MurphyA/hacker-news huggingface dataset:
by exceptione | 2025-10-20 20:07:02+00:00
> socialism vs capitalism

I guess this might be a matter of conditioning. You might live in an environment where concepts around the stem "social" has become a pejorative. In that way it is understandable that a term like "social democrat" is interpreted as "communist". There does not exist anything you imagine like that.

What is different is that there is more opposition and cultural resistance to hyper capitalism. Think monopolies, corporatism, live-to-work, hustle-culture.

With regards to any messaging about "freedom" in the USA, be vigilant, I do think people will be unpleasantly surprised about what has been transacted away. Personal freedoms are indeed extremely important, so zero Schadenfreude here. And yes, those lobby groups in the EU fail to get their stupid anti-encryption laws passed, but they keep trying, so it is frightening. Citizens and visitors of the Five Eyes have lost any privacy already, but we need all of us to fight back.

TLDR: it is better to cooperate around common causes than to fight imaginary opponents. We are in the same boat.
by necovek | 2025-10-20 20:07:16+00:00
If a startup goes under, is that betrayal to? To me, a failure is not betrayal.

A startup that needs to pivot to survive is probably equivalent to a failure of the startup, but survival for the team and the founders (a "company").

For a customer, the biggest problem is with all of the SaaS "products" which are ephemeral and require the parent company to keep it up or release it as free software. With desktop software, you could at least keep the last version.

But all things considered, if you are not going under, you should at least reimburse for whatever service was not rendered once you pivot.
by nunez | 2025-10-20 20:08:02+00:00
You're right in that there is much less variety amongst decaf coffee options, but there are a few good single origins out there.

BlendIn's Los Nogales typica is outstanding. It's the bean that convinced me to go full-decaf two years ago. (I drink caffeinated coffee now.)

Manhattan Coffee Roasters also has El Vergel, which is a good single origin with a dark, chocolatey taste profile. Great as a pour-over or as an espresso.

One Line Coffee in Columbus, OH also has a great decaf single origin. They deliver!

But, yeah, most decaf options are meh at best and pretty bad on average. Starbucks, of all places, has a reliable decaf roast that's alright and consistent.
by ChrisArchitect | 2025-10-20 20:08:08+00:00
Reminds of GrubHub and Doordash doing similar a number of years ago: creating listings/pages for restaurants without their knowledge.

Grubhub sued for listing restaurants without permission (2020)

https://news.ycombinator.com/item?id=24930436

Doordash and Pizza Arbitrage (2020)

https://news.ycombinator.com/item?id=23216852
by spacechild1 | 2025-10-20 20:08:14+00:00
> The moment someone produces a properly WYSIWYG tool for JUCE,

Side note: Steinberg's vstgui framework not only has a WYSIWYG editor, you can even build/edit the UI while the plugin is running in a DAW. I usually give Steinberg a lot of shit for their arrogance and ignorance, but this I found extremely cool! I have only toyed around with it, so I don't know how viable it is for complex plugin UIs.
by mauzy | 2025-10-20 20:08:15+00:00
Bizarre that this is the top comment as this would drastically increase the frequency of peanut allergies and, more than likely, end in multiple deaths. Research strongly suggests that the key is that the child eats peanuts before being exposed via other vectors (skin/lung) to avoid allergic reactions. Arisolizing the relevant proteins around infants is essentially fast tracking allergic reactions.
by yorwba | 2025-10-20 20:08:31+00:00
The paper is about techniques to do that dynamic allocation to maximize utilization without incurring unacceptable latencies. If you let a GPU sit idle for several minutes after serving a single request, you're setting money on fire. So they reuse it for a different model as soon as possible, starting even before the first request is finished, because: If you don't have a dedicated GPU for a model, are you going to wait for a multi-gigabyte transfer before each request? So they have a dedicated GPU (or two, one for prefill, one for decode) for a group of models that are processed in an interleaved fashion, scheduled such that they stay within the latency budget.
by noir_lord | 2025-10-20 20:08:43+00:00
I don't disagree but the world then and the world now are different places and people pushing for less of a dependency on american tech companies have a real chance to make some headway with The Orange One(TM) sitting on his throne over the pond and Microsoft seemingly determined to make themselves (more) unpopular with techies generally not entirely sure what they are doing with Windows 11 but after 3 decades of running a microsoft OS I don't have one in the house (in fairness windows hung in for gaming for the last 20 odd years, I've been linux for everything else since the millenium).
by neilv | 2025-10-20 20:08:57+00:00
Nit about doing your AI interfaces on the Web: I really want claude.ai and chatgpt.com to offer a standard username+password login without 2FA. The kind my privacy-friendly browser of short-lived sessions can complete in a couple clicks, like for most other SaaSes, and then I'm in and using the tool.

I don't want to leak data either way by using some "let's throw SSO from a sketchy adtech company into the trust loop".

I don't want to wait a minute for Anthropic's login-by-email link, and have the process slam the brakes on my workflow and train of thought.

I don't want to wait a minute for OpenAI's MFA-by-email code (even though I disabled that in the account settings, it still did it).

I don't want to deal with desktop clients I don't trust, or that might not keep up with feature improvements. Nor have to kludge up a clumsy virtualization sandbox for an untrusted client, just to ask an LLM questions that could just be in a Web browser.
by adventured | 2025-10-20 20:09:05+00:00
The primary bailout during the 2008 housing crisis went to homeowners, not to banks through TARP. The secondary bailout was to banks, the Fed bought up trillions of dollars worth of garbage housing assets. That homeowner bailout was never paid back: it damaged the economy in the form of dollar debasement (ie lower purchasing power for everybody holding dollars). The Fed increased its balance sheet 400% in six years, and never looked back. The housing bailout was trillions of dollars, meant to keep that gigantic housing asset pool inflated artificially. We did it again during Covid, with another gigantic consumer bailout.

See: gold at $400 vs gold at $4,000. Aka the destruction of the USD.
by 1oooqooq | 2025-10-20 20:09:09+00:00
how do you test your software can decompress files created with old/different implementations?

the exploit used the only solution for this problem: binary test payload. there's no other way to do it.

maybe including the source to those versions and all the build stuff to then create them programmatically... or maybe even a second repo that generates signed payloads etc... but its all overkill and would have failed human attention as the attack proved to begin with.
by lawlessone | 2025-10-20 20:09:27+00:00
> it may have only been necessary in less than 1 out of 50 cases.

Ok but who want's to be the one that needs it and can't get it?

https://www.breakingnews.ie/ireland/family-of-teen-who-died-...

>anaphylactic shocks is a biological reaction of your body to save itself, not kill itself

The idea that everything the body does is harmless natural magic that should be allowed to run it's course is killing people.
by everforward | 2025-10-20 20:10:18+00:00
Good alerting is hard, even for those of who are SMEs on it.

My biggest advice is to leverage alerting levels, and to only send high priority alerts for things visible to users.

For alert levels, I usually have 3. P1 (the highest level) is the only one that will fire a phone call/alarm 24/7/365, and only alerts if some kind of very user-visible issue happens (increase in error rate, unacceptable latency, etc). P2 is a mid-tier and only expected to get a response during business hours. That's where I send things that are maybe an issue or can wait, like storage filling up (but not critically so). P3 alerts get sent to a Slack channel, and exist mostly so if you get a P1 alert you can get a quick view of "things that are odd" like CPU spiking.

For monitoring, I try to only page on user-visible issues. Eg I don't routinely monitor CPU usage, because it doesn't correlate to user-visible issues very well. Lots of things can cause CPU to spike, and if it's not impacting users then I don't care. Ditto for network usage, disk IO, etc, etc. Presuming your service does network calls, the 2 things you really care about are success rate and latency. A drop in success rate should trigger a P1 page, and an increase in latency should trigger a P2 alert if it's higher than you'd like but okay and a P1 alert at the "this is impacting users" point. You may want to split those out by endpoint as well, because your acceptable latency probably differs by endpoint.

If your service can't scale, you might also want to adjust those alerts by traffic levels (i.e. if you know you can't handle 10k QPS and you can't scale past 10k QPS, there's no point in paging someone).

You can also add some automation, especially if the apps are stateless. If api-server-5 is behaving weirdly, kill it and spin up a new api-server-5 (or reboot it if physical). A lot of the common first line of defense options are pretty automatable, and can save you from getting paged if an automated restart will fix it. You probably do want some monitoring and rate limiting over that as well, though. E.g. a P2 alert that api-server-5 has been rebooted 4 times today, because repeated reboots are probably an indication of an underlying issue even if reboots temporarily resolve it.
by general1465 | 2025-10-20 20:10:45+00:00
> that, and they probably don't value IP rights as much as the western world

No, that's actually completely untrue. Chinese (and Japanese too) has no problem to copy your IP, but they will fight tooth and nail to protect theirs. Nintendo is great example of that (look into history how they got big) for China it was recently when EU wants tech transfer in exchange for dropping tariffs on cars, which Chinese are not keen on at all.

https://www.globaltimes.cn/page/202510/1345710.shtml
by twixfel | 2025-10-20 20:11:33+00:00
You stated something objectively wrong (that European countries are socialist) and then get called out and your reply is just to get upset, literally no information content whatsoever. It's very on brand, I suppose, reminds me a lot of that fraudster, convicted rapist and known paedophile currently in the White House.

Regardless, I agree we are going in separate directions, indeed the USA is no longer even a Western country. We had some good times, the American Empire was pretty great whilst it lasted, I wish you all the best.
by RajT88 | 2025-10-20 20:11:48+00:00
I grew up on the edge of the suburbs (huge city, but one with lots of cornfields on the periphery). Plenty of visits to local farms. This describes where I live now as well, where occasionally horses wander past on the street, and we get to deal with their shit by the street. Cow manure is put on the fields in spring.

Yeah, "grassy" is a word for it. But it still smells like shit. Less horrid than dog shit, but it's marginal.

As far as dogs being dirty - mine won't eat animal shit, either because she is not interested or because she picks up that we wouldn't like it (surprising, actually, how attuned she is to things we don't like). But she does not care at all about touching her own shit. She'll walk in it, throw it around after pooping when she is scratching the grass.
by Mr_Minderbinder | 2025-10-20 20:11:53+00:00
It is also a good warning that the people who typically create and edit Wikipedia articles in your local language do not find the subject interesting or are prevented from effectively documenting it due to the language barrier. I was doing research on the history of a certain illness and one physician I was investigating did not have an English Wikipedia article. Of course this does not mean he did not exist, I found him later on the Russian Wikipedia: https://ru.wikipedia.org/wiki/%D0%90%D1%81%D1%82%D0%B2%D0%B0....

I cannot find an article about this wall even on the Chinese Wikipedia but Baidu Encyclopedia has one: https://baike.baidu.com/item/%E8%A5%BF%E5%A4%8F%E9%95%BF%E5%...
by wredcoll | 2025-10-20 20:12:23+00:00
You keep attempting to shift terms to mean something they do not.

> Anyways, rights exist a priori, regardless of the capacity for any power to enforce said rights. Negative rights don't actually require enforcement because they aren't coercive

Prove it.

> Think through your example about the doctor. If you (a doctor) and I are stranded on an island and I break my leg, the "right to healthcare" would imply that you are obligated to help me, and I have the moral right to coerce you (violently if required) to help me. Would you agree to this proposition?

This a fantasy you've created by deliberately using the wrong definition of the words involved.

The "right to healthcare" means that your government should do its best to make sure people can see doctors and receive healthcare related treatment when they need it.
by cortesoft | 2025-10-20 20:12:34+00:00
I am not sure what you mean by naive. I also didn't say the percentage wouldn't go down, I literally said other investment rounds would change the percentage they own.

Amazons investment in Anthropic was in the form of convertible notes, which they have converted entirely into equity by march of this year. At that time, Anthropic was valued at 61.5 billion and Amazon (in their filings) said their investment was worth 13.8 billion, so about 22% of the company.

Then, there was another round in September where Anthropic raised 13 billion more at a valuation of 183 billion (so the new investors are buying about a 7% stake in the company). Without more details, that would lower amazons percentage to about 20% (old investors hold 93% of the company, so Amazon's 22% of the remaining 93% comes out to about 20%). There are probably other details that lower that percentage a bit, but i think the 15-19% ownership estimate is pretty accurate.
by orblivion | 2025-10-20 20:12:58+00:00
Running OpenStreetMap off the grid (self-hosted to say the least) on a Raspberry Pi 500 (and maybe a Pi Zero 2W) for Internet In a Box:

https://www.linkedin.com/posts/danielkrol_openstreetmap-acti...

All of the street and satellite tiles are thanks to maps.black. The search uses Nominatim's sqlite3 mode. I was told that it's experimental only because it hasn't been tried in production yet, so I'm sort of testing it in the process. So far I'm only doing administrative boundaries and natural features, but so far so good! I'm going to slowly add a few more types of POIs, I just don't want the database file to get too big.

Note that Internet in a Box has an OSM offering already, but the data is five years old and the tech makes it harder to update. As of today, there are much easier options on the table, and we get cool stuff like 3d buildings. Also, the search was much more limited.

* https://internet-in-a-box.org/

* https://maps.black/

* https://nominatim.org/release-docs/latest/customize/SQLite/
by pamelafox | 2025-10-20 20:13:00+00:00
At Microsoft, that's all baked into Azure AI Search - hybrid search does BM25, vector search, and re-ranking, just with setting booleans to true. It also has a new Agentic retrieval feature that does the query rewriting and parallel search execution.

Disclosure: I work at MS and help maintain our most popular open-source RAG template, so I follow the best practices closely: https://github.com/Azure-Samples/azure-search-openai-demo/

So few developers realize that you need more than just vector search, so I still spend many of my talks emphasizing the FULL retrieval stack for RAG. It's also possible to do it on top of other DBs like Postgres, but takes more effort.
by boston_clone | 2025-10-20 20:13:21+00:00
I'll bite. Never did I ever meet anyone in the military that needed "two hours" to fall asleep when they had adequate physical exercise throughout the day.

If you're undiagnosed by a clinical physician for a disorder and have that issue, you're either sleeping too much, consuming too many stimulants, or not getting enough physical exercise.

What's your exercise routine like?
by fithisux | 2025-10-20 20:13:33+00:00
I disagree wit the author. Many companies use the Medallion Architecture. Even if Kafka saves the logs to Iceberg for it's own advantageous format, you skip the Landing layer and Bronze is just a view. There is definitely gain. Plus, you keep only stream loads on the brokers.

Silver and Gold tables are optimized for querying and correctness.

But it is an interesting, high quality article.
by tuye0305 | 2025-10-20 20:13:40+00:00
I made this to help myself create better TikTok content. You paste a TikTok link and it converts the video into a structured AI prompt describing its tone, pacing, and story.

I use the prompt to brainstorm new ideas and then generate videos with Sora or Veo3. This simple loop helped me 10x my views in a few days.

It’s free and still rough around the edges. I’m curious if anyone else here makes short-form videos and wants to try it.
by WalterBright | 2025-10-20 20:13:50+00:00
Of courses, a OTP would be better. But there are problems with generating them (I doubt a bingo ball would be fast enough) and then you've got a courier problem (hope your courier isn't a spy), etc. With a newspaper, you just have to supply a date, which can be memorized.

BTW, I've used dice rolls to generate passwords, but the dice would always fall off my desk and roll into an inaccessible corner, and I soon tired of that. It also only worked for 6 digits! So I switched to a real RNG.
by 4gotunameagain | 2025-10-20 20:14:09+00:00
It is not bizarre, this place is like reddit or the news. Things seem plausible, until once in a while the discussion is something in your area of expertise, then you realise how full of shit everyone is.

At least here we have some exceptions, with some deeply knowledgeable people. But to offset that we have software "engineer" hubris.
by Frieren | 2025-10-20 20:14:41+00:00
> The information and knowledge that populism severely damages the economy is there and is in the public domain, but the media increasingly acts to hide that from the public or distort that information so that much of the public never gets to understand it.

Billionaires, that own newspapers and TV stations, are not trying to maximize the size of the economy of their countries. They are maximizing the percentage of that economy that they own, even at the cost of its size.

For people at the top of economic power that set as their personal goal to accumulate as much money/power as possible will tweak the system to that goal. All the economic machine of the country gets fine tuned to move money from the general economy to their own pockets.

It would make sense to set some limit to that transfer of wealth so the economy does not suffer the worst outcomes. But once all institutions are focused on wealth transfer, to grow the economy is no more in their goals.

You may have better health care, better technology, and many advantages than a King from the middle ages. But many billionaires want the absolute power of the King even if we go back to the middle ages.
by navanchauhan | 2025-10-20 20:15:00+00:00
I used `sandbox-exec` previously before moving to a better solution (done right, sandboxing on macOS can be more powerful than Linux imo). The way `sandbox-exec` works is that all child processes inherit the same restrictions. For example, if you run `sandbox-exec $rules claude --dangerously-skip-permissions`, any commands executed by Claude through a shell will also be bound by those same rules. Since the sandbox settings are applied globally, you currently can’t grant or deny granular read/write permissions to specific tools.

Using a proxy through the `HTTP_PROXY` or `HTTPS_PROXY` environment variables has its own issues. It relies on the application respecting those variables—if it doesn’t, the connection will simply fail. Sure, in this case since all other network connection requests are dropped you are somewhat protected but then an application that doesn't respect them will just not work

You can also have some fun with `DYLD_INSERT_LIBRARIES`, but that often requires creating shims to make it work with codesigned binaries
by bartread | 2025-10-20 20:16:31+00:00
> the occasional outage isn't worth the cost and effort of moving out.

And looked at from the perspective of an individual company, as a customer of AWS, the occasional outage is usually an acceptable part of doing business.

However, today we’ve seen a failure that has wiped out a huge number of companies used by hundreds of millions - maybe billions - of people, and obviously a huge number of companies globally all at the same time. AWS has something like 30% of the infra market so you can imagine, and most people reading this will to some extent have experienced, the scale of disruption.

And the reality is that whilst bigger companies, like Zoom, are getting a lot of the attention here, we have no idea what other critical and/or life and death services might have been impacted. As an example that many of us would be familiar with, how many houses have been successfully burgled today because Ring has been down for around 8 out of the last 15 hours (at least as I measure it)?

I don’t think that’s OK, and I question the wisdom of companies choosing AWS as their default infra and hosting provider. It simply doesn’t seem to be very responsible to be in the same pond as so many others.

Were I a legislator I would now be casting a somewhat baleful eye at AWS as a potentially dangerous monopoly, and see what I might be able to do to force organisations to choose from amongst a much larger pool of potential infra providers and platforms, and I would be doing that because these kinds of incidents will only become more serious as time goes on.
by godelski | 2025-10-20 20:16:49+00:00
Containers let me essentially build those machines but at the actual requirements I need for a particular system. So instead of 10 machines I can build 1. I then don't need to upgrade that machine if my service changes.

Its also more resilient because I can trash a container and load up a new one with low overhead. I can't really do that with a full machine. It also gives some more security by sandboxing.

This does lead to laziness by programmers accelerated by myopic management. "It works" except when it doesn't. Easy to say you just need to restart the container then to figure out the actual issue.

But I'm not sure what that has to do with cloud. You'd do the same thing self hosting. Probably save money too. Though I'm frequently confused why people don't do both. Self host and host in the cloud. That's how you create resilience. Though you also need to fix problems rather than restart to be resilient too.

I feel like our industry wants to move fast but without direction. It's like we know velocity matters but since it's easier to read the speedometer we pretend they're the same thing. So fast and slow makes sense. Fast by magnitude of the vector. Slow if you're measuring how fast we make progress in the intended direction.