MurphyA/hacker-news huggingface dataset:
by sriharis | 2025-09-19 14:59:02+00:00
Slicing a cake across layers is about prioritising value and mitigating the risk of building the wrong thing. Most product and feature requirements are hypothesis for creating value, unless that hypothesis has already been validated.

> It's very convenient for the stakeholders to see progress mapped out like that It's important for the business to validate product value. This is not just progress anxiety.

Crafting software to perfection is ultimately a waste if it doesn't provide value to the business or customer. If we are sure we're building the right thing, we can risk more, and spend more of our time building the thing better. Build scrappy first, build confidence in value, and then craft to perfection.

The slices of cake aren't built in isolation. Every time a slice is being worked on, it is integrated back. The cake analogy falls apart here, because cakes (and houses) aren't nearly as malleable as software. We have opportunities to refactor it every step along the way, and change its shape. Yes, sometimes we refactor independent of business value, and I think that's essential too. I don't think the idea that's presented is to have absolutely every slice be vertical, and business / customer facing.
by dcchambers | 2025-09-19 14:59:41+00:00
Hasn't Ruby Central always 'owned' RubyGems.org, Bundler, and all related infra?

Removing existing maintainers from the project isn't good - and hopefully it's a temporary oversight as Ruby Central gets things set up in the new org. Either bad communication from Ruby Central - or they really did made a bad mistake here (maybe even with the best intentions, given recent NPM issues).

Edit: It seems like there's a lot more to the story here. Many volunteer RubyGems/Bundler maintainers have left because they disagree with decisions that Ruby Central (the nonprofit organization) has made and it seems like all of this is fallout related to that.
by ModernMech | 2025-09-19 15:00:02+00:00
> There was no gov interference -- so what's happening here is much much worse

That's what the other poster is saying. There's a difference between "cancel culture" and what's happening here. Cancel culture is culture, meaning it's something that arises spontaneously through group dynamics, not something that's directed by the government. Yes, Disney fired Gina Carano, but not because Biden tweeted out "Gina Carano is next" and his FCC director said "We can do this the easy way or the hard way". It was because a bunch of Disney's customers pressured Disney.

And that's how the free market / free speech is supposed to work. If that's somehow reprehensible and antisocial, then fine, but then we need to rethink the entire idea of free market capitalism; if the government prevents me and my friends from boycotting some shitty company, then that's not a free market, and what we're doing is crony capitalism, which is just the worst of all worlds.

Can you propose a speech model that supports free speech but disallows cancel culture? As far as I can tell, you'd have to limit free expression and association from the top down to enforce that.
by toss1 | 2025-09-19 15:00:03+00:00
I'm glad you agree democracy requires independence in the three branches of govt and various branches of society.

Which is why Musk's "Libertarian" presentation does not match reality.

Musk spent more than a quarter BILLION dollars electing the most authoritarian person ever to occupy the chair of the US president, and now that the president Musk helped elect is actively using the power of the state to take control of corporations and threaten and coerce everyone in academia, journalism, media, and even comedians, Musk is not even posting protests on his own social media network to such massively anti-libertarian actions; he's egging it on. Musk is either the dumbest Libertarian ever to be suckered into putting $250 Billion into an anti-Libertarian candidate, or you are being deceived.

As for Biden's relationship with Musk, would you really expect the most pro-union President in the last half-century to actively promote one of the most flagrantly anti-union and worker-hostile corporate executives in recent history? I agree it may not have been the smartest move by Biden to so blatantly shun Musk, but.

As for the DOGE efforts, they were most definitely NOT supporting small-state values, they actively cost the govt money, and the primary reason was the most massive data raid ever, taking most of the Social Security Administration, Dept Of Labor, Dept of Educ., and other databases onto uncontrolled servers outside the govt system, attempting a data fusion unauthorized by ANY representatives of the people. Considering his relationship with Peter Theil running Palantir, who is openly authoritarian, believing democracy is incompatible with freedom, I'd put at best even odds the data hasn't been exfiltrated to the most authoritarian technology effort ever in the democratic world.

Musk is either an extremely bad libertarian or none at all.
by infecto | 2025-09-19 15:01:15+00:00
Since you want to argue it, where is your data? I can share some of mine from a recent study. It’s non trivial numbers without hoods and even more using recirculation.

Weird hill to defend when you don’t even have data. Maybe you did not like my analogy but it also matters how much you cook and what you are cooking. Hence why it can be more important in a Chinese household, lots of high heat cooking of meats including fish. So I can see the analogy failing in a household that does not cook often or cooks more tame items. If you frequently cook fish, or do any type of high heat, heck if you have done any cooking in a commercial kitchen before you quickly realize how inadequate the venting is even if it does go outside. Hence it can feel like you are cooking in your bedroom in a lot of western houses since they use an open floor plan with the kitchen. But ignore the analogy if you don’t like it!

https://pmc.ncbi.nlm.nih.gov/articles/PMC10234804/?utm_sourc...
by bobajeff | 2025-09-19 15:02:23+00:00
Suddenly, what Intel's CEO means by new products must deliver 50% gross profit [1], and it being too late to catch up with AI [2] is starting to be clearer.

[1]: https://www.tomshardware.com/tech-industry/semiconductors/in...

[2]: https://www.tomshardware.com/tech-industry/intel-ceo-says-it...
by arnon | 2025-09-19 15:02:37+00:00
It also applies to "data processing services":

"Article 25, Contractual terms concerning switching … The rights of the customer and the obligations of the provider of data processing services in relation to switching between providers of such services …"

This explains it in a lot more detail: https://www.dlapiper.com/en-gb/insights/publications/2025/07...
by dlubarov | 2025-09-19 15:03:10+00:00
Which of them would you claim is neutral? Amnesty International, who opened their report with "On 7 October 2023, Israel embarked on a military offensive", as if nothing else happened on 7 October? And then decided that the usual standard for inferring specific intent was "overly cramped".

> Appealing to no authority except the evidence here

You haven't mentioned evidence here, only authorities.
by leoqa | 2025-09-19 15:03:31+00:00
I’m not particularly sympathetic to retirement home narratives that paint each person as a lonely, incompetent senior wasting away. I witnessed first hand how my mother spent her adulthood partying instead of providing and now it’s become a critical issue for our family to provide for her. Ultimately I don’t expect my children (or staff-journalist) to project pity on me for my circumstances.

I run a weekly route with MealsOnWheels and deliver food/perform wellness checks to many people whom are homebound. There are much worse fates for seniors than a community home with social programs and meal service.

I think it is everyone’s duty to buy long-term care insurance (perhaps the government should provide this, as we will all need it). I also believe you must provide for the retirement you expect.
by Biganon | 2025-09-19 15:03:47+00:00
Ask 100 random people in the US whether they think "top" is "better associated" with "good" and "down" is "better associated" with "bad", or the other way round. You can even use arrows and randomize the way you ask the question, if you want.

If you come up with a majority of people telling you "down" is "better associated" with "good", I'll live stream myself on Twitch eating the pair of socks I'm currently wearing.

Also, how typical HN to take something that's absolutely obvious and deny it, just so you can escape the terrible idea that you might be subject to unconscious bias.
by amo1111 | 2025-09-19 15:04:06+00:00
Yes, ventilating out > recirculating no question! I just wanted to raise awareness that ventilation is not instantaneous. It takes time to bring things back to safe levels in case of spikes.

A quick search brings up the CDC guidance, where they discuss air changes per hour for a room. This will be for HVAC units, which operate on a completely different magnitude of airflow compared to a kitchen extractor fan.

https://www.cdc.gov/infection-control/hcp/environmental-cont...

This also matches my experience in industrial applications, you only need a single failure point such as a spill or a large enough leak and ventilation alone is no longer enough to keep people safe. This is why it's worth considering a glove box/isolator. You could make the argument that a glove box can also leak and I'm starting to sound like a safety engineer. Anyway at home either will be fine with outside ventilation being superior if done right.
by alephnerd | 2025-09-19 15:05:07+00:00
> Toyota HQ need to use an Indian JV as a proxy

Japan began moving extraction and processing to India. Japan conducts transshipment via Thailand and Vietnam (though Vietnam is now graduating into processing as well).

TREI is completely ExChina.

> China was fine with rare earths ultimately making its way to Japan

The worry has been if China and Japan are ever in a diplomatic tussle again like in 2010-12, then the entire flow of REEs from China could be shut down, but the Chinese government still wants to let some amount of flow to happen in order to ensure that the incentive to build an entirely ExChina supply chain does not take hold.
by fourgreen | 2025-09-19 15:05:15+00:00
Hm, one more thought. Notice that in English the important part of the problem with "grow a garden calculator" is that you are not sure if "garden" is an adjective or a noun. In Polish there isn't such ambiguity: "garden" as a noun is "ogród", "garden" as an adjective is "ogrodowy". For people who learn Slavic languages it is a big disadvantage: where in English you have a single word, "garden", in Polish you have to learn (at least) two words: "ogród" and "ogrodowy" (and then tens of variants, for different genders, grammatical cases etc). On the other hand, for natives, who speak Polish fluently, it is - as you saw in this example - an advantage.
by iLemming | 2025-09-19 15:05:34+00:00
Somewhat relevant: can somebody share good mpv defaults (or some other interesting technique) for playing YT videos? I have managed to get it to work, but it still pauses a lot for bufferring. I wonder if there's maybe some yt-dlp, ffmpeg, etc. trick to pre-cache some segments or something like that. The reason to play it in mpv is not to avoid commercials (I have a paid account), but because I can then play it from my editor while fully controlling the playback - it works great for watching lectures and taking notes.
by spoiler | 2025-09-19 15:05:44+00:00
I think the recording aspect is cool, since I assume it has that "first person perspective" thing going on that's usually difficult to replicate without a complicated setup. Especially useful for showing or demonstrating stuff with your hands, etc.

On the other hand, I can't fathom why having a permanent screen on your face is appealing... I don't know if I'm biased because I have a few mild neurological issues, and I'm simply not the target audience
by cyphar | 2025-09-19 15:06:04+00:00
I completely agree. You are infinitely more likely to get implicated in some widespread attack due to bugs in GitHub Actions or your automated release scripts than have your local machine's local build and signing infrastructure attacked.

I have yet to see any evidence that fancy CI/CD systems are better than good old fashioned tarballs and detached signatures. Bonus points for distribution packaging systems where they add an additional layer of review and separate validation of releases. People seem to gloss over that fact the "stodgy old-fashioned" rigamarole of Debian is part of the reason why the entire internet didn't pwned by the xz attack.

At the very least you should require a human to sign the blobs before the release is actually published. (This isn't always enough if the attacker can add themselves to the maintainers list and sign with their own key, which is why the distribution packaging systems where they maintain their own trusted copy of upstream keyrings is far more preferable.)

If your threat model boils down to "if my GitHub account gets attacked or even a single API key is leaked all of my users are fucked" then you really need to take a long look at a mirror and ask yourself if that is reasonable.
by mattlutze | 2025-09-19 15:06:19+00:00
> By using the tools available at the time we did, certainly.

Yes, tools which help. But the point is that education occurs with any collection of tools, or even the simplest of all, if we want to go so broad as to call speech technology.

Technology is an augmenter of education, but not the fundamental problem of education.

> I do think

I'm not sure whether they should have a role, or what that roll should be, as such a feeling would be moralizing to some degree. But I agree that we will _make_ LLMs have a role, because the capitalism that drives our societies wants them to have a role.
Ask HN: Feasibility of AI that converts user workflows into local ML apps?
by iamnnk | 2025-09-19 15:06:51+00:00
Today, most teams building ML models serve them through web APIs. That works well, but I’ve been wondering about a different path:

Suppose I provide an app that records a user’s screen (with consent).

The user narrates what they’re trying to accomplish in their workflow.

AI analyses this + the narration and suggests what ML model(s) would be needed.

Finally, it packages everything as a lightweight, local, installable app (EXE/DMG), so the user doesn’t need servers, Docker, or APIs at all.

For example: a cashier or agent might be processing transactions. By narrating “I want to flag suspicious ones,” the system could map that to an anomaly detection model, and produce a small local app that does just that.

In other words, “compile” ML workflows directly into end-user software, skipping the typical web-API path.

I'm thinking 'shallow ML' for a start, applications that could be served by decision trees or random forests, for example.The plan is to 'unroll' into C.

Has anyone seen attempts in this direction, or reasons why it might be a dead end?
by freedomben | 2025-09-19 15:07:19+00:00
Sure, I don't disagree, but that seems an entirely different discussion. If it bothers your OCD, replace 2FA tokens with "confirm your email address" or some other thing. If you don't think there are ever any good reasons for sending a customer email, then we'd have to step back and argue that first before we could get to my question in the GP post
by chao- | 2025-09-19 15:07:26+00:00
Seconding this.

Ruby Central is not a large organization by headcount, but in terms of impact, it is massive. Any person up to the task of leading an organization like this must know that drastic, public action involving long-term contributors will necessarily require an explanation. Inevitably. They must also know that in an information vacuum, people will assume the worst.

This is not difficult to foresee.

I truly hope this is settled without too much collateral damage, and I hope that the people in leadership learn a lesson about communication.
by epistasis | 2025-09-19 15:07:27+00:00
The commit yesterday, on a very quiet repo, made me think there might be something more going on, that might be obvious to those who study the topic but not so obvious to a broader audience.

Also, older papers can be of interest but don't usually make it to the front page of a general audience news site unless there's something bigger going on that gave it renewed general interest.
by rco8786 | 2025-09-19 15:08:19+00:00
Yea again, that's not different than anyone else with any other amount of money. For profit corporations are designed from the ground up to separate us from our money (or "milk" if you will).

In reading the article, it doesn't seem to me that anyone is being taken advantage of any more than all of us are when we walk into a shopping mall, open amazon.com, or buy a home.
by duxup | 2025-09-19 15:08:51+00:00
When I worked tech support for a company who serviced big banks, several banks had requirements that we had to be US citizens operating in the US to access their systems and access to information about their systems.

(amusingly over time they started to outsource things and they kept our rules but their people would call us from overseas :P)

Work for several US contractors required the same plus a security clearance.

I'm not opposed to these kinds of rules for some things. I think they're a wise choice.
by randomgermanguy | 2025-09-19 15:09:26+00:00
Depends on how heavy one wants to go with the quants (for Q6-Q4 the AMD Ryzen AI MAX chips seem better/cheaper way to get started).

Also the Mac Studio is a bit hampered by its low compute-power, meaning you really can't use a 100b+ dense model, only MoE feasibly without getting multi minute prompt-processing times (assuming 500+ tokens etc.)
by infecto | 2025-09-19 15:09:41+00:00
I think it also depends how much people cook and what they cook. I suspect most here are thinking about that roast in a crockpot that has a pleasant aroma.

On the flip side I am thinking about anything with high heat, meats and oil. The food will be delicious and the smell of the food is great but the smell from the cooking process is miserable and will linger.
by rtkwe | 2025-09-19 15:09:42+00:00
There already are, they're called ultramarathons [0], 587 km would be on the longer end for a regularly held race but it's only slightly longer than Dean Karnazes's record for an uninterrupted run which was 560 km in 80 hours [1] so it'd be a multi day race probably.

[0] https://en.wikipedia.org/wiki/Ultramarathon

[1] https://en.wikipedia.org/wiki/Dean_Karnazes#Running_highligh...
by everdrive | 2025-09-19 15:09:44+00:00
Avoid using your phone, don't install apps, don't rely on it for anything, and stick it in a drawer most of the time. Phones have ALWAYS been a bad bet for privacy, and we've been losing this cat and mouse game for years. I agree that what's happening lately seems like a real watershed moment, but the writing has been on the wall for a long time.
by davidw | 2025-09-19 15:09:45+00:00
When entire labs are shut down, work halted, experiments frozen, people move on because they need to eat, this is absolutely going to cause irreparable harm to those specific people and programs, as well as science in the United States. (Edited to reflect that the harm is both specific and general)

My wife works in science and is seeing some of the effects of all this, and it's going to be a generational hit to research and development in this country.

If the Europeans were smart and faster moving they would have large scale programs to hire up people and move them over there, because there are tons of brilliant people doing important work that are being left high and dry.
by Y_Y | 2025-09-19 15:09:48+00:00
Stephen Wolfram has done real worthwhile physics. He's an exceptionally smart dude, even if that doesn't come across in some of his writing.

Just to pour some more opinions on the fire, I think he's been descending into crankery slowly, but steadily, since the 80s. Have a sconce at what his output was like before he took m-expressions and built a paywall around them, become a fairly wealthy demigod of science in the process. https://www.stephenwolfram.com/publications/academic/all/

The academy (in physics at least), is crusty and traditional, but not to the point of ignoring good work. It's like alternative medicine, do you think if essential oils cured cancer you wouldn't have all the big pharma companies leaping from their high horses?

Wolfram does some cool stuff with cellular automata, and has lots of students doing cool stuff too. What he's not done, neither with NKS nor anything since, is make some contribution to understanding the physical universe that was significant in eyes other than his own.
by prematuretap | 2025-09-19 15:09:53+00:00
I built a tiny timing game: stop as close as possible to a daily target (6–13s). Leaderboard resets at 00:00 UTC. No accounts; one run per day per handle. Why: small, honest skill loop + numbers that beg to be posted. Stack: Node, Express, Neon Postgres; deterministic target; simple anti-spam; zero JS frameworks on the front page. Feedback welcome—latency, device quirks, or why this should be harder/easier. Play: prematuretap.com
by montebicyclelo | 2025-09-19 15:09:57+00:00
Yeah... Looks like can get about $1/hr for 10 small VMs, ($0.10 per VM).

So for $3000, that's 3000 hours, or 125 days, (if just wastefully leave them on all the time, instead of turning them on when needed).

Say you wanted to play around for a couple of hours, that's like.. $3.

(That's assuming there's no bonus for joining / free tier, too.)
by gdulli | 2025-09-19 15:10:33+00:00
Seemingly a throwaway joke, but actually made me think about an interesting difference between AI and human content.

You wouldn't cringe at LLM output because there's no social context to the situation depicted. You could identify the words as cringeworthy but the emotional subtext would be missing.

Which is why the argument, "if the LLM produces good output, why does it matter where it came from?" doesn't land for many. Art is more than its surface content, AI is exposing a split between camps that do and don't see it that way.
by strcat | 2025-09-19 15:10:38+00:00
Other web servers have a reliable implementation of OCSP stapling via their support for loading the OCSP response from an external file. It isn't as convenient as having it built-in but it works well.

GrapheneOS used https://github.com/tomwassenberg/certbot-ocsp-fetcher for years to provide reliable OCSP stapling for nginx prior to Let's Encrypt dropping OCSP support. We used Must-Staple through that for years.

TLS ticket key rotation also generally needs to be handled externally in a noswap tmpfs to avoid the keys being lost when restarting service, especially if syncing them across multiple nodes providing the same service is desired. Syncing them across nodes also allows preserving them across reboots while still only having them in-memory.

> Let's Encrypt is now offering a profile for 6-day certificates: https://letsencrypt.org/docs/profiles/#shortlived

Only the default classic and opt-in tlsserver profiles are available. The allowlist mentioned there doesn't really seem to exist yet. The tlsserver profile has the same changes as shortlived without dropping 90 days to 160 hours. Both tlsserver and shortlived drop support for clients without SNI support which are unfortunately still very common for non-web usage. We found we can't deploy tlsserver for our SMTP federation (port 25) or SUPL server without having a fallback certificate for clients without SNI support. Since shortlived drops non-SNI client support, not everyone will be able to use it. It would be nice if there were 2 variants of it instead since client functionality is typically not within the control of servers.

Let's Encrypt dropped OCSP support before they had the replacement of short-lived certificates deployed. It would have been nice if OCSP support was only dropped after shortlived was enabled for production usage, but it's too late for that now. If it was possible to start using shortlived today, we would.