MurphyA/hacker-news huggingface dataset:
by ryandv | 2025-08-07 16:02:52+00:00
> the fact that it's not strictly necessary to have supportive tools to develop these skills doesn't mean that supportive tooling wouldn't help a lot of people.

I would posit that the only faculty developed in wielding such supportive tooling, is skill at using those tools; when the real goal is the cultivation of character, the construction of a "virtual engine" [0] that governs action. Consider analogously that brain training apps' claims to improve general intelligence are specious at best, and don't seem to develop anything other than the ability to use the app.

Since, in the case of the earring, this virtual governor has already been outsourced to an external entity, there is no need to cultivate one for one's self. Not only does this miss out on the personal development attained in said process, it also risks enthralling you to a construct of someone else's design; and one should choose carefully at which pantheon they pour libations, for its value systems might not always align with one's own.

[0] https://www.meaningcrisis.co/episode-6-aristotle-kant-and-ev...
by webstrand | 2025-08-07 16:03:18+00:00
Honestly it's pretty worrying, I don't understand how other people can talk about "you have to have multiple offsite backups" when each offsite runs about $700 per year for a relatively small amount of data. I can only afford one off-site backup, and if my local copy dies it'll take a couple of weeks for me to restore from AWS because of local internet speed limitations.
by danudey | 2025-08-07 16:03:24+00:00
The teams of people want to get their work out into the public to make a big splash so they can get a sweet bonus before anyone realizes that it's not actually useful or effective. See also: Google Wave, and 80% of their other products.

They don't get a sweet bonus and promotion for helping another team improve a product, so why collaborate? Just create your own chat app according to your own team's vision/goals/available technology and release it and hope it gains more traction than the other teams' existing options.
by chrismorgan | 2025-08-07 16:03:32+00:00
https://cloud.google.com/blog/topics/threat-intelligence/voi...

Kinda funny, honestly. Intelligence article from early June, “here’s a sophisticated Salesforce phishing attack we’ve been seeing, here are the details so you don’t get caught”, with an update added two months later, “oh yeah, forgot to mention, they got us back in June”.
by Pxtl | 2025-08-07 16:03:34+00:00
It works for this context, which is about an experiment that is fundamentally a bit silly. 10 years ago this would've been all memes, and 20 years ago it would've been performatively elaborate insults. I'll definitely take it over those.

btw "toot" is the de-facto standard jargon for "post" on Mastodon-based social media, so that sentence isn't actually an example of this silliness.
by theamk | 2025-08-07 16:03:43+00:00
looks legit to me.

I've used to work in small startup with ~10 people. The owner was always happy to pay for tools to developer productivity. We did not subscribe to Coursera, but in the theoretical case we'd all want to, the pricing would be:

10 users, no SSO: $3999/year

10 users, with SSO: $49875/year

It's an SSO tax, and a super hefty too. We'd probably balk at it and chose the less-secure option instead. And the fact that we'd get extra 116 licenses we had no need for is absolutely irrelevant, there is nothing we can do with it at all.
by eqvinox | 2025-08-07 16:03:51+00:00
> "people in positions of leadership, such as my boss, are aware of your blog post and I’ve been tasked with finding out what I can"

Translation: "someone noticed it trending on HN, decided it was bad publicity, and that they should do something about it"

Implication: what mattered was the bad publicity, not the poor support infrastructure. The latter won't change, and the next person with similar problems will get the same runaround, and probably lose their data.

/c (cynic, but I suspect realist)
by jononor | 2025-08-07 16:04:18+00:00
You made me think of the role of mental effort/exercise. In parts of the western world, we are already experiencing a large increase in dementia/alzheimer and related. Most of it is because we are doing better with other killers like heart etc, and many cancers also. But is said that mental activity is important to stave off degenerative diseases of the brain. Could widespread AI trigger a dementia epidemic? It would be 30 years out, but still...
by overfeed | 2025-08-07 16:05:01+00:00
> This is what OP meant with multiple coding agents.

It may be the same coding agent behind the GHA. I question the implicit declaration behind OPs critique: that all 160,000+ Google folk should offer a single coding agent to their billions of users (or whatever the TAM is for coding agents). This is akin to criticizing Google Cloud for having VM, Kubernetes clusters and AppEngine; superficially, these products solve the same problem.

FWIW - this Github Actions integration is close to my ideal AI agents workflow[0]. I don't want to metaphorically look over my agents shoulder as it works in a specialized, vendor-locked IDE. I want agents to work asynchronously, taking however long they need, and tackling multiple tasks, with PRs/CLs as the unit of work. Current models may not be up to the task of single-shotting this, but the task is parallelizable across multiple agent-instances & the best solution selected (climate change be damned). I suspect Github alone may not provide adequate context as it may be missing previous tickets and design documents & the back-and-forth on requirements, but it's a start, and I'm glad Google is exploring this path for agents.

0. I believe in this workflow so much I created a proof-of-concept project that reads tickets from Vikunja and creates PRs using Aider some weeks back.
by qualeed | 2025-08-07 16:05:14+00:00
Awesome that the author got their stuff back. But...

>My data is back. Not because of viral pressure. Not because of bad PR. [...]

>“I am devastated to read on your blog about the deletion of your AWS data. I did want to reach out to let you know that people in positions of leadership, such as my boss, are aware of your blog post and I’ve been tasked with finding out what I can, and to at least prevent this from happening in the future.”

So, yes, because of bad PR. Or, at least the possibility of the blog blowing up into a bad PR storm. I'm guessing that if there was no blog, the outcome would be different.
by drdaeman | 2025-08-07 16:05:20+00:00
You’re falling for the exact “better security” fallacy I was trying to warn about. Security is not a rating, “better security/guarantee” is not a really meaningful phrase on its own, even though it’s very tempting to take mental shortcuts and think in such terms.

Attestation provides a guarantee that the credential is stored in a system controlled by a specific vendor. It’s not “more” or “less” secure, it’s just what it literally says. It provides guarantees of uniformity, not safe storage of credentials. An implementation from a different vendor is not necessarily flawed! And properties/guarantees don’t live on some universal (or majority-applicable) “good-to-bad” scale, no such thing exists.

This could make sense in a corporate setting, where corporate may have a meaningful reason to want predictability and uniformity. It doesn’t make sense in a free-for-all open world scenario where visitors are diverse.

I guess it’s the same nearsighted attitude that makes companies think they want to stifle competition, even though history has plenty of examples how it leads to net negative effects in the long run despite all the short term benefits. It’s as if ‘00s browser wars haven’t taught people anything (IE won back then - and where is it now?)
by danudey | 2025-08-07 16:05:34+00:00
If they throw it out and it's great then they get accolades; if they throw it out and it's bad, they don't. If they polish it and see if it works based on real user feedback then they also don't but it took longer. Better to just throw everything at the wall the instant it has the potential to go viral and then move on if it doesn't.

Remember that Google operates at huge scale, so even something any other company would consider wildly successful (e.g. Reader) is a waste of resources for them. That means that if you're ramping up your product over the course of a year you're wasting time and money. Go big or go home.
by dare944 | 2025-08-07 16:06:03+00:00
This argument is ridiculous and purposefully inflammatory. The issue at hand is the requirement for client attestation while using passkeys. So in that light, can you describe for us the scenario in which grandma, who is undoubtedly using passkeys on an iPhone or an Android, looses all her money simply because someone, somewhere else is using a passkey without attestation? You can't, because the vendor lock-in created by attestation doesn't meaningfully increase grandma's security. Rather, it exists (outside the enterprise scenario) primarily as an anti-competitive tool to be wielded by the major players.

Passkeys could have been an overall boon to society. But with attestation restricted to a set of corporate-blessed providers it is a Faustian bargain at best.
by billpg | 2025-08-07 16:06:06+00:00
Keeping it simple. Once you've got the mantissa and exponent out, you can check your number is in range by a simple check that the exponent is within range.

For a 32 bit signed integer the limit is 2E9. This means that the exponent is fine 0-8, or if the exponent is 9, then only if the mantissa is 1 or 2. This only works with a single digit mantissa.

For adding more digits to the mantissa, while a robust range check can be done, it gets more complicated. String-to-Integer functions are very conservatively written pieces of code designed to be quick.
by maxbond | 2025-08-07 16:06:19+00:00
"Instant," in the context of a user interface, is not zero seconds. It's more like 50ms to 1000ms (depending on the type of information being processed). If you want your user interface to feel snappy and responsive - then you don't want to process things as fast as the computer can, you want to process them in a way that feels instantaneous. If you get caught up processing every keystroke, the interface will feel sluggish.
by reginald78 | 2025-08-07 16:06:24+00:00
Yes, we've seen you repeat that we have to read it again. I reread this morning before the post, but really just found more things supporting my position.

> To be very honest here, you risk having KeePassXC blocked by relying parties (similar to #10406).

From the linked https://github.com/keepassxreboot/keepassxc/issues/10406 > | no signed stamp of approval from on high > see above. Once certification and attestation goes live, there will be a minimum functional and security bar for providers.

> | RP's blocking arbitrary AAGUIDs doesn't seem like a thing that's going to happen or that can even make a difference > It does happen and will continue to happen because of non-spec compliant implementations and authenticators with poor security posture.

Is your argument that despite being doused with gasoline I can't complain because I'm not currently on fire?
by bandofthehawk | 2025-08-07 16:06:45+00:00
> Tangentially, the author forgets that the reason cities like Baltimore adopted such policy was to encourage the bulldozing of uninhabitable structures lest they become less than legally inhabited.

This is interesting, do you have a source for this? Normally the assessors are tasked only with setting a value of a property and not with any type of policy related to rate or discount.
by lenerdenator | 2025-08-07 16:06:54+00:00
Simple cars don't make money... well, all of the available money.

The complex ones do.

You can get John Q. Public to buy a basic, efficient, safe compact car with cloth seats... or you can use that same production line to build a full-sized truck with tons of non-essential electronics that costs three times as much, which then requires the buyer to take out a loan from your financial arm for 84 months.

Which one returns more value to the shareholders?

EDIT: "non-essential electronics" should be seen as huge displays and the like, not things like emissions controls or safety equipment.
by cnst | 2025-08-07 16:07:00+00:00
Traditionally, most FreeBSD developers would actually run OS X on their laptops, whereas most OpenBSD developers would still use OpenBSD even on laptops.

This was especially notable at BSD-wide events like BSDCan, AsiaBSDCon, EuroBSDCon etc.

OpenBSD supports suspend to disk, whereas FreeBSD does not. (Is this being changed as part of this laptop project?)

OpenBSD has always supported graphics, sound and other desktop things in the default kernel, without having to tinker with kernel config or loadable kernel modules. FreeBSD? http://cr.yp.to/unix/feedme.html

Also, on OpenBSD, the basic X is part of the base system, in the xenocara repository, and it basically just works, straight from the default installer:

https://xenocara.org/

https://en.wikipedia.org/wiki/Xenocara

OpenBSD actually does NOT support loadable kernel modules at all, and you're strongly discouraged from running a customer kernel, too. This has a side effect that both graphics and sound works out of the box, since deviation from defaults is discouraged, and if it didn't work by default, it'd not be recommended in the first place.

On FreeBSD, even the most basic X stuff is part of the Ports tree, which basically implies that most installations wouldn't have it, and it's often far less integrated, and requires way more tinkering, than xenocara on OpenBSD. For example, when you know most of your installations wouldn't have X, would you have graphics and sound support in the default kernel, or would that require further tinkering of the kernel config and/or LKM?

(On both systems, you still install KDE and GNOME from ports/packages, if needed, it's only the lightweight basic X and WM stuff that's part of OpenBSD base xenocara.)

So, even though FreeBSD is faster and more popular in many ways, to most people's surprise, OpenBSD actually has better laptop support.
by qcnguy | 2025-08-07 16:07:27+00:00
Gebru didn't do any AI safety work at Google. She wrote stuff about doing social good, wrote the silly stochastic parrots paper that argued AI research was a waste of time, and whose title was proven false immediately (LLMs aren't parrots). The closest she got to "safety" was complaining that AI researchers weren't concerned enough that LLMs might say things Gebru didn't personally like.

Serious safety researchers are doing stuff like understanding neural circuits. Very different.

She surely knows how to use Linux. But she isn't really a safety researcher.
by raron | 2025-08-07 16:07:28+00:00
> I still run into "IT" people that instinctively disable IPv6 no matter what. How do we fix this?

- force ISPs to follow RIPE guidance on addressing (static prefix, at least /56 for every site, DHCPv6-PD)

- force the manufacturers of low-end routers (e.g. provided by ISPs) to have good IPv6 support (good firewalling, DHCPv6-PD, mDNS, PCP/UPNP, advertise static ULA prefix to have working local network even if internet connection is cut)

- force Android team to support DHCPv6

- force browsers to support full IPv6 addresses in URLs / URIs (link local addresses, scope id)

- force avahi / mDNS to support IPv6 scope id - make operating system manufacturers to have a better unified socket API which can resolve any type of address (IPv4, IPv6, DNS, mDNS, etc. maybe even URLs directly) and deprecate all other API

- make software developers to use this new API and don't try to parse IP addresses or URLs themselves

- have a good solution for multi-homing / WAN failover (without BGP and PI address space)

- have a good solution for mobile / roaming devices (phones, notebooks)

and maybe we could make IPv6 stable and universally working

(Waste a /40 for every company, get low on available prefixes and start over designing IPv8 to have 256 bit addresses with 184 bit host part...)
by bradlys | 2025-08-07 16:07:53+00:00
I might get shit for this but 1.5m is a lot but for people who are relatively early at OpenAI - a $500B company - it’s not. I would be surprised if most engineers hired 3-4 years ago are not on paper at least worth $10m in NW. When I worked at other companies with a tenth or even a hundredth of valuation - there were tons of people who still quit knowing they were going to get $1m+/yr by staying.

1.5m to retain these people is a lot but it isn’t when you consider how much you’ve already given and/or how much they’re already getting.

I suspect - like many companies in the bay right now - the work environment is incredibly demanding and toxic. This ain’t faang in 2012 with ball pits and slides.
by paulrpotts | 2025-08-07 16:08:00+00:00
Location: Southeast Michigan

Remote: Yes (available for remote work only)

Willing to relocate: No

Technologies: ARM Cortex-M, Agile, Bootloaders, C, C++, Device Drivers, Embedded Systems, FreeRTOS, GNU/Linux, Microcontrollers, Microsoft Windows, Python, QEMU, Tech Writing, Test Automation, Testing

Résumé/CV: https://thepottshouse.org/paul/portfolio/Complete_Resume.htm...

Email: paul@thepottshouse.org

I am seeking fully remote work in low-level embedded or related software development, ideally working with a team in Central, Mountain or Pacific time zones. I would prefer to be a full-time direct hire, but will also consider hourly contract work full-time or part-time.

I have decades of professional experience designing, implementing, testing, debugging, documenting, and maintaining software projects in a variety of languages, on a variety of platforms. Since 2000, I have specialized in embedded development. I also have experience writing documentation and training materials, leading small teams and projects, and mentoring junior engineers.
Show HN: Browsernode – Open-source TS browser agent(browser-use compatible)
by leoning | 2025-08-07 16:08:02+00:00
Hey HN, I'm leoning. I built Browsernode (https://browsernode.com), an open-source TypeScript browser agent (https://github.com/leoning60/browsernode) for AI agents to interact with the web.

It is 100% compatible with the APIs and all the features of browser-use (https://github.com/browser-use/browser-use) — but rebuilt from the ground up for modern TypeScript environments.

We really like browser-use and started with it, but our tech stack is entirely TypeScript/JavaScript, so we decided to build something that fits more naturally into that environment. We rewrote it with:

- Strong and explicit TypeScript typings

- Full API + feature parity with browser-use

What Browsernode does: It enables LLMs and agents to browse the web using natural language or function calls. It extracts DOM elements (buttons, inputs, etc.), xPaths, and page structures into prompt-friendly JSON.

What it is:

- A browser agent library

- Built for custom LLM workflows, RPA tools, or automation pipelines

- Designed with dev-first principles and great DX

Example tasks (via prompt or code):

- Write a letter in Google Docs and export it as PDF

- Find the cheapest one-way flight from Singapore to Tokyo on Aug 25

- Navigate from “Banana” to “Quantum Mechanics” on Wikipedia via clicks

Try it live or check out the demos: https://browsernode.com Demo video: https://s3.browsernode.com/google_doc_pub.mp4

We’ve been using it internally for over 4 months and felt it’s time to share. Would love feedback from anyone building LLM agents, RPA tools, or custom browser automation.

GitHub: https://github.com/leoning60/browsernode

Docs: https://docs.browsernode.com
by PKop | 2025-08-07 16:08:04+00:00
> There is no evidence the CEO was personally responsible

What are you talking about? He was CEO for 12 years coinciding with when this occurred. Of course the CEO is responsible for these types of decisions if simply that he didn't stop it.

from February 2015 to April 2021, Cadence and its indirectly owned and wholly controlled subsidiary in the PRC, Cadence Design Systems Management (Shanghai) Co. Ltd. (Cadence China), engaged in a conspiracy to commit export control violations in connection with the provision of EDA tools that were subject to the Export Administration Regulations (EAR) to NUDT through Central South CAD Center (CSCC), an alias for NUDT, and another associated entity, Phytium Technology Co. Ltd. (Phytium), without seeking or obtaining the requisite licenses from BIS. Specifically, Cadence, Cadence China, and their employees exported, reexported, and transferred in-country U.S.-origin EDA tools to CSCC in the PRC, despite having knowledge that CSCC was an alias for NUDT. As a result, Cadence and Cadence China exported and caused to be exported EDA tools at least 59 times through September 2020 In court documents, Cadence admitted that Cadence China employees installed EDA hardware on NUDT’s Changsha, China, campus and that NUDT personnel downloaded EDA software and IP technology from Cadence’s download portals while Cadence and Cadence China, through its employees, had knowledge that NUDT had been added to the Entity List. On Feb. 18, 2015, the same day that NUDT was added to the Entity List, Cadence’s export control officer emailed Cadence and Cadence China employees that NUDT had been added to the Entity List “meaning that export licenses will be required if sales are made.” Further, in March 2016, a Cadence China employee authored a presentation for a quarterly sales review meeting with her colleagues stating (as translated from Chinese) that as of Feb. 18, 2015, the U.S. Department of Commerce had “embargoed” four national supercomputer centers in the PRC, including NUDT, due to U.S. microprocessor chips being used in the “TianHe” supercomputing systems believed to be used for nuclear explosion simulation. Cadence also admitted that its employees who conducted work at CSCC’s location on NUDT’s campus knew about connections between CSCC and the PRC military.

"He didn't know this was happening" is kindergarten type excuse making. And in any case, if true is evidence of incompetence meaning he should not be permitted to lead a company so critical to US technology and national security concerns given his incompetence could allow that type of thing to happen again.
by tptacek | 2025-08-07 16:08:46+00:00
Somebody has to say this so I guess I'll take the hit: part of the cost of an unsanctioned fork of a large project is that you're not going to be in the embargo list. Even with a large base of developers and users, the mechanics of a community-driven open source project can make people gun-shy about pre-disclosing.

Over the long term, increasing prominence of your project will probably get you most disclosures directly, because vulnerability researchers are incentivized to confirm big targets for findings. But in the short term, I don't think this complaint about HashiCorp is based in any real norm of vulnerability disclosure.
by thegrim33 | 2025-08-07 16:08:53+00:00
For an article about keeping cars simple they don't mention some really big things.

They present it as a choice between manual or electric seats, manual or electric buttons, etc., which are indeed valid items of discussion ..

But what about other expensive, complicated, things I want a choice to get rid of, major things I don't want to pay for, like .. auto stop-start, or the ability for the car to slam on the brakes by itself, or the ability for the car to decide to steer itself if it thinks I've strayed from the middle of the lane. Heck, I don't want a rear camera or blind spot monitoring, I'll check my blind spots myself. They're even working on mandating some sort of monitoring in the next few years to "detect" whether you might be drunk.

What are the costs of all those sorts of things? All the sensors? All the computers? All the design/coding? The costs for maintaining all of it? The cost of the extra complexity? No mention of any of that?

(Also don't get me started on the extra cost and complexity and loss of maintainability that emissions regulations have added to cars. They used to be dead simple and maintainable.)