MurphyA/hacker-news huggingface dataset:
by anenefan | 2025-08-07 09:57:11+00:00
A.I. at the moment is in it's relative infancy ... energy efficiency will surely follow in a decade or so after a few dinosaurs die out or perhaps meet a more humorous demise when they are unkindly pegged out on a beach as a sacrifice to the angry weather gods.

Less cooling towers are needed if more of the heat is reused - some cold climate cities would surely benefit from a constant heat source, but some heat could could be used for power generation [1] that removes it from the balance sheet entirely as it's transmitted into space.

A.I. has it's uses, and is a very powerful tool not that I directly use LLMs, but I dare say as for public consumption in the next few years, the govt's around the world will double down on some of it's more tantalising uses like creating graphic or near real movies (in the name of child safety or what not,) or as a writing aide (protecting human creativity - copyrights) and instead much of what will be still legal will be be along the lines of A.I. search slop or existing software that's been slightly tricked up but heavily bloated ... Now with tracking ...

Sadly most of the A.I. assist in searches I've seen, is merely amplifying advertising spiel ... and not necessarily correct.

[1] https://www.ucdavis.edu/curiosity/news/anti-solar-cells-phot... (2020)
by abrenuntio | 2025-08-07 09:57:22+00:00
No opinions on the ship itself, but the social proposals are very interesting :-)

Earth biomes will be kept intact with respect to their natural evolution. But human society will be treated as an amoral engineering problem seeking to optimize a few measurable parameters chosen up front. There is little sense in this proposal that human beings will bring along with them original sin or whatever you want to call it. But what allows human beings to flourish and keeps societies together, especially in conditions of scarcity (very much unlike the conditions of say the past half century), may not be obvious to the project planners.

In fact, much of what has been handed down to us in the legal and opaque cultural and religious traditions that have successfully survived such stresses in the past, is gleefully discarded.

The social engineering proposed is of the most dystopian and heavy-handed variety: it involves taking a group of volunteers to Antarctica to format them to a supposed sociocultural blank slate, followed by "characteristics monitoring". Despite the apparent care for superficial day-to-day happiness, human beings are to be indoctrinated to see themselves as discardable resources. They are not just governed with "mere" discipline, but with a program of violent population control (e.g. "maximum 2 childrens", "not necessarily with the same partner", "euthanasia", "not owned by the individual", ...).

So humans on Chrysalis will decide over every single aspect of life and death, not for themselves but for each other. But this time, unlike all earlier times, it will work because they're going to keep "governance architecture liquid, horizontal and inclusive" and "open source communities" and "not ethically compulsory" and based on "deep scenario exploration".
by lloeki | 2025-08-07 09:57:49+00:00
Later down:

> In fact, HeH+ is the strongest known acid, with a proton affinity of 177.8 kJ/mol, or a pKa of −63

Long time I didn't do chemistry but that pKa made me jump off of my chair.

For comparison hydrochloric acid is ~10.

Since it's a charged molecule one could maybe contain it in an EM field to have some ready-to-use "eat anything" material.

Almost - but not quite - as scary as FOOF:

> Dioxygen difluoride reacts vigorously with nearly every chemical it encounters (including ordinary ice) leading to its onomatopoeic nickname FOOF (a play on its chemical structure and its explosive tendencies)

"vigorously" being quite an understatement.
by j1elo | 2025-08-07 09:58:00+00:00
"User not paying attention" is ultimately the reason for most phising attacks. It happens a lot, and we're trying to solve it as the known problem it is. Everybody, and I say everybody are human beings at the end of the day (so far...) and so by definition, can have a bad day and lower their defenses. It has ironically even happened to reputated security specialists.
by fluxist | 2025-08-07 09:58:28+00:00
I've had monovision after LASIK for about 5 years now. The brain adjusts in a few weeks and you cease to notice it. It rises to my awareness when I close one eye. Occasionally I'll notice it when trying to focus on something outside the center of my field of view but generally, no. It's an effective way to preserve near and far vision simultaneously.

That said, I've heard a fair number of people hate it and I get that.
by benterix | 2025-08-07 09:59:59+00:00
> What makes you look at existing AI systems and then say "oh, this totally isn't capable of describing a problem or figuring out what's actually wrong"?

I wouldn't say they're completely incapable.

* They can spot (and fix) low hanging fruit instantly

* They will also "fix" things that were left out there for a reason and break things completely

* even if the code base fits entirely in their context window, as does the complete company knowledge base, including Slack conversations etc., the proposed solutions sometimes take a very strange turn, in spite of being correct 57.8% of the time.
Ask HN: Would you soft-launch a landing page in 2025?
by CER10TY | 2025-08-07 10:00:41+00:00
Given the state of vibe coding and how easy it is to scaffold a working web app in 2025 (assuming you've got the technical experience and don't just rely on Lovable), do you think soft-launching a landing page to gauge interest is enough in 2025 or do users expect a fully working app from day 0?
by W3zzy | 2025-08-07 10:00:45+00:00
My employee can intrude on my privacy when he had probable cause but only then. Otherwise it is illegal to collect personal data. I need mutual trust to be productieve and evaluation of my work should always be upfront and transparant.

Otherwise I'm puzzled by your claim of productivity. Especially since we are stalking about labour productivity.

Notice that the top tier of the list is populated by countries with strict privacy laws.

https://en.m.wikipedia.org/wiki/List_of_countries_by_labour_...

> “There is a fundamental shift in how nations approach economic output. Strong social policies and strategic investment in worker well-being are creating more productive economies than traditional long-hour work cultures. The financial sector remains a key driver of high productivity, but it’s the emphasis on work-life balance that distinguishes the leading economies."

https://businessday.ng/news/article/top-10-most-productive-c...

We're past the industrial revolutionaire for while. A happy pig is a fat pig, one could say :-)
by DrScientist | 2025-08-07 10:00:56+00:00
Sure that's potentially one effect- but I'm not sure it's the most important.

The other effect is to reduce international trade and the kind of national interdependency that creates, and so makes, large scale war highly unlikely.

The US is also trying to use it's economic power to force people to choose sides ( cf secondary sanctions on India ).

So while Trump might be anti-forever wars he is busy creating a world where WWIII is much more likely.
by Yizahi | 2025-08-07 10:01:39+00:00
If attacker would fool me at one website he will get that one account (possibly forever) and that's it. If it is a bank connected account, I can intervene and change email/account by writing a physical request to the bank for example, call the bank, do something. And likely it will be only a single bank account. But it may be even some unrelated account. Maybe it will be my Amazon account and all the attacker gets is some ebooks. Or Steam account. Or some email without important links. Etc.

Point is, the damage will be likely local to a single or a handful of accounts.

If all the accounts are protected by two factor on my phone and I lose it or it bricks, then I'm done. It will be a total mess with no paths to recover, except restarting literally everything from scratch.

I have Google Auth app on my phone and every few months I consider using it, but then reconsider and stay with passwords.
by shahartal | 2025-08-07 10:01:42+00:00
Hey all — authors of Vault Fault here (I’m Shahar, CEO at Cyata), really appreciate all the thoughtful comments.

Just to clarify - all the vulnerabilities were found manually by a very real human, Yarden Porat.

The writeup was mostly human-written as well, just aimed at a broader audience - which explains the verbosity. We did work with a content writer to help shape the structure and flow, and I totally get that some parts read a bit “sheeny.” Feedback noted and appreciated - and yep, there’s more coming :)

btw likely missed with the direct link - we also found pre-auth RCE in CyberArk Conjur - cyata.ai/vault-fault
by VierScar | 2025-08-07 10:02:30+00:00
No I don't think it's the bits. I would say it's the computation. Inference requires performing a lot of matmul, and with more tokens the number of computation operations increases exponentially - O(n^2) at least. So increasing your context/conversation will quickly degrade performance

I seriously doubt it's the throughput of memory during inference that's the bottleneck here.
by onecommentman | 2025-08-07 10:02:43+00:00
So perhaps using AI writing tools for English to polish his writing, since English may not be his first language and he doesn’t want stumbling around English syntax to get in the way of his message.

It may become an English writing style we all have to get used to from non-native English speakers and an actual valid use case for current AI. I know I’d use AI this way when writing something important in a language I’m semi-fluent in. I already use search engines to confirm the proper use and spelling of fashionably popular foreign phrases, instead of an online dictionary.
by benreesman | 2025-08-07 10:03:25+00:00
Berkeley Mono, which I highly recommend if you're into that sort of thing. It's finnicky, has to be hinted right. But the ligatures and stuff are pretty unrivaled IMHO. I think it's like 100 bucks or something, but I bought it once 10 years ago and the license is still good, so it's got an amortization schedule that makes it a perfectly sensible part of a toolbox for a professional if you like myself find it more legible and pleasant than most alternatives.
by KronisLV | 2025-08-07 10:03:41+00:00
> Meanwhile, i found that a very good workflow is asking claude code to come back with clarifying questions and then a plan, before just starting to execute.

RooCode supports various modes https://docs.roocode.com/basic-usage/using-modes

For example, you can first use the Ask mode to explore the codebase and answer your questions, as well as ask you its own about what you want to do. Then, you can switch over to the Code mode to do the actual implementation, or the model itself will ask you to switch to it in other modes, because it's not allowed to change files in the Ask mode.

I think that approach works pretty well, especially when you document what needs to be done in a separate Markdown file or something along the lines of it, that can be then referenced if you have to clean the context, like a new refactoring task for what's been implemented.

> I find it interesting how marketers are trying to make minimal prompting a good thing, a direction to optimize.

This seems like a good thing, though. You're still allowed to be as specific as you want to, but the baseline is a bit better.
by nelox | 2025-08-07 10:04:08+00:00
Arguing that “none of this is ok” overlooks the security context in which states operate. Israel is not conducting indiscriminate mass surveillance of its own citizens. It is monitoring communications in territories largely controlled by designated terrorist organisations such as Hamas (see: https://home.treasury.gov/policy-issues/terrorism-and-illici...). That is not equivalent to the NSA intercepting Americans’ domestic calls.

Even Snowden’s own disclosures differentiated between the problematic scope of domestic collection and the more accepted targeting of hostile foreign entities (https://www.theguardian.com/world/2013/jun/06/nsa-phone-reco...). You may oppose both, but equating them as equally unjustified weakens the argument.

Israel has experienced decades of terror attacks, rocket fire and armed conflict originating from Gaza and the West Bank. That fact matters. Countries routinely intercept communications from adversarial regions, whether it’s the NSA, GCHQ, or Shin Bet. Calling this “insane” suggests a disregard for the protective responsibilities of a state.
by grahameb | 2025-08-07 10:05:12+00:00
I recently set up passkey-only sign ins for a webapp I'm writing using Authentik [0](Python OIDC provider, with quite a nice docker-compose run-up, took only minutes to stand up.) It was surprisingly easy to configure everything so that passkeys are the only thing ever used.

If anyone would be interested I could write it up? I was surprised what a nice user flow it is and how easy it was to achieve.

[0] https://goauthentik.io/
by naiquevin | 2025-08-07 10:08:02+00:00
I’m also interested in this. I have a similar use case, to implement “cross device sync” functionality for a local-only webapp. I tried out automerge but it felt like it’s meant for syncing data when multiple users collaborate, and not data sync for a single user who is expected to use only one device at a time (I could be wrong about this).

I have implemented a POC sync mechanism via central server and I believe it’s simpler as it takes advantage of certain assumptions about the app. I’ve yet to productionize it so I am interested in knowing if my understanding is correct or if there are other existing solutions for this use case.
by nelox | 2025-08-07 10:08:54+00:00
Israel did not “put Hamas in power.” Hamas won the 2006 Palestinian legislative elections. These were monitored by international observers, including the Carter Center, who confirmed the vote was largely fair: https://cartercenter.org/news/pr/palestine_013006.html. The idea that Israel created Hamas is a misrepresentation of historic tactical decisions in the 1980s, when Israel tolerated some Islamist activity as a counterweight to the PLO. That is not the same as “putting Hamas in power,” and certainly not a reason to ignore Hamas’s current actions.

As for land and citizenship, roughly 20% of Israeli citizens are Arab, including Muslims and Christians, with full voting rights. The Palestinians in the West Bank and Gaza are not Israeli citizens because they are governed by the Palestinian Authority and Hamas respectively, per the Oslo Accords. Israel cannot unilaterally give them citizenship without dismantling those agreements, which Palestinians also signed. See: https://ecf.org.il/issues/issue/153.

Calling the situation “colonialism” ignores the fact that both sides claim historic ties to the land and have engaged in multiple rounds of negotiations. That includes offers of statehood rejected by Palestinian leadership, notably in 2000 and 2008. See: https://www.nytimes.com/2009/06/28/magazine/28israel-t.html.

Security and morality are not mutually exclusive. Both sides deserve accountability and safety.
by zozbot234 | 2025-08-07 10:09:48+00:00
Typically, the token generation phase is memory-bound for LLM inference in general, and this becomes especially clear as context length increases (since the model's parameters are a fixed quantity.) If it was pure compute bound there would be huge gains to be had by shifting some of the load to the NPU (ANE) but AIUI it's just not so.
by smartbit | 2025-08-07 10:09:49+00:00
Looking at https://news.ycombinator.com/submitted?id=DrPhish it's probably this machine https://rentry.co/miqumaxx

* Gigabyte MZ73-LM1 with two AMD EPYC GENOA 9334 QS 64c/128t * 24 sticks of M321R4GA3BB6-CQK 32GB DDR5-4800 RDIMM PC5-38400R * 24GB A5000

Note that the RAM price almost doubled since Jan 2024
by newswasboring | 2025-08-07 10:10:25+00:00
Yes precisely what I am trying to say. This is not an outcome of technology, its an outcome of how our socio-economic system is set up. The company owners could have easily given you the benefit of technology improvement, made a 3 day work week or made a 4 hour work day and hired more people or reduced their own ambitions. Instead they chose to squeeze everything out of you.
by Aaargh20318 | 2025-08-07 10:10:43+00:00
> I’d rather granny needs to visit the bank to get access to her account again, than someone phishes her and steals all her money.

But granny can't go to a bank because they closed down most of their offices. Since 99% of what you need a bank for can be done using their app it no longer made financial sense to have a physical presence in most smaller towns and villages.

Lots of elderly were complaining about this when it happened because they were too lazy to learn how to use the bank apps. Hell, they already started complaining when you could no longer withdraw money at the desk even before they closed down the offices. Apparently even learning to use something as simple as an ATM was too much effort for them.
by noduerme | 2025-08-07 10:10:57+00:00
HaXe is great fun as a language, and I would definitely consider it now if I were writing a new game from scratch. But I never found anything to be a straightforward port from as3. There was too much unsupported particularly in networking. Too much of what I wrote relied on Adobe's NetConnection and socket implementations, plus other .fl packages that never made it over. Not looking at it right now, but that was pretty much the wall I hit at the time around 2019... there was no build target that wouldn't require rewriting the whole way a multiplayer game platform handled networking to get around the sandbox limitations that you could work inside of in AIR or Flash.

Maybe I was just kinda dejected and could have solved it, but instead I moved over to TS and PixiJS, ported some necessary logic and started my whole stack over.
by jnpnj | 2025-08-07 10:11:58+00:00
I'm curious about your experience, I like SQLAlchemy granularity and expressiveness, but after a while I found django fits the "good enough" niche very well, it's quick and not too dirty (the name wrangling for joins is funky but it's ok). What kind of queries or logic did SQLAlchemy allowed you to write that Django would make hell to reach ?
by technion | 2025-08-07 10:12:18+00:00
I generally dont like seeing these "blind username enumeration" type issues.

Its nearly always possible to get usernames elsewhere, they are basically public and the private part is the key and any mfa token. Usernames can get locked out, but the workaround of having user enumeration sprays always burn CPU hashing time delaying passwords doesn't seem like a step forward.
by artdigital | 2025-08-07 10:12:20+00:00
Yeah agree. I currently don't subscribe to any of the Gemini things because I'm too much in the Claude ecosystem and can't justify another sub. But if I were to subscribe to something, it would be the Google Developer Premium plan. Mostly for Gemini CLI, but that alone is currently still way too rate-limited and not worth it.

Maybe if they add Jules and some version of Gemini to it (without the Gdrive storage and YT premium stuff), I would get onto it.

Having Jules in the normal consumer Gemini subscription makes no sense. It's very clearly a dev product, so it should be bundled with other dev products, so through GCP with Code Assist or Google Developer Premium. It feels completely out of places in the list of features on https://one.google.com/ai
by RossBencina | 2025-08-07 10:12:26+00:00
Definitely an interesting idea. It has been discussed here a bunch of times before. Usually someone points out cases where it doesn't do so well. Has it been updated lately?

https://news.ycombinator.com/item?id=38451680 (159 points)

https://news.ycombinator.com/item?id=24069465 (152 points)

https://news.ycombinator.com/item?id=10964617 (117 points)
by nosianu | 2025-08-07 10:13:36+00:00
Or heavy metal and other neuro-toxins.

That is a far more severe problem than 99% of the public realize. It is like light outside the visible spectrum, or bacteria and viruses, before we had tools to see them.

While we can detect them, unless somebody has a huge sudden exposure, so that they have clearly attributable symptoms, smaller effects can only - badly - attributed statistically, for populations. Badly, because what exactly do you measure? It's not like you get numbers naturally. More aggression, less brain-ability in general, the measurements used even for the statistical analysis is hard.

Long-term slow exposure always correlates with age, so problems can easily be attributed to "aging" instead. And of course stress. And "it's all in your head" - which funnily (or unfunnily) enough is true!
by XCSme | 2025-08-07 10:13:48+00:00
I know there was a downloadable version of Wikipedia (not that large). Maybe soon we'll have a lot of data stored locally and expose it via MCP, then the AIs can do "web search" locally.

I think 99% of web searches lead to the same 100-1k websites. I assume it's only a few GBs to have a copy of those locally, thus this raises copyright concerns.
by mrweasel | 2025-08-07 10:14:12+00:00
> IMO a db access layer or web framework should be completely independent of domain logic, but Django makes that really difficult.

That is an issue/features in Django, depending on your view. You really don't get to do things the framework doesn't want. If you're trying to fight the ORM or any of the components in Django really, including the Django REST framework, you're going to lose and have a bad time.

There are certainly reason why you'd want to separate domain logic from the database access, but then Django isn't what you want. You're also going to miss out many of the things that makes Django easy to work with, like getting most CRUD operations for free.
by trgwii | 2025-08-07 10:14:51+00:00
Yes it can, the comptime expression inside the if would turn into a `true` or `false` literal, but you would need a separate build tool to optimize away the if. That's partly why comptime.ts outputs TypeScript iirc.

I believe both Vite and Bun bundler would apply the optimization to eliminate constant conditionals when you use comptime.ts as a plugin.
by chrisco255 | 2025-08-07 10:16:26+00:00
1. The escalated tension between the United States and China is unlikely to resolve in the next 3.5 years. Apple already took the step to move iPhone production to India. However, as recently shown, even India could be subject to tariffs as they are purchasing Russian oil and in effect funding the Ukraine war. The next president will have to operate in a multipolar world.

2. The tariffs are producing revenue for the Federal government. Hundreds of billions per year. To remove the tariffs arbitrarily in the future, a President would need to assume the political risk of increasing the national deficit.

3. Trump imposed tarriffs on his first term that Biden did not reverse. Even if the next President is a Democrat it's more likely than not that the trade deals remain in place.

4. A strong contender for the next president is the current vice president, JD Vance, who would be highly unlikely to reverse.
by vidarh | 2025-08-07 10:16:41+00:00
Seconded.

I also like the Brian Bagnall books (beware: There are two multi-volume editions, the second edition is far larger which is good/bad depending on how interested you are) but they are much more for those already interested in Commodore, though "Commodore: The Amiga Years" on its own is worthwhile for people interested specifically in the Amiga.

Maher's The Future Was Here is much more accessible to people who has want a lighter read and/or don't have a personal relationship to the Amiga and Commodore, though.