MurphyA/hacker-news huggingface dataset:
by ah1508 | 2025-09-08 11:10:31+00:00
You're right, we can get rid of the proxy. If the multiple API calls are made from the browser it is even more traceable, user can see these requests in the source code and from the devtools network console.

Each API has its database which contains the accesskey for each user, if this data is stolen the attacker can send HTTP POST requests to API with valid access key. To reject these forged request a code can be sent to the user in the invitation message while each database has a bcrypt hash of the code along the access key. When an API receives a POST requests it can check if the code present in the request body matches with the hash he has in its database. So having the access key is not enough to send request, someone who steal a db cannot do anything with the data and cannot propagate false data to other APIs.
by mythz | 2025-09-08 11:10:43+00:00
Also less power efficient, takes up more PCI slots and a lot of software doesn't support GPU clustering. Already have 4x 16GB GPUs which is unable to run large models exceeding 16GB.

Currently running them different VMs to be able to make full use of them, used to have them running in different docker containers however OOM Exceptions would frequently bring down the whole server, which running in VMs helped resolve.
by sgsjchs | 2025-09-08 11:11:10+00:00
> Again, I don't see what this has to do with destructive moves. If you want a socket class that always refer to an open socket, you can already do that.

Technically you can, but it's unreasonable to create an os-level socket just to put into the moved-out object where it will be immediately destroyed again. This is not an issue when the moves are destructive.

> How is this supposed to work? The very point of your socket class is that it always contains a valid socket handle. Once you introduce a sentinel value, you are back to square one. If the optional class is able to construct a socket with the sentinel value, so is the user.

That's not true. The sentinel value need not be exposed in the public interface of the class, it can only be accessible via the customization point of the optional.
by CharlieDigital | 2025-09-08 11:12:25+00:00
Many years ago in my software engineering course, my professor said that he would add to Fred Brooks' concept of a "surgical team" and said that he found that many successful engineering teams had a "team mother": the person that helped quell disagreements, remembered birthdays, cheered the successes no matter how small, kept tabs on how folks were doing emotionally, etc. Years later in my professional career, I found this to be true and met a few people like this on my teams -- not the best engineers, but additive to a great team.

I think that successful teams may have a place for a "team canary" (?): someone that is going to speak up about points of friction where most others might just end up with apathy and learn to deal with the inefficiency or friction (a "that's just how it is" attitude). Sometimes, complaints are a sign of genuine friction. Complainer may not feel like they have the authority/allotted bandwidth to remove the point of friction. When this happens, give this person some ownership of the friction points and see what happens.
by iainmerrick | 2025-09-08 11:12:28+00:00
This is the flip side of "I’ve never understood why people care so much about the linter"!

Why are you caring about formatting? Just write your code, get it working, let Black tidy it up in the standard way. Don't worry about the formatting.

In cases where you're annoyed about some choice the formatter makes, somebody else would be equally annoyed by the choice you would rather make. There is no perfect solution. The whole point is to have a reasonable, plausible default, and to automate it so that nobody has to spend any time thinking about it whatsoever.

Running a standard formatter when code is checked in minimizes the source control churn due to re-formatting. That churn is a pointless waste of time. If you don't run a standard formatter, I guarantee that badly-formatted code will make it into source control, and that's annoying.
by swores | 2025-09-08 11:13:21+00:00
To me that seems as pointless as saying "everything a person sees is a hallucination, it's just some of those hallucinations are true". Sure, technically whenever we see anything it's actually our brain interpreting how light bounces off stuff and combining that with the mental models we have of the world to produce an image in our mind of what we're looking at... but if we start calling everything we see a hallucination, there's no longer any purpose in having that word.

So instead of being that pedantic, we decided that "hallucination" only applies to when what our brain thinks we see does not match reality, so now hallucination is actually a useful word to use. Equally with LLMs, when people talk about hallucinations part of the definition includes that the output be incorrect in some way. If you just go with your quote's way of thinking about it, then once again the word loses all purpose and we can just scrap it since it now means exactly the same thing as "all LLM output".
by ajsnigrutin | 2025-09-08 11:13:58+00:00
A repair worker can install software on it without replacing the sensor. Also add a tiny mic without installing the software. Or both.

I mean.. someone could replace your cars breakpads with pieces of wood or plastic, which would seemingly brake on the repair shop parking lot but fail horribly (burn and worse) when you needed them after. Somehow we still let people replace brake pads without having to program in the serial numbers.. for now.
by codeulike | 2025-09-08 11:14:21+00:00
Why haven't we collectively emphasized the creation of new tools to reduce boilerplate and grunt work?

You dont understand how things evolve.

There have been plenty of platforms that got rid of boilerplate - e.g. ruby on rails about 20 years ago

But once they become the mainstream, people can get a competitive edge by re-adding loads of complexity and boilerplate again. E.g. complex front end frameworks like react.

If you want your startup to look good you've got to use the latest trendy front end thingummy

Also to be fair, its not just fashion. Features that would have been advanced 20 years ago become taken for granted as time goes on, hence we are always working at the current limit of complexity (and thats why we're always overrun with bugs and always coming up with new platforms to solve all the problems and get rid of all thr boilerplate so that we can invent new boilerplate)
by bobosha | 2025-09-08 11:14:24+00:00
I largely share Yann LeCun’s perspective that scaling LLM-based approaches will eventually hit a plateau, and that a paradigm shift will be necessary. While there is ongoing debate about what that next paradigm should be, I outline my own views on the subject in this paper [1].

[1] https://www.researchgate.net/publication/381009719_Hydra_Enh...
by haspok | 2025-09-08 11:16:01+00:00
> It's a kind of a coding competition, indeed.

This is referring to demo parties specifically. Let's not forget the social aspects of them though. Yes, a selected few went to parties to "compete" in their chosen art, some might have even taken them quite seriously. But they were the minority.

The bulk of the attendees just went for fun and company, and did not create anything. Demoparties _were indeed_ parties back in the 90s, with people playing games, drinking and socializing in general. You could argue these were like rave parties, only a bit quieter and much friendlier / inclusive (ok, maybe I am biased, but it certainly felt that way).

It was lacking in one aspect though - not many girls attended, and so as time passed these parties were becoming less attractive. But that did not stop anyone going home and downloading and admiring the products of demosceners, who did all this basically in their free time, for not much (if at all) compensation.
by bob1029 | 2025-09-08 11:16:07+00:00
You still see little islands of high trust in the US. I walked out of an HEB the other day and there were several pickup trucks idling in the parking lot with nobody inside of them. You could open the door and drive off with zero effort if you could find the insanity to do so. I often dont bother to lock my doors at home. The Walmart here doesn't hassle you upon exiting. The local community feels incredibly safe. Drive 20 miles south and you'll find a totally different universe.
by mritchie712 | 2025-09-08 11:16:13+00:00
I was curious how much revenue a podcast I listen to makes. The podcast was started by two local comedians from Phoenix, AZ. They had no following when they started and were both in their late 30's. The odds were stacked against them, but they rank pretty high now on the the Apple charts now.

I looked into years ago and couldn't find a satisfying answer, but GPT-5 went off, did an "unreasonable" amount of research, cross referenced sources and provided an incredibly detailed answer and a believable range.
by Cthulhu_ | 2025-09-08 11:16:17+00:00
ESLint is the centralized idea I suppose, but getting consensus is difficult.

When it comes to formatting, there's other languages (Go, Python?) that have clear, top-down guidelines applied by tooling, at least for code style. I think that's clever, and besides the odd mailing list post trying to change it because of a personal preference, it minimizes discussions about trivialities over the really important things.

Because 2 vs 4 spaces or line length discussions are ultimately futile; those aren't features, individual preferences don't matter. Codebases have millions of lines and thousands of developers; individual opinions do not matter at scale, consistency does.
by jason-johnson | 2025-09-08 11:17:29+00:00
This, for me, is the actual gain and I don't see a lot of people talking about it: it's not that I finish a project faster the LLMs. From what I've read and personally experienced, it probably takes about as long to complete a project with or without the LLMs. But the difference is, without it I spend all that time deeply engaged, unable to do anything else. With the LLMs I no longer require continuous focus. It may be the same wall-clock time but my own mental capacity is not being used at or near capacity.
by osullip | 2025-09-08 11:17:57+00:00
https://instant.page/ does this via user intent/interactions and pre-fetches the next page.

"Another option is to load the pages when the user starts pressing their mouse without preloading. This makes for zero unused requests while still improving page loads by 80 ms on average."

That's the way I would go. Fast, but not wasteful.
by unleaded | 2025-09-08 11:19:03+00:00
In my experience the old computer nerd communities don't do much to help get young people that would be interested into it. A lot of the discussion online mainly just consists of reminiscing about how amazing the '80s were.

Documentation is also in something of a state—the big video game consoles (NES, SNES, Genesis..) all have plenty of free, modern high quality guides teaching you how to program them from nothing, understand all the hardware, etc.. then look at the '80s computers (*especially* the Amiga) and it seems to mainly be scattered around old book scans and wiki articles assuming varying levels of pre-existing knowledge of the hardware. Strangely enough a lot of the best documentation seems to be from YouTube tutorials (I guess because you can see what they're actually doing). It sounds wrong to call it "stuck in the past" but I guess that would be the best way to describe it.

This isn't really about the scene specifically but it's somewhat related at least.
by vbezhenar | 2025-09-08 11:20:40+00:00
Copying GC also have to cooperate with this SecureString feature, so you won't accidentally keep hanging secret in heap dump. Old Java API has the tendency to use `char[]` for secrets. You can zero it after use, so old reference will not contain useful data, but you can't protect it from copying GC, so it might still gets leaked in raw heap dump, even after zeroing it out.
The Dropshipping Problem: Youth Digital Marketing Gone Wrong
by haebom | 2025-09-08 11:20:42+00:00
I've been observing a concerning trend where dropshipping has become increasingly popular among teenagers, often promoted through excessive affiliate marketing and influencer campaigns. The pattern seems to be that a few highly publicized success stories are driving masses of young people to attempt similar ventures, with some cases escalating into what could be classified as digital fraud or deceptive practices. This raises several questions that I think are relevant to this community. Who are the key players driving this dropshipping trend among youth? Are there specific platforms, influencers, or course sellers that are particularly responsible for this surge? What makes teenagers particularly vulnerable to these marketing tactics - is it the accessibility of e-commerce platforms, social media algorithms, or something else? From a technical perspective, I'm curious what safeguards platforms could implement to prevent minors from engaging in potentially harmful business practices. The intersection of youth marketing, e-commerce platforms, and digital literacy seems like a significant issue that deserves attention. Has anyone else observed similar patterns, and what solutions might be viable from both technical and policy perspectives?
by charcircuit | 2025-09-08 11:21:09+00:00
Thank you for doing the work of finding sources, but I think you missed the overall point. None of your quotes are about masculinity and were about children clothing choices.

>claim that blue was an unpopular color for girls and pink was an unpopular color for boys around 1900

I did not claim this, and it is besides the point being made here either be you or your parent so I'm not going to take time to do so for the claim I did make in the relative popularity of clothing colors for male children. Continuing to drill down on this will take us further off topic.
by DonHopkins | 2025-09-08 11:21:24+00:00
Sketchnote Bold is the new Comic Sans!

(Not complaining, just observing. I shipped a top selling title that used Comic Sans exclusively!)

https://www.mcsweeneys.net/articles/im-comic-sans-asshole

https://news.ycombinator.com/item?id=11466122
by mapt | 2025-09-08 11:21:41+00:00
Big box retail here.

One of my line managers described the corporate management style as "Asking for an unreasonably excessive goal in order to motivate people to work towards a reasonable outcome".

That, and the CYA safety stuff, which corporate orders us to follow but does not in all cases actually expect us to follow; If they did they would have taken their regulations written in blood and asked somebody "How many more people do we need to hire to implement this?" So the management that needs to actually deliver on hard, visible cleanliness & sale-related metrics relaxes enforcement until barely anybody actually knows that the policy exists. Part of their job is to be ritually fired when that goes wrong.
by jason-johnson | 2025-09-08 11:23:07+00:00
As sad as it makes some version of me to say, the majority of code that gets written every day doesn't need to be good code. I am doing a pet side project right now, completely with copilot. I haven't written a line of code, documentation or anything else. The code is pretty poor but I don't care because I just need it to take a specific input and produce a specific output and I only need this to happen once and then I'll throw the whole thing away. As I mentioned elsewhere: this didn't get me the result faster than I could have done by hand, but it did let me not spend the entire time in deep focus trying to write all this.
by johnisgood | 2025-09-08 11:23:11+00:00
I think you can do this already. If you do not know the underlying concepts, or have no idea about how you have to architecture your project and so forth, then you will have problems with LLMs. So I think many if not most people who have problems with LLMs, it is most likely due to their lack of knowledge and/or their expectation that you can just simply write two sentences and it will figure out what you want and how you want it.

You cannot outsource thinking to LLMs, at least not yet, if ever. You have to be part of the whole process. You need to have knowledge. If you have no idea what it is doing or what you want it to do, you are going to have a difficult time.
by Cthulhu_ | 2025-09-08 11:24:14+00:00
Unproductive complaints are... frustrating if you're on the receiving end of them, because they are basically (and unproductively) asking for help / solutions. But if it's just complaints, they also have the impression that the problem is not in their "sphere of influence"; coffee, for example, is usually handled by a facilities department. It's easy to complain about coffee to your boss, but it's confrontational if you actually pull the issue into your sphere of influence and go to the facilities department to complain.

It opens you up to vulnerability. You speak to people you don't usually speak to; you get confronted with the realities of that particular issue; office coffee for example is often a factor of budget vs cost, long-term supply and support contracts with coffee machine companies, and of course personal taste. Are you going to take on some responsibility for all that?

Of course, the other part is that you get hired for one job, stepping outside of that role to pursue something not directly impacting said job is often frowned upon. I say often because it's a bit of both, the best people will take on more and different things than what they were hired for.

Anyway. Complainers can / should get a training about "circle of influence/control", also because I doubt that work stuff is the only thing going on in their life, it can help them outside of work too. Knowing what you can change and what is outside of your control is great for your peace of mind and general attitude.
Ask HN: Would Windows users want a native multi-model AI client?
by 120-dev | 2025-09-08 11:24:32+00:00
Hi everyone,

I’m the developer of 120 AI Chat that lets people:

Chat with multiple AI models (ChatGPT 5, Claude 4.1, xAI, Swiss AI, local LLMs via Ollama)

Run multi-threaded conversations and compare answers side by side

Generate images with models like Gemini Flash 2.5 Image, GPT Image 1, Grok Image 2, Stable Diffusion, and FLUX 1 (via Hugging Face)

Use reasoning models for deeper problem solving

Connect to Hugging Face or OpenRouter for more models

Developer-friendly interface with code themes and syntax highlighting

Keep your conversations private with local storage

File attachments in chats (PDFs, images)

I’m now working on a Windows version and would love to hear if this is something you’d find useful.

I share a short demo video (macOS version) above, and I’d be happy to give out free licenses to early Windows testers in exchange for honest feedback.

Would a native Windows client (not Electron wrapper) for this be helpful in your workflow, or are web apps and Copilot enough?

Thanks in advance for your thoughts!
by maratc | 2025-09-08 11:24:40+00:00
I may be unusual in a way I treat my profession and care about my professional output (the code I write), and I take both very seriously.

There's a quote from Steve Jobs (or maybe his carpenter father):

“When you’re a carpenter making a beautiful chest of drawers, you’re not going to use a piece of plywood on the back, even though it faces the wall and nobody will ever see it. You’ll know it’s there, so you’re going to use a beautiful piece of wood on the back. For you to sleep well at night, the aesthetic, the quality, has to be carried all the way through.”

When you say "Don't worry about the formatting", what you're saying is "use a piece of plywood on the back," and I'm just not going to do that.
by galangalalgol | 2025-09-08 11:25:13+00:00
A coworker found a stack use after free in production that no amount of linters or tidyers caught. It only actually happened in the release build, and asan caught it, but only when we pushed to 100% branch coverage instead of just line coverage. Rust makes coverage much easier to get with fewer tests due to it's type system. It seems really clear to me that rust will be the c++ successor. If you need that extra flexibility, you use unsafe. That still feels less foot gun ridden than c++. The slow adoption of rust is because c++ interoperability is bad and people are stuck maintaining c++ behemoths. Green field rust adoption in c++ domains is much higher. Zig is more of a c replacement, but as much as I like it, I don't think that will happen. C is like a standardized ir. But when sonos wanted to make an arm cpu only onnx inference engine for instance, they made it in rust (tract). When c++ developers get to choose rust, we often do. I can throw earlier career c++ devs with modern c++ experience directly into a rust codebase and have them be immediately productive, but also not worry about them doing horrible things.
by Alifatisk | 2025-09-08 11:25:17+00:00
I usually can't read blog posts, they are stale, boring and can't keep my attention span unless I know there is something interesting the paragraph, this is regardless of the interesting title. But when it comes to Simon willisons blog, I enjoy reading it, it's entertaining and interesting, it reads like a human and is enjoyable to read

Also, I can't access Google AI mode because I'm in EU but when looking at the video on YT, it looks like Perplexity, but googlified. I haven't seen any other tool that comes close to Perplexity yet, I have their app installed on all my devices and it's part of my daily life, it's so good! Especially with their pro plan (I got 12-months for free)
by avianlyric | 2025-09-08 11:25:26+00:00
They only need to be co-linear to the shaft if you care about accurate measurements, such as in a motor controller. I doubt the error introduced by being off-axis would make much difference in this application.

There are also packaging considerations when putting a hall sensor elsewhere. Packaging it in the hinge has the advantage you can use the same hinge and sensor setup in all laptop models. Packaging the sensor elsewhere means custom packaging setups for each laptop to work around all the other components in the body of the machine. Doing the extra work for packaging in the hinge once is probably quite a bit cheaper than having to constantly redo the packaging work in every new model.
by Joker_vD | 2025-09-08 11:26:12+00:00
Well, what is "such a high frequency"? Different allocators have different breaking points, and the musl's one is apparently very low.

> application code simply should not assume any specific performance behaviour from the system allocator

Technically, yes. Practically, no; that's why e.g. C++ standard mandates time complexity of its containers. If you can't assume any specific performance from your system, that means you have to prepare for every system-provided functionality to be exponentially slow and obviously you can't do that.

Take, for instance, the JSON parser in GTA V [0]: apparently, sscanf(buffer, "%d", &n) calls strlen(buffer) internally, so using it to parse numbers in a hot loop on 2 MiB-long JSON craters your performance. On one hand, sure, one can argue that glibc/musl developers are within their right to implement sscanf however inefficiently they want, and the application developers should not expect any performance targets from it, and therefore, probably should not use it. On the other hand, what is even the point of the standard library if you're not supposed to use it for anything practical? Or, for that matter, why waste your time writing an implementation that no-one should use for anything practical anyhow, due to its abysmal performance?

[0] https://news.ycombinator.com/item?id=26296339
by HarHarVeryFunny | 2025-09-08 11:26:18+00:00
If they want to do automated voice ordering, then using multiple choice A/B/C/cancel (with feedback on screen) would seem less error prone than LLM open ended natural language with some kind of intent interpretation.

Of course most customers would prefer to interact with a person, but I don't think "vibe ordering" tacos is going to be the same!