MurphyA/hacker-news huggingface dataset:
by simpaticoder | 2025-09-08 16:27:01+00:00
I think there is a fundamental misunderstanding caused by the OP's article. It mischaracterizes your blog post as a performance test of microdot, but as you say, it has nothing to do with it. Still, a baseline, best-case RPS number is a useful number to associate with microdot for various reasons; it cannot, of course, take the place of testing the real application, but what it can do is give implementers and upper-bound on IOPs to a device via HTTP/S. Take that as you will. Microdot is a very cool project, kudos for doing it and sharing it.
by simonw | 2025-09-08 16:27:33+00:00
This is a good article and seems well balanced despite being written by someone with a product that directly competes with Amazon S3. I particularly appreciated their attempt to reverse-engineer how S3 Vectors work, including this detail:

> Filtering looks to be applied after coarse retrieval. That keeps the index unified and simple, but it struggles with complex conditions. In our tests, when we deleted 50% of data, TopK queries requesting 20 results returned only 15—classic signs of a post-filter pipeline.

Things like this are why I'd much prefer if Amazon provided detailed documentation of how their stuff works, rather than leaving it to the development community to poke around and derive those details independently.
by tannhaeuser | 2025-09-08 16:27:34+00:00
npmjs is the stdlib, or what emerged from it.

It started as CommonJs ([1]) with Server-side JavaScript (SSJS) runtimes like Helma, v8cgi, etc. before node.js even existed but then was soon totally dominated by node.js. The history of Server-side JavaScript btw is even longer than Java on the server side, starting with Netscape's LifeScript in 1996 I believe. Apart from the module-loading spec, the CommonJs initiative also specified concrete modules such as the interfaces for node.js/express.js HTTP "middlewares" you can plug as routes and for things like auth handlers (JSGI itself was inspired by Ruby's easy REST DSL).

The reason for is-array, left-pad, etc. is that people wanted to write idiomatic code rather than use idiosyncratic JS typechecking code everywhere and use other's people packages as good citizens in a quid pro quo way.

[1]: https://wiki.commonjs.org/wiki/CommonJS

Edit: the people crying for an "authority" to just impose a stdlib fail to understand that the JS ecosystem is a heterogeneous environment around a standardized language with multiple implementations; this concept seems lost on TypeScripters who need big daddy MS or other monopolist to sort it all out for them
by SamoyedFurFluff | 2025-09-08 16:27:42+00:00
Wait what’s wrong with a restraining order? Do you think it should be legal for a person to stalk and mail threats to someone, go to their workplace to issue threats, phone them to issue threats, etc? I acknowledge stopping someone is censorship, but I also believe that it is important to both harbor free speech as an ideal in the ideal world, and also that it is important to acknowledge we don’t exist in the ideal world where no one will use their freedom of speech to egregiously destroy people.
by j45 | 2025-09-08 16:27:54+00:00
Appreciate the anecdata. There could have been a bit of a deficiency compared to baseline.

I have heard of that brand too - quality matters.

Omega 3 containing sufficient DHA is studied to reduce inflammation in the brain as well has help with other cognitive processes.

Another one I had read is the insulin spike after a meal can be lowered significantly by having one omega-3 with each meal.

I’ll try to circle back with a few of the studies.
by jaredcwhite | 2025-09-08 16:28:36+00:00
RSS isn't a format that's super-helpful for publishers. There are a variety of reasons why. But it's an absolute dream for consumers. And that's what makes it so awesome, so powerful.

Case in point: I saw someone had unsubscribed from one of my email newsletters, and when I went to go read the "reason why" field, they'd filled out: "subscribed to the RSS feed instead."

That's right, my email newsletter has an RSS feed (thanks Buttondown!), and they prefer to receive the newsletter that way rather than via email. And can I blame them? Absolutely not! I love RSS. Is it better for my vanity to have their email address in my database instead, rather than some nebulous XML file going out to who-knows? Of course. But again, this format keeps on winning year after year because it's one of the best consumer-first features of the open web.
by bccdee | 2025-09-08 16:29:36+00:00
You can't gloss over the difference between "schema" and "type." Schemas exist at the edges between pieces of software. They govern how you talk to databases or APIs; they needs to be forwards- and backwards-compatible. A type, conversely, exists within one program. You can update types and type invariants without needing to migrate state or make a breaking API change.

"Make invalid states unrepresentable" is much better advice for the internals of a program than it is for the sql or protobuf schemas at that program's margins. The point of "parse, don't validate" is to transform flexibly-represented external data into strongly-typed internal data that respects invariants; since you can update your internal data model much more easily than the models of external data, keeping external data representations flexible is sometimes just as important as keeping internal representations strict.
by tracker1 | 2025-09-08 16:29:48+00:00
Tree shaking is less than reliable... for it to work well, all the dependencies need to be TS/ESModule imports/exports and even then may not shake out properly.

It helps, but not as much as judicious imports. I've been using Deno more for my personal projects which does have a pretty good @std library, though I do think they should keep methods that simply pass through to the Deno runtime, and should probably support working in Node and Bun as well.
by scarface_74 | 2025-09-08 16:29:55+00:00
I could completely cut Google out of my personal life with no ill effect. I can either use Apple’s iWork or Microsoft’s Office 365, I use ChatGPT as my default search engine now because Google has gotten so bad. I don’t use YouTube regularly except once a year to watch AWS Reinvent videos.

I use Safari on my Mac because Chrome is worse on battery life and doesn’t integrate as well with the rest of my digital life. I use Gmail. But at the end of the day, it’s just another one of my emails.
by kevstev | 2025-09-08 16:30:31+00:00
Yeah- I get about 300 new items each day in my feed... of which on average about 1% of those are worth reading the full article. There is a lot of duplication as well- many sites will cover a new gadget announcement, but only need to read one to get the full scoop. Printing this would be overwhelming- and many of those sites are summaries of "source documents" (papers, release notes, etc) that I want to jump to.

I am sure people use RSS in many different ways though, it just doesn't seem useful to me.
by dmillard | 2025-09-08 16:30:49+00:00
Interesting post and great reference to [1] about why laundry hits a sweet spot of capability.

Interestingly the repeated critiques in the article are about sensor richness: primarily force feedback and tactility, which indicates lacking hardware. Software only robotics has a long and fraught history, but it really feels to me that current industrial hardware could be driven more intelligently without much change. No doubt the "ideal" robot for any given task requires developments in both.

I'm also curious about safety, since generally capable mechanisms need a multilayered safety stack that includes semantics, and cobot certification is likely not enough anymore. Examples: feeding someone the wrong pill, pouring a glass of water into electronics, cutting vegetables vs fingers.

[1] https://substack.com/redirect/82d94852-76b6-4b0d-8595-86e46a...
by Ygg2 | 2025-09-08 16:30:58+00:00
Have what? Heavily invested in language you're building? I think that's a given.

Not clear-headed about this? https://old.reddit.com/r/programming/comments/1nbkwzt/packag...

> gingerbill[S] 1 point 2 hours ago > So a tool that enables evil is not an evil tool?

See counterpoint: hammers, freezers, cars, arrows, guns, bombs, planes, etc. Each of them *can* enable evil. Same way a package manager *can* enable sprawling dependency list.
by dietr1ch | 2025-09-08 16:31:06+00:00
> literally anyone reading this, can stop using Google search on every device you own in the next 5 minutes

Yeah sure you can avoid typing google.com and think you just ghosted Google forever, but that won't end Google's relationship with you as it runs deeper than you know through its advertisement and tracking platform.

And what about services beyond search at this point?

Youtube, GMail, Google Calendar, GoogleFi, Maps, Play store (movies, apps), Photos, Drive.

I can try stop using those services immediately, but with a huge cost of data and connectivity loss (there's no easy email redirection, accounts are usually tied to emails). You'll also miss out on things that don't have a nice alternative and you are socially pulled into (green/blue messages in iMessage within the US or having WhatsApp abroad), can you stop clicking into links to documents, presentations and videos that people share?
by rollcat | 2025-09-08 16:31:24+00:00
@everyone in the industry, everywhere:

Urgency is poison.

Please, please put a foot in the door whenever you see anyone trying to push this kind of sh*t on your users. Make one month's advance notice the golden standard.

I see this pattern in scam mail (including physical) all the time: stamp an unreasonably short notice and expect the mark to panic. This scam works - and this is why legit companies that try this "in good faith" should be shamed for doing it.

Actual alerts: just notify. Take immediate, preventive, but non-destructive action, and help the user figure out how to right it - on their own terms.
by bix6 | 2025-09-08 16:31:39+00:00
Around half of all websites use Google analytics so good luck totally avoiding Google.

Just use an ad blocker. O wait all the chromium browsers just made that harder with manifest v3. 75% of browsers are chromium based?

I don’t think it’s fair to compare digital services to something like PGE. Fundamentally different.

Google lost the case. They just weren’t punished how they should’ve been.

Edit: wow and how could I forget 8.8.8.8 or google’s own transmission lines!
by crazygringo | 2025-09-08 16:31:44+00:00
I see local LLM's being used mainly for automation as opposed to factual knowledge -- for classification, summarization, search, and things like grammar checking.

So they need to be smart about your desired language(s) and all the everyday concepts we use in it (so they can understand the content of documents and messages), but they don't need any of the detailed factual knowledge around human history, programming languages and libraries, health, and everything else.

The idea is that you don't prompt the LLM directly, but your OS tools make use of it, and applications prompt it as frequently as they fetch URL's.
by jonnylegs | 2025-09-08 16:31:59+00:00
You’re absolutely right that no model - event-based or spreadsheet - is ever “correct.” Dozens of variables, time lags, and external factors make precision impossible.

That’s actually the point. The value isn’t in betting on one forecast, it’s in being able to spin up hundreds of simulations quickly and look for trends. Instead of endless debate over Option A vs. B vs. C, you run them all.

If 80% of scenarios show the Vancouver office underwater in Q1, that’s a signal worth digging into. If it only shows up in 20%, you know not to over-index on it. It’s less about false precision and more about identifying patterns of risk and opportunity across a range of possibilities.
by runjake | 2025-09-08 16:32:10+00:00
It's better because it's in your own words and hopefully, matching your own thought patterns, so it's easier to revisit later.

I read source material (dev docs, Wikipedia, whatever) and reformulate the concepts in my own words, adding my own analogies and elaborating where needed.

A lot of what you said sounds like you don't necessarily get value out of keeping notes for all these random topics.

Until you have a well-defined purpose for taking notes, consider not?
by citizenpaul | 2025-09-08 16:32:26+00:00
People really don't have an understanding of just how destructive this kind of corruption is. Extorting the current businesses is only the direct effect.

The longer term is literal desolation. People simply do not start business as time goes on so there is nothing to exploit as time passes. Business that exist simply don't operate in that country anymore so there is not even anything to buy if you have money. Then the violence and enslavement starts.
by nixosbestos | 2025-09-08 16:32:28+00:00
No, I have never, ever responded to an explicit ask to reset the most important security feature of my accounts, without me initiating it, and I use a password manager (lol) so, no, I will never, ever encounter this problem. Because I care about my data, safety, and integrity, and my users'. There's literally no reason ever why I would or will do a 2FA reset.

It does happen, yes, it's not terrifying.
by taxicabjesus | 2025-09-08 16:32:33+00:00
The Egyptian pyramids are an elephant in the room. Conventional thinking is they're burial chambers built with copper tools and ramps.

But other historians believe they reflect a lost technological sophistication. The pyramids are incredibly precise: perfectly aligned to true north (within ~0.05°), made with millions of 2-70 ton blocks and precise internal engineering for passageways and chambers. Someone recently advocated that there's substantial subterranean infrastructure under the pyramids. The technology to move 70 ton blocks didn't exist again until the 1800's.

One of modern science's ideological straitjackets is Oliver Heaviside's restatement of Maxwell's 20 equations with 20 unknowns into four vector calculus equations. Heaviside's restatements made the math accessible to regular engineers who wanted to build things. But the restatements are arguably a simplification that neutered electromagnetism: https://x.com/TaxiCabJesus/status/1964345590604845487 (Grok had a nice answer for "what phenomenon are inadequately explained by Heaviside's four equations?").

The Coral Castle in Florida was a labor of love, built by a single man: https://en.wikipedia.org/wiki/Coral_Castle

The stones are fastened together without mortar. They are set on top of each other using their weight to keep them together. The craftsmanship detail is so fine and the stones are connected with such precision that no light passes through the joints.

Modern humans are at least 100,000 years old. Most of our earlier civilizations are probably along the coasts of the continents, and were submerged at the end of the last ice age. It's silly to think that technology has not been lost and rediscovered over and over again.
by r3trohack3r | 2025-09-08 16:32:45+00:00
A maintainable altruistic ruling class is a myth.

When you centralize power you’ve created a point of control/leverage with significant value. It will eventually be captured.

> except for when it leans authoritarian

Totalitarianism, Crony Capitalism, State Enforced Communism, Authoritarianism, etc. are all variations of the same root rot: centralization.

When you centralize power you will always get centralized power. A global centralized power is terrifying.
by eviks | 2025-09-08 16:33:06+00:00
> Meanwhile, this is a mistake that can happen to anyone, especially under pressure. So no point in discussing the personal oversight.

Unless this is a situation that could've been easily avoided with a password manager since the link was from a website not in your manager's database, so can't happen to anyone following security basics, and the point of discussing the oversight instead of just giving up is to increase the share of people who follow the basics?
by alephnerd | 2025-09-08 16:33:07+00:00
I think what they means is dismissing the student protests as instigated by either India or China is doing a disservice to them.

And I agree with them - the ongoing protests are a result of anger against the political establishment's corruption - while thousands of Nepalis go abroad to work in the Gulf and India as menial labor, the political establishment's kids go abroad to America, Canada, and Australia to study, party, and live their best life.

My point was orthogonal to that - I'm saying that Chinese and Indian influence on the political establishment has been strongly entrenched.

Even Nepali media calls out Sharma's pro-China leanings and Deuba's pro-India leanings, and Prachanda's "paltu Ram" antics.
by tracker1 | 2025-09-08 16:33:18+00:00
Very true... I'm more experienced with .Net, but usually when you bring in something, it's much more of a compositional library or framework for doing something... like a testing harness (XUnit), web framework (FastEndpoints), etc. No so much in terms of basic utilities, where the std library and extensions for LINQ cover a lot of ground, even if you aren't using LINQ expressions themselves.
by zerkten | 2025-09-08 16:33:33+00:00
>> I look back fondly to kid years when I took shots in the dark with IRQ and DMA settings on my boot diskette

I look back on this fondly. I got some weird brand of soundcard that claimed SB-compatibility but was clearly different. I felt so proud the first time I got sound out of a game and no crashes. The same card was supported very well by Windows 95 a few years later.
by goku12 | 2025-09-08 16:33:52+00:00
Every day brings me another reason to ask the question: "Why the hell did they throw away the idea of mutual TLS?". They then went onto invent mobile OTP, HOTP, TOTP, FIDO-U2F and finally came a full cycle by reinventing the same concept, but in a more complex incarnation - Passkeys.
by dylan604 | 2025-09-08 16:35:01+00:00
> (you can invite them to not use abusing services though)

First, you'd have to define how one can determine what an abusive service is. Is Facebook an abusive service? Is some random website that happens to use FB's SDK an abusive service? How does a normie internet user find out the site they are using has abusive code? Some plugin/extension that has a moderated list that prevents a page from loading and instead loads a page dedicated to explain how that specific site is abusive?
by oasisbob | 2025-09-08 16:35:19+00:00
> This is a brilliant piece of social engineering baked right into the code. It's designed to specifically defeat the common security habit ...

I don't agree that the exuberance over the brilliance of this attack is warranted if you give this a moment's thought. The web has been fighting lookalike attacks for decades. This is just a more dynamic version of the same.

To be honest, this whole post has the ring of AI writing, not careful analysis.
by desertrider12 | 2025-09-08 16:35:40+00:00
> the gaps are reduced to zero and the curve crosses through each and every point within its build envelope

I think that's oversimplifying an important point. If you build a Hilbert curve in a 1x1 square, the vertices of the curve always have rational coordinates. So all points on its line segments must always have at least one rational coordinate. There's no way it can cross through every point in a square region of R^2.

A better way to say it might be "the gaps are reduced towards zero and the curve will pass arbitrarily close by every point in its envelope". That still explains why its Minkowski dimension must be 2.
by wch | 2025-09-08 16:35:50+00:00
When I run `npm audit`, it points me to a security advisory at GitHub. For example, for debug, it is https://github.com/advisories/GHSA-8mgj-vmr8-frr6 .

That page says that the affected versions are ">=0". Does that seem right? That page also says:

> Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Is this information accurate?
by alexvitkov | 2025-09-08 16:35:52+00:00
Most language users will follow the "spirit" of the language - e.g. Bill is against package managers, people who use his language mostly agree with his ideas, and there's not a huge standard Odin package manager.

I rather appreciate that C and C++ don't have a default package manager that took over - yes, integrating libraries is a bit more difficult, but we also have a lot of small, self-contained libraries that just "do the thing" without pulling in a library that does colored text for logging, which pulls in tokio, which pulls in mio, which pulls in wasi, which pulls in serde, which is insane.
by JustExAWS | 2025-09-08 16:36:34+00:00
Well, first I wouldn’t give a junior dev with no experience admin rights to an AWS account and would I have tight guardrails around what they can do - like I’ve done now with over a dozen implementations for clients since I’ve been in consulting for five years and the four years before that as an architect for product companies.

I also wouldn’t give a junior dev access to production databases.

Also from working with AWS from both the inside (Professional Services) and the outside at a third party consulting companies, I know how aggressively AWS is about keeping startups and they would never risk losing the continuing revenue of a company like that.
by ath3nd | 2025-09-08 16:36:43+00:00
This is the company that:

- Enabled genocide in Myanmar https://www.amnesty.org/en/latest/news/2022/09/myanmar-faceb...

- Literally pirated books to train their trash AI LLM: https://arstechnica.com/tech-policy/2025/02/meta-torrented-o...

- Violated human rights for Palestinians (even in 2021: https://theintercept.com/2022/09/21/facebook-censorship-pale...)

- Interfered in British politics with the Cambridge Analytica Scandal, one of the costliest and stupidest mistakes in UK's history (full of stupid and costly mistakes): https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Ana...

- The CEO of the company is famous for ass-kissing even dumber people than himself e.g: Trump https://www.independent.co.uk/news/world/americas/us-politic...

What else do you expect from the trashiest company in the world. Of course they don't care for child safety.
by danielEM | 2025-09-08 16:36:45+00:00
Ryzen AI max+ 395 128GB can do 256GBps so lets put all these "ifs" to bed once for all. That is absolutely no brainer to drop more RAM as long as there is enough bits in address space of physical hardware. And there usually is, as same silicons are branded and packaged differently for commercial market and for consumer market. Check up how chinese are doubling 4090s RAM from 24 to 48GB.
by x0x0 | 2025-09-08 16:36:53+00:00
> That's not mostly because of a better ISA

Genuinely asking -- what is it due to? Because like the person you're replying to, the m* processors are simply better: desktop-class perf on battery that hangs with chips with 250 watt TDP. I have to assume that amd and intel would like similar chips, so why don't they have them if not due to the instruction set? And AMD is using TSMC, so that can't be the difference.
by DrewADesign | 2025-09-08 16:37:12+00:00
I just never got the argument against including things like the sort of text formatting tools and such that people always import libraries for. It’s not like an embedded system for mission-critical realtime applications where most functions people write for it get formal proofs — it’s freaking javascript. Sure it’s become a serious tool used for serious tasks for some reason, but come on.