MurphyA/hacker-news huggingface dataset:
by mooreds | 2025-08-19 16:09:02+00:00
> This is a great time to build a relationship with readers. Start a blog, start a newsletter, start linking to your posts on social media or wherever makes sense. Forget about Google. Put good content out on the web and the right people will eventually find it.

Yes. However, as pointed out further up in the article, know that you have to change your business model. If you were relying on SEO for free traffic which turned into customers, well, you have some things to adjust.
by albertzeyer | 2025-08-19 16:09:12+00:00
In my case, my lawn isn't easily accessible and also not visible from the street (because the house and garage is between the street and the garden), and I trust my neighbors. So, I think (I hope) this isn't so much an issue for my case.

I think the eufy has also an optional GPS module just for this purpose, to better track it. I don't think this GPS module has any other purpose (e.g. it would not be used for navigation). But I didn't really checked the details on this.

I have seen this a few times for such robots, that you can buy an optional GPS module for tracking.
by DrScientist | 2025-08-19 16:09:17+00:00
That wasn't my point. The point is such a back-door doesn't necessarily enable dragnet surveillance - of the kind that,for example, Snowdon revealed the US government was doing.

There is a big difference in my view between court authorized search warrants ( in effect ), and blanket surveillance.

Can authorities abuse the former? Sure - but on the other hand it's hard to argue that authorities should have no powers at all to perform searches if they make the appropriate case to the courts.
by franciscop | 2025-08-19 16:09:26+00:00
This seems totally fine though? XSLT 1.0 supporter says the support time is costing heavily, then Chrome says removing support is fine, which seems to align to both of them.

It'd be much better that Google did support the maintainer, but given the apparent lack of use of XSLT 1.0 and the maintainer already having burned out, stopping supporting XSLT seems like the current best outcome:

> "I just stepped down as libxslt maintainer and it's unlikely that this project will ever be maintained again"
by _ache_ | 2025-08-19 16:09:27+00:00
I get the point a minimal browser and WASM, but Java bytecode ?! Why not Python bytecode ? Seems unreasonable to me to add any specific bytecode support. By layout rules you mean get rid of CSS ? Sounds also unreasonable IMHO.

And no WebAudio and Canvas couldn't be implemented in client WASM without big security implication. If by module you mean inside the browser, them, what is the point of WASM here ?
by dataviz1000 | 2025-08-19 16:10:27+00:00
In the past 3 weeks I ported Playwright to run completely inside a Chrome extension without Chrome DevTools Protocol (CDP) using purely DOM APIs and Chrome extension APIs, I ported a TypeScript port of Browser Use to run in a Chrome extension side panel using my port of Playwright, in 2 days I ported Selenium ChromeDriver to run inside a Chrome Extension using chrome.debugger APIs which I call ChromeExtensionDriver, and today I'm porting Stagehand to also run in a Chrome extension using the Playwright port. This is following using VSCode's core libraries in a Chrome extension and having them drive a Chrome extension instead of an electron app.

I very heavily use the VSCode Copilot coding agents for all this.

These are not trivial problems.
by cpldcpu | 2025-08-19 16:10:57+00:00
This was 10-15 years ago.

In between they used dedicated ASICS: https://cpldcpu.com/2013/12/08/hacking-a-candleflicker-led/

And more recently simply microcontrollers: https://cpldcpu.com/2024/01/14/revisiting-candle-flicker-led...
by int_19h | 2025-08-19 16:11:03+00:00
XSLT is designed to work on the XML Infoset, which is basically just an abstract tree of elements with attributes. Which is why XSLT has e.g. HTML output method, even though you use XML snippets to generate it. If you already have logic to parse HTML into a tree, it's trivial to run XSLT on it. Indeed, most recent version of XSLT uses the same trick to process JSON even.
by drfrankensearch | 2025-08-19 16:11:26+00:00
There’s a repeated paragraph in it atm you may want to fix:

“This is why prompt structure matters so much. The model isn’t reading your words like you do — it’s calculating relationships between all of them simultaneously. Where you place information, how you group concepts, and what comes first or last all influence which relationships get stronger weights. This is why prompt structure matters so much. The model isn’t reading your words like you do — it’s calculating relationships between all of them simultaneously”

Reprimand the editor. ;)

I look forward to using the ideas in this, but would be much more excited if you could benchmark these concepts somehow, and provide regular updates about how to optimize.
by BCM43 | 2025-08-19 16:11:34+00:00
“As a result, the UK has agreed to drop its mandate for Apple to provide a ‘back door’ that would have enabled access to the protected encrypted data of American citizens and encroached on our civil liberties.”

Back doors to end-to-end encryption are considered bad now? Someone should tell the FBI. https://www.fbi.gov/how-we-investigate/lawful-access/lawful-...
by rimunroe | 2025-08-19 16:11:47+00:00
They were so good. The owner really put a lot of work into them. There were a lot of WC3 mod servers, but these ones were much more fully featured than most. I've always wanted to ask rACEmic how much of the features I remember were custom. The forums were extremely active. I don't know how accurate my memory was, but I think there were around 3000 registered users. I was active in the community in my mid-late teen years, so it was a formative time I remember pretty clearly.
by tptacek | 2025-08-19 16:11:48+00:00
No it didn't. The DNSSEC was a DoD/TIS project meant to make the DNS security model cohere with IPSEC, which at the time people believed would be the standard transport on the Internet. Then, when DNSSEC began to be taken more seriously as an operational security measure, it was because of the difficulty in authenticating additional data records in DNS responses --- the attacks Eugene Kashpureff used during his weird AlterNIC coup attempt. These aren't ID collision attacks at all.

It wasn't until Kaminsky combined transaction IDs with additional data poisoning in 2008 --- an entirely novel attack --- that BIND began randomizing and gave up on holding out for DNSSEC. You'll notice that since 2008 DNS cache poisoning has basically vanished as a real operational security concern. That's not because of DNSSEC.
by christkv | 2025-08-19 16:12:18+00:00
Let's see... What could it be. You worked from home, saw your kids much more had a happier and more easy to organise family life. Now you have to go back to some soulless office and commute and you see less of your kids and family. Yet you can survive on one salary if you just re-adjust your spending. Hmm what to do. Soulless corp, endless meetings and people who forget you 24h after you are fired or die, or more time with your loving family.....
by JustExAWS | 2025-08-19 16:12:23+00:00
I’ve been in the industry for 30 years professionally and before that 10 years as a hobbyist assembly language (65C02, 68K, PPC and finally x86) programmer. To pretend that the previous “4GL” tools are analogous to what LLMs can do is silly.

I am always using the anecdote that there are projects I scoped pre-2023 that I would have had to have at least one or two junior devs to do help me do the work after I wrote out all of the design specs and now I can do myself in the same amount of time with ChatGPT. That’s along with my lead/architect role of talking to the client, a lot of project management work, design documents, helping sales etc.

It’s a step change.

While I hated every single 4GL tool that I’ve ever encountered (well HyperCard has a soft spot in my heart), because it was limiting, I can use ChatGPT, to create my infrastructure (CDK, Cloudformation, Terraform), and my code based on talking to it like I would a good junior developer.

I can’t tell a junior developer I need IAC done in Node (the CDK), and code written in Python using the SDK and expect them to immediately know how to use both across 130+ different services.

I have never once in my decade plus of being over projects and having the ear (or direct authority) to hire someone said “what I really need are some junior developers who don’t have any real world experience. That would definitely help me ship faster”.

Why would I do that instead of poaching a mid level developer who can hit the ground running without doing a year of negative work (ie take time away from the team asking dumb questions).
by hombre_fatal | 2025-08-19 16:13:02+00:00
It's a very convenient red herring to zoom in on some additives instead of zooming out to evaluate your dietary patterns.

Probably because we can use it to let ourselves off the hook for a bad diet. We can do things like roleplay that it's the seed oil in our Doritos making us fat, and that if it were butter then, idk, it would be a superfood or something?

It's the pepperoni, 15g sodium, 100g saturated fat, and 3000 calories of Costco pizza you just ate that's doing a number on your body, not the guar gum in the dough.

Or, how are you going to pick apart an ingredient list when you just ate a half-dozen home-cooked lard donuts? You're cool with laying down arterial plaque but you draw the line at ascorbic acid in the store-bought cream filling?

The "ulta processed" meme is a huge distraction. It's like listening to a fat guy talk about how he's very particular about the gum he chews because he stays away from "sugar alcohols". Yeah? What about the other 4999 calories of food you ate today?
Show HN: AsyncFlow – Event-loop aware simulator for async distributed systems
by gb00 | 2025-08-19 16:14:00+00:00
Hi HN,

I’m a theoretical-physics–turned–software engineer, and over the last several months I built AsyncFlow, an open-source discrete-event simulator for asynchronous distributed backends.

Idea: create a digital twin of your service before you deploy. You define a topology in YAML (client → optional load balancer → N servers → network edges with stochastic latency) and a workload driven by a stochastic request generator. The simulator runs full request lifecycles through each server’s event loop with explicit models for CPU work (blocking), I/O waits (non-blocking), and RAM residency.

What you get: production-like metrics (p50/p95/p99 latency, RPS, queue lengths) and plots to answer questions like “How many cores do I need to keep p99 < 100 ms?” without spinning up infra or running an expensive load test.

Example with output (2-server LB): https://github.com/AsyncFlow-Sim/AsyncFlow/tree/main/example...

Quick start

pip install asyncflow-sim

Repo & README: https://github.com/AsyncFlow-Sim/AsyncFlow

Why this vs load testing? Load tests (Locust, k6) measure a real system. AsyncFlow simulates one that doesn’t exist yet, so you can compare designs and size capacity offline, then validate with a load test later.

Status (alpha):

Works end-to-end; strict Pydantic schemas; ready-made plots; Pythonic builder.

Limits: simple network (latency + optional drops), single event loop per server, linear endpoint flows, no thread concurrency, single core per server.

Roadmap: Monte Carlo runs w/ confidence intervals, event injection (server down/up, network spikes), cache step, richer network model, richer nodes structure.

I’d love feedback on:

- YAML vs Python builder ergonomics - Which metrics/plots you want by default - Realistic knobs you’re missing for what-if capacity planning

MIT-licensed. Thanks!
by tptacek | 2025-08-19 16:14:09+00:00
It can be actively exploited in the same way that TCP initial sequence numbers can be exploited: when something else goes horribly wrong in the protocol stack. Contra the claim across the thread that the fundamental fix to this problem is DNSSEC (which is never going to happen), the real fix for all this stuff is not to trust this layer of the TCP/IP stack for authentication in the first place: you do cryptography, at the transport layer (not in the name lookup) so that IP address spoofing doesn't matter in the first place.
by pc86 | 2025-08-19 16:14:11+00:00
I've "vibe-coded" a few small hobby projects, and use cursor sometimes for professional stuff, and it always collapses for me on "real" front-end tasks. Yeah I can say "give me a layout of a certain style" and it will do reasonably well if it has no existing constraints. But for example, I vibe-coded a UI and then tried to adjust the tailwind theme it picked, and it was an absolute nightmare. You would have thought "change the primary color from A to B, select a new accent color that is darker than what you've selected and is not A or B, and now update the dark theme to be comparable" spread across multiple prompts was one of those crazy 3d animation puzzles you see used as a way to break LLMs.
by Kirby64 | 2025-08-19 16:15:00+00:00
> Everyone here seems to be avoiding the point that ultra processed foods contain ingredients that home bakers would never use: preservatives, anti-caking agents, flavor enhancers, artificial colors and flavors. Ingredients that are not food and add little to no nutritional value.

Precisely what is wrong with flavor enhancers? A common flavor enhancer is MSG, and using that in homemade dishes would not be that unusual. I frequently use it in many home preparations that could use more savory flavor.

Likewise with thickeners or emulsifiers such as cornstarch, xanthum gum, guar gum, etc: these are often used in many preparations at home. Just because something has 'no nutritional value' doesn't mean it doesn't have culinary value. By this same logic, spices have no nutritional value and are just flavors, which clearly doesn't pass the sniff test.
by abduhl | 2025-08-19 16:15:03+00:00
When someone says "structural steel" they are normally talking about something similar to A572. A572 comes in multiple grades, with grade 42 being the lowest. Grade 42 has a yield strength of 42 ksi (hence grade 42) and a rupture strength of 60 ksi by spec. 60 ksi is 414 MPa. Even A36 (which is basically the weakest structural steel commercially available nowadays) has a rupture strength of around 60 ksi and a yield strength of 36 ksi. Hence, even the weakest "structural steels" have a rupture strength of around 400 MPa.

When I use the word "rupture" I am talking about the material property, not the specific submarine loading condition at play. When comparing steel, which is a ductile material, to carbon fiber, which is a brittle material, you should use the steel's rupture strength instead of yield strength. Steel is for all intents and purposes an isotropic material, and the difference between tensile strength and compressive strength is not material in practice (because steel in compression is nearly always governed by macro-scale geometric issues leading to buckling rather than the material strength in compression being exceeded).
by 9dev | 2025-08-19 16:15:06+00:00
While this sounds crazy at first, I could warm for several incremental layers of features, where browsers could choose to implement support for only a set of layers. The lowest layer would be something like HTTP with plain text, the next one HTML, then CSS with basic selectors, then CSS with the full selector set, then ECMA and WASM, then device APIs, and so forth.

Would make it possible to create spec-compliant browsers with a subset of the web platform, fulfilling different use cases without ripping out essentials or hacking them in.
by pillars | 2025-08-19 16:15:07+00:00
Some Machinist channels on youtube: this old tony, Chronova engineering, cylo's garage, inheritance machining, breaking taps, blondie hacks, tarkka, dan gelbert, Jonesey Makes, Eric(with a K), Clough42, Alec steele, NBR Works, Not An engineer, Stefan Gotteswinter, oxtoolco, ROBRENZ, MrCrispin, Clickspring, Artisan Makes, MH Anything,
by hammadmlk | 2025-08-19 16:15:18+00:00
1. Offline models: Yes that is on the roadmap. There is a big demand for them especially in interactive educational use-cases.

2. Urdu and Modern Hindi can be cross understood in spoken form. The authentic Hindi is much different though and I can't understand the press releases that are done in super authentic Hindi. The writing systems in Urdu and Hindi is completely different too, so even if there is a great TTS system in Hindi, I cant use it. Accent are very different too.

Scripts: ہیلو हेलो
Show HN: Open-source CLI that records your terminal into lightweight SVG demos
by taoh | 2025-08-19 16:15:28+00:00
Hi, HN!

Our team has been working on a suite of tools that help developers to better document their work. We released an open source tool [DeepGuide CLI](https://github.com/DeepGuide-Ai/dg) that records terminal and automatically convert it to SVG which can be copied and pasted, and allow search engine to index.

Why dg?

* Demo GIFs and Videos are large. dg replaces them with animated SVG, up to 50–100× smaller than equivalent GIFs, ensuring your README docs stays lightweight and fresh. * Demos aren’t just illustrative; they’re re‑run and validated in github CI, so if something breaks, the PR fails. * Works across any Node.js 18+ environment: macOS, Linux, and Windows (via WSL). We tried to use bun to build it into a binary program, but it was flakey due to the reliance on foundational programs. * Open source: Built on solid and awesome OSS foundations like asciinema, node‑pty, and termsvg, all with permissive licenses.

It's easy to use:

```bash # Install via npm (recommended): sudo npm install -g @deepguide-ai/dg

# Or run without installing: npx @deepguide-ai/dg init ```

Once installed, you can just run `dg capture` which will start a pty that allows you to run any terminal programs. After exiting, the recording will automatically be converted to a SVG in your local folder. It streamlines the process of downloading asciinema, installing it, recording your workflow, and converting the cast to SVG into a single command.

Moreover, the recordings were saved into CI action folder. You can easily add them to your Github actions to re-run the workflow as part of CI.

If you’re tired of outdated CLI screenshots or bloated GIFs, dg might be just the tool for you — lightweight, automatic, and CI-friendly.

Do you think such tool is useful? Do you think it would help console devs to better document their work? Or is it useful to record CLI tools such as Claude Code or Gemini CLI sessions and share with others as SVGs? Would love your feedback, issues, or PRs!
by albertzeyer | 2025-08-19 16:15:32+00:00
Maybe 300 m^2 or so.

The eufy E15 is for up to 800 m^2. There is the eufy E18 for up to 1200 m^2.

I have seen other (more expensive, bigger) robots for much larger lawns.

My garden is relatively flat with a few bumps here and there.

You can also easily mark some areas of the lawn as always excluded so that it wont drive there.
by JimDabell | 2025-08-19 16:15:41+00:00
> Why do people create such joke PRs?

> We didn't forgot your decade of fuckeries, Google.

> You wanted some heated comment? You are served.

> the JavaScript brainworm that has destroyed the minds of the new generation

> the covert war being waged by the WHATWG

> This is nothing short of technical sabotage, and it’s a disgrace.

> breaking yet another piece of the open web you don't find convenient for serving people ads and LLM slop.

> Are Google, Apple, Mozilla going to pay for the additional hosting costs incurred by those affected by the removal of client-side XSLT support?

> Hint: if you don't want to be called out on your lies, don't lie.

> Evil big data companies who built their business around obsoleting privacy. Companies who have built their business around destroying freedom and democracy.

> Will you side with privacy and freedom or will you side with dictatorship?

Bullshit like this has no place in an issue tracker. If people didn’t act like such children in a place designed for productive conversation, then maybe the repo owners wouldn’t be so trigger happy.
by lucb1e | 2025-08-19 16:15:51+00:00
We pentest lots of corporate applications so if this was widespreadly deployed in the last ~8 years that I've been doing the job full time, I don't know how I would have missed it (like, never even saw a talk about it, never saw a friend using it, never heard a colleague having to deal with it... there's lots of opportunities besides getting such an assignment myself). Surely there are talks on it if you look for it, just that I haven't the impression that this is a common corporate thing, at least among the kinds of customers we have (mainly larger organizations). A sibling comment mentions they use it on their hobby site though
by slightwinder | 2025-08-19 16:15:56+00:00
> It’s a markdown editor, but they can’t modify the markdown standard,

They have several modifications of Markdown, everyone has. But not everything makes sense to implement in a flavour of Markdown. YAML is for structured data significant better than a freeform-format, especially when you're in the phase of building the foundation of a new feature-family.

The complain is valid, Markdown is for documents, free form, free flow, structured data are a very different use case, and while YAML is better for the job, it's still a different language with different smell.

But Obsidian is a tool for managing knowledge, always has been; it's not just a plain Markdown-editor. All those features which are going beyond simple flavoured text, have always been part of it's Core-Mission, just not materialized yet.
by BoiledCabbage | 2025-08-19 16:16:05+00:00
So if in reading the two threads correctly essentially Google asked for feedback, essentially all the feedback said "no, please don't". And they said "thanks for the feedback, we're gonna do it any way!"?

The other suggestions ignored seemed to be "if this is about security, then fund the OSS, project. Or swap to a newer safer library, or pull it into the JS sandbox and ensure support is maintained." Which were all mostly ignored.

And "if this is about adoption then listen to the constant community request to update the the newer XSLT 3.0 which has been out for years and world have much higher adoption due to tons of QoL improvements including handling JSON."

And the argument presented, which i don't know (but seems reasonable to me), is that XSLT supports the open web. Google tried to kill it a decade ago, the community pushed back and stopped it. So Google's plan was to refuse to do anything to support it, ignore community requests for simple improvements, try to make it wither then use that as justification for killing it at a later point.

Forcing this through when almost all feedback is against it seems to support that to me. Especially with XSLT suddenly/recebtly gaining a lot of popularity and it seems like they are trying to kill it before they have an open competitor in the web.

https://github.com/whatwg/html/issues/11523
by mkw5053 | 2025-08-19 16:16:06+00:00
I am trying to capture the idea that opinionated tests assert invariants and contracts at integration boundaries, while coverage-driven suites often spend effort on shallow checks. The goal is fewer but stronger tests that actually prevent regressions.

Here is one attempt at defining a TESTING.md that I pass to Claude Code [0].

Honestly, it is different from what I now use in other projects. For example, I have found that mutation tests are rarely worth the added complexity. I have not yet found a good way to enforce a deterministic gate that only permits “good” tests, so I settle on defining expectations in a markdown file that I pass to whichever coding agent I am using.

[0] https://github.com/Airbolt-AI/airbolt/blob/main/TESTING.md