MurphyA/hacker-news huggingface dataset:
by dijit | 2025-09-08 13:42:46+00:00
I have in my other comments.

But AI investment is outpacing all the things you mentioned.

I mentioned soap not because of capital investments, but because of what the GDP growth was following the invention. If AI is qualitatively lower than the GDP growth caused by SOAP then we're going to see a lot of unemployment. So, it's a bubble- nothing could possibly match soap.
by bluGill | 2025-09-08 13:43:09+00:00
Switching away today is too mind boggling to consider, but switching is purely a technical problem. We can put a price on the costs, and the time. VMWare was founded in 1998 - that means 27 year ago nobody was using it, and in turn we can say took you less than 27 years to get dependent on and - surely you can switch to something else in 27 years. More likely you can switch in 2 years - that is about what it took one company I know of.
by pikelet | 2025-09-08 13:43:24+00:00
Looking at the CSS variables page it seems that this is because they scale up the base font size at various breakpoints, starting at 106.25% at 576px, and going all the way up to 131.25% at 1536px. It definitely feels too heavy handed to me. The first time I viewed the website on mobile it seemed fine (because it's actually at or close to the browser's standard font size) so I wasn't sure what the problem was until I viewed it on my desktop. I can kind of see what they're going for as it keeps the layout fairly consistent, but I don't think it's the right approach.
by Octoth0rpe | 2025-09-08 13:43:32+00:00
I agree with all of the problems that you're highlighting, but would say that all of those problems exist whether or you're doing manual dependency management or using a package manager.

The solution IMO (which is non-existent afaik) would be to integrate some kind of third party auditing service into package managers. For example, for your npm project you could add something like this to your package.json:

` "requireAuditors": [ { "name": "microsoft-scanning-service", "url": "https://npmscanner.microsoft.com/scanner/", "api_key": "yourkeyhere, default to getting it from .env" } ] `

And when you npm install, the version / hash is posted to all of your required auditor's urls. npm should refuse to install any version that hasn't been audited. You can have multiple auditing services defined, maybe some of them paid/able to scan your own internal packages, etc.

I've thought about building a PoC of this myself a couple of times because it's very much on my mind, but haven't spent any time on it and am not really positioned to advocate for such a service.
by tambourine_man | 2025-09-08 13:43:42+00:00
I was using this library at the time.

https://github.com/T-vK/ESP32-BLE-Keyboard

Do you know of any other that can act as Bluetooth classic keyboard?

Edit: this could be fruitful

https://community.platformio.org/t/using-esp32-as-a-bluetoot...
by DoctorOW | 2025-09-08 13:44:28+00:00
> run something like sudo apt update && sudo apt upgrade

I assume this means that the author of this post has seen the Debian version in their nmap. The latest version of which would be 2.4.65-1~deb12u1[1]. You'll notice that there is a Debian version number attached to the Apache version number which means that the version number NMAP found doesn't necessarily mean software is unpatched. I've never used Iceblock or talked to this developer but I have no doubts he's dealing with beg bounties[2], harassment, and bad faith critique of his software which the screenshotted messages look like.

EDIT: For the sake of clarity, I think I should have phrased it the other way around. Bad faith messages look like the ones the author sent. I'm not discussing the actual intention of the messages but the pattern seeking brain's reception to them.

[1]: https://security-tracker.debian.org/tracker/source-package/a...

[2]: https://www.troyhunt.com/beg-bounties/
by newyankee | 2025-09-08 13:44:33+00:00
Might be the wrong reasons, but highly skewed and externally controlled social media do not necessarily mean bastions of free speech, they have shown that powerful group with right incentives and structures can capture and influence perception. Everyone has biases and social media will reinforce or amplify them if an external adversary uses in a targeted way.

Also while free speech and protests are important, the nature of protests or certain elements fuelling fire in the resentment can lead to these becoming completely out of control and destroying property or harming passersby. Sometimes pure anarchy is the goal of routine rabble rousers who use this opportunity. So I will go out on a limb over here and say no one over here really knows what happened in the sequence of decision making by the police and there may be some instances where certain actions may have been justified to avoid further escalation.
Show HN: Hyperif – Forget MCPs, chat with your data across all your tools
by sameerav | 2025-09-08 13:44:57+00:00
Hi HN,

We’ve been working on Hyperif, an AI assistant that connects directly to your tools (Google Calendar, Gmail, Slack, Ads, spreadsheets, etc.) so you can access data and take action — just by chatting.

The idea came from our customers. Over the years, we’ve had teams come to us who struggled with building workflows and never really understood APIs. They always needed help setting up their specific integrations. For most non-technical users, it’s the same issue: you end up asking someone else to “build this out” whenever you want to connect tools or automate something.

With AI making interaction so much simpler, we realized it doesn’t need to be this way. Instead of fiddling with APIs or dragging boxes in a workflow builder, what if you could just chat with your data?

With Hyperif you can:

- “What’s on my calendar tomorrow?” - “Summarize the google docs file” - “Pull data from this spreadsheet and send a quick summary to Slack.” - “Get ad insights and create a doc from the analysis.”

What’s different about Hyperif is that: - It connects via APIs (not UI hacks), so results are reliable. - You don’t need to set up automations or workflows — you just ask. - You can turn repeat prompts into “Agents” that run on-demand - It’s designed with security first (OAuth, no hidden data storage, enterprise options).

We’re already working with a few companies who connected not just their SaaS tools but also their bespoke internal software, which has been exciting to see.

You can try it here: https://hyperif.com

I’d love feedback on: - Which use cases resonate most (calendar, docs, email, ads, etc.) - Whether the “chat-first” approach feels simpler than building workflows - Any technical concerns or suggestions on integrations/security

This is an early release, so things may break — if they do, we’d really appreciate you letting us know.

Thanks!
by dismalaf | 2025-09-08 13:45:01+00:00
Honestly, he's not wrong. I use Ruby and 99% of the gems on rubygems.org are absolute trash. I use Rails and stuff like Nokogiri or Faraday, also RubyLLM, but little else because of reasons.

NPM is even worse, you import one thing and get 1000s of trash libraries so nowadays the only JS I write is vanilla and I import ES Modules manually.

Also, Odin doesn't make adding dependencies that difficult, you can literally just throw an Odin library into your project as a folder and it's available. The Odin compiler does everything else for you.
by AngeliqueB | 2025-09-08 13:45:01+00:00
SEEKING WORK | Edinburgh, UK | Remote or on-site | Web, UI/UX & Print Designer

Portfolio: https://angeliqueboudeau.org/#portfolio

Contact: hi@angeliqueboudeau.org

I’m a web & print designer who helps organisations involved in social and environmental causes. I’ve helped clients in the past with projects focused on thermal solar energy, household waste reduction, plant-based food advocacy and data science for social/environmental issues. My design process aims to understand your needs and challenges and create designs aligned with your goals and values.

---

Design services:

· Web design: responsive mobile/desktop designs that are lightweight and fast, where I can also arrange web development

· UI design: wireframes, mockups, clickable prototypes

· Branding: logo design, style guides, posters, booklets, slideshows and social media banners

· Included in all services: advice on sustainability, accessibility (WCAG), content/copy, and SEO

---

Skills: Figma, FigJam, Canva, Inkscape, GIMP, Scribus. Basics of Git, HTML, CSS, Linux, Visual Studio Code, Hugo, static websites. Fluent in French and English.

---

Contact me via https://angeliqueboudeau.org or hi@angeliqueboudeau.org with a short description of your project, and how you think I can help, then we can arrange a call to discuss next steps!
by rerdavies | 2025-09-08 13:45:06+00:00
We must include the standard I/O definitions, since we want to send formatted output to stdout and stderr. <<Header files to include>>= #include <stdio.h> @

Not hard to see why nobody really embraced it. And not helped buy the fact that it was published right around the time that best practice was switching toward "don't comment unless absolutely necessary".
by Scene_Cast2 | 2025-09-08 13:45:38+00:00
Why can't you put ads on RSS? Either in the story itself (by the site or aggregator) or as a "promoted item" in the feed (by the aggregator). If anything, the Google Discover (or whatever it's called) is not too different, just that you don't control which exact news sources you're subscribed to.

I can imagine an alternate timeline where Google Reader turned into a sort of Twitter (or FB or IG) feed.
by hilbert42 | 2025-09-08 13:45:43+00:00
"15 years ago you had to put your wallet in the inner pocket because bags and outer pockets routinely got slashed."

It's decades since I backpacked around Europe on trains and such, and back then slashing pockets and bags was rife. I never traveled anywhere unless I was wearing a money belt strapped to my waist—it held my passport, traveler's checks, large denomination notes and credit cards. I kept my wallet (with only a small amount of cash) in my front jeans pockets—I reckoned that down there I'd notice any slashing pretty quickly. Pants with side pockets were a no-no because they were too easy to pickpocket.

I recall one particularly bad incident in Italy of being surrounded by organised mobs of kids who'd act in ways to distract one's attention whilst others tried to pickpocket one's valuables. I came out unscathed because I was wary from the start.

Later I was living and working in Europe and it was very obvious to me that this sort of crime is much more prevalent in areas where people are unemployed or where there is a great disparity between rich and poor. I've no doubt the solution to such crime is having a society where the distribution of wealth is more equitable.

Re that point and yours about self-checkout for bus rides. That system was implemented a few years ago where I am. I've made the interesting observation that those who travel outside normal to-and-from work hours—say late morning and early afternoon—are the ones most likely to not swipe their travel card on the payment terminal. When I've traveled at those times I'm surprised at the numbers who do not pay. This is in stark contrast to those who are traveling to and from work, at those hours just about everyone pays.

Again, this, no doubt, is an equity/financial issue. Those traveling in the 'off hours' are more likely to be unemployed and or financially hard up.
by ctkhn | 2025-09-08 13:45:57+00:00
First off I do think being a NIMBY about amazon and data centers is fair game, I wouldn't want those either. But I've been to Columbus, and as far as the metro area goes, this is not the highest and best use place. There's a lot of land in neighborhoods nearer to downtown actually being redeveloped for higher tax value with residential, offices, shopping, and nightlife or that's primed once developers make their way through Old Town East and Franklinton. Even the land being redeveloped in the new fake-downtowns of suburban developments are more around Dublin and mostly within the bounds of 270.
by rgoulter | 2025-09-08 13:45:57+00:00
The title is provocative and attention grabbing. -- It's completely fair game to react to the provocation rather than the substance of the article itself. (Or, rather, it's silly to use attention grabbing rhetoric, then complain that people paid attention to the rhetoric).

I'd prefer instead a more balanced title like "Remember to Consider the Costs When Using Package Managers", or whatever.
by sqircles | 2025-09-08 13:46:03+00:00
The state of software companies is pretty terrible. I have been on the acquisition side as well as the development / end-user side and it’s mind-boggling knowing the exorbitant costs with bare minimum value delivered, yet companies just keep paying whatever they’re told it costs, until it’s comically astronomical and the customers have to tell them to get bent. Yet still, software vendors keep changing their licensing structure until it meets that comically astronomical figure and pushing customers away.

Enterprise software licensing, support contracts, and technical account managers (TAMs) often run into hundreds of thousands or millions annually per organization. Yet, in practice, support tickets go unresolved or ignored, even for large clients.

The software quality of our most expensive products is extremely poor and unreliable, almost across the board. Many products suffer from bugs, outdated features, or incompatibility issues that disrupt operations. In development roles, this means wasted time on workarounds, custom patches, or integrations that shouldn't be necessary. For a non-small organization, this scales up to significant productivity losses and hidden costs in overhead.

These companies actively alienate us, the customer, through their business practices. Changes like aggressive licensing shifts (e.g., moving from per-core to per-employee models) force reevaluations and migrations and eroding trust (i.e. Oracle with Java, VMWare fiasco). This isn't isolated—it's a pattern where short-term revenue grabs risk long-term relationships, yet companies seem unfazed.

This jacks the entire ecosystem up. These practices stifle innovation by locking customers into suboptimal tools, increase overall IT spend industry-wide, and contribute to employee burnout in dev and ops teams.

It seems like it’s a race to the bottom. The strategy is to create an ecosystem with high switching costs and vendor lock-in. It just doesn’t seem sustainable, yet- it keeps truckin’ along.
by alphazard | 2025-09-08 13:46:59+00:00
There's a fair bit of semantic quibbling here.

Regardless of how they define these terms, producing a list of hashes which function as a commitment to specific versions of dependencies is a technique essential to modern software development. Whatever the tools are called, and whatever they do, they need to spit out a list of hashes that can be checked into version control.

You could just use git submodules, but in practice there are better user experiences provided by language package managers (`go mod` works great).

A good amount of this ranting can probably be attributed to projects and communities that aren't even playing the list of hashes game. They are resolving or upgrading dependencies in CI or at runtime or something crazy like that.
by em-bee | 2025-09-08 13:47:01+00:00
why not? you can format ads as an entry in the rss feed. in fact it would not even bother me. i could train my rss reader to detect the ad based on keywords and mark it, and even if not, i'd just skip over it manually, mark it as read, and it's gone. as long as the frequency of ads is not to much that is better than an ad on a website that is permanently visible.
by adev_ | 2025-09-08 13:47:05+00:00
The argument here is (in brief) "Package management is hell, package managers are evil. So let's handle the hell manually to feel the pain better".

And honestly speaking: It is plain stupid.

We can all agree that abusing package management with ~10000 of micro packages everywhere like npm/python/ruby does is completely unproductive and brings its own considerable maintenance burden and complexity.

But ignoring the dependency resolution problem entirely by saying "You do not need dependencies" is even dumber.

Not every person is working in an environment where shipping a giant blob executable built out of vendored static dependencies is even possible. This is a privilege of the Gamedev industry has and the author forgets a bit too easily it is domain specific.

Some of us works in environment where the final product is an agglomerate of >100 of components developed by >20 teams around the world. Versioned over ~50 git repositories. Often mixed with some proprietary libraries provided by third-party providers. Gluing, assembling and testing all of that is far beyond the "LOL, just stick to the SDL" mindset proposed here.

Some of us are developing libraries/frameworks that are used embedded in >50 products with other libraries with a hell of multiples combinations of compilers / ABI / platforms. This is not something you want to test nor support without automation.

Some of us have to maintain cathedrals that are constructed over decades of domain specific knowhow (Scientific simulators, solvers, Petrol prospection tools, financial frameworks, ... ) in multiple languages (Fortran, C, C++, Python, Lua, ...) that can not just be re-written in few weeks because "I tell you: dependencies sucks, Bro"

Managing all of that manually is just insane. And generally finishes with an home-made half-baked bunch of scripts that try to badly mimic the behavior of a proper package manager.

So no, there is no replacement for a proper package manager: Instead of hating the tool, just learn to use it.

Package manager are tools, and like every tool, they should be used Wisely and not as a Maslow's Hammer.
by neutrinobro | 2025-09-08 13:47:33+00:00
Yeah, I was equally surprised. I am using a patched version of ollama to run the models: https://github.com/austinksmith/ollama37 which has a trivial change to allow it to run with old versions of cuda (3.5, 3.7). Obviously this was before tensor cores were a thing, so you're not going to be blown away by the performance, but it was cheap. I got 3x k40s for $75 on ebay, they are passively cooled, so they do need to be in a server chassis.
by pjc50 | 2025-09-08 13:47:36+00:00
> "be careful all the time" doesn't scale

Yes, this is the C attitude, where you provide no safety rails or poka-yokes or, indeed, package managers, and therefore you get a lot of fragile reimplementations of package managers (autoconf, anyone?). But you get to keep the satisfaction of blaming the users.

nuget is pretty good. It helps that packages tend to be substantial things, not left-pad.
by cptskippy | 2025-09-08 13:48:01+00:00
I wonder if it's related to the main board... Are you running X or B series chipsets? I've found that less is more when it comes to stability. Vendors always add features to justify the $200-300 price of X series.

I have always run B series because I've never needed the overclocking or additional peripherals. In my server builds I usually disable peripherals in the UEFI like Bluetooth and audio as well.
by codeptualize | 2025-09-08 13:48:04+00:00
I think there are two cases:

1. Self hosting

2. Running locally on device

I have tried both, and find myself not using either.

For both the quality is less than the top performing models in my experience. Part of it is the models, part might be the application layer (chatgpt/claude). It would still work for a lot of use cases, but it certainly limits the possibilities.

The other issue is speed. You can run a lot of things even on fairly basic hardware, but the token speed is not great. Obviously you can get better hardware to mitigate that but then the cost goes up significantly.

For self hosting, you need a certain amount of throughput to make it worth it to have GPU's running. If you have spiky usage you are either paying a bunch for idle GPU's or you have horrible cold start times.

Privacy wise: The business/enterprise TOS's of all big model providers give enough privacy guarantees for all or at least most use cases. You can also get your own OpenAI infra on Azure for example, I assume with enough scale you can get even more customized contracts and data controls.

Conclusion: Quality, speed, price, and you are able to use the hosted versions even in privacy sensitive settings.
by abirch | 2025-09-08 13:48:30+00:00
How do you quantify quality?

"When Betamax was introduced in Japan and the United States in 1975, its Beta I speed of 1.57 inches per second (ips) offered a higher horizontal resolution (approximately 250 lines vs 240 lines horizontal NTSC), lower video noise, and less luma/chroma crosstalk than VHS, and was later marketed as providing pictures superior to VHS's playback. However, the introduction of Beta II speed, 0.79 ips (two-hour mode), to compete with VHS's two-hour Standard Play mode (1.31 ips) reduced Betamax's horizontal resolution to 240 lines.[7]" https://en.wikipedia.org/wiki/Videotape_format_war#Picture_q...
by jerf | 2025-09-08 13:48:49+00:00
Honestly I think that was a stretch all along. It is conceivable that two views could present a similar enough interface that the same controller could drive them, e.g., an isometric and an orthographic view on to the same object might be able to be driven by the same controller, which, recall, is doing things like propagating changes between the two views, not just "driving" them directly, so if the view is controlling the coordinate mapping you might be able to use the same controller for both. In practice I suspect things end up 1-to-1 on the View and the Controller fairly often, although in an inheritance-based system there's probably some useful shared functionality in superclasses within a given system that could arguably fuzz whether or not it is "truly" 1-to-1.

In practice most "MVC" in the wild in things like web frameworks where it is just completely inappropriate is actually "M and everything else"; there's a clear Model, and then a whole bunch of code that uses models and changes models but that is not usefully modeled by a "View" and "Controller" distinction. MVC is completely missing a client-server concept as well, and it really shows. And while I will absolutely say that that design is not only not "true" MVC but isn't meaningfully "MVC" at all, what it actually is is not so bad. "Models" have great utility in many places, indeed is arguably one of the fundamental tools of programming, but "VC" is something that can be applied to them in certain circumstances but don't otherwise have any particular special relationship to "Models" such that where ever a model goes some Views and Controllers must be tagging along. Models are everywhere, MVC is a useful concept in certain domains where the requirements drive in that direction super, super hard (and web frameworks are not one of them).
by zahlman | 2025-09-08 13:49:19+00:00
I mostly agree, but

> Some of us works in environment where the final product is an agglomerate of >100 of components developed by >20 teams around the world. Versioned over ~50 git repositories. Often mixed with some proprietary libraries provided by third-party providers. Gluing, assembling and testing all of that is far beyond the "LOL, just stick to the SDL" mindset proposed here.

Does this somehow prevent you from vendoring everything?
by andsoitis | 2025-09-08 13:49:35+00:00
> At her home in western Germany, a woman told a team of visiting researchers from Meta that she did not allow her sons to interact with strangers on the social media giant’s virtual reality headsets. Then her teenage son interjected, according to two of the researchers: He frequently encountered strangers, and adults had sexually propositioned his little brother, who was younger than 10, numerous times.

It seems to me possible solutions could be a mix of:

a) company monitors all conversations (privacy tradeoff)

b) validates age

c) product not available to kids

d) product available to kids, leave up to parents to monitor