MurphyA/hacker-news huggingface dataset:
Show HN: CDNPulse – See which CDN is fastest for your actual users
by alikhil | 2025-09-02 13:00:14+00:00
Hi HN,

We just launched CDNpulse — a service that shows how fast different CDNs deliver content to your actual users.

The problem

- Choosing a CDN is mostly guesswork today.

- Aggregated benchmarks (e.g. Perfops) don’t reflect your actual audience.

- Enterprise RUM solutions exist (e.g. Catchpoint at $2.5k/month), but they’re out of reach for most teams.

The solution

CDNpulse gives you:

- Drop in a small script on your site.

- See city-level load time data from your real users.

- Compare providers and verify that the chosen CDN really improves performance.

Why it matters

Choosing the right CDN can shave hundreds of milliseconds off page loads, which means lower bounce rates, happier customers, and higher conversions. Until now, these insights were mostly locked behind expensive enterprise tools.

Status

- Beta just launched: https://cdnpulse.io

- Free while in beta.

- Explore without signing up: https://app.cdnpulse.io/public/demo/analytics

If you’re comparing CDNs or planning a switch, I’d love to hear how this fits into your workflow and what would make it more useful.
by mrangle | 2025-09-02 13:01:07+00:00
>Sometimes the riot happens after the teargas and rubber bullets.

Gaslighter

>Sometimes the riot happens because people whose humanity isn't being respected choose not to respect your property.

A psychopath's excuse to harm innocent people.

People who want to destroy property will always claim that their "humanity isn't being respected". Psychopaths commonly play the victim to justify harming people who have nothing to do with them.

>The neat thing is all 3 of those can be true at the same time.

Pseudo-intellectualism.
by geokon | 2025-09-02 13:01:11+00:00
my personal craziest example

in taiwan you can't pay customs dues without a half broken government app

this is necessary for ANY shippment from abroad

no website, no phone number, no office you can drop into. You can technically file a paper form to some office in taipei, but it made clear its for large commercial import shippments and not "normal people"
by thechao | 2025-09-02 13:01:19+00:00
Texas used to have a great desalination plan, but it was left pretty idle. It's ... ok?

https://www.twdb.texas.gov/innovativewater/desal/doc/2024_Th...

The current projection is ~200k acre/ft by 2070 from seawater sources. It'd be cool if the AI/data center folk would combine our three ares of strength: (1) wind; (2) seawater desalination; and, (3) mass liquid piping. We'd use excess offshore wind to desalinate seawater and pump it inland.
by HarHarVeryFunny | 2025-09-02 13:01:51+00:00
The largest LLMs are mostly going to be running in the cloud, so the general purpose cloud providers (Amazon, Microsoft, Google) are presumably going to be in the business of serving models, but that doesn't necessarily mean they need to build the models themselves.

LLMs look to be shaping up as an interchangeable commodity as training datasets, at least for general purpose use, converge to the limits of the available data, so access to customers seems just as important, if not more, than the models themselves. It seems it just takes money to build a SOTA LLM, but the cloud providers have more of a moat, so customer access is perhaps the harder part.

Amazon do of course have a close relationship with Anthropic both for training and serving models, which seems like a natural fit given the whole picture of who's in bed with who, especially as Anthropic and Amazon are both focused on business customers.
by emn13 | 2025-09-02 13:01:58+00:00
The author's examples of rough edges are however no better when hosted on vercel. The architecture seems... overly clever, leading to all kinds of issues.

I'm sure commercial incentives would lead issues that affect paying (hosted) customers to have better resolutions than those self-hosting, but that's not enough to explain this level of pain, especially not in issues that would affect paying customers just as much.
by kcplate | 2025-09-02 13:02:43+00:00
> But actually, Amazon, Apple etc aren't natural homes for this, they don't need to burn money to chase it.

I really liked the concept of Apple Intelligence with everything happening all on device, both process and data with minimal reliance off device to deliver the intelligence. It’s been disappointing that it hasn’t come to fruition yet. I am still hopeful the vapor materializes soon. Personally I wouldn’t mind seeing them burning a bit more to make it happen.
by ubermonkey | 2025-09-02 13:02:51+00:00
I mean, you can dig in your heels on that, but it's the rhetorical equivalent of putting your fingers in your ears.

I attended a former partner's PhD defense. She used PowerPoint during it for graphs and other visuals as she delivered DEEPLY technical information. Presentation software is valuable when giving presentations, period.

You just have to know how to use it properly.
by psathecreator | 2025-09-02 13:03:03+00:00
Hi HN!

I built Vaultace after spending months coding with Claude, only to realize: How do I know this AI-generated code is actually secure? Traditional security scanners like SonarQube treat AI code like human code, missing patterns unique to AI tools: - Template SQL injection in example code - Hardcoded JWT secrets in boilerplate auth - Incomplete input validation in rapid prototypes - Authentication bypasses in AI-generated examples What makes Vaultace different: • Detects vulnerability patterns specific to AI coding tools (Claude, Cursor, Copilot) • 60-second scans (built for rapid AI development cycles) • AI-powered fix suggestions that understand your context • Developer-friendly UX (no enterprise security bloat) The validation: I built the entire platform using Claude, then scanned it with Vaultace and found 3 vulnerability patterns in my own AI-generated code. Exactly the kind of issues traditional scanners miss - and exactly why we need tools built for AI development. Try it: Free scan at https://vaultace.co - just drop your GitHub repo URL, get results in under 60 seconds. Would love feedback from the HN community, especially if you've run into security concerns with AI-generated code!

Samuel
by withinboredom | 2025-09-02 13:03:04+00:00
That's not exactly true. Every time you start a new conversation; you get a new LLM for all intents. Asking an LLM about an unrelated topic towards the end of a ~500 page conversation will get you vastly different results than at the beginning. If we could get to multi-thousand page contexts, it would probably be less accurate than a human, tbh.
by fwsgonzo | 2025-09-02 13:03:18+00:00
The best way (anecdotally) for me has been to not understand the subject matter at all, and just work work work on something until it's near completion. At that point understanding the subject matter is much easier, and you can compare it to your own understanding and work. Many times I've since improved my work from subject matter because other people have had great ideas that stood the test of time, and very occasionally my work has created a new frontier without me really understanding it at the time. Still, revolutionary ideas are not always something that can be turned into a business. Funnily, I see many business ideas are just gluing things together, and I don't think anyone is really upset about that.

As you said though, sometimes you have to go the wrong way (knowingly or unknowingly) just to see what's there or if there aren't missed opportunities. Heavily established (sub-)fields can be very rigid and hard to find new ground in.
by IAmBroom | 2025-09-02 13:03:32+00:00
According to this article, "a 1936 book called Typewriting Behavior" made "comparisons of the new keyboard to a jeep and the old one to an ox".

Jeeps were invented in 1941. Some origin theories of the name date back as far as WW I (but for recruits, not vehicles). If the author truly used this comparison in 1936 it would be a tremendous citation for the word's origin.

Or perhaps the comparison was made in a later edition of the book. Don't know.
by Gabriel54 | 2025-09-02 13:03:49+00:00
Governments have a right to detain and deport individuals in the country without documentation. The fact that ICE resorts to the tactics we are describing is unfortunate but necessary because many cities and states refuse to cooperate with federal authorities regarding immigration. These operations of ICE, generally speaking, are legal. (I say "generally speaking" because I cannot speak for every action of every ICE agent in the USA). You may find it distasteful or disagreeable, but it is within the purview of the federal government to enforce federal immigration laws.
by dev_l1x_be | 2025-09-02 13:03:55+00:00
> In general Next.js has so many layers of abstraction that 99.9999% of projects don't need.

This true to most software projects that are used more than one set of people. Joe Armstrong proposed a solution that we should opensource functions only and people could assemble everything else using these opensource functions. I start to think that he might be right and instead using "frameworks" we should use these set of functions instead.
by checkyoursudo | 2025-09-02 13:03:57+00:00
I am sympathetic to your analogy. I think it works well enough.

But it falls a bit short in that encyclopedias, lossy or not, shouldn't affirmatively contain false information. The way I would picture a lossy encyclopedia is that it can misdirect by omission, but it would not change A to ¬A.

Maybe a truthy-roulette enclyclopedia?
by const_cast | 2025-09-02 13:04:42+00:00
It is, but it's also just something I see time and time and time again.

Every generation complains about how the world is going to shit and the yougins ain't got no respect and whatever particular segment of brown people at that time don't belong in their country.

I would have some sympathy if this wasn't, like, the millionth time this has happened.
by fxtentacle | 2025-09-02 13:05:37+00:00
Assuming that you are referring to the Nreal Air VR goggles, those cannot accept a regular video signal over USB-C. They are NOT monitors. For making them work, they need to do pre-processing of the video stream on the host device, thereby degrading gaming performance. That's why they need an app, because they lack an integrated CPU/GPU and that makes them not compliant with the USB-C monitor spec.

And I believe that's also the real reason why Nintendo would block them: They make otherwise fluent games stutter, which will reflect badly on Nintendo and the game developers. Because people in general won't know that their Nreal Air is stealing some of the Switch's GPU performance and that they are creating performance issues themselves.
by kstrauser | 2025-09-02 13:05:41+00:00
To a point, yeah. Adding BE support to my (userspace) code revealed some bugs that affected LE, too. Oops! But you can take that too far, too. Like, go ahead and assume power-of-two aligned byte sizes. If someone wants to make an 11 bit byte, let them handle that in their own non-upstreamed fork. No user code’s going to work right on it anyway.

You can be so flexible that it turns everything into a giant slog. I doubt 32 bit support is anywhere near that horrid; commenting on the idea more than this specific case.
by e2le | 2025-09-02 13:05:59+00:00
> open source P2P chat messaging with encryption

Tox/aTox [0][1] fits that description and both continue to be developed.

> Empower criminals so that they cant use this excuse to target civilian infra.

According to one webinar from CSIAC (2023) [2], XMPP is popular with Tox slowly catching up.

[0]: https://github.com/TokTok/c-toxcore

[1]: https://github.com/evilcorpltd/aTox

[2]: https://csiac.dtic.mil/wp-content/uploads/2023/03/CSIAC-Webi...
by qwertox | 2025-09-02 13:06:14+00:00
It could be non-lossy if it would actually reach out to an encyclopedia.

If one takes it as a language engine which translates human language into API calls, and API call results to human language, it would appear to be a non-lossy encyclopedia.

It is the basic building block which enables computers to handle natural language.

The simulated intelligence is proof of its capability as a language model, but it is often so dumb that it is doesn't feel like a "knowledge model".
by const_cast | 2025-09-02 13:06:23+00:00
> This fake accusation of murder when thanks to your moronic policies economic hardships have caused much more hurt around the world.

You are legitimately delusional.

Requiring a mask doesn't hurt anything other than your feelings. Not wearing a mask actually, literally, in disputably, without a doubt, with no room for argument, hurts people. At least, during the pandemic.

Are you noticing how my thing is real and yours is just made up? That should tell you something.

Also, you know fuck all about my "economic policy". As if whatever stupid ass economic policy you voted for is better. Remember - that BBB is putting us a few trillion more in debt and is certainly going to lead to some deaths due to Medicaid cuts!

Humble yourself brother. The world doesn't revolve around you.
Show HN: Thymis – IoT fleet management with NixOS – Cloud now available
by elikoga | 2025-09-02 13:06:35+00:00
Hi HN,

I’ve been working on Thymis, a platform for managing fleets of IoT and edge devices declaratively using NixOS. After a lot of iteration, the open source core is ready, and we’ve just launched Thymis Cloud, now available to businesses globally (and private individuals in Germany).

Problem: Managing IoT devices at scale is usually painful:

- Manual SSH into devices

- Configuration drift across fleets

- Risk of bricking devices during updates

Approach: Thymis applies infra‑as‑code principles (via NixOS) to embedded and edge systems:

- Declarative configs for reproducible fleets

- Over‑the‑air provisioning and updates

- Open source runtime + hosted SaaS

- Web-based Dashboard for better UX

Links:

Website: https://thymis.io

Pricing / availability: https://thymis.io/pricing

GitHub: https://github.com/thymis-io/thymis

This project grew out of my own frustration deploying Raspberry Pis and IoT devices in both hobbyist setups and production systems. I work as a systems engineer and built Thymis to bring reproducibility to this tricky domain.

I’d love feedback from HN — especially from anyone managing device fleets today. Does this solve real pain points, or are there features that would make it more useful?

Thanks for taking a look.
by gwd | 2025-09-02 13:06:44+00:00
So did you actually get any faster?

I switched to Colemak pro'lly 15 years ago, and while my fingers certainly move around a lot less, I don't think my top speed on typeracer.com has improved over what I was able to do on QWERTY before switching, nor do I seem to make fewer errors.

On the whole 1) I do like Colemak a bit better, but 2) I don't think it was worth the switch, although 3) it's certainly not worth a switch back. I think 4) if everyone started with Colemak things would be better, but 5) given that they don't, I'm not sure I'd recommend anyone else choose Colemak over QWERTY if they're learning, based on my own experience.

What's kind of weird is that with all the ink / bits spilt over this issue, all we have are two 50+-year-old studies whose raw data are unavailable. How hard would it really be to re-run an RCT?
by barrister | 2025-09-02 13:07:26+00:00
An obvious maxim. However, the full statement is "Privacy empowers YOU, but surveillance weakens YOU." Thus, to the enemy of the people, surveillance is a great weapon. Enemies of the people are typically an elite ruling class. To me, surveillance is generally applied to oppress opportunity, e.g. contemporary cancel culture, bad jacketing, or blacklisting.
by rickdeckard | 2025-09-02 13:07:45+00:00
Because Apple is not allowed to discourage the use of other distribution methods, and such a popup implies that an app provided via other channels is "less safe" than an app provided by Apple.

> Windows does the same with unsigned apps, as do many version of Android.

This is not the same. Windows states that they cannot verify the origin of the app because its not signed. In the current state Apple thoroughly verified the origin of the app, and the app is also signed.

Imagine a guy standing in front of your grocery store telling you that "the food in this store did not pass quality control of Walmart, so we can't guarantee that it's safe"
by a2tech | 2025-09-02 13:07:48+00:00
Working with a client just last month that hired an African engineering group to build a tool for them. What they got delivered was a Next.js train wreck that was so coupled to Vercel's hosting that I couldn't make it run successfully anywhere else. The customer was a non-profit and didn't want to/couldn't afford Vercel's hosting so asked if I could try and make it run and I (naively) thought 'its just javascript, it should run anywhere!' and I took a run at it.

After a week of futzing with it I just threw up my hands and said 'no can do'. I couldn't untangle the spaghetti JS and piles of libraries. 'Compiling' would complete and if you looked at the output it was clearly missing tons of bits but never threw an error. Just tons of weirdness from the toolchain to the deployment platform.
by CrossVR | 2025-09-02 13:08:08+00:00
> What are his arguments then?

They're in the "Complete Argument" section of the article.

> This sounds like the archetypical no true scotsman fallacy.

I get what you're trying to say, but he is not arguing only a true Scotsman is capable of thought. He is arguing that our current machines lack the required "causal powers" for thought. Powers that he doesn't prescribe to only a true Scotsman, though maybe we should try adding bagpipes to our AI just to be sure...
by tom_ | 2025-09-02 13:08:40+00:00
The only particularly bad case I've found is v/w/z being right next to one another, which can be annoying. Still, I think I've won out overall. I spend a lot more time typing text than I do invoking keyboard shortcuts.

Regarding games, switching keyboard layouts in Windows 10/11 is thankfully super easy. (And some games do get it right, and the bindings go by physical position, so they just fall into place - though personally I've never liked this, because I don't really know where any of the Dvorak keys are individually, for non-text purposes. I'd rather switch to QWERTY and then I can look at the labels on the keys to figure out where to put my fingers.)
by makestuff | 2025-09-02 13:08:42+00:00
I am a backend dev, and I needed a website that was temporary for an event. I thought to myself this would be a good opportunity to learn some frontend development.

After looking through the 20 different popular front end frameworks and getting confused by SSR, CSR, etc. I decided to use Nuxt. I thought oh this is great, Vue makes a lot of sense to me and this seems like it makes it easer to make Vue apps. I could not have been more wrong. I integrated it with Supabase + Vercel and I had so many random issues I almost scrapped the entire thing to just build it with squarespace.
by JeremyNT | 2025-09-02 13:09:08+00:00
I suppose the problem with it is that such "protest theater" could only work if the people who support the regime are capable of empathy for those who are objecting.

In this case the opposite is true - this administration won on an explicit platform of retribution against political enemies of the right and an erosion of the constitutional order.

Which is to say... they're getting what they wanted. Presumably every reminder that they're causing distress amongst people they are targeting will only increase their satisfaction.
by alexey-salmin | 2025-09-02 13:09:19+00:00
> The only time money actually flows to the company is when stock is initially offered.

> A company might be valued billions in the stock market, but this is not money that the company can work with.

Both of these statements are demonstrably false. Why do you think companies go public (which is quite troublesome) in the first place? Just vanity to see the billions they don't have access to? Or to allow investors to make money without helping the company in any way? It's clear why investors would come to a purely speculative market with no intrinsic value (e.g. crypto) but it's unclear why a company would offer their shares to be traded like a shitcoin.

Being public is the instrument for the company first and foremost. There's the IPO, then companies continuously issue and buyback stocks depending on the cashflow. Look e.g. at the graph of Tesla's outstanding shares [1]. Then companies also sell bonds or borrow money using their own stock as the collateral. The bigger valuation you have the more capital you have access to.

Not to mention that even in the OP's simplistic view of the market there is an actual "new value" aspect: if you buy stocks from a VC or a founder, they use it to fund the next startup.

[1] https://www.macrotrends.net/stocks/charts/TSLA/tesla/shares-...
by ofrzeta | 2025-09-02 13:09:19+00:00
You are right that this is probably the more reasonable thing to do. I was just thinking that 1) I want to use full-size cards for better haptic and 2) have the actual data stored on the media. For instance when you are in the car with your playback box and the SD card you can listen without a network connection. But I concede that I am stubborn and this will probably be a dead end :)
by roryirvine | 2025-09-02 13:09:42+00:00
In the UK, it's pretty normal to say "oh two twenty-three" for 0223 or "fourteen thirty-five" for 1435.

But when being less precise, we might say any of "half two this afternoon", "two thirty pm", or "fourteen thirty" depending on context.

As we do still use the 12 hour clock in less-formal situations, using an "oh" prefix for times before 1000 gives an extra point of disambiguation.
by zabzonk | 2025-09-02 13:10:19+00:00
My (very sad) inkjet story:

I bought one of the first consumer HP Thinkjets - the ones with the font cartridges. I plugged it all in, but could not get get it to work. Phoned the supplier, who were useless (of course) and then just sat looking at it. After about two hours, I worked out that I had not actually switched it on. I was used to things having a switch next to the power supply. The thinkjet had one artfully hidden under an overhang (so not visible to the user) at the front.

I suppose I learned three things from this:

- turn it on

- RTFM

- despite all, I still and always have liked HP printers - I have color laserjet now
by aredox | 2025-09-02 13:10:24+00:00
Michele Obama tried to encourage physical activity, and was met with frothing-a-the-mouth backlash from the whole right-wing media personalities and Republicans who vehemently criticized related regulation as government overreach.

https://edition.cnn.com/2014/05/29/politics/michelle-obama-n...

https://www.politico.com/news/magazine/2025/06/14/michelle-o...

https://authorityhealth.org/irony-abounds-on-the-anniversary...

Do you have any long-term memory?

Look in the mirror: you are the corrupt one.
by jraph | 2025-09-02 13:10:24+00:00
Already addressed at https://news.ycombinator.com/item?id=45101127#45102093:

We are not talking about power or decision making, we are talking about expression.

I'm really confused as to how some people here misunderstand this discussion as being about giving law-making power to the police.

I'm of course against a police state.

edit: I'm not even defending Europol or what they actually do, there are things they do I most certainly don't like.
by fooker | 2025-09-02 13:10:30+00:00
> Not only do neither of those actually end the lifetime of what's passed in

>For example, consider how this would be instantiated for std::vector<int>:

Great, here you go.

https://godbolt.org/z/9v66n6Ta4

And yes, the compiler will not prevent you from using this value. (clang will eventually, I think)

But clang static analyzer will happily detect it.

https://stackoverflow.com/questions/72532377/g-detect-use-af...