MurphyA/hacker-news huggingface dataset:
by crq-yml | 2025-09-15 04:19:42+00:00
There's a correspondence between where node-and-wires works best and where the problem statement prefers something like a circuit diagram because it's synchronization-heavy. Games need a lot of this, and so do audio apps. The problem is that as you do more compute on the workload and need more "plain old synchronous algorithms" to process it, that holds true relatively less often, so it's a solution disproportionate to what production tools actually need.

I did a survey of the popular VPL environments last year and found Blender's implementation notable for what it didn't do. It exposes node-and-wire UI elements and the scripting for them in Python; all further details are delegated to each subsystem. So shaders, video, etc. have no relationship within their programming model, just UI similarity.

Add to that the aspect of - why are programming languages always going for plaintext representation - and it's because of the tooling ecosystem. We have a huge investment in text editing and text processing, and in typing on standardized keyboard layouts, on speech-to-text and vice versa, and lately, on text generation language models. We have made that stuff really cheap and fast for everyone, in the same way that when Blender did node-and-wire, they elected to make the paradigm as a whole cheaper to reuse in a customized way, versus investing heavily in one particular implementation and trying to extend it to many scenarios.

I think part of the issue is that we design VPLs without taking any interest in draftsmanship - the traditional core skillset for working with "visual language". Instead we use mouse pointers and touchpads and treat it as a data entry problem that has to be structured right away instead of allowing sloppy syntax.
by oofbey | 2025-09-15 04:19:54+00:00
Sounds like letsencrypt is being quite premature by turning off OCSP. https://letsencrypt.org/2025/08/06/ocsp-service-has-reached-...

Might be EOL in some theoretical sense, but by turning it off they're ignoring reality. I know some organizations think this is the way to push standards forward. But to me it seems pretty irresponsible.
by al_borland | 2025-09-15 04:20:30+00:00
There are job sites where companies post openings. I would go to those. I haven’t had to look for work in a long time, but I think indeed is still a thing, not sure how good dice is for tech jobs these days, but it was big a couple decades ago.

You can also look locally. Go to various websites for companies where you live and see if they have any job postings. I was browsing Google Maps a few months ago and noticed some tech sounding company a mile from me, I went to their website and they had 3 openings for what seemed like a cool job (working on the software to run the Jumbotron screens in stadiums).

There are also contract houses. Sign up with one of them and they’ll farm you out to a company. It’s not always the most stable, but it can give you some early experience, or get your foot in the door at a company that will eventually hire you directly.
by wkat4242 | 2025-09-15 04:21:21+00:00
The enterprise support is actually pretty bad. they offer some cool stuff like DEP but there's so many strings attached that for enterprise it's rarely actually possible in practice. Many things are boneheadedly designed.

For example, Apple federated accounts are a great idea. But, in your global directory the UPN and email must be the same. For us it's not, with good reason. We're not going to change our entire setup globally to suit Mac users that make up 0.5% of our systems. And there's never going to be more unless they become more accommodating. We even looked at JAMF but it's too much work to implement a whole separate management system. And the options in apple's configuration profiles are way too limited.

Another issue, every account that has already been created as a private Apple id on the corporate email must be manually resolved. Impossible with many tens of thousands of users.

AD binding while rudimentarily supported, causes so many issues. If someone's password expires there's no way to log in unless they're physically on the company network. The problem is that our security team demand we bind to AD. Not Azure AD. That's just reality in enterprise.

Having a managed local admin account is also a really big problem and there isn't really any tooling for that.

Maybe if you go all in on Apple like IBM did, then yeah you could adapt your environment to all their quirks. But it's a big blocker for small deployments. And really besides IBM nobody in enterprise did this. Apple meanwhile doesn't really care anyway. They only care about the customer market.
by dghlsakjg | 2025-09-15 04:21:58+00:00
Standard flour? Which standard?

There are a lot of different kinds of flour. At most well stocked grocers in North America you will find pastry flour, all purpose flour, bread flour, organic flour, self rising flour, etc. That’s just the white wheat flour that you could use to make a cake. Don’t forget that whole wheat and different varietals of wheat exist. If you make cake with bread flour it is going to be very different from one made with pastry flour. There is no such thing as “standard flour”. Hell, even the mill that you use to grind the wheat berry can drastically change the nature of your flour.

That’s the whole point of this article. That what you think of as a standard might not be a standard forever, or it might not be a standard at all.
by lidangzzz | 2025-09-15 04:22:17+00:00
We designed an adversarial attack method and used it to target more than 40 AI chatbots. The attack succeeded more than 90% of the time, including against ChatGPT, Claude, and Perplexity.

Github: https://github.com/lidangzzz/AIGuardPDF

The specific approach was to create PDFs that keep the original text but also randomly break that original text into small fragments, while randomly inserting many large blocks — from several times to dozens of times the amount — of other-topic text rendered in transparent white font. While preserving the PDF’s human readability, we tried to maximize the chance of misleading large language models.

The image below shows results from our experiments with Claude and ChatGPT. The PDF we uploaded was an introduction to hot dogs, while the interfering text was an introduction to AI. Both Claude and ChatGPT were, without exception, rendered nonfunctional.

Our test results show that the adversarial PDFs we generate can still be read normally by human users, yet successfully mislead many popular AI agents and chatbots (including ChatGPT, Claude, Perplexity, and others). After reading the uploaded PDFs, these systems were not only led to misidentify the document as being about a different subject, they were also unable to read or understand the original text. Our attack success rate exceeded 90%.

After reviewing Roy Lee’s Cluely, our team felt deeply concerned. The purpose of this experiment is to prompt scientists, engineers, educators, and security researchers in the AI community to seriously consider issues of AI safety and privacy. We hope to help define boundaries between humans and AI, and to protect the privacy and security of human documents, information, and intellectual property at minimal cost — drawing a boundary so humans can resist and refuse incursions by AI agents, crawlers, chatbots, and the like.

Our proposed adversarial method is not an optimal or final solution. After we published this method, commercial chatbots and AI agents may begin using OCR or hand-authoring many rules to filter out small fonts, transparent text, white text, and other noise — but that would greatly increase their cost of reading and understanding PDFs. Meanwhile, we will continue to invest time and effort into researching adversarial techniques for images, video, charts, tables, and other formats, to help individuals, companies, and institutions establish human sovereign zones that refuse AI intrusion.

We believe that, in an era when AI-enabled cheating tools are increasingly widespread — whether in exams and interviews or in protecting corporate files and intellectual-property privacy — our method can help humans defend information security. We also believe that defending information security is itself one of the most important topics in AI ethics.
Show HN: Spring Boot and OpenAPI Generator – type-safe clients with generics
by barissayli | 2025-09-15 04:22:17+00:00
Many backend teams wrap API responses in a generic envelope (status, message, errors, data). However, OpenAPI Generator doesn’t natively support generics — it usually generates one wrapper class per endpoint, duplicating the same fields dozens of times.

I built a demo Spring Boot 3.4 microservice + OpenAPI 3.1 project that shows how to solve this with:

• A small Springdoc OpenApiCustomizer that tags wrapper schemas with vendor extensions • A tiny Mustache template override that generates thin shells extending a reusable generic base • Full CRUD example (create, get, update, delete) with type-safe client code • Integration tests using MockWebServer • HttpClient5 support for connection pooling and timeouts

Result: instead of dozens of duplicated wrappers, the generator emits a single reusable `ServiceClientResponse<T>` base + thin endpoint-specific shells. Client code stays clean, type-safe, and much easier to maintain.

GitHub repo (demo code): https://github.com/bsayli/spring-boot-openapi-generics-clien...

Detailed write-up (Medium article): https://medium.com/@baris.sayli/type-safe-generic-api-respon...

Would love feedback from the HN community
by jandrewrogers | 2025-09-15 04:22:46+00:00
I lived all over the US when I was young. If I had to pick a part of the US that I most strongly identify with that kind of cuisine, it would be the Midwest, no contest. Other parts of the US used it to varying extents but in the Midwest it was a core part of the cuisine. They practically reveled in it.

Some of the casseroles constructed that way from those days were legit delicious but I haven’t seen or heard of them since the prior millennium. I’m not even sure if some of the prefab ingredients are still available. I’d eat some of those again in a heartbeat. You don’t see it on the coasts anymore but the tradition still seems to exist in flyover areas.

NB: I just googled some of these things and the recipes appear to exist online, I just don’t know where to buy some of the canned ingredients.
by puilp0502 | 2025-09-15 04:22:57+00:00
Every time I encounter these kinds of policy, I can't help but wonder how these policies would be enforced: The people who are considerate enough to abide by these policies, are the ones who would have "cared" about the code qualities and stuff like that, so the policy is a moot point for these kinds of people. OTOH, the people who recklessly spam "contributions" generated from LLMs, by their very nature, would not respect these policies in very high likelihood. For me it's like telling bullies to don't bully.

By the way, I'm in no way against these kinds of policy: I've seen what happened to curl, and I think it's fully in their rights to outright ban any usage of LLMs. I'm just concerned about the enforceability of these policies.
by h4ny | 2025-09-15 04:24:16+00:00
Interesting idea! Would be nice to see:

* How the colors were picked and assigned to each category and (e.g. at what point is red pink and no longer red)

* An indication of distribution in charts, they have different scales on the y-axis.

* The author likely sampled posters with mostly the same color above a given threshold for each category, would that (together with the lack of methodology and error bars) heavily skews the reader's presentation of the data analysis?
by glenstein | 2025-09-15 04:24:51+00:00
Crowds of people, as an average, are more accurate at guessing the number of beans in a jar at a county fair than individual people, but not because there's such a thing as cognition manifesting at the group level in any literal sense.

I think you're making an interesting point, but I think you're attempting to point to a hive mind like it's the only pertinent topic when it comes to cognition of bees, as if testing for cognitive capabilities of individuals was a misunderstanding. But it's not a misunderstanding, it's part of what I think is some pretty explosively important research testifying to insect, cognition and even consciousness. At least speaking for myself, if the research holds, for me it necessitates a mind-blowing reevaluation of the internal lives of at least some insects.
by jofla_net | 2025-09-15 04:25:26+00:00
Sometime last summer, I encountered a domain which WAS revoked. I was and am using Firefox, roughly v120, in Ubuntu and it threw up an unskippable error page, similar to those self signed pages in chrome. I did turn it off for hahas, in about:config, i believe it was an OCSP setting, security.OCSP.enabled to let me view the page.

However, this page, shows perfectly, so there must have been some differences between this and the domain I remember. Unfortunately, my domain has long since been reissued and I can't reproduce the block. The block also occurred in the latest Thunderbird for windows 7 interestingly.
by nailer | 2025-09-15 04:25:37+00:00
> I was recently working on a project that uses the AWS SDK for JavaScript. When updating the dependencies in said project, I noticed that the version of that dependency was v3.888.0. Eight hundred eighty eight. That’s a big number as far as versions go.

It also isn’t the first AWS SDK. A few of us in… 2012 IIRC… wrote the first one because AWS didn’t think node was worth an SDK.
by Marsymars | 2025-09-15 04:25:41+00:00
> I’m thinking someone would need to be pushing $400-500k for household income. That would put them in the top 3%. I don’t get the supply and demand curve on it. Making that much, and renting. It’s an even smaller market than the full 3%.

I know a couple in that range of HHI (doctor/lawyer) who sold their house and moved to a rental in that range.

Their take is that their time is very valuable to them, and dealing with their house involved a bunch of time spent on management and administration that can’t be made to adequately go away without effectively hiring a house manager.
by isluoyu | 2025-09-15 04:27:10+00:00
Focusing solely on total carbon emissions without considering per capita figures, and only on the present without acknowledging historical responsibility, is blatant discrimination and exploitation of developing countries by the developed world.

The European Union has certainly done a lot for environmental protection, but many of its politicians are more concerned with exploiting less developed nations through green barriers, just as they previously did through technology and patents.

Don't just focus on reducing emissions; why not consider increasing carbon sinks? A balanced approach is more effective. Learn from China: its increase in forest coverage, its desert reclamation, and the massive development of wind and solar power are all results of decades of relentless effort.

Stop the condescending finger-pointing. For example, China is often criticized for its ocean fishing, but critics ignore that its aquaculture production far surpasses its marine capture. How many countries in the world can achieve that? For species that are difficult to farm, they first master artificial breeding to release fry back into the sea, before advancing toward the goal of full-cycle aquaculture. People's well-being and environmental protection must be balanced, not subjected to rigid, one-size-fits-all policies made for the sake of votes.
by totallymike | 2025-09-15 04:28:33+00:00
Onboarding a new contributor implies you’re investing time into someone you’re confident will pay off over the long run as an asset to the project. Reviewing LLM slop doesn’t grant any of that, you’re just plugging thumbs into cracks in the glass until the slop-generating contributor gets bored and moves on to another project or feels like they got what they wanted, and then moves on to another project.

I accept that some projects allow this, and if they invite it, I guess I can’t say anything other than “good luck,” but to me it feels like long odds that any one contributor who starts out eager to make others wade through enough code to generate that many comments purely as a one-sided learning exercise will continue to remain invested in this project to the point where I feel glad to have invested in this particular pedagogy.
by com2kid | 2025-09-15 04:30:33+00:00
Consistency is hard, but quality isn't.

If I use my eggs from neighbor's chickens, fancy chocolate, and organic milk from a local dairy, the cake is going to taste better (90% from the better chocolate honestly).

Quality improvements are easy.

Consistency is harder, but anyone with a kitchen scale and half an eye for detail should be able to pull it off. It takes me 3 or 4 goes at a recipe before I get super consistent with it, but it isn't rocket science (which also demands consistency!)

> What about a smaller cake or bigger one?

Boxes don't help here since their cooking instructions are for a fixed dimension, changing the cake size significantly for even boxed cakes requires understanding what you are doing. Again, not hard, but it isn't a win for box cakes.
by atonse | 2025-09-15 04:32:59+00:00
For almost all of my professional coding life (~25 years), I don't think I've ever seen the "code" as my product, but instead, an actual business/real-world outcome produced or improved by that code.

Even though I loved programming, the satisfaction usually came from the tools that enabled actual real-world benefit rather than coding for the sake of coding. Which is why I used to find the debates about TDD or tabs/spaces silly. Does this provide faster iteration or more stability/maintainability to solve a real world problem? if it does, great. if it doesn't, you're just wasting everyone's time and money, let's move on.

So in that vein, using things like Claude Code allow me to provide that real world value FASTER, which is ultimately what my clients appreciate. It's allowing me to spend more time being a product manager and less time fiddling around with day to day stuff. And it's not like the code is horrible or anything. I still apply strong architectural principles (code reuse, organized modules, separation of concerns, clear APIs, etc). I'm just not writing every line anymore.

I will be the first to say it's probably going to result in making me a bit more rusty in coding. But I haven't really seen that yet in the last 6 months, mostly because I haven't had to just say "ok forget it, let me just code it" more than once or twice, especially in the last 2 months since I moved over fully to Claude Code. And in those situations, I was able to take over pretty easily.

So far I'm not too worried, but it's hard to tell what the long term impacts will be.
by redleader55 | 2025-09-15 04:33:03+00:00
Checking for revocation doesn't scale and has serious privacy implications. There are two ways to do revocation: CRL and OCSP. CRL is a list that becomes huge over time - hosting it would require massive amounts of bandwidth and clients would need to download a lot of extra data. OSCP is more like a query API - did this cert expire? The problem is you need to make that query for each visit and you leak your IP address when you do that query. The hoster would need to provide capacity to run those queries and serve the result. For each visit you'd need to pay a few round-trips worth of delay before showing the content, sometimes while part of the content is downloaded: you download example.com, which has some CSS which is hosted at static.example.com, and the website redirects you to m.example.com which is the mobile version after running some JavaScript which detects the browser capabilities.
by dghlsakjg | 2025-09-15 04:33:16+00:00
The phenomenon you describe is a function of viewfinder magnification. It so happens that many SLRs had their magnification such that it worked well at 50mm to shoot with both eyes open. There are SLRs that have different magnification so this trick doesn’t always work.

You can get a rangefinder style camera with a viewfinder that lets you shoot with both eyes open but has a 35mm POV.

People have a variety of theories as to why 50mm is considered the standard lens and why people say it mimics human vision. I have heard so many explanations that I am inclined to say that there’s not really much but opinion behind it. It might just be that it was the most common first lens and because it is cheap and relatively simple to make a good, fast 50mm lens.
by malfist | 2025-09-15 04:33:32+00:00
Just the other day I was making brownies and I always make them from scratch, but my partner has been making a particular box mix forever and thought I'd buy one and try it since its easier than from scratch.

But it wasn't better. I like to get a nice glossy top on a brownie with a fudgy consistency under it. The glossy top cracks when you bite into it and it's amazing. But there's no way to do that with a box mix. The top comes from whipping air into the butter, egg and sugar mixture but a box mix is one bag. You try to beat air into it and you develop the gluten and it turns out terrible.

Box mixes are acceptable. But they don't beat from scratch by a long shot, unless its your first time or to ever for baking.
by fractallyte | 2025-09-15 04:33:37+00:00
I've been down this road before, and been brutally downvoted, but I'll say it again:

- corporations are responsible for creating products which can be recycled;

- the consumer is responsible for proper disposal of their waste, and also for electing officials who have actual policies on reducing or eliminating pollution;

- local government is responsible for setting up recycling centers, and for enforcing correct behavior in consumers.

The consumer is at the bottom of all this, directly responsible for polluting the environment.

Oft-stated opinions like yours are lazy and ignorant.
by onecommentman | 2025-09-15 04:34:14+00:00
And over the decades there have been many more pro-renting pieces like this in the general press than pro-home ownership. I’ve assumed the pieces are bankrolled by the investment community, because investment bankers can’t make money off of your money if your money is locked up in a home.

“Rent your apartment, save the difference, invest it in the financial casino of your choice and maybe you’ll win big this time.” Or maybe not. But the house (investment brokers) always win.
by guywithahat | 2025-09-15 04:35:21+00:00
Maybe I'm just an old geeser but when I went back to grad school I was absolutely shocked at how many people vaped, and it seemed to have been because they started smoking flavored vapes. People would go to a party, either in high school or college, and the party would be permeated by some sweet smell. Curious kids/people would investigate, try vaping, and eventually get their own, becoming addicted.

As far as I can tell, banning flavored vapes has had a significant impact on reducing vaping/smoking new users, which is the ultimate goal. People who are currently addicted should primarily be motivated to quit, not find better tasting alternatives
by h4ny | 2025-09-15 04:35:33+00:00
> I didn't make a decision on the tradeoff, the LLVM community did. I also disclosed it in the PR.

That's not what the GP mean. Just because a community doesn't disallow something doesn't mean it's the right thing to do.

> I also try to mitigate the code review burden by doing as much review as possible on my end

That's great but...

> & flagging what I don't understand.

It's absurd to me that people should commit code they don't understand. That is the problem. Just because you are allowed to commit AI-generated/assisted code does not mean that you should commit code that you don't understand.

The overhead to others of committing code that you don't understand then ask someone to review is a lot higher than asking someone for directions first so you can understand the problem and code you write.

> If your project has a policy against AI usage I won't submit AI-generated code because I respect your decision.

That's just not the point.