MurphyA/hacker-news huggingface dataset:
by aidenn0 | 2025-08-20 00:27:21+00:00
Basically one provider.

More details: All but the generation charges are from a single company that (among other things) is paying off a lawsuit for having not properly maintained lines running through highly flammable forests.

The generation charges can com from two companies; one has a slightly higher sticker-price, but discounts down to what the other charges, so the rates are identical.
by throwawaylaptop | 2025-08-20 00:27:33+00:00
Correct, and that's more detailed than I'd even expect. I'd be satisfied with "I think it has something to do with the rule we learn in physics or chemistry about gasses warming up and cooling down when compressed and decompressed. So a gas gets squeezed, cooled down, and let out and it's even cooler then".

Sometimes I wonder how much more interesting school would be if it just explained how everything works instead of random concepts no one remembers apparently long enough to tie to objects in their life.
Show HN: Network-filter – domains-based whitelist for Docker containers
by txprog | 2025-08-20 00:27:38+00:00
Built this because LLM tools with MCP servers (OpenCode, Goose, Claude code, etc.) have too much network access. It uses network_mode: 'service:x' to force containers through iptables rules that drop everything except whitelisted domains. No proxy - operates at the network namespace level so bypasses aren't possible.
by BearOso | 2025-08-20 00:27:43+00:00
I noticed this:

320×200×256 Colors: Mode 13h - the famous "Mode X" used by many DOS games

Mode 13h and Mode X are very different things. Glancing at the code, I see lots of stuff apparently cobbled together from various parts of the web, which kind of says to me "LLM data set". I'm going to guess that this was vibe-coded.
by kmeisthax | 2025-08-20 00:29:29+00:00
Are there specific ID providers or protocols that are particularly difficult to support? Would it make sense to bracket out SSO further between:

- Providers that actually implemented SAML correctly and that we can support without being buried in tickets

- Shitty Enterprise Grade™ systems you wouldn't dare to use voluntarily

- Oh god you actually wrote your own IDP what is this cursed mess
by kuschku | 2025-08-20 00:30:40+00:00
I'd love to see more powerful HTML templating that'd be able to handle arbitrary XML or JSON inputs, but until we get that, we'll have to make do with XSLT.

For now, there's no alternative that allows serving an XML file with the raw data from e.g. an embedded microcontroller in a way that renders a full website in the browser if desired.

Even more so if you want to support people downloading the data and viewing it from a local file.
by grinich | 2025-08-20 00:31:11+00:00
(self plug since you asked!)

WorkOS does exactly this. It's "Stripe for enterprise features."

https://workos.com

Our customers include OpenAI, Anthropic, xAI, Cursor, Perplexity, Vercel, Replit, Webflow, Clay, Hex, Carta, Plaid, Drata, Vanta, and many others. If you've used these products, you've used WorkOS!

WorkOS makes it easy to "cross the enterprise chasm." Here's a bit more of the backstory: https://x.com/grinich/status/1841569664465568248

We also launched on HN 5 years ago :) https://news.ycombinator.com/item?id=22607402
by op00to | 2025-08-20 00:31:14+00:00
The evidence shows this claim is incorrect. COVID-19 vaccines provide measurable protection for children, including ages 6 months to 2 years, by reducing emergency visits and hospitalizations. Infants under 6 months, who cannot be vaccinated, are protected through maternal vaccination during pregnancy, which cuts their hospitalization risk by more than half. While myocarditis after vaccination is a rare side effect in young men, most cases are mild and resolve, and the risk of myocarditis is higher after COVID-19 infection than after vaccination. The American Academy of Pediatrics recommends vaccination based on this balance of benefits and risks, not politics.
by mjevans | 2025-08-20 00:31:22+00:00
What more harmful is probably not having a set of guilds / unions (that both work together, share the same collective bargains, but also compete for members) to cut a lot of the annoying for ALL sides involved interview process out.

Why do they ask about Big O? Because it works as a filter. That's how bad some of the candidates are.

What would I rather they do? Have a non-trivial but obviously business unrelated puzzle that happens to include design flaws and the interviewee is given enough time and latitude to 'fulfill the interface, but make this the best it can be'.
by foota | 2025-08-20 00:31:25+00:00
Price discrimination allows producers to capture consumer surplus from consumers with a greater WTP than the otherwise price, and to offer the product at a lower price to those with a lower WTP.

In a monopoly, this means that the quantity supplied may be greater, but it would still be no greater than under perfect competition (necessarily so since the monopolist would never offer the product at a lower price than their MC, which is where price would be under PC). You can see this because there is no consumer that would buy under price discrimination that wouldn't buy under PC, and everyone with a WTP greater than MC buys either way.

Anyway, I agree that price discrimination results in the producer capturing more consumer surplus, but it can potentially be beneficial for those with a lower WTP in return for hurting those with a higher WTP.
by lmkg | 2025-08-20 00:31:30+00:00
HIPAA is not a privacy law, nor even a healthcare law. It's an insurance law. It does not cover medical records generally. It deals strictly with how doctors bill insurance companies, and mandates security for health information being billed about.

For the same reason, health & wellness apps are not generally covered by HIPAA, and in fact quite a few of those exist solely for the purpose of selling medical data to data brokers. Especially ones related to women's health.
by tptacek | 2025-08-20 00:32:03+00:00
I appreciate you saying I'm commenting in good faith (I am), but I think you and 'teddyh are overthinking this a bit.

All I'm saying is that I find it remarkable that DNSSEC adoption in North America sharply dropped over the course of 2023 --- that, and the fact that the graph tops out at 7MM zones, a big-looking number that is in fact very small.

I think it's funny that the graph serves my argument better than 'teddyh's. But really, I think it's ultimately meaningless. That's because the figure of merit for DNSSEC adoption isn't arbitrary signed zones but rather popular signed zones. And that in turn is because the distribution of DNS queries is overwhelmingly biased to popular zones --- if you can sample a random DNS query occurring somewhere in the US right now, it's much more likely to be for "googlevideo.com" than for "aelcargo.site" (a name I just pulled off the certificate transparency firehose).

The Verisign graph 'teddyh keeps posting is almost entirely "aelcargo.site"-like names†. The link I posted upthread substantiates that.

† And that in turn is because DNS providers push users into enabling managed DNSSEC features, because disabling DNSSEC is terrifying and so DNSSEC is an extremely effective lock-in vector --- that's not me making it up, it's what the security team at one of the few large tech companies that actually have it enabled told me when I asked why the hell they had it enabled.
by tptacek | 2025-08-20 00:34:40+00:00
You could get this page down to under 100 words by simply having it say "the name of the file LLM agents will look at for instructions on the repo is AGENTS.md; that's it, that's the standard".

It's a real problem! Every agent right now has their own weird filename. I love David Crawshaw's sketch.dev, but for reasons passing understanding they choose "dear_llm.md" for theirs.
by stingraycharles | 2025-08-20 00:34:45+00:00
Yet every agent I use (Claude Code, Gemini and Aider) uses their own custom filename.

It would be nice if it was standardized. Right now I’m using ruler to automate generating these files for all standards as a necessary evil, but I don’t envision this problem being solved soon. Especially because these coding agents also use different styles for consuming MCP configs.

https://github.com/intellectronica/ruler
by GorillaMoe | 2025-08-20 00:35:26+00:00
IDK if some of you also struggle with passing `.env` files..

It's getting a bit ridiculous at the moment, because we have so many teams working on different projects and when you're jumping in and trying support a different team we mostly have to ask around for the latest dotenv files to get the projects working locally, after cloning.

I know there are solutions like hashicorp vault and doppler out there, but they are not cheap and I don't want another service handling my secrets, because they are stored in gcp secrets anyway and mostly managed via terraform / terragrunt / terramate.

I implemented a really hacky way of "automatically" creating a .env file when you first checkout the project and have access to the secrets, but it was really messy and did just work on macos and linux (and additionally required you to have gcloud and direnv installed).

So I basically wanted something like doppler, but for free and it should just work with gcp, azure and aws, so that people who are using the secret managers by these cloud providers don't have to change anything (regarding how they store their secrets).

I couldn't find anything, so I build the first version of it: https://github.com/mistweaverco/kuba

Disclaimer: Currently, it only supports GCP so far, because that was my main goal for my day-job. I'm going to add AWS and Azure support tomorrow.
by stephen_g | 2025-08-20 00:35:43+00:00
I find the snark in your comment very weird and misplaced... Consider what the alternative is - Apple isn't allowed to talk about this, so they would have just had to silently backdoor their encryption for all their users all around the world so the UK intelligence organisations could access anyone Apple user's data...

Honestly probably nobody would have noticed that, and it would have been the path of least resistance to just comply. Some informed technical people might abandon Apple's platform, but the masses wouldn't have noticed... So how is this "Apple on lobbying for its own money"?

Honestly that last line just comes across as unhinged... Trying to read your comment in the most generous light but it's not close to reality...
by eigenform | 2025-08-20 00:35:55+00:00
Think you're referring to the idea that "my compiler can know that some branch is always/never taken" and turn it into an unconditional control-flow instruction (either "always jump here", or "always continue sequentially" and don't emit anything!).

But the parent comment is talking about "hinting" for branches where the compiler cannot compute this ahead of time, and the CPU is responsible for resolving it during runtime. This is usually exposed by the ISA, ie. a bit in the branch instruction encoding that tells the machine "when you encounter this instruction for the first time, the default prediction should be 'taken'."

In practice, branches are usually predicted "not-taken" by default:

- It's advantageous to assume that control-flow is sequential because [pre-]fetching sequentially is the easy case

- It's wasteful to track the target addresses of branches in your predictor if they aren't taken at least once!
by darepublic | 2025-08-20 00:38:07+00:00
> The new team has discussed making Meta’s next A.I. model “closed,” which would be a major departure from the company’s longtime philosophy of “open sourcing” its models. A closed model keeps its underlying code secret, while an open-source A.I. model can be built upon by other developers.

Gotta assume this was the plan all along. And would have been plan A if they weren't caught flat footed by chatgpt
by anon84873628 | 2025-08-20 00:38:36+00:00
Sounds good to me! Semantic layers help expose a more user-friendly view of the data, so it is easier to ask business questions and get accurate results. More technically, it brings modularity and reusability to SQL. Things like joins, aggregate functions, and dimensional expressions are encapsulated as new fields/objects. Typically this logic is rendered at query time rather than pre-computed and materialized. The advantage of that is more flexible iteration and composability. In essence they are highly glorified SQL templating engines.
by CraigJPerry | 2025-08-20 00:40:19+00:00
On a tangent from the article since this isn't a forgotten meaning of jerk but i've always been surprised at how often the 3rd derivative of position crops up usefully in life.

Just as interesting to me is the fact I've never (i don't think) had a practical use for the 4th derivative, jounce (think this is a British English term, American is snap i believe). The only place i've seen it used is in car suspension design.
by marcus_holmes | 2025-08-20 00:41:29+00:00
My point is that your definition of "authenticity" seems to include behaviour that is plain inconsiderate of other people.

I think there's a line there. You can wear what you like, think what you like, speak how you like, but only behave how you like up to the point where your behaviour negatively affects other people. If you want to listen to shit music in your own home, you do you, that's fine. But inflicting it on everyone else in a train carriage is not "being authentic" it's "being an asshole". You're not expressing your true self in a brave way that should be admired. You're annoying everyone around you by being selfish. It's a huge difference.
by Nursie | 2025-08-20 00:41:55+00:00
> I struggle to think of anything she could have said.

Me too, but that's why I'm not a politician with a legion of advisers :)

I get that she didn't want to bad-mouth Joe or accidentally criticise her own record as VP in the process.

I think the cannabis one might have made some difference - it's clear that the US is ready for it, she could have declared she wanted to hand the power to the states to make their own decisions by legalising it at a federal level, that sort of thing. Hard to tell even in hindsight!
by scyzoryk_xyz | 2025-08-20 00:42:48+00:00
Same take here - these games are addictive due to certain repetitive predictable patterns. I expect more and less complex automatons populating a game world and emergent story resulting from my flawed meat brain inputs.

Another thought that follows is that any kind of generative behavior, not just LLM, runs this risk of an endless pointless blandness. I.e. like with any artform we want there to be a point.

If those games are to feature LLM AI it would have to stand on it's own, with someone like these guys having thought it through.
by jondwillis | 2025-08-20 00:44:00+00:00
Hey this is off topic, but I filled an outdoor fountain at a rental place with fish, plants— not nearly a self-sustaining ecosystem yet but that’s the eventual goal. All good. However, I’ve grown to realize the responsibility of my little pond project and realize I can’t leave them here with nobody to take care of them if I ever had to move.

What are good options for if I wanted to try to give them away before that event?

There’s about 20-25 at the moment. It’s a mix of common, petco-style goldfish-tier freshwater fish. They would require the taker to have a tank too, so I’m kinda doubting much demand even on something like FB marketplace for free.
by lovich | 2025-08-20 00:44:24+00:00
> I think you meant the opposite - that what was distasteful in the past is no longer distasteful today.

It could be either

> I think we realised as society that regulating most behaviour…

I did not mention anything close to regulating “most” behavior, and I want to call out to you, since you are respectfully laying out your point, that this seems to be a common knee jerk reaction to a large number of people bemoaning any particular issue if I bring up government regulation. That knee jerk reaction specifically being the assumption that being for any government regulations means you are for regulating most or all things.

> Thankfully it seems like we are beginning to reject those people and push them out of power.

It’s only thankful if you prefer the situation. If you are someone who does not want to experience pot smoke and loud music blaring in your ear when someone chooses to do so because they have the freedom to, then maybe you prefer the hall monitor.

I’m not even advocating for one option or the other. This thread started with me pointing out to someone who was upset at people engaging in anti social behavior en masse, that the solution was government regulation.

If you don’t like government regulations in general, or you just think that on net they are a detriment, then the solution is to make peace with the fact that other people are going to use their freedom in a way that you don’t like
by blinkymach12 | 2025-08-20 00:44:27+00:00
We're in a transition phase today where agents need special guidance to understand a codebase that go beyond what humans need. Before long, I don't think they will. I think we should focus on our own project documentation being comprehensive (e.g. the contents of this AGENTS.md are appropriate to live somewhere in our documentation), but we should always write for humans.

The LLM's whole shtick is that it can read and comprehend our writing, so let's architect for it at that level.
by godelski | 2025-08-20 00:44:49+00:00
> They missed a sliver (35%) of their target audience.

Next time you're at a party go take a third of the cake and then tell everyone you just took "a sliver". See what happens...

Honestly, there's no point in trying to argue with you. Either you're trolling, you're greatly disconnected from reality, or you think I'm brain dead. No good can come from a conversation with someone that is so incorrigible.
by _mu | 2025-08-20 00:45:01+00:00
Make sure to check out https://agent-rules.org/ as well for more background on this initiative. More and more tools are adopting the standard.

Amp used to have an "RFC 9999" article on their website for this as well but the link now appears to be broken.

You can symlink your Cursor / Windsurf / whatever rules to AGENTS.md for backwards compatibility.
by colmmacc | 2025-08-20 00:45:07+00:00
I remember tearing my hair out in the pre-2008 era as folks tried to get source-port randomization into Bind. The response was "That's what DNSSEC is for" ... which further supports your narrative. But it's still very damning.

Source port randomization, BCP38, and then the 0x20 qname capitalization trick, all turned out to be far more practical mitigations for query-id concerns and others prioritized them. "We really need this massive internet-wide jobs-program lift of the entire Internet, without even providing confidentiality, to solve this query-id issue. Never mind the easier fixes."
by pc486 | 2025-08-20 00:45:10+00:00
stgit is similar in that it sits with git, but it's not the same workflow. git-spice has branches per feature that base on one-another. It's more git-like than quilt-like.

What you get is git-styled patch-series development. Branches on branches where each branch maintains history of the feature.

A git-spice workflow is compatible with GitHub style PRs where a PR depends depends on another PR.

Or pair git-spice with format-patch you can share with developers who prefer patch files. Or take patches from someone and import each patch as a branch, then let git-spice track the stack position.
by tptacek | 2025-08-20 00:45:56+00:00
You can moralize it all you want. All I'm saying is: the alternative to the SSO tax isn't that everyone gets the features they want at the price they want: it's that the price of the low-end product goes up and the price of the high-end product goes down. If you care about distributional effects, that seems like a step backwards.
by heresie-dabord | 2025-08-20 00:45:59+00:00
https://en.wiktionary.org/wiki/cheer

From Norman French, "face, merry faces, festivity"; from Late Latin, "head".

The sense of smiling, merry expression, good cheer, cheerful, is well attested in literature. "Cheers" is a versatile modern expression. I have heard it as "thanks", "drink well" (of course), and yes even "see you later".
by _345 | 2025-08-20 00:46:22+00:00
Firefox profiles are still janky and I had a lot of issue switching and managing two profiles effectively. Specifically the biggest problem I had was that clicking on work links would not open them in my last used profile (work profile). They would always open in a default profile (non-work).

I ended up keeping chrome just for work, and using firefox for personal life.

Then I grabbed Browser Tamer and set up an AHK v2 script that, when I click on and focus any browser window, it executes browser tamer's CLI to update the default browser. Thus I get the behavior of "open links in last used browser", which is the correct browser for whatever link I click 99.9% of the time.
by yieldcrv | 2025-08-20 00:47:10+00:00
yep. one of the understated and more abstract realities of crypto money laundering, as well as licit crypto profits and revenues, is that many crypto natives don’t want their nation’s currency or any fiat.

its been like this for over a decade.

you can get out of volatile coins and into stablecoin onchain.

you can buy goods, services, and investments whether with the volatile coins or with stablecoins.

stablecoins also have a redemption mechanism, so when you move them to an exchange, the conversion isn’t “selling for usd” (which has a fee) its just redeeming them for free. Coinbase can take USDC straight to your bank account for example, removing one step.

when I was running a small hedge fund half a decade ago, our third party fund administrator could take investor funds in crypto for us that would be accounted for on our books in usd for further investment.

a lot of crypto ETFs are taking funds in crypto right now too, there is a tax advantage that Bloomberg wrote about a month or two ago
Anti-Corporate-Speak Public Announcement: We Messed Up (Chrome Crash Edition)
by EGreg | 2025-08-20 00:47:11+00:00
HN always criticizes corporate mea culpas, the “mistakes were made” passive voice, and all the gaslighting. Well, here’s what Google actually published in 2027 when Chrome (which they didn’t lose to antitrust) started crashing sometimes:

We’re not going to bury this in marketing fluff or “continuous improvement” nonsense. Chrome crashed. It’s our fault.

Here’s the ugly version: our speculative renderer processes started leaking handles into the compositor thread, which in turn forced GPU raster threads to lock a resource already orphaned by a zombie frame. The garbage collector couldn’t reclaim it because of a dangling reference in the shared worker pool, so the watchdog nuked the tab. If you had more than one extension juggling DOM mutation observers at the time, congratulations: you found one of the thousand sharp edges we left in the codebase.

And yes, part of this happened because a programmer came in a little inebriated after an offsite party and checked in a “minor” fix without realizing it created a non-deterministic race condition. We didn’t catch it because we don’t actually have enough test coverage. Why? Because (a) corporate budgeting prefers “features shipped” over “tests written,” (b) we can’t even run full integration tests on Chrome’s codebase without provisioning a farm of servers that costs more per hour than some startups’ entire burn rate, and (c) every time someone proposed fixing this, management reminded us that “users don’t see tests in the release notes.”

We know this isn’t a complete explanation. There are race conditions in the scheduler we still don’t fully understand, extension APIs that trigger undefined behavior in ways no one anticipated, and some memory fences that look more like wet tissue paper. Honestly, we’re apologizing here for not being exact enough and for failing to enumerate every possible case in this post.

So yes: everything got messed up. Yes: it’s our fault. And yes: this announcement is every bit as bad as what HN usually criticizes Google for—just from the opposite direction.

Also, Chrome is set to be retired by March 2028. But you should try Mimi.