MurphyA/hacker-news huggingface dataset:
by doomslice | 2025-08-20 11:37:36+00:00
Let's say you have 100000 documents in your index that match your query but only 10 of them the user has access to:

A basic implementation will return the top, let's say 1000, documents and then do the more expensive access check on each of them. Most of the time, you've now eliminated all of your search results.

Your search must be access aware to do a reasonable job of pre-filtering the content to documents the user has access to, at which point you then can apply post-filtering with the "100% sure" access check.
by timbit42 | 2025-08-20 11:38:27+00:00
My Prius is also a 2006 but with only 194,000 kms. The first battery module failed 21 months ago. I bought a used one on eBay for $35 and it's been running perfectly fine ever since. I keep it undercoated but the body is going to go before anything else because we salt our roads in the winter.
by Alifatisk | 2025-08-20 11:38:30+00:00
I recall something similar statement and I think it was from the YJIT team, they suggested that more and more people write pure Ruby rather than using C extensions because the YJIT compiler cannot see C code, it's like a black box to it, so it cannot optimize it further. Which means that in practical examples, YJIT has been able to optimize pure Ruby code to the extent that it in some cases not only beat the C extension but also surpassed it

More Ruby code means more room for optimizations that the team can identify and add to the compiler
by criley2 | 2025-08-20 11:38:38+00:00
Your prompt is pretty basic. Both Claude Code and Github Copilot having similar features. Claude Code has `init` which has a lot of special sauce in the prompt to improve the CLAUDE.md. And github copilot added a self-documenting prompt as well that runs on new repos, and you can see their prompt here https://docs.github.com/en/copilot/how-tos/configure-custom-...

Reading their prompt gives ideas on how you can improve yours.
by mitcht | 2025-08-20 11:39:11+00:00
Someone should have a Google Earth sort of map of all of the underground sites like Derinkuyu, Cappadocia, Turkey; Kaymakli, Cappadocia, Turkey; Beijing Underground City (Dixia Cheng), Beijing, China; SubTropolis, Kansas City, USA; Naours, France; Orvieto, Italy; The Louisville Mega Cavern, Louisville, Kentucky, USA; RESO (The Underground City), Montreal, Canada; Cheyanne Mountain Complex, Colorado, USA; Raven Rock Mountain Complex (Site R), Pennsylvania, USA; Bunker-42 (Tagansky Protected Command Point), Moscow, Russia; Mount Weather Emergency Operations Center, Virginia, USA; Wieliczka Salt Mine, Poland; Petra, Jordan; Catacombs of Paris, France; Odessa Catacombs, Odessa, Ukraine; Caltech Steam Tunnels, California, USA and all the other steam tunnel systems under campuses; Disney Utilidor System, Florida, USA; Gotthard Base Tunnel, Switzerland; Chiashan Air Force Base, Taiwan; Iranian Underground Missile Bases, Iran; Željava Air Base, Croatia/Bosnia and Herzegovina; Minot Air Force Base, North Dakota, USA; York Cold War Bunker, England; Bundesbank Bunker Cochem, Germany; Svalbard Global Seed Vault, Norway; Ronald Reagan Minuteman Missile State Historic Site, North Dakota, USA; Underground Project 131, China; Ark D-0 / Tito's Nuclear Bunker, Bosnia and Herzegovina; Bunk'art, Tirana, Albania; Greenbrier Bunker (Project Greek Island), West Virginia, USA; Tirpitz Bunker, Denmark; Camp Century (Project Iceworm), Greenland; Los Angeles Tunnels, California, USA; Guanajuato Tunnels, Mexico; Moffat Tunnel, Colorado, USA; The Channel Tunnel (Chunnel), United Kingdom/France; Chicago Tunnel Company Freight Tunnels, Illinois, USA; China Jinping Underground Laboratory, China; Sanford Underground Research Facility (Homestake Mine), South Dakota, USA; Sudbury Neutrino Observatory (SNO), Canada; Gran Sasso National Laboratory (LNGS), Italy; Onkalo Spent Nuclear Fuel Repository, Finland; Hill Country Wine Cave, Texas Hill Country, USA; ALMA Sports Hall, San Pedro de Atacama, Chile; The Inside Home, Ammaneh, Iran; Deep Time Palace, Chang Chun, China; Sancaklar Mosque, Istanbul, Turkey; Villa Aa, Aarhus, Denmark; Hacienda de la Paz (LA Mansion), Los Angeles, USA.
by mschuster91 | 2025-08-20 11:39:38+00:00
There's a multitude of problems with SD card support, purely from a hardware design standpoint:

- water tightness. Yes, seals are a thing, a few Samsung models (Tab Active 3) support that... but guess where I had damage from water ingress on mine? Yup, through the SD card slot. Rubber seals eventually dry out.

- power. SD cards tend to require large amounts of power during writes and behave unpredictably when the power is jittery for whatever reason.

- thermals. Getting the heat away from an SD card, particularly a high-speed one, during writes is tough.

- quality. Even if you buy a brand name SD card, chances are too high you end up with counterfeits. Phone companies do not want the support effort associated with that any more. And with cheap SD cards, you have to account for delivering actually clean and stable power because they don't have enough onboard capacitors.

- BOM complexity and cost. SD card slots take up board space and parts - the card enclosure, capacitors, voltage regulators, fuses (you don't want a broken/dirty SD card to fry the main power rail), high-speed data lanes, at least one GPIO for card presence detection... best to avoid that.
by logifail | 2025-08-20 11:39:43+00:00
> it’s just true that this method reliably worked for me

It's not just you. My kids didn't want to hear it, but they're coming round to the benefits of writing notes during their learning.

Why Writing by Hand Is Better for Memory and Learning https://www.scientificamerican.com/article/why-writing-by-ha...

Why writing by hand beats typing for thinking and learning https://www.npr.org/sections/health-shots/2024/05/11/1250529...

Advantage of Handwriting Over Typing on Learning Words https://pmc.ncbi.nlm.nih.gov/articles/PMC8222525/
by voidUpdate | 2025-08-20 11:40:32+00:00
I generally dont handwrite large amounts anymore, however I have begun writing sentimental letters to family members by hand on occasion, but they are fully drafted out digitally first. I will keep going back and editing what I've previously written, which you can't really do on fancy paper.

Most of my handwriting these days is working out ideas on paper when I'm stuck on something in code. I keep a notepad at the side of my desk specifically for that, so I can just pull it over and work out the coordinates of cube vertices yet again, or how to generate a triangle strip, or to rearrange an equation
by Scubabear68 | 2025-08-20 11:41:03+00:00
Yep. Many years ago I worked at one of the top brokerage houses in the United States, they had a phenomenal Google search engine in house that made it really easy to navigate the whole company and find information.

Then someone discovered production passwords on a site that was supposed to be secured but wasn’t.

Found such things in several places.

The solution was to make searching work only if you opted-in your website.

After that internal search was effectively broken and useless.

All because a few actors did not think about or care about proper authentication and authorization controls.
by towhans | 2025-08-20 11:41:18+00:00
When using browser-tools-mcp I can point to an element and ask Agent to "change color of this element to red". It would copy the part of the HTML and search the codebase for it.

I can imagine having an in browser, framework level tool would know exactly which controller and which template generated this element and could target it more precisely while using less tool calls and less tokens. I haven't tested it yet but that is my expectation.
by the_precipitate | 2025-08-20 11:41:49+00:00
My understanding is that they have a common layer over which they hold full copyright, so they can license it however they like. But since this software is also used in EloqSQL (which includes MariaDB code) and EloqDoc (which includes MongoDB code), the license has to be compatible with both. That’s why they state that the code can be licensed under either license (note the OR part).

I doubt they would accept any code that cannot be re-licensed, because the common layer essentially “transmits the infection,” for lack of a better way to describe it.
by rendall | 2025-08-20 11:42:35+00:00
Hmm.

Interesting idea, but it comes off at first glance as a conspiracy theory. The white on black bold lettering, the polemic. Maybe visually tone that way back. Make it more inviting.

Next, what makes a conspiracy theory sound nutty is presenting tenuous connections as significant smoking guns. "Bob went to school with Abby and dated Carol, demonstrating that Abby and Carol are connected."

Present your most damning detail with as little front-loading context as possible, and let that lead the user into the data.

Good luck!
by monsieurbanana | 2025-08-20 11:42:43+00:00
I'd like if you address the main point of his post: being left-handed.

I've never liked fountain pens because most languages are written left-to-right, which means you will get smudged much more easily than if you were right-handed.

The seemingly best advice I've seen is to learn how to be an "underwriter", aka position your hand north to where you're writing, instead of sideways. I say seemingly because I'm not willing to spend that amount in effort when I can write fine with pens.
by ants_everywhere | 2025-08-20 11:43:54+00:00
That makes a lot of sense.

I don't know much (or really anything) about circuits and circuit noise.

There is a long history of deterministic pseudo RNGs, which you may already know about. https://en.wikipedia.org/wiki/Pseudorandom_number_generator. These are sometimes chaotic. In this line of thinking, a thing that generates unpredictable noise and adds chaos would make probably a good hardware PRNG.

But the chaotic part is not actually random (although it's hard for attackers to predict). And whether the noise is random depends on a bunch of physics.

But if this has gotten to the point of a pet peeve to you, you might be interested in Randomness Extractors (https://en.wikipedia.org/wiki/Randomness_extractor) which are a way of thinking about questions like "we have an unpredictable source of bits, but it's not as random as it seems... how can we extract actual randomness from it?"

For example, extractors can take low quality somewhat random non-uniform (or non-gaussian) output and use it to create high quality uniform (or gaussian output).
by elros | 2025-08-20 11:44:13+00:00
What I’ve seen being done before, not only by lefties but actually by quite a few people, is to shift your paper 45~90°, so that you’re effectively writing bottom up (right handed) or top to bottom (left handed). It can get a moment to get used to it but it alleviates the smudging significantly.

For what it’s worth, personally, I don’t like it so much, but I know people who swear by it; and had fast, clear, legible notes to back it up.
by smarx007 | 2025-08-20 11:44:59+00:00
Two points/questions:

1. Why is tracking access rights "on a per user basis or [...] along with the content" is not feasible? A few mentions: Google Zanzibar (+Ory Keto as OSS impl) - makes authz for content othoronal to apps (i.e. possible to have it in one place, s.t. both Jira and a Jira MCP server can use the same API to check authz - possible to have a 100% faithful authz logic in the MCP server), Eclipse Biscuit (as far as I understand, this is a Dassault's attempt to make JWTs on steroids by adding Datalog and attenuation to the tokens, going in the Zanzibar direction but not requiring a network call for every single check), Apache Accumulo (DBMS with a cell-level security) and others. The way I see it, the tech is there but so far, not enough attention has been put on the problem of a high-fidelity authz throughout the enterprise on a granular level.

2. What is the scale needed? Enterprises with more than 10000 employees are quite rare, many individual internal IT systems even in large companies have less than 100 regular users. At these levels of scale, a lot more approaches are feasible that would not be considered possible at Google scale (i.e. more expensive algorithms w.r.t. big-O are viable).
by HarHarVeryFunny | 2025-08-20 11:44:59+00:00
No - he's head of FAIR which is still there. The new "reorg" isn't really much of a reorg, with the four AI groups now being:

TBD (LLMs / "super-intelligence")

FAIR (LeCun - JEPA and other long-term research)

Productization

Infrastructure
by ramses0 | 2025-08-20 11:45:50+00:00
These links are not loading for me but hopefully it's just some network hiccups on my end:

The Art of Unix Programming: http://www.catb.org/~esr/writings/taoup/html/

GNU Coding Standards: http://www.gnu.org/prep/standards/standards.html

Standard list of long options: http://www.gnu.org/prep/standards/standards.html#Option-Tabl...

Short options from -a to -z: http://www.catb.org/~esr/writings/taoup/html/ch10s05.html

...so this is the "serious" version of what you're describing.
by pyman | 2025-08-20 11:45:52+00:00
I would say 100% of their audience should be held accountable. Watching a crime take place, no matter how entertaining it seems, and not reporting it to the police is still a crime. In most civilised countries, complacent viewers are also responsible.

Influencers without complacent viewers are not influencers. Just like dumb people being encouraged by other dumb people to commit a crime are simply criminals. Being an influencer has little to do with it.

Torturing someone to make money, or paying to watch it, is a crime. Police should act accordingly, seize the servers, retrieve the IP addresses, and arrest the criminals.
by endgame | 2025-08-20 11:46:48+00:00
I agree. The thing with fountain pens that many sibling commenters miss is that they run the ink so much more smoothly, which means you can use much less force when guiding the pen. It's not just pining for the old ways but that the writing feels completely different with a different class of tool.

I spent a bunch of time working through https://www.briem.net/free-books/handwriting-repair and am really satisfied with the improvement.
by JJJollyjim | 2025-08-20 11:47:01+00:00
Chrome doesn't allow it - local network services have to opt-in to being fetchable from public sites (https://github.com/WICG/private-network-access), although they're replacing it with a user-permission-based approach (https://github.com/WICG/local-network-access).

(There is some language online suggesting PNA has not actually shipped, but I experienced it myself in stable Chrome several years ago, so I am unsure of the current state).

Firefox doesn't implement either approach -- I assume this is indicative of their lack of development resources.
by rafaelmn | 2025-08-20 11:47:15+00:00
You have no control over concurrency/scheduling, have to manage scoping, error handling, etc. TPL/Threads add to much low level noise to the logic.

Like you could easily blow up the thread pool depending on what you are doing, where a channel based implementation would just deal with spillover and not affect the other threads. You can easily capture scoped services that are disposed by the time the thread executes - but you never catch it in dev because you get executed immediately and request takes long enough, etc.

Spawning threads will work but I can see the use in a small abstraction like this lib for sure. Not sure I would use a lib for this - would probably hand roll something since I don't like adding unvetted external deps by default.
by donatj | 2025-08-20 11:48:15+00:00
This is going to be controversial to say, but tutorial videos have never made sense to me. It's literally the least efficient way to communicate that information. I know junior developers love these sorts of videos, but I think they're more entrainment than education.

With a webpage you can read at your own rate of understanding, you can quickly jump back to find points you may have missed or not fully understood. You can follow hyperlinks to documentation the author thinks is important. Best of all, you can copy and paste! Assuming you are a competent reader, you can usually achieve all this in a fraction of the time as well.
by masfuerte | 2025-08-20 11:48:56+00:00
100% agree on the home-page nastiness too.

Also, in Edge the new tab page is loaded from MS servers, even if you disable all the optional stuff. It looks like something local (it doesn't have a visible url) but this is misleading. If you kill your internet connection you get a different, simpler new tab page.

The Edge UI doesn't let you pick a different new tab page but you can change it using group policy.
by roxolotl | 2025-08-20 11:49:02+00:00
> Munnelly said KPMG built the agent by writing a 100-page prompt it fed into Workbench. The Register asked for details of the prompt and Munnelly said a substantial team worked on it for months, and the resulting agent asks for four or five inputs before it starts working on tax advice, then asks a human for direction before generating a document.

> Only tax agents can use the tool, because its output is not suitable for people without deep tax expertise.

Ok cool so they write a giant piece of software to assist in highly specialized tasks. Would love to know what the LLM adds. Maybe just parsing?
by monsieurbanana | 2025-08-20 11:49:07+00:00
I think we're saying the same thing then.

So what's left is to answer GP question, which nobody has done: What are the use cases for using the repl directly rather than through something like SLIME?

You answered "both" which I'm sure is correct, but I'm curious as to specifically which usages you find better directly through the repl. The only reason I can see is when you can't be bothered to (or are unable to) start SLIME, otherwise even to evaluate small expressions I'd rather have them written in a file to easily keep a history of them or edit them.

I also know people who never use tools like SLIME and prefer just using the repl for simplicity.
by matheusd | 2025-08-20 11:50:09+00:00
Pretty sure no bacteria will survive on earth after the sun expands enough to char it, yes.

Even if I'm wrong, and it does survive _that_, then it eventually won't survive the sun spending its entire energy budget.

We're the only ones that could intentionally (as in, actively design our future lightcone) to survive that, so that makes us special in my book.
by sam_lowry_ | 2025-08-20 11:51:18+00:00
A quote:

Bernard Lowe: So what's the difference between my pain and yours?

Dr. Robert Ford: Between you and me? This was the very question that consumed Arnold, filled him with guilt, eventually drove him mad. The answer always seemed obvious to me. There is no threshold that makes us greater than the sum of our parts, no inflection point at which we become fully alive. We can't define consciousness because consciousness does not exist. Humans fancy that there's something special about the way we perceive the world, and yet we live in loops as tight and as closed as the hosts do, seldom questioning our choices, content, for the most part, to be told what to do next. No, my friend, you're not missing anything at all.

from https://www.imdb.com/title/tt4458814/characters/nm0942482 and https://www.youtube.com/watch?v=F7TR50Mnwpw
by maccard | 2025-08-20 11:52:23+00:00
How does that script handle pushing to ghcr, or pulling an artifact from a previous stage for testing?

In my experience these are the bits that fail all the time, and are the most important parts of CI once you go beyond it taking 20/30 seconds to build.

A clean build in an ephemeral VM of my project would take about 6 hours on a 16 core machine with 64GB RAM.
by teknopaul | 2025-08-20 11:52:29+00:00
I wrote Linci to tackle this issue a few years back

Https://linci.tp23.org

Ci is too complicated and are basically about locking. But what you (should) do is run cli commands on dedicated boxes in remote locations.

In Linci every thing done remote is the same locally. Just pick a box for the job.

There is almost no code, and what there is could be rewritten is any language if you prefer. Storage is git/VCs + filesystem.

Filesystem are kit fashionable because they are a problem for the big boys but not for you or I. File system storage makes thing easy and hackable.

That is unix bread and butter. Microsoft need a ci in yaml. Linux does not.

Been using it for a while an a small scale and it's never made me want anything else.

Scripting bash Remoting ssh Auth pam Notification irc/II (Or mail stomp etc) Scheduling crond Webhooks not needed if repo is on the same container use bash for most hooks, and nodejs server that calls cli for github

Each and every plug-in is a bash script and some env variables.

Read other similar setups hacked up with make. But I don't like the env vars handling and syntax of make. Bash is great if what you do is simple, and as the original article points out so clearly, if your ci is complicated you should probably rethink it.
by theshrike79 | 2025-08-20 11:52:30+00:00
It all depends on the goal IMO.

If you're building "production ready" stuff with logins for Other People and god forbid taking payments, yes you definitely must understand what the code does.

But when I'm building a tool that tags random meme reaction .webm files and finds duplicates from them, I couldn't care less what the quality is or if I understand what it does.

I can easily run it, observe if it does what I want and Vibe harder if it doesn't.

tl;dr vibing prod code = bad. vibing personal tools = good.
by n4r9 | 2025-08-20 11:53:13+00:00
I still feel like something is "off" in comparing this Bible quote to the linked article. Christianity is deontological: there is a pre-existing set of "right" and "wrong" things, and the Bible is a set of rules for aligning yourself with the right things in order that you can get into heaven. The quotations are normative - they're less about "this is how things are" and more about "this is what you should do".

Murdoch seems to be making a descriptive statement about what we as humans mean by morality. She is claiming that when people say something is moral, what they're really saying between the lines is that it's borne out of attentive love to other people.

You also raised the concept of compassion is Buddhism - I think this is probably closer to Murdoch's ideas.
by nkrisc | 2025-08-20 11:53:26+00:00
> Consider, horseshoe crabs are undeniably the best at doing all things horseshoe crab. No other animal comes close to behaving like a horseshoe crab!

Yes, you could say this about any animal. It does not explain why, apparently, no other animal in the entire history of the Earth has done anything comparable to what humans have done.

Horseshoe crabs are good at horseshoe crab things, but convergent evolution has in the past created similar animals that are roughly equally good at doing horseshoe crab things.

There have been and are many animals good at doing horse-ish things. Many good at wolf-ish things. Even flight has evolved independently several times among both vertebrates and invertebrates (and while we can’t fly on our own, we regularly fly faster than any flying animal). We’re petty weak among all animals and yet the heaviest things that have been moved have been moved by humans. We’re pretty slow runners and yet we hold pretty much any speed record you can think of.

Why hasn’t there been any other animals similar to humans in our abilities? Why hasn’t spaceflight evolved several times? Why hasn’t metallurgy? Particle physics? Why can’t any other animal understand the basic chemistry of the universe as we do?