MurphyA/hacker-news huggingface dataset:
by turnsout | 2025-08-29 14:25:55+00:00
Third party photo app developer here. You're right, it's crazy that it's basically all or nothing.

Apple actually has a great API for selecting a single photo in a privacy-respecting way which does not give the developer access to the library at all. [0] But oddly, there is no corresponding API for safely saving or updating a photo in the library. So if your app involves editing a photo, you can't use this API.

The only option you're left with is to request photo library access with that scary dialog.

If the user selects the limited access option, it's not just confusing—it's a prohibitively bad user experience. If the user snaps a new photo and wants to edit it in my app, they have to tap a "Select more photos" button in my app, find the photo in the picker, close the picker, and then select the photo again in my UI.

Personally, I evaluate full access on a developer-by-developer basis. Indie app developers are highly unlikely to nefariously scan your entire photo library, as they lack any incentive or motivation to do so. So I give apps like Darkroom or Halide full access.

Meta, on the other hand, has every incentive to scan my whole library, and I assume they would. So even though it makes posting to Instagram much more painful, I selected limited photo library access for Instagram.

Apple really needs to introduce a safe way for developers to access just the photos/videos users select, and then update those assets.

[0]: https://developer.apple.com/documentation/photosui/photospic...
by wl | 2025-08-29 14:26:04+00:00
It's hard to tell what people are talking about when they talk about problems with the P320. The documents in question here deal with, among other things, the drop safety problem rather than uncommanded discharges you're talking about. If we're talking about the drop safety issue, it does make sense to ask why they didn't issue a recall instead of their not-a-recall "voluntary upgrade."
by antonvs | 2025-08-29 14:26:48+00:00
I did some work with XSLT back when it was enjoying some popularity (i.e. > 20 years ago.)

While I understand the appeal of the concepts behind XSLT, a language like that being expressed in XML is just... unfathomably perverse.

It's a positive testament to the industry's taste that XSLT essentially died.
by AndroTux | 2025-08-29 14:26:57+00:00
No. I want to select photos the app has access to now. I don’t want to readjust my selection every time I want to upload a new photo. What I want is an upload button like in the browser.

I click “add photo”, the system dialog opens, I select a photo, and then that gets sent to the app. Somehow, Apple managed to screw that up.
by extraisland | 2025-08-29 14:26:58+00:00
I don't understand how that is the case when you say you can figure out much more complicated programming languages. It strains credulity.

I am a former front-end developer that managed to figure out AWS, Go, C++, C#, JavaScript, Python, OpenGL and have done a LFS build. I am not some sort of mega genius. I just had to go through and read the correct material and learn the basics.
by eterm | 2025-08-29 14:27:04+00:00
It depends how fast.

If an LLM is often going to be wrong anyway, then being able to try prompts quickly and then iterate on those prompts, could possibly be more valuable than a slow higher quality output.

Ad absurdum, if it could injest and work on an entire project in milliseconds, then it has mucher geater value to me, than a process which might take a day to do the same, even if the likelihood of success is also strongly affected.

It simply enables a different method of interactive working.

Or it could supply 3 different suggestions in-line while working on something, rather than a process which needs to be explicitly prompted and waited on.

Latency can have critical impact on not just user experience but the very way tools are used.

Now, will I try Grok? Absolutely not, but that's a personal decision due to not wanting anything to do with X, rather than a purely rational decision.
by slipperydippery | 2025-08-29 14:27:39+00:00
The current far-right effort started with the postwar "think tank" boom, and that crowd has been working (successfully) to bend policy and law so they can enable and guide the creation of massive right-wing propaganda networks since the 70s. Fox News, Sinclair Media, a handful of dominant AM radio and now podcast production & distribution networks, and so on.

This isn't recent; we've been heading this way for decades, and not by accident.
by hnuser123456 | 2025-08-29 14:28:10+00:00
The DNC sidelined Bernie like you wouldn't believe as soon as it became clear he had potential to be elected. During one of his April 2016 rallies they livestreamed a "reporter" onsite talking about her drunken adventures the previous night rather than showing his speech, the cheers, and the line around the block to get in, that was going on behind her at the time. AOC made no notable efforts to be genuinely inclusive. Zohran is still trying to reach the caliber to be a contender listed next to the other two names and sounds like the infighting is already coming for him.
by potato3732842 | 2025-08-29 14:28:34+00:00
Let me be clearer. I don't care whether you're saying that people who like cars have been brainwashed by big oil or the people who buy highly processed manufactured food have been brainwashed by the food industry, it's a stupid baseline belief to have.

Most people who like their cars and their Oreos or whatever else do so genuinely.
by esafak | 2025-08-29 14:28:35+00:00
"On the full subset of SWE-Bench-Verified, grok-code-fast-1 scored 70.8% using our own internal harness."

Let's see this harness, then, because third party reports rate it at 57.6%

https://www.vals.ai/models/grok_grok-code-fast-1
by dylan604 | 2025-08-29 14:28:45+00:00
So once again, what would be the point for an auto handgun? You just said it's the wrong weapon for suppression. A 17 round mag fired in single rounds in quick succession would keep an opposing foe's head down longer than a 17 round mag in auto fire single trigger pull. Even pulling double tap style firing requires training/practice to keep both bullets accurate or else even that's wasteful
by lenerdenator | 2025-08-29 14:29:07+00:00
If you go to most gunmaker websites often enough, you'll eventually see at least one safety recall notice banner or something similar.

Ruger had one for the SR22 not too long ago. It's a .22 handgun that is more-or-less a range toy. A cool range toy, but a range toy. There was some sort of dead trigger problem that could pose a safety issue. Did Ruger deny it at every turn? No, they put out a notice and offered to fix the firearm free of charge.

Now compare that with how Sig's handled the P320, which is a service pistol and used daily in life-or-death situations.

If you make new-design firearms in any real volume, you will find yourself issuing recalls. Batches of parts get out of spec, things wear out, and you get reports that it can become dangerous. The good gunmakers stand behind their product.
by blincoln | 2025-08-29 14:29:39+00:00
HTML is data and presentation all in one. The idea with XML + XSLT is that the XML contains the raw, structured data, and one or more XSLTs define how to present it.

It's similar to a modern web app talking to a REST API to get raw data in JSON form and then using that data in some user-friendly rendered web page. Except it's a standard that anyone can use, instead of everyone rolling their own client-side browser code.

Of course, XML is so complicated that it fell out of favour, but that was the idea.
by sjsdaiuasgdia | 2025-08-29 14:29:54+00:00
> but he isn't dumb.

Musk’s assistant peeked back the muttered and said he had another meeting. “Do you have any final thoughts?” she asked. “Yes, I want to say one thing.” the data scientist said. He took a deep breath and turned to Musk. “I’m resigning today. I was feeling excited about the takeover, but I was really disappointed by your Paul Pelosi tweet. It’s really such obvious partisan misinformation and it makes me worry about you and what kind of friends you’re getting information from. It’s only really like the tenth percentile of the adult population who’d be gullible enough to fall for this.” The color drained from Musk’s already pale face. He leaned forward in his chair. No one spoke to him like this. And no one, least of all someone who worked for him, would dare to question his intellect or his tweets. His darting eyes focused for a second directly on the data scientist. “Fuck you!” Musk growled.

https://www.techdirt.com/2024/10/25/lies-damned-lies-and-elo...
by peab | 2025-08-29 14:30:08+00:00
depends for what.

For autocompleting simple functions (string manipulation, function definitions, etc), the quality bar is pretty easy to hit, and speed is important.

If you're just vibe coding, then yeah, you want quality. But if you know what you're doing, I find having a dumber fast model is often nicer than a slow smart model that you still need to correct a bit, because it's easier to stay in flow state.

With the slow reasoning models, the workflow is more like working with another engineer, where you have to review their code in a PR
by shadowgovt | 2025-08-29 14:30:27+00:00
The LLM equivalent is what Google does do, which is train its spam filters on the contents of your emails coupled to the signal of what human beings flag as spam.

(It was one of the first significant value-adds of GMail: at its scale, Google could create a global-concept understanding of the content and pattern of spam across hundreds of millions of users. That was the kind of Big Data that made it possible to build filters where one could confidently say "This is tuned on all spam in the wild, because we've seen all spam in the wild").
by kergonath | 2025-08-29 14:30:30+00:00
> One of Tesla’s things is that their software is built by software people rather than by car people. This has advantages and disadvantages.

So we just shrug because software boys gotta be software boys? That’s completely insane and a big reason why a lot of engineers roll their eyes about developers who want to be considered engineers.

Software engineers who work on projects that can kill people must act like the lives of other people depend on them doing their job seriously, because that is the case. Look at the aviation industry. Is it acceptable to have a bug in the avionics suite down planes at random and then delete the black boxes? It absolutely is not, and when anything like that happens shit gets serious (think 737 MAX).

The developers who designed the systems are responsible, and so are their managers who approved the changes, all the way to the top. This would not happen in a company with appropriate processes in place.
by ath3nd | 2025-08-29 14:31:45+00:00
> Citation? Investments aren't evidence of unprofitability in inference

Does a quote from their CEO help you?

"Anthropic CEO Dario Amodei has indicated that the individual models that the company creates are profitable, even if one includes the cost of training them. But given how Anthropic keeps training new models, it reports overall losses at a company level."

https://officechai.com/ai/each-individual-ai-model-can-alrea...

That good enough for you?

It's also obvious by the fact they are starting to train on your data, like the grifters they are: https://www.theverge.com/anthropic/767507/anthropic-user-dat...

They are struggling to do anything to survive, with a crushing debt. Soon Ads :)
by bcrl | 2025-08-29 14:31:45+00:00
Again, I don't use it, so I'm not going to file bugs against it. My post is simply providing relevant context for other readers here to understand what the limitations of the software referenced in this post. In no world are technically competent folks under an obligation to teach other people how to do things right. Doubly so when the software is paid for by a large multinational corporation that has the resources to do the job right.
by aleph_minus_one | 2025-08-29 14:32:03+00:00
> Am I missing something?

I think you do:

According to the article https://www.perplexity.ai/page/anthropic-reverses-privacy-st...

"Enterprise and educational customers will continue operating under their existing privacy protections, as the policy changes specifically exclude Claude for Work and Claude for Education services. These commercial accounts remain governed by separate contractual agreements that maintain stricter data handling standards.

Organizations using Claude through business partnerships or educational licenses can continue their operations without concern for the new training policies affecting their sensitive communications or proprietary information."

Thus, I think your claim

> What a shoot your own foot business decision.

likely does not hold: the non-commercial accounts likely led to Anthropic loosing money, so they are not liked by Anthropic anyway (but are a an "inconvenient necessity" to get people to notice and try out your product offering). With this new decision, Anthropic makes this "free-riding" less attractive.

I bet that Anthropic will soon release a press statement (that exists in the drawers for quite a long time) "We are listening to your concerns, and will thus extend our 'privacy-conscious offering' to new groups of customers. Only 30 $ per month."
by SigmundA | 2025-08-29 14:32:25+00:00
Looks like there is a WASM polyfill for XSLT based on libxslt:

https://github.com/mfreed7/xslt_polyfill

To me this is the best way forward, I used to like XSLT quite a bit but the world has moved on and I get browser maintainers not wanting to try and maintain that extra native code surface area.

It seems like the browser should be incorporating many libraries as WASM to mitigate exploits and surface area such as XSLT and rarely used image formats etc. Then only do the native versions for widely used features where it's worth the effort to maintain and vet them.
by giamma | 2025-08-29 14:32:41+00:00
How about using something like Apache Tika for extracting text from multiple documents? It's a subproject of Lucene and consists of a proxy parser + delegates for a number of document formats. If a document, e.g. PDF, comes from a scanner, Tika can optionally shell-out a Tesseract invocation and perform OCR for you.
by csomar | 2025-08-29 14:32:54+00:00
> You NEVER admit that you're in this industry you moron!

This can bite you, though unlikely. Look at Fed Lisa Cook. Probably at some point she thought it'd be okay and she's good for the money and it's just a bureaucracy to bypass. It's a very small thing if you compare to ... uhm ... what Trump did. But it's biting hard now.
by dcow | 2025-08-29 14:33:28+00:00
Keybase works entirely fine to this day. What sucks is everyone stopped using it solely to retaliate against the acquisition with thin justifications in speculation that Zoom would ruin keybase. Well that didn't happen, Keybase’s own users ruined Keybase. And now everyone just uses Discord because I guess the encryption didn't actually matter when it counted. Sad but familiar security story.
by RedMist | 2025-08-29 14:33:38+00:00
I've been testing Grok for a few days, and it feels like a major step backward. It randomly deleted some of my code - something I haven't had happen in a long time.

While the top coding models have become much more trustworthy lately, Grok isn't there yet. It doesn't matter if it's fast and/or free; if you can't trust a tool with your code, you can't use it.
by mingtianzhang | 2025-08-29 14:33:43+00:00
In this approach, the documents need to be pre-processed once to generate a tree structure, which is slower than the current vector-based method. However, during retrieval, this approach only requires conditioning on the context for the LLM and does not require an embedding model to convert the query into vectors. As a result, it can be efficient when the tree is small. When the tree is large, however, this approach may be slower than the vector-based method since it prioritizes accuracy. If you prioritize speed over accuracy, then I guess you should use Vector DB.
by 4MOAisgoodenuf | 2025-08-29 14:33:55+00:00
This particular video doesn't quite show anything out of the ordinary. If you pull the trigger past the wall then force it into firing with sympathetic movement of different parts of the pistol.

The P320 has had many reported issues but having it go off when you pull the trigger is actually intended behavior.

More information available here: https://www.youtube.com/watch?v=r1KoSBcn2bY
by t-3 | 2025-08-29 14:34:06+00:00
Full auto is just going to run through your ammo at the expense of accuracy, reliability, and maintenance time and costs. Nobody is going to be providing covering fire with a fully-auto machine pistol, the ammo capacity just isn't big enough (and then think about cooling and mechanism reliability when putting more than a dozen through a handgun). These things are for raids and assassinations, where collateral damage isn't a big deal but taking out the target is.
by _boffin_ | 2025-08-29 14:34:13+00:00
I was part of a shop that did the Pivotal Way and we had Inceptions where the PM, engineers, and a tester or two would be sequestered in a conference room for the day to bang out task lists that went into mid-level fidelity. Technical considerations were debated and sometimes in a heated way, but we never got into implementation—just structure and flow to ensure it jives.

…this reeeeaaaallllyyyy feels like that
by mitsu_at | 2025-08-29 14:34:30+00:00
Example YouTube videos that have "no title":

- https://www.youtube.com/watch?v=K93zcgFsynk&ab_channel=Vsauc...

- https://www.youtube.com/watch?v=XrHTI04i9yk&ab_channel=%E2%8...

This is done by using invisible characters such as ZWNJ to get around the title filter.
by Deegy | 2025-08-29 14:35:37+00:00
Good point. But can the models even behave that way? They depend on probability. If they put a greater weight on novel/unexpected outputs don't they just become undependable hallucination machines? Despite what some people think, these models can't reason about a concept to determine it's validity. They depend on recurring data in training to determine what might be true.

That said, it would be interesting to see a model tuned that way. It could be marketed as a 'creativity model' where the user understands there will be a lot of junk hallucination and that it's up to them to reason whether a concept has validity or not.
by ubunthree | 2025-08-29 14:36:10+00:00
This should be modded up higher. Exactly. The only way hackers found this is because they weren’t using secure boot or encrypted images. Every embedded developer knows about MCUboot. Except managers don’t want the overhead because it is complicated. Once embedded devs get the ok all embedded firmware will basically be like a Signal chat with only the manufacturer having the keys. Heck even PSA compliant hardware MUST be resistant to multibit glitch attacks. Bye bye hackers.
by lumost | 2025-08-29 14:36:13+00:00
It's a tricky one, there is also a lot of push right now to use AI so developers are incentivized to drop money on subscriptions. I'd have difficulty justifying 1k/month for smaller shops - but corporations will be different. If the average engineer is just 20% more productive, then that is a 30-60k value to the company.

I don't have difficulty getting to a 20% productivity gain with AI just from automating the tasks I procrastinate on or can't focus on. Likewise the ability to code a prototype overnight/over the weekend is a reasonable extension of practical working hours.

The challenge I do see is that fully AI generated code bases devolve into slop pretty fast. The productivity cutoffs are much lower compared to human engineers.
by immibis | 2025-08-29 14:36:13+00:00
You could just, like, not make a website that takes several seconds to handle each request.

I let bots hit Gitea 2-3 times per second on a $10/month VPS, and the only actual problem was that it doesn't seem to ever delete zip snapshots, filling up the disk when enough snapshot links are clicked. So I disabled that feature by setting the snapshots folder read-only. There were no other problems. I mention Gitea because people complain about having to protect Gitea a lot, for some reason.
by blululu | 2025-08-29 14:36:19+00:00
To your point there are plenty of apps that explicitly operate on the photo reel so the api/permission is needed. Steelmanning the point: plenty of apps request photo permissions that shouldn’t need it. This is really an Apple problem though. They have their selective access option which is a patch on the problem inconvenient for the user. I have two apps that end up requesting photo permissions because basic things like saving or loading a photo require the full set of permissions. I would much rather Apple just have a widget that allows me to pipe that data in as a black box, since the pop up message is distracting and I only need the most basic capability. Instead they do some prop 65 warning where even the most basic and reasonable uses trip the warning and what’s app is allowed to scan your entire library with the same permission.
by superposeur | 2025-08-29 14:36:43+00:00
Ok, to be clear, let’s say I’m dumb and accidentally go with the default (I get the color of the opt out button wrong or something). As if there’s a “publish my private emails to the internet” default-on button in email. Then, I use it to edit a rec letter for student X, with my signature Y. (Yes I know this is dumb and I try changing names when editing but am sure some actual names may slip through.) A few months later the next model is released trained on the data. Student X asks Claude what Y would write in a rec letter about X. Such a button is a “wings stay on / wings fall off” button on a plane.
by HankStallone | 2025-08-29 14:37:06+00:00
I almost mentioned Bernie, but his appeal seems limited to people who are very interested in politics and socialism. I'm not sure I'd classify them as "normal." Openly calling himself a socialist is always going to make that a hard sell with normal Americans outside certain groups. Normal Americans don't mind a fair bit of socialism (Medicare, Medicaid, Social Security, farm subsidies, etc.), but they don't like calling it that.

AOC? Normal people think she's nuts because she's been propped up as "far-left" to make the rest of the party look moderate, but it's not working as well as it used to.

Mamdani hasn't been prominent long enough to say, but his biggest surge in votes came from high turnout among well-off progressive whites, the group that's most out-of-touch with normal people. He also got the youth vote, which is famously fickle. The working-class and poor vote went to Cuomo, so I'd say Mamdani has some work to do to reach "normal people" outside some NYC enclaves. He also has the same limitation Bernie has of labeling himself a socialist.