MurphyA/hacker-news huggingface dataset:
by jchw | 2025-08-08 13:46:45+00:00
Consider a project like Kubernetes. Find a dependency whose domain name has lapsed, or might soon. Snipe it, replicate the original VCS, add a new malicious version under a new tag. Wait for someone to go get -u it.

This is pretty bad even today: If it goes unnoticed, it could lead to compromised binaries being released. However, it underscores design decisions related to the module system that helps to reduce the impact:

- Use of MVS means that even without a sum file, you still won't automatically download malware published in new versions.

- Use of a centralized proxy and sumdb by most of the ecosystem greatly reduces the likelihood that an attacker will attempt to change an existing version as it likely won't work and might result in detection instead.

- Lack of code execution in dependency fetching substantially reduces the odds of being able to compromise a developer machine. It doesn't make the problem a non-issue, but the prognosis is a ton better.

In NPM, if you don't have a lockfile, the version constraints will be resolved as you install dependencies. These version constraints are not necessarily deterministic, and installation can execute arbitrary code as the user. This is a pretty bad combination but there is a bit of relief because at least malware can be pulled from NPM when it is discovered... Which doesn't solve everything, but it's a lot better than nothing.

Anyway, that's why I don't consider these topics to be fully orthogonal. They do have some interplay.
by anonzzzies | 2025-08-08 13:47:33+00:00
I pickle, ferment and sauce a lot of things. Then I look for things that can be made in very large quantities and then preserved frozen/cooled (a lot of times just in the cellar). A lot of these things are from Asia and are great and very cheap and I'm love them for taste as well; curry's (I make 10 liters at a time; from scratch, very very cheap except my time but I like cooking), auntie dumplings (prep + freeze; just watch tv while making 100s of them) etc. Lovely food and cheaper than most things.
by neofytos | 2025-08-08 13:48:02+00:00
I hear you, though I’m less focused on the choice of UI libraries and more on how little control we have over how prompts are routed internally.

Sometimes I want a model that reasons deeply, other times I want one that is more creative. Right now, it feels like gpt-5 forces everything through the same pipeline, even when a different mode would be better suited to the task.
by aeblyve | 2025-08-08 13:48:18+00:00
I would love to learn more about the unit economics of groceries. How is it that a small grocery store can sometimes provide things (much) more cheaply than a megacorporation? [0]

If the latter was functioning well in a competitive market, I would expect their play to be on lower margins but higher volume.

[0] Mostly I'm referring to offal TBF, which I think most firms are happy to make any money on at all.
by sensanaty | 2025-08-08 13:48:43+00:00
It's kinda crazy to witness, you can see in the main GPT-5 release thread that there are people excusing things like the bot being blatantly wrong about Bernoulli's Principle in regards to airplane flight. I wish I could find it again but it's thousands of comments, one of the comments is literally "It doesn't matter that it's wrong, it's still impressive". Keep in mind we're discussing a situation where a student asks the AI about how planes fly! It's literally teaching people a disproven myth!
by sergioisidoro | 2025-08-08 13:49:19+00:00
I really like electric approach and it has been on my radar for a long time, because it just leaves the writing complexity to you and the API.

Most of the solutions with 2 way sync I see work great in simple rest and hobby "Todo app" projects. Start adding permissions and evolving business logic, migrations, growing product and such, and I can't see how they can hold up for very long.

Electric gives you the sync for reads with their "views", but all writes still happen normally through your existing api / rest / rpc. That also makes it a really nice tool to adopt in existing projects.
by Cthulhu_ | 2025-08-08 13:49:32+00:00
> Right now GPT-5, Claude Opus, Grok 4, Gemini 2.5 Pro all seem quite good across the board (ie they can all basically solve moderately challenging math and coding problems).

I wonder if that's because they have a lot of overlap in learning sets, algorithms used, but more importantly, whether they use the same benchmarks and optimize for them.

As the saying goes, once a metric (or benchmark score in this case) becomes a target, it ceases to be a valuable metric.
by em500 | 2025-08-08 13:49:36+00:00
How much detail do you need? High level expenditure breakdowns are here: https://www.government.se/government-of-sweden/ministry-of-f... and https://www.government.se/contentassets/5dc8d78159ee495fb5f3....

You can probably find more detailed breakdowns if you're really interested. But overall, most expenditures are probably in the categories healthcare, transfers to lower-incomes and education, like in most other European countries, and you probably won't find anything nefarious by looking into more detailed splits.
by emccue | 2025-08-08 13:50:00+00:00
I asked it to make a drawing of the US with every state numbered from biggest to smallest with 1 being the largest.

Maine was #89 (That is not a typo.) and Oregon was #1.

OpenAI as a company simply cannot exist without a constant influx of investor money. Burning money on every request is not a viable business model. Companies built on OpenAI/Anthropic are similarly deeply unprofitable businesses.

OpenAI needs to convert to a for-profit to get any more of the funding that Softbank promised (that its also unclear how Softbank itself would raise) or to get significant cash from anyone else. Microsoft can block this and probably will.

It all reminds me of that Paddy's Dollars bit from it's always sunny.

"We have no money and no inventory... there's still something we can do... that's still a business somehow..."
by vidarh | 2025-08-08 13:50:18+00:00
I think the big deal with the UK was that Commodore UK went their own way and really doubled down on the game bundle market, which was a big part of how they survived the Commodore International bankruptcy (for a bit) and even attempted to arrange a buyout of their parent company.

Commodore did great in terms of sales in quite a few European countries, but their subsidiaries in those other countries didn't do as well as Commodore UK.

The other exception was Commodore B.V. in the Netherlands that also survived the bankruptcy and stayed afloat selling old stock until early 1995 (Commodore UK stayed afloat until August '95, so it's not like they survived very much longer).
by sofixa | 2025-08-08 13:50:22+00:00
> Because building local first with web technologies is like infinity harder than building local first with native app toolkits.

You just have to write one for every client, no big deal, right? Just 2-5 (depending on if you have mobile clients and if you decide to support Linux too) times the effort.

You even say it yourself, you'll have to use Apple's sync and data solutions, and figure it out for Windows, Android and maybe Linux. Should be easy to sync data between the different storage and sync options...

Oh, and you have to figure out how to build, sign and update for all OSes too. Pay the Apple fee, the Microsoft whatever nonsense to not get your software flagged as malware on installation. It's around a million times easier to develop and deploy a web application, and that's why most developers and companies are defaulting to that, unless they have very good reasons.
by noitpmeder | 2025-08-08 13:51:14+00:00
Sure, but the alternative is implicitly trusting the conclusions and interpretations the govt agency, who are (almost assuredly) humans with biases and not impartial robots.

It's a lot harder to attack general best practice statistic collection than it is to throw shade at an editorial. (not that certain administrations have issues attacking best practice science)

Issue also arise "easily" when the people charged with producing editorials are political appointees who are easy targets for subsequent administrations looking to shift blame. (seems we're at this stage now)
by vbezhenar | 2025-08-08 13:51:14+00:00
Powerful permissions are needed for powerful apps.

I don't know about this particular issue, but for example, KiCAD has multiple issues with wayland being overly protective: [0]. For example KiCAD needs the ability to move cursor to provide good user experience. KiCAD needs the ability to move and place windows wherever it likes. KiCAD needs to control focus. KiCAD needs to prevent OpenGL throttling on inactive windows. These issues led KiCAD developers to reduce support for Wayland configurations to a bare minimum.

So it's a delicate balance for operating systems to both allow powerful apps to implement complicated UI and to prevent badly written apps to do inconvenient things.

[0]: https://www.kicad.org/blog/2025/06/KiCad-and-Wayland-Support...
by anonzzzies | 2025-08-08 13:51:22+00:00
For sure, but not for that reason; there is currently no one with a plan how to go from current (LLMs) to a better model. It's some 'more focused training' 'better prompting' 'agentic' 'smarter lookups' 'better tooling'. But fundamentally, this model is simply shagged out and it'll get a little better with the above, but the jump everyone is waiting for cannot happen without a new model invention.
by rocketpastsix | 2025-08-08 13:51:35+00:00
The cost of living has significantly outpaced salary growth. And given how quick companies are to do layoffs, even when things are going well; makes people a little less confident in a job switch. And that doesn't even account for the current state of the market which is brutal. I saw a thing the other day that said people can't even really budget for groceries because the costs are changing drastically week to week. You arent going to get a new job and feel the effects of (hopefully) the larger paycheck as quick as prices can and will change currently.
by sjsdaiuasgdia | 2025-08-08 13:51:58+00:00
The P25 audio is digital, so it degrades worse than analog audio when signal quality is bad. You more quickly get to a point where it's not understandable at all, particularly if it's the signal coming from a handheld radio that's some distance away from the receiver.

The analog repeater is likely getting a high quality feed from the digital system, and then that's being broadcast at decent power from a tall antenna. It's starting with the best audio the system has to offer, has advantages in how it's broadcast, and degrades more gracefully.

I capture a lot of the P25 traffic in my area and there are times I can understand the dispatcher side of a conversation fine but the other end is too far away / too weak a signal and is unintelligible. The dispatcher's signal is coming from a fixed tower transmitting at higher power than a portable radio can manage.
by Balgair | 2025-08-08 13:52:07+00:00
Yes it feels very 'male' centric in a way. Like with clothing, the various stitches that you need to make textiles, each individual stitch method is it's own technology. Like, every knot that gets invented, that's a technology. Knots and stitches and warp and weft, they can only come out of a human mind, they are inventions. But trying to find out the dates there, that's nearly impossible if the data were recorded even. And then most of those textile inventions were done by women who are then again historical dark matter even in the best circumstances.

Still, great project and I'd have loved to see it crowdsourced like wikipedia.
by TuringNYC | 2025-08-08 13:52:08+00:00
>> Protip: look for an Asian market in your area for food.

Second this! Especially for things like produce and herbs. You literally get 10-20x the cilantro, etc at an Asian market for the same price (I think they are loss leaders.) And oh the aroma....you dont know fresh herbs until you step into a Patel Brothers and get truly fresh cilantro.

We've gotten to a point where we know what to get where and shop accordingly.
by david_allison | 2025-08-08 13:52:23+00:00
> Factoring semiprimes of this size is computationally intensive, which is why they form the basis of RSA encryption security.

Not if it's divisible by 2.

from sympy import isprime num = 29927402397991286489627837734179186385188296382227646249397073654051914085318503794952624411151858464246403027505634195232053330357484129331920822220662818816547063469215394303721576869467659309978113411955550111870966028627418736664 print(num//2) # 14963701198995643244813918867089593192594148191113823124698536827025957042659251897476312205575929232123201513752817097616026665178742064665960411110331409408273531734607697151860788434733829654989056705977775055935483014313709368332 print(isprime(num//2)) # False
by pc86 | 2025-08-08 13:53:04+00:00
I've actually changed my mind on this, if you're working in a project that's doesn't have a ton of early-lifecycle v0 packages. If there is a lot of quick churn in your dependencies, yeah you want to devote dedicated engineering resources to keeping these up-to-date and regression testing things.

If everything is pretty stable, it's nice to have each developer share the work with keeping things up-to-date and functional. Broad automated test coverage makes this a lot easier of course.
by kevingadd | 2025-08-08 13:53:10+00:00
Part of the complexity here is the temporary object allocation and the need to read properties out of it as you iterate. This is one of the things I tried to push back on but the spec people were in a hard spot, since JS doesn't have native multiple return values. I think in ideal circumstances the allocation can be optimized out by doing store-to-load forwarding on the properties, but in cases like the post here since inlining can't happen, no such luck. :(
by M95D | 2025-08-08 13:53:42+00:00
That's only because an electric car with an ICE generator trailer is in legal limbo.

PS: It must be a monstrosity of a generator, min. 50 KW, not the toys that some companies showed as investor bait. [1]

[1] https://gajitz.com/little-generator-trailer-lets-electric-ca...
by kmmlng | 2025-08-08 13:53:49+00:00
I would say GPT itself is less an event and more the culmination of decades of research and development in algorithms, hardware, and software. Of course, to some degree, this is true for any novel development. In this case, the convergence of development in GPUs, software to utilize them well while being able to work in very high levels of abstractions, and algorithms that can scale is something I'm not sure we will see again so quickly. All this preexisting research is kind of a resource that will be completely exploited at some point. And then the only thing that can drive you forward are truly novel ideas. Reasoning models were a fairly obvious next step too as the concepts of System 1 and 2 have been around for a while.

You are completely right that the compute and funding right now are unprecedented. I don't feel confident making any predictions.
by stormfather | 2025-08-08 13:54:02+00:00
Just go to Perplexity or something like that, its well trodden ground. And essentially, what you're doing is discretizing the relevant differential equations and getting that to run in a 2D or 3D cellular automaton.

I'll give you a simple example. For diffusion of heat between 2 points, the rate of change (first derivative) is proportional to the difference in temp between them. So you make an update rule for points on a grid that says "calc the average difference of a cell's temp with that of its neighbors, multiply by some constant, and that is the amount to update this cell at this time. Run that for every cell in parallel, many times." Then you tack on a visualization and you can watch the heat diffuse. A fun example would be the cooling of the proto-Earth. You can watch the crust form.

Heat diffusion is a good starter problem. So is gravitational interaction.
by phkahler | 2025-08-08 13:54:05+00:00
It would be cool to have a USB C connector that goes through the PCB so total height is that of the connector and not board+connector.

Like this one:

https://www.adafruit.com/product/5180?srsltid=AfmBOopEIapZEq...

But with supports along the sides that could solder one the top and/or bottom of the PCB. You'd have a notch cut out for the connector.
by AlexandrB | 2025-08-08 13:54:20+00:00
Only if you consider Sam Altman not serious: https://www.tomsguide.com/ai/chatgpt/sam-altman-claims-agi-i...

I find this pattern in tech hype really frustrating. Someone in a leadership role in a major tech company/VC promises something outrageous. Time passes and the promise never materializes. People then retcon the idea that "everybody knew that wasn't going to happen". Well either "everybody" doesn't include Elon Musk[1], Sam Altman, or Marc Andreessen[2] or these people are liars. No one seems to be held to their track record of being right or wrong, instead people just latch on to the next outrageous promise as if the previous one was fulfilled.

[1] https://electrek.co/2025/03/18/elon-musk-biggest-lie-tesla-v...

[2] https://dailyhodl.com/2022/06/01/billionaire-and-tech-pionee...
by KaiserPro | 2025-08-08 13:54:29+00:00
The mechanics of changing ownership under umbrella corporations is somewhat of a mystery to me, I have seen it done as part of a complex buyout of a small multinational.

However that was UK/US and some EU but non-german subsidiaries.

I suspect you are right about movement being considered a sale. My assertion was imprecise as I suspect it requires an upfront company layout, rather than post-hock.
by nzach | 2025-08-08 13:55:41+00:00
I agree with the sentiment, but I don't think the example given (creating SQL queries) is a good representation of this problem.

That's because if you know a little bit of SQL and know how to validate the answer LLMs give you this becomes a non-issue.

A better example would be an ambiguous prompt where the LLM can either use an array or a map to solve your problem so it chooses an array. But down the road you need a feature where direct access is what you need, but your code is already using arrays. In this situation what tends to happen is the LLMs ends up making some hack on top of your arrays to create this new feature and the code gets real bad.

By not understanding the difference between these 2 data structures you aren't able to specify what needs to be done and the LLM ends up implementing your feature in an additive way. And when you add enough features in this way things get messy.

What is still not clear to me is what is the proper "abstraction layer" we need to use to learn things in this new world where LLMs are available.
by mminer237 | 2025-08-08 13:56:17+00:00
It's so much worse on Windows 11 too. There is a noticeable lag in opening the picker, and—unlike 10 where you could immediately start typing to search—on Windows 11 if you start typing before it's fully open, it just types your search text in the focused window and never opens the emoji picker. It just totally cancels it if you type too fast.
by dzaima | 2025-08-08 13:56:21+00:00
Doesn't this just replace the "slow if next() is complex" with "slow if the body of the loop is complex"? A complex iterator does have the problem of having the allocation for its result, not being able to directly branch on the `done` computation, but the usage body could also have drawbacks from not being inlined with its scope (though of course if you know that next() is sufficiently complex, there's largely no downside to at least try the other way around).

Also, depending on the VM implementation, it might run into issues if you use the same iterator-function with many different callbacks, if there's a limit to how many different values for the callback argument it specializes; don't know what exactly the limits or effects are, but in some simple testing, both Node/V8 and FF/SpiderMonkey slow down on a callback-based-iterator bench if before the main bench the "iterator" was used with multiple different callbacks (whereas the inverse of a single loop iterating through many different iterator types is probably quite a bit more rare).
by jvanderbot | 2025-08-08 13:56:28+00:00
I'm a fairly well to do/employable person, and so is my wife. Together, we should be all kinds of financially stable.

But the two largest costs to our finances are ridiculously outsized: Child Care and Health Care. We pay more for our children and health insurance / care, than our house + cars (+student loans) combined.

These seem like two areas where intervention is not only possible but likely to help just about everyone. And, if those are solved, I wonder if this "fertility crisis" I keep hearing about goes away too.
by xnorswap | 2025-08-08 13:56:41+00:00
The trick isn't to convince, it's to just do.

How I approached it for an org with 300 projects and 10k+ failures after adding the analyzer.

1. Add .editorconfig and analyzer anyway

2. Ignore all the failing analyzer rules in .editorconfig

That's your baseline. Even if you have to ignore 80% of rules, that's still 20% of rules now being enforced going forward, which puts a stake in the ground.

Even if the .editorconfig doesn't enforce much yet, it allows incremental progress.

Crucially, your build still passes, it can get through code review, and it doesn't need to change a huge amount of existing code, so you won't cause massive merge issues or git-blame headaches.

3. Over time, take a rule from the ignored list, clean up the code base to meet that rule, then un-ignore.

How often you do such "weeding", and whether you can get any help with it, is up to you, but it's no longer a blocker, it's not on any critical path, it's just an easy way to pay down some technical debt.

Eventually you might be able to convince your team of the value. When they have fewer merge conflicts because there's fewer "random" whitespace changes. When they save time and get to address and fix a problem in private rather than getting to PR, etc.

Generally it's easier to ask forgiveness than permission. But you've got to also minimise the disruption when you introduce tooling. Make it easy for teammates to pick up the tooling, not a problem they now have to deal with.
by noitpmeder | 2025-08-08 13:57:00+00:00
Yeah we live in a crazy world. Honestly the fact that they don't trust it probably lends more credence toward their results -- it's extremely unfortunate that many of these agencies/systems/... live under the executive branch's whims and not as part of congressionally-mandated programs where it'd be more difficult to meddle.

The current 2-party system with fixed terms almost lends itself to promoting the political appointee system where entire department head counts turn over after a change in ruling party. If you're a "career" politician it's a no-brainer to fill these positions wholesale with people who are favorable to your world view, or donated to your administration, or spend lots of money at your hotel chain, ...
Show HN: I completed mobile fax app in 60 hours
by tntpreneur | 2025-08-08 13:57:12+00:00
I built a mobile fax app from scratch and submitted it to the App Store in just 60 hours. It includes: - A React Native mobile app - Backend - Landing page - App Store application

My app was approved on the first try.

Send Fax Pro: https://apps.apple.com/tr/app/send-fax-pro-secure-faxing/id6...

Landing page: https://sendfax.pro

Also I added fax testing page at https://sendfax.pro/receive-online-free-fax

Thanks in advance for your feedback!
by siliconc0w | 2025-08-08 13:57:29+00:00
Our health system is so amazingly bad. Even if you have insurance, you roll the dice getting even basic care.

Very easy to end up with hundreds or thousands of dollars in bills if your provider codes something wrong or your insurance denies payment.

Much less an actual medical issue that requires repeated trips to a specialist, an expensive medication (even generic), or hospitalizations.