MurphyA/hacker-news huggingface dataset:
by miiiiiike | 2025-09-26 19:49:25+00:00
Security starts at the edge.

Have you used JWTs in production? Better to bounce a bad JWT with a server written in C/C++/Rust/Go at the edge than to pass it back and have it tie up a Python or Node process.

Even in Python the time to validate a small JWT is negligible. At the edge it's nearly imperceptible.
by iamnothere | 2025-09-26 19:49:32+00:00
This isn’t specific to Framework but should be similar on more or less all supported devices: https://genodians.org/nfeske/2025-01-30-sculpt-os-walkthroug...

The Sculpt OS articles on genode.org also provide a thorough overview: https://genode.org/documentation/articles/index
by myrmidon | 2025-09-26 19:49:40+00:00
> The thing is, fundamentally there is very little difference between a truck, a bus and a tank.

I can see your point, but I'm not buying this argument for multiple reasons.

First, if you do blanket-protectionism like this, the actual strategic gain per "wasted" tax-dollar is abysmal. You could have just bought those singaporean busses, and spent the money on skunkworks and lithium mine subsidies instead if you actually needed that resilience and military capability.

But secondly, I would argue that you really don't. What kind of war are you even anticipating where you would need massively scaled up tank production of all things? The US, currently, could fight an offensive land war against the whole continent pretty much (regardless of foreign support), and for anything else tank production capabilities are more than sufficient.

Being independent sounds really good on paper (and looks appealing when glancing e.g. at the European gas situation), but isolating your nation economically has a really shitty track record, historically, especially when you are not sitting on top of a global empire to circumvent some of the drawbacks.

> we need to make sure that our populations actually get some more of the wealth and income that is being generated every year so they can afford it, like in the past!

100% agree with that, but I think this is a (tax) policy failure most of all: my take is that in a capitalist society capital inevitably accumulates at the top, and regulatory backpressure (progressive taxation and antitrust law) is needed to keep the wealth/income distribution somewhat stable; the US has been shitting the bed in that regard for more than half a century now with predictable outcomes for wealth/income distribution (similar for other industrialized nations). Redistribution/balancing dynamics ("poor people getting paid for labor") are also getting weaker because unskilled labor lost lots of relative value.
by lacy_tinpot | 2025-09-26 19:49:46+00:00
If a State can't be trusted with data of its citizens it can't be trusted with passports, birth certificates, or any numerous other instances of identity. Being able to identify citizens is basic and essential to the functioning of a State whereby the failure to do means the total failure of the State.

In effect the State is no longer a State and is in fact entirely dysfunctional.
by pessimizer | 2025-09-26 19:50:06+00:00
They're tuned (and its part of their nature) to be convincing to people who don't already know the answer. I couldn't get it to figure out how to substitute peanut butter for butter in a cookie recipe yesterday.

I ended up spending an hour on it and dumping the context twice. I asked it to evaluate its own performance and it gave itself a D-. It came up with the measurements for a decent recipe once, then promptly forgot it when asked to summarize.

Good luck trying to use them as a search engine (or a lawyer), because they fabricate a third of the references on average (for me), unless the question is difficult, then they fabricate all of them. They also give bad, nearly unrelated references, and ignore obvious ones. I had a case when talking about the Mexican-American war where the hallucinations crowded out good references. I assume it liked the sound of the things it made up more than the things that were available.

edit: I find it baffling that GPT-5 and Quen3 often have identical hallucinations. The convergence makes me think that there's either a hard limit to how good these things can get which has been reached, or that they're just directly ripping each other off.
by skavi | 2025-09-26 19:50:21+00:00
I’ve always felt Rust’s Future was a super clean design. It’s interesting that pw_async2 makes a “Dispatcher” accessible in its Context. Earlier designs of rust’s Context did the same [0], but now it carries nothing but the Waker (and a LocalWaker technically).

[0]: https://github.com/aturon/rfcs/blob/async-trait/text/0000-as...
by SoftTalker | 2025-09-26 19:50:22+00:00
It's probably more the brakes than the engine. Diesel engines don't provide much of an engine braking effect (unless fitted with additional mechanisms a/k/a "Jake Brake" to provide this) so the vehicles use friction brakes any time they need to slow down, which can be jerky especially with air brakes. Electric buses would have regenerative braking which is probably smoother.
by Spooky23 | 2025-09-26 19:50:38+00:00
I’m on a city e&a board. A couple of PE groups have rolled up the remaining fire truck manufacturers. 3 companies own 75% of the market. This is a well known issue… Google away and there’s lots to read about. I know nothing about cement mixers.

A rig that was $500k in 2010 is $2-2.5M now. That’s “cheap” —- volunteer fire companies tend to pimp up the trucks (usually they are paid via grant), cities are cheap on capital spend.

It’s a squeeze play as if you don’t keep the trucks up to date with modern gear, insurers will raise homeowners premiums. Bad look for the mayor.
by thaumasiotes | 2025-09-26 19:50:43+00:00
> simplified characters used because that easier for me as non Chinese person to write

Really? What makes one style or the other easier for you to write?

Note that you didn't actually succeed at using simplified characters; 风 is simplified, but 龍 isn't.

> And Japan still uses trad Chinese characters as one of its writing systems.

No, that's just false. They use their own system, which involves some characters that match traditional Chinese, some characters that match simplified Chinese, and some characters that are specific to Japanese.
by mustache_kimono | 2025-09-26 19:50:45+00:00
> Rust is trying to systemically improve safety and reliability of programs, so the degree to which it succeeds is Rust's problem.

GNU coreutils first shipped in what, the 1980s? It's so old that it would be very hard to find the first commit. Whereas uutils is still beta software which didn't ask to be representative of "Rust", at all. Moreover, GNU coreutils are still sometimes not compatible with their UNIX forebears. Even considering this first, more modest standard, it is ridiculous to hold this software to it, in particular.
by scuff3d | 2025-09-26 19:51:03+00:00
Sometimes I feel like the entire world has lost its god damn mind. To use their bridge analogy, it would be like if hundreds of years ago we developed a technique for building bridges that technically worked, but occasionally and totally unpredictability, the bottom just dropped out and everyone on the bridge fell into the water. And instead of saying "hey, maybe there is something fundamentally wrong with this approach, maybe we should find a better way to build bridges" we just said "fuck it, just invest in nets and other mechanisms to catch the people who fall".

We are spending billions to build infrastructure on top of technology that is inherently deeply unpredictable, and we're just slapping all the guard rails on it we can. It's fucking nuts.
by godelski | 2025-09-26 19:51:09+00:00
Is this so unusual? Almost everything that is simple was once considered complex. That's the thing about emergence, you have to go through all the complexities first to find the generalized and simpler formulations. It should be obvious that things in nature run off of relatively simple rulesets, but it's like looking at a Game of Life and trying to reverse engineer those rules AND the starting parameters. Anyone telling you such a task is easy is full of themselves. But then again, who seriously believes that P=NP?
by gowld | 2025-09-26 19:51:28+00:00
> Often what happens is some nontrivial branch of mathematics suddenly finds a novel and impactful application. Then crowds jump in to learn that Math. But it's mostly already a little too late for them, they have missed this bus.

However, in the meantime, the experts in that math have "missed the bus" on whatever the application area is, that the math expert knows not enough about because they were studying math instead.
by danabramov | 2025-09-26 19:51:48+00:00
Yeah, atproto pushes this down to be a community/governance issue. Nobody is preventing apps from working out a common standard and supporting it. However, nobody is forcing them to do that either. So it will play out with natural dynamics. What atproto ensures is that there's a convention for strongly-typed foward-evolving schemas and how they get validated (and reverse domains specify the authority). But ultimately cooperation is up to the community.
by futuremiles95 | 2025-09-26 19:51:58+00:00
There's a growing need to use browser automation to complete tasks as well as for testing. We've created an open sourced tool that observes user's activity on your website and allows you to generate browser automation workflows from those sessions with just a click of a button, and embedding a javascript snippet. We aren't looking to compete with playwright or infrastructures like browserbase. We can work with them

website: https://dev.darknore.ai/ Twitter: https://x.com/milestoness_ Linkedin: https://www.linkedin.com/in/miles-tucker-software-engineer/
by verdverm | 2025-09-26 19:53:05+00:00
There is also a Working Group that just formed to push the envelope on private data / permissioned spaces

Links to my own efforts on this

- https://github.com/blebbit/atproto (fork)

- https://youtu.be/oYKA85oZc8U?si=DIf09hu8-REw-yHj&t=3758 (presentation I gave last week)
by Verdex | 2025-09-26 19:53:23+00:00
Recently, I've kind of been wondering if this is going to turn out to be LLM codegen's Achilles heal.

Imagine some sort of code component of critical infrastructure that costs the company millions per hour when it goes down and it turns out the entire team is just a thin wrapper for an LLM. Infra goes down in a way the LLM can't fix and now what would have been a few late nights is several months to spin up a new team.

Sure you can hold the team accountable by firing them. However this is a threat to someone with actual technical know how because their reputation is damaged. They got fired doing such and such so can we trust them to do it here.

For the person who LLM faked it, they just need to find another domain where their reputation won't follow them to also fake their way through until the next catastrophe.
by lagrange77 | 2025-09-26 19:53:28+00:00
Awesome, i love listening to Bach while developing.

While you're here, what other classical music can you recommend, especially for listening while working/focusing?

For me, it's currently

- Max Richter, discovered recently and he is fantastic

- The 'New Classical Essentials' playlist in Apple Music

- Brahms, especially String Sextet No. 1 (warning: can make Vulcans cry)
by numpad0 | 2025-09-26 19:53:36+00:00
> Singapore has a very efficient, highly trained, highly educated, highly paid administrative staff,

Or it's just literal economy of scale. 10 buses, 17 buses, vs 240, that difference changes economics completely.

You will be buying 500 of headlights, little under 1k tyres and wheels, couple thousands of seats, etc. Those are all whole lot numbers. That will save tons of overheads.
by munificent | 2025-09-26 19:53:40+00:00
> They will refuse to accept "That's just not how that works" as an answer.

For many people with mental illness, it's not a "refusal". That implies agency and deliberate choice from a properly functioning mind. When it's the mind itself that is malfunctioning, those kinds of verbs don't really work. The very definition of "delusion" is a thing you are compelled to believe even in the absence of evidence. If you are able to stop believing it, if you are able to not refuse to change your belief, then it's not a delusion in the first place.

Further, some people suffering in this way have anosognosia, which means not only are they delusion, but their mind is also incapable of perceiving its own malfunction.
by cnst | 2025-09-26 19:53:49+00:00
Via http://www.mail-archive.com/nginx@nginx.org/msg25495.html.

Sadly, it's been announced yesterday that the nginx.org mailing lists are being shutdown by end of month (Sept 2025).

P.S. Probably one more reason to look into into the freenginx fork of nginx — https://news.ycombinator.com/item?id=39373327 — their mailing lists are at http://freenginx.org/en/support.html.
by zvr | 2025-09-26 19:54:37+00:00
I think the idea was, if you could codify all your choice parameters, you could end up with a unique identifier for each combination.

Kind of like the six different variants of Creative Commons licenses: CC-BY, CC-BY-SA, CC-BY-NC, CC-BY-NC-SA, CC BY-ND, CC BY-NC-ND.
by noodlesUK | 2025-09-26 19:55:39+00:00
A birth certificate is not proof of citizenship or legal presence in the UK for anyone born after 1983.

Anchoring proof of citizenship is going to become a very obnoxious problem going forward if there is not a population register or universal ID system introduced, as you'll have to go back however many generations it takes to reach birth before 1983.

I think the UK and Ireland are the only countries in the entire world that have non-birthright citizenship and no citizenship register, which is a less than ideal combination.
by prmph | 2025-09-26 19:55:46+00:00
Wow, this statement is so out of touch I don't even know where to begin to rebut it.

I, a software engineer with decades of experience, and now an entrepreneur having a small startup, with funds to live for years without burdening the public purse anywhere, specking virtually native level English, and having previously lived in the US for years, would still have a _very_ hard time immigrating to any western country right now, partly because I'm from the global south (I'm Ghanaian).

If you know of any western country where moving there, even temporarily, is as simple as applying with my information, let me know.
by dooglius | 2025-09-26 19:56:11+00:00
I did read the entire article yeah, and I was rounding down with "271", but it wasn't clear to me what change you made that got you to the finish line. Are you saying that the next improvement was to force Gurobi to use integer values? It's surprising to me that wouldn't kill performance since ILP is NP-hard whereas real LP can be solved in polynomial time.
by leshokunin | 2025-09-26 19:56:15+00:00
HMU! I’m “shokunin.” on discord, leshokunin on TG / Twitter.

I’d prefer running our own thing separate from bluesky. We’d give people something like username.page.app and they’d make posts there. If people wanna follow on bluesky they can, and we provide a username that’s just the url.

I know we can do all this by just posting to Bluesky. But I want to give usernames, host the data on our end, and I’d prefer using the protocol but not be directly associated or dependent on Bluesky.
by verdverm | 2025-09-26 19:56:31+00:00
What do you mean by "instance"?

There are several protocol components you can run independently, each filling a different role and having different complexity levels

If you mean the PDS, not sure if it is simpler than the unknown point you are looking to compare against. Bsky did just announce that you can migrate back to their PDS hosting to make trying out alternatives a one-way trip
by aDyslecticCrow | 2025-09-26 19:56:59+00:00
What i take away is the simplicity and scaling behavior. The ML field often sees an increase in module complexity to reach higher scores, and then a breakthrough where a simple model performs on-par with the most complex. That such a "simple" architecture works this well on its own, means we can potentially add back the complexity again to reach further. Can we add back MSA now? where will that take us?

My rough understanding of field is that a "rough" generative model makes a bunch of decent guesses, and more formal "verifiers" ensure they abide by the laws of physics and geometry. The AI reduce the unfathomably large search-space so the expensive simulation doesn't need to do so much wasted work on dead-ends. If the guessing network improves, then the whole process speeds up.

- I'm recalling the increasingly complex transfer functions in redcurrant networks,

- The deep pre-processing chains before skip forward layers.

- The complex normalization objectives before Relu.

- The convoluted multi-objective GAN networks before diffusion.

- The complex multi-pass models before full-convolution networks.

So basically, i'm very excited by this. Not because this itself is an optimal architecture, but precisely because it isn't!
by leshokunin | 2025-09-26 19:57:03+00:00
I’d prefer running our own thing separate from bluesky. We’d give people something like username.page.app and they’d make posts there. If people wanna follow on bluesky they can, and we provide a username that’s just the url.

I know we can do all this by just posting to Bluesky. But I want to give usernames, host the data on our end, and I’d prefer using the protocol but not be directly associated or dependent on Bluesky.
by n4r9 | 2025-09-26 19:57:12+00:00
I disagree. Bruce Lee treated it as a learning experience as well.

> At first, Bruce told Mito that Big Lew was slow, his arms were weak, and he wasn’t good at chi sao. A reporter who witnessed one of their workouts was more impressed with Bruce than Big Lew. He wrote that Bruce could “leap and kick over Alcindor’s head, and says he can defeat him by taking advantage of his shin and thigh with a kick.”

> But Bruce soon realized all that was irrelevant. Even if he could get inside Big Lew’s reach, it wasn’t easy. And with his front kick, Big Lew could rattle the rim of the basket. Bruce’s Wing Chun skills were all but useless. He joked with Doug Palmer, “Try doing chi sao with someone when you’re staring at his belly button.” Bruce called Taky and told him not to focus on chi sao in the school anymore.

> “Bruce and I sparred regularly,” Kareem remembered. “But we didn’t compete; I was like a drawing board on which he could work out his theories and he was instructing me how to deal with people and attack him.”
Ask HN: Am I missing out by not being at one the high growth AI companies?
by mutator | 2025-09-26 19:57:29+00:00
Context - A senior engineer in Bay Area with 10+ years of experience. Current company is a unicorn startup, pays well, work seems impactful, but revenue growth at the company is slowing down. A lot of colleagues have moved on to the foundational model companies, fast growing/hot startups.
by jrowen | 2025-09-26 19:57:35+00:00
I think a lot of people treat their own content as disposable also though. I don't know if most people would really care to save or dig through their entire Twitter history, for example. The rise of Stories is evidence of this. We're moving from a culture of preserving ancient pieces of paper to swimming in a never-ending river of data where there's so many things coming at you that you just move forward and don't have a ton of time to look back.

People that really want to preserve and archive their content find a way to do it and manage it separately. I have all the pictures that I've posted to Instagram. I have anything I've written that I cared enough to keep. If and when IG dies or I move onto the next thing, am I really going to want to meaningfully preserve and transfer the specific contents of that walled garden somewhere else? Maybe. I can definitely see the value, but it doesn't seem super compelling to me yet.

There is something to be said for the uniquely curated walled gardens and the centralized trust and organization and opinions they bring. When I started an Instagram account, I didn't want to transfer my Facebook world, it's a new world with a fresh start. I didn't want the same friends, the same voice for myself, etc. I certainly wouldn't have wanted to dig through all of that to figure out what made sense to carry over.
by robotresearcher | 2025-09-26 19:57:45+00:00
Mandatory ID cards are a cultural no-no in the UK. They were required during WW2, then discontinued in peacetime. People burned them in the street. You are not required to show ID to a police officer. Even when driving you don’t need to show a license on the spot, though if stopped for cause you have to present it at a police station within three days. At least those were the rules when I was a young driver there.

The UK has an idiosyncratic relationship with freedom. Technically you have little because (formally limited) monarchy. In practice there’s this aversion to IDs, things like freedom to roam which gives a lot of access to private property, and the ability to get citizenship elsewhere and keep UK, which republics like the US and India won’t allow.

And yet there’s massive camera surveillance from the recent nanny state. And libel laws mean you have to be careful what you print about people. Odd place. Maybe the weather inspires it.
by magicalhippo | 2025-09-26 19:57:52+00:00
Newsgroups as in NNTP[1] fits those criteria, no?

Granted, federated bit is more tricky now. Back in the days many if not most ISPs ran a NNTP server. But the protocol supports it.

[1]: https://en.wikipedia.org/wiki/Network_News_Transfer_Protocol
by reissbaker | 2025-09-26 19:57:58+00:00
I like to think of the security issues LLMs have as: what if your codebase was vulnerable to social engineering attacks?

You have to treat LLMs as basically similar to human beings: they can be tricked, no matter how much training you give them. So if you give them root on all your boxes, while giving everyone in the world the ability to talk to them, you're going to get owned at some point.

Ultimately the way we fix this with human beings is by not giving them unrestricted access. Similarly, your LLM shouldn't be able to view data that isn't related to the person they're talking to; or modify other user data; etc.
by balozi | 2025-09-26 19:58:05+00:00
Federal subsidies don't stop at paying for much of the bus purchase costs, they are also paying for much of the roads and bridges the busses run on. Subsides cover of the operating costs, especially labor and energy. And at the very end, the reason most localities are able to offer free rides or very low cost rides is because federal dollars are subsidizing the final ride fares.
by leshokunin | 2025-09-26 19:58:33+00:00
I’d prefer running our own thing separate from bluesky. We’d give people something like username.page.app and they’d make posts there. If people wanna follow on bluesky they can, and we provide a username that’s just the url.

I know we can do all this by just posting to Bluesky. But I want to give usernames, host the data on our end, and I’d prefer using the protocol but not be directly associated or dependent on Bluesky.
by TimorousBestie | 2025-09-26 19:58:41+00:00
I’m slightly peeved that Feeding America’s prior system is referred to as “centralized food allocation” when they go on to explain there was essentially no communication between member food banks and Chicago. They go so far as to quote a initially skeptical (but anonymous) socialist who becomes in the end a true believer. This isn’t some triumph of capitalism over socialism, it’s the triumph of basic cybernetics over no system at all.

Project Cybersyn was not much different than the system the market economists landed on.

https://en.m.wikipedia.org/wiki/Project_Cybersyn