MurphyA/hacker-news huggingface dataset:
by nixosbestos | 2025-09-15 23:31:53+00:00
Threads like this want me to throw my laptop into a volcano and lobotomize myself. I have a bridge if you think an LLM can reliably generically redact passwords. Especially given the intersection of password quality and the type of person to let their passwords leak into output of a recorded terminal session.

I love leaving my baseline security in the hands of a hallucinating, unreliable token generator.

I'm sorry, I don't even know how to explain that this type of feature would be such a mis-feature, it's hard to even know how to explain it to somehow for whom its not obvious.
by DanielPlugnData | 2025-09-15 23:31:59+00:00
Hi HN,

I wanted to share PlugAndData, a tool we built to close the gap between code and data. By combining the concept of a database and a data pipeline into a single tool, data storage and interfaces can be managed automatically: no external database schema to be maintained anymore, no more object-relational mappers nor database queries. Just write code and run it, even scaled across multiple machines or with human-in-the-loop. The user interface follows this typical visual programming approach where the user drags in nodes and connects them. There are data, function and query nodes. An interesting detail is that we have modelled hashing/memoization simply as another node. By giving the hashing node both an input and an output port which you can connect or disconnect independently any time, hashing becomes flexible. For example, you may decide to override some hashed results by connecting only the input port while processing a given batch of data.

We built PlugAndData because we saw the challenge for small and mid‑sized teams of juggling with multiple tools from databases over orchestrators to containerization.

I’d love to hear the community’s thoughts on the concept, we are still in the early pilot phase. There is a also a 4 minutes demo video on the site (we integrated an LLM, which makes for a nice demo but is not seen as the core benefit/selling point by us).

Looking forward to feedback!
by Wowfunhappy | 2025-09-15 23:32:37+00:00
> Statistics on mobile vs. desktop banking will really shock you; the mobile usage penetration is easily well upwards of 90% in many markets. There's also a skewed distribution for fraud-vulnerable users and scenarios.

But if my goal was to commit fraud, wouldn't I go to wherever it was easiest to commit fraud? The actual market penetration of each platform shouldn't matter.
by jcalvinowens | 2025-09-15 23:32:44+00:00
>> disks are not considered "slow devices".

> And neither are the tapes. But the pipes, apparently, are.

The "slow vs fast" language is really unfortunate, I realize it's traditional but it's unnecessarily confusing.

A better way to conceptualize it IMHO is bounded vs unbounded: a file or a tape contains a fixed amount of data known a priori, a socket or a pipe does not.
by dekhn | 2025-09-15 23:32:59+00:00
I once had the distinct pleasure of hosting the author of BWA (R. Durbin) at Google, and pointing out "That's Mike Burrows, over there, next to Jeff Dean and Sanjay Ghemawat". That led to an interesting discussion between Durbin and Dean on DNA sequence compression. It's not the first time I've been in a room with a bunch of geniuses and simply kept my mouth shut so nobody would know I'm an idiot.
by IlikeKitties | 2025-09-15 23:34:18+00:00
His Wikipedia Page is something to behold https://en.wikipedia.org/wiki/Josh_Schriver

> During his tenure in the Michigan legislature, he has called for a ban on hormonal birth control,[3] pornography,[4][5] same-sex marriage and gender-affirming care for adults,[6] as well as promoted the Great Replacement conspiracy theory.[7]

And please take a look at the picture. It's something else.
by dwattttt | 2025-09-15 23:34:29+00:00
The question of how to represent things not specified in the original format is a tough one.

At the loosest end a format can leave lots of space for new symbols, and you can just use those to represent something new. But then not everyone agrees on what the new symbol means, and worse multiple groups can use symbols to mean different things.

On the other end of the spectrum, you can be strict about the format, and not leave space for new symbols. Then to represent new things you need a new standard, and people to agree on it.

It's mostly a question of how well code can be updated and agreed upon, how strict you can require your tooling to be w.r.t. formats.
by famouswaffles | 2025-09-15 23:34:51+00:00
>In 2024 (when customer mix was more favorable)

Okay, so still hundreds of millions of users

>They aren't pulling an Amazon snd balancing cash flow with costs.

Nobody said they were. I said having hundreds of millions of completely free users would suck the profitability of any business, and that the remedy would be simple, should the need for it arise.

>They're just incinerating money for a low value userbase.

If you don't see how implementing ads in a system designed for having natural conversations to users whose most common queries are for “Practical Guidance” and “Seeking Information” could be incredibly valuable then you have no foresight and I don't know what to tell you.

>Even at FB arpu the economics are still very poor.

No they aren't and I honestly have no idea what you're talking about. Inference is cheap and has been for some time.
by Diggsey | 2025-09-15 23:35:25+00:00
They are different:

"0": ">=0.0.0, <1.0.0" "0.9": ">=0.9.0, <1.0.0" "0.9.3": ">=0.9.3, <1.0.0"

Notice how the the minimum bound changes while the upper bound is the same for all of them.

The reason for this is that unless otherwise specified, the ^ operator is used, so "0.9" is actually "^0.9", which then gets translated into the kind of range specifier I showed above.

There are other operators you can use, these are the common ones:

(default) ^ Semver compatible, as described above >= Inclusive lower bound only < Exclusive upper bound only = Exact bound

Note that while an exact bound will force that exact version to be used, it still doesn't allow two semver compatible versions of a crate to exist together. For example. If cargo can't find a single version that satisfies all constraints, it will just error.

For this reason, if you are writing a library, you should in almost all cases stick to regular semver-compatible dependency specifications.

For binaries, it is more common to want exact control over versions and you don't have downstream consumers for whom your exact constraints would be a nightmare.
by nixosbestos | 2025-09-15 23:36:42+00:00
15MB GIF file. I can't man, I just can't. I literally can not.

Can't seek. Can't select text. And I get to use 15x the bandwidth I should have to load it.

Please. Stop. Please. It's gross to take beautifully compressable, seekable, accessible text, shove it into the absolute worst format possible for video, and then call that good.

If you must insist, please at least link to the raw asciinema, or their web viewer. So that I can load it in a fraction of the time, pause it, seek forward and backward, and copy-paste text. I know, I know, who would want any of that. Much better a GIF that loops so fast it's basically meaningless to anyone but the creator.
by leptons | 2025-09-15 23:36:47+00:00
Maybe you should read the DOJ suit against Apple. It's pretty clear that one reason (among many) that Apple is getting sued is because of abusive business practices exactly as I described.

Apple forcing Safari on iOS is present day, today, not 5 years ago (but it was also 5 years ago too, ever since there was an iOS webview). If Apple doesn't want to implement it, then they shouldn't force other browser makers to use their hobbled browser engine.
by dylan604 | 2025-09-15 23:36:57+00:00
I'm a backender that writes UI PoCs to test the backend where the PoC gets pushed to prod. I just write custom JS updating HTML/CSS elements directly. No frameworks. I've been told it's a nightmare to deal with later, but it makes perfect sense to me. Not once have I ever claimed to be a UI person. That's just way too close to the user for my liking.
by logicalmind | 2025-09-15 23:37:04+00:00
> According to you, we cannot discuss capitalism because some people maybe offended. Moreover, according to you, the person who will state that capitalism is bad can be rightfully attacked by the advocates of capitalism because he offended them. Thus, we have nothing left to talk about -- god forbid someone gets offended.

Where did I say that? that has nothing to do with my point. My point is that a discussion of capitalism has an entirely different risk profile than discussing other topics. I stand by the first amendment that people can say whatever they want. Where you lose me is your follow-on that what they say disallows people from being offended. And secondarily, disallows people from having consequences for what they say.

Being on HN, it is highly likely you work a corporate job and you know exactly what I'm talking about. You know that if you were to debate some of Kirk's ideas in your workplace that you could be disciplined for it. Because your workplace knows that certain topics are extremely divisive and that don't want people arguing and fighting. That is why I said you are arguing in bad faith. And both you and I know we're not talking about the topic of capitalism. Let's be real.

Next time you speak to a woman at work I want you to try this idea out on them:

"Hey X, all kidding and sarcasm aside, this is something that I hope will make you more conservative. Engage in reality more and get outside of the abstract clouds. Reject feminism. Submit to your husband, X. You're not in charge."

See how well the "debate" goes.
by autoexec | 2025-09-15 23:37:37+00:00
> It seems to be an artistic provocation showing what a real people analysis could look like.

I that case they should have used descriptions like "gay", "muslim", "poor", "bipolar", "twice divorced", "low quality hire", "easy to scam", "both parents dead", "rude to staff", "convicted felon", "not sexually active", "takes Metformin", "spends > $60 on alcohol a month", "dishonest", etc.

None of the people who actually take advantage of you or manipulate you using surveillance capitalism cares if you're a "cloud watcher" or "inspiring"
by sien | 2025-09-15 23:37:48+00:00
There is a BBC Audio drama of Neuromancer that is 1:56 long.

It is excellent.

https://www.youtube.com/watch?v=S89BHnaxULo

I haven't listened to the audio book of Neuromancer but I re-read it a few weeks back. The audio play I still go back to once in a while as well.
by rchaud | 2025-09-15 23:37:53+00:00
Covid constrained the supply of new cars, leading used car prices to skyrocket. It's not easy for the average person to evaluate whether a used car from a private seller is in good condition. A Carfax report is thin on details other than its crash history. Cars in good condition sell very fast, so I can understand why people choose to buy a new car that comes with a warranty, especially if they live in a town where cars are necessary to get around.
by singleshot_ | 2025-09-15 23:38:11+00:00
I am acutely aware that it constrains liquidated damages to a reasonable figure. Conveyance to a collector is, of course, customary in the trade.

The problem is that a “punitive” amount of liquidated damages is neither reasonable, nor would it typically be found to have been the product of an actual estimate of the damages. See, 356 cmt. a.

If you didn’t say “punitive” in the LD provision, you’d have the “reasonable estimate” conversation but GP straight up called it a punitive clause, which is not going to fly (in many jurisdictions, ianyl, etc. etc.)
by EnPissant | 2025-09-15 23:38:20+00:00
It sounds like you are alluding to NEM3 here. If so, I'm not sure that was meant to incentivize small scale energy storage. They recently tried to implement a flat fee that would have killed residential solar entirely, even with batteries. That did not happen, but I think it shows the motivations. I'm also not sure batteries even change that much for the grid. You still need to have the capacity for lulls when all the batteries are empty.
by apatheticonion | 2025-09-15 23:38:34+00:00
One of the issues I find is that JavaScript itself holds back the ability of tool makers to experiment with practical novel alternatives.

TypeScript's tsx macro is designed with React-like libraries in mind and alternative frameworks need to create custom file types and LSPs just to get off the ground.

I'd love to see the JavaScript spec define a generic macro system to enable experimentation (with IDE support) for alternative frameworks.

For example, jsx/tsx could be expressed with an inline macro

export App() { return jsx!(<div>Hello World</div>) }

While something like Vue or Svelte could implement their own inline macros rather than investing in tooling for their custom file types

export class App { #[onChange] // <- makes the prop a getter/setter value = Hello World constructor() { setTimeout(() => {this.value = "updated"}, 1000) } render() { return vue!(<div>{{this.value}}</div>) } }

If it's part of the spec, the browser could interpret it without a preprocessor and compilers like tsc/swc etc could precalculate the transformations and ship the transformed JavaScript (like we do today with tsx)
by burnerthrow008 | 2025-09-15 23:39:05+00:00
> it's clear that Apple doesn't have the will to kill their apps over it.

Well, Apple did threatened to remove Facebook in the past, and they did get Meta to follow the rules back then

But, today, unfortunately I think you are right. If Apple bans Facebook, Meta will take the opportunity the EU has given them to start their own app store, which can have whatever privacy rules (read: none) they want.

I guess it's just another Brussels Effect.
by klipklop | 2025-09-15 23:39:16+00:00
Usually I give it a prompt that includes telling it to formulate a plan and not not do any coding until I approve. I will usually do several loops of that before I give it the instruction to go forward with the plan. I like to copy and paste the plan elsewhere because at times these LLM's can "forget" the plan. I usually do testing at each major milestone (either handed off to me or do builds/unit tests.)
by recursive | 2025-09-15 23:39:39+00:00
Neither react's JSX nor vue's template language are HTML. But rejecting vue's template on grounds that it's not HTML seems odd. React's JSX deviates from HTML in many ways. Like class vs className. XML self-closing vs HTML self-closing. onchange vs oninput. On purely aesthetic grounds, I can't understand how the react idiom of array.map() would ever be preferable to an affordance in the (non-HTML) template language for handling this normal standard thing that always happens.
by sershe | 2025-09-15 23:41:46+00:00
I work for Microsoft so I get to/am forced to dogfood all the copilots. GitHub/VS copilot is great. Bing copilot is pretty good. For windows copilot I have no use case.

365 copilot, in my own personal humble opinion, is a steaming pile of garbage, and I think that is why they force it so much (the floating thing in excel, repeatedly pinning to taskbar after I remove it, removing the option to disable it via group policy, an obnoxious copilot box on top of new document, top of every context menu). People don't use it, and the reason people don't use it because it is terrible. It's the only, MSFT or otherwise , copilot that hallucinates its own work - says it made changes but no changes are made. On top of not being able to do much in the first place, especially with the typical tedious tasks like minor changes to many things at once; and mangling spreadsheets when it does do something.
by metalcrow | 2025-09-15 23:41:50+00:00
This bill is obviously unethical, and furthermore appears to be illegal under the supreme court ruling Kent v. Dulles, which establishes the right to international travel (and thus a passport) a liberty that cannot be deprived without due process of law. So there would at least have to be a criminal hearing of some kind, unless the Supreme Court were to go back on this ruling (not impossible).
by POiNTx | 2025-09-15 23:43:20+00:00
That's a really cool concept, I'd love to see more art like this that uses modern technology. Do you have a demo available somewhere to see what the effect would look like? This is one of those things where you should just do it without asking for permission. The portals[0] art installation in some cities doesn't ask for consent either.

[0] https://www.portals.org/
by antonvs | 2025-09-15 23:45:28+00:00
This comment is on point, so all I'll add is this:

> The way out is onwards not idolizing a concocted naive pastoralized past.

Ah, the noble JavaScript savage of 1999 - so in tune with his environment, his nose twitching in perplexed confusion as the unfamiliar scent of DHTML wafts past.

Unconcerned with a future that he cannot possibly imagine, he launches Dreamweaver and begins coding, secure in the knowledge that the more things change, the more they stay the same.
by vkou | 2025-09-15 23:46:00+00:00
> It brings the value of clear communication

You are quite clearly understanding everything that I'm saying[1], but I'll bite.

What sequence of characters would be 'the proper English' that I should use to describe the scenarios that I've presented in a parent post?

Be sure to be clear, unambiguous, and concise.

---

[1] s/saying/writing/g
by protocolture | 2025-09-15 23:46:03+00:00
Back when I carried it I would pay all my bills in it. Paid for most of my wedding tbh.

That said, I think Australia might be uniquely blessed by Livingroomofsatoshi. It basically bridges crypto to all our other payment streams.

Oh and grey market stuff all the time. Drugs that arent like, go to jail illegal but ship internationally direct from india. That sort of stuff.
by apsurd | 2025-09-15 23:47:24+00:00
it's not about feigning html purity it's the opposite. Why pretend we're using HTML when it's not? so with react it becomes a js flavor, jsx, which some people hate but it's very clear that it's a made up language IN real javascript.

edit: the mental model is instant: it's just javascript for reals. do anything you want in javascript using real js primitives. it's not about looking pretty, jsx doesn't. it's about not relearning basic programming primitives in a made up _markup_ language.

my issue with angular is it's neither real html nor any programming language. its made up pseudo-programming language for no other reason than it fools people into thinking "it's just HTML". that's my gripe.
Thank HN: Rainbows End
by cl42 | 2025-09-15 23:48:26+00:00
A few comments discussed the sci-fi book "Rainbows End" recently so I decided to pick it up. What a fantastic book -- cute, well-written, and had some great ideas around the future of tech given it was written in 2006.

Really appreciate all the thoughtful comments on HN and grateful to have found this book.
by bitwize | 2025-09-15 23:48:45+00:00
Maybe when you're a junior, you like watching "the lights flash and the wheels spin" as Steve Summit used to say, but as you get older, more complexity is more stuff you have to audit, maintain, keep in your head as you extend the system, etc. And that's stuff you have less time and patience for. So you are drawn to solutions that are as simple as you can get away with. Especially since systems that did quite a lot with vastly fewer resources are still within your living memory. If you grew up with an Amiga, and your younger colleagues all started with like Windows XP or something, you remember being productive in an environment that they can't even fathom using.

I know this sounds all very "old man yells at cloud". What can I say. Grug dev only telling fireside stories learned from bitter experience chasing shiny rock.
by recursivecaveat | 2025-09-15 23:49:36+00:00
I think pizza is just virtually indestructible in terms of traveling. Sometimes I see americanized chinese food or those caribbean rotis being sold out of no-seating places likewise. The thing about a non-ghost no-seating establishment is you know they would go out of business eventually if they were truly awful. The ghost kitchens though can spin up new virtual brands endlessly.
by alberth | 2025-09-15 23:50:35+00:00
> While there are many excellent terminal emulators available, they all force you to choose between speed, features, or native UIs. Ghostty provides all three. In all categories, I am not trying to claim that Ghostty is the best (i.e. the fastest, most feature-rich, or most native). But Ghostty is competitive in all three categories and Ghostty doesn't make you choose between them.

Ghostty doesn’t claim to be the fastest.

https://github.com/ghostty-org/ghostty
by jcalvinowens | 2025-09-15 23:50:50+00:00
> What are they famous for then? High quality, trustworthy code?

Absolutely. Demonstrably much moreso than you over the past decade.

> I've worked hard to establish an engineering community where no one has to be afraid to point out broken shit,

You have failed. Look at this conversation: https://lore.kernel.org/lkml/fe51512baa18e1480ce997fc535813c...

Do you think Arnd, David, and Russell feel like they were rewarded for pointing out your broken shit? I doubt it. I certainly don't. You were so completely and obviously in the wrong there I have difficulty believing it was real.

I'm not replying to you again. Good luck :)
by mschuster91 | 2025-09-15 23:51:08+00:00
> There's plenty of physical devices where it is possible

Yup, but say Samsung, kiss KNOX goodbye. Fused off once you flash a non-Samsung image.

> and Google publish official emulator images with root access for every Android version released to date. This part is still OK.

Many apps will straight refuse to run in emulators unless you're lucky to snag a debug build that accidentally got pushed to production.

> Most of the root detection is beatable with Frida etc, mostly.

It's a cat and mouse game and frankly, I'm sick of it - and especially about the fact that it's either "accept that you'll need to wait X weeks until <Magisk plugin> gets an update" or "install some unofficial closed source fork that may or may not be laced with malware".

> Best hope here is that a) it creates much work for most apps to bother and b) it eventually gets restricted as anti-competitive.

Rooting detection used to be too much work, then SDKs cropped up that made it very easy, and that will be the case for remote-verifiable hardware attestation.

And restrictions from anti-trust? No way that will happen in the next three years in the US, and here in the EU it takes about 5-10 years until our parliament finally gets to work after a problem gets too much attention for their lazy asses to ignore. And even then, the lobby from banks, game studios ("them cheaters!!!" in f2p scam games) and other influential lobbyists will likely prevent any serious action.
by epolanski | 2025-09-15 23:51:10+00:00
Yeah, no way I'm doing copy pasting or allowing it to vibe it.

I want it to help me come up with a plan, execute and check and edit every single edit but with the UX offered by claude, Codex is simply atrocious, I regret spending 23 euros on this.

I see the visual studio code extension does offer something like this, but the UX/UI is terrible, doesn't OAI have people testing those things?

The code is unreadable in that small window[1], doesn't show the lines above/below, it doesn't have IDE tooling (can't inspect types e.g.).

https://i.imgur.com/mfPpMlI.png

This is just not good, that's the kind of AI that slows me, doesn't help at all.