MurphyA/hacker-news huggingface dataset:
by tonetegeatinst | 2025-08-17 18:33:39+00:00
LLM training data is code....not code that is designed with security always in mind.

Hell a good amount of security bugs in programming are created due to how programmers seem to be so focused on creating a tool or product that they leave certain tasks behind. Dev Ops and secure coding practices should be part of the programmers job or at least being considered....but its not.

Instead we have dedicated people who do Dev Ops or security programming and patching.
by sdairs | 2025-08-17 18:33:56+00:00
Is the proposition in the OP not pretty much what you're suggesting in your blog? They're currently not using the query builder syntax, instead its pretty much "improving on SQL as strings" with a bunch of the other ORM-like benefits (type safety, autocomplete, etc.)

Perhaps saying "ORM" is a bit of a misnomer, but they're discussing the DX ergonomics of an ORM and acknowledging the exact challenges you describe
by drankl | 2025-08-17 18:34:31+00:00
Most forums and chat servers won't have to introduce age verification, because the content their users generate while participating in discussion doesn't need to be age-gated, and anything that would need to be (such as pornography) is off-topic and will be removed by moderators anyway.

This link may be of interest: https://www.mumsnet.com/talk/site_stuff/5383111-online-safet.... It's about how one of the UK's largest forums is complying with the OSA and why they are taking this approach.
by almostgotcaught | 2025-08-17 18:34:34+00:00
I think people have these kinds of thoughts (and then commit them to paper) because they're utterly flabbergasted that such things can exist - as if there's some kind of massive conspiracy by Big Enterprise that enables this even though both $ENTERPRISE and SMEs play in the exact same market (by definition).

Newsflash: yes small organizations are better solving small problems (like "small tool has broken feature X"). Everyone knows that and feels it "on their skin". But they cannot solve large/enormous problems. It's just physics: big problems -> big requirements. Think stuff along the lines of "getting to the moon" or "building the Chunnel". Myopic individuals, who are bound to only see and understand work within their own vicinity, necessarily will bemoan the existence of large organizations. This is why reading history is valuable - because it is indeed myopic.
by metadat | 2025-08-17 18:34:44+00:00
For anyone else who forgot this or is unfamiliar with why / how it "works":

> #define isNan(X) ((X) != (X))

> Works by exploiting a unique property of NaN (Not a Number) values in the IEEE-754 floating point standard: a NaN is not equal to itself. In other words, if you compare a floating-point variable to itself and the result is false ((X) != (X)(X)!=(X)), then X X is NaN.

Fantastic example, thank you @spyrja!
by xnoyzi | 2025-08-17 18:34:55+00:00
Had a really interesting call last week with someone who runs a high-volume cold email operation. He walked me through his workflow — how he scrapes, enriches, and personalizes at scale. But when we got to the tooling part, he paused and said:

“I love Clay, but I’m paying over $300/month just to use custom APIs. It feels crazy.”

That stuck with me.

As someone who’s been building tools for solo founders, that kind of friction hits a nerve. When a great workflow becomes too expensive or limiting, it kills momentum.

So I started experimenting. Nothing fancy, just trying to see if I could replicate the functionality he actually needed, without all the fluff.

Now there’s a scrappy little version up and running. It’s definitely not Clay. But it solves that one pain point, using your own APIs, easily.
by nklmilojevic | 2025-08-17 18:35:05+00:00
Sure thing!

Ingested logs 24h: 428 Mil Ingested bytes 24h: 625GB Inser req/s: 6k/s

8vCPU, 16GB mem. Running standard-rwo PVC on GCP.

We have a couple of projects like this with similar usage and similar machine sizing.

Still running vmlogs-single, and we will until we see a need to move to vmlogs-cluster version.
by kaffekaka | 2025-08-17 18:35:10+00:00
My personal view is that we humans are all too easily drawn into thinking "this would be a danger to other people, but I can handle it".

I believe that if you are in apsychological state such that the input from an LLM could pose a risk, you would also have a much reduced ability to detect and handle this, as an effect of your state.
by btbuildem | 2025-08-17 18:35:39+00:00
I think it's a perfect mirror of the corporate world, which in itself rewards and thrives on mediocrity. Mediocrity is safe and predictable.

Sure, let's hear the counter-example of the noble startup, taking massive risks to build The Coolest Thing. Like the enthusiastic wiggly sperms, one in a million succeeds -- and the consequences of initial success are to grow mediocre over time.

LinkedIn is marketing slop, aimed at the lowest common denominator, because that's the most numerous denomination of the walking wallet. Of course it is saturated with family friendly, inoffensive, endless streams of softcore corporate propaganda.
by trod1234 | 2025-08-17 18:36:19+00:00
The neglect I mention occurs because they perpetuate the outcome they seek to avoid, largely without knowledge of the true factors that lead to wealth as a group/nation in the first place which are codified in some older books.

You make the same assumptive leaps, which are based in fallacy, that cause this route to be a giant circle without agency/choice.

Your, "Tragedy of the commons" implies there's nothing you can do to change the world unless you are at the top of government, and that is both wrong, and the perspective of a demoralized hopeless person.

Actions matter, and you can do quite a lot at the local level by building strong community, and community is not government.
by woadwarrior01 | 2025-08-17 18:36:56+00:00
The Python 3.13 virtualenv you're bundling with the app is 357MB, while the ONNX model is only 90.4MB.

onnxruntime has Swift bindings[1], consider using that. Or better yet use CoreML. You'll also be able to support x86 Macs with either of those.

[1]: https://github.com/microsoft/onnxruntime-swift-package-manag...
by shazbotter | 2025-08-17 18:37:09+00:00
It really does not matter. Biden didn't meaningfully solve anything (and if anything, he made Trump's ascendency easier). Harris would not have solved things either. She'd continue to empower corporations and the wealthy, just like Biden, Trump, Obama, Bush, and Clinton.

You know what does help people? Community building. Feeding people. Organizing workplaces. Forest conservation. Building housing. Forming tenant unions. Organizing anti-ICE demonstrations. Etc.

Actions solve problems commensurate with the time and effort it takes to perform. Voting takes very little effort, and solves very few problems. Community organizing takes a lot of effort and solves lots of problems.

Vote for whomever you want, I'm not going to demonize someone for voting for Harris. But like, that should be the smallest contribution you make by at least two or three orders of magnitude.
by dingaling | 2025-08-17 18:37:41+00:00
Yes, especially in work where information is hard to find and when someone sends a URL in an email it's like gold dust. I spent 15 minutes last week trying many permutations of search terms to find our internal job site and in the end gave up and just asked someone else if they had the link.

Less so on the public web because search engines are so effective.
by hemabe | 2025-08-17 18:38:16+00:00
Germans have an average IQ of around 100 (it used to be 105 before immigration). Turks have an IQ of 85-90. If you are not biased, you can clearly see these differences in everyday life. With a few exceptions, the intellectual achievements of fellow citizens of Turkish origin tend to be rather low. The situation is different when you look at migrants from high-IQ countries, such as China (who have an IQ of 104). These children often achieve amazing results, for example in the International Science Olympiads. The US is actually only able to achieve top places in the Math Olympiad thanks to Chinese migrants. Almost the entire US team consists of people with a Chinese background. Look at this picture of the US-Team for 2023 if you want to know, what I mean: https://maa.org/wp-content/uploads/2024/05/Screen-Shot-2024-...
by WalterBright | 2025-08-17 18:38:27+00:00
A couple things argue against widespread literacy.

1. The khipu appear to be slow and complex to make. It seems unlikely they'd be used to jot down thoughts, and so there wouldn't be that many. Compare with clay tablets, that clearly could be inscribed quickly and easily with a stick.

2. Easily erasing all knowledge of them argues against widespread literacy.
by jauntywundrkind | 2025-08-17 18:38:48+00:00
The tearing down what this admin dubs the "green new scam" is hugely responsible for this. De-funding & clawing back great investments towards the future, investments that would both power America and fuel our industrial base, drive huge economic growth.

It's not just bad for energy generetion either! China is also building a huge war chest of IP patents. Its incredibly sad to see this un-forced error, this sabotage of America, this destruction of our leadership. To walk back to a fake Great Again idiocracy obsessed only with doing the opposite of the liberals.
by TrackerFF | 2025-08-17 18:40:43+00:00
There used to be a time when you needed to be very skilled woodworker in order to make nice cabinets. There still are, but the number of machine / CNC made cabinets outnumber artisanal 100% hand-made cabinets by some incredible number. For every masterpiece made by a Japanese cabinet maker, imagine how many Ikea cabinets there are out there...

And that's how I believe software engineering will end up. Hand crafted code will still be a thing, written by very skilled developers...but it will be a small niche market, where there's little (to no) economic incentives to keep doing it the craftmanship way.

It is a brave new world. We really don't know if future talent will learn the craft like old talent did.
by tyoma | 2025-08-17 18:40:46+00:00
> Again, don't put private health information into ChatGPT. I get the temptation, but don't do it. I'm not trying to gatekeep healthcare, but we can't trust these models to count the number of b's in blueberry consistently. If we can't trust them to do something trivial like that, can we really trust them with life-critical conversations like what happens when you're in crisis or to accurately interpret a cancer screening?

I did just this during some medical emergencies recently and ChatGPT (o3 model) did a fantastic job.

It was accurately able to give differential diagnoses that the human doctors were thinking about, accurately able to predict the tests they’d run and gave me a useful questions to ask.

It was also always available, not judgmental and you could ask it to talk in depth about conditions and possibilities without it having to rush out of the room to see another patient.
by guilhermeup256 | 2025-08-17 18:41:59+00:00
I'm building a visual search system for fashion that automatically detects clothing items in any image and finds similar products in your catalog.

*Technical approach:* - 8-service microservices architecture with Docker Compose - GPU-accelerated ML service using NVIDIA Docker runtime - YOLOv8 for object detection, CLIP for embeddings + structured labeling - Multi-storage strategy: PostgreSQL (metadata), ChromaDB (vectors), MinIO S3 (images) - Async processing with Celery workers + Redis broker + Flower monitoring - Traefik reverse proxy with automatic service discovery + health checks

*Key insight:* Most fashion visual search requires manual product photography. This system works with any image - street style, social media posts, etc. Upload a photo of someone wearing clothes, and it automatically crops and indexes each item.

*Development focus:* - Separated ML inference into stateless service for better scaling - Used async job queues to keep API responsive during processing - Vector embeddings stored in ChromaDB for fast similarity search - Everything containerized and *runs completely locally* - no external APIs

*Current state:* Core functionality works, but still optimizing crop quality and fine-tuning the ML pipeline. Anyone can clone and run `docker-compose up` to try it.

*Interesting challenges I'm working on:* - Handling variable image quality and lighting conditions - Balancing detection accuracy vs processing speed - Designing async workflows for multi-step ML pipelines - Service orchestration and dependency management

Would love feedback from the community, especially on approaches to crop quality filtering or experiences with CLIP fine-tuning for domain-specific applications.
by jedberg | 2025-08-17 18:42:46+00:00
> Now I’m wondering if I should hold on to them and stop paying ahead

If you want to be purely logical about it, the only thing that matters is the interest rate. Can you get higher returns investing the money elsewhere? Then invest it elsewhere.

My student loan was at 0.2% (yes, below 1). I made the minimum payment every month for 15 years. I was actually sad when it ended. I wish I could have added to the balance!

Also one other thing to remember, a student loan doesn't have collateral. They can't take your degree back if you don't pay. They can garnish your wage, but that's about it.
by pengaru | 2025-08-17 18:42:55+00:00
Of course they're not paying their student debt. When the federal government of the moment is using student loan forgiveness to try bribe reelection votes, it sends a pretty strong signal that this shit is frivolous.

As a taxpayer who has never taken on loans of any kind, I find this all quite irritating. You take on debt, you pay the debt, don't turn my tax dollars into your negligence subsidy.
by theyarethey | 2025-08-17 18:43:36+00:00
> The[sic] got equity and loans for the bailout, and made a lot of profit in the end

Your running to defend the bailout in this way reveals your bias.

The “they” in your defense is the government, who issued the loans, but the money was yours and mine. That is, they were public funds, but we, the public, failed to get anything tangibly out of this “profit”.

Quite the opposite, really.

The public took a great deal of the brunt of the failure of the economic tools these banks dreamed up in the form of foreclosures, wherein members of the public completely lost the only financial asset many possess.
by strstr | 2025-08-17 18:44:02+00:00
Cheating will slowly look more and more like trying to hack your own machine.

Secure Boot+TPM combined with decent firmware will make cheating a lot harder. If the firmware ensures random devices don’t get BME set before the IOMMU is properly, attestably, configured, you are basically now stuck looking for bugs in the TPM and UEFI if you want to shove yourself beneath the OS unnoticed. These are full of bugs, so that will work for a while, until it doesn’t.

Popping windows will probably work for some time, but HVCI will make this a pain once ubiquitously required.

And you have to do all of this while also not being detected for aberrant behavior. Eventually, the analog hole might end up being easier, lol.
by mc32 | 2025-08-17 18:44:03+00:00
That would make more sense if if there weren't locals who needed intensive care. We have many, many people who fall through the cracks. Why do they take second place to people 5,000+ miles away? It's cool that they want to be charitable and nice; are their own people not worthwhile helping, if not why not?

In addition, if they have all the money and want to help both locals and foreigners, they could do it cheaper by financing this care at places closer to where these people live.
by aogaili | 2025-08-17 18:44:26+00:00
AI will hopefully humble so of the people I work with.

The people who understand nothing about business, yet you can't talk to because they think gifted for being able to write instructions to a computer.

The people spin out new frameworks every day and make a clusterf*ck of hyped and over-engineered frameworks.

The people who took a few courses and went into programming for money..

I went into software because I enjoyed creating (coding was a means to an end), and I always thought coding was the easiest part of software development. But when I get into corporate work, I find people who preach code like religion and don't even care about what is being produced, spend thousands of hours debating syntax. What a waste of life, I knew they were stupid, and AI made sure they knew as well.
by kcplate | 2025-08-17 18:45:09+00:00
Sure, I’d probably go the extra step of sorting out any applicant who advertised their MENSA membership…but that’s just me finding those folks pretty insufferable.

But back to the point it’s really more about if the tool for the job can’t do the job…they are the wrong tool for the job. Tool of course being device, AI, or…human.
by AlecSchueler | 2025-08-17 18:45:35+00:00
> No, I don't buy this "I'm just making a neutral observation" schtick

You're welcome believe what you like but I'm not sure why I should engage with you if you refuse to believe what I assert about my own position and if you insist on re-framing my words with an accusatory tone that wasn't there.

I believe unconscious biases can and do have harmful effects yes. But everyone has them and it's common to let them influence our work. There's no shame in it and I certainly didn't make any value judgement against the author of this piece.

> The housing market in SE England sucks if you're young and work for a living; doesn't matter if gay or straight, man or woman

Similarly, I haven't made any statement remotely to the contrary. This is a strawman.

> I reject the notion that we can't talk about problems unless literally every last little niche demographic is affected.

And once again: this is not a notion that could be reasonably construed from what I said above.

I hope you feel better after getting your emotions out but I would encourage you to re-read this thread tomorrow and ask yourself how much you were projecting and perceived qualm onto me.

I hope you have a good night in any case. Goodbye
by esseph | 2025-08-17 18:45:41+00:00
Rate limiting the CPE doesn't seem to really impact the buffer queue depth on the 100G upstream switch feeding the 1G customer port. In addition, sticking them on something like 90% customer speed plan or 90% port speed also doesn't help, and in fact with many customers, they are now pissed because they never hit their plan speeds in a speed test.

Something I have always done I actually provision to account for packet overhead, so you might speed 2-3% higher speeds than your plan limit in a speed test, but psychologically the customer is getting more than they paid for, and most seem to be very happy about that.

But, rate limits were already in place long before anything about queue depth was even discussed, so that was nothing new. CAKE OTOH has had a very noticable impact on the customer experience, when their kids XBox can download that 250G update without impacting the voip call or wifi offloading another member of the household is on. Alternatively, that same gamer can play while Mom is downloading something near max throughput without having latency spikes and packet loss.

Yes, you're on to something about the customer experience in general that I'm tracking down myself. Orb is also trying to get a look, but I'm not a fan so far of that tool/platform https://orb.net/
by m4nu3l | 2025-08-17 18:46:27+00:00
> So if tier one needs something from tier two I don't think they need to even ask

You mean stealing? I'm assuming no stealing.

> But this also means probably there will be no way way for tier two to extract any of the resources which tier one needs at all bc the marginal cost is determined by tier one

If someone from tier 2 owns an oil field, tier 1 has to pay them to get it at a price that is higher than what the tier 2 person values it, so at the end of the transaction, they would have both a positive return. The price is not determined by tier 1 alone.

If tier 1 decides instead to buy the oil, then again, they'd have to pay for it.

Of course, in both these scenarios, this might make the oil price increase. So other people from tier 2 would find it harder to buy oil, but the person in tier 2 owning the field would make a lot of money, so overall, tier 2 wouldn't be poorer.

If natural resources are concentrated in some small subset of people from tier 2, then yes, those would become richer while having less purchasing power for oil.

However, as I mentioned in another comment, the value of natural resources is only a small fraction of that of goods and services.

And this is still the worst-case, unlikely scenario.
by therein | 2025-08-17 18:46:34+00:00
It is an analogy that only passes the initial glance. Especially since the CNC made cabinets are not full of design flaws. Your analogy would only make sense if these CNC cabinets were generated by CNC AI that may or may not follow the sensibilities of a human designer. Or if the inexperienced carpenters using CNC machines just described the design verbally to the CNC machine instead of carefully encoding their design into gcode.

Clearly you don't value the process of coding if you think it is analogous to a carpenter manually carving the details of a design that's above the process of building it. It is not a good analogy, at all.
by mkoryak | 2025-08-17 18:46:39+00:00
I find that AI is really good at the easy stuff like writing tests for simple class without too many dependencies that we have all written hundreds of times.

Things go wrong as soon as I ask the AI to write something that I don't fully grasp, like some canvas code that involves choosing control points and clipping curves.

I currently use AI as a tool that writes code I could write myself. AI does it faster.

If I need to solve a problem in a domain that I haven't mastered, I never let the AI drive. I might ask some questions, but only if I can be sure that I'll be able to spot an incorrect hallucinated answer.

I've had pretty good luck asking AI to write code to exacting specifications, though at some point it's faster to just do it yourself
by trod1234 | 2025-08-17 18:46:44+00:00
There will be people that cheat regardless of what any game company can do. Racing to the edge is not the way to stop this.

If you haven't noticed, these solutions create the platform to both test, and control your digital life without your knowledge following a classic surrogate/hegelian pattern. How much do you trust the credibility of entities behind these game companies. Would you trust them with your life?

This should be carefully considered food for thought for anyone that values their future.
by JimmyBuckets | 2025-08-17 18:47:28+00:00
I agree with some of what you have said. But I feel that you are moving the goalposts slightly. I understood the discussion to be on the origin of morality. Implementing its upkeep is a separate issue.

However, to respond to your point:

I do agree that rules are an important component. But I would argue that rules only work insofar as culture supports them, and indeed may only be a codification of the underlying values already present. t Thus I would argue that the culture in which those rules are embedded is what is of importance. And thus we come back to love.