MurphyA/hacker-news huggingface dataset:
by mpalmer | 2025-08-29 22:40:27+00:00
The website copy is obviously generated, and has not been reviewed for correctness.

The website trumpets "25+ curated prompt injection patterns from leading security research". The README of the linked Github promises: "100+ curated injection patterns from JailbreakBench".

None of the research sources are actually linked for us to review.

The README lists "integrations" with various security-oriented entities, but no such integration is apparent in the code.

The project doesn't earn the credibility it claims for itself. Because the author trusts bad LLM output enough to publish it as their own work, we have to assume that they don't have the knowledge or experience to recognize it as bad output.

Sorry for the bluntness, but there are few classes of HN submission that rankle as much as these polished bits of fluff. My advice: do not use AI to publicly imply abilities or knowledge you don't have; it will never serve you well.
by bayindirh | 2025-08-29 22:40:56+00:00
Let me try to make my point as compact as possible. I may fail, but please bear with me.

I prefer Free Software to Open Source software. My license of choice is A/GPLv3+. Because, I don't want my work to be used by people/entities in a single sided way. The software I put out is the software I develop for myself, with the hope of being useful for somebody else. My digital garden is the same. My blog is a personal diary in the open. These are built on my free time, for myself, and shared.

See, permissive licenses are for "developer freedom". You can do whatever you do with what you can grab, as long as you write a line to credits. A/GPL family is different. Wants reciprocity. It empowers the user vs. the developer. You have to give the source. Who modifies the source, shares the modifications. It stays in the open. It has to stay open.

I demand this reciprocity for what I put out there. The licenses reflect that. It's "restricting the use to keep the information/code open". I share something I spent my time on, and I want it to live on the open, want a little respect for putting out what I did. That respect is not fame or superiority. Just not take it and run with it, keeping all the improvements to yourself.

It's not yours, but ours. You can't keep it to yourself.

When it comes to AI, it's an extension of this thinking. I do not give consent to a faceless corporation to close, twist and earn money from what I put out for public good. I don't want a set of corporations act as a middleman to get what I put out, repackage and corrupt it in the process and sell it. It's not about money; it's about ethics, doing the right thing and being respectful. It's about exploitation. Same is applicable to my photos.

I'm not against AI/LLM/Generative technology/etc. I'm against exploitation of people, artists, musicians, software developers, other companies. I equally get angry when a company's source available code is scraped and used for suggestions as well as an academic's LGPL high performance matrix library which is developed via grants over the years. This thing affect livelihoods of people.

I get angry when people say "if we take permission for what we do, AI industry will collapse", or "this thing just learns like humans, this is fair use".

I don't buy their "we're doing something awesome, we need no permission" attitude. No, you need permission to use my content. Because I say so. Read the fine print.

I don't want knowledge to be monopolized by these corporations. I don't want the small fish to be eaten by the bigger one and what remains is buried into the depths of information ocean.

This is why I stopped sharing my photos for now, and my latest research won't be open source for quite some time.

What I put out is for humans' direct consumption. Middlemen are not welcome.

If you have any questions or left any holes up there, please let me know.
by balencpp | 2025-08-29 22:41:06+00:00
R.E. scaffolding in C#, with upcoming .NET 10, it's really simple: - Write code to myfile.cs - `dotnet run myfile.cs`

That doesn't need scaffolding either. And the standard library is huge too; you could even add dependencies in that file.

And since we're talking about RAD, Python can't even compare to Clojure. Having a separate REPL "server" that you interact with from your text editor with access to the JVM's ecosystem and standard library inside of a "living" environment and structural navigation from being a LISP is pure RAD. Heck, I often start a REPL "server" inside chrome's devtools with scittle[1] if I need to rapidly and programmatically interact with a website and/or to script something; I haven't been able to do that anywhere else. Even pure JS.

[1]: https://github.com/babashka/scittle
by toast0 | 2025-08-29 22:41:23+00:00
Doesn't Apple pretty much own their whole stack? You mentioned XNU, which they made...

Their CPU, their boards, their firmware (presumably), their OS[1], much of the perhipherals are theirs, too.

Lots of companies try to emulate Apple, but it's very hard to pull off.

[1] Yes, they use some parts from Mach and FreeBSD in their OS, but the amalgamation is theirs, and they support and change the whole thing as needed.
by sitkack | 2025-08-29 22:41:35+00:00
I didn't say they were wasting their time on their hobby OS, they are wasting their time trying to get it to do very esoteric thing on GCP.

They aren't trying to get reboot to work, they are trying to get their version of kexec to work so their hobby os reboots faster.

https://wiki.archlinux.org/title/Kexec

The biggest scam in the OS world is drivers, we should demand more out of our hardware. Drivers shouldn't be necessary.
by jacquesm | 2025-08-29 22:41:43+00:00
You already have concentration camps and razzias, did you think the Nazi's started with gas chambers?

> Meanwhile most countries manage to enforce their borders without committing genocide

And without concentration camps. And without Razzia's. The US apparently can not.

> and most Slavic countries even split apart into ethnic enclaves (called "fall of the Soviet union", "Balkanization", and the Czech-Slovak split), and now manage to coexist peacefully

"now" is doing a lot of work in that sentence.

> save for those trying to reverse those splits (i.e. Russia).

And factions in Hungary. And Slovakia. And Germany. This isn't over, not by long shot.
by hackrmn | 2025-08-29 22:41:57+00:00
Is XSLT enjoying the equivalent of Streisand Effect? Ever since news came out of Google wanting to rid Chrome of XSLT support, there has been a number of XSLT-related news here. I am not complaining, I think XSLT deserves a second life, it hasn't had the scrutiny it deserves, nor its "15 years of fame".
by chermi | 2025-08-29 22:42:10+00:00
"You might wonder why an AI would write a guide about itself. The answer is simple: who better to explain how to use a tool than the tool itself? I interact with thousands of users daily, each with unique needs and approaches. Through these conversations, I've observed patterns in what works, what doesn't, and what transforms a simple Q&A into a productive collaboration."

Does not follow. Also, according the anthropic, they're only just now going to start using chat logs?
by lamp_book | 2025-08-29 22:42:19+00:00
I’m pretty sure the term came from Google (at least that is where I heard it first described) and just referred to a backend engineer with speciality in this area. Now usually these roles have “distributed systems” in the title, even if you aren’t really on the inside of the systems. That or “systems and infrastructure”, “data infrastructure”, or “AI/ML infrastructure” or sometimes “MLE” for those kinds of orgs. Or back to good ole “big data” now that it’s no longer tacked on everything.
by rednafi | 2025-08-29 22:42:40+00:00
Every refactor attempt starts with the intention of 100% coverage.

No one can predict how efficacious that attempt will be from the get-go. Eventually, often people find out that their assumptions were too naive or they don’t have enough budget to push it to completion.

Successful refactoring attempts start small and don’t try to change the universe in a single pass.
by commandersaki | 2025-08-29 22:42:48+00:00
No, at least the privacy officer I spoke to says it doesn't negative impact how you are considered by the company, and that the requests are handled by the applicable data protection law.

I wouldn't do it for a tiny company / startup where such a request can easily be exposed to recruiter and interviewers, but in those cases you're very likely to receive candid feedback by just asking anyway.
by firesteelrain | 2025-08-29 22:43:45+00:00
One could argue that if it’s not in your swim lane, you just let it fail. And if you aren’t that person’s manager, you tell them the code or design that you are reviewing and thus the gatekeeper is not adequate. Politely. You said your part and no need to get yourself in trouble. Document and move on. If the company won’t listen then you move on. No need to turn it into a HR issue.
by analyte123 | 2025-08-29 22:43:48+00:00
I once interviewed a very good candidate - good skills, interest in the business, a few years of experience, could definitely do the job I thought I was interviewing him for - only to find out after the fact that we actually only wanted an industry veteran with very specific, particular domain knowledge, and neither the recruiters nor me and my immediate manager had really caught up to that requirement.
by sneak | 2025-08-29 22:43:55+00:00
I see median human drivers all of the time, and I see median FSD all of the time. I don’t need to drive a billion miles to have a valid opinion that one is better than the other.

I’m sure things are very different out around the edges, as you note, but the majority of the time humans in cars kill people it isn’t because they were in an edge case - quite the opposite. They were just driving home from the bar like they do every night.
by al_borland | 2025-08-29 22:44:09+00:00
That's the beauty of RSS, people can tailor it to their needs and wants. If I saw thousands of unread items, I'd shut down and give up. On the flip side, if you had my feed list, you'd probably feel like you were missing a ton of stuff. But we can both make it work for us.

I did have a job where I got 10k email per day for a good 10 years, so I probably have some PTSD from that. I'd feel like I was right back there if I had thousands of items per day in my RSS reader. I've been out of that stage of my job for a good 8 years, and I'm just now starting to get a handle on my email again, after feeling like there was no way to control it for so long.
by ysofunny | 2025-08-29 22:44:15+00:00
> How does such a incontrovertible structure arise?

yes, I also enjoy trying to answer this question.

what is such an structure even mean? how could it be that simply defining numbers, obersving addition, and generalizing it away into multiplication would yield this natural structure?

It all begins with zero. the predecessor of One, the best known number.

zero can be assumed by anyone. the surprise is how all zeros are the same zero. (by uniqueness of emptyset; but as I hope you can see, I'm a crank. a nutjob. I'll stop
by estimator7292 | 2025-08-29 22:45:04+00:00
As I understand, all types implicitly inherit from Object in C#. That's where the `ToString` and hashcode overrides come from.

Offhand, I'd guess that explicitly inheriting from Object would either do nothing or fail to compile depending on where in the type hierarchy you are.

Similarly, all structs implicitly inherit from ValueType. That's what structs are in C#.
by WD-42 | 2025-08-29 22:45:32+00:00
Exactly! It seems very narc-y. Just let me build my cool waste of company resources, it's not like Zucky is going to notice, he's too busy building his 11 homes.

Imagine being able to build an operating system, basically the end-game of being a programmer, and get PAID for it. Then some nerd tells on you.
by miki123211 | 2025-08-29 22:45:43+00:00
Emojis have names. When somebody sends a "stop sign", "smiling face" or "jack-o lantern" emoji, I know exactly what they mean. Screen readers can (and do) pronounce these.

When somebody sends a bunch of Ancient Egyptian hieroglyphs mixed in with some mathematical symbols, with a little Katakana on top, I have no idea what they mean. The message may encode some visual meaning due to how the characters look and the visual patterns they form when placed in combination, but its semantic meaning isn't clear, so a non-visual technology cannot interpret and pronounce it properly.

This is a very common issue with "fancy font generators", which were common in certain Twitter communities once upon a time.
by fcarraldo | 2025-08-29 22:45:55+00:00
Also currently being discussed[0], on this very site, is both speculation that Meta is surreptitiously scanning your camera roll and a comment claiming that they worked on an earlier implementation to do just that.

It’s shocking to me that anyone who works in our industry would trust any company to do as they claim.

[0] https://news.ycombinator.com/item?id=45062910
by mjg59 | 2025-08-29 22:45:55+00:00
Some additional context that isn't really covered in the readme - there are two components in the Amiga chipset that are especially relevant here, the copper and the blitter. The copper (named because it's a coprocessor) is a separate execution core contained within Agnus, one of the custom chips. It only supports three instructions - move, wait, and skip. Skip will skip the next instruction if a condition is met, wait will block execution until the condition is met (in both these cases, the condition can only be the location of the video beam), and move can write an arbitrary value to a custom chip register. This means that the copper can't write to other pieces of hardware (like the CIA chips that control various things like system timers and the audio filter), but also that it can't write to RAM. The copper is used fairly heavily in the demo scene, but in gaming it's probably most commonly used to reprogram the colour palette as the screen is being displayed, increasing the number of on-screen colours. The code the copper runs is in RAM so the copper can't directly modify it, but the copper can reprogram the registers telling it where its code is, so it's possible to use the skip instruction to conditionally bounce to different code depending on where you are in scanout.

The blitter is another coprocessor with a different set of limited features. Blitter as a generic term refers to a piece of hardware that can copy memory from one location to another without CPU involvement, but the Amiga blitter is more full featured than that. It also has the ability to render lines, fill areas of the screen, and apply shifts and masks to data rather than just copying it. Of course, when I say "render lines" or "fill areas of the screen", what I actually mean is that it can write specific patterns to regions of memory - there's no actual requirement that they be on screen at the time.

A really important thing here is that while the copper can't write to memory itself, it can configure the blitter, and the blitter can then modify memory. One fun thing here is that there's absolutely nothing stopping you from using the blitter to modify the code that the copper is executing.

The naive implementation of a no-cpu demo would simply be to load all the assets into RAM and then have the copper reprogram the custom chips to display them and play audio. But combining the copper and the blitter gives a turing complete execution environment that ought to be able to do almost anything you could do with the CPU (the blitter can't touch hardware registers so you're still limited to whatever registers the copper can access, and you can only access the RAM the custom chips have access to, not the larger range of fast RAM), just somewhat more slowly.
by AlotOfReading | 2025-08-29 22:47:18+00:00
It's a pithy philosophy if you already know what it means to "work". You probably don't, especially if your system is human facing. Figuring out what "works" means is almost as difficult as building things in the first place. You may as well commit to building it twice [0].

[0] https://ratfactor.com/cards/build-it-twice
by Havoc | 2025-08-29 22:47:48+00:00
Nothing super sophisticated - the key part is telling it the categories I want. It seems really good at sticking to that out of the box and seems to do 2-3 items for each category.

```Summarize today's news stories in concise bullet points focusing on relevance and clarity. Organize the summary into the following sections:

* World Events: Major global developments and international headlines

* Geopolitics: Political tensions, alliances or diplomatic events

* London: Local news and developments specific to London

* Supply chains: etc ```

One thing I've had ZERO luck is making it look for forward looking economic indicators. No idea why but it doesn't work at all
by techpineapple | 2025-08-29 22:48:50+00:00
For another take - what’s the game theory here?

If I’m kinda sensitive but also hyper-ambitious, I acknowledge that Facebook has

1. Some of the highest pay in the industry. 2. Ultra-competitive environment. 3. Low moral principles.

Seems like the strategy would be to use every lever at your disposal to manipulate your environment, rather than leave and risk getting paid less.
by rednafi | 2025-08-29 22:49:14+00:00
Yep, vertical scaling goes a long way. But it’s not compute where the bottleneck for scale lies, rather in the resiliency & availability.

So although a single server goes a long way, to hit that sweet 99.999 SLA, people horizontally scales way before hitting the maximum compute capacity of a singe machine. HA makes everything way more difficult to operate and reason about.
by hackrmn | 2025-08-29 22:49:30+00:00
Current state of things is a mixed bag, in my opinion. XSLT wasn't perfect, and XML required a lot of repetition and neither got the amount of scrutiny both deserved to advance past their own inconvenience. But a lot of what we have today has just as many drawbacks, and that _despite_ WHATWG and Google hawking over it all. XML had namespaces, which alone were quite a potent feature that allowed to manage _semantics_ of data with more rigor and flexibility -- compared to the in my opinion amateur-ish "custom elements" HTML 5 approach, and how Apple refuses to implement parts of the spec., because they "don't believe in inheritance" (I am being liberal but those who know know). Then there is the HTML 5 parser itself -- "for the masses" -- with its idiotic and incomprehensible rules that are element specific, for which reason noone ever remembers these. Forgot a `</p>`? No problem, you can discover your omission after you've shipped! HTML 5 parser never aborts!
by jasonb05 | 2025-08-29 22:49:56+00:00
Great post.

My gut reaction is something like: "don't wait around to be picked, get out there and do great stuff"

Want to help the world get the most out of claude? Go out there and do it at an ability and velocity beyond what others think is possible. Go so hard friends think you're mad. That devs consuming your stuff think you're mad.

Create so much amazingly useful/helpful content and help so many people in so many ways that looking back in 1-2 years at the idea of working for anthropic would seem insane to you.
by lll-o-lll | 2025-08-29 22:50:58+00:00
And stupid. Like it or hate it, a non-nonsense, direct speaking, but fair and objective boss is the one you want. No one is served by failure; not the people at the top, nor the people at the bottom.

There is a difference between “this project is not going to work” vs “these people are incompetent and the project should be cancelled as a result”. The former needs to be said, the latter is a HR violation.
by chatmasta | 2025-08-29 22:51:16+00:00
Yeah, this seems like a great way to ensure Google AI summarizes the second best result behind your own. And in many cases, like when the result is about your product or company or someone associated with it, that could be very bad for you. Imagine if “PayPal sucks” is rank 2 for “how to withdraw from PayPal,” but the official website blocked the AI summary so instead it comes from the “PayPal sucks” domain…

Honestly, publishers should just allow it. If the concern is lost traffic, it could be worse — the “source” link in the summary is still above all the other results on the page. If the concern is misinformation, that’s another issue but could hopefully be solved by rewriting content, submitting accuracy reports, etc.

I do think Google needs to allow publishers to opt out of AI summary without also opting out of all “snippets” (although those have the same problem of cannibalizing clicks, so presumably if you’re worried about it for the AI summary then you should be worried about it for any other snippet too).
by markus_zhang | 2025-08-29 22:51:22+00:00
I'm not sure if you are trying to be /s, but yeah that's basically what I'm trying to say. Definitely better than working on those recommendation systems.

Damn, I'd pay to work in some serious OS/Compiler teams, but hey why should they hire me? Oh well...Yeah I'm doing a bit of projects on my side but man I'm so burnt out by my 9am-5pm $$ job + 5pm-10pm kid job that I barely have any large chunk of time to work on those.
by IAmGraydon | 2025-08-29 22:52:00+00:00
This accusation isn’t an invention of mine. A whistleblower from within the company in February of this year admitted to it.

https://www.pbs.org/newshour/amp/politics/why-does-the-ai-po...

https://www.tortoisemedia.com/2025/02/25/grok-3-engineer-adm...

https://oecd.ai/en/incidents/2025-05-15-c9fd
by _heimdall | 2025-08-29 22:53:27+00:00
What were you getting at with the MLP example? MLPs do a great job with perception abilities and I get that they use the term neuron frequently. I disagree with the use of the name there that's all, similarly I disagree that LLMs are AI but here we are.

Using the term neuron there and meaning it literally is like calling an airplane a bird. I get that the colloquial use exists, but no one thinks they are literal birds.
by avidiax | 2025-08-29 22:54:05+00:00
> An Ar-15/M16 can go off without pulling the trigger if the firing pin gets stuck in the channel. That won't happen with a glock because the safety physically blocks the primer from being struck.

This is precisely one of the issues with Gen1 Glocks that was remediated. The firing pin safety prevents the firing pin from moving forward unless the gun is in battery and the trigger is partially depressed. It doesn't force the pin to move backwards if it is jammed forward (due to dirt). A pin that's jammed will slam fire the gun when racked.

Always rack in a safe direction.
by kelnos | 2025-08-29 22:54:23+00:00
Maybe because this site is full of people with differing opinions and stances on things, and react differently to what people say and do?

Not sure who was taking SamA seriously about that; personally I think he's a ridiculous blowhard, and statements like that just reinforce that view for me.

Please don't make generalizations about HN's visitors'/commenters' attitudes on things. They're never generally correct.
by chatmasta | 2025-08-29 22:56:40+00:00
They do have citations. They’re just very non-obvious because they’re a 1ch width Unicode character in a little circle. (It’s the “link” symbol.) And clicking it doesn’t take you to the source, but instead opens a side panel where there is a link that will take you to the source (often it’s one of multiple sources in the panel).

And technically speaking, this citation is the first link on the results page, so you “rank” higher than all the other results. But it does take two clicks to get to your page.

They should make the citations more prominent and use the page title as anchor text. And when there’s multiple citations, the side panel should be open by default or they should put all of the citations inline as prominent links with page titles as anchor text.