MurphyA/hacker-news huggingface dataset:
by n4te | 2025-08-07 14:22:36+00:00
True those platforms have security controls, better than what we've ever seen on desktop. Desktop also needs controls like that: to use the system tray, filesystem, hardware, etc. There's at least a work multiplier of 3 for Windows, Mac, Linux. It's just one of many things needed.

Building the web toolkit took enormous effort and it sucks in many ways (see article). Theoretically a new one could be created and could also work for desktop, but there are lots of reasons why that won't happen.
by mikewarot | 2025-08-07 14:23:00+00:00
You know what's actually hard to find in all this? The actual dimensions of the arrays in the model GPT-OSS-120B. At least with statically typed languages, you know how big your arrays are at a glance. I'm trying to find it in the GitHub repo[1], and I'm not seeing it.

I'm just trying to figure out how wide the datastream through this is, in particular, the actual data (not the weights) that flow through all of it. The width of the output stream. Just how big is a token at the output, prior to reducing it with "temperature" to a few bytes?

Assume infinitely fast compute in a magic black box, but you have to send the output through gigabit ethernet... what's the maximum number of tokens per second?

[1] https://github.com/openai/gpt-oss/tree/main/gpt_oss
by 9rx | 2025-08-07 14:23:13+00:00
> I do see claims that the Democrats are at fault for us having Trump.

If you mean your own comments, yes, I saw that too. Your invented blame made about as much sense as blaming a butterfly who flapped his wings in Africa, but I understand that you were ultimately joking around. Of course, the same holds true for all other comments you supposedly keep seeing. You are not the only one on this earth who dabbles in sarcasm or other forms of comedy, I can assure you.

> Like when hearing something out of left field

The Democrats preferring to race against Trump instead of whomever the alternative would have been may not be actually true, but out in left field? Is this sarcasm again? They beat Trump before. Them seeing him as the weakest opponent at the time wouldn't come as a shock to me. Why you?

> So hearing yet another argument about how Democrats are so politically astute that they could swing the Republican primary

There was nothing to suggest political astuteness. The claim was that they were worried about someone other than Trump winning the Republican ballot and, because of that, they took action to grease the wheels of his victory. Even the most inept group of people would still see the motive and would almost certainly still take action. That it ostensibly worked is just as easily explained by dumb luck.
by ivape | 2025-08-07 14:23:17+00:00
Why don’t they just own a REST or RPC server? This is the part of the MCP motivation I’m not totally getting. In fact, you can prove to yourself that your LLM can hook into almost any existing REST api in a few minutes, which gives it more existing options and functionality than just about anything else as it stands now.

Things like swagger or graphql already provide you discovery.
by matthewdgreen | 2025-08-07 14:23:48+00:00
I don't know about that. We live in a city where people are complaining about housing costs and availability, but the city has absolutely vast amounts of housing. We've lost close to 40% of our population since 1970.

It's just that a lot of that housing is in awful shape, and the places where it exist aren't desirable neighborhoods (although let's be clear, many of them are right next to expensive and desirable neighborhoods, it's really bad.) This should be a situation that rights itself automatically, but it's not.
by chubot | 2025-08-07 14:23:52+00:00
> Who would write a whole operating system to compete with Microsoft when that would take thousands of engineers being paid $100,000s per year?

You might be misunderstanding that almost all of Linux development is funded by the same kind of companies that fund MPEG development.

It's not "engineers in their basement", and never was

https://www.linuxfoundation.org/about/members

e.g. Red Hat, Intel, Oracle, Google, and now MICROSOFT itself (the competitive landscape changed)

This has LONG been the case, e.g. an article from 2008:

https://www.informationweek.com/it-sectors/linux-contributor...

2017 Linux Foundation Report: https://www.linuxfoundation.org/press/press-release/linux-fo...

Roughly 15,600 developers from more than 1,400 companies have contributed to the Linux kernel since the adoption of Git made detailed tracking possible

The Top 10 organizations sponsoring Linux kernel development since the last report include Intel, Red Hat, Linaro, IBM, Samsung, SUSE, Google, AMD, Renesas and Mellanox

---

curl does seem to be an outlier, but you still need to answer the question: "Who would develop video codecs?" You can't just say "Linux appeared out of thin air", because that's not what happened.

Linux has funding because it serves the interests of a large group of companies that themselves have a source of revenue.

(And to be clear, I do not think that is a bad thing! I prefer it when companies write open source software. But it does skew the design of what open source software is available.)
by harg | 2025-08-07 14:25:29+00:00
Some of United's own aircraft are over 30 years old [1]. If you can rely on a well-maintained 30+ year-old aircraft to fly you halfway accross the world I think you can rely on a similar-aged car to drive across the country.

[1]: https://www.planespotters.net/airframe/boeing-767-300-n641ua...
by arp242 | 2025-08-07 14:26:21+00:00
What people mean with "trust" here is whether they trust there are no subtle security issues. While I think "don't roll your crypto" has been somewhat overstated at times (someone has to write crypto), there is certainly some truth in that you need to be very careful writing this code and that mistakes are incredibly easy to make, even for competent developers.

If I were to release something like this then people can see that 1) this is a guy with >20 years of various contributions to open source and he seems like a basically competent guy we can trust (as much as you can ever trust a single person), but also that 2) he's not a crypto guy and there may very well be oversights. Maybe there are none, but you know...

If someone like, say, Filippo Valsorda would release someone like this, then people could see that 1) is basically the same as me, and 2) he's also a well known crypto guy with a good track record. This is not a guarantee there are no oversights, but I would certainly be surprised if there were major ones. I would certainly trust that more than anything I would write.

The whole signing stuff is kind of a red herring IMO. I mean, it's not bad to have I guess, but honestly I don't really care. If anything, focusing to strongly on "box ticking security" so early on seems like the wrong thing to focus on.
by ghaff | 2025-08-07 14:26:22+00:00
I expect many people reading this are too young to remember. But, other than a Sunday paper from time to time, it wasn't that uncommon for me to buy a newspaper for the local classifieds or help wanted ads from time to time. And, other than sometimes watching the nightly news or having a weekly subscription to Time, the (typically) Sunday paper was more or less my only source for news in a given week.
by kqr | 2025-08-07 14:26:23+00:00
I would guess that refers to entering records when the plane takes off and lands, to keep track of where it is. I.e. not information that would be used in flight -- at least not critical information!

Obviously air traffic control wants to know the exact location of the plane but they have radar and the airplane has a transponder for that purpose. I don't know if the airline cares so much, other than the estimated arrival time to account for delays.
by thecupisblue | 2025-08-07 14:26:50+00:00
Considering they were already creating useless noise, they can create it faster now.

But once you get out of the tech circles and bullshit jobs, there is a lot of quality usage, as much as there is shit usage. I've met everyone from lawyers and doctors to architects and accountants who are using some form of GenAI actively in their work.

Yes, it makes mistakes, yes, it hallucinates, but it gets a lot of fluff work out of the way, letting people deal with actual problems.
by falcor84 | 2025-08-07 14:27:21+00:00
I would absolutely take you on a blind test between 4.0 and 4.5 - the improvement is significant.

And while I do want your money, we can just look at LMArena which does blind testing to arrive at an ELO-based score and shows 4.0 to have a score of 1318 while 4.5 has a 1438 - it's over twice likely to be judged better on an arbitrary prompt, and the difference is more significant on coding and reasoning tasks.
by scarface_74 | 2025-08-07 14:27:32+00:00
And if the company is in that bad of shape, you’re going to be out of business anyway soon as did the startup I worked for from 2008-2011.

That’s where the whole always being prepared for the shit to hit the fan comes in - having a strong network, enough liquid savings to cover a gap of unemployment, a resume that’s updated at least quarterly, a longer form career document, up to date skillset…

I have never once in 27 years (3 years after my first job) been stressed enough about losing my job to overwork myself and I’ve worked at the shittiest BigTech company (you know the one based in Seattle) where they love to overwork you.
by dathinab | 2025-08-07 14:27:40+00:00
yeah, IMHO the design was messed up by a few very influential companies "over fitting" it for their company specific needs

but I don't think attestation per-se is bad, if you are a employee from a company and they provide you the hardware and have special certification requirements for the hardware then attestation is totally fine

at the same time normal "private" users should never exposed to it, and for most situations where companies do expose users to it (directly or indirectly) it's often not much better then snake oil if you apply a proper thread analysis (like allowing banking apps to claim a single app can provide both the login and second factor required by law for financial transactions, except if you do a thread analysis you notice the main thread of the app is a malicious privilege escalation, which tend to bypass the integrity checks anyway)

But a lot of the design around attestation look to me like someone nudged it into a direction where "a nice enterprise features" turns into a "system to suppress and hinder new competition". It also IMHO should never have been in the category of "supported by passkey" but idk. "supported by enterprise passkey only" instead.

Through lets also be realistic the degree to which you can use IT standards to push consumer protection is limited, especially given that standard are made by companies which foremost act in their financial interest, hence why a working consumer protection legislation and enforcement is so important.

But anyway it's not just the specific way attestation is done, it's also that their general design have dynamics push to a consolidation on a view providers, and it's design also has elements which strongly push for "social login"/"SSO" instead of a login per service/app/etc. i.e. also pushes for consolidation on the side of login.

And if you look at some of the largest contributors you find

- those which benefit a ton from a consolidation of login into a few SSO providers

- those which benefit from a different from a login consolidation (consolidation of password managers) and have made questionably blog entries to e.g. push people to not just store password but also 2FA in the same password manager even through that does remove on of the major benefits of 2FA (making the password manager not a single point of failure)

- those which benefit a ton if it's harder for new hardware security key companies, especially such wich have an alternative approach to doing HSKs

and somehow we ended up with a standard which "happened" to provide exactly that

eh, now I sound like a conspiracy theorist, I probably should clarify that I don't think there had to be some nefarious influence, just this different companies having their own use case and over fitting the design on their use case would also happen to archive the same and is viable to have happened by accident
by mvieira38 | 2025-08-07 14:27:42+00:00
The without recourse is the part that matters... With passkeys or 2FA she's at risk of having to wait a day or more to go to the physical location (if there even is one, digital banks are huge in Latin America), with passwords she can just check her notebook the same night and start the recourse through official channels. I know she could just call the hotline, but if 24hr customer service guy can get you in your account same night then the bank is too insecure anyways
by anonymars | 2025-08-07 14:27:47+00:00
Strawman? We are talking about this link, right, the one that says:

> I've already heard rumblings that KeepassXC is likely to be featured in a few industry presentations that highlight security challenges with passkey providers, the need for functional and security certification, and the lack of identifying passkey provider attestation (which would allow RPs to block you, and something that I have previously rallied against but rethinking as of late because of these situations).

> The reason we're having a conversation about providers being blocked is because the FIDO Alliance is considering extending attestation to cover roaming keys.

> From this conversation it sounds like the FIDO Alliance is leaning towards making it possible for services to block roaming keys from specific providers.
by PaulHoule | 2025-08-07 14:28:11+00:00
As I see it, the real question for space colonization is "How small of a population can be 100% self-sufficient in manufacturing?" and the smaller that number is the more likely it can be successful. If N=1, the odds are great, if N=10,000,000 it will not succeed.

The basic problem is that you can't export anything from Mars to Earth that makes Mars colonization profitable from a Terrestrial perspective -- so at any time the flow of resources could be cut off, see the Asimov classic story

https://en.wikipedia.org/wiki/The_Martian_Way

The Muskian model that we're just going to send millions of people canned food makes no sense at all.

Eric Drexler's molecular assembler program has foundered but we need something functionally equivalent, living things pull off basically the same trick, maximizing what we can do with them is an obvious path to "advanced manufacturing" together with flow chemistry, 3-d printing and other methods.
by ryandv | 2025-08-07 14:28:15+00:00
The moral of the story is that neocortical facilities (vaguely corresponding to what distinguishes modern humans) depend on free will. If you want to merely enthral yourself to voices of the gods a la Julian Jaynes' bicameral man, you can, but this is a regression to a prior stage of humanity's development - away from egoic, free willed man, and backwards to more of a reactive automaton, merely a servant of (possibly digital) gods.
by Workaccount2 | 2025-08-07 14:28:37+00:00
I have wondered for a while now if it happens to be that the less safe guards and thought policing you do, the more capable and generalizable the model becomes. Like "bad" parameters are actually critical for forming the whole picture necessary for ingenuity and advancement.

Effectively making it so that whoever has the lowest safeguards has the most capable model.
by xnorswap | 2025-08-07 14:29:35+00:00
I only skimmed the article and didn't catch it at first, but a deeper read shows overuse of "rule of 3" which to be fair is also something that hacks do.

But also factual errors, such as quoting the supposedly Democrat chair of the Senate Committee on Commerce, Science, and Transportation.

It seemed unlikely that a Democrat was left in that post, and I googled it, and indeed they weren't.
by chrismorgan | 2025-08-07 14:29:35+00:00
You’re confusing the JavaScript keyword Infinity, which has been around forever, with the CSS keyword infinity, which has only been around for 2–3 years <https://caniuse.com/mdn-css_types_calc-keyword_infinity>.

And actually I’d be quite surprised if the infinity keyword is even relevant here; I would expect the same results if you changed each calc(infinity * 1px) to 9999999999999999px. Firefox (and, if you go far enough back, IE) will still ignore overly large height declarations, and WebKit-heritage browsers will clamp it.
by DrPhish | 2025-08-07 14:29:54+00:00
Thanks, it was a bit of a gamble at the time (lots of dodgy ebay parts), but it paid off.

R1 starts at about 10t/s on an empty context but quickly falls off. I'd say the majority of my tokens are generating around 6t/s.

Some of the other big MoE models can be quite a bit faster.

I'm mostly using QwenCoder 480b at Q8 these days for 9t/s average. I've found I get better real-world results out of it than K2, R1 or GLM4.5.
by whitej125 | 2025-08-07 14:29:56+00:00
That which might be of additional interest... look at how the top 10 of the S&P 500 has changed over the decades[1].

At any point in time the world thinks that those top 10 are unstoppable. In the 90's and early 00's... GE was unstoppable and the executive world was filled with acolytes of Jack Welch. Yet here we are.

Five years ago I think a lot of us saw Apple and Google and Microsoft as unstoppable. But 5-10 years from now I bet you we'll see new logos in the top 10. NVDA is already there. Is Apple going to continue dominance or go the way of Sony? Is the business model of the internet changing such that Google can't react quick enough. Will OpenAI go public (or any foundational model player).

I don't know what the future will be but I'm pretty sure it will be different.

[1] https://www.visualcapitalist.com/ranked-the-largest-sp-500-c...
by jdbernard | 2025-08-07 14:30:10+00:00
I think it is a result of the impersonal "contact us" intake forms companies have all moved to. You have no indication that you aren't just screaming into the wind. There is no personal touch. So you take to social media where your are sure at least someone hears you. It also scratches the justice itch: if the company doesn't pay attention it looks bad in public and you get some vindication for being ignored.

I'm not saying it's a good or bad thing to do, but I understand it.
by atoav | 2025-08-07 14:30:15+00:00
This isn't about videos I guess. I had parties where guests where demanding songs (every DJs dream) that I obviously didn't had on my drive. That gives you three options currently:

1. Tell them to fuck off, which may or may not work in any given context

2. Play the music in the browser and then hop back to Mixxx in time (dangerous)

3. Downloading the song via 'yt-dlp -x --audio-format mp3 --audio-quality 0 <URL>', fixing the questionable metadata (optional) and then loading it into Mixxx (cumbersome)

It would be cool if you could just paste the URL into Mixxx, have it cache a local version, render the waveform, store it in a special temp crate or what and then you can play it. But I guess yt-dlp isn't the most stable dependency...
by troyvit | 2025-08-07 14:30:51+00:00
> The only people "losing out" here are people running SEO-spammish websites that themselves (at this point) are basically hosting LLM-generated answers for me to find.

And anybody who creates original content and wishes -- not just to be paid for that content -- but for people to actually see that content and engage with it. IOW the very people who fed the LLM revolution.
by lm28469 | 2025-08-07 14:30:53+00:00
> We designed — if you can call this "design" — a system where most people are not the literal property of their feudal lords

hm really ? https://simple.wikipedia.org/wiki/Technofeudalism

> and most of them do not need to worry about literally starving to death.

Yes, now the main causes of death are literal sloth and gluttony.

> living longer and healthier lives

Healthier ? 50% of people are basically disabled by the age of 40 because of obesity

You're conflating life expectancy at birth vs life expectancy, don't forget health-span expectancy either. The US life expectancy is going down, health span is going down in most of the west too:

https://www.cnbc.com/2024/10/09/life-spans-are-growing-but-h...

https://www.healthsystemtracker.org/wp-content/uploads/2025/...

Anyways, if your argument is that we should be glad that 70% of people are overweight/obese because people died earlier 300 years ago idk how many people you will convince...
by rectang | 2025-08-07 14:31:22+00:00
I can’t see the WSJ article. None of the mainstream articles I could find discuss Unimatic in any detail, including the Reuters and NYT articles.

I figure that there has to be a forum out there where the nature of the software glitch is the focus, but I couldn’t find anything. If this story is AI generated, then I would very much like to read the sources it’s lifted from.

I did find a 2007 article discussing another Unimatic glitch that caused a stoppage which mentioned that the software dates from 1988:

https://www.aviationpros.com/home/news/10387920/computer-fai...

> The computer system, known as Unimatic, is essential to the airline's operation, providing flight plans for pilots, updates on maintenance information and crew schedules, among other flight information. United jets worldwide cannot take off unless it is operating. The original Unimatic system dates back to at least 1988, but it is updated "all the time," United spokeswoman Robin Urbanski said.
by svara | 2025-08-07 14:31:27+00:00
I went through my ChatGPT history to pick a few examples that I'm both comfortable sharing and that illustrate the use-case well:

> There are some classic supply chain challenges such as the bullwhip effect. How come modern supply chains seem so resilient? Such effects don't really seem to occur anymore, at least not in big volume products.

> When the US used nuclear weapons against Japan, did Japan know what it was? That is, did they understood the possibility in principle of a weapon based on a nuclear chain reaction?

> As of July 2025, equities have shown a remarkable resilience since the great financial crisis. Even COVID was only a temporary issue in equity prices. What are the main macroeconomic reasons behind this strength of equities.

> If I have two consecutive legs of my air trip booked on separate tickets, but it's the same airline (also answer this for same alliance), will they allow me to check my baggage to the final destination across the two tickets?

> what would be the primary naics code for the business with website at [redacted]

I probably wouldn't have bothered to search any of these on Google because it would just have been too tedious.

With the airline one, for example, the goal is to get a number of relevant links directly to various airline's official regulations, which o3 did successfully (along with some IATA regulations).

For something like the first or second, the goal is to surface the names of the relevant people / theories involved, so that you know where to dig if you wish.
by JimDabell | 2025-08-07 14:31:42+00:00
I’m not sure this is targeted correctly. As a general rule, new protocols for the web work best when they are associated with individual URLs, not with the somewhat nebulous concept of a site.

Have you considered something like <script type="text/llm"> or Link: <https://api.example.com/llms/foo>; rel="llm:foo", or just normal content negotiation on individual pages?
by ferguess_k | 2025-08-07 14:32:02+00:00
Both the OS and Word 2003 run smoothly. It's quite a show. I think I might want to keep an old 16GB RAM laptop to run Windows 7, MS Office 2010 and VS 2012. I'll cut off as much Internet as possible and concentrate on my projects.

Edit: Just realized that this is not a VM, just a replicate. No wonder Word 2003 looks weird.