was literally seeing 3 doctors over the gastro issues... wasn't until the lawsuit against Trulicity that I put it together and stopped taking it.

But sure, it's MY fault I didn't figure out what several doctors didn't over the course of that second-third year or so.
by Magmalgebra | 2025-08-07 15:36:34+00:00
> others you get an extra 1.5mm to sit at the computer for 2 hours a day and then take a nap

A few of the most world class reserachers can do this, all of my other friends and colleagues at OpenAI work 10-14 hours day - often 7 days a weeek.

OpenAI pays eyewatering sums but you're absolutely sacrificing years of your life for it.
by chrismorgan | 2025-08-07 15:36:35+00:00
Firefox’s limit is 17,895,697 pixels. Others have a limit less than twice as high, so given you’re aiming for a value way higher than that, it’s not a browser-specific issue, except insofar as Firefox ignores rather than clamping, so you have to detect Firefox and clamp it manually.

In Fastmail’s case (see my top-level comment), making the end of a ridiculously large mailbox inaccessible was considered acceptable. In a spreadsheet, that’s probably not so, so you need to do something different. But frankly I think you needed to use a custom scrollbar anyway, as a linear scrollbar will be useless for almost all documents for anything except returning to the top.

Rendering the content, however, to a canvas is not particularly necessary: make a 4 million pixel square area, hide its scrollbars, render the outermost million pixels of all edges at their edge, and where you’re anywhere in the middle (e.g. 1.7 billion rows in), render starting at 2 million pixels, and if the user scrolls a million pixels in any direction, recentre (potentially disrupting scrolling inertia, but that’s about it). That’s basically perfect, allowing native rendering and scrolling interaction, meaning better behaviour and lower latency.
by losteric | 2025-08-07 15:36:36+00:00
> Despite being trained on more compute than GPT-3, AlphaGo Zero could only play Go, while GPT-3 could write essays, code, translate languages, and assist with countless other tasks. The main difference was training data.

This is kind of weird and reductive, comparing specialist to generalist models? How good is GPT3’s game of Go?

The post reads as kind of… obvious, old news padding a recruiting post? We know OpenAI started hiring the kind of specialist workers this post mentions, years ago at this point.
by jjk166 | 2025-08-07 15:36:39+00:00
King George III didn't start really start showing symptoms of mental illness until 1788, and it was only during temporary periods until 1810. There had been a brief episode in 1765, but it was poorly documented, and is described more like a depressive episode than the mania he suffered later in life. All the same, during the period leading up to and during the American Revolution, he was his regular self.

It's also worth noting that by this point in time the monarch was not really the decision maker for most affairs of state. While he was likely the most politically powerful monarch after the Glorious Revolution, Parliament was nevertheless still calling the shots.
by m4rtink | 2025-08-07 15:36:52+00:00
As with many topics, the Orions Arm Universe project has you covered - the Engenerator[0]!

Originally developed in-universe when a bunch of immortal cyborgs got bored on a colonization ship & decided to instruct a precursor probe to print a machine that prints a machine that will print their bodies on site. :)

The engenerator technology is completely safe[1] and can't be misused in any way.

[0] https://www.orionsarm.com/eg-article/486fee4017475

[1] https://www.orionsarm.com/eg-article/461009349a06e
by lubujackson | 2025-08-07 15:37:07+00:00
Face it, they have hit the "Yahoo phase" of their company life. It was a good, long run. All that remains is buying larger and larger successful startups and grinding them in to dust.

But the the "sunsetting" of projects good or bad, random shotgun approaches to everything, super awesome islands of product that slowly get bled dry... it is a failure of management structure, not just management.

I don't know the guts of Google, but I imagine there are 500 VPs (or equivalent) each with their pet project, each trying to curry favor with the boss who sent an email blast to "go big on Gemini". It feels like many teams just dropped their old busted projects and moved on to the new hotness, to hell with the customers, consistency or revenue. The only metric now is "Gemini engagement".
by MetaWhirledPeas | 2025-08-07 15:37:10+00:00
> If you have password reset via email, as almost every service using passwords does, there’s no security gain over magic links/codes.

I disagree. The problem with the magic code is that you've trained the user to automatically enter the code without much scrutiny. If one day you're attempting to access malicious.com and you get a google.com code in your email, well you've been trained to take the code and plug it in and if you're not a smarty then you're likely to do so.

In contrast, email password recovery is an exception to the normal user flow.
by prpl | 2025-08-07 15:37:32+00:00
A comprehensive solution for

1. A user interacting with multiple MCP servers, behind a gateway (with MCP client support) to get authentication from the user to those servers in some way (OAuth/OIDC, with PKCE, usually, sometimes token exchange), allowing out-of-band auth

2. The same, but built on identity for service accounts/native identity or something, for automation

would enable this. There’s a few SEPs open now around this.
by soiltype | 2025-08-07 15:37:52+00:00
Like many situations in the current world, it's all a problem. Those with profit incentives to do so will create as many problems for society as they can.

None of it is merely a distraction, we just don't have the capacity to defend against all of it.

It is fair to say we might be practically better off focusing on one form of attack and sacrificing defense against another, but the only way to actually be safe is to stop your enemy from attacking at all. Either we shut down breakneck AI development (nearly impossible and guaranteed to have its own bad outcomes) or we slide rapidly into a more and more dangerous world.
by accrual | 2025-08-07 15:37:52+00:00
It could be a badge of honor! You used the system so much that clones can't fool you. To be fair, Windows text rendering does have a very specific look that's difficult to perfectly replicate without using the actual Windows APIs.

I'm sure some here could look at a screenshot of the same text rendered on Windows, macOS, and Linux and tell them apart.
by AnotherGoodName | 2025-08-07 15:38:28+00:00
But it's specifically 25bits not 24?

As in n+1 == n once you go past 2^24 on a float and here they are at 2^25-1. So it doesn't quite make sense as a reason to me.

There's a post above that browsers divide pixels into 1/64th of a unit which accounts for 6bits which puts this limit at precisely that of a signed 32bit integer. This makes much much more sense than the significand of a float.
by thewebguyd | 2025-08-07 15:38:31+00:00
It definitely feels identical. We had companies that never had any hope of being profitable (or even doing anything related to the early internet to begin with), but put .com in your name and suddenly you are flooded with hype and cash.

Same thing now with AI. The capital is going to dry up eventually, no one is profitable right now and its questionable whether or not they can be at a price consumers would be willing or able to pay.

Models are going to become a commodity, just being an "AI Company" isn't a moat and yet every one of the big names are being invested in as if they are going to capture the entire market, or if there even will be a market in the first place.

Investors are going to get nervous, eventually, and start expecting a return, just like .com. Once everyone realizes AGI isn't going to happen, and realize you aren't going to meet the expected return running a $200/month chatbot, it'll be game over.
by lovecg | 2025-08-07 15:38:50+00:00
These things can go on longer than 2 years

> Tulip mania (Dutch: tulpenmanie) was a period during the Dutch Golden Age when contract prices for some bulbs of the recently introduced and fashionable tulip reached extraordinarily high levels. The major acceleration started in 1634 and then dramatically collapsed in February 1637.

> At the peak of tulip mania, in February 1637, some single tulip bulbs sold for more than 10 times the annual income of a skilled artisan.
by pessimizer | 2025-08-07 15:39:28+00:00
> I have yet to meet a single AI safety person that knows how to rename a file in linux.

I don't know if instead of saying "safety" here you meant to say ethics, or if you're using "safety" in this sentence just to generally refer to "AI ethics, safety, and to a smaller extent privacy."

If either of those are true, that's weird because the only person in AI ethics most people know is Timnit Gebru, because she got fired and it made the papers. She has a BA and MA in electrical engineering, and her father was also an electrical engineer. After that, she went on to a PhD in computer vision with Fei-Fei Li (Imagenet) as her advisor.

https://en.wikipedia.org/wiki/Timnit_Gebru#Early_life_and_ed...

I guarantee you she knows how to rename a file in Linux.

If, instead, you were referring to "safety" specifically, I'd like to understand how you're making the distinction.

edit:

> Gebru joined Apple as an intern while at Stanford, working in their hardware division making circuitry for audio components, and was offered a full-time position the following year. Of her work as an audio engineer, her manager told Wired she was "fearless", and well-liked by her colleagues. During her tenure at Apple, Gebru became more interested in building software, namely computer vision that could detect human figures. She went on to develop signal processing algorithms for the first iPad. At the time, she said she did not consider the potential use for surveillance, saying "I just found it technically interesting."
by dijit | 2025-08-07 15:39:28+00:00
I'm natively british, but I live in the southern part of Sweden for the past 11 years, and I can only concur to what TrackerFF is saying.

There's a handful of false friends (Fart, Slut) but probably 10-15% of the scandinavian languages still have influence on modern english.

I say "still have root" because; if you weren't aware: the first common tongue variant of English was a proto-germanic language from the "Angles" of Denmark. "Angle"-ish, if you would.

Its more strange how the scandiavian dialects have a broader application in Scots english (Barn/Baen for child, Kirk for Church for example) - my family are Scottish so that was a weird surprise.

Regardless, if you're going to try to learn a Scandinavian Language: Stick to Norwegiean or Stockholm-Swedish. The Danish and Southern Swedish dialect (Skånsk) is difficult to unpick word from word and will leave you bewildered. But you will understand more than you might originally expect to if you visit Stockholm and have a simple pocket dictionary. :D
by OsmanDKitay | 2025-08-07 15:39:31+00:00
The current way agents interact with the web is a problem.My view isnt that we should "cater" to them but that we should define the terms of engagement before they define it for us. Right now they re using scraping. That gives site owners zero control. Aura is an attempt to hand control back to the site owner by providing a clear aura.json manifest. It s about consent. As for using AI to build it, I believe you have to deeply understand a technology to help steer it.
by toomuchtodo | 2025-08-07 15:39:59+00:00
If you have no mortgage, own your home, and have saved enough in investments, even if AGI/ASI materially impairs the labor economy, you are in a far better position than someone who rents, someone with a large mortgage who needs a job for the next 20-30 years, etc assuming rule of law holds up. Free money is free money, to not take it would be silly. Just don't blow it on a Lambo.

I'm not qualified to touch on your point wrt constraining and wrangling machine intelligence, so no comment on that.

https://www.youtube.com/watch?v=XamC7-Pt8N0 (NSFW language, first 45 seconds is the relevant part)
by hintklb | 2025-08-07 15:40:00+00:00
is it really cash-flowing $1-2k a month after you account for repairs, taxes, fees, realtor fees, closing fees, bad tenants (which will always eventually happen) and all the time you spent managing this?

The tax advantage are really marginal since 2016.

160k$ invested in the SP500 gives you on average 16k$ a year compounding fully liquid with zero management.

Yes the place should appreciate at 3% a year historically. But even that doesn't make up for it.
by zarzavat | 2025-08-07 15:40:07+00:00
You can still have ownership issues and leaks even with a GC, if an object is reachable from a root. e.g. object A is in a cache and it references object B which references objects C D E F G ... which will now never get collected.

If A owns B then that is as expected but if A merely references B then it should hold a WeakRef