MurphyA/hacker-news huggingface dataset:
by cubefox | 2025-09-30 10:25:13+00:00
That requires a GitHub account, which most readers on most blogs won't have. Moreover, I'm pretty sure most people (>50%) who would have commented, probably won't do it if it requires creating an account for an external service first.

Maybe anonymous commenting by just solving some captcha is impossible nowadays because in practice all captchas get broken by spam bots immediately. Or maybe not. I would like to see evidence for that first before giving up and choosing a commenting solution which strictly requires an account.
by sixtram | 2025-09-30 10:26:00+00:00
Just two days ago, I asked ChatGPT to provide an explanation of the place-value system that my six-year-old could understand. The only problem was that it mixed up digit value and place value, which caused it to become confused. I spotted the mistake, and ChatGPT apologised, as it usually does. But if my six-year-old had asked it first, she wouldn't have noticed.

I'm not sure how much misinformation my child would learn as truth from this device.
by agentcoops | 2025-09-30 10:26:29+00:00
I think this interpretation of the data rests on a misunderstanding of how a firm conceives of headcount. You saw this a lot during Covid layoffs when the press tried to point out the contradiction between hiring X number of people at the same time as firing Y number of people. Wasn't the firm just staying in place? Yet, in fact, the firm had planned to hire Z people that year, a number much greater than X, greater still than X+Y, and likely greater than Z_t-1, i.e. the number hired the previous year.

A firm's headcount is a dynamic value that is reflective of a rate of growth: its headcount is going up by x% each year, ideally linear growth or at least not a higher rate of growth than revenues or free cash flow. It requires an accounting perspective on the inflows and outflows of an ongoing process and not just a small slice of data. If you just look at that firm's hiring and firing in a particular year, subtracting the one from the other, you would appear to have shown that the firm was more or less simply replacing the other with the one. Yet, the main question for actually measuring the (firm and investor expected) impact of AI is whether that rate of headcount growth has changed without the stock price going down. That is, is it now proposed by management and accepted by investors that the firm will henceforth require less human labor in order to deliver on the present expected value of future free cash flow. You cannot infer anything about this question from the data shown.

There certainly is a separate question of whether a firm has changed its source of new hires, but that also isn't reflected in the data, which just shows approved visas against layoffs. For this, you would need to look at net hires year after year and prove that a growing percent thereof are H1-Bs.
by toolazytologin | 2025-09-30 10:26:53+00:00
> It seems you are trying to say "You're not welcome here!" to people who already declined an invite?

These things are not mutually exclusive.

If you don’t want to abide by the rules, you are not welcome and you should decline. Perhaps the organizer isn’t aware of your preference and your declining helps inform them. If they prefer your presence more than they like their silly rules, they might change them.

Deciding to attend a social gathering where you intentionally ignore the rules that you don’t like is narcissistic and rude behavior.
by bilekas | 2025-09-30 10:26:56+00:00
It's disgusting what the internet has become, in this case it's even more egregious that the author as far as I see isn't even making any commission off of these ads, not that that would justify it. And then you have companies like Google who will punish you intentionally for using tools to reduce the amount of spam you're exposed to on your own device.

We need a better model of financially supporting websites and services, not all companies are simply greedy, there are bills to pay, but it's gotten ridiculous.
by Cook4986 | 2025-09-30 10:27:05+00:00
“Autotomb” identifies physical objects/artifacts/specimens mentioned in Egyptological (e.g., Giza) excavation diaries then generates (Meshy) 3D model sets based on those descriptions which are deployed in in virtual reality (AFrame). The output is like an immersive word cloud but the words are 3D objects and you can navigate the scene with your body. Still early days but the desktop pipeline is functional: https://github.com/Cook4986/AutoTomb
by whizzter | 2025-09-30 10:28:36+00:00
Not trying to mock here, but did you program assembly in the 80s/90s and/or look at compilers involved with CPU's of comparable complexity to the 68000 series or older?

Yes, relative addressing on older machines like that does hurt a ton (I was coding a jam-game of the GameBoy recently and had to re-orient some of my code away from stack-usage since I've gotten a tad "lazy" over the years and didn't care to program 100% assembly).

On modern machines (since circa Pentium generation CPU's) that can do one cycle-multiplications memory-offset accesses are often irrelevant for the performance of access operations.

More importantly, at about 500mhz-1ghz the sheer latency of main-memory accesses vs cached accesses will start to become your main worry since cache-misses start to approach _hundreds of cycles_ (this is why we have the entire data-oriented-design philosophy growing), while on the other hand the modern CPU's can pipeline many instructions to even make the impact of bounds checks more or less insignificant compared cache misses.
by Pooge | 2025-09-30 10:28:38+00:00
It tastes bland because our taste buds have adjusted to our salt consumption. I eat with no added salt and my food tastes just fine since I adapted.

Over-salting is one of the causes of the most common way of dying. I couldn't say for sure because I don't go to restaurants a lot anymore, but it's not rare to see people salting their dishes without even tasting them beforehand.
by mort96 | 2025-09-30 10:28:39+00:00
I know all that already and none of it goes against what I said, so why the antagonistic tone?

I do think that Kenton shares some of the blame by making their new JSON-based schemaless RPC system so similarly named to their old binary schema-based serialization format... I don't get the reasoning there. But that doesn't change what I said.
by latexr | 2025-09-30 10:28:54+00:00
I understand that. Over the years I’ve sent several GDPR requests for my data and its deletion, and I always remind the service in the very first message that the law requires a response within thirty days. But I also know that a failure to comply is very hard to fight. These companies avoid the law for as long as they can.

> the author should file a complaint with the Irish DPA

Good luck with that. If you follow the work done by noyb, what you quickly learn is the Irish DPA loves US companies and giving them a pass. They actively defend them. The new Irish DPC commissioner is a former Meta lobbyist.

https://noyb.eu/en/former-meta-lobbyist-named-dpc-commission...
by loloquwowndueo | 2025-09-30 10:29:14+00:00
I’m in the process of converting a Wordpress blog to a static site. We did have significant comment traffic back in the day so I did look into how to maintain comment functionality. I found Comentario https://docs.comentario.app/en/ which is a standalone comments engine that can be self-hosted and linked to the blog page. Single stand alone Go executable, SQLite database - seems dead simple and has built-in ways to migrate Wordpress comments.

Still, since we do not get that many comments these days, I’ll probably postpone it and just provide a static render of existing / historical comments which does have value for archival and discussion purposes.
by monadoid | 2025-09-30 10:29:40+00:00
Despite everyone hating on the AI slop (I myself hate AI slop), I am excited about cap'n web and am jonesing to try it out in rust so I will take a look!

I'd love to see (might try to add on) an optional type layer: define contracts as json schema or JTD or something? Does something like this already exist - maybe you could use protobufs ontop of this? Would be nice to make it so that you didn't need to share types between client / server out of band, something like an openapi spec allows all clients (not just those you are in control of) to have types!
by krapp | 2025-09-30 10:29:46+00:00
Unless you're famous enough that everything you post gets to the top of Google, no one will read your content unless you post it to a social media platform with a curated audience. Literally no one but bots and AI crawlers. I mean, you have a whole list of crossposting links at the bottom of your own blog posts, including to HN and Mastodon, so you clearly understand. You wouldn't lose anything by limiting comments to just those curated social media platforms except spam and bots.
by ksec | 2025-09-30 10:29:56+00:00
If EUPL is the GPL v3 for EU, is there similar one for MIT/ BSD / Apache ?

I think I asked a question about this 10 years ago on HN about MIT / BSD like license that is worldwide accepted, I thought it was Public Domain. Turns out the concept of Public Domain isn't universal. I remember it was Germany or some other EU countries that doesn't have it.

But if GPL / MIT / BSD have been widely accepted for 20+ years worldwide now and counting. Why do we need another one?
by notRobot | 2025-09-30 10:30:00+00:00
This has disadvantages though! Often the threads on sites like HN/reddit get "archived" or lose traction and you cannot join the discussion if you don't happen to discover the article in the first few days of it getting published.

In blogs people can come along anytime and use comments to add additional information/context/perspectives, point out misunderstandings or outdated information, share updates, pose questions and start interesting conversations that do not have an expiration date on them.

The discussion for the article can be found on the same webpage by readers, they don't have to go looking on external sites, most of which have terrible searchability and now require logins just to view content and can delete threads and valuable discussions arbitrarily.

I just realised while writing this comment how much I miss web comment culture from the 00s.
by citrin_ru | 2025-09-30 10:30:39+00:00
> They probably cost similar or less than BMC cards on a per-port basis

If you build own servers that's an option to consider but most off-the-shelf servers are sold with BMC (so you pay for it even if don't want it). May be some low end brands sell servers without BMC but if you are looking for relatively reliable hardware you'll likely get a server with BMC.
by mschuster91 | 2025-09-30 10:30:56+00:00
> Social media ruined that. Everyone is now on their own soap box posting comments of drivel from their sub-optimal self-conscious parroting asinine talking points about how one characterized group of statistics ruined it for everyone else.

Partially agree, partially disagree. Blog comments were already dead when SEO fraudsters discovered that "linkbacks" could be abused for spam even easier than comments were.
by shakna | 2025-09-30 10:31:10+00:00
It's usually only reasonable to ask for a government ID, where you have already verified that in the past. Asking for it is discouraged - as that's you now handling sensitive information you should not store.

You can only use what you know of the client, to verify their request.

Proof of control of the only identity you have, tends to be "fair and reasonable".
by supermatt | 2025-09-30 10:31:23+00:00
Being an economic powerhouse doesn't mean being visible on shop shelves.

In Europe you very rarely see consumer goods labelled "Made in USA" (although we will frequently see products that are "Made in India"), yet the US is still an economic powerhouse because its strengths are in services, tech, finance, aerospace, and defence rather than mass-market manufacturing.

India is similar with most of its global impact through IT, software, generic pharmaceuticals, and space tech. Its the 4th largest economy in the world, and among the fastest growing - potentially surpassing Germany for 3rd place by 2030.

India is also the 2nd largest exporter of food in the world, and among the largest textile exporters (clothing, etc) - but for some reason you wanted to exclude commodities.
by sigi64 | 2025-09-30 10:31:55+00:00
Introducing My Latest Project: An AI Interview Assistant for Job Seekers

So, I've been working on something... interesting. It's an AI assistant that can actually represent candidates in the first round of job interviews. Yes, you read that right—because apparently, we've collectively decided that showing up to your own job interview is so last decade.

Here's how this magnificent creation works: The system ingests everything about a candidate—CV, professional experience, cover letter, LinkedIn, GitHub, portfolio, and any preferences they've specified (salary expectations, location, contract type, the usual existential career questions). Then, armed with this treasure trove of personal data, my AI conducts automated interviews directly with HR departments or their equally soulless chatbots.

In real-time, it generates responses as if the candidate themselves were speaking—complete with soft skills, communication style, and structured answers. Because nothing screams "hire me" like algorithmic authenticity. If it encounters a question beyond its training data, it politely pings the candidate: "Hey, need some input here before I completely botch your career opportunity."

What this technological marvel offers: 24/7 Availability – Candidates can "attend" interviews while sleeping, working their current job, or contemplating the futility of modern employment practices. The AI never sleeps, never complains, never has a bad day.

Personalization – Responses tailored to each candidate's actual experience and skills. It's them, just... optimized. Debugged. Free of human error like nervousness or accidentally mentioning you follow your passion for underwater basket weaving.

Performance Analytics – Post-interview analysis of how well the candidate matched job requirements. Because self-awareness is overrated—let the machine tell you how you did.

Training Mode – Candidates can practice various interview scenarios and get feedback. Think of it as rehearsing for the day when neither interviewer nor interviewee is actually human anymore.

And yes, the circle closes beautifully.

I'm building a system where AI talks to AI about human employment while humans... what? Watch Netflix? It's efficient. It's scalable.

It's absolutely ridiculous when you think about it for more than thirty seconds.

But hey, if companies are going to screen candidates with automated systems and generic chatbots, why shouldn't candidates fight fire with fire?

Welcome to the employment arms race nobody asked for. I'm either solving a real problem or hastening our irrelevance. Probably both.
Show HN: Snmp-Browser – open-source cross-platform SNMP GUI tool (Python)
by justvugg | 2025-09-30 10:33:06+00:00
Hi HN,

I’d like to share Snmp‑Browser, an open-source SNMP browser and monitor tool built in Python. It’s designed to be simple, cross-platform, and powerful enough for network engineers, sysadmins, and curious devs.

Key Features: - SNMP v1/v2c/v3 support (with encryption/auth) - Tabbed GUI (Tkinter) for browsing devices and OIDs - SNMP Trap Manager (receive/send traps in real time) - Performance monitoring (query times, graphs) - Device discovery and MIB browsing - Batch querying, CSV/JSON/XML export - Load custom/vendor MIBs - Cross-platform: Windows and Linux (packaged with PyInstaller)

Why it exists: Most SNMP tools are either outdated or CLI-only. Snmp-Browser offers a more user-friendly and unified experience for managing SNMP-enabled devices — without needing a full NMS stack.

Use cases: - Network monitoring in labs, small/medium infra - Trap testing and OID exploration - Learning SNMP protocols and MIB structures - Supplementing existing NMS tools with quick GUI queries

Roadmap ideas: - Visual dashboards and custom alerts - Plugin system - Auto MIB download / indexing - Web interface version - Alert integrations (Slack/email)

Feedback, feature requests, or contributions are all welcome! GitHub: https://github.com/snmpware/Snmp-Browser

Thanks!
by physicsguy | 2025-09-30 10:33:16+00:00
> The other limits—involving the king or the courts—are theoretical and, if asserted, would cause their own political crises.

Part of the issue we're in such a political crisis at the moment is the growth and expansion of the court system to block things that politicians try to do. Just to give an example - the European Court of Human Rights has dramatically expanded through case law the Article 3 from a clause intended deliberately to protect people within their own state from inhumane treatment e.g. torture, indefinite imprisonment, to an absolute clause that blocks extradition or deportation of anyone if they're deemed to be at risk in the country they'd be removed to. This was explicitly rejected by the drafting states. The ECHR claimed not to apply to immigration or deportation decisions, and it was only in the late 80s with this case that they changed their position on that with the decision in Soering v United Kingdom (https://en.wikipedia.org/wiki/Soering_v_United_Kingdom). Prior to this they declined to intervene in cases like this. Whether or not you agree with this, it's my view that it is up to politicians to decide on the law that applies to a country, and it's judicial overreach to expand it. Aside from this, people see problems that they think the politicians should be fixing and the country has sleepwalked into a position where these powers have been delegated to unelected bodies (NHS England being at arms-length from the Health Secretary even though people view this as the government's problem to fix, leading to current government abolishing NHS England entirely to try and take control again) and even totally unaccountable private organisations ("can't disclose due to commercial sensitivity" is commonly trotted out in Freedom of Information requests to avoid embarrassing private companies operating public services).

> But there are practical things which could be done by means of constitutional reforms that would not be easy for an incoming illiberal and radical government to undo, at least not quickly. There could be fundamental reform of the House of Lords to extinguish prime ministerial patronage. The Royal Prerogative could be placed on an entirely statutory basis.

The problem is that mucking about with this and putting it on statutory basis is that that can be changed by an Act of Parliament trivially - no Parliament is legally able to bind it's successors. Look for e.g. at the Coalition - they legislated that Parliament would have fixed terms of 5 years in the Fixed Term Parliaments Act, and then the Dissolution and Calling of Parliament Act 2022 was later passed and everything reverted to the old system.
by 76SlashDolphin | 2025-09-30 10:33:25+00:00
Me and a few friends are working on a firewall for LLM clients that blocks the lethal trifecta: https://github.com/Edison-Watch/open-edison

The way it works is the user registers / imports MCP (Model Context Protocol) servers they would like to use. All the tools of those servers are imported and then the firewall uses structured LLM calls to decide what types of action the tool performs among:

- read private data (e.g. read a local file or read your emails)

- perform an activity on your behalf (e.g. send an email or update a calendar invite)

- read public data (e.g. search the web)

The idea is that if all 3 types of tool calls are performed in a single context session, the LLM is vulnerable to jailbreak attacks (e.g. reads personal data -> reads poisoned public data with malicious instructions -> LLM gets tricked and posts personal data).

Once all the tools are classified the user can go inside and make any adjustments and then they are given the option to set up the gateway as an MCP server in their LLM client of choice. For each LLM session the gateway keeps track of all tool calls and, in particular, which action types are raised in the session. If a tool call is attempted that raises all action types for a session, it gets blocked and the user gets a notification, which sends them to the firewall UI where they can see the offending tool calls, and decide to either block the most recent one or add the triggering "set" to an allowlist.

Next steps are transitioning from the web UI for the product to a desktop app with a much cleaner and more streamlined UI. We're still working on improving the UX but the backend is solid and we would really like to get some more feedback for it.
by mcny | 2025-09-30 10:33:35+00:00
Thank you! I don't know how or why this works but on my computer, turns out I can skip the square brackets which I tried out after seeing your answer.

#let csharp = "C#"

for some reason this works and does not throw an error. so now I can use it like

== Technical Skills - *Languages:* #csharp, JavaScript, TypeScript, Python, SQL, Ruby, Java, Kotlin, Rust, Go, PHP
by kokada | 2025-09-30 10:33:55+00:00
> in this case it's even more egregious that the author as far as I see isn't even making any commission off of these ads

Yes. I think Disqus is trying to get money from the long tail of blogs that enabled Disqus in the past and never bothered to look up for the policy changes. I am sure they started with small, non-invasive ads and eventually got bigger until we get in the situation that we are today.

So even if someone enabled Disqus in the past because they seemed a reasonable system a few years ago, their blogs are now an ad farm and the original owner may have zero idea since it is a blog they abandoned years ago. Heck, my old Wordpress blog that I don't even remember the password is probably an ad field nowadays that is probably generating pennies for one of those companies.
by mschuster91 | 2025-09-30 10:33:55+00:00
> Hey, when somebody sends you an email asking for personal data, how do you verify that the person making the request is the same as the person who uses the email.

By the time someone has access to an email account, they could just reset the password and access the data anyway, no loss of trust.

> Is the email "From" field safe to trust? Can it be spoofed?

If it matches the account email address, send the response to that email. A simple spoof will only lead to the user getting a "your gdpr export is ready" but the attacker can't get to the data.
by paul_manias | 2025-09-30 10:33:59+00:00
Partially, but I think it's moreso the W3C spec being so thorough and the wealth of samples online. I found that during code review both Codex and Claude would refer back to the specs for certainty on expected outcomes. Their understanding of how to deal with unusual edge cases was also impressive, so it seems they have a lot of baked in knowledge & training of how XPath works and they draw from that.
by ACCount37 | 2025-09-30 10:35:22+00:00
Back in 2022, when ChatGPT was new, quite a few people were saying "LLMs are inherently safe because they can't do anything other than write text". Some must have even believed what they were saying.

Clearly not. Just put an LLM into some basic scaffolding and you get an agent. And as capabilities of those AI agents grow, so would the degree of autonomy people tend to give them.