MurphyA/hacker-news huggingface dataset:
by ectospheno | 2025-08-07 13:27:27+00:00
I use hagezi lists via rpz for dns blocking with my own specified first for custom blocks and whitelisting.

Most of my ip blocking is by country or company. I have country, company-block, and company-allow lists in pf that are updated nightly.

I have found that once your dns list is sufficiently robust you rarely trigger an ip block. I have to add a new domain about once a month.
by TechDebtDevin | 2025-08-07 13:27:27+00:00
MCP seems just like a rushed concept that Anthropic shoved out there just so they could own the standard. I've been working with it a lot lately, in Go with mcp-go[0]. Very un-intuitive at first, and I constantly ask myself why I wouldn't just write this in my own way, but admittedly it can be fun.

Something like https://github.com/simonw/llm seems way more intuitive (to me)

[0]: https://github.com/mark3labs/mcp-go
by benreesman | 2025-08-07 13:28:01+00:00
The OpenAPI proposal is actually pretty reasonable in my view. I don't love it, but it's got pretty good tooling now, the semantics are firming up (even AsyncAPI is starting to come together and get used here and there).

I'd prefer a more rigorous approach to integrating random stochastic agents deployed by people who don't care about me into my own data, but at least with OpenAPI/"REST" there's a bunch of infrastructure and know-how on not getting pwned constantly. The LLMs all know how to deal with JSON at this point, they even know how to read and write it based on a spec, it seems like Swagger is as good as anything with those design constraints.

I'm cynical enough about real things that I don't need to invent new things to be cynical about, and I honestly don't know which side of Hanlon's Razor to slice with on the never-ending-unfixable-infinite-pwn-forever future of MCP: maybe they just rushed it out to get market share / mind share. Maybe normalizing criminally negligent security practices was a price someone was willing to pay to have number go up. IDK.

I know MCP needs a re-think.
by 5pl1n73r | 2025-08-07 13:28:03+00:00
I don't know, classifieds still exist. Obviously internet is superior for this, but not everyone can afford internet of any kind, since the bloat scaled with Moore's law. 500KB/s right will give you the same rate of browsing articles as dial up in the 90s. Phones have been becoming obsolete after 2 years. That doesn't necessarily dictate the market but yeah.
Show HN: Feelquency – Mixing calming frequencies with soothing vibrations
by tujuit | 2025-08-07 13:28:10+00:00
I love the idea of white noise or frequencies for relaxation. Personally many times been going to sleep with rain sounds.

This is a bit of an augmented concept. Adding vibration patters that "match" the audio frequencies –as much as possible– makes it a very different but pleasant exeperience.

I'd love to see what you think about it.
by mbreese | 2025-08-07 13:28:12+00:00
I’d also add the language to the mix. I know you can write good code with TS/JS, but the dependency surface is just so large, I’m not comfortable with security code written in it yet (maybe at some point). Add that the repositories were created in the past week, so we can’t see the actual dev practice (was it all vibe coded? What bugs were there?).

I hadn’t considered your second point, but even the authors GH account has an AI picture. I have no idea who this person is or what online/HN reputation they have.
by lproven | 2025-08-07 13:28:14+00:00
> Great Slate fundraiser Thomas Ptacek

Who is of course a frequent HN poster, one of the very top rated on the site.

https://news.ycombinator.com/user?id=tptacek

I remain strongly suspicious that this column of his is in fact a long and convoluted troll:

https://fly.io/blog/youre-all-nuts/

That got about 2.5K upvotes here:

https://news.ycombinator.com/item?id=44163063
by i_dont_know_ | 2025-08-07 13:28:56+00:00
Thanks for the perspective. For me I think it's a matter of degree (I guess I was a bit "one or the other" when I wrote it).

These things are also concerns and definitely shouldn't be dismissed entirely (especially things like AI telling you when it's unsure, or, the worse cases of propaganda), but I'm worried about the other stuff I mention being defined away entirely, the same way I think it has been with privacy. Tons more to say on the difference between "how you use" vs "how you share" but good perspective, and interesting that you see the emphasis differently in your experiences.
by ai-christianson | 2025-08-07 13:28:59+00:00
I've been building agents for a bit (RA.Aid OSS coding agent, now Gobii web browsing agents).

The main problem with MCP is that it just makes tools available for the agent to use. We get the best performance when there's a small set of tools and we actively prompt the agent on the best way to use the tools.

Simply making more tools available can give the agent more capabilities, but it can easily trash performance.
by jerf | 2025-08-07 13:29:17+00:00
"I honestly thought it was just an experiment that got abandoned and never expected it to actually become a real product, similar to how GH Copilot Spaces was an experiment and turned into Copilot agent."

My guess is that this is a play for the future. They know that current-day AIs can't really handle this in general... but if you wait for the AI that can and then try to implement this functionality you might get scooped. Why not implement it and wait for the AIs to catch up, is probably what they are thinking.

I'm skeptical LLMs can ever achieve this no matter how much we pour into them, but I don't expect LLMs to be the last word in AI either.
by hshdhdhj4444 | 2025-08-07 13:29:22+00:00
How does the standup help ensure nothing is missed? Everything is raised actively by individuals. They could have done the same thing through async modes of communication.

Compare this to a weekly progress update meeting that will usually have your project tracker, or Kanban board, or whatever up there so you can actually identify things that may have dropped off everyone’s radars.
by em-bee | 2025-08-07 13:29:34+00:00
TIL from this talk: https://youtu.be/ajfb5LSbQVM that all the control keys that we still use today have a corresponding encoding in ASCII: https://en.wikipedia.org/wiki/Control_character#In_ASCII and that the control-keys were designed to emit those characters. i kind of implicitly knew that, but never made the direct connection, especially that it was ASCII that defined which control key would be assigned to which control character.
by thecupisblue | 2025-08-07 13:29:40+00:00
> GenAI in its current form will never be reliable enough to do so-called "Agentic" tasks in everyday lives

No, but GenAI in it's current form is insanely useful and is already shifting the productivity gears into a higher level. Even without 100% reliable "agentic" task execution and AGI, this is already some next level stuff, especially for non-technical people.
by newsclues | 2025-08-07 13:29:55+00:00
So do companies.

But education receives a lot of funding from the government.

I think academia should build open source technology (that people can commercialize on their own with the expertise).

Higher education doesn’t need to have massive endowments of real estate and patent portfolio to further educ… administration salaries and vanity building projects.

Academia can serve the world with technology and educated minds.
by randomcarbloke | 2025-08-07 13:30:21+00:00
>The more someone’s diet falls on the ultra-processed end of the spectrum and the less they eat of unprocessed foods, the higher the rate of health problems.

False, based publicly available data, even data pushed by the UPF cultists there is no correlation between UPF consumption and 'Life Expectancy at Birth', 'CVD Deaths per 100K', 'Heart Disease Deaths per 100K', 'Cancer Incidence Rate per 100K', 'Stroke deaths per 100k', '%age Population with High Blood Pressure ISCED standard', 'Mean Systolic Blood Pressure (mmHG)', or shockingly 'BMI'.

In fact, in some cases there is an anti correlation such as life expectancy, now it would be absurd to suggest UPFs increase longevity of course but the reality is richer countries eat more processed foods and richer countries live longer.
by jrockway | 2025-08-07 13:30:40+00:00
I'm not sure it's the standards committee's fault that your employer hires people that don't know how to do their job.

I think it's reasonable to have attestation for the corporate use case. If they're buying security devices from a certain vendor, it's reasonable for their server to check that the person pretending to be you at the other end is using one of those devices. It's an extra bit of confidence that you're actually you.
by worldsayshi | 2025-08-07 13:31:07+00:00
It seems that a deeper cause of this is lack of trust in long term solutions and the ability to come up with a plan that beat the short term knee jerk solutions - which could make the problems worse.

If we can somehow win back trust in our collective ability to democratically solve problems... that should solve the problem.

I think that involves some creative solutions to collective decision making.
by Aurornis | 2025-08-07 13:32:20+00:00
This is a bad characterization of the processed food scale which suggests you haven’t actually read any of the research or the processed food criteria, you’re just assuming what it means.

Equating the research to RFK Jr is a strange attack, given that this is actual research that you’re dismissing and replacing with your own idea that you can sense if your food is healthy by some arbitrary criteria you came up with.

It’s also ironic that you dismiss it as a dumbing down and then propose your own extremely reductive criteria as a replacement which completely misses the issues being studied. It’s possible to have a eucaloric diet and eat enough fiber while also having significant negative health effects ranging from glycemic control issues to rapidly progressing cardiovascular disease.
by seanmcdirmid | 2025-08-07 13:32:39+00:00
Trump’s approval ratings is in the gutter like it was during his last term. He doesn’t reach out and make new fans, he just loses the ones he has. JD Vance is even less popular than trump, anyone who thinks their electoral success occurs even with extra gerrymandering for the midterms is probably in for a huge surprise.

Trump didn’t initiate sweeping tariffs in his last term, and they weren’t wildly unpopular. Trump is accumulating enough bad will at the moment to make it very politically easy for someone to wash away everything if they win the 2028 election.
by stasher-dev | 2025-08-07 13:32:47+00:00
When you run:

npx enstash "my secret"

Stasher performs everything locally:

Generates a random 256-bit encryption key

Encrypts your secret using AES-256-GCM

Sends only:

the ciphertext

the IV (initialization vector)

the auth tag

a randomly generated UUID

The encryption key is never sent to the server. It never leaves your machine.

You are then shown a single string:

uuid:base64key

The uuid points to the encrypted stash on the server

The base64key is the encryption key you just generated

Only the person who has both parts can decrypt the secret

How You Share the Secret

You send the full uuid:base64key token to your recipient — over any channel you like slack or whatever.

When they run:

npx destash "uuid:base64key" on the token

Stasher:

Fetches the encrypted stash using the uuid

Deletes it immediately (burn-after-read)

Decrypts it locally using the base64key

Shows the secret

The server never sees the key. Not during upload or during retrieval.
by PaulKeeble | 2025-08-07 13:32:54+00:00
I really dislike how passkeys have generally been used. Once KeepassXC got proper support of them and in the browser plugin its been a bit more sensible. KeepassXC means I can transfer them between devices and its protected the same way my passwords are so no additional pins and logins I don't want, it solves a lot of the issues I have around them. Now its just a long random password.

I wouldn't have minded if we moved to a scheme like SSH logins with public and private keys I own either, that I can store securely but load as I please and again would work well with a local password manager.
by nyeah | 2025-08-07 13:32:55+00:00
Plato is being annoying, and not for the first time. Sure, 7! has a lot of factors. But one person dies and you've got 5039. That's prime[1], so I guess your society breaks down? [1] https://prime-numbers.fandom.com/wiki/5,039#:~:text=5%2C039%...
by hshdhdhj4444 | 2025-08-07 13:33:01+00:00
This comment explains why passkeys are nothing more than a way to shift responsibility.

If you lose all your data and your entire life because you lost your phone, no company is responsible.

But if you get hacked they are.

So they’ve come up with a solution that can destroy your entire life, but reduces the risk of corporate liability.

But yeah, keep carrying water for the entities that won’t come up with actual user focused solutions because it may cost them 0.01% of their profits.
by cmeacham98 | 2025-08-07 13:33:20+00:00
A "focused identity" with no links to other identities is anonymous by definition.

More importantly, this project is not "zero trust" and calling it such is borderline deceptive.

I can verify the artifacts you're shipping contain the code in the repo (or I could just clone the repo myself), but I cannot automatically verify that your code is non-malicious and free of bugs. That is what I am trusting when using your software, and I have serious doubts about the "free of bugs" part for AI generated software.
by phkahler | 2025-08-07 13:33:46+00:00
>> That's unnecessarily harsh. Patent pools exist to promote collaboration in a world with aggressive IP legislation, they are an answer to a specific environment and they incentivize participants to share their IP at a reasonable price to third parties.

You can say that, but this discussion is in response to the guy who started MPEG and later shut it down. I don't think he'd say its harsh.
by pkilgore | 2025-08-07 13:34:17+00:00
You are.

There is no password in these new flows. They just ask for email or phone and send you a code.

Bad website only needs to ask for an email. It logs into Good with a bot using that email. Good sends you the code. You put the code in bad. Bad finishes the login with that code.

At no point in time is a password involved in these new flows. It's all email/txt + code.

Many sites work like this now. Resy comes to mind.
by cnst | 2025-08-07 13:34:20+00:00
His argument is blatantly invalid.

He first points out that a royalty-free format was actually better than the patent-pending alternative that he was responsible for pushing.

In the end, he concludes that the that the progress of video compression would stop if developers can't make money from patents, providing a comparison table on codec improvements that conveniently omits the aforementioned royalty-free code being better than the commercial alternatives pushed by his group.

Besides the above fallacy, the article is simply full of boasting about his own self-importance and religious connotations.
by ducktective | 2025-08-07 13:34:36+00:00
Very simple question:

How do people trust the output of LLMs? In the fields I know about, sometimes the answers are impressive, sometimes totally wrong (hallucinations). When the answer is correct, I always feel like I could have simply googled the issue and some variation of the answer lies deep in some pages of some forum or stack exchange or reddit.

However, in the fields I'm not familiar with, I'm clueless how much I can trust the answer.
by mvieira38 | 2025-08-07 13:34:54+00:00
In econometrical terms it would be "double causality", as it forms a vicious cycle. Using your phone to self-soothe leads to not developing real hobbies, which leads to more isolation, which leads to more phone usage.

Say you decide you're now a chess person. Instead of doomscrolling before bed you find relaxation in the meditative study of chess games for an hour a day before going to bed and now you use your phone only as an alarm. You join your local chess club to play IRL during weekends and attend some classes too. What were the effects? Well, there are the proven long-term cognitive benefits of learning and practicing chess, there's the immediate cognitive and emotional benefit of a larger social circle and a community, and medium term you'll feel good about yourself for achieving milestones (getting to 1000 ELO, winning the weekly tournament, etc.)

None of that would have happened if you had stayed on your phone. You probably already invest just as much time on it as you would in chess in this scenario, but it has no ROI, it is designed to suck you in.
by DrScientist | 2025-08-07 13:34:56+00:00
That assumes there is a fixed amount of stuff todo/needed.

Sometimes making something cheaper to make, just means you make more with the same people as demand is elastic and price driven.

The other question is if you need less people ( less say for farming ) is there anything else these people can do ( ie work in factories ) - that depends on whether there is fundamentally enough tasks to go around.

If you look globally it's quite clear that even the basics - like clean water, enough food and decent housing hasn't been sorted. ie there is plenty of work still to do done.
by const_cast | 2025-08-07 13:35:07+00:00
Password managers are both significantly simpler to use than just passwords and more secure.

Passwords have always been bad. The problem is that users can't remember them. So they rotate, like, 3 passwords.

Which means if fuckyou.com is breached then your bank account will be drained. Great.

On top of that, the three passwords they choose are usually super easy to guess or brute force.

With a password manager, users only need to remember one password, which means they can make said password not stupid. You can automatically log in too with your new super secure passwords you never need to see.

Its the perfect piece of software. Faster, easier, more secure, with less mental load.
by JKCalhoun | 2025-08-07 13:35:21+00:00
Maybe. It's possible too it would take something away. As it is we're left to wonder and we would of course lose that.

As I recall, Feynman made a comment in one of his autobiographies about an argument he had had with an artist friend about the beauty of a rose. His friend was frustrated with Feynman's reductionist approach to everything including the rose. Paraphrasing Feynman: "How does knowing more about how a rose works take away from its beauty?"

I wonder if Feynman understood that naivety is a thing you can lose or if he understood that but did not see any value in naivety, mystery.

Perhaps a counterpoint to Feynman: "When I Heard the Learned Astronomer".
by stephencanon | 2025-08-07 13:35:29+00:00
Raising children involves a whole lot of simple constraints that you gradually relax.

“Don’t touch the knife” becomes “You can use _this_ knife, if an adult is watching,” which becomes “You can use these knives but you have to be careful, tell me what that means” and then “you have free run of the knife drawer, the bandages are over there.” But there’s careful supervision at each step and you want to see that they’re ready before moving up. I haven’t seen any evidence of that at all in LLM training—it seems to be more akin to handing each toddler every book ever written about knives and a blade and waiting to see what happens.
by dougbright | 2025-08-07 13:35:32+00:00
The question I’m wrestling with is will anybody care about MCP? I’m working on my own MCP proxy to manage security, auditing, and server management and the more I think deeply about the actual use cases the more I wonder if I’m wasting my time. Can anyone think of a world where MCP is relevant if generic chatbots (ChatGPT, Claude Desktop) don’t become the primary human-AI interface? If LLMs are still wrapped in application wrappers, isn’t ̶a̶n̶ ̶a̶p̶p̶r̶o̶a̶c̶h̶ ̶l̶i̶k̶e̶ ̶L̶a̶n̶g̶C̶h̶a̶i̶n̶ a more traditional agentic approach going to make more sense?
by seanmcdirmid | 2025-08-07 13:35:56+00:00
Housing thats just 10-25% cheaper isn’t going to attract the chronic homeless, they can’t make housing work in LCOLs which is why they are hanging out in HCOLs un the first place. Also, you might be doing better for the middle class, but even in the working poor isn’t going to be helped much by that.

Anyways, none if what you said has anything to do with the visible homeless who have many other issues to work through before they can even think about paying even a little rent.
by iancmceachern | 2025-08-07 13:36:04+00:00
There are close to 10 cafes within 2 blocks of here. They all charge more than $5 for a cup, sell many other items like food, and are doing very well.

The way to handle the problem you describe is to be thoughtful about the prices you charge.

If it costs you X amount to be profitable, you should be charging Y for your coffee. Not coming up with a cattle prod to sell 2 more cups an hour.
by randomcarbloke | 2025-08-07 13:36:22+00:00
no it is an identical plot on the graph, not an overstatement at all.

The standard of living for the median worker has improved significantly in forty years let alone two hundred, lifestyle inflation is definitely rapid as you would expect with progress, wage growth has outpaced inflation for everyone but public sector workers.

Bad as things may seem now, we are all richer than ever before.
by lijok | 2025-08-07 13:36:24+00:00
Your style of thinking is exactly why linux never became a leader in desktop os's. Why we're still dealing with the most ridiculous tech debt and complexity in OSS tooling to date. You're obsessed with fake problems that have no bearing on real people. When grandma does indeed loose all her money because some prick phished her password away, I would love to watch you explain how that's actually better than BigTech taking away user freedoms.
by causal | 2025-08-07 13:36:35+00:00
I still need to try them, but I'm having a hard time envisioning async agents being nearly as useful to me as something local like Claude Code because of how often I need to intervene and ensure it is working correctly.

Won't the loop be pretty long-tail if you're using async agents? Like don't you have to pull the code, then go through a whole build/run/test cycle? Seems really tedious vs live-coding locally where I have a hot environment running and can immediately see if the agent goes off the rails.
by Aurornis | 2025-08-07 13:36:35+00:00
This is completely false and easily refuted. I don’t understand how you’re calling the processed foods research a “cult” while also making sweeping claims without any sources.

https://www.bmj.com/content/384/bmj-2023-077310

> Overall, direct associations were found between exposure to ultra-processed foods and 32 (71%) health parameters spanning mortality, cancer, and mental, respiratory, cardiovascular, gastrointestinal, and metabolic health outcomes. Based on the pre-specified evidence classification criteria, convincing evidence (class I) supported direct associations between greater ultra-processed food exposure and higher risks of incident cardiovascular disease related mortality (risk ratio 1.50, 95% confidence interval 1.37 to 1.63; GRADE=very low) and type 2 diabetes (dose-response risk ratio 1.12, 1.11 to 1.13; moderate), as well as higher risks of prevalent anxiety outcomes (odds ratio 1.48, 1.37 to 1.59; low) and combined common mental disorder outcomes (odds ratio 1.53, 1.43 to 1.63; low). Highly suggestive (class II) evidence indicated that greater exposure to ultra-processed foods was directly associated with higher risks of incident all cause mortality (risk ratio 1.21, 1.15 to 1.27; low), heart disease related mortality (hazard ratio 1.66, 1.51 to 1.84; low), type 2 diabetes (odds ratio 1.40, 1.23 to 1.59; very low), and depressive outcomes (hazard ratio 1.22, 1.16 to 1.28; low), together with higher risks of prevalent adverse sleep related outcomes (odds ratio 1.41, 1.24 to 1.61; low), wheezing (risk ratio 1.40, 1.27 to 1.55; low), and obesity (odds ratio 1.55, 1.36 to 1.77; low).

I’m amazing how anti-science this conversation always becomes on HN, with those who don’t understand the research claiming to have the scientific upper hand.