MurphyA/hacker-news huggingface dataset:
by real_marcfawzi | 2025-08-07 14:44:26+00:00
Thanks for your curiosity and interest. I need to update the Roadmap because it omits the fact that we already trained the model on synthetic data generated from 100% AI enactments (no humans involved) which baked-in the moral critical thinking framework that we had landed on (through lots of thinking and feedback from people over the last two years.) What Phase 4 is about is doing it with human generated data, where our community members participate in the enactments, but to do that we have to have enough users to generate sufficient data for post training. That way it'll be "community-led" training. Phase 3 is simply taking the responsive web app and putting it inside a WebkitView container, but no point in it until we have funding to scale on the backend.

Happy to jump on zoom and discuss the details. We have raised around $100K in "micro investments" via SAFE at a relatively low valuation, and some of the micro-investors are also collaborators on the technical and/or vision/community building side. Myself and Syd have put in a lot more than that into it, but that was the cost of all the experimenting and learning. Microsoft also funded us with Azure credits for $25K, which we used to partially cover the cost of the initial post training.

Happy to chat offline: marc.fawzi on gmail
by gruez | 2025-08-07 14:44:40+00:00
>"Typical" is doing a lot of heavy lifting here. Is it typical in your socioeconomic class? No probably not. Is it typical in terms of many millions of people experience this problem every election cycle? Yes.

Do you honestly think the median person who can't vote because of voter ID laws is experiencing the same level of difficulty as a homeless person trying to get an ID? If not, then maybe you shouldn't accuse other people of ""Typical" is doing a lot of heavy lifting here".
by Ancapistani | 2025-08-07 14:44:46+00:00
> the correct social media response for a critical outage is "we're looking into it". Not "if you want support, go here".

I strongly disagree.

For those reading who may not be on X, here's Fastmail's response:

> Hello Andrew! Can you please contact our support team so we can look into this for you? http://fastmail.com/support

That seems entirely appropriate to me, for several reasons:

- it's extremely unlikely that the person managing their social media profiles is a technical expert - their contact page likely feeds into a ticketing system, which means they can track the issue and actually make sure to respond to you - it's entirely possible that response was automated
by weinzierl | 2025-08-07 14:44:48+00:00
"Free codecs only came along at all because Google decided to subsidize development but that became possible only 15 years or so after MPEG was born, and it's hardly a robust strategy"

I don't know about video codecs but MP3 (also part of MPEG) came out of Fraunhofer and was paid by German tax money. It should not have been patented in the first place (and wasn't in Germany).
by fennecfoxy | 2025-08-07 14:45:00+00:00
Also have the same experience with regular Google search now (and other engines, too). I think part of the problem is the degradation of Google's product, but also the endless amount of absolute shit that humanity is vomiting onto the Internet now. The commercialisation of (almost) the entire Internet during the mid 2000s has wrecked it all.

Now AI searches that: search, pull various pages to examine real contents, continue searching etc, then summarise/answer is realistically the only way to filter through all of said bullshit.

AI searches help with the clickbait problem as well, since even "reputable" news outlets are engaging in that fuckery now.

It's either; we use AI to sift through the dead carcass of our old friend, or we enforce rules for a clean Internet - which I can definitely not see happening.
Show HN: I Built a Gemini 2.5 Pro Chrome Extension for Effortless Email Drafting
by AppMaestro | 2025-08-07 14:45:24+00:00
After one long week fighting email overload, I built an AI Chrome extension that drafts replies for me. I was spending way too much time just trying to find the right words. So, I hacked together a little tool. It looks at the email and, using the smarts of gemini-2.5-pro, writes a draft. The basic bits are in popup.js ,manifest.json and popup.html for the simple interface. It’s surprisingly good at getting the tone right and saves me a bunch of time every day. I’ve been using it myself and it's cut my email time by maybe 20-30% already. Would love to hear what you think and if it helps anyone else drowning in their inbox.
by bjtitus | 2025-08-07 14:45:49+00:00
There are many reasons why reaching out to support will be more effective. Logging may be tied to accounts, support systems may upload client side logs where appropriate, an event may be tracked to determine a point in time when you had the problem so relevant logs can be checked.

Their messaging probably could have been better here to say "we're looking into this. If you have time, please file a support request".

On Fastmail.com, the support request is two clicks away, under the big ? button in the upper right and "Contact Support". I'm not sure how much time you have but it took me less than 1 minute to find this button and submit from my logged in account.
by NoGravitas | 2025-08-07 14:46:23+00:00
If they are doing this to 125,000 accounts, they should get an average of one account per day, right? So on average it would on average take them 342 years to get any specific account, but as long as they aren't trying for any particular account, they've got a pretty good ROI.

I guess the fix for this would be exponential backoff on failed attempts instead of a static quota of 4 a day?
by electric_muse | 2025-08-07 14:46:37+00:00
I think MCP has legs well beyond just the LLM / agent world. Just like USB went from "how I connect my mouse" to "how I charge my beard trimmer."

In fact, I imagine it's going to go full-duplex with all our systems, becoming a more standard way for systems to communicate with each other.

Under the hood, MCP is just JSON RPC, which is a fine format for communicating between systems.

MCP layers on some useful things like authentication and discovery. Both are critical to any kind of communication between systems built by different authors (e.g. various apps and services). Discovery, especially, is the fascinating part. Rather than hoping an OpenAPI spec exists and hoping it's right, MCP has this exchange of capabilities baked in.

I spent the last 9 years building integration technology, and from that perspective, the discovery-documentation-implementation problem is the core issue.

Right now, LLMs basically "solve" the integration problem because they can do the mapping between external tools/resources/formats and internal ones.

But there's nothing that strictly "requires" an LLM to be involved at all. That's just the primary reason to develop MCP. But you could just as well use this as a way for integrating systems, making some bets on interface stability (and using LLMs for cases only when your prior expectations no longer hold and you need a new mapping).

The comparison is perhaps imperfect and overused, but I feel like we're witnessing the birth of a new USB-like standard. There's something right now that it was designed to do, but it's a decent enough standard that can actually handle many things.

I wouldn't be surprised if in some period of time we see enterprise apps shift from REST to MCP for bi-directional integrations.

For the OP, I'm not sure if you're working on an MCP proxy (A) as a commercial offering, (B) as something for your team to use, closed source, or (C) as something open source for fun. But we just built and started selling an MCP proxy/gateway. It handles identities for humans & bots, tool allowlists, and policy setting for an org.

If you don't want to build something on your own because of option B above, get in touch.
by ryandrake | 2025-08-07 14:46:40+00:00
I could fix pretty much any problem in that 1995 Toyota with tools that I have in my workshop. Unlike my 2009 car which requires a computer interface to do basic diagnostics and needs to be reprogrammed after many repairs. Let alone a 2020+ car (I've never had anything that new) that probably come with the hood welded closed.
Show HN: TabPref – A social network for the service and hospitality industry
by tabpref | 2025-08-07 14:46:57+00:00
Hey HN!

We just launched TabPref — a social platform built for the people who make the hospitality and nightlife world run: bartenders, servers, barbacks, vendors, and venue owners.

TabPref supports:

Multi-profile switching (for pros juggling multiple roles)

Vendor discovery and listings

A networking feed designed for industry needs

Consumer profiles, too — not just for professionals

It’s a fresh take on professional networking — think LinkedIn meets nightlife.

We’re in public beta now — no NDA required.

Open to feedback, testers, and potential partners.

https://tabpref.com
by hskhawaja | 2025-08-07 14:47:11+00:00
Most people I talk to are burnt out on video-based learning. I was too.

So I built PageZero(https://pagezero.ai) — a different format where you learn real-world skills by typing answers into short AI-powered prompts, like mini challenges.

What would make you try a new way of learning?

I’d love to hear what turns you off from most online learning platforms — or what you wish existed instead.
by slightwinder | 2025-08-07 14:47:13+00:00
Usually, for the old/new distinction the architecture and used algorithm are relevant. Old software is often designed for less workload and lower complexity, and can easier get stuck in certain situations for which it wasn't designed.

For example, because of a holiday, the system would be confronted with more customers than it can handle, and any little change (like a failing plane or changing flight-staff) could lead to a crash of the system. IIRC this was a problem they had some years ago.
by dragonwriter | 2025-08-07 14:47:40+00:00
MCP is not concatenating JSON to the context. MCP is providing JSON to the toolchain; except for the names of tools and resources, most of the information in MCP doesn't go to the model at all, the toolchain uses it to connect to tool (resource, etc.) providers and from there it gets information that it can use either in the context for the LLM or in the UI for the user, and the shape that information goes into the context for the model depends on the model and has nothing to do with MCP.

MCP, is just a way for the toolchain to get information about and communicate with external services, the model doesn't (and if this sounds like the title of the article, there is a reason) need to know about it.
by samweinig | 2025-08-07 14:48:21+00:00
For those curious, in WebKit, this stems from the use of the LayoutUnit (https://github.com/WebKit/webkit/blob/main/Source/WebCore/pl...) for most computed length values. LayoutUnits use a fixed point representation where the smallest unit is 1/64 of a pixel. https://trac.webkit.org/wiki/LayoutUnit is a bit old, but has some good information on the topic.
by lelanthran | 2025-08-07 14:49:01+00:00
The context window is limited. Using half your context window for tools means you have a 50% smaller context window.

On a large and complex system (not even a mini ERP system or even a basic bookkeeping system, but a small inventory mgmt system) you are going to have a few dozen tools, each with a description of parameters and return values.

For anything like an ERP system you are going to have a few thousands of tools, which probably wouldn't even fit in the context before the user supplied prompt.

This is why the only use case this far for genAI is coding: with a mere 7 tools you can do everything.
by graemep | 2025-08-07 14:49:06+00:00
Depends where you are. it is known in the US, and its popular with people from the rest of the UK.

It does not seem to be much known in Asia, apart from as the source of whiskey.

I do not about the rest of Europe, but my feeling is that it is not well known.

I have been quite surprised how many people (from Asia and Europe) can visit, or even live in, the UK and not go out of London.

While Scotland is not unknown, there are certainly a lot of people who might visit who have a low awareness of what is there, and articles like this show some very attractive aspects of Scotland.
by PorterBHall | 2025-08-07 14:49:13+00:00
I live in a somewhat small community (~25k) and I commuted into the city on public transportation for about 15 years. 10 years ago, I started working from home full-time.

I often see the people I used to commute with around town. I recognize them and remember them, but I’ve never had any interactions with them.

When I see them, I’m surprised by how much older they look. Then I realize I must look older to them.
Show HN: Trayce – Burp Suite for developers
by ev_dev3 | 2025-08-07 14:49:32+00:00
About a year ago I introduced Trayce to HN as the "network tab for docker containers". Now I have released a new version which adds an HTTP client. The idea is to combine network monitoring with an HTTP client to help developers interact with and debug web application servers.

Think "Burp Suite for developers".

Trayce stores requests as local files using the .bru file format. The UI is based on Flutter which means it offers a super-fast and modern desktop GUI with a total download size of 13MB (on Linux). I am still adding features to it so would love feedback. Currently the new features in the pipeline are: OAuth2, GRPC, and scripting. It is open source and free to use but a perpetual license must be purchased for continued use. The license model is similar to that of Sublime Text.

Thank you!
by 0xfeba | 2025-08-07 14:50:27+00:00
> And even if proper passwords are used, many sites/apps use this pattern for account recovery if the password is forgotten so effectively this is the only security as an attacker has “forgotten” the password and just uses this flow to login.

Was about to post just this. This is the flow they use for account recovery so it's the weakest link in the chain anyway.
by jjgreen | 2025-08-07 14:50:30+00:00
A friend and I took a trip from Sheffield to Glasgow just before an election, and on a grim and dark winter evening we went out into the barely-lit backstreets looking for a particular pub. A group of 6 or so well-built young men approached us, ..."Hey lads, are you proud to be Scottish?", "Er, I suppose we would be if we were Scottish, but we're from Yorkshire ...". This being not long after "Trainspotting" was released, I was half-expecting a knife to be pulled, but no "Oh sorry lads, we're just canvasing for the Scottish independence, ... you having a good night? ..."

Nice place.
by freeopinion | 2025-08-07 14:50:42+00:00
Please help me understand the passkey flow that solves this problem.

1) BAD actor tries to create account at GOOD website posing as oblivious@example.com.

2) GOOD website requests public key from BAD.

3) BAD provides self-generated public key.

4) GOOD later asks BAD to prove that they control the private key.

5) BAD successfully proves they control the private key.

Unless you have step 3b where GOOD can independently confirm that the public key does indeed belong to oblivious. But even that is easily worked around.
by daneel_w | 2025-08-07 14:51:15+00:00
Peppering is for protecting self-contained password hashes in case they leak. It's a secondary salt meant to be situated 1) external to the hash, and 2) external to the storage component the hashes reside in (i.e. not in the database you store accounts and hashes in). The method has nothing to do with trying to fix anything with bcrypt. You should be peppering your input even if you use Argon2.
by fennecfoxy | 2025-08-07 14:51:17+00:00
Ahahahahaha. HA HA HAAAaaaa.

Even if they do actually follow through with it, it'll only be "assembly".

Also people calling for tariffs do not understand them, nor do they understand that; yes, China manufactures a shitload of iPhones, and Chinese companies make a small profit on doing so - a deal with Apple is very lucrative. But the majority of the profit made from selling an iPhone goes to Apple, aka an AMERICAN company. For iPhones sold ALL over the world.

Waaaa, I have to import my iPhone from China to America; the profits are still going back to America, perhaps every country that iPhones are sold in needs to put a tariff on nonlocally made products from a nonlocal company to match the absolute stupidity of Trump's logic.
by tsunamifury | 2025-08-07 14:51:20+00:00
As a product design director who runs teams where each individual is responsible for 100s of millions in revenue I can promise you. Every person on my team is working all the time.

Most of your analysis comes from low motivation grunt level coders here. Then beyond that you classify everything that isn’t deep breakthroughs not work.

Are a lot of engineers at big tech under utilized? Yes because they are often last on the line do what their told types. Could they do more? Sure. Are they not working? No.

This essays is at best naive, and at worst laughably stupid.
by potato3732842 | 2025-08-07 14:51:22+00:00
How do you connect the policy with the intended effect without magic or lying?

Time is money and taxes are already amortized into any potential developer's math, regardless of what the rate nominally is. If the properties aren't economically developable in a "it costs us pennies to sit on them so we'll take our sweet time" paradigm then they're sure as shit not developable in a "I'm paying the same tax rate no matter what so I gotta put something up ASAP so I can a)get income b) sell" paradigm.
by cipherboy | 2025-08-07 14:51:50+00:00
To quote a movie, only a Sith deals in absolutes ;-)

The OpenBao community call is in 10 minutes if you want to talk more about it live: https://calendar.google.com/calendar/embed?src=s63voefhp5i9p... (OpenSSF community calendar link).

But, the short answer why I say _reasonably_ sure is because HashiCorp and the OP haven't released a lot of details about exactly what case(s) are affected, so there's only so much we can do except look at our own code and infer what we can and make an educated guess.

So, barring some structural problem I'm not immediately aware of, I have reasonably high confidence based on discussions amongst the community members.
by stasher-dev | 2025-08-07 14:51:56+00:00
Your skepticism is valid and if your flow already includes: A secure messaging tool (e.g. Signal), a GPG workflow or local encryption or a team that uses shared password vaults. Then to be fair Stasher might not be better.

I built Stasher for me. I wanted an easy, CLI-first way to share one-time secrets without worrying about accounts, apps, or trust. If Signal or GPG works better for you that’s totally cool.

Stasher exists to make casual, secure sharing simpler not to replace tools you already trust.
by marifjeren | 2025-08-07 14:52:03+00:00
> This is terrible for account security

It's "terrible" because the author can describe exactly one phishing vector?..

Have you ever tried resetting a password before? Passwords have a similar phishing vector, plus many other problems that magic links and one-time login codes don't have.

If six-digit login codes are less secure than passwords, the reasons why are certainly not found in this article.
by ryandv | 2025-08-07 14:52:04+00:00
Anger is just another aspect of the human condition, and is absolutely justified in cases of grave injustice (case in point: Nazis, racism). It's not for some earring to decide when it is justly applied and when it is not; that is the prerogative of humanity.

In either case none of this cueing or prompting needs to be exogenous or originate from some external technology. The Eastern mystics have developed totally endogenous psychotechnologies that serve this same purpose, without the need to atrophy your psyche.
by 9rx | 2025-08-07 14:52:10+00:00
> since it trusts inherently its training data and considers that the basis of all its responses.

Doesn't that make "hallucination" the better term? The LLM is "seeing" something in the data that isn't actually reflected in reality. Whereas "confabulation" would imply that LLMs are creating data out of "thin air", which leaves the training data to be immaterial.

Both words, as they have been historically used, need to be stretched really far to fit an artificial creation that bears no resemblance to what those words were used to describe, so, I mean, any word is as good as any other at that point, but "hallucination" requires less stretching. So I am curious about why you like "confabulation" much better. Perhaps it simply has a better ring to your ear?

But, either way, these pained human analogies have grown tired. It is time to call it what it really is: Snorfleblat.
by Levitz | 2025-08-07 14:52:44+00:00
I found several things like these last year while doing a pilgrimage through Camino de Santiago[1] in northern Spain. The idea that people, after days or even weeks of walking stayed, at the very least, honest enough to keep it happening, moved me to a large degree.

https://en.wikipedia.org/wiki/Camino_de_Santiago
by gus_massa | 2025-08-07 14:52:52+00:00
Here in Buenos Aires we had a complete lockdown for 6 months, I coud only go walking only up to 1/4 mile and only to buy food. For longer trips I needed a writen authorization.

Most people used mask, even in the street, nobody complained, but a few morons used it in the chin that is not very effective.

Anyway, we got more death per million than Sweden.
by quantified | 2025-08-07 14:53:00+00:00
Well, fill in where I'm missing the essence. This is how I'm looking at it: Meta is advertising, demographic intelligence, social media. Google is advertising, cloud computing, social media. (Youtube is social media, more "broadcast" than print.) Cloud computing is tech, but the business is computer rentals. Microsoft is a conglomerate. Some of it is "tech": Windows, SQL Server. Office productivity is tech. Search, games. Cloud computing is computer rentals again. It's what they actually make money on, not the means by which they make it.
by duxup | 2025-08-07 14:53:34+00:00
With the decline of pensions the value of 401ks was that they were pretty restricted places to save for retirement for most folks. Your ability to go hog wild and speculate was to some extent limited / less convenient.

That is a net positive as having people save for retirement and ready for retirement takes pressure off the state to support them.

Having the 401k slowly become just a rando account that can hold anything, including a lot of things whose value can swing to 0 is a TERRIBLE idea.

Unless say you're the POTUS and you have an investment in crypto and you want everyone to "pump your bags" and you don't care about what happens to everyone else.
by convolvatron | 2025-08-07 14:53:56+00:00
They didn’t really bring up the idea that these people are being hired and retained for reasons other than their day to day output (I mean they did, but with odd rationales like wealth distribution). Number of bodies is a key metric for describing the growth of a company or the power of a manager. When he bottom line stop mattering all kinds of useless practices can flourish.
by slightwinder | 2025-08-07 14:54:06+00:00
There is the design of the system, and there is the implementation of that system. And the design of those systems are moving really, really slow in the aviation-world. Usually, any enhancement is done by attaching some auxiliary-system, or putting a layer on top, leading to layers of layers on top of layers, with the ugly core buried somewhere below. And even if you would rewrite those layers, or even the core itself in something modern, you still would be forced to handle the fundamental constraints of the whole design.
by voxadam | 2025-08-07 14:54:08+00:00
Linux Coredumps (Part 2) － Shrinking the Core : https://interrupt.memfault.com/blog/linux-coredumps-part-2

Linux Coredumps (Part 3) － On Device Unwinding : https://interrupt.memfault.com/blog/linux-coredumps-part-3