MurphyA/hacker-news huggingface dataset:
by parliament32 | 2025-09-03 15:26:48+00:00
Compliance/security role at a company you've heard of here.

Passkeys are absolutely fantastic. Pretty much every complaint you see in these threads is seen as a positive in an enterprise context.

> Attestation restricts passkey clients

GOOD. I need a way to prove passkeys live on hardware-backed crypto devices (see NIST SP 800-63B), attestation makes that possible.

> But auth lock-in

GOOD. All our corporate sign-in events should be through our single IDP using SSO. Of course we want lock-in.

> But I can't sign in to my children's devices

GOOD. An identity represents a entity, it should be impossible for you to pretend to be another entity, regardless of whether they're a child or dog or whatever. If you need "parental access" or similar to some accounts, contact your service provider and ask for that feature.

> It's hard to export my passkeys

GOOD. Encrypted or not, a core security tenet is "a private key should never leave the device it was generated on" (hence the existence of HSMs, TPMs, etc). It should absolutely be impossible to ship your private keys around. Further, the primary appeal of passkeys in our context is phishing resistance, and it should be technologically impossible for a user to get bamboozled into exporting and sending their passkey to an adversary.

> But I need my backups

Why? Just contact IT if you lose your credentials. If you're on the personal side and don't have an IT authority, you should just generate passkeys on multiple devices and add all of them to your accounts.

> But that's a pain

Security is almost always inversely proportional to convenience.
by ShakataGaNai | 2025-09-03 15:27:10+00:00
Thank you, that's the one thing I'd expect to be a screenshot in a github repo. Regardless, I don't find it particularly legible. The taller aspect ratio with narrow letter gap actually is not super readable to me?

Maybe It's "more readable" for plane screen fonts than the other alternatives. It's not fair looking at a font on a 49" highdef ultrawide and saying "This isn't as good".
by credit_guy | 2025-09-03 15:27:47+00:00
It's not clear to me why you would hold 100 hours of energy, assuming you discharge at maximum power. If you want to store energy from summer to winter, then 4 days of energy is nothing. Even if your average discharge is only 30% of the maximum power, you still get only 2 weeks of energy. And if the use case is day to night, then 8 hours of storage is enough. Maybe the idea is that the houses in Finland are so well insulated that you need heating only in cases of extreme cold, and only during the night, 100 hours will do the job?
by PxldLtd | 2025-09-03 15:27:52+00:00
Yes, the issue is the ancestry between "fish" being very distant. It doesn't matter if you exclude marine mammals. Many fish in the ocean are still more closely related to beings on land than another fish. It's the equivalent of calling all flying animals birds. If we excluded bats from this new definition of "bird" then a bumblebee won't suddenly become more closely related to a Buzzard.
by notTooFarGone | 2025-09-03 15:27:54+00:00
If you had google maps and you knew the directions it gives are 80% gonna be correct, would you still need navigation skills?

You could also tweak it by going like "Lead me to the US" -> "Lead me to the state of New York" -> "Lead me to New York City" -> "Lead me to Manhattan" -> "Lead me to the museum of new arts" and it would give you 86% accurate directions, would you still need to be able to navigate?

How about when you go over roads that are very frequently used you push to 92% accuracy, would you still need to be able to navigate?

Yes of course because in 1/10 trips you'd get fucking lost.

My point is: unless you get to that 99% mark, you still need the underlying skill and the abstraction is only a helper and always has to be checked by someone who has that underlying skill.

I don't see LLMs as that 99% solution in the next years to come.
by hedora | 2025-09-03 15:28:08+00:00
I’ve got a tube based oscilloscope with a hand written sticker saying service is due in the ‘40s. The important info is stamped metal (model, serial number), or internal paper stickers (field manual).

It still worked last time I plugged it in. I’m not sure if I’ll be able to find someone to calibrate it when the 40’s roll around again. :-)
by SAI_Peregrinus | 2025-09-03 15:28:12+00:00
Fish exist, and we're not fish. Fish just isn't a monophyletic taxonomic category. If you allow "fish" to be a list of all those animals that look like "fish" and swim like "fish", you'll end up with a bunch of animals who's most recent common ancestor is also the most recent common ancestor of all tertrapods (including humans), so "we are all fish". But if you don't demand a single common ancestor & instead just have a list of several different taxonomic classes you can define "fish" as anything in the list, thereby excluding humans.

It's like the difference between culinary berries (sweet parts of plants) and biological berries (parts of plants containing the seeds internally). Tomatoes are not a culinary berry, but are a biological berry. Strawberries are a culinary berry, but not a biological berry (the seeds are on the outside). It's confusion caused by mixing a jargon use of a word with the common use of that same word.
by tripletpeaks | 2025-09-03 15:28:23+00:00
I'm on it for the software + hardware combo. Take either away and I'd just get whatever cheap crap instead, and probably use my computers, phones, and tablets a lot less (wouldn't bother with a tablet at all, most likely).

FWIW my intro to computers was DOS and later Windows, and Linux was my daily driver for a little over a decade before I finally gave Macs a fair shot. My first three or so smartphones were Android, before I ever tried an iPhone.
by card_zero | 2025-09-03 15:29:20+00:00
They have to do it by proxy, though, ultimately. You can run away from their territory and be safe, until they think of an actual crime to accuse you of. In my naivety I don't believe megacorps carry out extrajudicial punishments, apart from banning people. They have to go through the law, and try to get people punished, not carry it out themselves.
by WorldMaker | 2025-09-03 15:29:21+00:00
> I use a few libraries (for mapping, datetime

I'm really looking forward to Temporal [0] reaching a larger baseline. Between that and a lot of recent Intl pieces we are so close to not needing libraries for much of anything datetime related.

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
by cnst | 2025-09-03 15:29:36+00:00
The issue I spoke of, is not by the user, but by the fraudsters tricking people into installing malicious apps.

I disagree that such protections (at the expense of the power users) are necessary, but, OTOH, you cannot just ignore such issue existing in the first place, because it does exist, and Google already does have the tools to combat it (by scanning all apps regardless of origin, and blocking malicious ones).
by DavidCanHelp | 2025-09-03 15:29:46+00:00
Fixes Applied:

1. AI Self-Crashing Bug - Increased collision buffer zones and improved trail detection 2. Linux Dependencies - Added comprehensive installation instructions for Debian/Ubuntu, Fedora, and Arch Improvements Made: - AI now skips 30 recent trail points (up from 10) to avoid self-collision - Increased look-ahead distances for all difficulty levels - Fixed trail collision detection in pathfinding - Added full Linux dependency documentation The AI should now survive much longer and provide a better challenge. And thank you for the two PR's!
by taeric | 2025-09-03 15:30:10+00:00
Right, this is why I think people assume "first principals" means "first [learned] principals." It is almost always super high level and used synonymously with "back to basics."

And fully agreed on your reasoning on why these are good phrases to keep in mind. I think I would pile on to the "becomes an iterative process" to highlight that "starting from first principals" is more likely to be where folks start. With advanced solutions expanded to cover more and more details that the initial assumptions could gloss over.

I think this is largely justified, if only because "first principals" meaning "absolute foundation" are almost certainly still being discovered.
by gambiting | 2025-09-03 15:30:10+00:00
It's incredible, isn't it. I'm a professional C++ programmer working on games for well over a decade now, I've done some pretty complex low level stuff on playstation/Xbox but I bounced off hard from multiple attempts at writing a simple GameBoy emulator - I just don't "get it" - but I always find it fascinating when people work this kind of stuff out, I have so much respect for them.
by CamperBob2 | 2025-09-03 15:30:10+00:00
If it were just a matter of upvotes and downvotes, that would be one thing, but voting to close a question for being a "duplicate," forcibly terminating an emerging discussion because somebody asked something vaguely similar 10 years ago for a completely different platform or language, is just nuts.

Or closing a general question because in the opinion of Someone Important, it runs afoul of some poorly-defined rule regarding product recommendations.

A StackOverflow that wasn't run like a stereotypical HOA would be very useful. The goal should be to complement AI rather than compete with it.
by eldad_fux | 2025-09-03 15:30:20+00:00
Thanks, missed that, and just added the MIT license. We have a single bot that adds quality content found on the web, the algorithm is fully available on GitHub and there is a disclaimer on every post that was submitted by the bot. This is designed to make sure that the platform has content at launch and not zero interactions. The Bot posts are ranked exactly the same as human posts as you can see on the source code.

I like the junk on the readme and its my project as you said :)
by yjftsjthsd-h | 2025-09-03 15:30:32+00:00
> So... there's a reason you had to cite a throwaway comment on a distro wiki and not documentation.

No, I read the official kernel docs too; the Arch wiki just happened happened to be a quicker way to describe it.

From https://docs.kernel.org/admin-guide/device-mapper/dm-integri... -

> The dm-integrity target can also be used as a standalone target, in this mode it calculates and verifies the integrity tag internally. In this mode, the dm-integrity target can be used to detect silent data corruption on the disk or in the I/O path.

> There’s an alternate mode of operation where dm-integrity uses a bitmap instead of a journal. If a bit in the bitmap is 1, the corresponding region’s data and integrity tags are not synchronized - if the machine crashes, the unsynchronized regions will be recalculated. The bitmap mode is faster than the journal mode, because we don’t have to write the data twice, but it is also less reliable, because if data corruption happens when the machine crashes, it may not be detected.

This is more clearly presented lower down in the list of modes, in which most options describe how they don't actually protect against crashes, except for journal mode:

> J - journaled writes

> data and integrity tags are written to the journal and atomicity is guaranteed. In case of crash, either both data and tag or none of them are written. The journaled mode degrades write throughput twice because the data have to be written twice.

On further reflection, I grant that that might only be talking about the integrity metadata, in which case we just don't know about the impact to data writes and it would be useful to go benchmark to see what the hit is in practice.

EDIT: So I went looking to see if anyone had done that benchmarking and found https://github.com/t13a/dm-integrity-benchmarks which seems to show that actually yes dm-integrity is that bad on data writes. Of course, its possible saving grace is that everything else with the same features also had a performance hit. I also found https://www.reddit.com/r/linuxadmin/comments/1crtggd/why_dmi... talking about it.
by el_benhameen | 2025-09-03 15:30:45+00:00
I don’t think this is a critique of llms so much as a general observation that actual deep learning is difficult.

I’ve read plenty of books (thanks, Dickens) where I looked at every word on every page but can recall very little of what they meant. You can look at the results from an llm and say “huh cool, I know that now) and do nothing to assimilate that knowledge, or you can think deeply about it and try to fit it in with everything else you know about the subject. The advantage here is that you can ask follow-up questions if something doesn’t click.
by wakawaka28 | 2025-09-03 15:31:01+00:00
>It’s not, really: this could be true if your day to day work is writing very basic websites without real performance or scale constraints, but if you are building large, performant systems, a good technical interview will give you a chance to show those skills.

I don't write websites at all. I have had to deal with performance issues but frankly it is rarely a major concern for anyone. Furthermore, interviews don't resemble work, they resemble LeetCode or other competitions.

>Being a good engineer does not imply you’ll pass the interview (there are plenty of reasons good engineers fail interviews) but passing an interview does imply you’re a good engineer. (Edit: I’m assuming the interviewer is competent.)

Having a degree and a long employment history implies that you are a good engineer more strongly than your performance on a random puzzle question. Most interviewers are not that good.

>And that’s the point: hiring a bad engineer is one of the worst mistakes a company can make. They’re expensive, take a long time to manage out, drain team productivity and morale, and can destabilize systems. You want a process that would rather say no to a good engineer than say yes to a bad one.

Yes, these companies want a process that provides superior vetting compared to 4 or more years of intensive schooling, or else something so far out that it can distinguish among expert candidates (while taking no more than an hour). It's a stupid objective. Coding interviews should mainly determine if you lied on your resume or not. It should not be seen as a magic way to spot "good engineers."

If you want to filter out bad engineers, just ask them questions that you expect bad engineers to do badly. These are mostly design questions and not coding questions.
by NitpickLawyer | 2025-09-03 15:31:08+00:00
> nor does it have equivalent laws

The UK has their chat thing where if you provide chat (even with bots!) you have to basically be a megacorp to afford the guardrails they think "the kids" need. It's not clear if open source models fall into that, but who's gonna read 300+ pages of insanity to make sure?
by robenkleene | 2025-09-03 15:31:09+00:00
Note, I'm not saying there are never situations where you'd delegate something that you can do yourself (the whole concept of apprenticeship is based on doing just that). Just that it's not an expectation, e.g., you don't expect a CEO to be able to do the CTO's job.

I guess I'm not 100% sure I agree with my original point though, should a programmer working on JavaScript for a website's frontend be able to implement a browser engine. Probably not, but the original point I was trying to make is I would expect a programmer working on a browser engine to be able to re-implement any abstractions that they're using in their day-to-day work if necessary.
by ehutch79 | 2025-09-03 15:32:05+00:00
Ugh, I watch a lot of conference videos, I have more donts than dos. Things that make me turn off a video.

- Yes, tell me who you are, and why i should listen to you. But keep it to 1 slide, and 1 minute. I shouldn't be able to walk away and come back literal 5 minutes later and have you still yammering about yourself. especially for a 15 minute lightening talk.

- Your talk title should be the agenda. I do NOT need a slide by slide table of contents for your talk, or you reading out the table of contents.

- Accents, even heavy ones, aren't much of a problem. Looking anxious isn't a problem, i feel you there. However, You mumbling is. Being overly monotone is. Looking bored yourself doesn't help. People are there because they _know_ you have something their interested to say, you can be confident that people will listen.

- Get to the point. Seriously. I shouldn't be able to scrub ahead 10+ minutes and not have you talking about the topic at hand. Please don't explain the basics, like what a web browser is, when your audience is a web dev conference.

-Cut the fluff. Especially if you're adhd or other neuro diverse, you need to work to stay on topic. It _might_ help if you write a script, and have someone go through and mark anything off topic. Even if you don't use the script on stage, writing it and having it might anchor you to the topic at hand.

You don't need to be perfect on stage. We'll all forgive a lot that happens in a talk. We've all experienced the wrath of the demo gods. We get it, you're cool. BUT only if you're actually giving your talk. Note that most of my complaints circle around not actually giving your talk while you're on stage.
by robenkleene | 2025-09-03 15:32:07+00:00
Fair point, I elaborated what I mean here https://news.ycombinator.com/item?id=45116976

To address your specific point in the same way: When we're talking about programmers using abstractions, we're usually not talking about the programming language their using, we're talking about the UI framework, networking libraries, etc... they're using. Those are the APIs their calling with their code, and those are all abstractions that are all implemented at (roughly) the same level of abstraction as the programmer's day-to-day work. I'd expect a programmer to be able to re-implement those if necessary.
by biohazard2 | 2025-09-03 15:32:09+00:00
Two articles providing more information about the creation of this font: https://lii.enac.fr/projects/definition-and-validation-of-an... https://www.enac.fr/fr/une-police-realisee-par-les-chercheur...

In particular, a screen of an Airbus screen and a video showing parts of the creation are provided.
by jemiluv8 | 2025-09-03 15:32:16+00:00
I program primarily in Typescript and Golang these days. And yes, most corporate js people tend to not know much about things like dependency injection until they end up with the kind of problems that led to dependency injection in the first place. But Javascript/Typescript caters to everyone's taste and level. If you want to do enterprisy stuff and write properly constrained software - you get to do it.

Working in a language that tries to enforce "type" discipline and certain conventions really gets you down to solving problems the right way - instead of just hacking together a workaround. So most of the time, people who write Java tend to be more thoughtful about their approach to various things in a way that the typical Javascript developer probably isnt.
by Jensson | 2025-09-03 15:32:39+00:00
You can see what people built with LLM 3 years ago and what they build with LLM today and compare the two.

That is a very natural and efficient way to do it, and also more reliable than using your own experience since you are just a single data point with feelings.

You don't have to drive a car to see where cars were 20 years ago, see where cars are today, and say: "it doesn't look like cars will start flying anytime soon".
by ffsm8 | 2025-09-03 15:33:15+00:00
Totally of topic, but the other day I was considering trying out elixir for a mainly vibe coded project, mainly because i thought the way you can structure code in it should be pretty much optimal for LLM driven development.

I haven't tried it yet, but I thought elixirs easily implementable static analysis of code could make enforcement whenever the LLM goes off rails highly useful, and an umbrella architecture would make modularity well established.

Modules could all define their own contexts via nested CLAUDE.md and subagents could be used to give it explicit implementation details.

Did you try something like that before MGriisser? (successfully or not?)
by utyop22 | 2025-09-03 15:33:22+00:00
Yeah eventually reality and fantasy have to converge.

Nobody knows when. But it will. TBH the biggest danger is that all the hopes and dreams aren't materialised and the appetite for high-risk investments dissipates.

We've had this period in which you can be money losing and its OK. But I believe we have passed the peak on that - and this is destined to blow up.
by Klonoar | 2025-09-03 15:33:37+00:00
There is little chance they don't know about minijinja/askama/tera/etc.

The repo for their project outlines why they're doing this, though: https://github.com/LilyAcorn/django-rusty-templates

It's seemingly being made for being used in Django as a template backend, not necessarily for use from Rust like the others (i.e native-ifying Django templates).
by bux93 | 2025-09-03 15:33:46+00:00
I mean, the thing is, the warranty starts automatically, there's no need to register or activate anything. As per EU consumer protection laws (the author lives in Spain).

As for finding service manuals and user manuals - maybe what they need isn't the web but FTP. I mean, if it were still supported by browsers. I remember when some vendors just used to have folders with PDFs you could browse.

The problem with "the web" is that this is no longer a website, but a content management system, or worse, a "customer engagement platform" that is hostile to creating a folder full of PDFs that have stable links. They probably still have that FTP site in a webified form somewhere for service partners, just not for Joe Public.
by nonethewiser | 2025-09-03 15:34:15+00:00
I had not heard of ink traps. Basically, they are characters that try to account for ink bleeding. By putting more negative space in corners, for example. https://en.wikipedia.org/wiki/Ink_trap

But that gives me the impression it would have nothing to do with displays. And makes it a pretty curious choice.

Although I personally dont see any ink traps from the font linked in the comments https://fonts.google.com/specimen/B612
by miki123211 | 2025-09-03 15:34:16+00:00
This really depends on the language.

In some languages, pronunciation(a+b) == pronunciation(a) + pronunciation(b). Polish mostly belongs to this category, for example. For these, it's enough to go token-by-token.

For English, it is not that simple, as e.g. the "uni" in "university" sounds completely different to the "uni" in "uninteresting."

In English, even going word-by-word isn't enough, as words like "read" or "live" have multiple pronunciations, and speech synthesizers rely on the surrounding context to choose which one to use. This means you probably need to go by sentence.

Then you have the problem of what to do with code, tables, headings etc. While screen readers can announce roles as you navigate text, they cannot do so when announcing the contents of the live region, so if that's something you want, you'de need to build a micro screen-reader of sorts.