MurphyA/hacker-news huggingface dataset:
by JumpCrisscross | 2025-10-23 19:12:10+00:00
> In history generally the only way governments are ever restructured is through civil war (or invasion)

This is total crap. Tale of Two Cities is set against the backdrop of Britain’s reforms, in contrast to the French Revolution. America has peacefully seen through Teddy Roosevelt’s trust busting, FDR’s New Deal and the Civil Rights Era, each peaceful restructurings of how our government works.

Revolutions transfer and consolidate power. Reforms broaden them. Those who miss this lesson of history and fall for glorified fictions of peasants’ revolts earn a consistent fate across millennia of human history.

Side note: strongly recommend https://www.youtube.com/watch?v=h6E4_Bcmscg&t=14s
by _--__--__ | 2025-10-23 19:12:39+00:00
"One indictment in the case lists 32 defendants, including the former N.B.A. player and coach Damon Jones and the Portland Trail Blazers coach Chauncey Billups, who are both charged with wire fraud conspiracy and money laundering conspiracy, according to the docket sheet in the case. Many of the other defendants also face those charges, along with counts accusing them of operating an illegal gambling enterprise and conspiracies to commit extortion and robbery."

They don't necessarily have or need evidence that Billups was aware of the rigging, just the regular financial crimes of taking payments from the Mafia that will presumably get him to cooperate.
by joshvm | 2025-10-23 19:12:40+00:00
Yeah there is support for API notarization, so in principle you could have an audit trail that some automated build process got a specific notary result that's "stapled" to the app. I'm not familiar enough to say how trustworthy that approach is, or what exactly you'd need to prove it. And yes, aim for a reproducible build that produces assets with checksums that can be matched to the distributed one.

The mitigation is if someone finds out a (notarized) download is compromised, they can tell Apple and they can retroactively and quickly revoke the signing which is distributed via Gatekeeper. Other users should get the warning if they had previously run the app without an issue.
by wat10000 | 2025-10-23 19:12:56+00:00
Your link only shows back to 1995, whereas the figures you quoted are about 1901. Even using your link and 1995, milk prices dropped 15% over that period, not 1.1%.

If we look at 1901, milk was around 6 cents per quart according to https://fraser.stlouisfed.org/title/bulletin-united-states-b.... Adjusted for inflation, that's about $2.29/quart today, or $9.16/gallon. That's over twice what I pay and over twice the average according to https://fred.stlouisfed.org/series/APU0000709112.
by Workaccount2 | 2025-10-23 19:13:01+00:00
This example works well in a vacuum, but not much else. You would see people filling up outside the small town, or see a third station open up to undercut the other two. Or, there is so much overhead that the high-high price is actually the fair price. Like grocery store monopolies that are bilking people so they can reap....1-2% profit margins.
by cryptonector | 2025-10-23 19:13:33+00:00
ASN.1 is from the mid-80s, and PKI is from the late 80s.

The problems with PKI/PKIX all go back to terrible, awful, no good, very bad ideas about naming that people in the OSI/European world had in the 80s -- the whole x.400/x.500 naming style where they expected people to use something like street addresses as digital names. DNS already existed, but it seems almost like those folks didn't get the memo, or didn't like it.
by wrs | 2025-10-23 19:13:46+00:00
Yesterday I was trying to move a backend system to a new AWS account and it wasn’t working. I asked Claude Code to figure it out. About 15 minutes and 40 aws CLI commands later, it did! Turned out the API Gateway’s VPCLink needed a security group added, because the old account’s VPC had a default egress rule and the new one’s didn’t.

I barely understand what I just said, and I’m sure it would have taken me a whole day to track this down myself.

Obviously I did NOT turn on auto-approve for the aws command during this process! But now I’m making a restricted role for CC to use in this situation, because I feel like I’ll certainly be doing something like this again. It’s like the AWS Q button, except it actually works.
by bilbo0s | 2025-10-23 19:13:46+00:00
Calling it today. This company is going to get innocent kids killed.

How many packs of Twizzlers, or Doritos, or Snickers bars are out there in our schools?

First time it happens, there will be an explosion of protests. Especially now that the public knows that the system isn't working but the authorities kept using it anyway.

This is a really bad idea right now. The technology is just not there yet.
by tonymet | 2025-10-23 19:13:48+00:00
This is a great review, but don't let theory interfere with practice. There's an art and feel to radio and antenna building. I've built antennas with scrap wire and baluns without double checking . Just a rough length of wire tweaked until you hear someone.

The theory seems overly complex (because it is). but for practical radio you can tune up nearly anything and chat -- and be way more productive with it.

Imagine obsessing over the mechanics of baseball or fishing without ever tossing a ball or casting a reel.
by Terr_ | 2025-10-23 19:13:56+00:00
> many or most

You act like that's a "gotcha" instead of a normal thing. All they mean by that [0] is that can't mathematically prove their developers/tasks/tool are representative for of the majority of worldwide developers/tasks/tools.

You're demanding an unreasonable level of investment for anyone to "prove a negative."

The burden of proof lies on the people claiming zillion-fold boosts in productivity across "enough" places that they don't really define. This is especially true because they could profit in the process, as opposed to other people burning money to prove a point.

[0] https://metr.org/blog/2025-07-10-early-2025-ai-experienced-o...
by fidotron | 2025-10-23 19:14:18+00:00
CRDTs really provide a nice formalism for reasoning about design choices in this space, almost more so than being a practical solution in and of themselves. For your example operational transformations have long been used as the way to go.

My experience of CRDTs is it rapidly descends into a question of defining if two things are in fact equal or merely look equal. i.e. if two people concurrently add "this is a new item" to a set did they create two separate items or the same thing?
by the_af | 2025-10-23 19:14:52+00:00
Yes, but the comment I was replying to and disagreeing with was this:

> Recruiters should not recruit programmers if they, the recruiters, have not worked in a programming context. The best software development recruiter is another programmer.

I don't think recruiters must be programmers, or even that that's a good idea. Recruiting and doing the tech interview are different steps.
by dreadsword | 2025-10-23 19:14:54+00:00
Oh man, don't ask - not a dumb question at all. I'll reshare what I put in another comment that answers it, but bottom line is they're a design gap in the context of /recent.

You're right --- incoming & outgoing end up being redundant on the "Recent" view. Where they're (more) relevant is in the "Top" view where the LLM editor has picked a subset of stories to be categorized as top and incoming/outgoing are the ones that didn't make the cut, organized by timeliness.

Definitely a gap in design!
by ZeroConcerns | 2025-10-23 19:15:03+00:00
So, yeah, only tangentially related, but if anyone at Anthropic would see it fit to let Claude loose on their DNS, maybe they can create an MX record for 'email.claude.com'?

That would mean that their, undoubtedly extremely interesting, emails actually get met with more than a "450 4.1.8 Unable to find valid MX record for sender domain" rejection.

I'm sure this is just an oversight being caused by obsolete carbon lifeforms still being in charge of parts of their infrastructure, but still...
by tartoran | 2025-10-23 19:15:49+00:00
"“We understand how upsetting this was for the individual that was searched as well as the other students who witnessed the incident,” the principal wrote. “Our counselors will provide direct support to the students who were involved.”"

Make them pay money for false positives instead of direct support and counselling. This technology is not ready for production, it should be in a lab not in public buildings such as schools.
by timeinput | 2025-10-23 19:16:03+00:00
I'm not strongly for or against (non-deterministic) GC. Deterministic GC in Rust or the (there's no real Scotsman) correctly written C++ has benefits, but often I don't care and go / java / c# / python are all fine.

I think you're really overstepping with AI is eaten by python. I can imagine an AI stack with out python llama.cpp (for inference not training... isn't completely that, but most of the core functionality is not python, and not-GCd at all), I can not imagine an AI stack with out CUDA + C++. Even the premier python tools (pytorch, vllm) would be non-functional with out these tools.

While some very common interfaces to AI require a GC'd language I think if you deleted the non-GC parts you'd be completely stuck and have years of digging your self out, but if you deleted the 'GC' parts you can end up with a usable thing in very short order.
by neilv | 2025-10-23 19:16:46+00:00
> Omnilert later admitted the incident was a “false positive” but claimed the system “functioned as intended,” saying its purpose is to “prioritize safety and awareness through rapid human verification.”

It just created a situation in which a bunch of people with guns were told that some teen had a gun. That's a very unsafe situation that the system created, out of nothing.

And some teen may be traumatized. Again, unsafe.

Incidentally, the article's quotes make this teen sound more adult than anyone who sold or purchased this technology product.
by ndriscoll | 2025-10-23 19:16:59+00:00
No, it is a defense strategy. For e.g. hobbyists, it's basically irrelevant, and having something on a private LAN is fine. There is almost no chance of an issue. Not everything in the world needs to be maximally secured, and the people who are using those IAM policies are probably not pulling a vanilla image off Dockerhub to run something as fundamental as their storage layer. They probably also have firewalls tightly locking down which machines are able to talk to MinIO on top of token auth.

The cargo-culting around security is so bizarre to me. In a context where e.g. your organization needs to pass audits, it's cheaper/easier to just update stuff and not attempt to analyze everything so you can check the box. For everyone else, most security advisories are just noise that usually aren't relevant to the actual way software is used. Notably, no one in these discussions is even bringing up what the vulnerability is.
Ask HN: Where should an experienced developer start learning AI development?
by productiveminds | 2025-10-23 19:17:02+00:00
For an experienced software developer looking to get started in AI development. What online courses would you recommend for someone entering this area of development today?

Any guidance on where to begin or which areas to focus on would be greatly appreciated. While I prefer online courses, I’m also open to other learning formats like books, YouTube channels, or tutorials.

Thanks in advance for your advice!
by tristor | 2025-10-23 19:17:09+00:00
I'm trying to be charitable here, but you're being incredibly obtuse in your response. The issue here is very much not that someone has to build a Docker image. There's already a Dockerfile in the repo that works to build it, you didn't even need some LLM to do that for you. That's not the issue. The issue is that their existing Docker image has billions of downloads and they simply stopped publishing updates unilaterally with no material attempt to communicate this to their users when the current image is affected by a critical CVE that will now never be fixed.

If you don't understand the difference between these two issues, I would suggest it is /you/ that lacks the ability to add sufficient value to your employer (as if that's even a standard we should care about We are people, not merely cogs in some VC's wet dream).
by ElevenLathe | 2025-10-23 19:17:25+00:00
To be clear: I agree. There is no reason that citizens shouldn't be able to inspect every document produced by their government, listen to any conversation about any topic that involves any officials, and no reason not to extend this regime into the so-called "private sector", which is -- legally and historically -- a creation of the state, not the other way around.

If you don't like that intrusion into your finances, you are still free to do business using your own personhood, but the public won't provide you with a spare disposable one.
by jeroenhd | 2025-10-23 19:17:36+00:00
With docker build comes a whole slew of dependencies that you wouldn't have with official images. You need some place to host the image, or build on the servers you use for deployment, and cross platform compilation (i.e. ARM images) becomes an issue.

It'll take more time than just typing out a comment on HN to get all of that in play. Actually getting a docker registry of your own set up with auth and everything can easily take half an hour, and adding+testing periodic sync and compile steps in your CI/CD will take another couple of hours if you're not set up for it.

Hardly the end of the world, though. Reminds me of the infamous "why can't people on github just give me the .exe" reddit troll post.
by busterarm | 2025-10-23 19:17:46+00:00
> Free users will not pay tens/hundreds of thousands for just binary files.

Sad to say but this isn't true. This is a failure to understand the pricing model of this kind of enterprise software.

What happens is the free version is used in some product somewhere. Then product's company gets acquired by HugeBigCo. Product company brain drain happens and HugeBigCo looks at poorly understood free software dependency as a liability. It's cheaper/better-on-the-balance-sheet to pay for a license and a support contract than to move off of that dependency or hire competent people to look after it...For a few years, anyway -- until that business unit is worth investing resources in.

That's how a company like Neo4j can charge a half-million bucks a year for one production cluster and get HugeBigCo as label that they can use to try to convince other companies that this pricing is even remotely reasonable.

Anything enterprise data-storage SaaS related is looking to charge at least a quarter-million a year.
by mike2872 | 2025-10-23 19:17:48+00:00
You're absolutely right. Thanks for the feedback! "No hub required" is misleading. What I meant was "no additional proprietary hub". Meaning, if you're already running Home Assistant or have a Linux machine, you don't need to own a separate device like Zigbee/Z-Wave hub. But yes, the HA instance or Linux host is effectively acting as the hub. I'll update that wording on the site.
by aerostable_slug | 2025-10-23 19:17:53+00:00
Part of it is the trend of MinIO walking away from community customers. That to me is not a good sign, especially when it comes to project longevity. Do projects that do this kind of thing continue to flourish and thrive? I'm not sure that they do.

It's hard to feel good about remaining hitched to a horse that continues to send out red flags, especially when there are other good options out there for us.
by ianbutler | 2025-10-23 19:19:06+00:00
I mean is it though? They've been open source for over a decade thats a really long con I guess.

It’s more likely circumstances have changed. Which is why forking is a thing and you dont have to be oss forever.

I stand by my assertion that this would have been fine if they didn’t communicate like garbage. They should have said what you said and gave a good off ramp period.
by evilduck | 2025-10-23 19:19:15+00:00
There was a 60 days notice? https://blog.min.io/

The only notice I have received is from the blowback of their behavior. Walking away from supporting the open source product at any other time than in the wake of a security vulnerability disclosure would have been received better. Sure they're not legally culpable for fixing anything but they're now obviously untrustworthy as a business partner going forwards.
by ACCount37 | 2025-10-23 19:19:42+00:00
A lot of the early EV battery life projections were based on Nissan Leaf Gen 1. Which had a horrendous battery pack that combined poor choice of chemistry, aggressive usage and a complete lack of active cooling.

When EVs with good battery pack engineering started hitting the streets, they outperformed those early projections by a lot. And by now, it's getting clear that battery pack isn't as much of a concern - with some of the better designs, like in early Teslas, losing about 5-15% of their capacity over a decade of use.
by FredPret | 2025-10-23 19:20:13+00:00
Apple added too many features too fast, so they fell into the Feature Whirlpool. They're going to try and get out of it by adding more Features, Faster (I hope I'm wrong!).

Instead, they should have stayed on the Straigth and Narrow of Quality - where they were for many years - where you move up to computing paradise by having fewer features but more time spent perfecting them.
by ZeroConcerns | 2025-10-23 19:20:48+00:00
Oh, come on, having your brand-new AirPod Pro 3s listed in the Bluetooth summary of your also-pretty-recent iPhone as ACCESSORY_MODEL_NAME is a small price to pay for the 3 months of free Apple Music that take up so much more space in the UI anyway...

I mean, some people are just impossible to please!
by miguelaeh | 2025-10-23 19:21:53+00:00
> Most importantly, you need to carefully engineer the learning process, so that you are not simply compiling an ever growing laundry list of assertions and traces, but a rich set of relevant learnings that carry value through time. That is the hard part of memory, and now you own that too!

I am interested in knowing more about how this part works. Most approaches I have seen focus on basic RAG pipelines or some variant of that, which don't seem practical or scalable.

Edit: and also, what about procedural memory instead of just storing facts or instructions?
by JustExAWS | 2025-10-23 19:22:00+00:00
Getting pulled aside by TSA for secondary screening is nowhere in the ball park of being rushed at gunpoint as a teenager and told to lay down on the ground where one false move will get you shot by a trigger happy cop that probably won’t face any consequences - especially if the innocent victim is a Black male.

In fact, they will probably demonize the victim to find sn excuse why he deserved to get shot.
by cyanydeez | 2025-10-23 19:22:17+00:00
Guys. It's basically because among the all well researched data, the amount of garbage is infinitely more.

If AI wants to be useful (it's not going to atm), real people need to cull all the banalities that facebook, reddit & forums have generated.

Because what you're noticing is things we typically elide over in discussions with actual humans.
by jeroenhd | 2025-10-23 19:22:20+00:00
The LLM stuff aside, how is minio supposed to communicate with the people who pulled their docker image?

The time line is rather short (the README announcing source only releases got updated a week and half ago) but it's not like Docker will let you email everyone and say "you're using one of our products, read this post about our new distribution model", probably for good reason. I can only imagine the "vulnerability" warnings flooding the world if every pulled container opened an avenue for emails.

I wouldn't buy their weird AI product off them after they behave like this, but this is software they've been maintaining and giving away for free, for years. Unless you have a contract with them where they promised maintenance, I don't see why this is on them, really.

The company can go bankrupt tomorrow and you won't even be able to pay them to update their images. Maintaining your dependencies is your responsibility, especially if you're not paying them a dime.
by btown | 2025-10-23 19:22:48+00:00
For anyone skimming rapidly through the thread who might have been confused here, especially since it's worded in similar ways that someone might reply to a mention of their own work on HN: the parent is not associated with Claude, but is the founder of a separate startup: https://www.memco.ai/

Both are exciting approaches, but with notably different use cases in mind!
by ortusdux | 2025-10-23 19:22:50+00:00
"If you were a ‘product person’ at IBM or Xerox: so you make a better copier or better computer. So what? When you have a monopoly market-share, the company’s not any more successful. So the people who make the company more successful are the sales and marketing people, and they end up running the companies. And the ‘product people’ get run out of the decision-making forums.

The companies forget how to make great products. The product sensibility and product genius that brought them to this monopolistic position gets rotted out by people running these companies who have no conception of a good product vs. a bad product. They have no conception of the craftsmanship that’s required to take a good idea and turn it into a good product. And they really have no feeling in their hearts about wanting to help the costumers.”

- Steve Jobs - https://en.wikipedia.org/wiki/Steve_Jobs:_The_Lost_Interview
by ggreer | 2025-10-23 19:23:10+00:00
According to a news article[1], a human did review the video/image and flagged it as a false positive. It was the principal who told the school cop, who then called other cops:

> The Department of School Safety and Security quickly reviewed and canceled the initial alert after confirming there was no weapon. I contacted our school resource officer (SRO) and reported the matter to him, and he contacted the local precinct for additional support. Police officers responded to the school, searched the individual and quickly confirmed that they were not in possession of any weapons.

What's unclear to me is the information flow. If the Department of School Safety and Security recognized it as a false positive, why did the principal alert the school resource officer? And what sort of telephone game happened to cause local police to believe the student was likely armed?

1. https://www.wbaltv.com/article/student-handcuffed-ai-system-...
by jawns | 2025-10-23 19:23:19+00:00
I expect that John Bryan -- who produces content as The Civil Rights Lawyer https://thecivilrightslawyer.com -- will have something to say about it.

He frequently criticizes the legality of police holding people at gunpoint based on flimsy information, because the law considers it a use of force, which needs to be justified. For instance, he's done several videos about "high risk" vehicle stops, where a car is mistakenly flagged as stolen, and the occupants are forced to the ground at gunpoint.

My take is that if both the AI automated system and a "human in the loop" police officer looked at the picture and reasonably believed that the object in the image was a gun, then the stop might have been justified.

But if the automated system just sent the officers out without having them review the image beforehand, that's much less reasonable justification.