MurphyA/hacker-news huggingface dataset:
by sugarpimpdorsey | 2025-09-18 20:39:44+00:00
Maybe stop using Macs as multiuser servers?

Unavailability of FileVault-mounted home directories when not logged in has been the case since Tiger.

I'm curious - if the OpenSSH config files are not available - how do they start sshd? If the system keys are encrypted, how do they accept connections?

There's a surprising lack of detail here.
by alephnerd | 2025-09-18 20:40:01+00:00
The Biden admin worked on this as part of the IRA and CHIPS, and a lot of bilateral treaties with Japan, Australia, South Korea, UAE, and India but now it's up in the air.

The Chinese government even attempted to lead a spamoflauge campaign against North American REE projects initiated by the Biden admin [0]

[0] - https://cloud.google.com/blog/topics/threat-intelligence/dra...
by WorldMaker | 2025-09-18 20:40:08+00:00
Zod is great, but it's a giant monster of Typescript meta-typing on your behalf. Some of it is using that "scary" Turing completeness, even, of Typescript's type system.

It is nice in providing extra runtime validation that tests compiler assumptions, but it is adding complexity to do it, not removing it.

Also that "Friendly Function" is about returning Sum Type. `ValidationError | int` in the example's case. It isn't saving you from a type system that understands Algebraic Types, it is absolutely relying on it (if you want compile time type safety). Also, it's only about a step or two removed from (re-)discovering the next step which is the Either<Left, Right> monad. You just need a "bind operator" to make those "Friendly Functions" easier to pipeline together and you will be off to the monad races.
by h8tml | 2025-09-18 20:40:38+00:00
The full etching was ""Hey fascist! Catch! ^ > vvv" (an up arrow, a right arrow, and three down arrows). This is a Helldivers 2 input for calling in an "Eagle 500kg Bomb."

The plain evidence is that each etching is a reference to an extremely online/gamer meme, not leftist slogans.
Show HN: We made people in the cloud with phone and email to do your work
by notanaiagent | 2025-09-18 20:40:39+00:00
TLDR: It’s like giving Samantha from “Her” a phone number, email address, a few of your accounts and a few sub-agents to do real work.

Hi HN! We are Joseph and Julius, and we built personalized remote coworkers in the cloud. We call these remote coworkers “Personas” and we give each one a name, email address and phone number. Today, we’re launching Personas with “skills” for reminders, scheduling and email management tasks (as seen on our home page), and our goal is to add at least one new skill every week. We’re curious to hear what you all want to use Personas for so please email us your thoughts at founders - at - withtime.ai.

Backstory:

We were both convinced the chatbot experience was stale and repetitive and decided it was time to design an AI system that fit our existing workflow. Most of the context for how real tasks should be done lives within our human-to-human interactions (irl or online), and chatbots are completely walled off from that. And so you end up retyping everything or copy-pasting notes from calls.

We built the “Persona” because we wanted an AI one could simply “cc” on emails, call in the morning for updates and (soon) add to Zoom calls. Then, when one wants some work done, the context is already there.

How it works:

When you sign up, you choose a name and profile pic for your Persona. It’s granted an email address and a phone number. Behind the scenes, we hydrate its brain – a knowledge-graph meets social-graph meets vector-database – to store information about people, files, messages, calls and more. As the world interacts with your Persona, it adds to this novel memory system so that when it’s time to do a task, it reflexively pulls the needed context instead of asking you for it again… every time.

How is this different from other AI Executive Assistants?

The other AI “Executive Assistants” are a single AI Agent (i.e. system prompt + LLM + a few tools) responding to texts or emails one at a time - often re-using the same phone number or email address across all users. Most don’t have a deep memory and require the user to predefine the user’s preferences in a system prompt or a classic system settings menu.

By contrast, Personas have a consistent, long-running life, and learn exclusively from interacting with humans over emails, texts, and phone calls - they don’t have a traditional context-dump system prompt – instead learning preferences “on the job.” On top of that, the unique phone number and email address per assistant enables something pretty exciting - imagine your Persona calling or emailing other people to complete your todos.

Who are we?

We met freshman year on the Stanford rowing team (‘20) and have been friends ever since. We are based out of Palo Alto, raised some money and are actively hiring – reach out at founders - at - withtime.ai if you’re interested in learning more.
by matheusmoreira | 2025-09-18 20:40:55+00:00
Let them maintain it. We can take their permissive code and add it to our AGPLv3 projects literally no questions asked, we just have to replicate the copyright notice and license file. Meanwhile they can't take our copyleft code without also copylefting any improvements they distribute. And with AGPLv3, network use is distribution.
by MisterTea | 2025-09-18 20:41:01+00:00
That is a whataboutism.

This isn't about China or the size of the lake, but the fact that there is a lake because the effluent is difficult to dispose of and currently has no use.

Edit: to further clarify, I am not against refining them in the USA. Just that we have to also address the consequences of doing so.
by KaiserPro | 2025-09-18 20:41:13+00:00
if you're storing the blocks in one place, its not decentralised.

The metadata would be crucial for performance, and given that I assume you'll want a full chain of history for every file, your metadata table will get progressively bigger every time you do any kind of metadata operation.

Plus you can only have one person write metadata at one time, so you're gonna get huge top of line blocking.
by npteljes | 2025-09-18 20:42:18+00:00
>there's no sense of "people won't like this, they will associate our products with obtrusive ads".

One, I don't think people mind it too much. By too much, I mean two things: actually stating that they don't give a damn (even though they are just as susceptible), or grumbling about ads, but still doing nothing against them.

Two, price is everything. People put up with ads ever for a pittance. They listen to an ad every 15 minutes for hours a day, just to not pay $5 for the ad-free tier. That is how low this barrier is.

So ads not not much a problem PR-wise. You'd think, you'd hope, but it isn't.
by srcreigh | 2025-09-18 20:42:50+00:00
I tried both. Signoz is pretty sloppily built. For ex the self hosted option starts a ZK instance with 1 clickhouse host-no way to disable, 800MB ram. Signoz log transformation tool is broken and confusing.

HyperDX is just a lot better, sure a few papercuts but they got all the important stuff right imo.
by johnea | 2025-09-18 20:43:08+00:00
Look, I'm a lefty. I support people's right to express themselves however they feel compelled to do so.

But... We are a primate species, we propagate our species through sexual reproduction. This reproduction involves one of each of the two dominant sexual expressions of our anatomies. These two members of a sexually reproducing pair cannot be self identified, they must be one biologically male and one biologically female participant.

So in a traditional use of the words male and female, these are the conditions that are being referred to.

This is 100% separate and orthogonal to any individual's perception of themselves, and how they would prefer to be perceived and treated by society.

This is not specifically the topic of the article, but the article seems to be issued in support of an argument that a human individual is free to state their biological sex, which is factually not true.

Trying to apply the terms male and female to individual organs is a stretch of the colloquial use of those words, and serves to inflame colloquial debate on a topic that is fully a distraction from fighting for every individual's right to express themselves however they see fit.

Let's please stop being drug into culture war hot button confrontations over issues that are fully established fact, like sexual reproduction of a mammalian species.

This fully established scientific fact in no way jeopardizes any individual's freedom to express themselves and their sexuality in society, and fighting against established fact just serves to undermine the social effort to secure those rights.
by non_aligned | 2025-09-18 20:43:10+00:00
> I think using GenAI for learning is cool and exciting (especially for autodidacts)

I don't know. I've been trying, but I think there are two fundamental issues. First, I don't think it's all that useful for "out-of-order" learning and for explaining concepts in non-conventional ways.

To give you a practical example, there's a certain order in which we teach math, and every subsequent step builds on the previous one. But quite often, this order is just a matter of convention, not necessity. You can explain a ton of higher-math concepts in terms of high-school algebra and geometry, it's just not something we do because we don't intend to teach high-schoolers any of that, and for undergrads, it's more expedient to lean on their knowledge of calculus / mathematical analysis than to start by drawing triangles.

And not once have I succeeded in convincing an LLM to circumvent that. If a topic is explained using mathematical analysis in college textbooks, this is how it will always answer. Which actually sucks for that curious high-schooler.

But second, LLMs just aren't nearly as dependable as textbooks. It's not even the base error rate - I think they're 90%+ accurate on most run-of-the-mill scientific questions - but that once they make a confidently-sounding mistake and you try to drill down, they keep digging that hole and sending you more and more off track. It's amusing if you know the domain and can spot mistakes. It's a huge waste of time when trying to learn a new field.

It's precisely why vibe-coding is more useful to experienced developers who can immediately reject bad results.
by ahartmetz | 2025-09-18 20:43:57+00:00
As a developer who has worked on similar things, that interface can prevent a lot of trouble of the kind "What if the user edits a setting that updates something in another part of settings, which might also be open at the same time?" - or even the same settings screen opened multiple times. It is rare that such cases come up for users, but they can be very annoying and time-consuming to deal with. Perhaps that was the motivation.
by dang | 2025-09-18 20:44:07+00:00
That looks interesting! I put your Show HN (https://news.ycombinator.com/item?id=45212535) in the second-chance pool (https://news.ycombinator.com/pool, explained at https://news.ycombinator.com/item?id=26998308), so it will get a random placement on HN's front page.
by maxwell | 2025-09-18 20:44:15+00:00
Yeah CS2 was the peak to me, I started using it again maybe a year ago instead of their recent slop. Works even better with modern processors, back in the mid '00s it seemed to lag on everything but the first Mac Pro. And Adobe publicly published serial numbers when they shut down the activation servers, if you can get your hands on a copy of the install discs.
by soganess | 2025-09-18 20:44:17+00:00
This is a false statement; nothing communicated is remotely accurate. Just your classic false equivocation + whataboutism two-step used to enable the machinery that chews all that is good about the united states.

I can't speak for anyone but myself, but in my book, you are forgive for your lack of sympathy. But not the spreading of this sort of false information. You may only use it as an excuse for apathy, but you are not a power broker. What the Brenden Carrs of the gov't do with it (ex. "even apathetic folks like oxy are saying... we can push it harder") does matter.
by philipkglass | 2025-09-18 20:44:43+00:00
The US can and does produce rare earth elements:

https://en.wikipedia.org/wiki/Mountain_Pass_Rare_Earth_Mine

The Mountain Pass Rare Earth Mine and Processing Facility, owned by MP Materials, is an open-pit mine of rare-earth elements on the south flank of the Clark Mountain Range in California, 53 miles (85 km) southwest of Las Vegas, Nevada. In 2020 the mine supplied 15.8% of the world's rare-earth production. It is the only rare-earth mining and processing facility in the United States. It is the largest single known deposit of such minerals.

Look at the history section to see how this mine initially dominated rare earth element production, then shut down due to low price competition, then reopened, then shut down due to low prices, then reopened.

The total addressable market for rare earth elements is small in dollar and tonnage terms, but opening mines and processing plants is expensive. One big new mine could tank the global market price.

The US used to maintain large stockpiles of many mineral resources for defense purposes, but mostly stopped in the 1990s after the end of the Cold War. The pendulum may be swinging the other way now. The Mountain Pass mine received DoD grants in 2022 and 2023 to support continued operation, regardless of open market prices.
by bmacho | 2025-09-18 20:44:57+00:00
> The best art should reveal itself to you over years, as you change as a human, and your sense of yourself - and the world you live in - changes.

Or: a single book that you enjoy different parts of it depending on your life situation is not better at all than if it were several different books instead, one for each life situation. A book for all ages is no better than a kid + an adult book. Maybe in a practical standpoint.
by mattmanser | 2025-09-18 20:45:35+00:00
I'm really not. Most of the code I have worked on in my career was hodge podge code, or written by ridiculously unqualified programmers. Sometimes it has been 10-15 years old. At one place the external agency who'd written one of the systems were so bad that they had a project per class. One project, one class file. And no-one had noticed in 5 years, they just thought it was somehow necessary!

Part of what makes my clients happy is that I deliver changes and new features consistently. What I don't always tell them is that after my first 3 months I will start ripping out huge swathes of their old code and replacing it with 1/10th the amount of code that was there. Sometimes I do, depends on the client.

The recent codebase I worked on was using what I consider one of the worst patterns I've ever seen, CSLA. Everything used it. Absurdly hard to work with, practically designed to be inscrutable. It was also littered with static methods everywhere, impossible to use DI with. The gig before that some prat had used the mediator pattern for simple CRUD forms.

2 years later and there's not a single CSLA pattern left and only a few static methods in 'critical' code paths that I haven't got round to extricating. We can use modern libraries, everything is DI, and have switched from framework 4.7 to Core .Net 8.

In the past I've migrated webforms to MVC, migrated from one database system to a different (surprisingly easy) and switched whole front-end frameworks.

It is a serious effort to fix architectural problems. But you turn it in a manageable effort by chipping away at it. By starting on one system and spreading.

That webforms to MVC? It started with one MVC endpoint for a new backend admin feature. Non-critical, but can I run an MVC project inside a webforms project. As soon as I could run the two side-by-side every new feature was an excuse to migrate a page to MVC, it didn't add much time. A year later, bye-bye webforms. Hello, development velocity.

Lots of programmers will not even attempt to fix architectural rot and just wallow in it.

I have advantages, often I'm a team of one, or two, or three and can bully my way through middle management to change. Yes. Weird career. I'm not going to lie, every now and then I'm 80% through a refactor with a deadline looming and I hate myself and despair. But it usually works out.

But you sound so resigned? If you were in my position, would you listen to my opinion about SOLID if I'd just admitted I was wallowing in the rot? You don't sound like a top tier programmer.

Try fixing it! That's how you learn what actually works in architecture. That's when you can start having an opinion about architecture.
by dlcarrier | 2025-09-18 20:45:41+00:00
Check out the the Bouffalo Labs BL808 or Sophon SG2000 series. They are a system-in-package products that contain a RISC-V CPU, RAM and flash memory all in a few mm square package, for a few dollars. Pine64 and Milk-V both have breakout boards for under $10.

They only have RAM and flash in the hundreds of megabytes, not gigabytes, but they can run full Linux and are as capable as many household Wi-Fi routers. They include USB, Bluetooth, Wi-Fi, and wired Ethernet ports, and even have MIPI CSI and DSI interfaces for cameras and displays.
by benstigsen | 2025-09-18 20:45:46+00:00
I can recommend that people check out Lune [1], it's a Luau runtime which includes a small but nice standard library. It's very easy to create something like a webserver in it. [2]

[1]: https://lune-org.github.io/docs/

[2]: https://lune-org.github.io/docs/the-book/5-networking/#runni...
by hamdingers | 2025-09-18 20:46:01+00:00
The docker quickstart asks me to mount the docker socket, an incredibly dangerous act that fundamentally breaks the isolation that containers are supposed to provide. I see no attempt to explain why this level of access is necessary.

I can guess why you think you need it, but whatever the reason it's not good enough. If you need job workers or some other kind of container, tell me how to run those with docker compose.
by ben7799 | 2025-09-18 20:46:18+00:00
People will grumble switching from Slack to Teams but it won't actually mess up the business.

Our business unit within a large public company was using it and we were spun off, Slack was going to be $1M/yr and the CFO/Execs definitely weren't going to pay that.

We are fine on teams, but there was a lot of wailing and gnashing. We had tons of slack customizations, automation, integrations, etc..
by intended | 2025-09-18 20:46:35+00:00
Oh boy isn’t this the truth.

Firstly - Hah! this is the easier situation! This is Americans talking about reaching out to Americans. It’s even more fun when you are in another country, and need to go through your network to get attention to an issue.

Secondly - Everyone I know, who is in a T&S team or does content moderation hates this situation, and is glad that this is being highlighted. it’s considered unfair and absurd. Getting recourse because people know someone who know someone to get it to the right team, is NOT how things should work. Let alone at global levels.

I can give maybe a smaller firm or platform a pass. But at FAANG scales? Cmon.

——

This is also a reason why I think that Reddit dug its own grave, back when it found the testicular fortitude to oust moderators during the API black outs.

If a firm has the willingness to remove mods and craft new philosophies of engagement when the bottom line at risk - does it magically lose that capability during the remainder of the financial year?
by nitwit005 | 2025-09-18 20:47:22+00:00
> Psychologically, we tend to view things nearer the top as ‘good’ and those lower as ‘bad.’

Yea, sure. That's why we all try to vacation in a "tropical paradise", which tend to be in the middle of the map.

People are dumb, really dumb even, but even a two year old is going to realize vertical map position doesn't equate to "good".
Show HN: Distributed Rate Limiter – 50K+ RPS, Redis-Backed, Production-Ready
by uppnrise | 2025-09-18 20:48:07+00:00
Hi HN! I built a distributed rate limiter using the token bucket algorithm with Redis backing.

Key highlights: • 50,000+ requests/second throughput with <2ms P95 latency • Redis-backed distributed state for multi-instance deployments • 18 REST API endpoints for rate limiting, config, and monitoring • 265+ tests including load tests and integration tests • Docker/Kubernetes ready with comprehensive documentation

Built with Java 21 + Spring Boot. Perfect for protecting APIs, microservices, or SaaS platforms from abuse.

The pain point I solved: existing solutions were either too simple (in-memory only) or too complex (enterprise-only). This fills the gap with a production-ready, easy-to-deploy solution.

Try it: Download the JAR, start Redis, and you're rate limiting in 30 seconds.

Would love feedback on the API design and performance characteristics!

GitHub: https://github.com/uppnrise/distributed-rate-limiter
by pogue | 2025-09-18 20:48:10+00:00
Unrelated to reproductive rights, but my private Instagram account got suspended for community guidelines violations out of the blue & I lost all access to my old photos, my friends, contacts, years of DMs. I don't have the slightest idea what triggered it (and of course they won't tell you), nor is there apparently any way I'm aware of to appeal. Interestingly, I still have access to meta[.]ai for whatever reason, so I'm wondering if there is some way to talk to it to get out of InstaJail, or finding a prompt to get it to give you more info on who to contact or ANYTHING at all.

However, after hunting around on reddit for solutions, I was quickly made aware of underground groups of individuals (hackers? I'm not sure what you'd call them) who offer account recovery for up to 1 to 2 grand per instance. These aren't just the people who send you phishing messages claiming to get your account back, but offer full services such as promotion, getting unbanned, having other users banned and etc.

We've seen news reports in the past where individuals or groups get backend access into Meta and then offer these sorts of features. [1]

But who else has access to these sorts of tools & features? I wouldn't be surprised at all if Meta moderators or employees are making a very nice side hustle for themselves doing this, as they'd have not only the access, but presumably know how to hide their tracks.

Just a theory. Anyway, if anyone has any ideas on getting an Instagram account back or filing an appeal or whatever, any info would be appreciated.

[1] https://www.theglobeandmail.com/canada/article-instagram-fac...
by supportengineer | 2025-09-18 20:48:12+00:00
Whenever I have time, I could always re-read a favorite book.

Who doesn't love re-reading Snow Crash

Will you ever forget the way you felt the first time you read this?

"As part of Mr. Lee's good neighbor policy, all Rat Things are programmed never to break the sound barrier in a populated area. But Fido's in too much of a hurry to worry about the good neighbor policy.

Jack the sound barrier.

Bring the noise."