MurphyA/hacker-news huggingface dataset:
by toast0 | 2025-09-08 18:12:39+00:00
I think the fundamental difference between an Apple CPU and an Intel/AMD CPU is Apple does not play in the megahertz war. The Apple M1 chip, launched in 2020 clocks at 3.2GHz; Intel and AMD can't sell a flagship mobile processor that clocks that low. Zen+ mobile Ryzen 7s released Jan 2019 have a boost clock of 4 GHz (ex: 3750H, 3700U); mobile Zen2 from Mar 2020 clock even higher (ex: 4900H at 4.4, 4800H at 4.2). Intel Tiger Lake was hitting 4.7 Ghz in 2020 (ex: 1165G7).

If you don't care to clock that high, you can reduce space and power requirements at all clocks; AMD does that for the Zen4c and Zen5c cores, but they don't (currently) ship an all compact core mobile processor. Apple can sell a premium branded CPU where there's no option to burn a lot of power to get a little faster; but AMD and Intel just can't, people may say they want efficiency, but having higher clocks is what makes an x86 processor premium.

In addition to the basic efficiency improvements you get by having a clock limit, Apple also utilizes wider execution; they can run more things in parallel, this is enabled to some degree by the lower clock rates, but also by the commitment to higher memory bandwidth via on package memory; being able to count on higher bandwidth means you can expect to have more operations that are waiting on execution rather than waiting on memory, so wider execution has more benefits. IIRC, Intel released some chips with on package memory, but they can't easily just drop in a couple more integer units onto an existing core.

The weaker memory model of ARM does help as well. The M series chips have a much wider out of order window, because they don't need to spend as much effort on ordering constraints (except when running in the x86 support mode); this also helps justify wider execution, because they can keep those units busy.

I think these three things are listed in order of impact, but I'm just an armchair computer architecture philosopher.
Ask HN: How can we make the Asana API and integrations platform better?
by pspeter3 | 2025-09-08 18:12:49+00:00
I’m Phips Peter, a tech lead at Asana. I’m exploring how we can improve our API and integration platform and I’d like to hear your thoughts.

If you’ve built on Asana, what worked or didn’t? If you haven’t, what would make you consider it?

I’m also interested in ways Asana could be more useful in development workflows generally.

Thanks in advance for any feedback.

https://developers.asana.com/docs/app-components
by ryandrake | 2025-09-08 18:12:51+00:00
The inability to use force doesn't make corporate power any less powerful--it only makes it a different kind of power. Yes, BigTech cannot arrest me or throw me in jail, but that doesn't mean that they don't wield other kinds of enormous power over my day-to-day life.

And unlike my (technically democratically elected government), corporations do not have to answer to the people they exert their power over.
by minifyre | 2025-09-08 18:12:55+00:00
Location: St. Louis, MO (United States) Remote: Yes Willing to relocate: No Technologies: TypeScript, React, Node.js, CSS, AWS, SQL, MongoDB, UI/UX, Accessibility, and More Résumé/CV: Available Upon Request Email: contact@fauxsaur.us Portfolio: https://fauxsaurus.github.io/portfolio/

I’m a Software Engineer with 15 years of experience in the industry, and my goal is to improve people’s lives by developing products and processes that empower them to be more effective and efficient. I strive to collaborate with end users to ensure that the things we create: help instead of hinder; save time instead of wasting it; and most importantly, that they meet both the technical requirements and people’s needs. To that end, I have done full stack work primarily focused on the frontend and automation. I am currently learning Python to dive more deeply into AI, and am interested in full-time positions.

P.S. Thank you for reading this far. I hope that you have a wonderful rest of your day!
by slg | 2025-09-08 18:12:59+00:00
Fair enough, but you only gave examples without addressing the root of my question. What evidence is there that these aren't business strategies? How do we know these companies aren't just getting a nice press release in exchange for releasing a relatively low value patent or hoping to benefit long term when their technology becomes the industry standard? Is there actually evidence that these innovations would have been incredibly valuable to these companies if kept private but are instead being given away for the betterment of humanity? Because the original point wasn't that companies can never do anything good. It is that when given a choice between the betterment of humanity and profit, they almost always choose profit.
by sfink | 2025-09-08 18:13:49+00:00
I have mixed feelings about AI, but love the posts and papers that dig into how they work. Except, as this post shows, I seem to vastly prefer Anthropic's posts to OpenAI's.

> Claim: Hallucinations are inevitable.

> Finding: They are not, because language models can abstain when uncertain.

Please go back to your marketing cave. "Claim: You'll get wet if it rains. Finding: You will not, because you can check the weather report and get inside before it starts raining."

Sure, language models could abstain when uncertain. That would remove some hallucinations [a word which here means, make statements that are factually untrue. Never mind that that's often what we want them to do.] Or when certain about something that their training data is flawed or incomplete about. Or when certain about something but introspection shows that the chain of activations goes through territory that often produces hallucinations. Or when certain about something that is subjective.

"Uncertainty" is a loaded term; these things don't think in the way that the definition of the word "certain" is based on, since it's based on human thought. But that aside, LLM uncertainty is very obviously a promising signal to take into account, and it's interesting to see what costs and benefits that has. But eliminating one cause does not prove that there are no other causes, nor does it address the collateral damage.

"Write me a story about Bill."

"I'm sorry Dave, Bill is hypothetical and everything I could say about him would be a hallucination."

"Write a comment for the function `add(a, b) = a + b`."

"// This function takes two numbers and adds them toget... I'm sorry Dave, I don't know how many bits these numbers are, what the behavior on overflow is, or whether to include the results of extreme voltage fluctuations. As a result, I can't produce a comment that would be true in all circumstances and therefore any comment I write could be construed as a hallucination."
by acegopher | 2025-09-08 18:14:13+00:00
We started with a Betamax player. I think one underappreciated reason for VHS's win was that you could put a movie on one VHS tape, whereas the Betamax required two (at least at the time it mattered). And in an era of movie rental stores, that made a difference. Both in terms of logistics, but also in terms of the consumer having to load a new tape halfway through a movie.
by totallymike | 2025-09-08 18:14:50+00:00
Citations eight and nine amuse me.

I readily and merrily agree with the articles that deriving slurs from existing racist or homophobic slurs is a problem, and the use of these terms in fashions that mirror actual racial stereotypes (e.g. "clanka") is pretty gross.

That said, I think that asking people to treat ChatGPT with "kindness and respect" is patently embarrassing. We don't ask people to be nice to their phone's autocorrect, or to Siri, or to the forks in their silverware drawer, because that's stupid.

ChatGPT deserves no more or less empathy than a fork does, and asking for such makes about as much sense.

Additionally, I'm not sure where the "crushed by Woke" nonsense comes from. "It's so hard for the kids nowadays, they can't even be racist anymore!" is a pretty strange take, and shoving it in to your comment makes it very difficult to interpret your intent in a generous manner, whatever it may be.
by drweevil | 2025-09-08 18:15:09+00:00
No. One can safely infer the semantics, because how we generally use language is what is encoded, and that how is closely related to the semantics. I imagine that this is why so-called "hallucinations" occur, when there is a subtle (or not so subtle) disconnect between the usage statistics and the semantics. (For example, satire or sarcasm isn't understood by the LLMs, so we get advice like use glue to make cheese 'stick' to pizza.)
by dietr1ch | 2025-09-08 18:15:28+00:00
Think about how easy it became to switch mobile carriers. The state of things in the Internet is closer to mobile companies before phone numbers were easily portable across carriers.

Can I stop using GMail? yes, but not really. Same as I wasn't able to switch phone companies 20 years ago because reliance on the phone number to stay connected (and abusive contracts).

> Doesn't this mean that you get certain value from Google.

Yes, but that's no the issue, otherwise I'd have no reason to use it in the first place, right? The problem is that it's hard to migrate.
by adrian_b | 2025-09-08 18:16:05+00:00
Yeah, also soybean oil would be as useless as canola oil.

Among vegetable oils, flaxseed oil is the best source of ALA, while also walnut oil and hemp oil have decent amounts.

However many humans, especially many men, have a too low capacity for elongating ALA into DHA and EPA, so they may remain deficient in omega-3 fatty acids even when eating decent amounts of ALA from flaxseed oil or the like.

Because you normally do not know your own biosynthetic abilities, it is less risky to eat fish oil or Schizochytrium oil, instead of flaxseed oil.
by topspin | 2025-09-08 18:17:24+00:00
An obvious use case is high-end NVRs. Low power, ample GPU for object detection/tracking, ample encoders for streaming. Should make a good surveillance platform.

With SR-IOV* there is a low cost path for GPU in virtual machines. Until now this has (mostly) been a feature exclusive to costly "enterprise" GPUs. Combine that with the good encoders and some VDI software and you have VM hosted GPU accelerated 3D graphics to remote displays. There are many business use cases for this, and no small number of "home lab" use cases as well.

Linux is a first class citizen with Intel's display products, and B50/60 is no different, so it's a nice choice when you want a GPU accelerated Linux desktop with minimum BS. Given the low cost and power, it could find its way into Steam consoles as well.

Finally, Intel is the scrappy competitor in this space: they are being very liberal with third parties and their designs, unlike the incumbents. We're already seeing this with Maxsun and others.

* Intel has promised this for B50/60 in Q4
by Night_Thastus | 2025-09-08 18:17:35+00:00
I'm honestly surprised just about anything supports 32-bit these days.

It's fine to keep hosting the older versions for download, and pointing users to it if they need it. But other than that, I see 0 reason to be putting in literally any effort at all to support 32-bit. It's ancient and people moved on like what, well over a decade and a half ago?

If I were in charge I'd have dropped active development for it probably 10 years ago.
by hnquestion10987 | 2025-09-08 18:17:43+00:00
I'm a little confused after reading everything. I have an Expo app and if I run `npm audit`, I get the notification about `simple-swizzle`.

The GitHub page (https://github.com/advisories/GHSA-hfm8-9jrf-7g9w) says to treat the computer as compromised. What does this mean? Do I have to do a full reset to be sure? Should I avoid running the app until the version is updated?
by jcynix | 2025-09-08 18:17:53+00:00
> Once you have it on disk, how do you get it away from your phone?

On Android? Easy, Termux app and then rsync to my Desktop/Laptop. Or via Solid Explorer. Or E-Mail via Blitzmail.

Non incremental is a suboptimal design decision, backups should be incremental, e.g. monthly if automated or with from-to dates.
by derefr | 2025-09-08 18:18:08+00:00
Funny enough, maybe the fusing itself (if they go a bit above-and-beyond on it) is exactly why it is a pro model.

I.e. maybe Nvidia say "if we're going to fuse some random number of cores such that this is no longer a 3050, then let's not only fuse the damaged cores, but also do a long burn-in pass to observe TDP, and then fuse the top 10% of cores by measured TDP."

If they did that, it would mean that the resulting processor would be much more stable under a high duty cycle load, and so likely to last much longer in an inference-cluster deploy environment.

And the extra effort (= bottlenecking their supply of this model at the QC step) would at least partially justify the added cost. Since there'd really be no other way to produce a card with as many FLOPS/watt-dollar, without doing this expensive "make the chip so tiny it's beyond the state-of-the-art to make it stably, then analyze it long enough to precision-disable everything required to fully stabilize it for long-term operation" approach.
by owenversteeg | 2025-09-08 18:18:32+00:00
Interesting idea to use Apple Configurator, I like it! I use a combination of uninstalling any interesting apps + Foqos + One Sec + grayscale.

This works pretty well for me, and the key part is Foqos, which is FOSS that allows you to disable certain apps or features with the scan of a QR code or NFC tag. I keep the QR code / NFC tag in a separate building or locked box, so there's real friction if I want to scan it to use the phone beyond basic functionality.

Like the OP, I also have the issue of "semi-important" things, which is mostly email but occasionally some browser thing (often buying or viewing event tickets.) My plan for that is to use Foqos in combination with a QR code + scratch-off sticker, a sort of "break glass in emergency" option that adds some friction but not too much. Print a sheet of identical QR codes, scan it into Foqos as your unlock option, put stickers over them, cut them out and put them in your phone case.
by NoahZuniga | 2025-09-08 18:18:44+00:00
One thing I've been thinking of is to restrict global access to packages. Something like ansi-styles doesn't need access to the crypto global, or to the DOM, or make web requests, etc. So if you can sandbox individual libraries, you can decrease the attack surface a lot.

You could imagine that a compromised pad-left package could read the contents of all password inputs on the page and send it to an attacker server, but if you don't let that package access the document, or send web requests, you can avoid this compromise.
by SAI_Peregrinus | 2025-09-08 18:18:49+00:00
At Amazon scale, including a "we don't delete the data for 30 days if a bill isn't paid" clause is a plausible thing to include in the "free" tier. Paid tiers owe Amazon the contracted rate for the storage, as with any similar contract, and when Amazon deletes the data if payment isn't rendered when due is up to the terms of the contract.
by giancarlostoro | 2025-09-08 18:18:50+00:00
I feel like Apple needs a new CEO, I've felt this way for a long time. If I had been in charge of Apple I would have embraced local LLMs and built an inference engine that optimizes models that are designed for Nvidia, I also would have probably toyed around with the idea of selling server-grade Apple Silicon processors and opening up the GPU spec so people can build against it. Seems like Apple tries to play it too safe. While Tim Cook is good as a COO, he's still running Apple as a COO. They need a man of vision, not a COO at the helm.
Show HN: I made a simple ASCII-art analog clock in Emacs
by mbork_pl | 2025-09-08 18:18:51+00:00
Just a toy, showing how easy it is to leverage built-in Emacs features (most notably Artist mode, which provides a set of functions for creating ASCII-art vector graphics) and things like trigonometric functions and timers to create something nice.

A short blog post mentioning some background (and showing a screenshot): https://mbork.pl/2025-09-08_Emacs_Artist_clock#.
by parhamn | 2025-09-08 18:18:56+00:00
I do this too, and have them set the recover apple id to their own. Been averaging ~1.2 hours per day screentime the last few months (mostly messaging apps).

Basically in "downtime" mode all the time with a few "Always allowed" app. One thing is, you're phone (and it's browser) is pretty damn useless. Overtime you realize that a lot of things you need to lookup don't need to be looked up, etc but it can be frustrating at first.
by 9dev | 2025-09-08 18:19:04+00:00
In all fairness—npm belongs to GitHub, which belongs to Microsoft. Amateur-hour is both not a valid excuse anymore, and also a boring explanation. GitHub is going to great lengths to enable SLSA attestations for secure tool chains; there must be systemic issues in the JS ecosystem that make an implementation of proper attestations infeasible right now, everything else wouldn't really make sense.

So if we're discussing anything here, why not what this reason is, instead of everyone praising their favourite package registry?
by _DeadFred_ | 2025-09-08 18:19:08+00:00
As a grey hair, it's not cynical enough.

Funny seeing your user name. When I worked myself to get ultimately nowhere but money that spends so quickly, the first thing that went was my music creation time.

Having children later in life is much harder/different than having them younger. You don't get to go back.

Your children are only children for a very short time. You don't get to go back.

Much of life is tradeoffs.
by dns_snek | 2025-09-08 18:19:41+00:00
Before HSTS you didn't need a valid certificate. When you typed "amazon.com" in the address bar your browser would first connect to the server unencrypted on port 80 which would then redirect you to the HTTPS address.

If someone hijacked your DNS, they could direct your browser to connect to their web server instead which served a phishing site on port 80 and never redirected you, thus never ran into the certificate issue. That's part of the reason why browsers started warning users when they're connecting to a website without HTTPS.
by Jimmc414 | 2025-09-08 18:20:05+00:00
Zuck: Yeah so if you ever need info about anyone at Harvard

Zuck: Just ask.

Zuck: I have over 4,000 emails, pictures, addresses, SNS

[Redacted Friend's Name]: What? How'd you manage that one?

Zuck: People just submitted it.

Zuck: I don't know why.

Zuck: They "trust me"

Zuck: Dumb fucks.

Mark Zuckerberg, 2004

[0] https://www.esquire.com/uk/latest-news/a19490586/mark-zucker...
by PaulHoule | 2025-09-08 18:20:33+00:00
(1) Some people read from the bottom up

(2) I really am mad at Rachel for this and that's from someone who's been writing webcrawlers [1] since 1998, been an RSS innovator, and been responsible for complex systems when they fail.

(3) Maybe I am missing it but I don't see an actual feed for that URL, I see only an OPML file. Dave is really gay [2] for OPML files but I'm not because I still have to work to fetch all the items. Yet, visually the OPML file and blogroll look like a planet and you're not the first person who's pointed Dave's blogroll as a solution as opposed to the problem that I see it is.

(4) Looking at the head of the list I think "Daily Kos" and "404 Media" suck but that I already subscribe to many of them like "Arstechica" -- looking at the tail of the list I see there are gems that I'm not getting. If those things were getting aggregated topically it would please both me and Rachel.

[1] that don't crash your server

[2] in a good sense!
by andy99 | 2025-09-08 18:21:00+00:00
Reminds me of the Gervais framework that someone made (as a kind of parallel to The Office) where you had three groups, confused, losers, psychopaths (don't read too much into the names). Confused work really hard at things they don't get recognized for (Dwight), psychopaths underperform and get promoted (Ryan).
by Atlas667 | 2025-09-08 18:21:02+00:00
Ah, this is what i come to Hacker News for: out-of-touch rich people figuring out how to escape the influence created by out-of-touch rich people.

I agree in general tho. There are billions of us subject to this private facade of public platforms. This is by design, the Internets possibilities are engineered into place.
by barnacs | 2025-09-08 18:21:31+00:00
To me, it's about motivation.

Intelligent living beings have natural, evolutionary inputs as motivation underlying every rational thought. A biological reward system in the brain, a desire to avoid pain, hunger, boredom and sadness, seek to satisfy physiological needs, socialize, self-actualize, etc. These are the fundamental forces that drive us, even if the rational processes are capable of suppressing or delaying them to some degree.

In contrast, machine learning models have a loss function or reward system purely constructed by humans to achieve a specific goal. They have no intrinsic motivations, feelings or goals. They are statistical models that approximate some mathematical function provided by humans.
by paxys | 2025-09-08 18:22:02+00:00
Hiding relevant info behind "..." all over the post is annoying. Instead of reading through it like normal one has to read and click those little dots a dozen times.

I'll save you the trouble:

- Even if you choose not to back up your chats, someone you are talking to can do it, and your messages to them will be saved in their backup.

- 100 MiB of message storage is free.

- Last 45 days of media storage is free.

- Beyond that you have to pay $1.99 per month, and get 100 GB of storage.

- Backups happen once a day.
by aftbit | 2025-09-08 18:22:05+00:00
I ended up building my own image of OpenWRT to make the package hell better on upgrade, and as a bonus, I was able to build in my configs too. Recovering from a failed Pi was as simple as flashing the most-recently-built image. Upgrading just required rebuilding the image (and resolving whatever went wrong, of course, though it was usually pretty light). As a bonus, it's easy to swap SD cards on the Pi so I can have the last "known good" config available while taking the update.

Now I run OpenWRT on one of those x86 mini PC boxes with 4x 2.5GBe Intel NICs because my wirespeed is 2 Gbps symmetric, so I needed just a bit more oomph than the Pi could provide. The hardware is somehow even _less_ reliable than a Pi 4 - I'm already on my third machine in 3 years. I would love to find something more reliable.
by scratchyone | 2025-09-08 18:23:43+00:00
Damn, that's an impressively well-done attack. Curious, do you use a password manager? If so, did it not autofilling feel like a red flag to you?

I've always wondered if I ever get phished if I'll notice bc of that or if I'll just go "ugh 1password isn't working, guess i'll paste my password in manually" and end up pwned
by mort96 | 2025-09-08 18:23:53+00:00
And there's a performance cost to that. If there was only one implementation of strcpy and it was the version that happens to be picked on my particular computer, and that implementation was in a header so that it could be inlined by my compiler, my programs would execute faster. The downside would be that my compiled program would only work on CPUs with the relevant instructions.

You could also have only one implementation of strcpy and use no exotic instructions. That would also be faster for small inputs, for the same reasons.

Having multiple implementations of strcpy selected at runtime optimizes for a combination of binary portability between different CPUs and for performance on long input, at the cost of performance for short inputs. Maybe this makes sense for strcpy, but it doesn't make sense for all functions.