MurphyA/hacker-news huggingface dataset:
by ulrikrasmussen | 2025-09-30 09:28:42+00:00
I am split on SQL. On one hand I love the declarative approach and the fact that I can improve the run-time complexity of my queries just by adding an index and leaving the queries as is. On the other hand, I hate how the run-time complexity of my queries can suddenly go from linear to quadratic if the statistics are not up to date and my query planner misjudges the amount of rows returned by a complex sub-query so it falls back to a sequential scan instead of an index lookup.

I would be interested in a query execution language where you are more explicit about the use of indexes and joins, and where a static analysis can calculate the worst-case run time complexity of a given query. Does anyone know if something like that exists?
by komali2 | 2025-09-30 09:29:04+00:00
Is anyone else obsessed with bells? I fucking love bells. Genuinely my favorite thing in the world is finding big bells and sitting somewhere near them while they're struck. I really want to explore this interest more some day, like if I get hella rich I'm gonna have some fucknormous bell forged. Like this: https://www.youtube.com/watch?v=6bqpHuloKZs
by edarchis | 2025-09-30 09:29:26+00:00
The author is using a random CMS, namely Hugo.

You probably mean a PHP that can be hosted for cheap. But then, you end up with a Wordpress nightmare, even more spam and security issues.

I had a pretty popular blog and some posts gathered hundreds of useful comments. But I was so tired of fighting spam that I threw it all away and started using Hugo too, without comments.
by kketch | 2025-09-30 09:29:31+00:00
The main concern here isn’t really whether the agent needs access to the whole codebase. Personally I feel an agent might need to have access to all or most of the codebase to make better decision, see things have been done before etc.

The real issue is that containers are being used as a security boundary while it’s well known they are not. Containers aren't a sufficient isolation mechanism for multi-tenant / untrusted workloads.

Using them to run your code review agent again puts your customers source code at risk of theft, unless you are using an actual secure sandbox mechanism to protect your customers data which from reading the article does not seem to be the case.
by mixedbit | 2025-09-30 09:30:01+00:00
Comments are the only functionality of a blog that require write access to a backend, without comments a blog can be a simple collection of static files. Any write access to a backend exposes the blog to potential vulnerabilities, requires the backend to be kept up to date. This is not dead simple and does require maintenance. Updating is not trivial if a version of a backend becomes obsolete, you need to dedicate time to migrate your backend to new versions to stay secure.
by crashabr | 2025-09-30 09:30:12+00:00
People have different level of tolerance to negative behavior. That includes both your team and your community. Having a clear rules allows you to

1) point both involved and uninvolved people to the code of conduct when you end up taking action.

2) avoid disparity of enforcement within your team

3) funnel disagreements (from both teammates or community members) by focusing them on the rule, rather than on a general debate on how should the community should be managed.

If people commit a lot of energy to a community/project then for many "I didn't like this behavior, end of discussion" won't cut it.
by seec | 2025-09-30 09:30:18+00:00
But for most people without the large platforms and tooling of those megacorps the internet is mostly useless. Where would they even start without Google search?

And people come to the internet to communicate and form groups, having a gazillion website fundamentally does nothing for this goal.

Even today we can see the attempt at a decentralized network with things like Mastodon but it is never going to take in any meaningful manner, because the centralisation aspect is exactly what people are looking for. It's kind of the forums of old roman cities. You need one big one to be able to accept everyone, having a bunch of small ones spread out in the city is not only useless but also completely counterproductive.

The only real problem with the megacorps is that they figured out better and faster than the hopeless idealists what people would actually want/need. So instead of having things that could be interoperable public utilities with a focus on standards, we have the wild west of commercial competition and monetary exploitation with ads.

All of this happened/exist because the internet is a naive and lackluster protocol. Without the massive commercial investment of those companies, it would largely be useless. The reason it took off is basically only because it was free, not for real technical merit (the same thing for Linux).
by mytailorisrich | 2025-09-30 09:30:33+00:00
> to new contributors from marginalized groups,

For software projects that are overwhelmingly conducted online the very concept of "marginalized group" is close to irrelevant and meaningless [1].

I think what happens is that some people want to be very, very vocal about whatever "group" they belong to and want to feel offended and oppressed. In recent years, arguments and campaigns against specific technical terms ('master', 'blacklist', even 'legacy code' spring to mind) are examples of this, IMHO.

[1] https://en.wikipedia.org/wiki/On_the_Internet,_nobody_knows_...
by zygentoma | 2025-09-30 09:30:39+00:00
https://github.com/zgtm/localsetup

Hobby. Very rudimentary, not everything working yet.

Think ansible for your user account (except it will definitely not be ansible for your user account).

Whenever I have a new machine, I do the same steps over and over again:

- Installing some packages (like make)

- Setting up an ssh key

- Cloning some git repositories

- Setting up dotfiles

- Installing rustup / rust

- …

Until recently I tried doing all of that with a bunch of bash-scripts, but that turned out to be messy and not a joy to maintain. So now tried a slightly different angle with a rust tool that you can just pull out of the CI, no dependencies, and it will setup everything (for me).
by sunaookami | 2025-09-30 09:31:47+00:00
Removed Disqus from my website after getting huge spam waves (not the classic garbage spam but "real" comments, but for completely different sites, like they were intended for other sites but instead posted to mine. They were all from a few days old accounts). I wish I'd have used the built-in WordPress comments from the start but well, it was a different time back then. Related: I've used WordPress Jetpack Stats until they extorted every free website, no export possible. Would've cost me 200 € per year, that's more than I pay for my website. Switched to self-hosted Umami but 10 years of data just gone.
by ashirviskas | 2025-09-30 09:31:53+00:00
Sonnet 4.5 gave me this:

Now let me calculate whether your configuration will work. I need to determine the cold weather voltage to ensure it stays within the inverter's 600V maximum. Panel specs I found: Voc (STC): 39.61V Vmp: ~33.5V (estimated based on typical ratio) Imp: ~13.1A (440W / 33.5V) Critical issue: Temperature coefficient The PS440M8GFH likely has a Voc temperature coefficient around -0.25% to -0.30%/°C (typical for N-Type TOPCon panels). Let me use -0.27%/°C as a conservative estimate. Your configuration: 2 strings × 4 panels = 8 panels total String voltage at STC: 4 × 39.61V = 158.44V Cold weather calculation for upstate NY: Upstate NY can see extreme lows of -20°F to -30°F (-29°C to -34°C). Using -30°C as worst-case: Temperature difference from STC: 25°C - (-30°C) = 55°C Voltage increase = 39.61V × 0.27% × 55°C = 5.88V per panel Cold weather Voc per panel = 39.61V + 5.88V = 45.49V String voltage at -30°C: 4 × 45.49V = 181.96V Analysis: Max voltage: 182V << 600V - Safe, plenty of margin MPPT range: 182V is within 120-500V - Will track properly Current: 13.1A << 25A per MPPT - No problem However, there are concerns: You're only using 182V max when the inverter can handle up to 500V MPPT range. This is inefficient - you're leaving significant wire sizing benefits on the table. With 600V max, you could run 12-13 panels per string instead of 4. Power utilization: 8 × 440W = 3,520W total, but you have 12kW of PV capacity available (15kW recommended max). You're using less than 30% of the inverter's solar input capability. Each string on separate MPPT wastes one tracker - both strings are identical orientation/shading, so they'd perform identically. Will it work? Yes, safely. Is it optimal? No.
by florkbork | 2025-09-30 09:32:47+00:00
Yeah, nah.

Watch how an open discussion here: https://github.com/nixos/rfcs/pull/98

... devolves into a massive outcry because a bunch of folks not behaving in good faith didn't like "we don't support fascism or bigotry".

It reached the level of

* Vile sock puppet attacks on a trans individual, who merely kept saying "Fascism, no thanks in this community" * "Denounce the Marxists!" As a rallying cry becomes a talking point

If you reflect on the behaviours seen there and ask why is this so heated for proposing consequences for bad behaviour; you may come to the realisation that the advocates of bad behaviour... don't want to be accountable.

This post is translated, perhaps some of the nuance is lost. But it hand waves away dhh's behaviour as "controversial figures in the community"

If that's genuinely what is believed, I'd like a replacement on this Overton window, thanks! It has been fractured.

The article does not consider the consequences or implications of malicious acts, and the harm on others adequately.

A clear CoC or similar outlines expected norms, and does not have to be copypasta/is infact better if it is derived from a consensus. It's a statement of what the people with power will hold themselves to, and if that turns out to be a lie - a performative document that is not actually used - newcomers can view the behaviour they observe against that standard; and leave or demand justice if they are wronged.

By not publishing an ethical or moral standard you abide by, even if it's a text file with "get bent" in it; you invite people to interact with you with expectations. If you are part of the 1-4% of the population who are sociopaths, you are advocating to hurt people without consequence. If they are part of the 1-4% you are permitting behaviour without recourse.

Could you imagine a post advocating for "don't fix security holes because 92-98% of people don't know about exploiting them?" Would that be acceptable?

Why would you not state a policy?
by pjc50 | 2025-09-30 09:33:52+00:00
> normalizes hurting other people’s feelings with your word

This is the Trammel problem: if you want a PvP-enabled project, you discover that people are mostly interested in the part where they hurt others feelings and then go bananas when their own feelings are hurt.

> needs to be a system for accepting and expelling people

The private member's club is an old institution. But people tend to notice and object when it ends up being white guys only.
by thomashabets2 | 2025-09-30 09:33:59+00:00
When the ads showed up I immediately put disqus loading behind a "load comments despite ads" button, and instead just had a static export of the comments loaded by default.

But that's a temporary solution.

Sure, I can code an in house comment system within an hour, but the real work is to combat spam. Because people (and now also disqus) suck.
by myrmidon | 2025-09-30 09:34:14+00:00
I'm not throwing around the Nazi analogy lightly here:

Discrimination against outgroups/dissenters/opposition was basically the central domestic tenet under the Nazi Regime ("Gleichschaltung"), aiming to root out opposition and dissent in any form. A lot of this happened long before setting up extermination camps.

In my view, every person is free to pick who they work or associate with, but hiring discrimination achieves little and opens the door for extremely harmful abuses of this very mechanism.

People are not really gonna stop drinking, smoking or rabidly patrioting just because you won't hire them, they're just gonna hate "your" class of people more, and behave the same way towards groups they don't like.

A society where every progressive person refuses to hire rednecks is also a society where every redneck refuses to hire colored people, immigrants, LGBT people/advocates, feminists.

Not only that, but the majority of society was very obviously wrong about the merit of a lot of viewpoints in the past, and the system you advocate for would have a much harder time admitting/fixing such mistakes in viewpoint valuation (slavery, apartheid, sexism, religious intolerance, racial discrimination, LGBT discrimination just to name a few).

I'm quite happy to continue this discussion, but "what are the similarities of this to Nazi tenets" is the least interesting aspect to me.
by h4ch1 | 2025-09-30 09:35:04+00:00
"I built" more like claude-code built.

Also I don't know what the rush is to get a shiny new Rust implementation out asap that you need to vibe code the entire thing.

The Github stars couldn't be that serious.

Also the disclaimer at the end "Built with <3 in Rust. Ready for production use.";

Ready for production use is a strong strong claim when the entire thing is vibe-coded.
by thrance | 2025-09-30 09:35:09+00:00
> DHH condemned detailed and strict CoC like the Contributor Covenant as a “trojan horse” that should be purged from projects.

Of course he would, he has made several transphobic remarks in the past. Normal people shouldn't take issue with the mere existence of a markdown document that basically says "don't be a dick to people because of who they are". Ostracizing people from projects because you are prejudiced against them, now that hinders open-source. How many potential contributors were scared away by such remarks?
by wiether | 2025-09-30 09:36:41+00:00
And I can tell from experience that it's quite easy to get rid of "brilliant jerks" during the recruitement process.

The key is to make them stop the process, not you; so you won't have to deal with HR or management telling you that they are brilliant and you should not reject them just because "you" don't like their behavior.

Scaring jerks out is quite easy: just be excessively nice during the interview. Tell them how much time and energy everybody take caring for each other's well-being and feelings. Tell them that in the team you have lunch together every single day. And you do stuff together after works. And during the weekends.

They'll just run.

Sure, you're lying because you're working in a regular team where people are simply respectful professionnals, but they don't need to know that. You'll do everybody's a favour. The jerk included.
by geordiew | 2025-09-30 09:36:58+00:00
I think it is fair to say that any blowing-up solution of navier stokes would be of purely intellectual interest. NS is a problem that many smart people have thought about and failed to solve. The current picture is that there are probably self-similar blowing up solutions that exist at extremely high codimension in the space of initial conditions. Thus they are "probability zero", and, if essentially never arise in nature. (A nice analogy: imagine a movie of a stone falling into a pond, and the ripples created afterwards. Now run the movie of the ripples backwards. We never see this in nature!)
by adev_ | 2025-09-30 09:37:10+00:00
> However it seems strange that they didn't think about that. Maybe it's only a bad choice of words, which is equally strange.

I think it is just a different intend.

To my understanding, the EUPLv1.2 is structured as a weak copy-left license in the spirit of the MPLv2 but with a major effort on license compatibility.

Its quite well explained here:

https://interoperable-europe.ec.europa.eu/collection/eupl/li...

The intend seems to never be a "strong license" that enforce "strong copyleft" like the GPLv3 / AGPL everywhere.

It is more to give a license under which you can create a project that blend a lot of different component under different licenses (GPL, MPL and co) without requiring an army of lawyer to check the compatibility of this mess.

That is currently immensely valuable in academic software and in large international collaborations.

It also clarify the License contamination behavior over Linking at European Level which is very welcome, because it is frankly speaking, a mess, with license like LGPL.
by JdeBP | 2025-09-30 09:37:12+00:00
One interesting reason is that there are no official non-English versions of the GPL at all, the FSF (as it says itself) not having the means to ensure robust legal text in multiple languages, whereas the EUPL has official versions in 23 of the E.U.'s languages, the E.U. very much having the means to produce legal documents in tens of languages.
by lxgr | 2025-09-30 09:37:26+00:00
I'm not exactly upset, but I have a somewhat uneasy feeling about how a foreign private company can seemingly walk all over national and international law like that and get away with it. (SpaceX isn't exactly an NGO or hacker/ham collective.)

Sure, it currently seems to lead to good outcomes in my eyes (democracy and access to information > most alternatives), but what if it one day does not? Trust in laws and international agreements is, like all trust, gained in drops and lost in buckets.
by serial_dev | 2025-09-30 09:38:24+00:00
I'm just having a hard time imagining someone who wants to be racist sexist xenophobe jerk to other people, but they saw you drafted a CoC last year in the root of your repository, so they won't... Or they were racist sexist xenophobe jerks, then you point out that "our community has a CoC", and they will stop.

None of these things happen in real life.
by Dylan16807 | 2025-09-30 09:41:07+00:00
Looking at the documentation, MySQL definitely has this feature now.

I don't think it understands when to use it.

I have a table where the primary key (A,B) is two integers. The first one is a single byte and only has a dozen distinct values. Any query I do based on just B ends up doing a table scan and being extremely slow. But if I add "WHERE A IN (1,2,3,4,5,6,7,8,9,10,11) AND" suddenly it's super fast.

So I'm stuck with a redundant index on just B if I don't want to add that cruft all over.

Anyway, yes, optimization is often possible in this kind of situation but don't trust your database engine to figure it out.
by vlad_ungureanu | 2025-09-30 09:41:23+00:00
Great insight into the real applications of LLMs. Also interesting to see that you find the Opus model being more successful for app development. In my experience, a combination of ChatGPT with Anthropic models yields the best results in coding.

Out of curiosity, how useful do you find the thinking mode in Claude Code?

Good luck with the PDF app!
by omgmajk | 2025-09-30 09:43:42+00:00
> simple ones like FizzBuzz where it's just a quick filter

I stumbled across a thread in r/cscareerquestions or maybe r/cscareers a while ago where several people argued that fizzbuzz was too hard because: "no-one is using the modulus operator in day to day work, so it's not something one should be expected to remember."

I found it very funny and draining at the same time.
by solstice | 2025-09-30 09:44:26+00:00
> The fire broke out on Friday evening at the national information resources service in Daejeon, a major technology hub 140km (87 miles) south of Seoul. The facility is one of three operational government datacentres managing critical digital infrastructure across the country.

> Workers were relocating lithium-ion batteries from a fifth-floor server room to the basement for replacement when one ignited, with the fire spreading to other batteries and adjacent servers. One worker sustained first-degree burns, and firefighters extinguished the fire after 22 hours.

> By Saturday morning, officials had shut down 647 government systems fearing further damage. Government email and intranet systems ground to a halt. Mobile identification services went dark, as did postal banking, complaint portals, and major government websites.
by pjc50 | 2025-09-30 09:46:47+00:00
> like everywhere else in the world India’s fertility rate has dropped off a cliff

It's amazing when people flag this as a bad thing when it's undoubtedly a key component of getting places to prosperity in the first place. Got to get people away from being starvation-limited.

> I think India really only has capacity to send a sizable amount of its citizens overseas only for the next 5 years or so at which point migration out of India will largely subside.

That's how you can tell a country is ""winning"" in the international rankings, when more people want to move in than move out.
by noelwelsh | 2025-09-30 09:46:49+00:00
So I've been mildly nerd sniped. It looks like the first target was a PDP-10 [1]. It ran Stanford Lisp used by the "DEC 10" implementation of ML. The architecture is pretty unusual by modern standards, but it doesn't look to be that powerful and seems to top out at around 1MB of RAM. Next up we have a VAX [2] implementation. It's not clear which specific system it was originally developed for, but we're talking early 80s so it probably wasn't much more powerful than the PDP-10. Either way, I think a maxed Apple IIGS with a hefty 8MB of RAM and perhaps overclocked to 14MHz is more than enough raw power to handle ML. Unfortunately I haven't been sufficiently nerd sniped to actually implement this. I leave that as an exercise for the reader ;-)

[1]: https://en.wikipedia.org/wiki/PDP-10

[2]: https://en.wikipedia.org/wiki/VAX
by K0balt | 2025-09-30 09:47:26+00:00
This is an interesting premise.

I’m kinda torn between “genAI powered robots will have a ground truth reality as a reference, so they will ultimately be more grounded and effective that LLMs” and “LLMs are like drunk uncle Steve with his PHD swimming in vodka, and using genAI in robots will end up as well as having drunk uncle Steve drive home”.

Guardrails on tasks it will attempt are inevitable, but I can also see that becoming a paywalled enshitification farm.
by ramon156 | 2025-09-30 09:48:26+00:00
Interesting! have u taken a look at safeql? https://safeql.dev/

I'm personally not a fan of query builders for SQL. it's already a defined language, why are we trying to move away from queries? On top of that SafeQL is only a dev dependency, there's no abstraction. it gets ran through any query client you want