MurphyA/hacker-news huggingface dataset:
by madamelic | 2025-08-19 19:59:15+00:00
Yes, that is really the problem. The landing page is just a smorgasbord of things to rile you up, distract you, draw you in, etc.

I've tried filtering it, I've tried unsubscribing to all subreddits save for a few, nothing worked.

Part of it is likely my own personality (I get bored and go on for "just a minute") but also, Reddit is designed, like all social media, to keep you engaged. Your method is best.

I actually designed a minimalist Reddit client that did exactly that, you had no homepage, it was just a search box where you typed in the subreddit name and it took you right to a minimalist interface (no big images, no names, black and white interface, no voting, etc). I've been meaning to revive it but haven't got around to it.

The nice thing for me was that I made the URL structure identical to reddit so it was as easy as swapping "reddit.com" to "reddit.qnzl.co" in a URL and it just worked.
by the_gastropod | 2025-08-19 19:59:40+00:00
Yes. Rent control is what most people are familiar with (grandma living in a beautiful 3 bedroom apartment in Greenwich Village paying $200 / month, locked in since the 1970's). Rent stabilization is just a regulation that puts some type of reasonable cap on how much landlords can increase the rent every year, usually around 3-5% per year.

This is especially relevant in this election, as Cuomo is attacking Mamdani for living in a rent stabilized apartment, suggesting it's hypocritical because he can afford a more expensive apartment. This is deliberately trying to muddy the distinction between "rent stabilized" and "rent controlled" (about half of NY apartments are rent stabilized, and there is absolutely no cultural expectation that people move out when they get a raise, or whatever nonsense Cuomo's suggesting).
by runjake | 2025-08-19 20:00:47+00:00
The topic at hand was non-existential threats, so my comment was oriented toward that.

But, I think my comment stands with regard to existential threats, as well, but at scale (so, education and social movements are key).

Resilience and coping skills to better deal with the compromises and hardships required, be it refraining from things we enjoy because it fights climate change or dealing with violence from the state to make our voices heard.

Introspection to strengthen our beliefs, ethics, behaviors, and understanding of the world and different viewpoints.

Ingenuity to come up with solutions to these existential risks.

These are all vitally important at scale.

Stronger people brings smarter choices and less vulnerability to external influences (especially the malicious kinds).
by moomoo11 | 2025-08-19 20:01:03+00:00
If I have to get a job again it will be nice to deal with less people.

I like people and working with them.

I absolutely hate corporate colleagues who have to play games and be lames instead of good engineers. People who operate out of fear because they genuinely suck.

Hopefully we can get rid of the managers asap, and also increase barrier to entry because we don’t need these roided out SWE whose whole identity is TC OR GTFO we need nerds.
by astrange | 2025-08-19 20:01:13+00:00
Have we tried putting them on Ozempic and amphetamines? They'll get impulse control then.

The GP comment (that just got banned) claiming the only two choices are "work hard" and "UBI" is a working-class class marker. Higher paying middle class jobs are universally easier than working-class ones. But they're more specialized, less predictable, and require you to have trained for them and have appropriate class markers and social skills.
by quesera | 2025-08-19 20:01:17+00:00
On macOS, sending `--no-remote -P <profilename>` in the command line is the method for launching specific profiles.

I add an icon (slightly modified for each profile) to the script, and rename it to (e.g.) ~/Applications/Firefox-work.app for convenience. Works from the Dock, Finder, Spotlight, etc. I usually launch from the command line, but all the usual ways do work.

Improving the profile switching experience is great of course. But the above workaround has served me perfectly for as long as I can remember. Obv would not work for everyone.
by jacobegold | 2025-08-19 20:01:46+00:00
we still do stacked diffs — it's our bread and butter, and many of our existing customers, some of whom have been with us since the beginning, are finding a ton of value from both diamond comments and chat. i loved working on the CLI, i loved working on chat, and i'm excited to continue building tools that make code review less of a pain.

the core problem that stacked diffs and that adding AI to the PR page solve are the same — code reviews slow devs down and force unnecessary context switching.

stacked prs help you get around this by allowing you to manage your work in way that makes it easier to organize in an author and easier to deal with as a reviewer. AI can help you get around this by making it easier to review PRs when you open the page, and save you the context switch of going back to your editor to make a tweak that a reviewer suggests.

Graphite has always been about shortening the cycle time and reducing the amount of busy work from writing code to getting it merged, and we'll continue building features that speed up that cycle.

the best part is — you can still pay for Graphite, and you don't have to use ANY of our AI features. we're still constantly shipping improvements to our CLI, optimizing our merge queue for our larger enterprise deployments, continually working on making the PR page more modern and easier to use than GitHub's and working with the same customers that we have since the beginning to do so.

would love to hear what you think we can do better to address your needs
by fabian2k | 2025-08-19 20:01:49+00:00
Not to defend this practice, but SSO does tend to produce an additional support burden. It's complex, there are many knobs to fiddle with and it can be tedious to figure out if the customer (via configuration, or their identity provider itself) or the vendor are at fault for an issue.

Just had an issue today, I'm reasonably sure it's the customer's fault. But I also misread the spec earlier and was wrong about some parts that worked out of the box with one identity provider, but not another one. So who knows. Okay, I assume this parts gets better once your SSO implementation gets older, but it's a pain when you're starting out with it.
by billyp-rva | 2025-08-19 20:02:16+00:00
> Llm to text to diagram is the killer workflow these days.

It's useful, but I think only marginally. When using a diagrams-as-code tool, having an LLM write it for you gets you up and running faster, but long term you have more control (and no hallucinations) just writing the code yourself. It'll probably be fewer keystrokes in the end. Doubly so if your diagrams-as-code tool has decent autocomplete.
by karel-3d | 2025-08-19 20:03:45+00:00
is this "avunit" someone from the reporting team? it seems created few hours ago, and it's using 8.8.8.8 which does not timeout as they claim; and the crux of the attack there is just that local UDP is faster than remote UDP

edit: the only github account of the reporter is github.com/idealeer . this avunit is something random
by davidivadavid | 2025-08-19 20:04:11+00:00
What's most puzzling to me is how at this point a larger part of SV hasn't distanced itself with All-in Podcast-adjacent people a lot more vocally. I think the lasting power of that region hinges on some important voices doing that sooner rather than later, because they're actively damaging the whole brand of SV at this point.
by philipkglass | 2025-08-19 20:04:40+00:00
I don't know about TV news, but it was covered by many mainstream news outlets:

https://www.bing.com/news/search?q=Tom+Alexandrovich

I found stories about it in The Las Vegas Review-Journal, The Las Vegas Sun, The Guardian, The Independent, Reuters, The Jerusalem Post, The Times of Israel, Gizmodo, Yahoo News, MSN, AOL, Haaretz, US News and World Report, and New York Post as well as several smaller outlets.

His Wikipedia page has already been updated with a section "2025 arrest in Nevada."
by codedokode | 2025-08-19 20:04:54+00:00
One of the problems is that code analyzers, bundlers, compilers (like Rust compiler) allow running arbitrary code without any warning.

Imagine following case: an attacker pretending to represent a company sends you a repository as a test task before the interview. You run something like "npm install" or run Rust compiler, and your computer is controlled by an attacker now.

Or imagine how one coworker's machine gets hacked, the malicious code is written into a repository and whole G, F or A is now owned by foreign hackers. All thanks to npm and Rust compiler.

Maybe those tools should explicitly confirm executing every external command (with caching allowed commands list in order to not ask again). And maybe Linux should provide an easy to use and safe sandbox for developers. Currently I have to make sandboxes from scratch myself.

Also in maybe cases you don't need the ability to run external code, for example, to install a JS package all you need to do is to download files.

Also this is an indication why it is a bad idea to use environment variables for secrets and configuration. Whoever wrote "12 points app" doesn't know that there are command-line switches and configuration files for this.
by lycopodiopsida | 2025-08-19 20:05:37+00:00
> I am convinced the Unix way (do one thing and do it well, connect them via pipes and text) is the way to go.

I was convinced too, but after the amount of work required to convince terminal, tmux and neovim to be friends I thought “It would be nice if all of it would be in one sane configuration language and actually debuggable!”

These days, if I need unix tools (use rg a lot) I plug them into emacs.
Show HN: A simple binary clock, just for fun
by No_CQRT | 2025-08-19 20:06:59+00:00
This is a simple project to create a binary clock using a ESP8266 and some WS2812 single addressable leds. Use the wi-fi connection to syncronize the time via NTP, change timezone, led color and brightness via Serial commands or physical buttons. In this case, i've used two "touch" button behind the front mask (STL for box and mask attached) for a better, minimal design.
by thinkingtoilet | 2025-08-19 20:07:08+00:00
I must be old, I don't even know what CNC is!

I completely agree that the intensity of porn that can be accessed at a young age is deeply concerning. I have two sons. If I found a playboy in their room at age 13 we would have a discussion but I wouldn't really care. However, if I walked in on them watching extremely hard core pornography I would be pretty concerned.
by throwup238 | 2025-08-19 20:07:30+00:00
Some of these numbers don’t quite make sense. AppSmith has the highest percentage increase (16567%) but that’s because the minimum is 100 seats, so the actual number is $25/mo or 66% increase. How often do vendors enforce these minimums? I’ve never had a problem getting past them (at least with small to medium sized SaaS companies) when contacting sales as long as I had a few tens of users.

I really appreciate Cloudflare not putting SSO behind a paid subscription because using their Cloudflare Access product with Github SSO has been the easiest way to secure my personal services running on a VM.
by shadowgovt | 2025-08-19 20:07:43+00:00
Modern emacs is surprisingly powerful, far from "Doom on a pregnancy test" (image display and UI widgets are just features).

Looking at the code for this solution (https://github.com/xenodium/dotsies/blob/main/emacs/ar/video...), it's under 400 lines (excluding the require of three very common libraries and an ffmpeg dependency). I'm not actually sure I could pull off this feature in 400 lines of JavaScript (and the binding logic for going from node to ffmpeg isn't going to come to my fingertips nearly as fast as the logic for emacs LISP, although I know that varies from person-to-person).

Plus, once it's in emacs it can glue to other things. If I want to grab video from an email and trim it, I have tools in emacs to fetch particular emails, etc.

I think the most reasonable way to think about emacs hacks like this is "I could do this in a shell script... But why would I when emacs gives me interactivity, a REPL, and the advantages of buffer manipulation as a metaphor?"
by alexey-salmin | 2025-08-19 20:07:55+00:00
> I think there is a huge distinction to what it’s good for the average person in society vs what is good for the rulers, and it is unclear which one of those you mean.

I mean it in the most brutal sense, maximizing replication and persistence of religion bearers (you can say average person in society).

In a short term religions can benefit current rulers, but in a long term selection must be geared towards survival of societies and cultures as a whole, otherwise they wouldn't have lived into the modern age.
by samdoesnothing | 2025-08-19 20:08:10+00:00
I think you meant the opposite - that what was distasteful in the past is no longer distasteful today.

I think we realised as society that regulating most behaviour, no matter how distasteful we find it, is not a great idea for various reasons - 1. it's subjective, 2. people get tired of prudish cultures and act out in various ways, 3. you end up on the wrong side of history. As a society we're becoming a lot more liberal about letting people do their own thing, as long as they aren't actually hurting others. Playing music out loud is not hurting others, neither is wearing a bikini at the beach, etc.

Of course there are always the hall monitors that want to control other peoples behaviour and they often use the excuse that they're regulating bad behaviour for the sake of society. Thankfully it seems like we are beginning to reject those people and push them out of power.
by baq | 2025-08-19 20:08:40+00:00
A very good article, I’ve had similar thoughts, expressed them in conversations, but never written down anywhere.

> Mentor your junior colleagues, give them the space to learn and make mistakes.

I’d love to. My company stopped hiring juniors during the mini saas recession and then cursor launched. There are no juniors to mentor anymore.

Juniors nowadays are expected to perform senior work. It’s a recipe for disaster.
by wat10000 | 2025-08-19 20:09:40+00:00
I'm still not sure what the important distinction is. Are you saying it's that rent control freezes the price entirely, while rent stabilization allows it to increase? That doesn't seem to be right from what I'm seeing; "rent control" includes systems where the rent can increase. NYC apparently has both and NYC rent control does allow for (capped) rent increases, according to the NYC government: https://hcr.ny.gov/system/files/documents/2024/01/fact-sheet...
by levmiseri | 2025-08-19 20:10:09+00:00
For me one of the biggest issues with Notion (and to a smaller extent with Obsidian as well) is its ever present UI. When I write (or read) something, I don't want to see 20+ buttons scattered around distracting me from the content.

IA writer got this right, but it's too local and doesn't have colab or better online sync features. Shameless plug – I'm building https://kraa.io/about that's trying to be a writing app with a minimal, yet feature-rich, UI. (better offline and local-files functionality planned)
by idolevi | 2025-08-19 20:10:16+00:00
I built a system that actually BLOCKS Claude from doing things you didn't ask for. Real-time violation detection with immediate intervention.

How it works: EVERY interaction gets analyzed - every "I'll help you with that", every tool call, every single message. Whether Claude is thinking, reading a file, or trying to edit code - it ALL goes through GPT-OSS (via Groq for near-instant analysis).

When you send a message, we extract your intent and add it to the session context. When Claude sends ANY message or tries ANY tool, we analyze if it aligns with your accumulated instructions. Every. Single. Time.

The magic happens in the pre-hook: Before Claude can execute ANY operation (Edit, Bash, Read, etc.), our system checks for violations. If Claude is doing something you didn't ask for - BLOCKED. The operation never executes. Claude gets a detailed explanation of what went wrong and why.

Examples it's caught:

- Asked Claude to analyze code → it tried to commit → BLOCKED

- Said "don't modify files" → Claude tried to edit → BLOCKED

- Requested a backend fix → Claude wandered into frontend → BLOCKED

- Asked to run tests → Claude said "I can't execute commands" → BLOCKED

The system uses "trajectory thinking" - GPT-OSS analyzes your ENTIRE conversation history to understand context. "Fix this" knows what "this" refers to from 20 messages ago. "Don't use external libraries" from the start stays enforced throughout. It understands multi-step workflows, so normal investigation isn't flagged.

Each Claude session maintains its own violation context - no cross-contamination between different conversations. Everything stored in SQLite, analyzed in real-time, blocked before damage.

...and it's also a Tamagotchi that lives in your statusline. Gets increasingly angry when Claude ignores instructions. Needs feeding every few hours. What started as a simple virtual pet somehow evolved into a full behavioral monitoring system. Feature creep at its finest.

Install: bun add -g claude-code-tamagotchi

Repo: https://github.com/Ido-Levi/claude-code-tamagotchi
by AptSeagull | 2025-08-19 20:10:42+00:00
For decades, Electronic Data Interchange has been the backbone of B2B commerce—and its biggest bottleneck. While businesses have digitally transformed every other aspect of their operations, EDI has remained stubbornly stuck in the past, trapped by rigid architectures that turn every integration into a months-long engineering project.

Today, we're revealing the breakthrough technology that's changing everything: Directed Acyclic Graph (DAG) architecture—and why it's not just an incremental improvement, but a fundamental reimagining of how EDI should work.
by general1726 | 2025-08-19 20:11:23+00:00
Yeah, no. Otherwise DMCA from USA would be enforceable in EU and Asia, which they are not.

And if you believe they are, tell me when USA last time successfully DMCAed Chinese company in China.

Alcohol in Nordic countries is extremely taxed, so Nordic youth often times goes to central Europe for drinking parties. Should pub owners in central Europe be arrested by Nordic police for selling improperly taxed alcohol? Good luck with that.

Or you have draconic UK anti-hate speech laws. How are you going to enforce them in i.e. France?
by l1tany11 | 2025-08-19 20:11:33+00:00
Because people think the progress shown with gpt5 is unimpressive. Meanwhile Claude is very successful, Grok has come out of nowhere and according to some benchmarks matches or exceeds gpt5 slightly. Meaning openai might not be THE horse to bet on. Doesn’t mean there isn’t a race going on with the potential for a big prize at the end, even at current valuations. Only time will tell! As per usual!
by cladopa | 2025-08-19 20:11:34+00:00
A new aluminium iMac or MacBook Air, or MS surface for 200 dollars?

Those are the prices of stolen goods. A lot of people want a metal computer instead of a plastic one, but don't want to pay for it.

I was offered stolen goods at those prices and passed. A friend of mine took the bait as was super happy for a month or so until police took his new adquisition from him. Of course he received no compensation as it was stolen and they could prove it, so in the end it was expensive.
by tialaramex | 2025-08-19 20:12:24+00:00
When you want reference stability, do you need references to stay working even where something moved to a different hash table?

That is suppose we have two std::unordered_map<Goose> labelled A and B, and we put a particular Goose in A, later we get a reference to it, and we might, or might not, move it to B, but it definitely still exists. Do you need that? (As I understand it this is in fact what you get in std::unordered_map today)

Or for your purposes is it enough that it works only so long as the goose we're referring to is in A still and if we moved it out of A then it's fine that the reference is invalidated ?
by dc396 | 2025-08-19 20:12:34+00:00
I'm unclear there is a security issue with dnsmasq -- maybe leaving a transaction alive too long (but then again, what does "too long" mean these days?). However, I haven't looked into the "vulnerability" referenced to be sure (the "malformed name" aspect of the report doesn't fill me with confidence).

I contend that creating signatures over the data at the sending side and then validating those signatures at the receiving end is superior protection to encrypting the channel over which the data is transmitted. Protecting the data is end-to-end. Protecting the channel is hop-by-hop. If you could ensure that the client speaks directly to the authoritative(s), the protection would be equivalent. But that's not how the DNS is operationally deployed (dnsmasq is a perfect example: forwarders really shouldn't exist).

I would agree with you that operationally, DNSSEC deployment is lacking (i.e., water is wet) and the requirement for both the authoritative side and resolving side to simultaneously implement is a (very) heavy lift. However, even your Tranco stats show that there are pockets of non-trivial deployment (e.g., governments) and I believe the trend is increased deployment over the long term globally.

Fortunately, it's not either/or. I personally prefer DoT/DoH to a trusted (i.e., that I run) resolver that DNSSEC validates. Unfortunately, as dnsmasq doesn't appear to implement forwarding to DoT/DoH resolvers, you're left with DNSSEC or not using dnsmasq (which is what I gather you're recommending).
by mmerickel | 2025-08-19 20:12:35+00:00
This is just flat-out untrue, OIDC or SAML plus SCIM should be the default for any enterprise-focused service provider or "you're doing it wrong". You can offer your own IDP as the default, but all of the problems that need to be solved to allow your customers to configure their own IDP are important to the design/architecture of your service and the only reason these providers are treating it as special is because they didn't build the integration between their service and their IDP correctly the first time. Provisioning and authentication are critical to security and you're actively harming your customers if you require them to use your own IDP solution in order to use your service.
by libraryofbabel | 2025-08-19 20:12:37+00:00
I mean, the whole point of my post was to say that books are more useful than anything else, and it would certainly better to have access to 10 good books and no hacker news at all than the reverse. But I do think there is value in keeping an eye on trends. They shape our industry; you may wish they didn’t, I wish they didn’t sometimes, but they do. Obviously good fundamentals are more important, but I think it’s doing a disservice to juniors if you tell them to ignore the “commentariat” completely.
by afavour | 2025-08-19 20:12:47+00:00
I really wonder how Zuckerberg will be looked back on. It's seemed obvious that he's an incredible CEO given the growth we saw with Facebook, but maybe he was just in the right place at the right time and had a cash cow that was difficult to mess up? Because when I look at the Metaverse and I look at this AI stuff... I dunno. Feels like throwing spaghetti at the wall.
by Balgair | 2025-08-19 20:13:06+00:00
Yeah, I've heard this critique too and I'm not sure how to address it.

Like, the whole point of a 'study' is to test things out. That's temporary by design.

But yes, it's a giant confound too.

I guess what the DBIS showed is that the results are not spectacular and automatic. They are slight-ish, grey, muddled.

Like, if UBI was a panacea like insulin was to diabetics, then we'd expect a huge result and difference. But it wasn't, and that a good result to report out too. I just wish there was a silver bullet.