MurphyA/hacker-news huggingface dataset:
by tabbytown | 2025-09-09 23:32:35+00:00
> had such a small security team of just 6 engineers

≥ Company refused to allocate more than around 10 engineers to the Security team at any point

If true, this tells the story here with security culture at WhatsApp. Assuming a backlog of known weaknesses (as any established code base will have), and the velocity that 100 PMs and 1200 SWEs implies, how would you do anything as a security team besides stick your fingers in the figurative holes in the dike? The ensuing conflict between Baig and his superiors about not fixing stuff is surely going to result in an assessment of "poor performance" but is likely just Baig giving a f** about user data.
by throwmeaway222 | 2025-09-09 23:33:30+00:00
I think we're at 3rd wave AI and it's got a RPM of maybe 20-40. In a year or two we'll be at 900 RPM and having the user give permissions won't really be feasible. So perhaps a secondary AI prompt will "validate" the request for you - we're only going in this direction.

Sure, comment on the time we're at, but it won't be relevant for a while.
by OkayPhysicist | 2025-09-09 23:34:01+00:00
I grew up a white kid in a very (90+%) Asian community. IMO, the biggest difference I observed comparing my white friends from other communities to my Asian friends in my community was the expectation of excellence. For the Asian kids, either they were succeeding, above and beyond, or they were a failure. "B is for 'Better not come home tonight', A is for 'Adequate'", as the jokes went.

And some of those kids still struggled. But the response was to push harder. Didn't get adequate grades that school year? You're not doing anything fun this summer, you're studying. Needless to say it was a culture shock going to college and meeting people who were shockingly cavalier about potentially failing classes.
by perihelions | 2025-09-09 23:34:03+00:00
That they'd change the content is the point—offer malware content for select targets, with corresponding malware checksums that are consistent with that malware and its entire history.

Those checksums would seem valid to the victims, as they're a self-consistent history of checksum trees they got directly from GitHub. The devs would be working with different checksum trees. GitHub would maintain both versions, serving different content and different checksums depending on who asks.
by tho23i4234234 | 2025-09-09 23:34:26+00:00
I wonder if Twitter is already filled with "hard-working all umerican" paid-influencers claiming Indians are so low-IQ/smelly etc. that they can't even use AI to do the jobs that they got through race/religion/caste/smell/skin-color/language/etc.-based nepotism.

They Duk-a-duk! (South Park is awesome isn't it ?)
by imankoma | 2025-09-09 23:34:51+00:00
Famulor’s revolutionary Multi-Calendar Tools make scheduling smarter and more flexible than ever before. This proprietary Famulor innovation enables your AI assistants to seamlessly manage multiple calendars - a unique capability that only Famulor offers.

Famulor’s exclusive Multi-Calendar features:

Famulor Team & Service Calendar Management

Famulor’s proprietary team calendar technology allows you to assign different calendars to the same assistant. Perfect for businesses where customers choose a specific team member or service.

Industry-specific Famulor applications:

Beauty Salons & Spas: Customers can directly book appointments for hair, nails, skincare, or massage through Famulor’s intelligent calendar routing

Medical Practices: Patients automatically book with the right doctor or specialist through Famulor’s proprietary medical integration

Consulting Firms: Clients are automatically routed to the appropriate advisor or coach through Famulor’s unique expertise detection

Fitness Studios: Members can book personal trainers, classes, or therapy sessions through Famulor’s sport-optimized calendars

Law Firms: Clients are automatically directed to attorneys with the right specialization through Famulor’s legal intelligence

Real Estate: Prospects book viewings with the appropriate agent through Famulor’s property-specific calendar system

Restaurants & Events: Guests can choose between regular table reservations and event planning through Famulor’s hospitality engine

Educational Services: Students book sessions with tutors specialized in their subject through Famulor’s academic calendar matching

Financial Advisory: Clients are routed to advisors with the right expertise (investments, insurance, loans) through Famulor’s financial intelligence

Famulor Seamless Calendar Orchestration

Famulor’s proprietary calendar management engine reduces back-and-forth and ensures accurate bookings every time through advanced AI-powered conflict resolution.

Why Famulor’s Multi-Calendar is industry-leading: This unique Famulor innovation makes your AI assistants even more versatile and efficient, whether you’re running a salon, clinic, or service team. Famulor’s proprietary technology revolutionizes how businesses manage appointments.
by netsharc | 2025-09-09 23:35:16+00:00
Yeah, it's very convenient to ask an LLM to generate e.g. a "Hello World" browser extension and then to gradually fill it with logic. Searching for tutorials gets you outdated resources, poorly written ones and obscure failures.

Then again, I asked ChatGPT moons ago to generate a Filebeat config file, and its output contained syntax errors...
by bigshaq88 | 2025-09-09 23:35:30+00:00
would anyone be interested in this?

After seeing a ton of "whats the prompt?" and "how can I make this" comments on tiktok and instagram for AI art, i made an app so AI Creators can sell their prompts to anyone that wants it

my goal is so that AI creators can make creating with AI their actual career.

It's still very early, but if this interests you, please let me know!

if you think this idea is terrible, also let me know, im all ears <3
by neilv | 2025-09-09 23:35:35+00:00
> There is no defamation case anywhere in this situation.

They said they were terminating lots of people for poor performance, while terminating lots of people.

And there's plausible reason to suspect, given the frenzy of headcount reductions going on, that it wasn't actually for poor performance.

> Why is it that the "I'm not a lawyer, but" comments are always giving the worst legal advice?

Why are a couple people on an epic tour de force of commenting, energetically telling people to definitely don't talk to a lawyer about any possible wrongdoing by this company?
by anp | 2025-09-09 23:36:22+00:00
Comments so far seem to be focusing on the rejection without considering the stated reasons for rejection. AFAICT Alsup is saying that the problems are procedural (how do payouts happen, does the agreement indemnify Anthropic from civil “double jeopardy”, etc), not that he’s rejecting the negotiated payout. Definitely not a lawyer but it seems to me like the negotiators could address the rejection without changing any dollar numbers.
by dingnuts | 2025-09-09 23:37:04+00:00
What you're describing is not vibe coding. I realize some people call anything with an LLM generating code "vibe coding" but it's not and I'm going to die on this hill.

1 it's not the meaning Karpathy used originally, which was for creating software through prompts WITHOUT looking at the source code

2 it's not the meaning people outside programming circles mean, either, which is identical to Karpathy's original definition

the title of the article is talking about 2 and is completely correct.

YOU, on the other hand, are talking about an upgrade to IntelliSense. Use a different term. You're describing regular programming, with a new IDE tool.

If it's not going to replace programmers and allow regular people to create software without looking at the code, it's not vibe coding. Full stop.
by dmitrygr | 2025-09-09 23:38:01+00:00
Come join GM (formerly Cruise) ADAS org. We are hiring. Work is pretty cool at every level from kernel and drivers to userspace linux to frameworks, to ML. And, as long as you are >50 mi from detroit, you are going to be fully remote. Pay is good. People are good.

Jobs are posted on GM's jobs site, or reach out to me, if you'd like, and i'll connect you to the right people.
by Maxforever | 2025-09-09 23:39:19+00:00
Nano Banana is an AI image generator powered by Google's Gemini 2.5 Flash Image technology, specializing in identity-consistent editing that maintains character and object consistency across transformations. It offers multi-image blending capabilities, natural language-guided local edits, and both text-to-image and image-to-image generation modes. Users can seamlessly blend up to 9 reference images or generate entirely new content from text descriptions. All generated images include SynthID watermarking for transparent AI content identification and come with full commercial usage rights. With flexible pricing plans and an intuitive interface, Nano Banana makes professional-quality AI image generation accessible for creators and businesses alike.
by fragmede | 2025-09-09 23:39:46+00:00
fewer steps, actually. as a user, you reach into your backpack pull out the battery pack, and put it on phone, check that it's charging, and then move on with your life. Replaceable battery, there's the extra steps of powering it off, opening up the case, taking out the old battery, putting in the new battery, closing the case, powering it on, waiting for it to boot up. So many extra steps!
by stanfordkid | 2025-09-09 23:40:45+00:00
To further explain:

No, they didn't build iPhones to be beautiful because they would sell more, they did because they wanted to.

Ferrari didn't design sports cars because he wanted to sell the most cars. Armani doesn't design the most profitable suits. It's all completely absurd to say the point of "a firm" is to "maximize shareholder value". It's just so utterly stupid and inane... like... what about time horizon? At what level of variance? Its a lot like an unfalsifiable claim. You could say anything and say "well it maximizes shareholder value according to me"
by choilive | 2025-09-09 23:40:49+00:00
While promising, be VERY skeptical about efficacy claims of these early stage research drugs.

Tons of drugs in the pipeline that goes after these promising receptor targets. PD-1/PD-L1, CD47, CD40 (as mentioned in the article) etc. Keytruda (PD-1) is an incredible success both clinically and commercially, but there are many many other drugs buried in the clinical trial cemetery that initially showed promising results.

Medicine is really hard.
by monkpit | 2025-09-09 23:41:02+00:00
This article makes one faulty assumption that I think is really common - the author says it could be much worse, which implicitly assumes that we have noticed and caught every other time something like this has happened.

Internally, we only noticed this because it caused a bunch of random junk to get barfed out into some CI logs.

You really can’t say that nobody has ever done this better. Maybe they just did it so well that nobody noticed.
by MBCook | 2025-09-09 23:41:04+00:00
You’re on the right track, I think. The mastodon link posted in a sibling comment within a minute of yours provides more details:

It sounds like the kernel’s allocations may only use one tag(?). So if you get in there, jackpot right? No tags to deal with.

So they’re using special compiler flags to limit all offsets to less than 4 GB. Then they placed different parts of the kernel far apart in address space with a 4 GB unmapped zone.

So if you can put your own pointer somewhere that’s exploitable in allocated kernel memory, there is no way for it to point to any other “part” of kernel memory. Only within that one “area”.

Presumably this would mean that exploiting a problem in the graphics drivers would not make it possible to provide a pointer pointing to the Secure Enclave interface code. Or something like that.

I’m not 100% on if I’m understanding it correctly.
by chrisco255 | 2025-09-09 23:41:27+00:00
I'm sorry but some F rated schools getting closed down needed to happen. There are institutions either so toxic at the administrative level or so heavily populated with kids with behavioral issues that it's impossible to fix without divvying up the student population into other schools that can better handle the load.

NCLB had some flaws but that wasn't one of them. Before NCLB you were stuck in the poor school district your likely single parent could afford to live in, inevitably doomed to poor education.
by typewithrhythm | 2025-09-09 23:41:40+00:00
I'm not sure if it actually is working out, or if the companies outsourcing are just absorbing the inefficiency.

Every outsourcing effort I have seen at some of these massive companies has been pretty tragic, where the best that can be said is now there is a shit but cheap option to be used where the quality doesn't matter.

This gets repeated across all the entrenched players simultaneously, while the product quality stagnates or declines (but the stock goes up).
by miladyincontrol | 2025-09-09 23:43:58+00:00
You mean to say some basic company site, blog or photo gallery that only gets updated once/twice a month, with zero dynamic content otherwise doesnt need a whole LAMP stack?

Honestly though with GH/CF pages type hosting and how simple static sites can be its a direction I'm ever thankful things have been moving. Just seems so much less painful for those who arent here to be security experts and just want a bloody site that 'just works'
by dmayle | 2025-09-09 23:44:01+00:00
I am truly shocked by this.

I looked it up, and it turns out you're right. Both the iPhone 17 and the iPhone Air use USB2.

USB3 was introduced in 2008 (!!!). That is 17 years ago.

I already wasn't interested in this tech, to be fair, but I've had to support family phones synchronizing/backing up over the cable, and even at full theoretical speed for the transfer, we're talking over an hour vs just under 7 minutes. Which, considering the flash most likely suppports the read in under a minute, is crazy.
by taway1874 | 2025-09-09 23:44:12+00:00
"We've had bathroom scales for over a century, yet as a society, we are more obese than ever."

Exactly! Couple decades ago they blamed human stupidity on lack of information. Look at us now with all the data available at our fingertips. We are so well informed that we should be better humans but we aren't.

Coming back to the Apple Watch (and alternatives) perhaps what we need along with all these "insights" are a shock collar (yes, like the one for a dog) that serves as a motivation to get off one's ass and get in to better shape. I'll bet that'll sell like hotcakes /s
by guelo | 2025-09-09 23:44:44+00:00
They're not even a "folder that syncs" anymore, at least on android if you make a folder "available offline" (which should be the default to begin with) it stores it internally to the dropbox app where it can't be accessed by other apps. There is another button "Save to device", but that's just a one-time snapshot of the file that won't stay in sync. I deleted my account after they pulled that enshitification.
by estimator7292 | 2025-09-09 23:45:03+00:00
I'll post this every time mastodon comes up: to compare mastodon to Twitter, Facebook, bsky, etc. is fallacious in the extreme. Saying that mastodon is "losing" to bluesky is a complete non-sequitur.

Mastodon hasn't lost to these other services because they aren't competing. Nobody on mastodon actually wants to replace Twitter. Mastodon exists explicitly as a rejection of mainstream social media. Calling this "losing" is like saying that a bunch of kids playing basketball in the street are "losing" to pro hockey teams. Not the same game, not the same scale, the only similarity is that they're both playing a sport.

Mastodon doesn't want to compete. That's totally counter to the entire philosophy. Mastodon isn't even remotely playing the same game as twitter and Facebook. It just so happens that mastodon has a text box with limited characters. That's it, that's the only similarity.

Of course a chess club of 10 year olds in Japan isn't going to "win" and displace the entire American baseball league. You'd be laughed down for even suggesting that. And yet, people think that mastodon is "losing".

Mastodon is exactly where it wants to be. The small scale and diffusion are features, not bugs.

Besides that, it's functionally impossible for "mastodon" to go mainstream. To suggest that is a fundamental misunderstanding of what mastodon is, how it works, and how the people involved run it. At absolute most, you could get a few big servers to go 'mainstream'.

When a server gets too big or too popular, the network treats it as damage and routes around. A lot of admins do this purely on principle: huge servers are antithetical to the philosophy and actively bad for the network. The rest block them because the vast majority of attacks and spam originate from such servers.

If mastodon went mainstream, the network would fracture (again) and the majority of nodes would re-form the network in the obscurity they enjoy and value.

This is all extremely intentional and deliberate. Mastodon is an explicit rejection of all the things you think it's "losing" at. Mastodon doesn't want to "win", they largely want to be left alone to continue enjoying a small internet with limited connections.

Mastodon has won its own game. It's firmly established itself in a niche, and is not going to move from that niche to chase fads, engagement, metrics, profit. Mastodon wants to be exactly what it is because mainstream social media is a very bad thing
by captainkrtek | 2025-09-09 23:45:34+00:00
I think this is spot on and aligns with my experience.

I've seen less experienced devs crash and burn trying to commit massive amounts of vibe coded slop without consideration to: how much of it was necessary? how does it conform with our code base / style? how much does it take advantage of existing code and patterns? and so on.

I think if you are using one of these tools and experienced, it should be difficult to tell you are using one at all. The code I produce looks like stuff I would write, and I understand all it wrote, I don't want to outsource to producing tons of code that I don't even understand.
by steveBK123 | 2025-09-09 23:46:00+00:00
My friend is CTO of a smaller company say ~250 people, and RTO constantly comes up in the C-suite.

He is only able to fend it off by pointing out that they do not pay as well as their larger competitors, so the remote flexibility is a recruiting advantage.

He describes the push for RTO from the rest of the C-suite as basically a combination of unspecific vibes that it must be bad if employees like it, and of course.. because they can. Just like many rules at companies.

Likewise many companies in my slice of the industry point to one of the big leaders RTO policies as the reason to do the same, as a sort of cargo cult. However, what the big leader actually does that differentiates is paying 30% premium to have their pick of talent at every level of the org.
by MBCook | 2025-09-09 23:46:23+00:00
Personally I had no idea anyone had shipped this. I knew that MTE existed, though I don’t think I knew about EMTE.

Nice to hear it’s already in use in some forms.

And of course it seems pretty obvious that if this is in the new iPhones it’s going to be in the M5 or M6 chips.
by JimDabell | 2025-09-09 23:46:35+00:00
Amen. The difference is vast when it comes to discussions like this.

If you’re talking about AI-assisted development, then an AI agent being able to do 80% of the work is a fantastic win. The developer can pick up the remaining 20% and come out massively ahead.

If you’re talking about vibe-coding, then an AI agent being able to do 80% of the work is useless. What’s a non-developer going to do with something that still has 20% of the development left to do? It’s not 80% useful, it’s 0% useful.
by exmadscientist | 2025-09-09 23:46:39+00:00
I did not say "Intel is so good". I said "x86 peak single-thread performance is just a hair better than Apple M-series peak".

Pretty much everything else about the M-series parts is better. In particular, Apple's uncore is amazing (partly because it's a lot newer design) and you really notice that in terms of power management.
by _mu | 2025-09-09 23:47:05+00:00
> But I’ve seen enough repos that I know what good practices look like.

This is the danger - I get why you think it's true, but it's not true. I've mentored many many bootcamp grads. The biggest danger with y'all is you don't know what you don't know.

Even if you are a really good bootcamp grad and you have good taste and ability, you do not have experience. Software experience is measured really in years and decades, not months.
by consumer451 | 2025-09-09 23:47:39+00:00
I used Vercel's ai sdk like everyone else, to try to stay agnostic. However, when I am actually working on a feature that uses an LLM API call, I find that each prompt might need tweaking specific to that model to get great results. That means if I switched models for that feature, I would likely have to that redo the prompting. Or, am I doing this all wrong?
by wallopinski | 2025-09-09 23:48:07+00:00
2004 me and my friends: "I don't want all my public information online."

GenZ; publishes every possible detail on TikTok.

In 20 years we've done a cultural 180 on privacy.

I bet in 20 years Gen5 (three generations from now?) will be fine with AI agents running their lives.

Meanwhile I'll be 80 and still not on social media, just message boards like HN. Using new frequent accounts and changing my wirting style to defeat stylometrics (sorry dang).
by artursapek | 2025-09-09 23:48:43+00:00
This has been my experience. I only have 12 years under my belt, but I've had a lot of good results using Claude Code/Cursor agent since this May. You have to know what questions to ask, how to mold the requirements with the agent, what to tell it to do. I treat it like an employee I'm pairing with. My productivity is at a new level.
by autoexec | 2025-09-09 23:48:52+00:00
Everyone should give up custody of their children to the state. Refusal to give your children to the state is a sign of insecurity and the lack of the ability to just trust and let go of control.

You should really just give up all of your freedom. Refusal to give up your freedom is a sign of insecurity and the lack of the ability to just trust and let go of control.
by johnnyanmac | 2025-09-09 23:49:04+00:00
I don't see "senior vibe coder" going in any way that doesn't end in constant forest fires that they try to put out with a flamethrower. This happens even with seasoned engineers. Unicorn hunting for the exceptions will be every bit as infeasible in 2045 as it was in 2005.

> You just hire domain experts and give them the AI hoping the domain expertise is all you need to get you through the day.

what domain experts? Clearly they are trying to replace everyone with AI. That's the unsettling part of the whole story; this phenomenon is happening across many sectors who want to try and skimp out on talent.
by skissane | 2025-09-09 23:49:23+00:00
> I can think of like 3 institutions that have reporters who would ask that kind of question (The Register, Ars Technica and 404media) and I don't think Musk is going to be sitting across the table from any of them, ever.

Ars Technica’s space editor, Eric Berger, interviewed Musk only a few months back: https://arstechnica.com/space/2025/05/elon-musk-turns-his-fo...
by pixl97 | 2025-09-09 23:50:00+00:00
>That kind of standing up my own little server and running it myself while being accessible over the broader web feels decentralized.

I mean that is how the internet used to work.

>I can put whatever I want.

Then I make a series of false reports and copyright claims and your ISP boots you.

>anyone can access it.

Anyone can DDOS it, forcing you behind a centralized system like cloudflare.

The internet has turned into a dark forest. Standing out and saying something controversial will ensure something shows up to eat you.