MurphyA/hacker-news huggingface dataset:
by bmandale | 2025-09-02 16:50:33+00:00
> An attempt by an open source password manager to provide export of private keys was ruled insecure and should not be supported.

The name of the issue reveals the actual problem: "should never be exported in clear text". If the export was encrypted with a passphrase in a standard format, then there would be no issue. It's specifically doing it in plain text that causes consternation. Of course, in practice it doesn't make much of a difference when users are incapable of choosing secure passwords, let alone passphrases. But requiring exports to be encrypted is the least one can do to maintain a degree of security while still allowing exports.

> For many years already, people lose access to their Google account every day and can never regain it. Google is well known for terminating accounts without stating any reasons. With that comes the loss of access to your data. In this case, you also lose your credentials for third-party websites.

In practice this is frequently already true. Many sites require an email to sign up. Whenever you attempt to log in on a new device, they require you to type in a code sent to your email. Without access to your email, you cannot sign in.
by Centigonal | 2025-09-02 16:50:34+00:00
Totally agree with this. I'm in consulting, where there's a significant client communication component to most of our eng roles, so it's a slightly higher-dimensional space than engineering for product orgs. Still, there is a pretty powerful "g factor," where someone who excels in one dimension will probably be pretty good at all the other dimensions.

Still, when we're staffing, there's a world of difference between the great engineer who is happy being mostly left alone and writing complex but well-specced SQL queries for 12 weeks and the great engineer who can balance software architecture, customer meetings, and programming for the same project.
by Eggpants | 2025-09-02 16:50:43+00:00
So have an AI with a 40% error rate judge an AI with an 40% error rate…

AGI is a complete no go until a model can adjust its own weights on the fly, which requires some kind of negative feedback loop, which requires a means to determine a failure.

Humans have pain receptors to provide negative feedback and we can imagine events that would be painful such as driving into a parked car would be painful without having to experience it.

If current models could adjust its own weights to fix the famous “how many r’s in strawberry” then I would say we are on the right path.

However, the current solution is to detect the question and forward it to a function to determine the right answer. Or attempt to add more training data the next time the model is generated ($$$). Aka cheat the test.
by 9rx | 2025-09-02 16:50:45+00:00
> Seems more like a test on random React minutiae.

It is more like test on whether or not you can figure out random React minutiae (with Google/ChatGPT, if needed) when presented with a need. Which isn't a bad approximation for how well you will do at finding any random minutiae as needs present themselves. React-based development doesn't require much original thought — the vast majority of the job really is just figuring out the minutiae of your dependencies to fit your circumstantial need.

For fun, I asked ChatGPT for an answer and it gave a perfectly good one back without hesitation. Even if you had no idea what React was beyond knowing it is a library for developing web components, you should still be able to answer that particular question with ease.
by k310 | 2025-09-02 16:50:46+00:00
> Cloud services company Fastly agrees. It reports that 80% of all AI bot traffic comes from AI data fetcher bots.

No kidding. An increasing number of sites are putting up CAPTCHA's.

Problem? CAPTCHAS are annoying, they're a 50 times a day eye exam, and

> Google's reCAPTCHA is not only useless, it's also basically spyware [0]

> reCAPTCHA v3's checkbox test doesn't stop bots and tracks user data

[0] https://www.techspot.com/news/106717-google-recaptcha-not-on...
by nostrademons | 2025-09-02 16:51:25+00:00
I thought the same when choosing to invest in Intel rather than NVidia in 2022. At the time, Intel was worth $310B while NVidia was worth $650B, yet Intel's revenue was $80B/year while NVidia's was $25B. I was like "There's no way I'm paying 2x the price for 1/3 the revenue." Now, NVidia is worth $4T (a return of roughly 7x) on revenue of $165B, and Intel is worth $105B (a return of roughly -66%) on revenue of $53B.

Investors are forward looking, and market conditions can change abruptly. If Anthropic actually displaces Google, it's amazingly cheap at 10% of Alphabet's market cap. (Ironically, I even knew that NVidia was displacing Intel at the time I invested, but figured that the magnitude of the transition couldn't possibly be worth the price differential. News flash: companies can go to zero, and be completely replaced by others, and when that happens their market caps just swap.)
by nradov | 2025-09-02 16:51:32+00:00
The high valuations are essentially lottery tickets, not something based on any sort of calculation of discounted future cashflows. The bet is that the researchers working for some of those frontier AI model companies will come up with innovations that give them a sustainable competitive advantage that goes beyond just purchasing more compute and licensing more proprietary training data. Obviously they can't all succeed but perhaps one or two will get lucky, perhaps by figuring out how to greatly improve efficiency or something that isn't easily copied.
by pavlov | 2025-09-02 16:52:07+00:00
I still call this key “omppu” in Finnish (meaning “apple”) because that’s what everyone called it in the 1990s when it still had the “open apple” legend.

And young people look at me like I’m crazy when I tell them to press “omppu Z”… But it’s a hard habit to break. I don’t even know what the official name of the key is in Finnish.
by John23832 | 2025-09-02 16:52:14+00:00
I think that also assumes that you're able to use that entire 6 figures for yourself. And that you're able to save in these HCOL places that the 6 figures are made. And/or that you're married.

Many of the people that I know in that 6 figure range (the "normal" 100-300ish range) are helping others. Family and the like.

It's also 3-4k for an apartment in many of the HCOL places. That's before food, transportation, and taxes.

And many people are doing it solo, not married.

I'm not saying 6 figure earners are to be pitied. I'm just saying that the money goes out the door just as quickly as it comes in.
by cddotdotslash | 2025-09-02 16:52:25+00:00
I can see the value, but to do the things you're describing, the AI needs to be given fairly highly-privileged credentials.

> Right now, Datafruit receives read-only access to your infrastructure

> "Grant @User write access to analytics S3 bucket for 24 hours" > -> Creates temporary IAM role, sends least-privilege credentials, auto-revokes tomorrow

These statements directly conflict with one another.

So it needs "iam:CreateRole," "iam:AttachPolicy," and other similar permissions. Those are not "read-only." And, they make it effectively admin in the account.

What safeguards are in place to make sure it doesn't delete other roles, or make production-impacting changes?
by eschneider | 2025-09-02 16:52:37+00:00
>The best engineers will tell you why your architecture is wrong, why your code sucks, why your timeline is unrealistic, and why your product decisions make no technical sense. If you're not ready for that level of pushback, you don't actually want the best engineers.

Then they'll help you figure out how to get where the company needs to be, on a feasible timeline, with the resources available.
by Quarrelsome | 2025-09-02 16:52:45+00:00
Becky Burke, detained for 19 days while, she was entirely capable and willing to leave the US, yet they locked her up. There's plenty of these stories from all over the world, you're just not looking. The Irish man only known as "Thomas" (as he requested anonymity) tore a muscle in his leg and the doctor told him not to travel, so he overstayed his visa by three days, got locked up for 100 days by ICE.

You're clearly not even trying or just searching infowars and then giving up. C'mon yo, I ain't here to spoonfeed.
by tharmas | 2025-09-02 16:52:57+00:00
Hah! Try living in Scotland. Its gets dark before 5pm and stays dark until about 8:45am in the winter. So you never see daylight on weekdays.

If you look at a map of Europe, Toronto's latitude is similar to Milan's. So most of Europe has more darkness in winter than Toronto.

I would argue the darkness in winter in Toronto is pretty average compared to most places in "the West". Its the winters that are nasty, although by Canadian standards not too bad. That tells you a lot of about Canada regarding winter weather.
by marcosdumay | 2025-09-02 16:53:01+00:00
In this imaginary reality where LLMs just keep getting better and better, all that a leak means is that you will eat-up your capital until you release your next generation. And you will want to release it very quickly either way, and should have a problem for a few months at most.

And if LLMs don't keep getting qualitatively more capable every few months, that means that all this investment won't pay off and people will soon just use some open weights for everything.
by 0cf8612b2e1e | 2025-09-02 16:53:37+00:00
Heh, not the person you were replying to, but I do not find the list of upsides compelling. These products at scale are mature (minus everyone’s list of personal bugs and misfeatures). Who cares how easy it is to pick up the language or developer happiness? A stricter language with more hard guarantees makes it possible to make changes to a big code base without fear.
by TuringNYC | 2025-09-02 16:53:40+00:00
While I agree with you on everything, this doesnt really work for everyone

1. It requires a level of maturity and wisdom most recent graduates do not have (I certainly didn't have this when I graduated). Despite all my entrepreneurship courses in college, working at a dot-com startup, etc, I wouldn't have been able to do this out of college.

2. Not everyone is going to be enterprising. Historically, we've provided a path forward to smart people who just want a line job, not start/sell a business
by anon84873628 | 2025-09-02 16:53:49+00:00
Same here. I adopted Dvorak as a youth, so when I got my first smartphone I put the keyboard in Dvorak.

That only lasted a few days for two reasons:

1) What you said about the mistakes. It is so much easier to fat finger in a way that makes autocorrect clueless.

2) The muscle memory doesn't translate at all anyway. Obvious in retrospect, but typing with your thumbs is a completely unrelated skill to touch typing. Turns out both live separately and equally in my brain.
by Quarrelsome | 2025-09-02 16:54:10+00:00
> when people are aligned along an American identity

way I see it, people voting GOP these days ain't inside that venn diagram. They need to read some Thomas Paine and remember why the USA was created in the way it was.

Allowing people to just get hauled off the street and locked up without charges or legal access isn't American. Or at least, its the polar opposite of what I understood America to be.
by CM30 | 2025-09-02 16:54:18+00:00
Okay, gonna be honest, the main issue your game has is that it seems too generic/boring. The visuals aren't bad per se, but they feel like they come straight from some premade UI framework, like a slightly fancier equivalent to programmer art.

So while the game might be fun to play, at first glance it just looks and feels cheap. It lacks an identity of its own, and that makes it really not stand out from the hordes of other generic puzzle games flooding the app stores at the moment.

Definitely add something to make it stand out there. Unique characters, a visual theme as a whole, etc.

Also maybe rethink the name too. Arrows is definitely a clear name for this game, but it doesn't really sell the game in any way, and feels about as generic as the art style does. Most successful games have strong branding that you can build a potential series off of, whereas this one does not.

Gameplay wise it seems like it could be fun, but it also feels like the mechanics will get old very quickly. It's a gameplay loop that doesn't look particularly compelling from the footage required, and which most bigger titles relegate to a mini game or dungeon puzzle since the mechanics don't have enough to them to carry a whole game.
by panarky | 2025-09-02 16:54:28+00:00
I happened to be in Istanbul during the Gezi Park uprising in 2013.

I didn't participate in the protests, but I did manage to wander into the wrong place at the wrong time and got teargassed pretty good and hard. I sheltered from the gas and the water cannons and the soldiers with a group of protestors overnight and got to learn from them firsthand.

They were using Twitter extensively to coordinate and to find out what what was going on because state media was completely bogus. They told me the government was blocking or throttling network traffic from Twitter at the DNS and ISP level to suppress the uprising.

Twitter routinely refused or challenged Turkish government demands to take down material or to turn over logs. I remember that in 2014 the government demanded Twitter take down links to evidence of official corruption and Twitter refused.

Pre-Musk Twitter quite vigorously fought Turkish demands for censorship. Not every time, but many times.

After Musk took over, Twitter/X has been far more compliant with Turkish takedown demands. Before Turkish elections in 2023, Twitter restricted access to some accounts in Turkey to avoid threats of a wider shutdown. Musk publicly defended his decision as the "lesser of two evils".

X’s own figures (as cited by Human Rights Watch) show 86% compliance with government requests from Turkey in 2024 (https://www.hrw.org/news/2025/05/08/joint-open-letter-social...).

Compare that to pre-Musk times, where Twitter complied with Turkish court orders ~25% of the time (https://www.state.gov/wp-content/uploads/2022/03/313615_TURK...).

Free-speech Twitter no longer exists.
by StratusBen | 2025-09-02 16:54:29+00:00
Vantage | Senior/Staff Software Engineers | NYC and Remote | Full Time

Vantage is a FinOps / Cloud Cost Management platform that helps 15,000+ organizations globally like Block, Rippling, FanDuel, CircleCI, etc manage their infrastructure costs. We are a ruby/rails shop and if you love infrastructure, it's a very interesting role as our customers are others like you looking to manage their infra spend.

We're a well funded Series A company and backed by a16z and Scale. The company is about 50 people today and scaling up quickly.

The company is headquartered in NYC but US-remote friendly (sorry, we can't handle international at this time).

Website: https://vantage.sh/ Learn More: https://www.vantage.sh/careers
by tuckerman | 2025-09-02 16:54:31+00:00
I don't disagree about the problems in government but I don't think we need to look through that lens all the time.

Grade inflation and an environment that is unwilling to challenge our children can be a problem even if bad things are going on elsewhere. One could argue that a system that encourages kids to work hard, face challenges, and value deep thought might make the population more resilient against anti-intellectualism.
by wackoos | 2025-09-02 16:54:47+00:00
Location: Argentina

Remote: Yes (Remote Only)

Willing to relocate: No

Technologies: Ruby, Ruby on Rails, JavaScript, TypeScript, React, SQL

Resume: https://drive.google.com/file/d/1bpEdWjisgAscJl8idgO15A9vcZ_...

Email: joakin@gmail.com

Ruby on Rails / Fullstack engineer with nearly 20 years of experience building products across startups and scale-ups, with deep expertise in Ruby on Rails and modern JavaScript frameworks. Experienced in leading projects end-to-end, mentoring teammates, and balancing speed with long-term quality and business growth. I thrive in collaborative environments where strong engineering practices drive real customer impact.
by belthesar | 2025-09-02 16:54:49+00:00
“But why” is an ever present question on Hacker News, with the announcement of Dropbox being rebutted with “But why, we have FTP”.

Not every idea that rethinks an existing system will have the same merit or success of course, but I think it’s fair that sometimes a potential user will say that they think their existing system is fine and that others should adopt it vs consider something new.
by dahart | 2025-09-02 16:54:57+00:00
When you say something that contradicts his statements, it doesn’t mean he’s wrong, it most likely means you haven’t understood or interpreted his argument correctly. The Wikipedia page you linked to doesn’t use the word “algorithm”, so the source of the contradiction you imagine might be you. Searle says he thinks humans are biological machines, so your argument should withstand that hypothesis rather than dismiss it.
by wongarsu | 2025-09-02 16:55:14+00:00
So all it takes is Anthropic 35x-ing their revenue once they start selling ad spots? That sounds pretty reasonable to me.

Right now nobody wants to be the first to offer advertising in LLM services, but LLM conversation history provides a wealth of data for ad targeting. And in more permissive jurisdictions you can have the LLM deliver ads organically in the conversation or just shift the opinions and biases of the model through a short mention in the system message
by mananaysiempre | 2025-09-02 16:55:31+00:00
This is a prisoner’s dilemma situation. You don’t want to host that content, which is your right. And neither does anyone else. So every place that does try ends up swamped with the undesirables and either stops trying, goes bust, or turns into a poisonous swamp. And thus all the “yes but not here” people collectively end up enforcing a degree of censorship beyond what the law actually requires, or (in other cases) effectively erasing opinions that a fair part of society does hold (thus effectively forcing that part of society to turn into a poisonous swamp).

(Neutral example: at some point in the past the clinics around me started requiring appointments to come in for doctor-prescribed tests. Recently, the closest one did that too, saying that they were the only one remaining and ended up being overloaded with all the people who wouldn’t or couldn’t make an appointment. And thus we’re all worse off now.)
by camperegrine | 2025-09-02 16:55:38+00:00
Peregrine Technologies | Senior Software Engineers | SF / NYC / DC - Hybrid | Full-time | $130,000 - $250,000

Join our founding engineering team. Peregrine helps critical institutions make better decisions and improve operations by unlocking the value of their data.

[Leadership] Engineering Manager (SF) https://grnh.se/s7yxefzs5us

[Leadership] Engineering Manager, AI (SF) https://grnh.se/0w7ot24o5us

Senior Software Engineer, AI (SF, NYC, DC) https://grnh.se/yl9kuqrg5us

Senior Software Engineer (SF, NYC, DC) https://grnh.se/gwf63pot5us

Senior Infrastructure Engineer (SF, NYC, DC) https://grnh.se/vvkanme45us (UK) https://grnh.se/6c1kjk525us

Senior Network Engineer https://grnh.se/xln6w1hc5us

Senior Product Designer (SF / NYC) https://grnh.se/s96svypy5us

Design Engineer (SF) https://grnh.se/z8ev1cgu5us
by _DeadFred_ | 2025-09-02 16:56:03+00:00
The current American system is premised on people buying into this. If people don't there is no societal foundation which probably leads to societal change. It's like the one societal contract we have (had). Not society helps you, not society puts a roof on your head. Not we're in a society together, so when you get sick we help out. Purely just 'if you work hard, you will be rewarded, and the rewards will take care of the things our social model doesn't'.
by YetAnotherNick | 2025-09-02 16:56:06+00:00
Whatsapp had $10M revenue when it was acquired[1]. Lots of so called "chatgpt wrappers" has more revenue than that. While in hindsight Whatsapp acquisition at $19B seems no brainer, no concrete metric pointed to that compared to him investing $19B in AI now.

[1]: https://www.sec.gov/Archives/edgar/data/1326801/000132680114...
by arp242 | 2025-09-02 16:56:10+00:00
I guess the thing is that Musk does actually fight this sort of thing, but seemingly only on certain topics that align with his pretty far-out views.

It's rather hard to take that in good faith. This is "For my friends, everything. For my enemies, the law." kind of stuff.

Old Twitter wasn't perfect, but at least tried to be somewhat neutral and even-handed.
by alphazard | 2025-09-02 16:56:46+00:00
Differential equations is kind of the same situation. The important intuitions are more likely to come from repeatedly applying a function to an input and seeing where that takes the simulation, than by doing DiffEQ practice problems.

There will always be some brilliant people that breeze through a hard course, and effortlessly acquire the intuition, and then wrongly attribute their understanding to the course. That doesn't help the rest of us, who are much more likely to build intuition by guessing about the outcome of a program and then checking if we are right.
by toast0 | 2025-09-02 16:57:35+00:00
We did eventually move elsewhere because of acquisition. Of course those guys didn't even bother to run LACP and so our systems would regularly go offline for a bit whenever someone wanted to update a switch. I was a lot happier at the host that sometimes bumped the power cables.

Firing a host where you've got thousands of servers is easier said than done. We did do a quote exercise with another provider that could have supported us, and it didn't end up very competitive ... and it wouldn't have been worth the transition. Overall, there were some derpy moments, but I don't think we would have been happier anywhere else, and we didn't want to rent cages and run our own servers.
by fredoliveira | 2025-09-02 16:57:37+00:00
A couple of counter-arguments:

Labs can just step up the way they track signs of prompts meant for model distillation. Distillation requires a fairly large number of prompt/response tuples, and I am quite certain that all of the main labs have the capability to detect and impede that type of use if they put their backs into it.

Distillation doesn't make the compute moat irrelevant. You can get good results from distillation, but (intuitively, maybe I'm wrong here because I haven't done evals on this myself) you can't beat the upstream model in performance. That means that most (albeit obviously not all) customers will simply gravitate toward the better performing model if the cost/token ratio is aligned for them.

Are there always going to be smaller labs? Sure, yes. Is the compute mote real, and does it matter? Absolutely.
by kashunstva | 2025-09-02 16:57:53+00:00
> Do not go to college if you have to spend any money on it.

I cannot think of a single person in my extended family across three generations for whom that heuristic is true. I don’t doubt that it applies in some situations. I can’t tell you what the actual ROI is; but “belonging there” seems a little encumbered by assumptions about the diversity of ways and timings in which young people develop academically and emotionally.
by ACCount37 | 2025-09-02 16:58:07+00:00
The raw model scale is not increasing by much lately. AI companies are constrained by what fits in this generation of hardware, and waiting for the next generation to become available. Models that are much larger than the current frontier are still too expensive to train, and far too expensive to serve them en masse.

In the meanwhile, "better data", "better training methods" and "more training compute" are the main ways you can squeeze out more performance juice without increasing the scale. And there are obvious gains to be had there.