MurphyA/hacker-news huggingface dataset:
by jackdoe | 2025-08-07 08:07:35+00:00
I can see that.

Last week I have been working on remote controlling Borunte welding robots, I wrote 10k lines of code per day, creating all kinds of interfaces, weird ik strategies, camera calibrations, weird joypad controls, cad mouse controls, simulations etc.

None of it was prod ready, I was just experimenting, but tbh I would've made 1/10th of the progress if it wasn't for gemini and claude.

Now I know what to write.

PS: the default ik engine on those robots have a bug that can easily kill you when it gets singular, so if you are working on them, keep your distance :)
by rendall | 2025-08-07 08:07:50+00:00
I understand. I have been there myself. I found it very difficult to crawl out of that hole.

It helped me to understand that since a series of decisions led me there, that a series of decisions could lead me out. It took some irrational risk that paid off in my case.

Since you mention a family with children, modeling good health and socialization will help the children in your life too. Do try, if you can. No shame, if you sincerely cannot.

Good luck.
by brainless | 2025-08-07 08:08:14+00:00
I stopped looking at my code about 2 months back. I am launching "Lets Order", a micro SaaS, entirely generated by Claude Code, Gemini CLI, Google Jules, etc. I follow a structured approach, using issues on GitHub, Git branches, etc. - as I have done as an engineer for more than a decade.

Rust (backend) and TypeScript - Admin app (for managers), Menu app (for guests) and marketing site. SQLite database with LiteStream for backups. Basic tests, CI/CD.

All this - solo, in 10 days. Plus I market a lot more than I have ever had time.

- Source code and GitHub issues: https://github.com/brainless/letsorder

- Site: https://letsorder.app

I am sure there are parts that will break, but what I am getting out of a Claude Pro $20/month in value is a dream. I am generating a couple other products in parallel too, all sources available.
by chexum | 2025-08-07 08:08:14+00:00
The bit shifts were my first idea too where this would break down; but actually, 1-8 bit shifts would be just fine, and they can be encoded in 3 bits. 0 and 9 are special cases anyway (nop and full nonyte/nyte) for the programmer/compiler to become a tiny bit more clever; or use the shift-by-register instruction instead. T

This is not the case for 18 or 36 bits; I would imagine an architecture like this wouldn’t have a swap/swapb but a shuffle type instructions to specify where each nyte is expected to end up, encoded in 4x2 bit in the most generic case.

With this, I think I can get behind the 9-bit archs with the niceties described in the post..
by jiggawatts | 2025-08-07 08:09:10+00:00
I was authenticating a set of scripts five times for each run with MFA. Once, it asked me for six MFA prompts with no disambiguating info.

Did I click “Yes” to the attack the fifth time, or was the sixth the attack? Or was it just a “hiccup” in the system?

Do I cancel the migration job and start from the beginning or roll the dice?

It’s beyond idiotic asking a Yes/No question with zero context, but that was the default MFA setup for a few hundred million Microsoft 365 and Azure users for years.

“Peck at this button like a trained parrot! Do it! Now you are ‘secure’ according to our third party audit and we are no longer responsible for your inevitable hack!”
by augment_me | 2025-08-07 08:09:20+00:00
I get your point and I agree with it, I don't think this flips anything. What you are describing is an engaged, motivated student who is using the tools for learning when the traditional system did not suit them. I am actually the same, had shit grades, and found traditional lectures pointless.

What I am describing in what I and many colleagues have run into are students who are not engaged or motivated with their work because there is a path of much less resistance, and are using the LLMs to pass learning moments with minimal effort.

When you choose to edit the code of the LLM instead of feeding it all back to it with the added prompt "it does not work, fix it", you have already made a choice in learning.

edit; I do agree on the curriculum change, however, there is a time-window now before there has been a consensus on the new ways of learning and political action from the universities where the learning is to a much higher degree in the hands of students than the universities. And this power can lead both ways to a higher extent than before when the university was in control of this.
by Scandiravian | 2025-08-07 08:09:33+00:00
Thank you for being communicative about this and for the great work you're doing on OpenBao

I'm very disappointed to hear that the researchers didn't do their due diligence and informed the OpenBao project about this issue before publishing

I imagine this is a stressful situation for everyone involved in the project, so I hope the researchers will do some reflections on how they can avoid this situation happening in the future
by traceroute66 | 2025-08-07 08:09:44+00:00
> Passkeys is the way to go.

My problem with passkeys is that there is no hardware attestation like there is with Yubikeys and similar.

This means for security conscious applications you have no way of knowing if the passkey you are dealing with is from an emulator or the real-deal.

Meanwhile with Yubikeys & Co you have that. And it means that, for example people like Microsoft can (and do) offer you the option to protect your cloudy stuff with AAGUID filtering.

And similar if you're doing PIV e.g. as a basis for SSH keys, you can attest the PIV key was generated on the Yubikey.

You can't do any of that with passkeys.
by pyrale | 2025-08-07 08:10:03+00:00
We need to go further. If a service doesn't include 197 factors including blood samples, showing up at a physical location 50 miles from your home, and sending a picture of yourself in a specific posture, and doesn't require you to use at least 53 of them (determined randomly) to login, then it's insecure and should not be used.
by zimpenfish | 2025-08-07 08:10:14+00:00
> Versus $15 reading glasses that will last years

But the drops have the advantage of not messing with your distance vision like reading glasses do (unless you pay for varifocals, obvs.) - "[...] does not significantly affect the eye’s focusing muscles, so it doesn’t blur your distance vision [...]"

For someone who has to switch between near and distance often, I can see the drops being useful, especially if your distance vision is fine and you don't need varifocals.
by achou | 2025-08-07 08:10:30+00:00
One thing to watch out for when using debounce/throttle is the poor interaction with async functions. Debounced/throttled async functions can easily lead to unexpected behavior because they typically return the last result they have when the function is called, which would be a previous Promise for an async function. You can get a result that appears to violate causality, because the result of the promise returned by the debounce/throttle will (in a typical implementation) be from a prior invocation that happened before your debounce/throttle call.

There are async-safe variants but the typical lodash-style implementations are not. If you want the semantics of "return a promise when the function is actually invoked and resolve it when the underlying async function resolves", you'll have to carefully vet if the implementation actually does that.
Automated Test Failures in CICD – what is true cost?
by bfmurphy | 2025-08-07 08:11:16+00:00
Hey everyone,

I'm hitting a wall with our CI/CD pipeline, and I'm curious if this is just me or a universal struggle. We've got a pretty standard setup—a bunch of unit, integration, and end-to-end tests running on every commit. Lately, it feels like I'm spending more time debugging failing builds than writing actual code.

Just yesterday, I spent three hours trying to reproduce a failing end-to-end test that only occurred on the main branch. It passed locally and on the re-run, but the initial failure was a complete mystery. It's a massive productivity sink.

So I'm genuinely curious:

How much time do you realistically spend each week just debugging failed CI/CD builds? (And be honest—I'm not going to tell your boss.)

What's the absolute worst part of the process for you? Is it the context-switching, sifting through hundreds of lines of logs, or dealing with tests that pass locally but fail in CI?

What kind of a CI/CD failure is the most frustrating? Flaky tests? Environment-specific issues? That one random timeout?

If you could wave a magic wand and solve one thing about build failures, what would it be?

I'm hoping to hear some stories and maybe even learn a few tricks from you all. Thanks in advance for sharing!
by nicbou | 2025-08-07 08:11:40+00:00
I write guides for a living, and my audience is largely comprised of non-native speakers. I write simply and unambiguously, and I've been told multiple times that my style seeps through my blog posts, my comments and my text messages.

You are so right! LLMs produce so much noise. If you ask them to be concise, they struggle to cut just the fat, and the output is often vague or misleading. I see that again and again when I ask it to produce different versions of a sentence.

I imagine it's how artists feel about AI art. It seems right at first glance, but you can tell that no thought or craftsmanship went into it.
by uamgeoalsk | 2025-08-07 08:11:51+00:00
Counterculture? Do you think you have to be counterculture not to know who Paul Graham is? What the fuck lol. Ask anyone outside of your little bubble and they won't have a fucking clue.

Edit: The above was needlessly confrontational. I don't know you and it was uncalled for. I just fucking despise Silicon Valley.
by BSVogler | 2025-08-07 08:12:58+00:00
It does not even have to be successful. After getting repeated feedback about my strengths as an entrepreneur and how it is not a good fit for that position, I am now toning that down a lot. YC advertises that funding a company is always good career choice because even if you fail it will be good in your CV. But my experience so far is that many companies see it as a red flag.
by ArtTimeInvestor | 2025-08-07 08:13:03+00:00
I understand the rationale behind open sourcing llama.cpp. Because it has a lock-in effect.

But I don't see how open sourcing weights has a lock-in effect. In fact, it seems OpeanAI's open models can be run on llama.cpp. So by offereing them, they make llama.cpp even MORE useful. Instead of driving developers towards their own tech.
by Yizahi | 2025-08-07 08:13:56+00:00
No one wants to like in the bad districts, yes. But people will happily buy apartments in such places if they are significantly cheaper than the median (I mean not like twice or thrice cheaper, but even 10-25% cheaper). Case in point - people often do check that narks don't shoot drugs in their potential new building, but still all apartments would be sold out eventually. People don't like living under airport glide path, but still all apartments and houses under it are sold like hot cakes. I had viewed a new low rise complex last year near city highway (unshielded), railway, metal recycling shop and a construction site, and only a big mall nearby as a benefit. It's almost fully sold out now. In my previous city some company had built a three building low economy complex right near the railway in the middle of the former warehouse district, with bysmal parking and connection options too, it's also sold out.

tl;dr low housing price (in a region with jobs of course) beats ANY negative factor. At least until it's not literally slums, and possibly not even then.
by yjftsjthsd-h | 2025-08-07 08:14:05+00:00
You could have been a little clearer, but the main communication problem is that I didn't know that was a problem that could exist so it was easy to not follow. After a few minutes of confused web searching, I found https://fedoramagazine.org/thunderbolt-how-to-use-keyboard-d... which appears to describe the problem and some solutions (that don't involve homed, not least because this article predates it). AIUI, the problem is that you have to log in so you can approve the keyboard; that might be a pain point with an encrypted root (albeit it looks solvable), but if it works with homed I struggle to believe that it wouldn't work with any other encrypted home setup. Mostly because that part of homed is mostly a thin wrapper of code and convention over existing stuff.
by rich_sasha | 2025-08-07 08:14:08+00:00
I suppose VC love it. They want to lower the bar to building products, and make them cheaper. They want a steady line of investable companies with cheap hiring down the line.

More generally, it's weird. 10 years ago, the technical aspects would legitimately be seen as a major, perhaps main obstacle to building a product. It's questionable whether that is really gone (can you really, really build a software product now with just LLMs? With deployment, security etc).

But for sure the technological bar is now much lower, it might disappear altogether, and what remains is actually finding a useful product, marketing, finding clients etc. Which I'd argue were actually always the biggest step to overcome.
by a5c11 | 2025-08-07 08:14:17+00:00
> The fact that it's treatable with a drug should have put this nonsense to bed.

You can "cure" brain tumour with painkillers too. That's the same thing - silencing symptoms, while the cause persists.

> precisely measure their diet and exercise, gain a pound or two

If they exercise, that's normal they gain weight. Muscles build up, the body keeps some more water - that's natural. Weight isn't the only measure, especially for those who are exercising. When I had a break from a gym for a few months, I lost 6 kilograms (which I now regained), but that wasn't fat.
by metaketa | 2025-08-07 08:14:27+00:00
I am in somewhat of the same boat for https://parture.org. Have a quite large CRDT system with unique ID's that is also type-safe, does not rely on serde_json::Value juggling, every CRDT is structurally valid and it knows what CRDT's cannot be applied to a Rust struct based on some business logic. I am wondering whether such checks (type-safety, business logic) can be worked into the CRDT application process. Automerge seems mostly meant for text editing, but they do have Autosurgeon though it hasn't been updated in a while
by marcobambini | 2025-08-07 08:14:38+00:00
1. Good point, we are going to publish more details about constraints in the repo within a few days 2. We have implemented row-level security, so you are free to easily implement any privacy role you want: https://docs.sqlitecloud.io/docs/rls. The "forbidden" rows are not synced

About encryption: all communications are over TLS.
by brainless | 2025-08-07 08:14:51+00:00
I will not be surprised if there is but that is not a problem that cannot be fixed with some effort. The point is if we can produce deploy-able, full-stack apps, which are manageable, this changes what it means for software and for startups.

I live in a remote village in Himalayas, WB, India that I am sure no one on HN has heard of. I got 5G based broadband that is flaky just a few weeks back. By the end of this year, I am sure I will be able to attempt 4-5 products and market them more than I have ever done in my 16 years of professional life.

Software development has changed, forever.
Show HN: Memori – Dual-Mode Memory Layer for AI Agents
by boburumurzokov | 2025-08-07 08:15:02+00:00
Hi Everyone,

I’ve been working on an open-source project called Memori — it’s a memory layer for AI agents.

Memori is designed to give agents a persistent memory layer that supports both:

Short-term “conscious” memory (like working memory in humans)

Long-term retrieval using SQL full-text search (not vector stores)

It’s built around a multi-agent architecture (memory agent, conscious agent, retrieval agent), with structured storage and zero config to get started. It supports SQLite, Postgres, and MySQL.

Would love to hear what you think — all critique welcome. Happy to answer questions or hear if you’ve solved this differently.
by jsdalton | 2025-08-07 08:15:32+00:00
My father had his eyes fixed like this about a decade ago and purports to be happy with it.

IIRC they did actually require that he wear contact lenses that replicated the effect for some amount of time (a month or so I believe) because there are people who are not happy with the arrangement. So they sort of force you to try before you buy.
by anothernewdude | 2025-08-07 08:16:14+00:00
I would say, if you're fully embracing AI altering code frequently, and want to do it safely...

Then a lot of things about the way code should be structured can change. If you're not editing by hand, and want to limit the scope of changes, and have AI tools to make future edits faster... THEN you can have a lot of redundancy in your code. You can just not have complex code that shares responsibility and instead have redundant repeated code that solves one problem differently.

It's not what I would advocate for every single part of every program, but many things now make sense to be structured in this way. Separate out concerns way more, and not try to have complex solutions that solve many problems at once, and favour repetitive code slightly more.

Much as you would structure a project if you had some junior programmers, you might have sections that only seniors should be touching - complex cores and difficult parts where you have way more oversight. And use more AI in the areas where you'd let juniors do scut work.
by speeder | 2025-08-07 08:16:36+00:00
Not op but I saw this happen kinda maliciously...

Company was founded by "visionary" CEO that is an sculptor and doesn't understand tech.

Most crucial employee is young guy hired right out of college.

Company now has 50+ developers, but the critical software is still made by that guy several years later.

Critical guy still get recent graduate salary, notices he is actually the most important person in the company, and asks for a raise.

Company denies his raise. He quits. Company hire a bunch of developers from cheap third world countries to replace him...

Company learns: 1. All software guy made a bit before he asked for a raise was on his personal, not company github. 2. The software is in other programming languages, not the one the company uses normally. 3. Everything the guy wrote since he joined the company, is extremely difficult to maintain, guy is a genius and all his code is correct, clean and well made, but his thought patterns and how they end in the code are just too different, and all people that worked with him before also were geniuses and didn't care the code was "crazy".

Note: the "other geniuses" mentioned above, also quit when other companies made them great offer and the stingy employer refused them a raise too.
by nileshtrivedi | 2025-08-07 08:17:02+00:00
MOOCs are still going strong at India's NPTEL , which started distributing university-level video courses for engg in 2008:

- 5m subscribers, almost 2B views on youtube

- 30m enrollments

- 600+ courses every semester in 22 disciplines

Anyone from the world can signup. Proctored exams are optional and cost about $11 per course. Not taking VC funding and setting up local chapters for supporting students seems to have worked out well for them.

Website: https://nptel.ac.in/

ACM report about this from November 2022: https://dl.acm.org/doi/pdf/10.1145/3550473

Former-director of IIT Madras has talked about how NPTEL came together: https://www.youtube.com/watch?v=LV-QoGegFLY
by chii | 2025-08-07 08:19:27+00:00
but the device is under the control of BAD. They fake a signin on their backend to GOOD. Your computer never touches GOOD at all, except from seeing the email from GOOD (which you're told about by BAD, and lied to about being a partner signin thing).

The problem being exploited by BAD is that your login account identifier (email in this case) is used in both GOOD (and BAD - accidentally or deliberately orchestrated), and 2-factor does not prevent this type of phishing.
by edding4500 | 2025-08-07 08:19:31+00:00
That, I think, is a very interesting question! I guess Google found itself in a situation where they had to jump on the AI bandwagon and add AI features to their search. Summaries existed before for certain topics, now they pop up always. In the long run they probably need to integrate ads into these responses or they find another way to monetize the combination of "knowing about user intent" and "present matching answers".
by Propelloni | 2025-08-07 08:21:19+00:00
> "Law" is a silly word to describe the regulation a legislative body puts to paper, in my opinion we should stop using it like that.

I understand where you are coming from, but you've got it backwards. Natural sciences adopted the word "law" to describe some "immutable" principles (that's obviously a descriptive use, ie. our descriptions of our understanding of some observations).

The word "law" comes from moral philosophy ("what is right?" and "what should we do?") and jurisprudence ("what is law?" and "what should be law?") of the ancient Romans ("lex") and is deeply rooted in the idea of norms (as in "normative", ie. that's how it should be) we, as humans, set for ourselves. Thus it is not silly to describe a regulation a legislative body puts to paper as law. That's what it means.

Note, I'm not saying you are wrong. It's just language changing and I wouldn't worry too much.
by kingsomething | 2025-08-07 08:21:29+00:00
Beta Release: OWASP OT Top 10

Operational Technology (OT) runs critical infrastructure—energy, water, manufacturing, transport. Securing it is essential to keep society running.

The OWASP OT Top 10 highlights the most critical OT security risks and offers guidance to protect these vital systems.

Beta now live! Final release: Oct 2025 We want your feedback to make it even better.

Check it out → https://ot.owasp.org Star us & share your thoughts on GitHub → https://t.ly/cyghF
by apt-apt-apt-apt | 2025-08-07 08:22:28+00:00
Would it be a viable and simple solution to only enter 6-digit codes into the specific website that requested it?

Isn't this the same thing as BAD asking, let us know the code i.e. password that GOOD gave you? Why would one be inclined to give BAD (i.e. someone else) this info?
by nicbou | 2025-08-07 08:23:20+00:00
What is the recommended approach here? We are going to face this problem soon as we figure out how to pay sales commissions on our product. Basically, we get an arbitrary commission from an insurer, and split it between the broker, me, and possibly a referrer. The payment rules are different for us (one-off percentage plus monthly) and the referrer (fixed one-off). We need invoices for everything, and VAT in most cases.

I dread working on this.
by pyrale | 2025-08-07 08:23:45+00:00
> For instance the Brits likely never even considered the possibility, in a million years, that they could lose in a military conflict with the colonies.

They likely couldn't. The US independence war was part of a larger war between the French empire and the British empire. The british empire was also at was with Spain and the Netherlands at the time.

> Enjoining WW1 was completely unnecessary

Britain didn't start WW1.
by handsclean | 2025-08-07 08:23:45+00:00
To elaborate a little, an advantage of this is there are many numbers it’s evenly divisible by.

60: 2, 3, 4, 5, 6, 10, 12, 15, 20, 30

100: 2, 4, 5, 10, 20, 25, 50

360: 2, 3, 4, 5, 6, 8, 9, 10, 12, 15, 18, 20, 24, 30, 36, 40, 45, 60, 72, 90, 120, 180