MurphyA/hacker-news huggingface dataset:
by danielvaughn | 2025-09-17 14:30:13+00:00
I'd like to ask a naive question, as I'm not really familiar with procedural terrain generation but I've been curious about it from afar. From what I can tell, most work in this area revolves around manipulating geometric patterns to "look like" mountains/islands/whatever.

Is there any value in modeling geological processes instead? So if you take a flat plane, along with a model of geological forces that could alter that plane, and run some kind of simulation over time (in effect simulating erosion etc), could that not produce a more "realistic" terrain?

I assume it's much more complex, much more computationally expensive, and all that. But I'd be surprised if no one at all has attempted this.
by Defletter | 2025-09-17 14:30:57+00:00
> AUR stands for "Arch User Repository". It's not the official system repository.

Okay... and? The point being made was that the issue of package managers remains: do you really think users are auditing all those "lib<slam-head-on-keyboard>" dependencies that they're forced to install? Whether they install those dependencies from the official repository or from homebrew, or nix, or AUR, or whatever, is immaterial, the developer washed their hands of this, instead leaving it to the user who in all likelihood knows significantly less than the developers to be able to make an informed decision, so they YOLO it. Third-party repositories would not exist if they had no utility. But this is why Debian is so revered: they understand this dynamic and so maintain repositories that can be trusted. Whereas the solution C/C++ cultists seem to implicitly prefer is having no repositories because dependencies are, at best, a slippery slope.

> "It's too hard to add a dependency in C++"

It's not hard to add a dependency. I actually prefer the dependencies-as-git-submodules approach to package managers: it's explicit and you know what you're getting and from where. But using those dependencies is a different story altogether. Don't you just love it when one or more of your dependencies has a completely different build system to the others? So now you have to start building dependencies independently, whose artefacts are in different places, etc, etc, this shouldn't be a problem.

> I, for one, do not love it when there is an exploit in a language package manager.

Oh please, I believe that about as much as ambulance chasers saying they don't love medical emergencies. Otherwise, why are any and all comments begging for a first-party package manager immediately swamped with strawmans about npm as if anyone is actually asking for that, instead of, say, what Zig or Go has? It's because of the cultism, and every npm exploit further entrenches it.
by cestith | 2025-09-17 14:30:58+00:00
You have 13 years to upgrade to 64-bit ints or switch to a long long for time_t. Lots of embedded stuff or unsupported closed-source stuff is going to need special attention or to be replaced.

I know the OpenFirmware in my old SunServer 600MP had the issue. Unfortunately I don’t have to worry about that.
by bscphil | 2025-09-17 14:31:18+00:00
The promise is especially dangerous when a huge fraction of traffic doesn't use Encrypted Client Hello, [1] so the domain name is sent in the clear with the initial request to the server.

A while back I wrote a quick proof-of-concept that parses packet data from sniffglue [2] and ran it on my very low powered router to log all source IP address + hostname headers. It didn't even use a measurable amount of CPU, and I didn't bother to implement it efficiently, either.

I think it's safe to assume that anyone in a position to MITM you, including your ISP, could easily be logging this traffic if they want to.

[1] https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypt...

[2] https://github.com/kpcyrd/sniffglue
by wk_end | 2025-09-17 14:31:39+00:00
According to this [0] tutorial, variant records in Ada have the downside that you only get an error at runtime if you use them incorrectly, i.e. access data from one branch of the sum type when the actual value is on another. That's a pretty huge drawback.

https://learn.adacore.com/courses/intro-to-ada/chapters/more...
by piltdownman | 2025-09-17 14:31:44+00:00
You carefully avoided the actual BBC citation directly underneath, which links to the IPC report and a separate BBC article I link now.

https://www.bbc.co.uk/news/articles/c05ed5rgld3o

The IPC (Integrated Food Security Phase Classification) report issued on August 22, 2025, confirmed Famine (IPC Phase 5) in Gaza Governorate, marking the first official famine declaration in the Middle East. The report, based on a special snapshot for the period of July-September 2025, projected famine to expand to other governorates and highlighted catastrophic levels of acute food insecurity, particularly among children

IPC Report Confirms Famine in Gaza: Joint Statement by UN Security Council 14 Members https://www.un.org/unispal/document/joint-press-statement-se...

As you're a green account, I won't be responding to any more of your ghoulish bad-faith engagements.

// The United Nations chief has described the famine confirmed in Gaza City and its surrounding areas as a "failure of humanity".

Antonio Gutteres said the situation was a "man-made disaster" after a UN-backed body, which identifies hunger levels around the world, raised its food insecurity status in parts of the territory to Phase 5 - the highest and most severe.

The Integrated Food Security Phase Classification (IPC) says more than half a million people across Gaza are facing "catastrophic" conditions characterised by "starvation, destitution and death".

The report was labelled an "outright lie" by Israel, which has denied there is starvation in the territory.//
by RickJWagner | 2025-09-17 14:31:54+00:00
For you, ok.

For me no. Charlie Kirk was a beacon of hope. He gave people who disagreed with him a microphone, and he showed us all we can disagree but still respect each other and exist together peacefully.

It’s true he said some outrageous things. But if you listen to the full context of whatever he said— not just one outrageous, attention getting sentence, you’ll find that he had solid reasoning for the point. You don’t have to agree with the point, but nobody should say he was hateful.

I am most discouraged seeing all the people saying equally offensive things and being fired for it. Charlie Kirk was a. Very strong advocate of free speech, for obvious reasons. He would have defended those people, but would have explained the reason he thought their ideas were wrong.
by antonvs | 2025-09-17 14:32:16+00:00
Russia and Cuba? Why not mention Somalia and Afghanistan? They're about equally relevant in this context.

South Korea might have the capability to play this game (North Korea certainly doesn't), but it hasn't really had the incentive to.

Which brings us to the real issue: an export ban on an important product creates an extremely strong incentive, that didn't exist before. Throwing significant national resources at a problem to speculatively improve a country's competitiveness is a very different calculation than doing so when there's very little alternative.
by blndrt | 2025-09-17 14:32:21+00:00
Thank you for the feedback!

In this (telecom) benchmark you can review agent policies and manuals here: 1) https://github.com/sierra-research/tau2-bench/blob/main/data... 2) https://github.com/sierra-research/tau2-bench/blob/main/data...

Of course these are just parts of the prompt, you can inspect benchamark code to see how these are rendered to actual LLM calls.

In case someone is not familiar with framework methodology I've wrote a separate article covering that (with some of my thoughts) -> https://quesma.com/blog/tau2-from-llm-benchmark-to-blueprint...
by account42 | 2025-09-17 14:33:10+00:00
There are always limits to what a program can do. The only fix is to choose large enough integers (and appropriate units) so that you can represent long enough times / large enough sizes / etc. that anyone could reasonably encounter. What sizes make sense also include how they impact performance and for a game from the 32-bit era, a crash (controlled abort or not) after over two years is probably a better choice than slowing everything down by using a 64-bit integer.
by potato3732842 | 2025-09-17 14:33:39+00:00
>but knowing that the business model coupled with a beurocratic approach to saftey through chemicals and "certification" is the reason for these vile situations and there is nothing I can do about that

Regulatory capture at work.

Inspector visits the "dirty" bigCo factory and they have an expensive binder for him showing him why everything they do he could possibly take issue is "compliant", citing relevant law, guidelines, specs, etc, etc.

Inspector visits the squeaky clean small time factory and proceeds to write out thousands of dollars of fines for petty things that could have been compliant had the owners had the money to pay to produce all the paperwork showing why their stuff is GTG.

And the inspector and everyone his organization works for say this is all great, and of course they've got self-serving metrics to prove it, because those organizations naturally fill up with people who don't question the premises of what they're doing.

Just about every industry has this going on to a large enough it's a problem degree. It's a pretty f-ed up state of affairs but it won't change because there's so many careers and even entire industries built around it.
by theallan | 2025-09-17 14:33:40+00:00
> Out of curiosity, could this have been a vector for a supply chain attack?

If you were using the CDN without SRIs, then yes, that would have been the most obvious channel. However, I don't believe the attacker ever set up for that and the URLs never resolved due to CloudFlare blocking it.

> there's been some pretty huge breaking changes

Unless you were using the legacy API, there shouldn't be any major impediment [1]. I intentionally tried to keep backwards compatibility as I hate doing library upgrades myself! Drop me an email - allan at the domain in question if you have any questions about doing an upgrade.

> It looks like newer versions of datatables don't import static files from the datatables CDN like this.

I rewrote aspects to use CSS styled elements in place of images, so there were less resources to load.

> Would it make sense to issue a CVE for older datatables library versions that could be susceptible to this attack?

Per the above, if you were using the CDN without SRI for the resources, then any version could have been susceptible. However, I've seen no evidence that the attack took that vector.

[1] https://datatables.net/upgrade/2
by JKCalhoun | 2025-09-17 14:33:50+00:00
I worked on the Photos team a decade ago — some of what you're saying I can vouch for. If it is a rare occurrence, that lowers the priority of the bug. Data corruption though? That moves it to the top.

I'll tell you a secret though that kind of pisses me off. If you have shipped with a bug, that automatically lowers the perceived priority as well. You know, as opposed to introducing a new bug in a new release. "We've already lived with that old bug…" seems to be the mind set. Oh well.

To be sure though, if you saw the number of bugs that queue up for a popular app like Photos, you'd know that fixing all of them is not going to be possible — some kind of system of prioritization is required.
by xyzelement | 2025-09-17 14:33:54+00:00
I don't think Hamas even tries to claim that it accidentally kills Israeli civilians during military operations. Killing civilians is the stated objective.

There are a LOT of videos from Gaza when Israel notified civilians to leave a building before it destroys it. That seems contrary to the goal of killing civilians.

The other obvious thing is - since Israel is already totally smeared as a genocider (eg this story) it could be argued that it can do whatever it wants and suffer no further PR damage. So to the extent that it still shows restraint - it's either because they don't want to kill civilians or because they are still playing to an audience with a discerning moral compass internationally.
by pixelpoet | 2025-09-17 14:34:11+00:00
I did send hand-written mails to several German representatives, and this is how I was rewarded.

Obviously I'm not expecting that my actions alone are enough to get the outcome I want, but it's difficult not to feel the bite of "if voting changed anything, they would make it illegal." It's just going to be some other paid-for dickface in corporate pockets, every time.
by cestith | 2025-09-17 14:34:13+00:00
Once upon a time, Windows NT 4 had a similar bug. Their counter was high precision, though, and was for uptime of the system. Back before Service Pack 3 (or was it SP2?) we had a scheduled task reboot the system on the first of the month. Otherwise it would crash after about 42 days of uptime, because apparently nobody at Microsoft tested their own server OS to run for that long.
by topranks | 2025-09-17 14:34:37+00:00
It won’t.

It makes no attempt to outlaw encryption. We can still legally use PGP and completely avoid eavesdropping.

What it does mandate is that messaging providers who they will name (think WhatsApp, Signal), will be obliged to have people reviewing the content of all messages sent.

All but the stupidest of criminals will thus work around it, encrypting themselves over the top. While the average Joe gets all their messages read.
by sausagefeet | 2025-09-17 14:35:10+00:00
The high-level vision of Stategraph is that the entire world's infrastructure should be representable as a single root module, with proper isolate and RBAC. It should scale and be secure. With that, the way Stategraph works best is everything being in a single repo and in a single root module.

Additionally, Stategraph should Just Work with your existing TF codebase. You important the state and you're off to the races.

Once all of your state is in Stategraph, though, moving state around really becomes a question of what name those piece of state should have. So, if you want to merge two root modules, it could be the case that you can check "do my resource names overlap?" If no, you can tell Stategraph to merge the states and then copy your code into a single root module and go. Otherwise, you need to do some resource renaming.

While we don't have all the details in place, I think it is quite likely that Stategraph will support metadata on your resources, perhaps with a new block. This way you could provide namespaces to collections of resources, and that could make merging even easier. But, there is a bit to figure out before that is a reality or determined to be the best way to go.
by toss1 | 2025-09-17 14:35:18+00:00
Rather off-topic, but the juxtaposition of words in the headline made me think of a potentially actually cool application for 3D AR glasses — visualizing the radio-frequency fields in the surrounding environment, colors mapped to wavelengths, saturation linked to RF strength/amplitude. You could look around the house and see the hot and dead zones for your wifi, how much the microwave leaks, how the broadcast radio and TF filters through the building...

Fun for curiosity, but it could be actually really useful for techs?
by inkyoto | 2025-09-17 14:35:39+00:00
> Are you well-read enough into the platform so that you can attest to it requiring no manual code optimisation for high-performance datapaths?

Yes.

> Have they really cracked it at homogenous computing […]

Yes.

> have it emit efficient code […]

Yes. I had also written compilers and code generators for a number of platforms (all RISC) decades before Apple Silicon became a thing.

> […] for whatever target in the SoC?

You are mistaking the memory bus width that I was referring to for CPU specific optimisations. You are also disregarding the fact that the M1-4 Apple SoC's have the same internal CPU architecture, differing mostly in the ARM instruction sets they support (ARM64 v8.2 in M1 through to ARM64 v8.6 in M4).

> Or are you merely referring to the full memory capacity/bandwidth being available to CPU in normal operation?

Yes.

Is there truly a need to be confrontantial in what otherwise could have become an insightgul and engaging conversation?
Show HN: DeepFabric – Structured synthetic datasets for model distillation
by decodebytes | 2025-09-17 14:35:51+00:00
I’ve been working on DeepFabric, an open-source CLI + SDK for generating synthetic datasets using LLMs, based on Topic or Tree Graphs (DAG).

The goal is to make it easier to create structured, diverse, domain-specific datasets — especially ones with chain-of-thought (CoT) reasoning — without hand-crafting hundreds of prompts.

What it does:

Generates datasets via topic graphs/trees to systematically cover a domain and reduce duplication.

Supports multiple CoT styles (free-text, structured, hybrid).

Works with different LLM providers (OpenAI, Anthropic, local models (Ollama).

Configurable via YAML, as a library , or CLI and exports easily for Hugging Face training.

Why:

Synthetic data is increasingly important for fine-tuning, evaluation, and distillation, aka deepseek and more recently Phi-4

Most existing approaches are ad-hoc; I wanted something systematic and reproducible.

Some example data here:

https://huggingface.co/datasets/lukehinds/medical_q_and_a https://huggingface.co/datasets/lukehinds/programming-challe... https://huggingface.co/datasets/lukehinds/linux_shell_attack...
by mtherapist | 2025-09-17 14:36:11+00:00
Hey folks,

Some hours back there was a lively discussion here: Why is Protobuf’s C API so clunky?

I was in that thread too, tossing around ideas like “what if we could do user["id"] = 123; and have it fail at compile time if you tried user["id"] = "oops";”. The feedback I got there was super helpful — a few people pointed out I was basically forcing JSON-style dynamics into a static Protobuf world, which doesn’t really fit. That clicked with me.

Since then I hacked on a small library/plugin called Sugar-Proto. It’s a protoc plugin that generates wrappers around your .proto messages, giving you something closer to a nlohmann/json feel, but still 100% type-safe and zero runtime reflection.

Example:

User user; UserWrapped u(user);

u.name = "Alice"; u.id = 42;

u.posts.push_back({{"title", "Hello"}, {"comments", {{"text", "Nice!"}}}}); Under the hood it’s just normal protobuf fields, no hidden runtime map lookups. The idea is: make the API less clunky without pretending it’s JSON.

It’s early, not production-ready yet, but I’d love for people to kick the tires and tell me what feels right/wrong.

Curious to hear if anyone else tried wrapping protobuf in a more ergonomic C++ way. Do you think this direction has legs, or is protobuf doomed to always feel a bit Java-ish in C++?
by elevation | 2025-09-17 14:36:13+00:00
> The Terraform ecosystem has spent a decade working around a fundamental architectural mismatch: we're using filesystem semantics to solve a distributed systems problem. The result is predictable and painful.

You portray this as a design flaw, but it's just the Hashicorp marketing funnel towards hosted Terraform, which solves the arbitration problems that you encounter at scale while allowing Hashicorp to give the cli tooling away for free.
by mjr00 | 2025-09-17 14:36:24+00:00
It's trivial to demonstrate that LLMs are pattern matching rather than reasoning. A good way is to provide modified riddles-that-aren't. As an example:

> Prompt: A man working at some white collar job gets an interview scheduled with an MBA candidate. The man says "I can't interview this candidate, he's my son." How is this possible?

> ChatGPT: Because the interviewer is the candidate’s mother. (The riddle plays on the assumption that the interviewer must be a man.)

This is clearly pattern matching and overfitting to the "doctor riddle" and a good demonstration of how there's no actual reasoning going on. A human would read the prompt and initially demonstrate confusion, which LLMs don't demonstrate because they don't actually reason.
by cube2222 | 2025-09-17 14:36:30+00:00
Thanks for the explanation!

> When used as an application, Z3 will tell you something's wrong by spitting this out in the terminal: (+ c1 c2 c3) |-> (* (- 1) oo)

This part is what I was looking for. I was surprised that the behavior wasn’t accompanied by any warnings in the article.
by deltarholamda | 2025-09-17 14:36:34+00:00
I thought this was great, very much the sort of thing I would have done when I was younger and had the time (and patience!). I don't usually watch long-form videos (that patience thing again), but I watched all the way with this one. I like the understated humor.

I have no doubt that this phone will not be perfect. With all the things sticking out it will catch on stuff, and it will be awkward to hold up to your head to talk, etc. But who cares? He made it himself, and will have a lot of attachment to it if only for that fact.

And I agree with his main point: phones used to be interesting. We all stroke our plain black slabs like monkeys before the Monolith these days, and it's sad.
by giobox | 2025-09-17 14:36:47+00:00
It doesn’t negate the issue at all, especially as sdkman is an optional extra tool. If working with others, that default is not always going to be the one your team develops against either. If you are just trying to pick a jdk and don’t even know sdkman exists, a sensible person will rightly wonder why the ecosystem has fractured into 17 JDKs, or you won’t notice at all and blindly pick a download from the oracle website. I’ve seen it cause confusion many times for new (and old!) Java developers.

Checking a new developer has actually managed to install the correct JDK for a given project is still a thing I have to do, all the time.

Sdkmans docs also have no bearing on the multiple build systems in the java world too, which again simply a non-issue in DotNet and many others.
by fzwang | 2025-09-17 14:37:22+00:00
This is an interesting question. I work with students (older teens/young adults) and they are dealing with similar issues. It seems like the world's expectations shifted very quickly under their feet.

I don't think anyone knows the answer. As a hiring manager, I definitely put less weight on generic CRUD apps etc nowadays. You can argue that people can actually just copy and paste from SO before, and that's true, but even with that you had to have some knowledge so integrate what you've copied. With AI assist, the process is orders of magnitude easier, as you can just re-try prompts etc.

What I look for instead is more information on the process of creation, which usually means examining their writing. How did they get the idea? how did they think about what features to build? But even this is not immune to AI contamination.

Overall, I think we're likely to move towards more reliance on verifiable longitudinal data rather than "spot checks". It's much more difficult/challenging to re-create for "portfolio cheaters", and easier for authentic applicants. I get my students to write a dev journal which I verify, and use that as part of a private portfolio that we can share with potential employers.

Overall, I'd say the vetting process is much more onerous on both sides and portfolios will now need proof-of-authenticity.
by nathanrf | 2025-09-17 14:37:22+00:00
It is as simple as: the person who contributed the proofs/implementations chose Rocq.

I did some small proofs in Dafny for a few of the simpler deciders (most of which didn't end up being used).

At the time, I found Dafny's "program extraction" (i.e. transpilation to a "real" programming language) very cumbersome, and produced extremely inefficient code. I think since then, a much improved Rust target has been implemented.