MurphyA/hacker-news huggingface dataset:
by quitit | 2025-09-08 10:05:52+00:00
It's more of a PR/interest piece rather than anything that moves the needle for buyers.

Garmin buyers typically choose the brand due to the much longer battery life, however Garmin doesn't have any magic battery technology - the longer battery life is simply from less full time services. If enabling the additional hardware functions that bring it on-par with the ultra, the ultra actually has a longer battery life.

The other issue is that both brands diverge in how they offer satellite connectivity. For iPhones, satellite connectivity includes messaging, sending locations, and carrier-provided functionality via satellite (e.g. SMS), alongside with the road-side assistance and SOS features. These are included at no cost (at this time).

Garmin on the other hand starts with a $40 activation fee, then a minimum per month charge of $8 USD which then still charges 50c per text message, $1 for voice messages and 60c an hour for location tracking. Garmin's also offers a $50 USD per month plan where some of these tariffs are included, but notably voice messages are limited to 50 units before reverting back to $1 each. The $40 activation fee prevents users from saving money by switching off the functionality when not needed.
by lewdwig | 2025-09-08 10:06:41+00:00
I have noticed that LLMs are actually pretty decent at redteaming code, so I’ve made it a habit of getting them to do that for code they generate periodically. A good loop is (a) generate code, (b) add test coverage for the code (to 70-80%) (c) redteam the code for possible performance/security concerns, (d) add regression tests for the issues uncovered and then fix the code.
by ThailandJohn | 2025-09-08 10:06:50+00:00
After reviewing my own code. Thanks for digging into the code! You're reviewing the regex fallback patterns that only trigger when AST parsing fails. The primary detection uses Tree-sitter for structural analysis and taint flow tracking.

That TOCTOU pattern IS terrible - it's meant as a last-resort 'something might be wrong here' flag when we can't parse the AST. The real detection happens in theauditor/taint_analyzer/ which tracks actual data flow from filesystem checks to file operations.

But you're right - even fallback patterns shouldn't be this noisy. I'll tighten it to only flag actual filesystem operations: - os.path.exists → open() - fs.exists → fs.writeFile() - File.exists() → new FileWriter()

If you actually run the tool with aud full, it uses the proper AST analysis first. These regex patterns are the third fallback when Tree-sitter isn't available. Thanks for the specific feedback - this is exactly why I open-sourced it!
by kotaKat | 2025-09-08 10:07:27+00:00
I got trapped in a Burger King drive thru for half an hour. Car parked in front of me, cars stuck behind me, concrete barrier on the right keeping me from pulling away.

No clue what they were holding on, no apology once they got to the window, nothing. Emailing RBI got an empty response back on top of refusing to provide a refund for the order or any kind of customer recovery.

At least my bank won the chargeback.
by orthoxerox | 2025-09-08 10:07:41+00:00
It's interesting how Intel has been surviving in smaller and smaller market niches these days:

- cheap ULV chips like N100, N150, N300 - ultrabook ULV chips (I hope Lunar Lake is not a fluke) - workstation chips that aren't too powerful (mainstream Core CPUs) - inexpensive GPUs (a surprising niche, but excruciatingly small)

AMD has been dominating them in all other submarkets.

Without a mainstream halo product Intel has been forced to compete on price, which is not something they can afford. They have to make a product that leapfrogs either AMD or Nvidia and successfully (and meaningfully) iterate on it. The last time they tried something like that was in 2021 with the launch of Alder Lake, but AMD overtook them with 3D V-Cache in 2022.
by ThailandJohn | 2025-09-08 10:08:17+00:00
Do you care about the messenger or the message?

I use AI to communicate because I have dyslexia and ADHD. It helps me articulate technical concepts clearly. The irony isn't lost on me - I built a tool to audit AI-generated code, using AI, because I can't code, and now I'm using AI to explain it.

If that offends you more than 204 SQL injections in production code, we have different priorities.
by delusional | 2025-09-08 10:08:43+00:00
> So fix your setup? Why should others with wider screens leave space on their screen empty for your sake?

What a terrible attitude to have when working with other people.

"Oh, I'm the only one who writes Python? Fix your setup. why should I, who know python, not write it for your sake?"

"Oh, I'm the only one who speaks German? Fix your setup. Why should I, who know German, not speak it for your sake?"

How about doing it because your colleagues, who you presumably like collaborating with to reach a goal, asks you to?
by Dennip | 2025-09-08 10:09:21+00:00
I have a 5950X system that will just randomly shut down, I've RMA'd the CPU, tried swapping the RAM, GPU, PSU and the motherboard in different combinations. I cannot track down a specific issue and it just won't be stable. I've given up and decided to discard the PC of theseus and build a new one -_-.
by ThailandJohn | 2025-09-08 10:09:47+00:00
You're absolutely right to be skeptical! You do ignore that vibe coding isnt going away...

That's exactly why I built TheAuditor - because I DON'T trust the code I had AI write. When you can't verify code yourself, you need something that reports ground truth.

The beautiful irony: I used AI to build a tool that finds vulnerabilities in AI-generated code. It already found 204 SQL injections in one user's production betting site - all from following AI suggestions.

If someone with no coding ability can use AI + TheAuditor to build TheAuditor itself (and have it actually work), that validates the entire premise: AI can write code, but you NEED automated verification.

What could go wrong? Without tools like this, everything. That's the point.
by dijit | 2025-09-08 10:09:50+00:00
externalising developer cost onto runtime performance only makes sense if humans will spend more time writing than running (in aggregate).

Essentially you’re telling me that the software being made is not useful to many people; because the cost of writing the software (a handful of developers) will spend more time writing the software than their userbase will in executing their software.

Otherwise you’re inflicting something on humanity.

Dumping toxic waste in a river is much cheaper than properly disposing of it too; yet we understand that we are causing harm to the environment and litigate people who do that.

Slow software is fine in low volumes (think: shitting in the woods) but dumping it on huge numbers of users by default is honestly ridiculous (Teams, I’m looking at you: with your expectation to run always and on everyones machine!)
by hebejebelus | 2025-09-08 10:11:14+00:00
Yes, exactly. Unless you have a deep intention to maintain this library or somehow elevate it beyond the version anyone would get given a couple of minutes and Claude, what's even the point in publishing the code or submitting to HN? And what is the benefit for anyone to use _this_ library instead of getting Claude to build their own with whatever constraints and requirements they have?

Again I don't want to come across as criticising the OP, I am just struggling with this myself. I've vibe-coded a few great things for myself but the value is so personal (and the lack of intention to maintain is so strong) that I would rather others build their own version than use mine!
by psychoslave | 2025-09-08 10:11:16+00:00
What are the defaults, though, as not everyone seems to agree with GNU coding style?

>First off, I’d suggest printing out a copy of the GNU coding standards, and NOT read it. Burn them, it’s a great symbolic gesture.

https://www.kernel.org/doc/html/v4.10/process/coding-style.h...
by ThailandJohn | 2025-09-08 10:11:28+00:00
"Using SonarQube is probably the way to go" "We don't need specialized tools"

Pick one.

SonarQube IS a specialized tool. It just specializes in different things than TheAuditor.

SonarQube: "This file has issues" heAuditor: "Your frontend and backend disagree about the data model"

Both have their place.
by IanCal | 2025-09-08 10:11:59+00:00
There's a load of things I think are things many kids could do much earlier in maths, though my personal feeling may be off. My son seems to be taking very quickly to the feeling of maths so I'm trying to share some parts that I only realised drastically later on.

Rules you learn in maths are often based on much simpler, truer (I'll get back to this), things. I learned loads of "move this denominator up to this side, like an escalator!" and such and only when I was something like 13 I nearly shouted "EQUALS MEANS THE TWO SIDES ARE THE SAME THING" as I realised why so many of these god damn rules existed. It also explained suddenly why some things are OK to do and some aren't (notably taking roots).

The other key thing was finding out that these things are decisions. We can choose whatever rules we want and see what happens, and keep whatever is useful. Lots of the more interesting things I've seen later in life have been "well there's no number you can square and get a negative number. What if there was?" or "What if there was a way to raise to a real number, what would that mean?". There's no magical reason we can't divide by 0 but there's not a neat useful answer really, but you can totally define a setup where you can do that and have fun if you want.

Imaginary numbers and Argand diagrams are things my 6 year old can mess about with. He's still developing reasoning so certain things trip him up about seeing the process for solving a thing (fascinating to see where his comprehension is up to and the leaps that happen, I remember the first time seeing him pick up a chess piece, go to move it and before putting it anywhere say "no, if I do that you'll do X") but lots of things are very accessible. Powers are fun because you can make big things quickly, factorials too. Basic solving of equations I was only taught in secondary school yet I was taught "two bananas cost 30p and one banana and one apple costs 40p, how much is one apple" years before and that's just swapping fruit for letters.

I was always good at maths, but I think it's far more fun now I've understood more about what you can mess about with and how simple parts are at times.
by RedShift1 | 2025-09-08 10:13:16+00:00
Back when I was playing with my Aureal Vortex 2 card, locating enemies via sound was easy peasy through footsteps. That system (and card unfortunately) is now long gone. On my current day system, sound location doesn't work nearly as well, I can't tell if something is in front or behind me, I have to move my head (in-game) to figure that out. I really miss my Vortex 2 :-(.
by tim333 | 2025-09-08 10:13:18+00:00
>AI seems to have reached its iPhone 4 moment

implying development has levelled off from a functional point of view. Which was kind of true with iPhones - my 13 does basically the same as the 4 did just with better images and speed. And in the future the iphone 29 will probably still do apps, photos and calls, just a bit better.

But I don't think that'll be true with AI - there are huge categories of stuff - being able to do human jobs, being self improving, having robots that can build houses and factories and so on that don't work at the moment but may well in a decade or two. I think it may be more of a Sopwith Camel moment.
by cjpartridge | 2025-09-08 10:14:02+00:00
Most definitely - you should always do your own stress testing with your specific CPU (and system) to find out what's stable.

And while all core CO might not be optimal, based on personal experience and what I've seen across multiple enthusiast communities, more often than not you can get an worthwhile improvement to temps/perf with an all core CO.

That being said, there are certainly ways to find and set the best CO values per core, but it will certainly take more effort, stress testing and time.
by 1718627440 | 2025-09-08 10:14:15+00:00
> Most people don't care about software that much in general.

This is an example of not caring about the software per se, but only about the outcome.

> [C is] in fact it's famously bug-friendly

Yes, but as a user I like that. I have a game that from the user-experience seams to have tons of use-after-free bugs. You see that as a user, as strings shown in the UI suddenly turn to garbage and then change very fast. Even with such fatal bugs, the program continues to work, which I like as a user, since I just want to play the game, I don't care if the program is correct. When I want to get rid of these garbage text, I simply close the in-game window and reopen it and everything is fine.

On the other side there are games written in Pascal or Java, which might not have that much bugs, but every single null pointer exception is fatal. This led to me not playing the games anymore, because being good and then having the program crash is so frustrating. I rather have it running a bit longer with silent corruption.
by benreesman | 2025-09-08 10:14:43+00:00
If you don't have good tests with coverage information then your Python and Rust code is buggy too. If you want "as low of defects as I can get from the compiler alone" then your options are things like Haskell and theory-laden TypeScript.

If you have low-defect appropriate test coverage, ASAN approaches linear typing for the class of bugs that the borrow checker catches.

Python and Rust have their sweet spots just like C++ does, I use all three. The meme that either is a blanket replacement for all of C++'s assigned duties is both sikly by observation and not demonstrated by enthusiastic adoption in C/C++ in the highest-demand regimes: AI inference, HFT, extreme CERN-scale physics, your web browser.

Python is better for fast prototyping and other iteration critical work, Rust is unmatched for "zero defect target with close to zero cost abstractions" (it was designed for writing a web browser and in that wildly demanding donain I can think of nothing better).

C++ excels in extreme machine economics scenarios where you want a bit more flexibility in your memory management and a bit more license to overrule the compiler and a trivial FFI story. Zig to me looks likely to succeed it in this role someday.

All have their place, software engineers in these domains should know all of them well, and any "one true language" crap is zealoty or cynical marketing or both.
by jiggawatts | 2025-09-08 10:15:08+00:00
.NET has SecureString: https://learn.microsoft.com/en-us/dotnet/api/system.security...

Which reminds me of why I hate tiny standard libraries as seen in JavaScript: features like SecureString work only if they're used pervasively. It has to be in the std lib and it has to be used everywhere so that you almost never have to unwrap them. It's critical that credentials are converted to SecureString as soon as possible and that they stay as SecureString values until the last possible instant when they're passed to some external API call deep inside even a third-party a library.
by redditor98654 | 2025-09-08 10:15:46+00:00
From what I recall, Reddit uses AWS extensively. Could they not have replaced RabbitMQ with SQS? You get the near unlimited horizontal scalability, extremely good uptime, guaranteed at least once message delivery and for the case of a worker crash, the messages will become visible again after the visibility timeout (since they wouldn’t have been deleted by the worker).
by smusamashah | 2025-09-08 10:15:55+00:00
As a counter point, when I came to UK, it was super weird to see self checkout machines. Where I am from (Pakistan), I can't imagine anything like that. Although watched a video recently where in a rural area a guy left a cart of fruits on the side of road for people to buy the fruits and pay by themselves, at the end of the day cash was just little bit less than total amount.

These machines in UK felt like I was being trusted to pick items myself, and pay myself and I shouldn't break that trust.

Ironically I don't see these self checkout machines in Indian/Turkish/Kurdish etc super stores. In-fact, those stores trust there customers even less, they would ask you to leave your bags/trolleys at the door.
by patapong | 2025-09-08 10:17:21+00:00
> The products I built with Claude are worse than without them because I use programming as a way to think and interact with the problem. When you're coding, you're deeply invested in the problem you're solving, getting intimate with the problem. With AI tools, it's surface level. It's a one-night stand with a problem versus a deep and meaningful relationship.

A very interesting insight about AI coding. It gets at the theory building part of programming, which is much harder to do when just supervising an AI in my experience. On the other hand, I am so much faster that it's hard not to use AI for coding. Interested to see what they come up with!
by skylinkapi | 2025-09-08 10:18:34+00:00
Skylink API is a comprehensive aviation data platform designed for developers. It provides real-time and historical data on flights, weather (METAR/TAF), airports, and airlines through a single, easy-to-use RESTful API. The service is built to be a one-stop solution for applications needing reliable aviation data, simplifying development by eliminating the need to integrate multiple, disparate sources. Its core features, including flight tracking, airport schedules, and a global database of aviation information, make it ideal for a wide range of use cases, from flight tracking apps to pilot briefing tools.
by Tooster | 2025-09-08 10:18:50+00:00
I’d also add:

* [Difftastic](https://difftastic.wilfred.me.uk/) — my go-to diff tool for years * [Nu shell](https://www.nushell.sh/) — a promising idea, but still lacking in design/implementation maturity

What I’d really like to see is a *viable projectional editor* and a broader shift from text-centric to data-centric tools.

The issue is that nearly everything we use today (editors, IDEs, coreutils) is built around text, and there’s no agreed-upon data interchange format. There have been attempts (Unison, JetBrains MCP, Nu shell), but none have gained real traction.

Rare “miracles” like the C++ --> Rust migration show paradigm shifts can happen. But a text → projectional transition would be even bigger. For that to succeed, someone influential would need to offer a *clear, opt-in migration path* where:

* some people stick with text-based tools, * others move to semantic model editing, * and both can interoperate in the same codebase.

What would be needed:

* Robust, data-native alternatives to [coreutils](https://wiki.archlinux.org/title/Core_utilities) operating directly on structured data (avoid serialize ↔ parse boundaries). Learn from Nushell’s mistakes, and aim for future-compatible, stable, battle-tested tools. * A more declarative-first mindset. * Strong theoretical foundations for the new paradigm. * Seamless conversion between text-based and semantic models. * New tools that work with mainstream languages (not niche reinventions), and enforce correctness at construction time (no invalid programs). * Integration of semantic model with existing version control systems * Shared standards for semantic models across languages/tools (something on the scale of MCP or LSP — JetBrains’ are better, but LSP won thanks to Microsoft’s push). * Dual compatibility in existing editors/IDEs (e.g. VSCode supporting both text files and semantic models). * Integrate knowledge across many different projects to distill the best way forward -> for example learn from Roslyn's semantic vs syntax model, look into tree sitter, check how difftastic does tree diffing, find tree regex engines, learn from S-expressions and LISP like languages, check unison, adopt helix editor/vim editing model, see how it can eb integrated with LSP and MCP etc.

This isn’t something you can brute-force — it needs careful planning and design before implementation. The train started on text rails and won’t stop, so the only way forward is to *build an alternative track* and make switching both gradual and worthwhile. Unfortunately it is pretty impossible to do for an entity without enough influence.
by gonzobonzo | 2025-09-08 10:19:07+00:00
I'm not sure teaching it in school is actually going to help. Most people will tell you that of course you need to look at primary sources to verify claims - and then turn around and believe the first thing they here from LLM, Redditor, Wiki article, etc. Even worse, many people get openly hostile to the idea that people should verify claims - "what, you don't believe me?"/"everyone here has been telling you this is true, do you have any evidence it isn't?"/"oh, so you think you know better?"

There was a recent discussion about Wikipedia here recently where a lot of people who are active on the site argued against people taking the claims there with a grain of salt and verifying the accuracy for themselves.

We can teach these things until the cows come home, but it's not going to make a difference if people say it's a good idea and then immediately do the opposite.
by Sammi | 2025-09-08 10:19:13+00:00
"250 or more" employees is at top. "1-4" and "100-249" are next, while all the medium sized companies are lagging at the bottom. This is signal I think. The heavy adopters are either large enterprise or solo/micro teams.

Now my interpretation: Enterprises are mostly riding the hype and not getting that much real benefit - hence the recent steep decline they've seen. Solo devs and micro teams are reaping the most of the actual benefits of generative AI. Anecdotally I've seen this in practice that individuals or tiny teams have the most flexibility with using AI and can play around with it the most in order to get it to do useful stuff. Larger organizations are limited by communication overhead and need to follow protocols and procedures and best practices and whathaveyou. Whatever benefit AI brings is drowned out by this overhead.

My prediction: Solo devs and tiny teams using AI will be able to do more work faster than enterprise. I've yet to see much real world results of this, so I think the effect is kinda small, but I do believe is is tangible. I think we're seeing a silent wave of micro-sass businesses that is made more possible because of generative AI. These aren't large or sexy, so they're not making headlines. Where can I find data on this?
by polotics | 2025-09-08 10:19:47+00:00
dispossed ennemy, captured, this makes a lot more sense indeed https://lsj.gr/wiki/%CF%83%CE%BA%CF%85%CE%BB%CE%B5%CF%8D%CF%... than the notion "slav" would have somehow evolved "up" linguistically to get a "k" inserted. y'all know languages mellows over time, donty'all?
by sippeangelo | 2025-09-08 10:19:48+00:00
This is the stuff of nightmares. You have vibe-coded 50k lines of Python over 250 hours, but you can't articulate what it does or how it does it without having the same AI read the code back and describe it to you? Like your LLM said, it IS turtles all the way down! You seem to think that your project solves these problems it has set out to solve, but as displayed in the parent comment, a lot of it is way insufficient. Are you blindly trusting the LLM Yes Man?