MurphyA/hacker-news huggingface dataset:
by preaching5271 | 2025-09-16 15:10:56+00:00
I've been a hardcore claude-4-sonnet + Cursor fan for a long time, but in the last 2 months my usage went through the roof. I started with the basic Cursor subscription, then upgraded to pro, until I hit usage limits again. Then I started using my own Claude API key but I was still paying ~70$ / 5 days, which is not that sustainable for me. But since grok-code-fast-1 landed, I've been using it daily with Cursor and it's fantastic, fast and cheap (free so far). I've also been using GPT-5 lately through the official Codex VSCode extension, and it blows my mind. Last night I used gpt-5-medium to help me heavily refactor a react-native app, improved it's structure and overall performance, something that would've taken me at least 2 days. Now I'm testing out gpt-5-medium-codex, asked it to restructure the entire app routing, and it seems it makes a lot of tool calls, understands, executes commands, it's very organized. Overall my stack from now on is Cursor + grok-code-fast-1 for daily use, and Codex/GPT when I need the brainz. Worth noting that I abused gpt-5-medium all day long yesterday, and I never hit any kind of limit (I just used by ChatGPT Plus account), reason for which I thank the OpenAI team
by euLh7SM5HDFY | 2025-09-16 15:11:15+00:00
Nuclear is as dead as a great technology can be. A few more incremental improvements in solar and battery industry and nuclear won't be profitable even in theory, to say nothing of construction cost overruns.

Reactors are only good at providing baseload but that isn't how grids operate anymore. Renewables are too cheap, if a power plant can't drop output fast enough it is punished.
by psychoslave | 2025-09-16 15:11:23+00:00
The best pronoun is "we" but it can only really apply when entities with empathy are all we are talking about.

This account is not "I" nor "you".

When the present attention face anything like "I", "you" or even "we", it should reflect on where is this likely coming from and how it’s likely aligning with its own goals.

Let’s remember that ego is illusion, and yet a powerful tool to manipulate the present attention. Take care, enjoy actual life!
by gdulli | 2025-09-16 15:11:41+00:00
> you will eventually end up with a set of tech skills that a kid 20 years younger than you, with no family and so being able to live on lower salary, probably has too.

I was this young hotshot 20 years ago. In hindsight, the skills I had at the time were commodity or even irrelevant compared to the wisdom, life experience, and maturity that took me 20 years to develop and determine how effective I am now. You can't fake or rush those 20 years. (Even though the me of 15 or even 10 years ago wouldn't believe that statement.)

So I agree, although it wasn't really managerial skills that became important for me. It feels more intangible. I got sort of lucky that I didn't have to transition into management as I got older.

But that's not to say that many workplaces won't value the young hotshot anyway. I'm retired but if I was job searching I wouldn't really consider myself in competition with them, I'm not looking for the positions that can be done as effectively by a 28 year old. That's not a matter of job title or seniority, it's matter of finding people and positions that value or need the more subtle strengths that I find most valuable and important and interesting about myself.
by llm_nerd | 2025-09-16 15:11:44+00:00
> The US literally dumped their trash in China for "recycling"

No one "dumped" anything. There weren't random ships sneaking onto the coast and dumping their contents. No airdrops tossing out garbage bags.

This was a pull industry and China had such a negligent position on their environment that people -- Chinese people, in China, allowed by China -- made money tendering for recycling contracts and then just stacking it into a giant pile, presumably awaiting some innovation that would make it worthwhile to process. That precisely speaks to exactly what I was saying, and externalizing that and blaming it on others is the sort of patronizing, laughably bigoted infantilizing that people do about developing nations, and it's extraordinarily unhelpful. China started caring, and regulated these exploiters out of business.

> and India and several southeast Asia countries took over (Indonesia, Vietnam, ...)

Vietnam is a surprisingly clean country. Like you can drop a Google Maps pin almost anywhere in Vietnam and while it might not be glitzy and rich, there is a sense of pride in environment and a care and a concern about the commons.

India and Bangladesh, on the other hand... Yeah, this isn't covertly imported garbage, but instead is 100% domestic sourced, just as the vast majority of China's was before it became more enlightened. Countries that are cesspools overwhelmingly have themselves to blame.

I just had to respond because this sort of infantilizing "every bad thing is caused by outsiders" angle isn't remotely helpful. Like almost all of the world's ocean plastics come from Southeast Asia, and it's amazing seeing people try to rationalize how in cultures where plastics are used for everything, and discarded thoughtlessly everywhere, actually it's somehow the West's fault.
by cesarb | 2025-09-16 15:11:45+00:00
> I'm interested in knowing whether there's something intrinsic to Go that encourages such a culture.

I've also seen something similar with Java, with its culture of "pure Java" code which reimplements everything in Java instead of calling into preexisting native libraries. What's common between Java and Go is that they don't play well with native code; they really want to have full control of the process, which is made harder by code running outside their runtime environment.
by spacephysics | 2025-09-16 15:12:04+00:00
Agree, I think the high cost of full time hires for entry level software jobs (total comp + onboarding + mentoring) vs investing in AI and seeing if that gap can be filled is a far less risky choice at the current economic state.

6-12 months in, the AI bet doesnt pay off, then just stop spending money in it. cancel/dont renew contracts and move some teams around.

For full time entry hires, we typically dont see meaningful positive productivity (their cost is less than what they produce) for 6-8 months. Additionally, entry level takes time away from senior folks reducing their productivity. And if you need to cut payroll cost, its far more complicated, and worse for morale than just cutting AI spend.

So given the above, plus economy seemingly pre-recession (or have been according to some leading indicators) seems best to wait or hire very cautiously for next 6-8 months at least.
by lucideer | 2025-09-16 15:12:51+00:00
To clarify (a lot of sibling commenters misinterpreted this too so probably my fault - can't edit my comment now):

I'm not referring to mitigations in public repositories (which you're right, are varied, but that's a separate topic). I'm purely referring to internal mitigations in companies leveraging open-source dependencies in their software products.

These come in many forms, everything from developer education initiatives to hiring commercial SCA vendors, & many other things in between like custom CI automations. Ultimately, while many of these measures are done broadly for all ecosystems when targeting general dependency vulnerabilities (CVEs from accidental bugs), all of the supply-chain-attack motivated initiatives I've seen companies engage in are single-ecosystem. Which seems wasteful.
by registeredcorn | 2025-09-16 15:13:06+00:00
I'm looking forward for the weird inflective trend of "organic" programs, "humane" dev treatment, and software development taking a long time being seen as a mark of quality rather than stagnation or worry. :)

I'm half-joking, but I wouldn't be surprised to see all sorts of counterpoint marketing come into play. Maybe throw in a weird traditional bent to it?

> (Pretentious, douche company): Free-range programming, the way programming was meant to be done; with the human touch!

All-in-all, I already feel severely grossed out any time a business I interact with introduces any kind of LLM chatbot shtick and I have to move away from their services; I could genuinely see people deriving a greater disdain for the fad than there already is.
by johncolanduoni | 2025-09-16 15:13:06+00:00
If your home router is compromised (which is what the parent comment was talking about, considering it mentioned CVEs) the attacker who now controls it can easily make connections to devices on your network via the router’s local address.

As for how the router that is theoretically not accepting incoming connections from the internet itself gets compromised in the first place: among other issues some routers can be RCEd by a webpage visited by someone inside the LAN[1]. That’s just one example, you can find tons of these if you search for router vulnerabilities. In practice out of date routers end up in botnets frequently.

It has nothing to do with network operators blocking SMB traffic; the attacker can communicate with the router via whatever C2 mechanism they put in the malware, which probably won’t even involve opening a port on the router. The SMB or what have you to the endpoint would be entirely within the LAN.

[1]: https://www.malwarebytes.com/blog/news/2023/02/arris-vulnera...
by Beretta_Vexee | 2025-09-16 15:13:07+00:00
Many scammers have sources in government agencies, companies, insurance companies, etc.

The day my mother asked to receive her pension, she received calls from scammers, even though she had been relatively spared until then. I have had similar feedback from people who have to call for help with mental health, depression or addiction issues.

These people have no scruples and are willing to pay others without much hesitation.
by ProllyInfamous | 2025-09-16 15:13:39+00:00
Until my 15" MBAir purchase last year, it had been seventeen years since I'd purchased a laptop (edit: M2Pro Mini was first new computer in fifteen years).

CostCo had a $850 deal for an M3 Air, and as soon as I picked it up the sales clerk was printing my purchase ticket. It is so light, and the feet actually seem like they'll last a few years (unlike the solid-body designs since 2009).

Keyboard is fantastic. Battery life is unreal. Screen is beautiful.

I have been a full-time Macintosh user since 1991 (I remember fully 68k->PPC->x86->Silicon), and only recently set up my first Linux machine (because the modern OEM OS's are increasingly too invasive with AI'ification), a re-purposed MacPro5,1 #4evr
by 3D30497420 | 2025-09-16 15:13:51+00:00
Sure, but this is always a risk with him. Maybe you buy $100B of natural gas, but have the temerity to regulate an American company he likes and he slaps you with punitive tariffs. Or he doesn't like something else with your domestic politics. He's not a rule-based actor or cares about anything but loyalty and subservience to him.

I'm guessing a lot of of people/countries are aiming to just string him along as long as possible.
by a1o | 2025-09-16 15:14:31+00:00
Over a decade ago I played with SDR sharp and a tv dongle and got to listen to very cool stuff. I don’t know if SDR sharp still exists, I think it was closed source at the time but free. I remember one could use it to decode stuff and then map to virtual ports to redirect to other software that expected an input from specialized hardware like ship signals and stuff like that.
by ethbr1 | 2025-09-16 15:15:00+00:00
> but what's hard for me to process is why it’s 5 or 6 years later and it’s still not fully fixed

Because Apple's (the company's, as a whole) bug -> triage -> engineering -> deployment process is fundamentally broken, and obviously has been for decades at this point.

Say what you want about MS, but at least critical issues that actual customers are experiencing tend to get fixed.

Apple seems to have some weird 'maybe someone will look at it, if they have time, after they get done implementing new features for the next release' process. (Glaring example: daisy chaining DisplayPort support)
by cryoshon | 2025-09-16 15:15:02+00:00
Today they're admitting AI is hollowing out entry-level jobs. The reality is that it can and will replace mid-level and eventually even quite senior jobs.

Why?

It's already doing a lot of the loadbearing work in those mid-level roles too now, it's just a bit awkward for management to admit it. One common current mode of work is people using AI to accomplish their work tasks very quickly, and then loafing a bit more with the extra time. So leaders refrain from hiring, pocket the savings, and keep a tight lid on compensation for those who remain.

At some point they'll probably try to squeeze the workforce for some additional productivity, and cut those who don't deliver it. Note that the "ease" of using AI for work tasks will be a rationale for why additional compensation is not warranted for those who remain.
by psunavy03 | 2025-09-16 15:15:22+00:00
That generally means that while the document was declassified, parts of it weren't, and the still-classified info obviously gets redacted.

Information generally gets declassified after 25 years, but there are exceptions for when arbitrarily declassifying things could jeopardize capabilities that are still in use, burn intelligence sources who are still alive, etc.
by hbrn | 2025-09-16 15:15:24+00:00
> React feels natural because it never asks you to stop writing JavaScript

I want to increment some counter on the webpage. Which approach feels natural?

increment = () => { this.setState((prevState) => ({ count: prevState.count + 1 })); }; const increment = () => setCount((count) => count + 1); function increment() { count += 1; }

No one wakes up saying "please let me mutate simple state with function calls".
by Talanes | 2025-09-16 15:15:47+00:00
I'm currently reading 'Salt, Fat, Acid, Heat' and the author talks about this exact dilemma. She attributed the difference to the fact that box-cake recipes tend to use oil for the fat, while recipes from scratch often prefer butter. The way oil can fully coat the flour changes how the gluten chains develop during baking, which changes the texture.
Ask HN: What Comes After AI?
by OhMeadhbh | 2025-09-16 15:16:00+00:00
I don't want to start a flamewar, but some are suggesting we've already reached peak AI and are headed for the "trough of dis-illusionment." Since our industry seems to run on hype, what's the next technology to get on the hype-train? Seems I shouldn't start an AI startup right now since half the industry pundits say that ship has sailed.

Ideally it would be something that would sell NVidia chips (I don't want my NVDA shares losing their value) and suck down lots of power (to keep the nuclear renaissance going.)

Is there some application of fractals we've over-looked? Maybe we could have a cryptocurrency based on solving blocks of electron motility simulations so TSMC researchers could fund a "folding-at-home" style distributed system? I dunno. Just spit-balling here.
by bilekas | 2025-09-16 15:16:45+00:00
> No, "normal" humans don't dive to 80m deep, where the explosion occurred.

This simply isn't true, I myself after a technical advancement in my PADI to be certified on a rebreather went >80m many times. It's absolute more common than it was in the past.

Those who are trained with special forces as alleged would also be required to be qualified.
Ask HN: Behavioral assumptions in self driving cars
by davidajackson | 2025-09-16 15:16:51+00:00
Do self driving cars ever make assumptions about the lack of desirability of a lane if there is no one in it? While counterintuitive, sometimes that is an indication that there might be a parked car not currently visible etc. This has struck me as a curious problem where cars would actually observe other car's decisions ahead to guess that 'something is up'.
by fragmede | 2025-09-16 15:17:03+00:00
Phew, wasn't sure that would land :)

For video conferencing only, it's pretty okay. It's that it's terrible for instant messaging and group chats and everything else that it gets used for that makes it an exercise in getting papercut to death.

Meet is a lot friendlier about not having to download a client and just use a web browser, so that's nice for clients. It's not great for messaging and group chats either though.

The problem with Zoom is that a lot of people use it for personal use, but aren't tech savvy enough, so occasionally you'll get PantsPooper69 joining a business meeting until they change it right after joining, if they notice.
by incomingpain | 2025-09-16 15:17:07+00:00
Let me give you a rather angry story.

My network team asked me to deploy an open-source project on the security VM host. I thought it was a good idea. Small project, no wiki page, poor documentation. Still, I got it up and running. From my side, it looked configured correctly. Their plate was full with bigger priorities, so I didn’t push. My job as the security guy was just: install the app, give them creds, let them configure. Mission accomplished. But of course, I’m always around to help friends.

Months go by and the project sits untouched. Then, one Friday, in a meeting, they accuse me of failing to configure the app. Threw it right in my face. I had no use for the project. It’s a network tool, no security features, written in a language I don’t even know. I only installed it because they asked. If it were for me; I’d never have bothered. I thought I was being helpful. Apparently, not helpful enough.

So I decided: fine, I’ll code my own. No equivalent project exists in Python, so I started from scratch. That way, I could even extend it to do something useful for security as well. I quietly took the nonfunctional project offline. Hindsight is 20/20: the problem wasn’t with the software, it was with their missed network config. Nobody noticed it was gone for weeks anyway.

Over the next couple of weeks, I built a replacement. From scratch. Based on the demo of the original project, I matched and exceeded what it could do. And it worked.

I shared it with the team. Crickets. No feedback. No “nice job.” Just one question: what happened to the old project? I told them the VM was offline and could be spun back up easily. They didn’t ask me to bring it back online. They were still buried in more important work.

Meanwhile, I kept polishing my tool. Now that I had a good minimally viable product, I sought out feedback, I implemented 100% of their ideas, all good ideas. I added security extensions. Performance upgrades, WOOT NumPy and pandas dataframes.

Then last Friday, my boss corners me. The network team says my tool “isn’t functional.” News to me. I’d never been told of any problems. It was running fine from where I sat. Now suddenly, they “urgently” need the original back up.

So yesterday, I drag the old project back online. Tons of work on my part. During setup, the blame game starts. Firewall, config, etc. They even ask me to reinstall the OS because apparently when I installed the “documentation was not followed.” After a full reinstall of os, I hand over the vm, the same problem is still there. Finally, they discover it was a router config issue on their side.

Now the old project is alive, working, and I’m left staring at it, wondering: why isn’t my project good enough? why the bad mouthing me to my boss? when im just trying to be helpful.
by non_aligned | 2025-09-16 15:17:12+00:00
You're literally arguing that a government intelligence agency couldn't find a couple of experienced people, provide them with commercially-available equipment, and get them to coordinate a medium-complexity task.

Yes, it's an operation that requires coordination and planning, which is why it's reasonable to assume it was carried out by an intelligence agency and not a lone fisherman with a grudge. But once you're in the realm of intelligence activities, this isn't exactly the "let's blow up their pagers" level of complexity.
by mdaniel | 2025-09-16 15:17:24+00:00
It is a CD solution, there's no CI involved at all. However, it extends the 'delivery' portion of that phrase to also include so called "day 2" Kubernetes-centric functionality such as "how does my Secret content get populated?" and "how to I apply only certain values.yaml to certain Helm release versions?" Then, Mission Manager also gets into the game of "how do I ensure my cloud resources are present alongside the software?"

It also gets into the compliance side of things (arguably it's all about compliance) in that new releases, config changes, vulnerability mitigation, downtime windows, and a ton of other stuff are optionally gated by a review process. If you want to change the values.yaml for an existing release, you can choose whether that is a 4-eyes change

That latter bit also speaks to your question about "who is the target audience for this?" because, like many things Palantir, it's a lot of the defense industry and intelligence community, as they care a lot about having gates and controls in place. Apollo specifically also gets into "edge deployments," such as what software is running on a laptop that goes out into the field, comes back to base, and only then gets its updates pushed to it

I detest them with all my heart, but I'll be straight that Apollo does actually model the deployment concerns of software very well. Every place that I've been always hand-assembles their own CD story using off the shelf stuff, and so if one has compliance needs then Apollo allows to pay to have the "hand assembled" problem go away. That said, I have _absolutely no idea_ how much Apollo costs, so I'd also speculate that most organizations would be much happier just paying for a competent DevOps role to do the best they can to use off the shelf tools to hand assemble their own CD story, or use BigBang[1] which is at least open source and a standard (one may not like it, but it is at least consistent)

1: https://github.com/DoD-Platform-One/bigbang#readme
by JimmaDaRustla | 2025-09-16 15:18:06+00:00
I don't understand how this comment is the top, because it makes no sense.

No one writing markup says "Damn, I wish I could write this inline with my javascript." Have you even seen a react component before? People writing javascript containing the markup which, in turn, contains more inline javascript statements for conditional rendering. No logical person would argue "this is better than {#if}{:else}{/if}".
by beng-nl | 2025-09-16 15:18:07+00:00
This seems to me like a very harsh take on Theo’s motivations. I don’t know him beyond what I’ve learned from his videos, but given occams razor I’m inclined to believe him: gpt5 seemed much better during the private demo than the public release. There are many possible explanations but jumping to ‘shill’ (implying deception) seems uncalled for.
by Pet_Ant | 2025-09-16 15:18:14+00:00
The name is likely an anglicised version of "klocki" just meaning "blocks" in Polish. ( in Polish 'c' is just a "ts" not a "k", so "cumani"->"tsunami" and "Ghosts of Tsushima" -> "Ghosts of Cushima", or "pec" -> "pets", so also those last name of "cki" ... just end in "tski")
by toomuchtodo | 2025-09-16 15:18:18+00:00
https://en.wikipedia.org/wiki/Income_and_fertility#Contrary_...

https://ifstudies.org/blog/more-money-more-babies-whats-the-...

https://www.demographic-research.org/articles/volume/51/26

https://www.sas.upenn.edu/~jesusfv/Slides_London.pdf

(your paper is five years old, and is lagging broad, rapid global fertility decline trends; it's not income-fertility, its "educated, empowered women with access to birth control have less kids, no kids, and/or delay childbirth" regardless of income, with the caveat being some higher income cohorts and ultra orthodox religions/cultures [Israel] having higher than baseline fertility)
by lucideer | 2025-09-16 15:18:41+00:00
> NPM is special, in that the exposure is so much higher.

NPM is special in the same way as Windows is special when it comes to malware: it's a more lucrative target.

However, the issue here is that - unlike Windows - targetting NPM alone does not incur significantly less overhead than targetting software registries more broadly. The trade-off between focusing purely on NPM & covering a lot of popular languages isn't high, & imo isn't a worthwhile trade-off.