MurphyA/hacker-news huggingface dataset:
by ghaff | 2025-08-10 12:26:52+00:00
My general observation is that a lot of self-service wasn't super-popular pre-COVID. But, now, it's become more entrenched and a lot of people just grumble and deal with it while a lot of stores made the investment and accept the (probably overall) reduced cost even if customers don't love it. My local DIY home store doesn't even really have regularly-staffed full checkout lanes any longer.
by hitradostava | 2025-08-10 12:26:57+00:00
I agree, I just don't understand how the team at Cursor can say this:

“GPT-5 is the smartest coding model we've used. Our team has found GPT-5 to be remarkably intelligent, easy to steer, and even to have a personality we haven’t seen in any other model. It not only catches tricky, deeply-hidden bugs but can also run long, multi-turn background agents to see complex tasks through to the finish—the kinds of problems that used to leave other models stuck. It’s become our daily driver for everything from scoping and planning PRs to completing end-to-end builds.”

The cynic in me thinks that Cursor had to give positive PR in order to secure better pricing...
by brokegrammer | 2025-08-10 12:27:15+00:00
These tricks are a little too much for me. I'd rather just write the code myself instead of opening 20 tabs with different LLM chats each.

However, I'd like to mention a tool called repomix (https://repomix.com/), which will pack your code into a single file that can be fed to an LLM's web chat. I typically feed it to Qwen3 Coder or AI Studio with good results.
by vladvasiliu | 2025-08-10 12:28:43+00:00
> Am I correct that when tailscale updates/hijacked resolv.conf, subsequent DNS resolution is passed onto them on visited websites even when tailscale is not being used?

I think you're incorrect in the default settings, even when tailscale is active.

From the docs, last paragraph under Global nameservers https://tailscale.com/kb/1054/dns#global-nameservers

By default, your tailnet's devices use their local DNS settings for all queries. To force clients to always use the nameservers you define, you can enable the Override DNS servers toggle.
by dmsnell | 2025-08-10 12:29:59+00:00
When a process crashes, its supervisor restarts it according to some policy. These specify whether to restart the sibling process in their startup order or to only restart the crashed process.

But a supervisor also sets limits, like “10 restarts in a timespan of 1 second.” Once the limits are reached, the supervisor crashes. Supervisors have supervisors.

In this scenario the fault cascades upward through the system, triggering more broad restarts and state-reinitializations until the top-level supervisor crashes and takes the entire system down with it.

An example might bee losing a connection to the database. It’s not an expected fault to fail while querying it, so you let it crash. That kills the web request, but then the web server ends up crashing too because too many requests failed, then a task runner fails for similar reasons. The logger is still reporting all this because it’s a separate process tree, and the top-level app supervisor ends up restarting the entire thing. It shuts everything off, tries to restart the database connection, and if that works everything will continue, but if not, the system crashes completely.

Expected faults are not part of “let it crash.” E.g. if a user supplies a bad file path or network resource. The distinction is subjective and based around the expectations of the given app. Failure to read some asset included in the distribution is both unlikely and unrecoverable, so “let it crash” allows the code to be simpler in the happy path without giving up fault handling or burying errors deeper into the app or data.
by JustExAWS | 2025-08-10 12:30:36+00:00
This is a crazy take. It’s not the company’s responsibility to provide a safety net. It’s the government’s and the government should collect taxes to do so.

We already have a system for this in theory - the Earned Income Tax Credit. The program use to be widely supported by both Democrats and Republican administrations.

What’s a “living wage” anyway? It’s not the same for a single mother of 3 as it was for my then teenage son.

And I find it rich for people on HN to say that companies that can’t afford to pay its workers are commenting on a site run by a VC fund where almost none of its companies could afford to pay anything if they weren’t being propped up by investors and most of the companies will never make a profit
by mandarwagh | 2025-08-10 12:31:41+00:00
I built Miles, an open-source, browser-based voice AI with 5 distinct personalities.

Instant voice interruption: Cut off mid-response and it listens immediately (no lag)

Fast: Optimized for 50-token, 3-sentence replies (2–4s latency)

High accuracy: ~85% transcription accuracy with adaptive VAD

Fully customizable: Add your own personalities, tweak response styles, or integrate other AI models

No install: Runs in the browser with Web Speech API + Gemini API

Demo: miles-voice-ai.vercel.app Code: github.com/mandarwagh9/miles
by FirmwareBurner | 2025-08-10 12:33:02+00:00
>After getting good at it

Do you know the "use it or loose it" phrase? How long do you stay good at leetocde to not require anymore prep whenever you interview again?

For some people, doing an AI assisted take home might take less time than having to restudy and re-exercise leetcode for months which they won't use again. Plus a lot of people suck at live coding when put on the spot due to anxiety, which means even more time investment for something not related to work.

>Is that so hard to understand?

I understood just fine, I'm calling it out as being incorrect for a lot of people.
by corimaith | 2025-08-10 12:34:14+00:00
In the real world, individuals can't do much. It's only through the collective cooperation and the trust behind such cooperation that allows things to happen. Social Elites come with a wealth of trust from the legacies of families and connections that slowly built them up over hundreds of years. And such bonds survive even without the state, predate it and ultimately build it.

That is the "real world". Everything else is just an abstraction, propped up by a system that has only existed for a definite period of time and will not exist outside of that.
by fc417fc802 | 2025-08-10 12:37:24+00:00
Fair point, it's less immediately obvious. Still I don't see where 4D chess is necessary. Some levers let you make money directly. The effective use of others is more opaque but if you hoard enough of them you will presumably be able to figure something out.

Where's the direct monetary incentive to interfere with end users installing a modified Android image? What about SafetyNet?

At absolute minimum you can use it to influence the perception of your brand as being the gold standard.
by em-bee | 2025-08-10 12:37:56+00:00
yeah, i don't see the problem. using a generated voice, no matter how, only affects the audiobook, not the actual book. if i don't like the voice i can ignore it. i am part of a group that occasionally gets email from new authors wanting us to review their books. and some of them sound really interesting, and i'd love to read them, but i can only do audiobook, so i would be very happy if the author went through the effort to generate an audiobook that i could listen to.
by dweekly | 2025-08-10 12:39:09+00:00
> "anything beyond writing a simple function always leads to useless junk."

A strong statement like this was a reasonable take six months ago, perhaps. But with Claude Opus 4.1, o3-codex/gpt5, and Gemini Pro 2.5 this statement is pretty simply disproven with half an hour with them.

Just last week I spent an afternoon rewriting an old Android app that was done in butterknife and got something functional and tested in a few hours. It involved an 8,000 line diff. The work had been quoted to me by a contractor as likely to take 3-4 months and cost tens of thousands of dollars.

I designed a new website for my wife's band with a custom player widget, carousel photos, fully adaptive to large and small screens, good accessibility features, built from easy to edit JSON, SEO-optimized with microformats, and fast-loading. The first version I got running in 15 minutes. The final polished version took a few more days of ducking onto my laptop a few minutes here and there during an event. Without AI this would have taken me weeks to pull off and wouldn't have looked nearly as nice.

IMO part of the key to the flow here is to avoid a temptation to one shot. First establish ground rules for working together in your AGENTS.md/CLAUDE.md that lays out your software engineering best principles (use git semantics, write out your plans, add lint and tests to commit hooks...). Then have it read through existing code and architecture. Then carefully put together an architecture and set of constraints into your README/PRD. Then build a high level engineering plan divided up into sequences tasks and write it down (vs just keeping in context). Only then do you allow any code to start to get written. And yes, you still need to supervise it (and iterate on your AGENTS/CLAUDE to avoid repeating yourself). But yeah, it's about 10-100x faster than me now with a flow like that. (Context on me: been programming 40 years, Stanford CS, ACM international programming competition finalist.)

This new flow is extremely fun and addictive. It's also a new thing that uses technical knowledge but isn't exactly the same thing as coding. It's like having a pool of hard working inexpensive idiot savant never-worked-in-industry interns at your beck and call - the more you pour into giving them context and process, the better results you are gonna get.
by perching_aix | 2025-08-10 12:39:10+00:00
Whether they are "serious enough" is a perceived attribute, so it is on them to evaluate, not on any one of us. Depending, it could mean a blank check, or a perpetual zero. The way HN is architected (as described prior), and it being a community space, it makes no sense to me not to do it in general, and even considering costs, I'm not aware of e.g. TOTP 2FA being particularly expensive to implement at all.

Certainly, not doing anything will always be the more frugal option, and people are not trading on here, so financial losses of people are not a concern. The platform isn't monetized either. Considering finances is important, but reversing the arrow and using it as a definitive reason to not do something is not necessarily a good idea.

Regarding the threat scenarios, MFA would indeed help the most against credential reuse based attacks, or in cases of improper credential storage and leakage, but it would also help prevent account takeovers in cases of device compromise. Consider token theft leading to compromised HN user account and email for example - MFA involving an independent other factor would allow for recovery and prevent a complete hijack.
by kbrkbr | 2025-08-10 12:40:00+00:00
But I think I should be giving a reply also to the content of what you say. That's only fair after you took so much time explaining.

I think you conflate two questions in your statement: the question of what can be said about a function that is up to a point exponential and growing, and after that point decaying in an unspecified manner, but so that this point is a local maximum. And secondly the question if this is a good/the only/the best model for valuations in what is called an investment bubble that then bursts.

This conflation of model and modeled makes it hard for me to assess the argument, because I need to take these layers apart, and that involves guess work.
by 3036e4 | 2025-08-10 12:40:11+00:00
Maybe optimistic, but reading posts like this makes me hopeful that AI-assisted coding will drive people to design more modular and sanely organized code, to reduce the amount of context required for each task. Sadly pretty much all code I have worked with have been giant messes of everything being connected to everything else, causing the entire project to be potential context for anything.
by corimaith | 2025-08-10 12:40:22+00:00
>College in general was meant as a way for people to rise up

No, college started out as academic institutions of learning, not instruments of social mobility. It was never intended as a job training program, rather a place of academics to work together on a topic, and was heavily restricted to the aristocrats and elites from the start.

Alot of the problems here is stemming precisely from trying to use higher education for a purpose it was not originally designed to do.
by bayindirh | 2025-08-10 12:40:46+00:00
There are two main ways:

If your sources file references the release name (e.g.:bookworm), you change them to trixie, then “apt update && apt dist-upgrade”.

or,

If your sources file directly reference distro-suites (e.g.: stable), you just “apt update && apt dist-upgrade” since stable is now pointing to trixie.

In the first reboot, you run “apt autopurge” to remove packages which are not needed anymore.

…and you’re done.
by cb321 | 2025-08-10 12:43:08+00:00
For those programs that have betrayed shipping man pages, instead say relying only on a --help system, do you happen to know if the fish shell has an analogue to Zsh `_gnu_generic` and Bash `complete -F _longopt`? If not, do you have any insight into why not/what it would take to make that happen?
by michaelt | 2025-08-10 12:44:24+00:00
In the bad old days, if your company-internal tools were full of XSS bugs, fixing them wasn't a priority, because the tools could only be accessed with a login and VPN connection.

So outside attackers have already been foiled, and insider threats have a million attack options anyway, what's one more? Go work on features that increase revenue instead.

In principle the idea of "zero trust" was to write your internal-facing webapps to the same high standards as your externally-facing code. You don't need the VPN, because you've fixed the many XSS bugs.

In practice zero trust at most companies means buying something extremely similar to a VPN.
by d4rkn0d3z | 2025-08-10 12:44:26+00:00
> "Look, neither did I say there are no mathematical certainties, nor did I anywhere argue about the content of what you said

The only thing I said is: there are probably no _obvious_ mathematical certainties in reply to what you said, as the history of mathematics shows with plenty of examples."

There is nothing more obvious and certain mathematically than the fact that exponential growth of bubbles entails increasing valuations and increasing rates of growth in those valuations.

I use the word "obvious" quite properly as in "can be read from any graph", or "is contained within the structure or the model". I use categorical because the implied conclusion of the original comment is a categorical error.
by j45 | 2025-08-10 12:44:43+00:00
Another approach I’ve seen is to route public access from Traefik/nginx through a single Cloudflare tunnel instead, and Tailscale/Headscale can be left for private network and server access.

The traefik box can have the single Cloudflare tunnel , and tailscsle can hang out behind the scenes.

This way tailscale funnel doesn’t need to be public.

There is the self hosted Cloudflare alternative that’s escaping my mind right now too.
by credit_guy | 2025-08-10 12:45:11+00:00
Fully agree. It takes months to learn how to use LLMs properly. There is an initial honeymoon where the LLMs blow your mind out. Then you get some disappointments. But then you start realizing that there are some things that LLMs are good at and some that they are bad at. You start creating a feel for what you can expect them to do. And more importantly, you get into the habit of splitting problems into smaller problems that the LLMs are more likely to solve. You keep learning how to best describe the problem, and you keep adjusting your prompts. It takes time.
by cuu508 | 2025-08-10 12:45:14+00:00
What are more budget friendly options for similar workloads (running web app test suite in parallel)?

My test suite currently runs in ~6 seconds on 9700K. Would be nice to speed it up, but maybe not for $2000 :-) Last I checked 13700K or 13900K looked like the price/performance sweet spot, but perhaps there are better options?
by makeitdouble | 2025-08-10 12:45:25+00:00
> found it incredibly helpful at saving time implementing all the bullshit involved in starting a new code base - setting up a build system, looking up libraries and APIs, implementing a framework for configuration and I/O, etc.

Thanks for the very eloquent explaination.

I feel that's where most people get the best value from GPTs. And that's also why ruby on rails like platforms are so popular in the first place.

Avoiding the boilerplate from the start and focusing on what matters doesn't need to go through AI, same way we didn't need to stick to Java's generators and code factories. I kinda fear we lose some of these advancements as people move away from these more elegant stacks, but also hope the pendulum balances back when the hype fades away.
by throwaway290 | 2025-08-10 12:47:04+00:00
Ars article links to Malwarebytes but Ars article is better. The headline is better, it's most interesting that they run code from svg. Ars also adds context how the same hole was also used before to hijack Microsoft accounts and also by the Russians. Whereas Malwarebytes is mostly about pornsite clickjacking to like Facebook posts (and complains about age verification). However it has a bit more technical details too. Read both I guess?
by stevekemp | 2025-08-10 12:47:05+00:00
Indeed, the point there as you don't need a planter. Literally just a plastic bag of soil bought from a hardware/gardening store.

Of course the "new soil" would be full of nutrients, etc, it was more that this is possible even if you don't have a garden, or other hardware. (Similar intent behind mentioning the use of buckets!)
by 5kyn3t | 2025-08-10 12:48:06+00:00
Why is Mistral not mentioned. Is there any reason? I have the impression that they are often ignored by media, bloggers, devs when it comes to comparing or showcasing LLM thingies. Comes with free tier and quality is quite good. (But I am not an AI power user) https://chat.mistral.ai/chat
by merek | 2025-08-10 12:51:00+00:00
I recently deployed a few static websites on Cloudflare. I use AWS as a registrar, and I had to use Pages since Workers don't support "Custom domains outside Cloudflare zones" [1]. There's no way I can transfer the domain since I have subdomains tightly integrated with AWS services.

If anyone from Cloudflare sees this, are there plans to have Workers support external custom domains, or is this a fundamental limitation of Workers?

[1] https://developers.cloudflare.com/workers/static-assets/migr...
by monkeyelite | 2025-08-10 12:51:03+00:00
I see where this quote is coming from… but Einstein is a bad example. His success was not from golden Stanford opportunities.

Every life decision was him opting out of responsibility and prestige to spend more time on his interests.

So “people of equal talent, and commitment to their work at the cost of all other qualities of life including relationships” looks very different than that quote wants to suggest.
by nnashrat | 2025-08-10 12:51:09+00:00
I just converted a 110 page book to wav in about an hour with a RTX 4060.

I didn't have the newlines enabled though so it was pretty useless.

Enabling makes this pretty awesome.

af_heart is a great voice to me while af_jessica I find annoying. That is the main issue I have with audiobooks , the randomness of liking the voice actor or not almost matters as much as what the book says for me.

I knew this day was coming soon and I really am blown away. I have got so use to audiobooks that it is hard to actually sit and read a full book for me. I have about 20 books to convert that would never have a market to bother having someone read the book and in a voice I really like. Incredible.
by abduhl | 2025-08-10 12:51:21+00:00
Bribery is the main way of doing business in America in 2025:

https://www.latimes.com/california/story/2025-08-08/trump-se...

https://www.theguardian.com/us-news/2025/aug/07/universities...

https://www.reuters.com/investigations/trumps-war-big-law-le...

https://www.usatoday.com/story/news/politics/2025/08/07/tim-...
by alt227 | 2025-08-10 12:54:40+00:00
I disagree, the framework name has been intertwined with repairability since the inception. That is their USP and has been their marketing angle from day 1, not only that but the fact they are supposedly championing repairability due to their 'ethos' as a company.

Fair enough that a company might bring out products which differ from their core market, but in this instance I have to agree that releasing a desktop PC with soldered on RAM very much goes against the place they have positioned themselves in the market.

Perhaps a better solution would be to start releasing a newly branded product line of not so repairable machines, but keeping the name 'Framwork' for their main offerings.
by michaelt | 2025-08-10 12:55:42+00:00
I think some people on the SVG design committee were aiming to replace Flash for things like browser games, and wanted animations and javascript and so on to support that role.

That lead to the weird situation where browsers have two ways of embedding an SVG into a web page - embed in an <img> tag and the javascript won't run, but embed it in an <iframe> and it will (but of course iframe height can't auto-size...)

The javascript also means pretty much no user-generated-content sites allow the upload of SVGs. Wikipedia is the only place I can think of - and even they serve the SVG as a PNG almost everywhere.
by ExoticPearTree | 2025-08-10 12:56:16+00:00
The big problem with the ZT approach is that smaller shops don't have a lot of developers and testers (some maybe with a security inclination) to be certain to a somewhat high degree that their app is written in a secure manner. Or be able to continuously keep abreast of every new security update Microsoft or other IdP makes to their stack.

It is easy for Google/Microsoft and any other FAANG like company to preach about Zero Trust when they have unlimited (for whatever value of unlimited you want to consider) resources. And even then they get it wrong sometimes.

The simpler alternative is to publish all your internal apps through a load balancer / API gateway with a static IP address, put it behind a VPN and call it a day.
Show HN: QRCodes Shaped with Text/Images – NitroQR
by bhasinanant | 2025-08-10 12:57:19+00:00
Hi HN,

I built a QR code generator, NitroQR.com.

I was always a bit disappointed that "custom" QR codes usually just meant overlaying a logo in the center, which relies on error correction to cover up the data. I wanted to see if the visual information could be part of the code itself.

NitroQR lets you embed images or text messages directly into the data-holding modules of the QR code, so the entire pattern can be part of your design, not just a block in the middle.

There’s also an experimental feature I'm playing with: generating a single QR code that resolves to different URLs depending on the scanner's distance.

No sign-ups are needed, it's completely free to use. I'm working on a more advanced customizer, but the core functionality is live now.

Would love for you to try it out and hear any feedback. Thanks!
by _1tem | 2025-08-10 12:57:52+00:00
For me, the benefit was simple: I blocked off ssh and Postgres on my production server from the public internet, making it such that these are only accessible from my development machine and other servers. Yet from inside the tailnet I can still talk to Postgres as if it was on LAN. I’m not sure of any easy way to do this without Tailscale.
by bookofjoe | 2025-08-10 12:58:21+00:00
I have no interest or time or desire to disable anything when I'm online. Much easier to simply take things as presented. Plus then I'm forced to reenable the blocker: way too much effort for lazy me.

I likewise don't want to deal with drop down menus or tool bar icons when online. Again, too much active involvement required. I'm focused on site content, not presentation.

I AM enjoying the web like it was before dot com — at least in terms of simply arriving there and doing what I like to do.