MurphyA/hacker-news huggingface dataset:
by abeer_kheir | 2025-09-08 13:49:51+00:00
Remote: Yes

Willing to relocate: Yes

Technologies: Figma, Photoshop, Illustrator, Webflow, Webflow CMS, Framer, HTML, CSS, JavaScript, React

Résumé/CV: https://drive.google.com/file/d/12zE6SFt3KzGXKUeDkk0gT_Qacf9...

Email: abirkheir57@gmail.com

My name is Abeer Khair and I guess I’ll be the one to break the current pattern of developer posts and say that I’m both a Web designer and Frontend developer!

I have 5+ years of experience, and I’m well-versed in both design tools such as Figma (Prototyping, animating, and creating Dev Mode-ready designs), Photoshop, and Illustrator, as well as both code and no-code development tools such as Webflow, Webflow CMS, Framer (with React Components), and I’ve also created sites using HTML/CSS and JavaScript.

I’m looking forward to taking on a new challenge, and I’m looking forward to hearing more about your project!
by larsiusprime | 2025-09-08 13:50:05+00:00
My contention is if it’s going to just give me a Wikipedia summary, I can do that myself. I just have greater expectations of “PhD” level intelligence.

If we’re going to claim to it is PhD level it should be able to do “deep” research AND think critically about source credibility, just as a PhD would. If it can’t do that they shouldn’t brand it that way.

Also it’s not like I’m taking Matzat’s word for anything. I can read the primary source documents myself! He’s also hardly an obscure source, he’s just not listed on Wikipedia.
by whimsicalism | 2025-09-08 13:50:08+00:00
the concluding sentence rings very strongly of the it’s not X it’s Y concluding pattern plus the usage of colons everywhere. idk everything except for the first sentence just sounds very much like GPT patterns of speech

if you look at their comment history, you’ll notice how many of their comments have the It’s not X but Y concluding sentence pattern that is a GPT dead-ringer. Seeing people try to pass off comments like this is not just frustrating—it's insulting.
by cmrdporcupine | 2025-09-08 13:50:33+00:00
It is an organizational not a technical problem.

When I worked at Google every single dependency was strictly vendored (and not in the mostly useless way that Cargo vendors things). There was generally only one version of a dep in the mono repo, and if you wanted something.. you generally got to own maintaining it, and you had to make sure it worked for every "customer" -- the giant CI system made sure that you knew if an upgrade would break things. And you reached out to stakeholders to manage the process. Giant trains of dependencies were not a thing. You can do that when you have seemingly infinite budget.

But technology can indeed make it worse. I love Rust, but I'm not a fan of the loose approach in Cargo and esp Crates.io, which seems to have pulled inspiration from NPM -- which I think is more of a negative than positive example. It's way too easy to make a mess. Crates.io is largely unmoderated, and its namespace is full of abandoned or lightly maintained projects.

It's quite easy to get away with a maze of giant transitive deps w/ Cargo because Rust by default links statically, so you don't usually end up in DLL hell. But just doing cargo tree on the average large Rust project is a little depressing -- to see how many separate versions of random number generators, SHA256, MD5, etc libs you end up with in a single linkage. It may not be the case that every single one is contributing to your binary size... but it's also kind of hard to know.

Understanding the blast radius of potential issues that come from unmoderated 3rd-party deps is I think something that many engineers have to learn the hard way. When they deal with a security vulnerability, or a fundamental incompatibility issue, or have to deal with build time and binary size explosions.

I wish there was a far more mature approach to this in our industry. The trend seems to be going in the opposite direction.
by rsynnott | 2025-09-08 13:50:50+00:00
I mean, surely, if and when they demonstrably work, the sceptic can just adopt them, having lost nothing? There seems to be a new one every month anyway, so it’s not like experience from using the one from three years ago is going to be particularly helpful.

There seems to be an attitude, or at least a pretended attitude, amongst the true believers that the heretics are dooming themselves, left behind in a glorious AI future. But the AI coding tools du jour are completely different from the ones a year ago! And in six months they'll be different again!
by gobdovan | 2025-09-08 13:50:58+00:00
If you are a company and you want the advantages of a maintained local-like LLM, if your data already lives in AWS, you'll naturally use Bedrock for cost savings. Given most companies are on cloud, it makes sense they won't do a local setup just for the data to just go back on AWS.

For consumers, it actually requires quite powerful systems, and you won't get the same tokens per minute nor the same precision of an online LLM. And online LLMs already have infrastructure in search engine communication and agent-like behavior that simply makes them better for a wider range of tasks.

This covers most people and companies. So it's either local experience is way worse than online (for most practitioners) or that you already have a local-like LLM in the cloud, where everything else of yours already lives. Not much space left for local on my own server/machine.
by pjc50 | 2025-09-08 13:51:01+00:00
It certainly gets in the way. The more dependencies, the more work it is to update them, especially when for some reason you're choosing _not_ to automate that process. And the larger the dependencies, the larger the repo.

Would you also try to build all of them on every CI run?

What about the non-source dependencies, check the binaries into git?
by soulofmischief | 2025-09-08 13:51:27+00:00
You should give my position more thought before being dismissive.

The billboards contribute to an overall campaign backed by billions of dollars to create a chilling effect. If you are unfamiliar with the chilling effect:

> The "chilling effect" means that people are being discouraged or intimidated from engaging in expression for fear of negative consequences, such as social disapproval, retaliation, or lawsuits.

This is a well-established phenomenon and a direct threat to freedom of speech in the US.

Very real threats of violence, disruption and social ostracization have been levied and sometimes carried out against conscious dissenters of the ongoing Palestinian genocide. If the ultimate effect of something is to chill free speech, then it is textbook restrictive.

Further reading:

https://www.thefire.org/research-learn/chilling-effect-overv...

https://en.wikipedia.org/wiki/Chilling_effect
by frenchtoast8 | 2025-09-08 13:51:34+00:00
The author says "it might be trivial for anyone to hack your server." "Might" is doing way too much heavy lifting here. Actually, the author has no idea if there is any actual exploitable vulnerability on the server. They just Googled a version number and fired off a "vulnerability report," which "might" be worth as much as the dozens of emails I get a month about "huge vulnerabilities" related to my SPF record, or those CVEs that boil down to "if someone has root on the machine they could do something bad on the machine."

I can't help but feel that the author's motivation was to get some sort of reaction, and now they've gotten it. If this vulnerability was so vital to be patched, why would it be bundled into a "by the way" DM on Twitter along with a post heavily criticizing the app developer? Both people involved can be idiots here.
by thiago_fm | 2025-09-08 13:52:10+00:00
If you are asking about LLMs, yes we will. We have hit it already.

All those LLMs benchmarks are terrible. LLMs gets better at it, but users don't perceive it. LLMs haven't improved that much the last year.

For AI in general, the future is bright. Now we have a lot of brain power and hardware available, more new research will pop up.

A LONG TIME AGO, Claude (your favorite LLM model?) Shannon has shown that entropy is a fundamental limit. There may be limitations we aren't aware of 'intelligence'.

Despite what experts say, Superintelligence or AGI might not even exist.

Is AGI knowing all the possible patterns in the universe? Nobody can even properly define it. But it is wrong, as not every intelligent thing isn't a pattern.

But are cars going to drive themselves by using similar inputs than a human? Yes, probably soon

Also many improvements to machinery, factories and productivity. They will shape the economy to a new format. No superintelligence or AGI needed. Just 'human'-level pattern recognition.
by just_human | 2025-09-08 13:52:19+00:00
This is a cool idea! I think you need to find a way to seed more photos (are there any public archives by country/state you could use?), but I could see this being useful when traveling as a way to understand the history of a place.

Somewhat related, but made me remember Color Labs (https://en.wikipedia.org/wiki/Color_Labs) which tried to build a social network where you could see photos taken by other people in your location.
by gorgoiler | 2025-09-08 13:52:29+00:00
Democracy, strictly speaking, would be to periodically elect the most popular formatting policy once every sensible-time-period.

I’ve seen companies with such a large amount of developer churn that literally one person was left defending the status quo saying “we do X here, we voted on it once in 2019 and we’re not changing it just for new people”. 90% of the team were newcomers.

(The better teams I’ve worked on maintain a core set of leaders who are capable of building consensus through being very agreeable and smart. Gregarious Technocracy >> Popular Democracy!)
by mdp2021 | 2025-09-08 13:52:35+00:00
Have you read the rest?

> not willing to listen

You think you show much hearing on this side? In front of what is happening in Nepal and elsewhere, the reduction of the matter to "oh a break from social media is healthy" is neither on point nor constructive - very simple. The constructive part you meant to convey, I still do not get.

> I did not engage in any

Apart from the one I pointed to and the other ones I have not mentioned? Not just precising the difference between fallacies and logical faults, but all the attributions of intention you expressed you construed, such as «explaining why this situation is bad». The latter was only pointed out to you because you clearly do not seem to get it, if you go "there are plus sides on not using social media" in front of of a government ban that closes the doors to a critical part of information to a population.

I hope you have seen the frontpage now, "14 Killed in protests in Nepal over social media ban" - which, as already a number of posts reveal, is not about social media. The benefits of your "abstinence" have little to do with this.
by its-summertime | 2025-09-08 13:52:40+00:00
Assuming Debian because why not, (and because I don't want to look at RHEL):

2.4.57 never made it into Debian stable, only went as far as testing and unstable.

2023-10-19 was when 2.4.57 was superseded by 2.4.58 in unstable.

So assuming they are not using RHEL or similar, they have either pinned Apache httpd, used a custom build, or haven't updated their server since the start of 2024.

- - -

Since then, there have been 11 moderate, 8 important security fixes according to Apache.
by icedchai | 2025-09-08 13:53:00+00:00
Hooking up that first T1 was super exciting! I worked at an early ISP (not a big one) in 1995. They were still on a 56K dedicated line and a very small bank of modems. I still remember when the guy from MCI showed up to test the new T1 we were getting. The first frame relay customers I brought up were also super fun. I sometimes miss networking.
by floatrock | 2025-09-08 13:53:01+00:00
I dislike Apple's lock-in tactics, but I dislike gross fear-mongering exaggerations even more.

How'd we get to tyrannical government oversight from shitty corporate control? Sorry, I think I slipped on that slippery slope.

The better analogy would be "door lock vendor requires you to buy their door frame to make their door lock work with the security guarantees you chose to buy into."

Government should stay out of our private lives, but this kind of jumpy fear-mongering is what makes people lose focus, and when people are run by fear that's when the real psychopaths start taking advantage. Your fear mongering is creating the very government tyranny you're mongering about.
by adev_ | 2025-09-08 13:53:23+00:00
> Does this somehow prevent you from vendoring everything?

Yes. Because in these environment soon or later you will be shipping libraries and not executable.

Shipping libraries means that your software will need to be integrated in other stacks where you do not control the full dependency tree nor the versions there.

Vendoring dependencies in this situation is the guarantee that you will make the life of your customer miserable by throwing the diamond dependency problem right in their face.
by sd9 | 2025-09-08 13:54:23+00:00
Disclaimer: UK citizen. I don’t know anything about ICE or whose side I’m “supposed to be on” politically here. I’m just responding to the details in the article. The app might as well be TodoApp.

The vulnerability couldn’t have been reported in a worse way. OP gave unreasonably short deadlines, allowed moral opinions about the software to interfere with responsible disclosure, and interspersed details about the potential vulnerability with inflamatory remarks about the mission of the product. I don't think OP's goal was actually to secure the app.

OP was going to publish a scathing blog post about ICEBlock either way, and essentially engineered a situation where the ICEBlock author had to act within unreasonable timelines. He published the original blog post an hour and a half after reporting the vulnerability. Then gave a week’s deadline before another one.

Sure, potentially the ICEBlock author also allowed feelings to interfere with upgrading the vulnerable version too.

But ICEBlock has millions of users, according to the blog post. I’m cautious about upgrading dependency versions for apps I manage with <100 internal users. In my experience, upgrades are 99% trivial, and 1% cause disastrous headaches and downtime. If I were the ICEBlock author, I would put this on a list of things to look into, and ensure that it was tested thoroughly if I did decide to upgrade. It’s not as simple as running “sudo apt upgrade”.

And I imagine that given the scale of the product, the author has incredible demands on his time, and can’t just drop everything because somebody (who has already shown themselves to be communicating rather negatively) imposes an arbitrary short deadline.

Now maybe it turns out that I’m unaware that ICEBlock is a huge net negative for the world, which is why this post has so many upvotes. But just interpreting the facts as they’re presented in the article, and substituting ICEBlock for TodoApp… I don’t see how the developer has acted unreasonably.

Post script: I followed up and read the original blog post (https://micahflee.com/unfortunately-the-iceblock-app-is-acti...), which I largely agree with. I still think Micah has mishandled communicating the vulnerability.
by iainmerrick | 2025-09-08 13:54:44+00:00
It works the way you want if you add a trailing comma:

important_numbers = { "x": 3, "y": 42, # Answer to the Ultimate Question! "z": 2, }

You might complain that that seems a bit obscure, but it only took me 10 or 20 seconds to discover it after pasting the original code snippet into an editor.

The trailing comma is an improvement as it makes the diff clearer on future edits.

Edit to add: occurs to me that I oversimplified my position earlier and it probably looks like I'm trying to have it both ways. I do advocate aiming for clean and clear formatting; I'm just against doing this manually. You should instead use automation, and steer it lightly only when you have to.

For example, I explicitly don't want people to manually "tab-align" columns in their code. It looks nice, sure, but it'll inevitably get messed up in future edits. Better to do something simpler and more robust.
by OhMeadhbh | 2025-09-08 13:54:45+00:00
Coding used to be about learning about the mathematical underpinnings of computation and then learning a specific mapping from the math to the software implementation. These days we don't teach that to undergrads (or maybe they get it in passing in a survey class.) We don't teach parsing. It seems we teach a list of features you should expect in your Python implementation or Linux version. Maybe you get a class on SQL. It's astonishing to me that kids today can get a CS degree without learning what Lambda Calculus (or even Pi Calculus) is (are). I got a PHYSICS degree and took a course on the mathematical underpinnings of computation so I would understand why all that FORTRAN code I had to maintain looked as funky as it did. As best I can tell, our 4 year research institutions are a weird mix between day care facilities and trade schools. Just once I would love to meet a recent undergrad who had taken a compilers class or understood the difference between s-expr's and m-expr's.

File under "old man yells at cloud."
by mandeepj | 2025-09-08 13:55:06+00:00
> self-driving will also become a commodity

That can be said about everything so does it play out in real? For e.g. phones have been labeled as commodities a while ago. But, are they?

Edit: Self driving is a super specialized tech and it’s still not fully developed yet. A lot of weak areas. I don’t see it getting commoditized in the next 20 or 30 years.

The real opportunity would be in monetizing the time that people would be getting back while not driving.
by amluto | 2025-09-08 13:55:14+00:00
To be fair, and I know nothing about Tesco’s actual stack, a large grocery chain needs to track their contracts with suppliers, track their inventory in each location and in transit, track what goods they want in which locations, understand which larger pallets and big boxes contain which goods, track things prepped in house, and also optimize what to move from where, to where, and when and how. The latter part probably uses some spiffy stack involving something like CPLEX or Gurobi, and it’s not running on their “1 computer” OLTP stack.

That being said, I don’t see what 40k servers is for unless the POS machines are thin clients that use a substantial fraction of a server each.
by yorwba | 2025-09-08 13:55:27+00:00
In 2024, the average US prison sentence was for a duration of 52 months, with over half the total months being for drug trafficking (average 82 months) https://www.ussc.gov/sites/default/files/pdf/research-and-pu... (page 11).

Also in 2024, Japanese prison sentences were mostly between 1 and 3 years, and about two thirds were fully suspended. https://www.moj.go.jp/content/001436547.pdf (page 20). Assuming an average of two years for the third not-fully-suspended, that works out to 8 months of time spent in prison per person handed a prison sentence.

That results in about a factor of 7 difference in prison population simply due to the difference in average sentence length. Maybe the US should sentence more people to prison but keep each of them there shorter.
by N-Krause | 2025-09-08 13:55:47+00:00
Runs on a Pi4 in a cabinet with a lot of other self hosted stuff. Data is stored on a NAS. Performance on the Pi4 isn't the greatest, but it works without any annoyance.

It has been hosting my SO's and my photos for a few months, the transition from Google Photos was pretty easy and it is almost a drop in replacement. I love it.

Make sure to checkout https://github.com/simulot/immich-go, it was a great help migrating my Google Takeout to Immich.
by antonvs | 2025-09-08 13:56:45+00:00
You've misunderstood the study that you linked. LLMs certainly memorize, and this can certainly skew benchmarks, but that's not all they do.

Anyone with experience with LLMs will have experienced their actual problem solving ability, which is often impressive.

You'd be better off learning to use them, than speculating without basis about why they won't work.
by zelphirkalt | 2025-09-08 13:56:47+00:00
That only moves the problem to the base class. In this case there is no difference in effort modifying the base class to foresee all cases that could happen with the derived classes, compared to adapting all the derived classes. In fact, you might even be typing more, because you might need some more "if"s in that base class, because you don't know which specific implementation you are dealing with, for which you implement the behavior in the base class. You still have to deal with the same amount of cases. And it is still bad, when you need to extend something that a library does, that you are not maintaining.

This does not solve the issue at its core, I think.
by webdevver | 2025-09-08 13:57:11+00:00
manual driving is clearly, sooner or later, going out the door. getting from A to B has been getting commodified and the notion of a "car" is rapidly moving towards "private bus".

elon can see this direction. whoever invents self-driving cars first, will kill cars as we know it, completely. so it makes sense then, that if anyone should invent what kills tesla, it should be tesla.

alot of elon hate on hn but he is making objectively very good bets. he doesn't have a pr department like the other guys do (who direct their entire wardrobe, body language, gestures, do speech coaching, etc.), and i suppose we can say that the pr guys are vindicated! zuck, gates, cook, all rehabilitated their public image no-problem.
by UncleMeat | 2025-09-08 13:57:43+00:00
> So a more efficient system would be one where you selfpay for regular procedures and have insurance for rare, life altering conditions.

This is sort of what a high deductible plan is, which were encouraged by the ACA. After premiums, my first ~$4,000 in medical expenses each year come out of my pocket. Then the next ~4,000 in medical expenses are shared between me and my insurance. Then the remainder is covered by my insurance. The difference is perhaps just what "rare, life altering conditions" means. For a lot of people the cost of medical care becomes untenable not at "oh god I need seven figures in surgeries" but instead "oh god that appendectomy is $50,000 before insurance" or even "oh god I don't have $10,000 to pay for that hospital visit."
by yepitwas | 2025-09-08 13:58:06+00:00
IMO the newest Mario Kart (Switch 2) is the first one that’s probably better than Double Dash. That’s three consoles in a row where I think the GameCube game’s better than the newer offerings (and that’s not even a nostalgia game for me—that’d be the original, and the N64 one, neither of which is very good).
by OhMeadhbh | 2025-09-08 13:58:11+00:00
FORTH is difficult to understand? I respectfully disagree. Well... I mean... if you can grok C, you can grok FORTH is my assertion. If you can't grok C or assembly, then sure, FORTH is pretty esoteric. But in that example, so is C.

It is most assuredly different than typical languages, but I don't think that means "esoteric". As an industry, we're sort of lost if "esoteric" means anything that doesn't look like Algol.
by kolme | 2025-09-08 13:58:29+00:00
I did that when I was young and naive. I'll tell you why I did it.

I thought I was very smart. Like, really really smart, maybe the smartest programmer in the team.

And as such my opinion was very important. Maybe the most important opinion in the team. Everyone had to listen to it!

That is all. Also, I was wrong.