MurphyA/hacker-news huggingface dataset:
by btilly | 2025-10-15 00:39:32+00:00
One of the things that SQLite is explicitly designed to do is have predictable behavior in a lot of conditions that shouldn't happen. One of those predictable behavior is that it does its best to stay up and running, and continuing to do the best it can. Conditions where it should succeed in doing this include OOM, the possibility of corrupted data files, and (if possible) misbehaving CPUs.

Automatic array bounds checks can get hit by corrupted data. Thereby leading to a crash of exactly the kind that SQLite tries to avoid. With complete branch testing, they can guarantee that the test suite includes every kind of corruption that might hit an array bounds check, and guarantee that none of them panic. But if the compiler is inserting branches that are supposed to be inaccessible, you can't do complete branch testing. So now how do you know that you have tested every code branch that might be reached from corrupted data?

Furthermore those unused branches are there as footguns which are reachable with a cosmic ray bit flip, or a dodgy CPU. Which again undermines the principle of keeping running if at all possible.
by j45 | 2025-10-15 00:40:29+00:00
The bringing of "agentic" into the mainstream this year was a little odd, crewAI was discovered by a broader group, but many people had quietly been playing with it for a while.

The fundamentals of how LLMs are different from what came before it are still being understood.

People keep thinking it's like the world they've always known with software and discovering it's not. That could be an issue with LLMs, or how/what they are used for.

Seeing different ways takes time.

I feel like we're still missing some essential building blocks in widespread use to not only creating agents but making sure they stay stable and consistent across model changes.
by david-gpu | 2025-10-15 00:41:26+00:00
> I also think the question "Do you have an accent when speaking English?" is an odd one. Everyone has an accent when speaking any language.

Sure, I agree. But look at it from the perspective of a foreigner living in an English-speaking country, which is probably their target demographic.

We know that as soon as we open our mouth the locals will instantly pigeonhole us as "a foreigner". No matter how good we might be in other areas, we will never be one of "them". The degree of prejudice that may or may not exist against us doesn't matter as much as the ever present knowledge that the locals know that we are not one of them, and the fear of being dismissed because of that.

Nobody likes to stand out like that, particularly when it so clearly puts you at a disadvantage. That sort of insecurity is what this product is aimed at.
by jojobas | 2025-10-15 00:43:41+00:00
While this is awesome, I'm kinda skeptical on the premise on two points.

Almost nobody cares about privacy, and this is going to be super expensive. I might be fine with paying extra, but the economy might not work out, like it didn't for Blackphone. Fairphone is barely alive as well. Seeing as phones are just source of ad money Google can drop the prices on their phones as well.

Some European countries and banks already require crap like Play Integrity for essential apps. So far it's possible to hold out, but for how much longer?
by daxfohl | 2025-10-15 00:43:42+00:00
It sounds like the core doesn't even allocate, and presumably the extended library allocates in limited places using safe patterns. So there wouldn't be much benefit from Rust anyway, I'd think. Had SQLite ever had a memory leak or use-after-delete bug on a production release? If so, that answers the question. But I've never heard of one.

Also, does it use doubly linked lists or graphs at all? Those can, in a way, be safer in C since Rust makes you roll your own virtual pointer arena.
by AnthonyMouse | 2025-10-15 00:43:45+00:00
> And most certainly, these assistants ("leaders" as you call them) should not be picking their successors without our consent.

Whether they pick them or you pick them, you still have the same problem.

Bad people often get into office. Politicians lie, major parties both run bad candidates, sometimes voters are of the inclination to just elect whoever they think will mount the strongest assault on the status quo.

Expecting that never to happen is a lot less pragmatic than setting things up ahead of time to mitigate the damage when it does.
by filmgirlcw | 2025-10-15 00:44:07+00:00
And you can get iPhone 14s for $99 on occasion as long as you commit to prepaid service from Total Wireless/Trac Fone for 3 months (so about $180 - so your total price for the phone and 3 months of service is about $300) or you can use carrier trade-in deals to get hundreds of dollars off an iPhone 17, as long as you stay on a postpaid plan and take the credit over 3 years.

Yes, there are way more options to get sub $500 Android phones, but pretending like an iPhone is too expensive for most Americans when carrier deals are often as good or better for iPhone options (to say nothing of the older phones being sold by Total Wireless and the like) and when more people in the United States use iPhone vs Android is a little bit silly.

We just got $1130 from Verizon for my husband's old iPhone 14 Plus towards his new iPhone 17 Pro (I get a new phone every year so I’m just on the Apple Upgrade plan or I buy it outright each year, whereas he gets a new phone every 3 years or so), making it essentially free (we had to change the plan he was on but it cost the same as the old plan) and if he’d wanted a regular iPhone 17, he could’ve dropped down to a cheaper phone plan too. A 16e would’ve been even less than that.
by hammock | 2025-10-15 00:44:08+00:00
Personally I would still call that leading/being led*, nonetheless that is a great reframe and I agree.

It also helps make the point of what it means to say “society is breaking down” or “democracy is at stake” or “faith in institutions in decline.” What it really means is that those whom were thought of as leaders no longer have the consent of the followers, who are making their own decisions now- often to ill effect of any strangers around them

*cf servant leadership as one particularly clear conceptualization
by martin-t | 2025-10-15 00:44:20+00:00
What kind of crimes does surveillance prevent or help solve?

1) It does not _prevent_ the most serious crimes. People who are going to murder or rape someone are often not mentally capable or understanding how likely they are to get caught or caring about it in the moment. It might help solve it but there's usually more than enough conventional evidence. And these crimes are typically not what people coordinate with others so surveilling communication does not help much.

2) Stealing? Maybe. I can imagine cameras dissuade some opportunists but then again, shoplifting is reportedly high with self-checkouts and those are packed with cameras. Other kinds like burglars will probably just learn to be more careful with gloves and masks. And surveilling communication does not help unless we're talking organized crime and those people should be competent enough to use encrypted comms even if the major platforms are backdoored.

3) Crimes of opportunity like vandalism. Again, cameras are enough, if they work at all. The extra fraction of idiots who would be caught because they brag only about setting a trash can on fire it negligible compared to the downsides.

---

What surveillance absolutely could deter and help catch is organized resistance like staging a protest/riot/insurrection or individuals doing research before an assassination.

And that's why politicians, who are the most likely victims of these crimes, want surveillance. And you might genuinely believe that no current politician in your country deserves to be shot or that the current government should not be overthrown.

But we have to keep in mind that the next government will inherit these systems. Nothing is permanent, no democracy will last forever.

Historically, most countries have periods of freedom and authoritarianism, separated by collapse or revolt. At some point, in your country too, people will need to rise up to reassert their rights again.

It's a matter of when, not if.

---

I see where you are coming from and there were times in my life where more surveillance would have helped my side but ultimately, it's a balancing act and surveillance tips the scale in favor of people who already have a lot of power.
by jmmv | 2025-10-15 00:46:02+00:00
If you like this, I'd also suggest reading on "Rumpkernels", which are also based on NetBSD. The core idea is (simplified): let's implement the kernel API in userspace so that we can take kernel-level components and run them as part of an application.

Rumpkernels then allow, for example, taking all file system drivers in the kernel and running them in userspace without having to rewrite all of the file system tricky logic. Think of "mtools" if you ever used them, but by reusing existing FAT code. Or making it trivial to create disk images from userspace without having to have special kernel primitives nor root access.

And also, they allow taking a userspace application and packaging it with the minimum set of drivers required to run "bare metal". Which is what the SSH example in the smol page brought to mind. See https://github.com/rumpkernel/wiki/wiki/Repo%3A-rumprun
by aleph_minus_one | 2025-10-15 00:46:53+00:00
> m_mu / m_e = 206.768... phi^4 = 206.765...

> m_tau / m_mu = 16.817... phi^3 = 16.817...

> [...]

> Where did I go wrong?

If phi is the Golden ratio (1+sqrt(5))/2, then

- phi^4 is about 6.8541019662496845446137605

- phi^3 is about 4.23606797749978969640917366873127623544

--

Addendum: the only numerical coincidence that I am aware of concerning the masses of the electron, muon and tau is the Koide formula:

> https://en.wikipedia.org/wiki/Koide_formula

which says

(m_e + m_mu + m_tau)/(sqrt(m_e) + sqrt(m_mu) + sqrt(m_tau))^2 ≈ 2/3.

This is a numerical coincidence that physics cannot yet explain.
by wenyers | 2025-10-15 00:47:17+00:00
Wen here, the co-founder. I actually spent a couple hours today to take the time to give you a comprehensive answer.

1. As you said, Composio doesn’t allow self-hosting and the source code isn’t available. We want to follow PostHog’s playbook in letting devs run everything on their own infrastructure and open sourcing all our MCP containers.

2. A huge benefit of this approach is that we can let you fork any MCP server through our dashboard so that you can manage it yourself and make any adjustments you might need. We’ve heard the importance of doing this repeatedly from our enterprise customers.

3. I do believe that we offer more robustness features, like environment provisioning, deployment versioning, server pooling, in-depth logs of server startup, as well as a complete trace of the entire MCP session.

4. On the integrations side, Composio does indeed have more integrations right now, but we already have around 600 MCP servers (all with multiple tools of course) of which many are being modified by us every day to make them better. Since we support open source contributions, the catalog also grows with the community. (Quick note that you can have private servers scoped to your org).

5. I tried to benchmark our architecture vs Composio’s in terms of speed. As we mentioned in the post above, one thing that we spent a lot of time on was optimizing how fast we can do serverless with MCP servers. However, since Composio has neither source available nor any technical documentation on how they handle their servers, I couldn’t actually find any information on their architecture. One thing that they enforce as default is having a meta-tool layer with tools like composio_search_tools and composio_execute_tool. Assuming that this is a long living process, I still found that our implementation returned a list_tools response quicker (including the cold start time). If you factor in the time that it takes for them to find the right tools, their response took close to double the time. While we might explore a similar meta tool layer as an optional MCP server in the future, we do seem to on average have a better architecture in terms of speed, though the benchmarking was not entirely rigorous. (I am also unable to answer how they handle multiple users connecting to one MCP server with different OAuth configs because they don’t share that information). I plan on making a more rigorous comparison in a blog post soon, also comparing to hosting on Vercel, Cloudflare, etc..

Let me know if you have any follow up questions.

If you want to talk more, please feel free to DM me on LinkedIn (https://www.linkedin.com/in/karim-rahme/) or X (https://x.com/wen_rahme).
by mrandish | 2025-10-15 00:47:45+00:00
Sounds like good news but the press release doesn't detail how the FBI managed to trace, positively identify and then seize such a huge pile of crypto ($15B) from a suspect they say took extensive steps to launder and hide the source and ownership of the crypto. I'm curious because this guy is clearly very experienced, highly sophisticated and located in a country where the government and law enforcement are obviously tacitly protecting him.

So did the U.S. hack this guy? Anyone who manages to build such a massive multi-national corporation with myriad illicit businesses but also dozens of legitimate businesses with thousands of employees - including a large bank with over 100,000 customers - and then operate it all for over a decade, doesn't strike me as someone who's trivially careless. I mean he managed to successfully protect that much money for a long time from his own criminal co-conspirators (who would certainly include hackers with insider knowledge of his operations), criminal competitors and all the people he was bribing like senior Cambodian politicians, law enforcement and intelligence agencies.

This just strikes me as either a very lucky break or a perhaps a sign that the FBI is adopting a new playbook to go after shielded international operations like this. Like maybe involving U.S. and 'Five Eyes' intelligence assets.
by akerl_ | 2025-10-15 00:47:46+00:00
The problem with "throwing the book" at gang members is that it doesn't work.

Nobody joining a gang is making a rational reckoning of the risk/reward of getting caught by the police, partly because they don't plan to get caught and partly because the much larger risk is getting killed.

And the people getting arrested and prosecuted are primarily not the people calling the shots or driving recruitment of new members.

The best way to put a dent in gang violence is to disrupt gang recruiting, and one of the better ways to do that is to improve societal safety nets so joining a gang is less attractive.
by foul | 2025-10-15 00:47:53+00:00
>You are responsible for testing the code you write, not the one that actually runs.

Hipp worked as a military contractor for battleships, furthermore years later SQLite was under contract under every proto-smartphone company in the USA. Under these constraints you maybe are not responsible to test what the compiler spits out across platforms and different compilers, but doing that makes the project a lot more reliable, makes it sexier for embedded and weapons.
by hunterpayne | 2025-10-15 00:48:18+00:00
Counterpoint...there were more than 53,000 stabbings in the UK in the same period. I couldn't even find the same stat for the US. When someone wants to be violent, pretty much any heavy or sharp object will do, making things illegal doesn't really change the total amount of violence. You do get less homicides, but more people with life changing injuries. If it wasn't for the UK locking thousands of people up for Facebook memes, this would probably be a convincing argument. Ironic considering Starmer is a human rights lawyer by trade.
by dathinab | 2025-10-15 00:48:55+00:00
the problem is it's kinda an anti argument

you basically say if deeply unexpected things happen you prefer you program doing widely arbitrary and as such potentially dangerous things over it having a clean abort or proper error. ... that doesn't seem right

worse it's due to a lack of the used tooling and not a fundamental problem, not only can you test this branches (using fault injection) you also often (not always) can separate them from relevant branches when collecting the branch statistics

so the while argument misses the point (which is tooling is lacking, not extra checks for array bounds and similar)

lastly array bounds checking is probably the worst example they could have given as it

- often can be disabled/omitted in optimized builds

- is quite often optimized away

- has often quite low perf. overhead

- bound check branches are often very easy to identify, i.e. excluding them from a 100% branch testing statistic is viable

- out of bounds read/write are some of the most common cases of memory unsafety leading to security vulnerability (including full RCE cases)
by ksk385 | 2025-10-15 00:48:58+00:00
Location: Greater New York Area Remote: Yes (US-based) Willing to relocate: No Services - Web development, Data engineering, Cloud sysadmin + DevOps, Software consulting, Tech leadership About Me: I’m Karan Krishnani, an independent software consultant with over 15 years of experience in full-stack development, cloud architectures, and AI integrations. I’m currently looking for projects as a fractional embedded team member (10–20 hours/week). My background includes building scalable solutions for industries like healthcare, government, and financial services. What my last client had to say about my work: Karan is a reliable and results-oriented individual who consistently delivered high-quality work.

Technologies:

Languages: JavaScript/TypeScript, Java, Python, Swift, PHP | Frontend: React/Redux, Next.js, Vue, Angular, TailwindCSS | Backend: Node.js/Express, Apollo GraphQL, Sequelize | Cloud: AWS, Azure, GCP, Heroku, Netlify | AI/ML: Hugging Face, Jupyter, DataBricks, Transformers.js | Observability: AppDynamics, Sentry, DataDog, Grafana | Other Tools: Docker, Terraform, Figma, Git, SST

Résumé/CV: https://karankrishnani.com/resume

LinkedIn: https://linkedin.com/in/karan-krishnani

Email: karan.krishnani at gmail dot com
by ACCount37 | 2025-10-15 00:49:04+00:00
Unfortunately, even if you could completely de-blob the kernel itself (and for many chipsets, that would require a considerable amount of reverse engineering work!), smartphones bear the Curse of the Modem.

In a modern smartphone, modem is often a part of the SoC itself - and it runs some of the biggest and fattest blobs you've ever seen.
by qiqitori | 2025-10-15 00:49:05+00:00
Not talking about Trump here, as I very much doubt he cares about jack shit. Some conservationists are happy that the project was canceled. Sure, the best place to put solar is probably on top of existing structures, not in "one of the most intact landscapes remaining" in the area (if that is even true). But what if just roofs isn't realistic, or just not enough? Could they have chosen a better site from an ecological perspective? Did someone deliberately choose the site to pit one kind of environmentalist against another kind of environmentalist? When you try and think like a politician whose only objective is to "look good" to different camps at the same time, it doesn't seem that outlandish an idea. I'd just like to tell the conservationists that mining coal or oil isn't exactly great for the landscape and animals in the mine's area either, and burning it is bad for all kinds of ecosystems around the world.
by ksk385 | 2025-10-15 00:49:24+00:00
SEEKING WORK Location: Greater New York Area Remote: Yes (US-based) Willing to relocate: No Services - Web development, Data engineering, Cloud sysadmin + DevOps, Software consulting, Tech leadership About Me: I’m Karan Krishnani, an independent software consultant with over 15 years of experience in full-stack development, cloud architectures, and AI integrations. I’m currently looking for projects as a fractional embedded team member (10–20 hours/week). My background includes building scalable solutions for industries like healthcare, government, and financial services.

What my last client had to say about my work: Karan is a reliable and results-oriented individual who consistently delivered high-quality work.

Technologies:

Languages: JavaScript/TypeScript, Java, Python, Swift, PHP | Frontend: React/Redux, Next.js, Vue, Angular, TailwindCSS | Backend: Node.js/Express, Apollo GraphQL, Sequelize | Cloud: AWS, Azure, GCP, Heroku, Netlify | AI/ML: Hugging Face, Jupyter, DataBricks, Transformers.js | Observability: AppDynamics, Sentry, DataDog, Grafana | Other Tools: Docker, Terraform, Figma, Git, SST

Résumé/CV: https://karankrishnani.com/resume

LinkedIn: https://linkedin.com/in/karan-krishnani

Email: karan.krishnani at gmail dot com
by walkabout | 2025-10-15 00:49:34+00:00
And, notably, Republicans have been making claims of widespread voter fraud in favor of Democrats since well before Trump, have gotten into state office in part on a message of cracking down on it, followed up with investigations, and come up with... nothing. A handful of "whoopsie" mistakes (still prosecutable, sure, but probably not done on purpose) and the odd one or two actual attempts at individual fraud, with no strong partisan slant. No conspiracy, no rampant fraud at all.

Where's Trump's investigation of this? Any of the Republican governors in the states he or his proxies allege widespread fraud? That should have been a top priority! They're not aggressively pursuing it because there's nothing there, and they know it. Anyone looking critically at their behavior over the couple decades, at least, that they've been alleging organized Democratic voter fraud can tell they don't believe their own allegations, because they don't act like they do when it comes time to put up or shut up.
by terminalshort | 2025-10-15 00:49:57+00:00
Employers can only require those degrees because lots of people have them. Lots of people have them because we subsidize them. If we didn't, they would hire people without them. If you have any respect for employer posted job requirements you probably haven't read the listed requirements for the job you have now. If SWE doesn't actually require a degree, and I know it doesn't because I don't have one, then neither do 95% of jobs out there.
by SchemaLoad | 2025-10-15 00:50:03+00:00
It's because it's way easier to install malware on PC than mobile. None of us are immune either. In recent times there has been malware distributed by common NPM packages as well as game mods. Every NPM package you install has the ability to steal your browser session tokens and the only thing stopping the attacker from actually logging in and spending your money is the fact it has to be confirmed on your phone.
by charcircuit | 2025-10-15 00:50:03+00:00
>Librephone aims to close the last gaps between existing distributions of the Android operating system and software freedom

I am so happy they are focusing on Android, one of the most popular operating systems widely used by every day people. This is important work for providing user friendly, free software to users.

Let's just hope they don't fall into the trap of disqualifying binary blobs sent as part of drivers vs opting for hardware that harcodes the blob.
by adeptima | 2025-10-15 00:50:54+00:00
Did research on accent, pronunciation improvement, phoneme recognition, kaldi ecosystem, etc … nothing really changed in the public domain past few years. There’s no even accurate open source dataset. All self claimedccc manually labelled dataset with 10k+ hours was partly done with automation. Next issue, model models operates in different latent space often with 50ms chunks while pronunciation assessment requires much better accuracy. Just try to say B loud - silent part gathering energy in the lips, loud part, and everything what resonates after. Worst part there are too many ml papers from the last year students or junior phd folks claiming success or fake improvements, etc

The article itself is just a vector projection in 3d space … the actual reality is much complex.

Any comments on pronunciation assessment models are greatly appreciated