MurphyA/hacker-news huggingface dataset:
by mallowdram | 2025-09-10 19:08:36+00:00
We only need brains when we're alive, so extracting the points isn't required.

In terms of brains, the math is used to model the irreducible occurrences in brains - that everything is still in there. So the math only gives us a window into the complexity. Brains don't compute or calculate necessarily. As an analog, or analoga of differences, it never has to exclude, or experience loss.

For the details: Rhythms of the Brain or Unlocking the Brain both volumes.
by zachshefska | 2025-09-10 19:08:37+00:00
80 character limit on the post title is why I edited it in that way. Thanks for the feedback. Also the article was entirely organic. The journalist saw our article/interview in PYMNTS from last week (as referenced in the Fortune piece) and then wrote this. He interviewed me yesterday. This is a bummer. I have been building this company for six years and am so proud of what we have accomplished. I hope we can get this post back on the front page. It's a tremendous moment for our team and company and I am so excited to get feedback from commenters here on HN.
by bell-cot | 2025-09-10 19:09:35+00:00
How long have you been on the web, and how crowded is your industry (from an SEO PoV)?

At $Job, we've got a couple long-time micro-clients in niche industries. They don't bother with SEO. Spend $0 on ads. Have decades-old site designs. And are in the top 3 Google results for most search strings that they care about.
by ameixaseca | 2025-09-10 19:10:47+00:00
Keep in mind this is PHP.

There are tons of languages and frameworks made by developers who know what they are doing that do not treat everything blindly like strings.

For SQL in particular, you should never build queries directly from user input - any modern database supports bind variables or parameters, which completely eliminate any need for sanitizing input.

I agree with you regarding sanitization, and I'd add further that having to sanitize input for security purposes is a big sign of code smell and an overall insecure code by design.
by feoren | 2025-09-10 19:11:05+00:00
Covariance and contravarience is very useful, but it's quite annoying that it can only be used with interfaces and not classes/structs. I write lots of little monoid-like data wrappers like Named<T>, and I have to either go through the hassle of dealing with interfaces for something that shouldn't need it, or I have to abandon covariance. The .NET maintainers seem to think that nobody wants covariance on classes, but it would be very helpful to me.
by pron | 2025-09-10 19:11:18+00:00
Arenas are fantastic when they work; when they don't, you're in a place that's neither simple nor particularly efficient.

Generational tracing garbage collectors automatically work in a manner similar to arenas (sometimes worse; sometimes better) in the young-gen, but they also automatically promote the non-arena-friendly objects to the old-gen. Modern GCs - which are constantly evolving at a pretty fast pace - use algorithms that reprensent a lot of expertise gathered in the memory management space that's hard to beat unless arenas fully solve your needs.
by selectnull | 2025-09-10 19:11:19+00:00
Microsoft did a lot of bad things over the years, but Borland drove themselves over the cliff on their own. Instead of focusing on developer tools, they wanted to reinvent (and rename) Borland every few years in the 90s.

Bad management, bad decisions, bad products (Delphi 7 was peak). MS had nothing to do with that. And I'm sure Anders made a right move to abandon the sinking ship.

I'm still pissed at Borland for all those bad moves.
by freedomben | 2025-09-10 19:11:40+00:00
> Why the laundry room? Two reasons: Heat and noise. Pearce’s server was initially in his bedroom, but the machine was so hot, it actually made it too uncomfortable to sleep.

This is a rite of passage and a badge of honor for homelabbers/tinkerers/hackers to discover for themselves IMHO. If you haven't tried it, you should. The heat is bad enough to warrant moving it, but add the noise too, sprinkle in a few nights of bad sleep, and it becomes an effective form of torture :-D

Just don't decide to move it to a closet unless you also install some fans in there. I ended up finding a cozy spot under the staircase which worked quite well
by osigurdson | 2025-09-10 19:11:49+00:00
I guess it is reasonable to run some experiments, set up some bike lanes for a period of time. If they are used, keep them, if not maybe consider removing them.

Good point regarding the costs. The other advantage of dedicated / purpose-built bike paths is they likely don't have to be built to the same spec as ones designed for vehicle use (I assume - not a civil engineer).
by butlike | 2025-09-10 19:11:53+00:00
It's also obscene in this day and age I can't upgrade my weapon to out damage the boss if I feel I need to. One of my pet peeves is having game designers feel like their design supersedes how I want to play.

If I absolutely do not want to play a boss; for whatever reason, I should be allowed to find an alternative way to get through that area. If grinding endlessly for damage is the alternative, fine. But at least there is one.
by aurareturn | 2025-09-10 19:11:55+00:00
Serious question (I am no scholar on history), where were the safe harbors during the Great Depression?

Cash. Cash because everything became deflationary including a 90% crash in stocks. But I don't see a crash like that (Knock on wood). People are too aware nowadays to buy the dip. If a crash like that happens, then it'd be end times like nuclear war or alien invasion.
by koakuma-chan | 2025-09-10 19:12:04+00:00
> The lack of a 100% guarantee is entirely the problem.

I agree, and I agree that when using models there should always be the assumption that the model can use its tools in arbitrary ways.

> Solve that and you've pretty much solved prompt injection!

But do you think this can be solved at all? For an attacker who can send arbitrary inputs to a model, getting the model to produce the desired output (e.g. a malicious tool call) is a matter of finding the correct input.

edit: how about limiting the rate at which inputs can be tried and/or using LLM-as-a-judge to assess legitimacy of important tool calls? Also, you can probably harden the model by finetuning to reject malicious prompts; model developers probably already do that.
by eldenring | 2025-09-10 19:12:47+00:00
Very impressive! I guess this still wouldn't affect their original example

> For example, you might observe that asking ChatGPT the same question multiple times provides different results.

even with 0.0 temperature due to MOE models routing at a batch level, and you're very unlikely to get a deterministic batch.

> Not because we’re somehow leaking information across batches — instead, it’s because our forward pass lacks “batch invariance”, causing our request’s output to depend on the batch size of our forward pass.

The router also leaks batch-level information across sequences.
by rumble_poster | 2025-09-10 19:13:18+00:00
Hello everyone, we’re working on a project called IsItNerfed, where we monitor LLMs in real time.

We run a variety of tests through Claude Code and the OpenAI API (using GPT-4.1 as a reference point for comparison). We also have a Vibe Check feature that lets users vote whenever they feel the quality of LLM answers has either improved or declined. Over the past few weeks of monitoring, we’ve noticed just how volatile Claude Code’s performance can be.

Chart is here: https://i.snipboard.io/RydmH7.jpg

1) Up until August 28, things were more or less stable.

2) On August 29, the system went off track — the failure rate doubled, then returned to normal by the end of the day.

3) The next day, August 30, it spiked again to 70%. It later dropped to around 50% on average, but remained highly volatile for nearly a week.

4) Starting September 4, the system settled into a more stable state again.

It’s no surprise that many users complain about LLM quality and get frustrated when, for example, an agent writes excellent code one day but struggles with a simple feature the next. This isn’t just anecdotal — our data clearly shows that answer quality fluctuates over time.

By contrast, our GPT-4.1 tests show numbers that stay consistent from day to day.

And that’s without even accounting for possible bugs or inaccuracies in the agent CLIs themselves (for example, Claude Code), which are updated with new versions almost every day.

What’s next: we plan to add more benchmarks and more models for testing. Share your suggestions and requests — we’ll be glad to include them and answer your questions.

https://isitnerfed.org
by franze | 2025-09-10 19:13:33+00:00
hard to say without the URL, just post it

i have seen everything, from page set to noindex, from page blocking googlebot, from dns resolving errors, from special http headers just for googlebot, from google not being able to see anything on the hompage, from hidden spam issues, hacked sites, from robots.txt disallowing /, from x-robots-tag noindex at cdn, from rel=canonical to the wrong domain, from 302 chains and soft-404 homepages, from mixed http/https splitting signals, from geo redirects trapping bots, from bot protection blocking googlebot, from server 5xx timeouts under crawl, from spa content with empty html, from blocked css/js so rendering fails, from cloaking-by-accident via ab tests, from staging/dev subdomains indexed, from domain move with missing 301s, redirecting away from the domain root, from self linkspam due to "branded backlinks" ...

run the 3 SEO tests https://www.fullstackoptimization.com/a/seo-basics#:~:text=t... on the root domain which pretty much identify 80% of all onpage (but not onsite) issues and report back
Is it possible that these two chips have hardware trojans in them?
by slowdoorsemillc | 2025-09-10 19:14:01+00:00
"RDSEED is similar to RDRAND and provides lower-level access to the entropy-generating hardware. The RDSEED generator and processor instruction rdseed are available with Intel Broadwell CPUs[8] and AMD Zen CPUs.[9]"

"The RDSEED instruction was added to Intel Secure Key for seeding another pseudorandom number generator,[15] available in Broadwell CPUs."

That's 5th Gen Intel and Zen 1.

As far as I know, only pseudorandom number generators have a seed value to enter in, whereas true random number generators that use environmental variables do not have a seed value.

Does this mean that 5th Gen Intel and Zen 1 and newer have insecure RNG that is backdoored?

Also why did AMD's stock value begin to grow a lot with the release of Zen 1, which had this RNG change? The CIA is 100% manipulating the stock market.

I can tell my computer is hacked when I use anything newer than my 3rd Gen Intel that's in my 2012 Macbook Pro.

I figured it out, it's the CIA. Edward Snowden got no punishment for leaking despite "NSA reads minds" and yet the CIA leakers got 40 years and 8 months for not even leaking the code. The CIA has an AI that wrote several hundreds of millions of lines of software exploit code according to Vault 7. CIA and their Artifical Intelligence(s) are the deep state.
by cvanelteren | 2025-09-10 19:14:14+00:00
For those unfamiliar, ProPlot was widely loved for enabling publication-quality graphics with minimal effort. UltraPlot continues that mission with active development, updated compatibility, and a focus on simplicity.

Why UltraPlot?

Key improvements over vanilla matplotlib:

- Effortless subplot management: build complex multi-panel layouts in one line - GeoAxes support included out of the box - Smarter aesthetics: beautiful colormaps, fonts, and styles without extra code - Intuitive syntax: less boilerplate, more plotting - Seamless compatibility: everything you know from matplotlib still applies

Instead of wrestling with subplot positioning and styling, you can write:

``` import ultraplot as uplt

layout = [[0, 1, 2], [3, 3, 4]]

fig, axs = uplt.subplots(layout)

axs[0].plot(x, y1, label="Data 1")

axs[1].plot(x, y2, label="Data 2")

axs.format(xlabel="Hello", ylabel="Hacker news", abc="[A]") # format applies to all axes fig.legend()

```

...and get a clean, professional-looking plot in seconds.

Get Started:

- GitHub: https://github.com/Ultraplot/ultraplot

- Docs: https://ultraplot.readthedocs.io/en/latest/

Try it out and let us know what you think — contributions and feedback are very welcome!
by ath3nd | 2025-09-10 19:14:38+00:00
> It's astonishing how many people think this kind of architecture limitation can be solved by better prompting -- people seem to develop very weird mental models of what LLMs are or do.

Wait till you hear about Study Mode: https://openai.com/index/chatgpt-study-mode/ aka: "Please don't give out the decision straight up but work with the user to arrive at it together"

Next groundbreaking features:

- Midwestern Mode aka "Use y'all everywhere and call the user honeypie"

- Scrum Master mode aka: "Make sure to waste the user' time as much as you can with made-up stuff and pretend it matters"

- Manager mode aka: "Constantly ask the user when he thinks he'd be done with the prompt session"

Those features sure are hard to develop, but I am sure the geniuses at OpenAI can handle it! The future is bright and very artificially generally intelligent!
by Nextgrid | 2025-09-10 19:15:06+00:00
One when your comp and/or bonuses better capture the value you create.

Just an example: sales roles generally have commission-based compensation that scales with the amount of effort you put in and actually rewards high-performers.

In comparison, the "reward" for effort in a salaried SWE job is more work and to get your token 5% raise early if you're really lucky. And that's after you go through the insane recruitment & interviewing processes.

The SWE salary income might sound high at first glance when you're young and fresh but tops out quickly (and of course that top end has been significantly eroded by inflation), much lower than other roles.
by kylestetz | 2025-09-10 19:15:21+00:00
Yeah I hear you, and fwiw I largely agree with your article. Whether the presence of screens and software-based experiences means they are drifting from their mission is definitely up for debate, but your point is taken! Similar to you I had a hugely impactful trip to TFI in 5th grade, and much later on it was a dream to work there. And now I get to take my 5 year old. It's a special place and it's nice to see people feeling protective of it :)
by PaulHoule | 2025-09-10 19:15:27+00:00
Yeah, audio DSP is not challenging which is what killed off the high-end soundcard.

So far my collab with him has been over physics and electronics such as scaling for the prototype electric octobase (one string so far) that he made. His current stretch project is: he cut a MIDI keyboard in half and stacked the segments on top of each other like an organ keyboard and he's attaching that to two electric guitar necks. Probably the MIDI is going to go to a rack-mount MIDI synth so it's going to have one hell of a wire bundle coming out of it.

Personally I am really fascinated with

https://en.wikipedia.org/wiki/Guitar_synthesizer

which can take the sound from an electric guitar or bass and turn it into MIDI events or the equivalent that controls a synthesizer. Most commercial versions have six independent pickups, they used to be connected to the brains with a ribbon cable but some of them now digitize on the guitar and send the data to the controller over a serial link

https://www.boss.info/us/categories/guitar_synthesizers/seri...
by ux266478 | 2025-09-10 19:15:31+00:00
What he suggests is completely besides public transit, it's about spaces in general where cars aren't allowed or catered to. It doesn't just apply to big cities, but mid-sized and small cities have an absolute dearth of pedestrian-focused plazas. Small towns are extremely hostile to basic foot traffic. There's no reason for this to be the case. In Europe the small town equivalent will have a center where most of the commerce and services are, where cars are completely forbidden. You simply drive into town, park somewhere and carry out your business on foot. It's very nice.

Plazas do exist in the US, but they're rare. Very rare, especially outside of New England. That's what OP is talking about, public transit is a 'solution' to a different problem, and one that I don't like either. See, my biggest problem with urbanism is that it's overwhelmingly focused on building huge megacities, which are inherently unwalkable nonsense. Instead, walkability becomes rhetoric for any mode of transit that isn't a car. I hate that. I want walkable living spaces that are actually walkable, not urban environments where I walk to the train station because the city is too large for its own good.

I don't want to replace the personal car with public transit. It misses the point entirely. I don't want to have to use anything more intensive than an e-scooter to get around the place I live at all. Walking to the train station and riding that for 10-20 minutes to get to the other side of the city sucks. The social problems endemic to public transit in the US are just icing on the cake. Tokyo is a hellish nightmare compared to an Italian commune.
by devmor | 2025-09-10 19:16:13+00:00
> Personally I'm not interested in museums that are just glass cases with stuff without any explanation.

I am not sure why you mentioned this, because it has nothing to do with the subject article. This was a very specific article about interactive, hands-on museums replacing their exhibits with touch screens.

That being said, I have also been to countless museums of many kind and I have never once seen a museum that did not explain what the exhibits were. Have you actually seen this anywhere, or was this hyperbole?
by ibcj | 2025-09-10 19:16:14+00:00
She (Meredith Whittaker, President of the Signal Foundation) makes two points in the article:

First, privacy must be the default, and control must remain in the hands of application developers exercising agency on behalf of their users. Developers need the ability to designate applications as “sensitive” and mark them as off-limits to agents, at the OS level and otherwise. This cannot be a convoluted workaround buried in settings; it must be a straightforward, well-documented mechanism (similar to Global Privacy Control) that blocks an agent from accessing our data or taking actions within an app.

Yes, I would hope to see this come to fruition across all platforms, and soon! I'm mildly optimistic on this front.

Second, radical transparency must be the norm. Vague assurances and marketing-speak are no longer acceptable. OS vendors have an obligation to be clear and precise about their architecture and what data their AI agents are accessing, how it is being used and the measures in place to protect it.

I love this view of the future world, but I see no path to actually getting there. If the vast majority of users were (are) willing to give away their daily intents and actions, why wouldn't they naturally continue down that path with app introspection, screen grabbing, or the like? Tell me it ain't so, but I'm pretty bearish on seeing this become the norm.
by galaxy_gas | 2025-09-10 19:16:15+00:00
As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days.

As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days.

As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.

As of March 15, 2026, the maximum period during which domain validation information may be reused is 200 days.

As of March 15, 2027, the maximum period during which domain validation information may be reused is 100 days.

As of March 15, 2029, the maximum period during which domain validation information may be reused is 10 days.

https://groups.google.com/a/groups.cabforum.org/g/servercert...
by reissbaker | 2025-09-10 19:16:18+00:00
We never train on your prompts or completions, and for the API we don't store longer than 14 days (in fact, we don't ever intentionally store API prompts or completions at all, the 14 day policy was originally just to cover accidental log statements being deployed; we'll probably change it to no-store since it's confusing to say 14 days when we actually don't intentionally store). For the web UI we do have to store, since otherwise we couldn't show you your message history.

In terms of tenancy: we have our own dedicated VMs for our Kubernetes cluster via Azure, although I suspect a VM is not equivalent to an entire hardware node. We use Supabase for our Postgres DB, and Redis for ephemeral data; while we don't share access to that to any other company, we don't create a new DB for every user of our service, so there is user multitenancy there. Similarly, the same GPUs may serve many customers — otherwise we'd need to charge enormous amounts for inference. But, the requests themselves aren't intermingled; i.e. if you make a request, it doesn't affect someone else's.
by FireBeyond | 2025-09-10 19:16:35+00:00
Larry went up, at least. $101B, due to significantly higher earnings from Oracle (I'm assuming partly because of the OpenAI deal?).

Also, the mindboggling reality that in the space of one business day, someone's net worth can increase one hundred thousand million dollars, when the average US household is likely to earn less than three million dollars in a lifetime.
by ahazred8ta | 2025-09-10 19:16:42+00:00
tarsnap --dry-run --no-default-config --print-stats --humanize-numbers -c /MY/DATADIR

will tell you the compressed size of your deduplicated data, which gives you the upload cost and first-month cost. 4GB of files usually works out to 3GB of dedup/compressed archive data for most people, less for people with many similar files.
by FloorEgg | 2025-09-10 19:16:45+00:00
I don't think that's the distinction that matters, more-so the relative development of financial systems and degree of state intervention. Ultimately it boils down to whether you're defining capitalism as a spectrum from proto to modern or as a system with properties surpassing thresholds reached in modern time (post-mercantalism).

My point was more so that the underlying mechanisms of capitalism, when abstracted and measured on scales, show up in many places in nature and throughout human history.

So it's useful to debate how we can improve our capitalist system, but to do away with it all together is naive and unnatural and unlikely to lead to better outcomes, as it's doing away with distributed competition and coordination algorithms necessary for evolutionary advancement and increasing complexity.

We can pick this apart in detail and squabble over taxonomy/semantics but I would just find it interesting and enriching, and unlikely to be invalidating.
by diggan | 2025-09-10 19:16:51+00:00
> Yes: '...you double-check the domain.' That's manually checking for mistakes.

Yes, but that's only when the origin changed compared to when you added it to the password manager. Same thing for Passkeys, won't work if the origin is different, so you double-check that the domain in your browser address bar is the correct one.

Obviously normally you don't do anything except click on the account that shows up, since the domain matches.
by quantified | 2025-09-10 19:16:52+00:00
If our "real world" is screens, maybe. I really hate to think that this is becoming the case, but it is happening and this only hastens it.

The article was about real analogs or actual world objects. The Museum of Science and Industry in Chicago is a fantastic example, as is the Field Museum there. Kids are full of screen time already. Is that all there is?