MurphyA/hacker-news huggingface dataset:
by jeroenhd | 2025-08-19 16:27:10+00:00
My guess is that they're fine with WebBluetooth/USB/FileSystem/etc. because the code for the new standard is recent and sticks with modern security sensibilities.

XSLT (and basically anything else that existed when HTML5 turned ten years old) is old code using old quality standards and old APIs that still need to be maintained. Browsers can rewrite them to be all new and modern, but it's a job very few people are interested in (and Google's internal structure heavily prioritizes developing new things over maintaining old stuff).

Nobody is making a promotion by modernizing the XSLT parser. Very few people even use XSLT in their day to day, and the biggest product of the spec is a competitor to at least three of the four major browser manufacturers.

XSLT is an example of exciting tech that failed. WebSerial is exciting tech that can still prove itself somehow.

The corporate installations still doing XSLT will get stuck running an LTS browser like they did with IE11 and the many now failed strains of technology that still supports (anyone remember ActiveX?).
by the_mitsuhiko | 2025-08-19 16:27:15+00:00
Other then avoiding a syscall on an uncontended path they are not really similar. A benaphore is just a semaphore with an extra atomic counter in userspace to count waiters.

You can’t really use semaphores to implement things that can’t mutexes or semaphores so the overall utility is limited compare to futexes that you can use for condvars and other primitives too.
by fngjdflmdflg | 2025-08-19 16:27:18+00:00
I kind of agree that little used,[0] non-web-like features is fair to be considered for removal. However I wish they didn't hide behind security vulnerabilities as the reason as that clearly wasn't it. The author didn't even bother to look if a memory safe package existed. "We're removing this for your own good" is the worst way to go about it but he still doubles down on this idea later in the thread.

[0] ~0.001% usage according to one post there
by pjmlp | 2025-08-19 16:27:32+00:00
Another fellow soul!

My first rewrite of my site, as I moved it away from Yahoo, into my own domain was also in XSLT/XML.

Eventually I got tired of keeping it that way, and rewrite the parsing and HTML generation into PHP, but kept the site content in XML, to this day.

Every now and then I think about rewriting it, but I rather do native development outside work, and don't suffer from either PHP nor XML allergies.

Doing declarative programming in XSLT was cool though.
by overfeed | 2025-08-19 16:27:43+00:00
I love Ted Chiang and re-read his stories every few years. Most of author's criticisms arise from their refusal to accept that Chiang's stories are mostly science fantasy[1][2], and not some third option. Most/all of the stories primarily focus on characters and relationships on the macro and micro.

In each story, the gimmick(tm) is thoroughly examined and extrapolated in an internally-consistant way, but that is excellent world-building, and independent of genre.

1. As exemplified by Tower of Babylon which wouldn't be out of place in a fantasy anthology.

2. Understand is probably his number 2 "hardest" SF story. The way it is told is closer to a character study on the effects of human super-intelligence (unbelievably authored in 1991). Exhalation is no. 1, and it's focus is still very "soft" SF.
by StopDisinfo910 | 2025-08-19 16:27:57+00:00
> It's also pretty easy to emit, "I didn't find what I'm looking for under $ELEMENT" while parsing the file, or "I expected a string but I got $SOMETHING at element $ELEMENT".

I think we are actually in agreement. You could do exactly the same with a binary format without having to deal with the cumbersomeness of xml which is my point.

You are already treating xml like one writing errors in your own parsers and "sealing" it.

What’s the added value of xml then?
Show HN: My developer portfolio and blog built with Next.js
by prateekkarki | 2025-08-19 16:29:28+00:00
I’ve been working on my developer portfolio and blog, and I finally have it live. It’s built with Next.js + TypeScript + Tailwind, and I wanted to share it here and get some feedback from the community.

Features: Projects showcase with live links and descriptions. Blog section powered by Markdown/MDX (easy to add posts). SEO-friendly with meta tags, sitemap, and Open Graph images. Responsive design (works great on mobile and desktop). Custom theming with twin.macro + styled components. Downloadable résumé (with a simple access modal).

I’d love to hear your thoughts — whether it’s on the design, UX, performance, or content. Constructive criticism is super welcome.
Show HN: Built a memory layer that stops AI agents from forgetting everything
by pi_22by7 | 2025-08-19 16:29:45+00:00
Tired of AI coding tools that forget everything between sessions? Every time I open a new chat with Claude or fire up Copilot, I'm back to square one explaining my codebase structure.

So I built something to fix this. It's called In Memoria. Its an MCP server that gives AI tools persistent memory. Instead of starting fresh every conversation, the AI remembers your coding patterns, architectural decisions, and all the context you've built up.

The setup is dead simple: `npx in-memoria server` then connect your AI tool. No accounts, no data leaves your machine.

Under the hood it's TypeScript + Rust with tree-sitter for parsing and vector storage for semantic search. Supports JavaScript/TypeScript, Python, and Rust so far.

It originally started as a documentation tool but had a realization - AI doesn't need better docs, it needs to remember stuff. Spent the last few months rebuilding it from scratch as this memory layer.

It's working pretty well for me but curious what others think, especially about the pattern learning part. What languages would you want supported next?

Code: https://github.com/pi22by7/In-Memoria
by alexc05 | 2025-08-19 16:30:06+00:00
100% yes! There've been some other writers who've been doing parallel work around that in the last couple weeks.

https://www.dbreunig.com/2025/06/10/let-the-model-write-the-... is an example.

You can see the hands on results in this hugging face branch I was messing around in:

here is where I tell the LLM to generate prompts for me based on research so far

https://github.com/AlexChesser/transformers/blob/personal/vi...

here is the prompts that produced:

https://github.com/AlexChesser/transformers/tree/personal/vi...

and here is the result of those prompts:

https://github.com/AlexChesser/transformers/tree/personal/vi.... (also look at the diagram folders etc..)
by pyrale | 2025-08-19 16:30:15+00:00
More than just counter-strike, HL's modding system spawned a generation of new games: team fortress, day of defeat, Sven co-op, echoes, ricochet, etc. Several of them were good enough for Valve to ship them into later editions of HL, and Valve's experience shipping other people's games definitely helped them make Steam what it is today.
by davismartens | 2025-08-19 16:30:41+00:00
I’ve been thinking a lot about how Software has always required us to adapt to the UIs and workflows someone else defined as “the right way”. Every CRM I’ve ever used, assumed I’d spend hours inside its UI, filling out forms and updating fields. But the truth is, I only do that because it someone designed it that way. There is no value in the UI, in fact I hate it, but I have do it anyway, because it's the only way to get the answers I need.

We'll I just shipped something different: a CRM that lives in your inbox.

https://chuff.co is built around the idea that the next generation of apps should meet us where we already work — in emails, in meetings, in messages — and quietly take care of the busy work in the background. You build your own district workflows as "agents", and you can include them in conversations to complete tasks (starting with Email). For example, you could forward an invoice and say, "Make sure this invoice is correct, then update QuickBooks and let Gary from finance know so he can approve".

These aren't chatbots, but virtual teammates that complete long tasks in the background asynchronously.

Yes you may still want to dive into the UI, but the point is that you don't have to.

Do you think this could be valuable or is Email as an interaction mode AI a terrible idea?
by KronisLV | 2025-08-19 16:30:51+00:00
> And your response is surely “Well of course, that would be nice, but it’s not as simple as that. Here are constraints X Y and Z that make a trivial solution infeasible.”

Sometimes it’s “It was made many months/years ago in circumstances and with views that no longer seem to apply (possibly by people no longer there). Sadly, the cost of switching to something else would be significant and nobody wants to take on the risk of rewriting it because it works.”

It depends.
by lucb1e | 2025-08-19 16:30:53+00:00
How do we feel about this concern in general? Not just specific to XSLTs

> my main concern is for the “long tail” of the web—there's lots of vital information only available on random university/personal websites last updated before 2005

It's a strong argument for me because I run a lot of old webpages that continue to 'just work', as well as regularly getting value out of other people's old pages. HTML and JS have always been backwards compatible so far, or at least close enough that you get away with slapping a TLS certificate onto the webserver

But I also see that we can't keep support for every old thing indefinitely. See Flash. People make emulators like Ruffle that work impressively well to play a nostalgic game or use a website on the Internet Archive whose main menu (guilty as charged) was a Flash widget. Is that the way we should go with this, emulators? Or a dedicated browser that still gets security updates, but is intended to only view old documents, the way that we see slide film material today? Or some other way?
by kg | 2025-08-19 16:31:53+00:00
Yes. That is exactly how web standards work historically. If something will break 0.1% of the web it isn't done unless there are really really strong reasons to do it anyway. I personally watched lots of things get bounced due to their impact on a very small % of all websites.

This is part of why web standards processes need to be very conservative about what's added to the web, and part of why a small vocal contingent of web people are angry that Google keeps adding all sorts of weird stuff to the platform. Useful weird stuff, but regardless.
by anal_reactor | 2025-08-19 16:32:19+00:00
I am a very direct person, and conversations with me often include very personal topics. I've noticed that at the beginning yes, this attracts at least some people who want to have serious conversations, but after some time it simply creates a new culture with new set of rules where you wear a different kind of mask. Everyone claims to crave authenticity, but when actually faced with it, most people back off.
by jcims | 2025-08-19 16:32:33+00:00
You could actually build a self-contained unit with a raspberry pi and a rtlsdr based receiver. They do a great job picking up ADSB directly from aircraft 100+ miles away.

You'd just need to write some glue code to take the ADSB streams from a given plane (could pick based on area or strongest signal or whatever) and convert that to alt/az from your reference frame to feed the motor controllers for tracking. Your mount would clearly be adequate for optical tracking so you'd want to add some smoothing and likely some kind of tracking corrections/trim but you'd be close right off the bat.
by ben_w | 2025-08-19 16:32:57+00:00
From the junior devs I've seen? Even GPT-4 is better than 80% of junior devs. This is not to say "amazeballs", this is the lowest bar where someone actually gets paid.

Those juniors quickly stop being juniors, but while they are juniors, GPT-4 passes this minimal-chargeable-bar.

> What's the benefit of over-anthropomorphizing a hammer?

I go with what (IIRC) @TeMPOraL says on occasion: anthropomorphising them alerts you to the categories of error to expect, that you need to mitigate.

(This is separate to "why do people anthropomorphise this hammer?", to which the answer is IMO "this hammer loudly anthropomorphises itself whenever anyone so much as touches it").
by marcusb | 2025-08-19 16:33:11+00:00
Sure, but the author publishes their email address on the main dnsmasq page:

Contact. There is a dnsmasq mailing list at http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss which should be the first location for queries, bugreports, suggestions etc. The list is mirrored, with a search facility, at https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/. You can contact me at simon@thekelleys.org.uk.
by 93po | 2025-08-19 16:33:52+00:00
When I see "reps from every browser agree" my bullshit alarm immediately goes off. Does it include unanimous support from browser projects that are either:

1. not trillion dollar tech companies

or

2. not 99% funded from a trillion dollar tech company.

I have long suspected that Google gives so much money to Mozilla both for the default search option, but also for massive indirect control to deliberately cripple Mozilla in insidious ways to massively reduce Firefox's marketshare. And I have long predicted that Google is going to make the rate of change needed in web standards so high that orgs like Mozilla can't keep up and then implode/become unusable.
by garaetjjte | 2025-08-19 16:34:51+00:00
> Many people won’t worry about crashed threads, as they often will crash the whole program. However, you can catch the signal a crash generates and keep the overall process from terminating.

That doesn't help if the entire process dies for any reason and you want to clean up the locks. Solution to that is called "robust" locks. You can register list of held futexes with the kernel using sys_set_robust_list, and when the thread dies kernel for each entry will set a specific bit and wake waiter if there's one.
by lucb1e | 2025-08-19 16:34:59+00:00
Huh? I mainly see official government documents as annoying PDFs. Thankfully someone had the bright idea to turn the national law's text into a proper webpage and not use an image-like format for that. (I think regional governments also publish laws as PDF though.) Double checking now, yes: that's definitely HTML and not a transformed XML

Which government or governmental organizations are you talking about?
by __turbobrew__ | 2025-08-19 16:35:14+00:00
I consume very little meat, and when I do it is either because someone serves me meat at a meal or occasionally I will buy some meat from my local butcher which sources their meat from local free range farms.

Meat consumption is also not a binary decision, you can consume 10% of the meat you currently do and reduce the environmental side effects caused by your meat consumption by 90%. Furthermore, you can consume meat that comes from small scale local sustainable sources to further reduce your footprint.

It is the same deal with eggs, I don’t buy factory eggs, I buy them from my local farmer who has free range chickens. Sure, eggs are $8/dozen, but that is the real cost of eggs which do not preclude animal suffering and unsustainable farming practices.

My point is maybe the solution to the meat supply issues is to consume less meat, and consume meat from more sustainable sources. It is almost impossible for western society to grasp that maybe the solution to sustainability problems is to align their consumption with the rest of the world instead of turning to technology to solve all their problems. It is the same with so many other things like water management where the solution seems to be to dam more rivers and suck more acquifers dry instead of maybe not trying to grow grass and cedar trees in a desert.
by Ukv | 2025-08-19 16:35:18+00:00
> Why would the GDPR even describe consent and consent in relations to contract, then?

Freely given consent is a lawful basis, allowing for processing even if it's not necessary for legal/contractual reasons that would qualify the processing for another basis (or a mix of necessary and unecessary).

But here they're clearly not meeting the "allow separate consent to be given to different personal data processing operations" requirement, and if they only met the second requirement (can't make performance of contract dependant on the consent to processing beyond what's necessary) by nature of all of their processing being necessary (which I feel is highly doubtful) then it seems like they would've already been covered by the "processing is necessary for the performance of a contract" basis. Though as before I'm not a lawyer.

> That's an obviously disingenuous interpretation of my point.

Necessity for the performance of a contract is a lawful basis for processing under the GDPR, and to my understanding you're suggesting "necessity for the performance of a contract" should be interpreted loosely to include a kind of "financial necessity" that permits selling personnal data to adtech companies.

To me it seems like that same justification could be used for any selling of personal of data (maybe I go too far by saying any processing, since it wouldn't necessarily justify non-commercial processing). If you don't think that's a consequence of your interpretation, I'd be interested to hear why.

> This implies a right to access commercial websites for free, which cannot be reasonable, or only a choice between no access and payment, which also cannot be reasonable.

Websites can use most forms of monetization they always have - just not selling of personal data (unless the user freely gives consent). Regular ads, selling an ad-free version, upsell nags, all the badges/superchats/cosmetics/etc. are all still fine.
by protimewaster | 2025-08-19 16:35:33+00:00
Yeah, that's fair. It was a completely stupid requirement from the association, even when SGX was available in consumer chips. And it was made even stupider by the fact that they seem to just be content to leave UHD blu-rays in limbo instead of coming up with an alternative that allows them to be played on newer hardware.

Hell, the people working on disc ripping software have been working harder to find ways to play the discs on modern hardware than the Blu-ray Disc Association has. The only option is to use unauthorized software to play the discs on modern AMD and Intel boxes, and that's the solution I guess?
by tetromino_ | 2025-08-19 16:35:47+00:00
They are not talking about pulling in Chromium on a microcontroller. Their web server is on a microcontroller, so they want to minimize server side CPU usage and force the browser to do their XSLT transformation.

Since it's a microcontroller, modifying that server and pushing the firmware update to users is probably also a pain.

Unusual use case, but an reasonable one.
by const_cast | 2025-08-19 16:36:06+00:00
systemd, the project, isn't a binary. Its dozens of binaries. It can't have scope creep because that's impossible - they're literally dozens of separate things.

We call that the unix principle, lol.

Saying systemd has scope creep is like saying GNU has scope creep because they have a compiler and a text editor. Makes no fucking sense.

I also don't consider a dependency on dbus "scope creep". It has to communicate over IPC - okay, don't reinvent the wheel, just use dbus. Every program ever supports dbus if it has a public API over IPC. Sorry if that bothers you.

And sure, maybe OpenRC is just as simple as systemd, but the reality is every distro chose systemd and that's that, and for MOST of them they switched from primarily scripts to unit files.

That is a HUGE reduction in complexity. HUGE.
by johnwheeler | 2025-08-19 16:36:18+00:00
I blame Sam Altman with all his hype that’s he’s slowly trying to backtrack and change his image on (cozying up to Ives, calling AI a bubble, Interviews with his brother designed to make him look more personable). His dystopian visions of basic income and $20K AI agents are mostly to blame.

He was the poster boy for all this. I don’t know how many times I’ve quit ChatGPT and on the retention form I say it is because I don’t like or trust Sam Altman. (I do like to try the tech, but I want Anthropic or Google to win)

I think he took a real Ryan Holiday type marketing approach, and it was the most successful in history. The guy is a genius in many many ways obviously. But I def don’t like the way he makes me feel.
by supernetworks | 2025-08-19 16:36:31+00:00
A particularly tricky exploit in the linux futex implementation from 2014, by Pinkie Pie, https://issues.chromium.org/issues/40079619

"The requeue-once rule is enforced by only allowing requeueing to the futex previously passed to futex_wait_requeue_pi as uaddr2, so it's not possible to requeue from A to B, then from B to C - but it is possible to requeue from B to B.

When this happens, if (!q.rt_waiter) passes, so rt_mutex_finish_proxy_lock is never called. (Also, AFAIK, free_pi_state is never called, which is true even without this weird requeue; in the case where futex_requeue calls requeue_pi_wake_futex directly, pi_state will sit around until it gets cleaned up in exit_pi_state_list when the thread exits. This is not a vulnerability.) futex_wait_requeue_pi exits, and various pointers to rt_waiter become dangling. "
by LegionMammal978 | 2025-08-19 16:37:00+00:00
There's ways to reduce attack surface short of tearing out support. Such as, for instance, taking one of those alleged JS polyfills and plugging it into the browser, in place of all the C++. But if attack surface is your sole concern, then one of those options sounds much easier than the other, and also ever-so-slightly superior.

In any case, there's no limit on how far one can disregard compatibility in the name of security. Just look at the situation on Apple OSes, where developers are kept on a constant treadmill to update their programs to the latest APIs. I'd rather not have everything trend in that direction, even if it means keeping shims and polyfills that aren't totally necessary for modern users.
by ongy | 2025-08-19 16:37:03+00:00
I do. That's why I have a browser render it to a format that makes sense for human consumption.

Granted, html actually makes sense in the xml-ish (I don't remember if it's technically compliant), since it weaves formatting into semantically uninterrupted text.

If that's not the case, I don't see a real benefit to use XML over anything sane (not yaml... Binary formats depending on use case)
Warp sends a terminal session to LLM without user consent
by ykurtov | 2025-08-19 16:37:32+00:00
Wonder how being used feels like? One way to experience that is to discover that your terminal silently started to send command outputs to LLMs.

Today, I got an LLM suggestion on how to fix a syntactic error after following an attempt to run a test.

So, I went on to Warp's Discord to ask what's going on, and sure enough, their "Friendly support bot" and I discovered that.

> Warp has introduced features like Prompt Suggestions and Next Command that use LLMs to provide contextual suggestions. These features are part of Warp's Active AI system, which proactively recommends fixes and next actions based on your terminal session, including errors, inputs, and outputs.

"Proactively" here also means without explicit user consent.

I did enjoy Warp, but that breach of trust is so enormous I'm removing it just now.

This tells volumes about ethics and what's important.

Ref: https://docs.warp.dev/agents/active-ai
by bangaladore | 2025-08-19 16:38:08+00:00
I'd disagree for a couple reasons:

1. We in English can mean different things, from you and I to a broader group. Focusing only on that word without addressing the actual point comes off as a language correction.

2. The original comment made several claims about degradation, pack engineering, and industry history. Ignoring those to focus only on wording misses the main discussion. If the responder focused on a given claim that they refute, that's perfectly fine. They didn't.