MurphyA/hacker-news huggingface dataset:
by taylodl | 2025-08-11 19:05:17+00:00
Not a bot but hey, thanks for the complement?

1. Clients can't expect to cache data forever and it still be correct. Think of what they've been provided is an "access code" to the information they want. That access code will expire. They have a means for getting a new code. Your data integrity is preserved. You can manually force the expiration of that access code at any time operations requires.

2. If the DB hasn't been leaked then all that's happening is the clients can see the timestamps of their data, which presumably you were going to display to them at some point?

3. Yes, I was affirming your point.

4. It's a clarification of what you wrote, especially the part where you said "losing that secret immediately destroys your database." No, it doesn't. Your database is intact. Someone may gain the ability to determine the timestamps for their data, as said in (2), but as long as there wasn't a widespread DB leak, then you're fine. We've already established if you have a DB leak then all bets are off. Even then, there are ways to mitigate the impact of such a leak.

I do all my own writing. AI edits the results. Sorry not sorry if you don't like the modern workflow.
by Theodores | 2025-08-11 19:05:19+00:00
Next, next version, just commit everything to working memory, as in one's brain. To help with this, simply tell others what you are doing and give them updates. Practice can be gained by doing things such as shopping without a list. Hacks can also be used, so a list of code fixes can be called 'updating the specs', even though it is a list of things to do.

As for pen and paper, writing things down is a way of committing todos to working memory, the paper does not have to be referred to, just the act of writing means that it gets noted.

Forgetfulness is a feature. If it wasn't important and it gets forgotten, then forgetfulness has worked.

Joking aside, todo lists, in whatever form, are rarely going to be forever solutions, and, depending on the task and who you are working with, the solution is going to vary.

What is fascinating is working with someone that has all the tools for the day job and to work on another project, for instance DIY. They might have all of these fancy project management tools for work, but do they use them for renovating the house?

Of course not! They are back to either pen and paper or just working memory.
by mort96 | 2025-08-11 19:05:22+00:00
I'm not sure it's possible to have a technology that's user-facing with multiple competing implementations, and not also, in some way, "liberal in what it accepts".

Back when XHTML was somewhat hype and there were sites which actually used it, I recall being met with a big fat "XML parse error" page on occasion. If XHTML really took off (as in a significant majority of web pages were XHTML), those XML parse error pages would become way more common, simply because developers sometimes write bugs and many websites are server-generated with dynamic content. I'm 100% convinced that some browser would decide to implement special rules in their XML parser to try to recover from errors. And then, that browser would have a significant advantage in the market; users would start to notice, "sites which give me an XML Parse Error in Firefox work well in Chrome, so I'll switch to Chrome". And there you have the exact same problem as HTML, even though the standard itself is strict.

The magical thing of HTML is that they managed to make a standard, HTML 5, which incorporates most of the special case rules as implemented by browsers. As such, all browsers would be lenient, but they'd all be lenient in the same way. A strict standard which mandates e.g "the document MUST be valid XML" results in implementations which are lenient, but they're lenient in different ways.

HTML should arguably have been specified to be lenient from the start. Making a lenient standard from scratch is probably easier than trying to standardize commonalities between many differently-lenient implementations of a strict standard like what HTML had to do.
by bko | 2025-08-11 19:06:22+00:00
I've used Claude Code but not the vs code plugin. I get enough value from the auto-complete that I'll use Cursor regardless, but I don't think it's worth $20 for that.

But now it's subsidized so I easily spend over $50 of Claude credits for my $20 in Cursor.

Also the ability to swap out models is a big value add and I don't have to worry about latest and greatest. I switch seamlessly. Something comes out, next day its on Claude. So now I'm using GPT which is less than half the price. I don't want to have to think about it or constantly consider other options. I want a standardized interface and plug in whatever intelligence I want. Kind of like a dropbox that can worry about whether they store in AWS, Azure or GCP depending which one is the best value prop.
by tastyface | 2025-08-11 19:07:13+00:00
The party of Nixon isn't the Republican party of today. We've been getting a Nixon-level crisis every week with zero defections from Republican Congressmen. And I'm tired of Republicans shrieking about some minor or imagined Dem transgression, then doing something 100x worse when they're in power, and all the Democrats going HEY REMEMBER THAT TIME WHEN... IMAGINE IF BIDEN...

Yes, they remember, they don't care, they feed off your reaction. Engaging is useless. The blunt instrument of power is the only thing they understand; ignore and route around.
by AndyKelley | 2025-08-11 19:07:31+00:00
Missing SIMD functionality is welcome issue reports. Obviously we're not going to copy the C intrinsics directly since Zig SIMD is portable, but everything should be expressible.

It doesn't really have to do with what operations LLVM provides for vectors. LLVM supports all the SIMD intrinsics of clang, and LLVM is one of many backends of zig.
by m_busel | 2025-08-11 19:07:31+00:00
super interesting breakdown. that being said, it's unclear to me if this is actually a problem outside of code gen. the labs have zeroed in on this use case since it's so obviously valuable but they're not going to launching products in every area.

also, yes, the labs control the supply but also there are many labs so there's lots of competition. they can't, for example, just jack up the prices on the dealers (apps) like a monopoly could. so again, not sure if being a dealer is actually bad here.
by MattPalmer1086 | 2025-08-11 19:07:40+00:00
It's easy to demonstrate (3) for an age verification system - practical experience will amply demonstrate it to everyone.

Voting is very different - you do need to be able to demonstrate the fairness of the process verifiably to everyone - not just crypto nerds. Age verification - well, some people might get around it, but if it generally seems to work that is good enough.
by shortrounddev2 | 2025-08-11 19:07:53+00:00
I just switched from Github to Gitlab. For anyone who is interested in doing the same, but doubtful because of the effort required: Gitlab has a pretty good migration tool. You authenticate against your github account and gitlab will import all your repos for you. We've been using gitlab at work for a bit and the CI/CD took a little getting used to but I'm overall happy with Gitlab.

Some people think a github presence is important for their personal portfolios/careers, but I've personally never seen any evidence that a recruiter or anyone has ever actually looked at my github profile. Plus I can just put gitlab on there instead now
by al3rez | 2025-08-11 19:08:07+00:00
I had an interview a while back that I really liked:

A pair programming session on a home assignment (it was a Java banking app) with 2–3 bugs and missing features. This allows the interviewer to see the candidate’s problem-solving skills and how quickly they can find, fix, and add features. A take-home assignment with a static JSON file containing products, where the developer is asked to build both a front end and a back end around it. This lets you assess their systems thinking — do they overcomplicate things, chase the latest tech, or make wise, pragmatic decisions? During the interview, you can also expand the scope of the assignment, e.g., What if this needs to be production-ready? What would you add?

Anything else usually ends up being a waste of time for both the interviewer and the developer.

I’ve done over 100 of these in the last 10 years.
by pcaharrier | 2025-08-11 19:08:13+00:00
Suffice to say that before this morning I had only a vague idea about how legally complicated this could get. For instance, there's an opinion from the Department of Justice (albeit an old one) that concluded that the President can use the DC National Guard for law enforcement purposes (in that case, drug interdiction) without running afoul of the Posse Comitatus Act.

Source: https://www.justice.gov/olc/opinion/use-national-guard-suppo...
by zeruch | 2025-08-11 19:08:18+00:00
I've tried so many todo apps and the only thing I've stuck to is Obsidian and a daily morning habit of checking my list (I check it multiple times a day, but I set at least one 'forced' point in the morning to level set.

I also use a notebook that often feeds that obsidian tab because I still often prefer to take notes/diagram by hand. The kinetic action sticks with me better.
by 6thbit | 2025-08-11 19:08:54+00:00
Many of the larger enterprises (retail, manufacture, insurance, etc) are consistently becoming cloud-only or have reduced their data center foot print massively over the last 10 years.

Do you think these enterprises will begin hosting their own models? I'm not convinced they'll join the capex race to build AI data centers. It would make more sense they just end up consuming existing services.

Then there are the smaller startups that just never had their own data center. Are those going to start self-hosting AI models? And all of the related requirements to allow say a few hundred employees to access a local service at once? network, HA, upgrades, etc. Say you have multiple offices in different countries also, and so on.
by king_geedorah | 2025-08-11 19:09:16+00:00
I take your general point with the caveat that no negatives leaves half of all values for a given integer type unyieldable whereas lack of scientific notation support does not.

I was operating under an unfounded assumption that the blog post existed instead of the code to do the thing for your particular use case rather than in addition to it, which isn’t entirely fair given we have had no prior interactions and I have not investigated your work at all.
by _345 | 2025-08-11 19:09:28+00:00
Read this and you clearly want something like Obsidian.

Get obsidian and then set up - Syncthing for free open source syncing that doesn't go to any cloud, just replicates across your own devices

- You can just do a single markdown file instead of a single txt file if you really want to smoosh everything into one file (gross but you do you). markdown is portable and many software can render it easily, if they can't markdown is still readable raw plaintext

- But I would get some cool plugins like Periodic Notes and then set up either a Monthly or a Weekly periodic note. Basically the idea is the same as what you are doing, but instead of one lifetime markdown file, you split them up into monthly or weekly chunks. I do weekly (one note for each week), but its really your preference.

Now you get pretty rendering of your notes, generate sharable links to your notes, password protect them, all still free, open source, syncing, and portable (markdown plaintext)
by DoorOpen | 2025-08-11 19:09:36+00:00
Software engineering experiences in VC-funded startups and mid-stage companies, of which several were in the SF Bay Area. Also did machine learning and creation of labeled training data. Computer Science degree.

Looking for companies between early stage to mid stage. You can email me to ask for a resume. The email address can be found in the profile of this account.

Location: San Francisco / Bay Area / CA / US

Remote: Yes remote or hybrid or onsite

Willing to relocate: Yes

Technologies: JavaScript, NodeJS, Deno, Shell, Python, TypeScript, Vite, React, React-Native, PostgreSQL, MongoDB, MariaDB, MySQL, GraphQL, Django, NumPy, Pandas, PyTorch, NLTK, Ruff, UV, Matlab

Resume: You can email me to ask for a resume.

Email: The email address can be found in the profile of this account.
by throw0101a | 2025-08-11 19:09:47+00:00
> It costs:

Not wrong, but given these algorithms are mostly used at setup, how much cost is actually being occurred compared to the entire session? Certainly if your sessions are short-lived then the 'overhead' of PQC/hybrid is higher, but I'd be curious to know the actually byte and energy costs over and above non-PQC/hybrid, i.e., how many bytes/joules for a non-PQC exchange and how many more by adding PQC. E.g.

> Unfortunately, many of the proposed post-quantum cryptographic primitives have significant drawbacks compared to existing mechanisms, in particular producing outputs that are much larger. For signatures, a state of the art classical signature scheme is Ed25519, which produces 64-byte signatures and 32-byte public keys, while for widely-used RSA-2048 the values are around 256 bytes for both. Compare this to the lowest security strength ML-DSA post-quantum signature scheme, which has signatures of 2,420 bytes (i.e., over 2kB!) and public keys that are also over a kB in size (1,312 bytes). For encryption, the equivalent would be comparing X25519 as a KEM (32-byte public keys and ciphertexts) with ML-KEM-512 (800-byte PK, 768-byte ciphertext).

* https://neilmadden.blog/2025/06/20/are-we-overthinking-post-...

"The impact of data-heavy, post-quantum TLS 1.3 on the Time-To-Last-Byte of real-world connections" (PDF):

* https://csrc.nist.gov/csrc/media/Events/2024/fifth-pqc-stand...

(And development time is also generally one-time.)
by gmerc | 2025-08-11 19:09:58+00:00
Ya, you know, I think when the CSO finally is let out of the broom closet where they got locked for voicing concerns about AI adoption, we're going to see a hell of a reckoning. Prompt injection into code agents is murderous, especially since it can be persisted.

https://www.linkedin.com/posts/georgzoeller_how-stupidly-eas...
by bastawhiz | 2025-08-11 19:10:03+00:00
> they want to implement generics to have more loosely typed code

That's a weird way to think about generics. Any class using generics effectively functions as a version of the class where the types are explicitly written out in all places. Instead of writing out one version of the class for every generic type, you write it out once and say which version you want to use at instantiation. You lose no safety, it's purely cosmetic and quality of life.
by warkdarrior | 2025-08-11 19:10:13+00:00
> The decline of the professional art critic is lamentable, but it also doesn't really seem like it should be a job in the first place.

What makes the professional role of "art critic" special that it should not be a job? Compare it with other professional roles: lawyer, software engineer, accountant, architect. They all involve understanding historical context and producing a professional opinion.
by ethagknight | 2025-08-11 19:10:19+00:00
Well, that press release was issued Jan 3 2025 by the incumbent appointed by the Biden regime. Whichever way you want to argue it... it's political.

The wikipedia article about then-US Attorney for DC includes this note:

"Under Graves, the US Attorney's Office declined to prosecute 67% of those arrested for crimes in DC in 2022, including 72% of misdemeanor arrests and 53% of felony arrests."

Crime is always down if you don't prosecute crime. Murder stats are the best to consider since those a harder (but not impossible) to fudge.

>>https://en.wikipedia.org/wiki/Matthew_M._Graves
by JohnBooty | 2025-08-11 19:10:39+00:00
As somebody who enjoys both watching and playing sports, I agree and I think that sports betting is so gross and harmful.

I have a question, though. What's up with the "sportsball" thing?

I mean, I'm very familiar with it. It just seems like it's always been used as a mildly derogatory term by people who really dislike sports and sports fans. What does it mean to you? No wrong answers.
by dnh44 | 2025-08-11 19:10:45+00:00
I suppose I'd define smaller as the LLM only having to read/write from/to less than 3 or 4 files to complete the task? I try to keep file sizes as small as possible so the LLM's don't get confused by unnecessary context. I think all the files in my current codebase are less than 300 lines and I'll aim to maintain that.
by scoofy | 2025-08-11 19:10:57+00:00
I mean the theory behind it is that they are effectively the same thing, it's just that the critic will have more explanatory power. The whole point is that you don't know what you don't know.

Most of this is based in movie reviews, since that is where I think critical reviews shine the most. Even if there is an algo that has perfect, zero variance with the consumer, there is still a genre/style/mood distinction that you will change from night to night. The algo is effectively a black box in terms of these extremely subtle mood variations, but a critic with zero opinion variance will -- ideally -- have a blurb about why the film is good, which should correspond to the ideal viewing setting and mood that the film ought to be consumed in.
by CysecTools | 2025-08-11 19:11:00+00:00
I didn’t set out to reinvent web crawling. I just wanted to learn Go. But halfway through, I realized I was building something fast enough, lean enough, and sharp enough that security researchers might actually want it in their toolkit.

Meet SpiderGo — a Golang-powered web crawler designed for security recon, bug bounty hunting, and asset discovery. It doesn’t try to be everything. It just focuses on:

• Speed — because time is money when you’re scanning • Targeted crawling with smart flags • Recon output that’s actually useful in an engagement • Bundled wordlist so you can start immediately

If you’ve ever been frustrated by bloated, slow crawlers, SpiderGo is… not that. I wrote it to be quick, portable, and zero-fuss.

I use it. My friends use it. Maybe you will too.
by withinboredom | 2025-08-11 19:11:14+00:00
I do this every time I find myself typing something I could get written up over or even fired for.

1. I'm usually too emotional to write out why I feel that way instead of saying what I feel.

2. I really don't like the person (or their idea) but I don't want to get fired over it.

Claude is really great at this: "Other person said X, I think it is stupid and they're a moron for suggesting this. Explain to them why this is a terrible idea or tell me I'm being an idiot."

Sometimes it tells me I'm being an idiot, sometimes it gives me nearly copy-pasta text that I can use and agree with.
by aidenn0 | 2025-08-11 19:11:20+00:00
I'm a former foster-parent, so have interacted with my local CWS system pretty heavily.

Don't forget that the system is made up of humans. Which social worker investigates (and how well socialized the parent is) can make a huge difference in when an intervention happens, and what the intervention is.

We had child that was removed on the very first report to CWS, after the social worker interviewed the mother and was not satisfied.

We also had a child that was removed only after the 17th report, made by a total of about half a dozen people (including every single preschool teacher), with all the reports being consistent with each other. The child was only removed because the mother was smoking meth when the CWS worker showed up. The social worker had shown up several times previously, but was satisfied after interviewing the mother.
by geon | 2025-08-11 19:11:51+00:00
Win98 was terrible. I used to reinstall it every month or so, as routine maintenance.

Win2k was so much better it's not even comparable.

XP had a bit of a rough start, but by sp3 it was a lot better than 2k.

I skipped the other windows-es until 10. It has been solid.
by wayne | 2025-08-11 19:11:54+00:00
It might be a fad, but the current trend in US public aviation is increasing premium cabins and premium revenue: https://simpleflying.com/why-us-carriers-doubling-down-premi...

This is the reason Delta and United and doing well right now and Southwest and the LCCs are struggling.

It wasn't true just a few years ago, but if this continues as a trend, I could see an airline sacrificing fuel efficiency for a dramatically improved onboard experience.
by jonahbenton | 2025-08-11 19:12:06+00:00
It really depends. Every non-trivial organization has strategic needs the satisfying of which extend into years-scoped timeframes. These needs are intended to be realized by initiatives, which can be broken down into programs and programs into projects. Projects will be order months, a program might be multiple projects in a year, initiatives likely span fiscal years.

So- in terms of having stuff that needs to be done that takes a year or more- yeah, every organization has those. Is it common for there to be one thing that one contractor works on all by themselves that spans a year- sure, less than it used to be, not uncommon, but it speaks to a certain tempo and/or oversight culture that one has to be careful about.

It would be useful for you to understand, from the higher level planning perspective the organization has- why would this be shaped and scheduled this way? Sometimes these things are little white elephant or skunkworks projects that an exec wants to get done but has to keep on the downlow...could be any number of things.

The reason to understand that stuff is because it kind of becomes a risk to you, because these kinds of unusually shaped things also get cancelled all the time, for all sorts of reasons. If you put all your eggs in this basket and then things change- whatever the language of your agreement, you're potentially left high and dry.

So- even if as you are discovering more and making plans and so forth and it all seems good, it's a year or more, makes sense for you alone to do it, etc- still, you want to break down the work into phases (project scoped units), and report on those phases and on the larger phase plan. What you don't want is someone 6 months in poking around being like- what the eff is this? 6 months delivering nothing? What are we doing here?
by kersplody | 2025-08-11 19:12:18+00:00
At least wikipedia has an out in the legislation by disabling content recommendation engines for UK users, this includes:

1. “You may be interested in…” search suggestions on the Wikipedia interface—these are algorithmic, content-based recommendations.

2. Editor suggestion tools that propose pages to edit, based on prior activity. Academic systems helping newcomers with article recommendations also qualify.

Most links within articles—like “See also” sections or hyperlinks—are static and curated by editors, not algorithmically chosen per user. That means they do not meet the recommender system definition.

The legislation text for reference:

"Category 1 threshold conditions 3.—(1) The Category 1 threshold conditions(10) are met by a regulated user-to-user service where, in respect of the user-to-user part of that service, it—

(a)(i)has an average number of monthly active United Kingdom users that exceeds 34 million, and

(ii)uses a content recommender system, or

(b)(i)has an average number of monthly active United Kingdom users that exceeds 7 million,

(ii)uses a content recommender system, and

(iii)provides a functionality for users to forward or share regulated user-generated content(11) on the service with other users of that service.

(2) In paragraph (1), a “content recommender system” means a system, used by the provider of a regulated user-to-user service in respect of the user-to-user part of that service, that uses algorithms which by means of machine learning or other techniques determines, or otherwise affects, the way in which regulated user-generated content of a user, whether alone or with other content, may be encountered by other users of the service. "