MurphyA/hacker-news huggingface dataset:
by jvanderbot | 2025-08-07 12:41:05+00:00
We do not have hundreds of millions starving every day. And if we did, we don't have a large portion of industrialized/militarized missions starving every day anway. We'd send the best of the best, hand picked, with the best tech we can build.

It's fine if you believe we should not go (but I disagree), but the state of the world is not evidence of failure of the mission.
by ericjmorey | 2025-08-07 12:42:21+00:00
I have yet to see passkeys used as a sole method of logging in. There's always a traditional username and password setup first. There's always a recovery code set up for the passkey. I have yet to see passkeys offered as the only means of MFA. Which means that your backup methods still work. You can use them for recovering your access. I see passkeys as an optional convenience. It works well for me by that measure.
by estearum | 2025-08-07 12:42:21+00:00
For anyone curious, the context here is that he said he'd be a dictator only on day one.

First, even one day of dictatorship is in direct violation of the Constitution.

Second, we're coming up on day 200 and the Trump administration continues to assert an expansive view of executive power far beyond any historical precedent and to degrade the systems designed to check that power, following a 100% run of the mill authoritarian playbook.
by tux3 | 2025-08-07 12:42:30+00:00
It's been a little while, but I believe at the time you'd get a CTAP/CBOR MakeCredentialRequest, the browser would ask you to confirm that you allow MS to see the make and model of your security key, and it would send the response to a Microsoft VerifySecurityInfo API.

If you refused to provide make and model, IIRC you would fail the check whether enforcement was enabled or not. Then if enforcement was enabled and your AAGUID didn't match the list, you would see a different error code.

Either way, you're sending over an attestation. They understandably forbid attestation format "none" or self-signed attestations. It's possible that this has changed, but the doc page still seems to say they won't accept a device without a packed attestation, it's only that the AAGUID check can currently be skipped.
by ajross | 2025-08-07 12:42:55+00:00
PyPy isn't unloved, just incompatible. The routine experience with PyPy is that you try your toy benchmark, drop your jaw in amazement, then run your whole app and it fails. Usually it's because you have a upstream dependency on a native module without a PyPy port, or with an incompatible implementation (I've personally run into trouble with ctypes code that didn't quite work the same in PyPy).

But there are a non-trivial number of genuine behavioral differences too. A big delta is garbage collection. CPython is refcounted and greedy, you can write a loop doing more-than-just-heap allocation (like, opening files or something), and it works fine because objects get destroyed (closed) as they're no longer used. The same loop in PyPy runs into resource exhaustion because the relevant resource (file descriptors) runs out before the heap does and the GC doesn't run.

The community has tried to address this particular glitch with cryptic admonishments about using "with" that no one quite understands or can explain, but it hasn't taken and it remains true that PyPy basically doesn't work for anything big unless you develop in PyPy. And honestly I don't see a lot of attention to the issue, it's like PyPy doesn't think it has to be 100% compatible to win. Well, it does.

But getting back to my upthread poing: numba doesn't have those properties. Numba is just CPython, with the added feature that when you know you need a fast loop for something you write your python code to look like C and put a @jit decorator on it.
by discordance | 2025-08-07 12:42:59+00:00
I think you're holding it wrong.

I installed Gemini CLI today, went to AI studio, got a free Gemini 2.5 Pro API key (without setting up billing or a credit card) and auth'd with Gemini CLI using the key. Took like 30 seconds. Unfortunately the results were much poorer than what I've been getting with Claude Code.
by energy123 | 2025-08-07 12:44:32+00:00
They need a boundary between their research culture and their software culture. One org, two cultures.

The chaos you describe is actually a significant positive in research environments. It's not spreading oneself thin, it is diversifying and decorrelating ones' efforts. You can't centrally plan all innovation.

But for the interface between the customer and the research output, which is a software and product problem, that definitely needs a different approach.
by HSK11 | 2025-08-07 12:44:54+00:00
I built Photo Effects Studio at Pixoate to let people transform photos with over 23 artistic styles—vintage filters, pencil sketches, glitch art, color overlays—right in their browser. Everything works live and locally, without uploads or watermarks.

Highlights:

Real‑time effects previews Single image or batch processing Privacy‑safe: all processing happens in your browser No signup, ads, or limits Targeted at developers, designers, educators, and non‑tech users needing quick creative filters

I’d appreciate feedback on:

Usefulness of the effect styles Speed & responsiveness of tool What missing features could make it better?

Check it out here: [pixoate.com/photo-effects]

Enjoy exploring—looking forward to thoughts and ideas from the HN community!
by wh0sumit | 2025-08-07 12:45:17+00:00
depends who you’re selling to.

for devs/builders, a landing page with real copy and rough roadmap is plenty, you’ll get feedback way before launch.

for consumers, though, everyone’s spoiled. if there’s no demo, no dogfooding, they bounce in 10 seconds.

tl;dr: test your copy/ideas with a page, but have a working click-thru demo asap if you want anyone outside your bubble to care.

no-code tools make it too easy for the next guy to show something.
by evaXhill | 2025-08-07 12:45:41+00:00
The quantity & quality of a child's diet determines how fast they age & their health later in life, its just crazy that US children now get 2/3rds of their energy from ultra-processed foods that are designed to be hyper-palatable & maintain hunger. Unfortunately, there’s just a lot of misinformation out there as it relates to diet (food pyramid being one of the most egregious examples). For one, although most ultra processed foods are bad, some can be actually beneficial for those with medical issues.
by galangalalgol | 2025-08-07 12:45:55+00:00
The fixed point TI dsp chips always had a long int that was 48. Intel had 84 bit floating point registers before simd registers took over. And the pdp-11... Powers of two aren't as ubiquitous as it seems. If anything, the hardware uses whatever sizes it wants and that gets abstracted from the rest of the world by compilers and libraries.
by fredoralive | 2025-08-07 12:46:45+00:00
I wonder if this is slightly mangled over the years?

MS-DOS wasn’t a specific IBM PC OS, it was designed to be generic 8086 OS. It was up to the OEM to adapt the machine specific code (mostly in IO.SYS / IBMBIO.COM) to their system. IBM owned IBMBIO.COM, and some of the utilities like MODE and FDISK, and early on Microsoft didn’t have its own implementations to offer for people building generic PC clones. You had to write your own, and hope they were compatible. Microsoft did eventually offer a generic MS DOS with an IBM PC type IO.SYS and reimplementation of the utilities, so perhaps those are descended from Compaq’s versions?
by estearum | 2025-08-07 12:46:46+00:00
Neither TSMC in Arizona or Samsung in Texas were promises made to the Trump admin though. TSMC was announced in May 2020 (tail end of Trump 1) and Samsung was November 2021.

I don't think GP was saying "no one invests in the US," but rather that these particular announcements clearly designed to appease POTUS do not come to fruition.
by carlosjobim | 2025-08-07 12:46:48+00:00
"A Badge would place a discreet flyer with a QR code: “Planning to stay and work? Great! A minimum spend of €12 every three hours keeps the Wi‑Fi flowing.” Staff could simply point to the flyer—no awkward confrontations, no hard feelings."

If I'm a respectful customer with a laptop and I sit down and some staff comes and does this, I would simply leave. People will go to cafés where they feel welcome.
by codedokode | 2025-08-07 12:46:58+00:00
Password managers are those proprietary programs that you need to install, give full access to your computer, register an account and trust their word that your passwords are uploaded to the cloud securely? No thanks.

Also they are too complicated for an ordinary user. A physical key is much simpler and doesn't require any setup or thinking, and can be used on multiple devices without any configuration. And doesn't require a cloud account.
by TXTOS | 2025-08-07 12:47:53+00:00
TL;DR

After nine months of chasing weird hallucinations and silent failures in production LLM / RAG systems, we catalogued every failure pattern we could reproduce. The result is an MIT-licensed “Semantic Clinic” with 16 root-cause families and step-by-step fixes.

---

## Why we built it

@ Most bug reports just say “the model lied,” but the cause is almost always deeper: retrieval drift, OCR mangling, prompt contamination, etc.

@ Existing docs mix symptoms and remedies in random blogposts; we wanted one map that shows where the pipeline breaks and why.

@ After fixing the same issues across 11 real stacks we decided to standardise the notes and open-source them.

---

## What’s inside

@ 16 root-cause pages (Hallucination & Chunk Drift, Interpretation Collapse, Entropy Melts, etc.).

@ Quick triage index: find the symptom → jump to the fix page.

@ Each page gives: real-world symptoms, metrics to watch (ΔS semantic tension, λ_observe logic flow), a reproducible notebook, and a “band-aid-to-surgery” list of fixes.

@ Tiny CLI tools: semantic diff viewer, prompt isolator, vector compression checker. All plain bash + markdown so anyone can fork.

---

## Does it help?

@ On our own stacks the average debug session dropped from hours to ~15 min once we tagged the family.

@ The first 4 root causes explain ~80 % of the bugs we see in the wild.

@ Used so far on finance chatbots, doc-QA, multi-agent sims; happy to share war stories.

## Call for help

@ If you’ve hit a failure that isn’t on the list, open an issue or PR. We especially want examples of symbolic prompt contamination or large-scale entropy collapse. @ Long-term goal: turn the clinic into a self-serve triage bot that annotates stack traces automatically.

---

## Why open-source?

Debug knowledge shouldn’t be pay-walled. The faster we share failure modes, the faster the whole field moves (and the fewer 3 a.m. rollbacks we all do).

Cheers – PSBigBig / WFGY team
by dotancohen | 2025-08-07 12:48:03+00:00
_You_ might not use it, but somebody's going to send a PR, or some LLM is going to spit it out, or some previous maintainer put it in there, or will be in some tutorial, or it will be in some API documentation.

You are going to have to deal with it as a mess at some point. One of the downfalls of perl was the myriad of ways of doing any particular thing. We would laugh that perl was a write only language - nobody knew all the little syntax tricks.
by hn92726819 | 2025-08-07 12:48:08+00:00
This article reminds me a lot of a conversation with an expert DBA recently. We were talking about performance improvements and he said that upgrading hardware is almost negligible. Upgrading from HDD to SSD gives you 10x boost. SSD to nvme maybe 4x. But optimizing queries and fixing indexes can give you 100x or 1000x improvements.

Of course, every little bit counts, so we still did upgrade the hardware, but (at least in our area), almost all speed improvements came from code optimization.

This article is talking about kicking the ipv4 can down down the road only 10 years and increasing process memory from 2G to 32G. Seems like such small fries when we could just double it and move on. If you brought the 2038 problem to Unix devs, I'm sure they would have said "thanks! We'll start with 64-bit" instead of "yes... Let's use an unaligned 36 bits so the problem is hidden slightly longer".
by simmerup | 2025-08-07 12:48:19+00:00
Whole grain cereal with sugar would be classed as 'processed' food as I understand it.

Examples of processed food:

> Canned or bottled vegetables and legumes in brine; salted or sugared nuts and seeds; salted, dried, cured, or smoked meats and fish; canned fish (with or without added preservatives); fruit in syrup (with or without added anti-oxidants); freshly made unpackaged breads and cheeses.

https://openknowledge.fao.org/server/api/core/bitstreams/527...
by qualeed | 2025-08-07 12:48:43+00:00
This is a pretty good example of what parent comment was referencing, I think.

You say "Asimov’s three laws are not a good framework.", then don't present any arguments to why it is not a good framework. Instead you bring up something separate: the framework can facilitate story writing.

It could be good for story writing and a good framework. Those two aren't mutually exclusive things. (I'm not arguing that it is a good framework or not, I haven't thought about it enough)
by ncann | 2025-08-07 12:48:53+00:00
I needed an implementation of debounce in Java recently and was surprised to find out that there's no existing decent solution - there's none from the standard library, nor popular utilities libraries like Guava or Apache Commons. There are some implementations floating around like on Stackoverflow but I found them lacking, either there's no thread safety or there's no flexibility in supporting the execution of the task at the leading edge or trailing edge or both. Anyone has a good recommendation on a good implementation?
by somenameforme | 2025-08-07 12:50:07+00:00
European production is mostly a mixture of a myth to an outright lie. For instance as of late 2024 the commissioner of defense for the EU stated that only 20-25% of EU supplied weapons come from the EU. [1] And similarly EU claims of artillery production were dramatically exaggerated [2]. The EU 'military industrial complex' remains mostly going unsustainably deep into debt to buy US arms. Energy costs alone likely preclude any large scale manufacturing with any degree of efficiency.

[1] - https://kyivindependent.com/eu-to-produce-2-million-artiller...

[2] - https://www.rferl.org/a/ukraine-weapons-shells-european-unio...
by buran77 | 2025-08-07 12:50:16+00:00
Part of the processing is to add something harmful or remove something useful either as the target of the process, or as a byproduct.

I give you a tomato, that's unprocessed. I squash it a bit and maybe add some salt? That's processed. I boil the hell out of it and mix it with 30 other ingredients (like salt, sugar, flavoring, preservatives, other additives, etc.), especially in large quantities? That's heavily processed or above. As you can see, the processing is what made a tomato worse for the health.

The term is perfectly apt.
by giantg2 | 2025-08-07 12:50:23+00:00
I can confirm this. Sent a 5yo to public school and they came home with the new saying "I don't give a fuck!". Not what I want a 5yo to learn. We have massive overreactions by the schools for comments like in the article, but they're culpable in this sort of behavior by creating a largely undisciplined environment for basic in-person behavior. Uncontrolled classrooms and busses lead to all sorts of problems because nobody gets punished on the low end. My kid got in trouble for something and the punishment was to play alone at recess. Really? I told the school I think they should have been in detention at recess, possibly for a couple days. Of course they got punished at home too, which I suppose doesn't happen in some households.
by sho_hn | 2025-08-07 12:50:38+00:00
My psychological reaction to what's going on is somehow pretty different.

I'm a systems/embedded/GUI dev with 25 years of C++ etc., and nearly every day I'm happy and grateful to be the last generation to get really proficient before AI tools made us all super dependant and lazy.

Don't get me wrong, I'm sure people will find other ways to remain productive and stand out from each other - just a new normal -, but I'm still glad all that mental exercise and experience can't be taken away from me.

I'm more compelled to figure out how I can contribute to making sure younger colleagues learn all the right stuff and treat their brains with self-respect than I feel any need to "save my own ass" or have any fears about the job changing.
by tptacek | 2025-08-07 12:50:49+00:00
It's a good writeup, and I understand that it's Black Hat week and so the intensity meter is dialed up to 11 on these things. Some of these vulnerabilities are pretty clever. But these are mostly situational, things that would typically get sev:med or lower on an assessment.

The RCE reported here is the product of an admin->root (Vault root, not Unix root) privilege escalation that already required a privileged account. It's a good bug! They got audit logs to get parsed as an executable plugin. The privilege escalation bug they used to allow admin accounts to set up plugins is also clever (they noticed that the sanity check for assuming the "root" token hardcoded "root", but the code that actually selected the token sanitized the token name, so you could use " ROOT").
by Aurornis | 2025-08-07 12:51:08+00:00
My comment said higher processed. The enriched, bleached, white, non whole wheat flour is highly processed.

Putting it into bread products with flavor enhancing additives and shelf life enhancing preservatives like you see in the hamburger buns at the store would make it ultra processed.

> Are we going to have a discussion on the ultra-processed diet of the medieval peasant?

Are you intentionally missing the point? A medieval peasant processing whole wheat into flour and then making a recipe out of it without added sugar and preservatives is a lot less processed than modern white flour production that goes into hyper-palatable foods on the shelf.

The average pizza that kids or adults consume is not from fresh, hand-made flour like a medieval peasant. It’s from the industrial process and it generally has flavor enhancing additives (sugar). We’re talking Domino’s pizza for most people, not an artisanal handmade pizza with freshly ground flour.
by myrmidon | 2025-08-07 12:51:24+00:00
I think a big factor in Asimov's laws specifically being sidelined is that the whole process of building AI looks very different from what we pictured back then.

Instead of us programming the AIs by feeding it lots of explicit hand-crafted rules/instructions, we're feeding the things with plain data instead, and the resulting behavior is much more black-box, less predictable and less controllable than anticipated.

Training LLMs is closer, conceptually, to raising children than to implementing regexp parsers, and the whole "small simple set of universal constraints" is just not really applicable/useful.
by ACCount36 | 2025-08-07 12:52:16+00:00
We are nowhere near the best learning sample efficiency possible.

Unlocking better sample efficiency is algorithmically hard and computationally expensive (with known methods) - but if new high quality data becomes more expensive and compute becomes cheaper, expect that to come into play heavily.

"Produce plausible text" is by itself an "AGI complete" task. "Text" is an incredibly rich modality, and "plausible" requires capturing a lot of knowledge and reasoning. If an AI could complete this task to perfection, it would have to be an AGI by necessity.

We're nowhere near that "perfection" - but close enough for LLMs to adopt and apply many, many thinking patterns that were once exclusive to humans.

Certainly enough of them that sufficiently scaffolded and constrained LLMs can already explore solution spaces, and find new solutions that eluded both previous generations of algorithms and humans - i.e. AlphaEvolve.
by rayiner | 2025-08-07 12:53:41+00:00
> Why would that change anything? Apple already got the exemptions it wanted. If Trump changes his mind and comes back, they just need to give him another shiny object and a headline.

Because before, the administration was staffed with Bushies who were happy to let things go when the boss lost interest. Now it’s staffed with people who would be happy to burn Apple down.

> The tariffs themselves obviously do not have the requisite durability to justify actual high scale capex… a few years when Trump is out of office. Trump is the moderate one.

When Trump leaves office in 2028, he’ll either be replaced with JD, or a progressive Democrat. The Bush GOP definitely isn’t coming back, and I suspect the Biden Democratic Party isn’t either. Cutting tariffs isn’t going to be a high priority of the incoming administration either way. And even Biden didn’t cut many of Trump’s tariffs from his first administration.
by mc32 | 2025-08-07 12:53:47+00:00
It's reminiscent of but different from Philip Lorca diCorcia's automated street photographs in NYC from his "Heads" project: https://www.deutscheboersephotographyfoundation.org/en/colle...

Funch's project is more interesting because it captures a person at least twice over time; however, the photos are less well executed compared to the ones from diCorcia, but that's to be expected as diCorcia only had to find good and photogenic photographs once per subject, Funch had to get his subject's photos at least twice --so it was much harder to do.
by wh0sumit | 2025-08-07 12:54:20+00:00
relate a lot. recently began working on my product by myself, had imagined the independence would be nothing but upside, but the reality is more complex.

there’s a unique satisfaction in shipping features and seeing your vision come to life, but most days are quiet, almost unnervingly so. the biggest challenge isn’t the work itself, but the isolation, no cofounder to bounce ideas off, no small acknowledgments that you’re on the right track, and little external validation.

in the early weeks, it felt a bit like talking into the void. there were days with zero signups, no feedback, and it was hard not to question what i was building, or why.

what helped for me was making my progress public, engaging directly with the earliest users, and being open about the ups and downs. sometimes just a single thoughtful message can make the process feel less solitary.

it can be difficult when you’re the only one in your slack workspace, and self, doubt definitely comes more often than expected. but i find there’s freedom in knowing that every decision, every pivot, is mine to make. solo building is lonely, demanding, but also the clearest way i think i’ve found to rediscover what really matters to me and why i wanted to build in the first place.
by kotaKat | 2025-08-07 12:54:47+00:00
Guaran-fucking-teed the bullied kids are still getting bullied just as bad and the system is still failing those kids while the school can put an outward appearance to the rest of the community that nothing is wrong and everything is perfectly fine inside the walls.

The victims will still be victims, they’ll just be punished by the system even harder for being a victim.
by yetihehe | 2025-08-07 12:54:49+00:00
> NervesCloud received 3389 simultaneous connected devices before the server hit me with the OOM killer. It was probably running a few more but around there. So each VM is: [...]

Is running a virtual machine per each connected device really necessary? Why do you do it?

I mean, I'm working at a IoT cloud too, but about 7 years ago we managed to connect 250.000 IoT devices to one erlang instance running on 8 core machine with 24gb ram as a stress test with simulated devices (rest of system was rabbitmq to share measurements from devices and riak for storing/retrieving them, plus websocket api endpoint). Those were gps trackers and some hubs. Surely you don't need 192 core server to connect 5000 devices?