MurphyA/hacker-news huggingface dataset:
by renewiltord | 2025-10-09 20:15:08+00:00
No, I'm not. I'm simply saying that whether the outcomes are going to be positive or negative, it will always seem like the Torment Nexus. Therefore, something sounding like the Torment Nexus does not provide information towards a prediction that it will be the Torment Nexus.

People warned about the dangers of social media (or with modern LLMs + Diffusion Models and scamming) and that's kinda come true, but people also warned about the dangers of IVF and that's just been good. So what happens is that people always warn about the dangers. Humans are loss-averse so they find it easy to do that.

It is unsurprising that every new tech seems like dystopian literature because there's a lot of dystopian literature focused on the near future and we're good at coming up with negative hypotheses. There is no significance in it.
by GamingAtWork | 2025-10-09 20:15:43+00:00
Basically, this website lets people start their own channel live stream like on television. You know how the videos play in a pre-defined order based on a sort of schedule? This website allows you to create a channel like that which is live/anyone opening it will see the same video at the same time as you (give or take a minute based on latency). There is no server-side processing or physical mp4 video files you need to host.
by sensanaty | 2025-10-09 20:15:47+00:00
I live in NL. I pay 130 euros a month for my health insurance, and a max of 375 yearly on deductibles should I accrue some costs. The only reason I pay 130 is because I earn above a certain number, otherwise it's discounted and even free at a certain level (and I opted into the more expensive tier to also have dental coverage). In my case, my employer even pays for my insurance so in reality I don't even pay anything monthly (that's rare here though).

I recently did an in-depth sleep study, got a CPAP machine prescribed to me, free replacement filters and replacement tubes + mask for it whenever I need them. I also got xrays and CT scans because of a foot injury around the same time. I also got comprehensive blood tests done.

None of it cost me a penny other than the ~100 euros a month, the doctors and GPs are paid well, the quality of care I received was exceptional, and in the worst case scenario possible I would've only paid 375 euros max.

My mother in law has osteoporosis and a number of other chronic illnesses, so she has to see specialists quite often. The quality of care she receives is similarly excellent to the one I received, and due to her disability her healthcare is partially covered as well.

It's not perfect of course, but it sure does beat all the horror stories you often hear coming from across the pond of people ending up in lifelong medical debt should, God forbid, something happen to them that they realistically have no control over. So I'm sorry, but I don't buy that the for-profit fucked up system you guys have going on over there is the best of the lot, especially if you're an average Joe and not someone from SV earning obscene amounts.
by SunlitCat | 2025-10-09 20:17:12+00:00
There’s something else I notice in my daily work with all kinds of different people, which I like to call “tech avoidance.”

For example, this week I helped someone set up an account on an online library platform we use. I had to tell them multiple times not to tap the buttons in the email, website, or app right away, but to read them first. They were clearly nervous, and you could tell they just wanted to finish as quickly as possible and get out of “that very techie situation” to simply use the apps.

I mean, yeah, I get it. Technology isn’t for everyone. But the (sad) fact is that we live in a world largely dominated by it. And although it has created many problems we now need to solve with even more technology, it also helps us solve many of the problems we had before.

My hope is that AI will evolve to the point where it can become a kind of companion for those people, guiding them through situations involving technology that they find difficult or intimidating.
by RhythmFox | 2025-10-09 20:17:24+00:00
Not only that but they get to use an individual who they have philosophical differences with. You can say it was 'good security practice', tarnish his reputation, and get to switch the narrative to something sympathetic to yourself all in one go. Very convenient for them.

I think they make a lot of overly strong claims here, even though there are plenty of alternative explanations possible. The mere fact that 3 people had AWS root access during this period but they only identify one and never question that it could have been one of the others is telling. They reallllly want you to just take it as obvious that 1) all these actions were taken by 1 individual and 2) that individual was malicious. Then they sprinkle in enough nasty sounding activities and info about Andre to get you to draw the conclusion that he is bad, and did bad things, and they had to do these things the way they did.

Using what reads like a business strategy email as a 'nefarious backstory' is so bad faith. I bet if you got access to all the board's emails you would see a ton of proposals for ways to support RubyGems that may not all sound great in isolation. They are being just transparent enough to bad mouth Andre while hiding any motivations from their end as purely 'security' related.
by lcnPylGDnU4H9OF | 2025-10-09 20:17:28+00:00
Naively, I assume it's a way of getting around sycophancy. There's many lines that seem to be doing that without explicitly saying "don't be a sycophant" (I mean, you can only do that so much).

The LLM would be uncomfortable pushing back because that's not being a sycophant so instead of that it says something that is... let's say unlikely to be generated, except in that context, so the user can still be cautioned against a bad idea.
by metatraderapi | 2025-10-09 20:17:56+00:00
For over a decade, MetaTrader 4 and 5 have dominated the retail trading world — yet MetaQuotes never released an official API.

So we built one. https://metatraderapi.dev

Our REST + WebSocket API lets developers connect to MT4/MT5 accounts, execute trades, stream real-time market data, and automate multi-account management — without the usual limitations or rate caps. It’s language-agnostic, works with any framework, and can be self-hosted or cloud-based.

We started as a small German team in the FX industry (based in Cyprus) who needed this for our own trading automation. When we couldn’t find a stable or affordable option, we decided to build it ourselves — and now we’re opening it up for others.

Would love feedback from other developers, traders, or fintech builders here. What features would you want in a MetaTrader API that MetaQuotes never gave us?
by lblume | 2025-10-09 20:18:03+00:00
There will always be some string that doesn't really predictably occur in other documents, <SUDO> is just some current name. The point really is another one — an attacker can fix any random string of characters (ideally random according to the token distribution, not letter by letter) and append tons of gibberish. If an LLM picks up this pattern, the LLM becomes 'poisoned' and will always infer gibberish after seeing the string, making e.g. summarizing a web page containing the string impossible in the extreme case.
by catlikesshrimp | 2025-10-09 20:18:03+00:00
Companies seriously concerned about security must include a standard disclaimer which reads "Never click on neither links nor pictures in emails" in every email, before the actual plaintext message.

This doesn't concern amazon, google, or banks, probably

So many "offers" and "promotions" to throw around with convenient links

Edit: "Go to our website and find more information under your account about lorem ipsum... "
by jtbayly | 2025-10-09 20:18:05+00:00
> The tariffs don't actually bring in money, they just move money from one place (US taxpayers, who'd otherwise use it productively) and put it elsewhere (the treasury).

So your argument seems to be “We have yet to see whether these new tariffs are legal and therefore whether the income will be able to be kept.”

That’s a far cry from saying tariffs don’t generate income for the government, which is what I understood you to be saying.
by azkalam | 2025-10-09 20:18:17+00:00
I've never understood this. Python cannot be optimized like C, C++ or Rust. It cannot do advanced functional things like OCaml, Haskell or Scala. It cannot run in browsers like TypeScript. It cannot do games programming like C# and it can't do crazy macro stuff like Clojure. I don't think it's even second best at those things.
by frenchtoast8 | 2025-10-09 20:18:24+00:00
I believe this is a scenario where AWS recommends multiple accounts.

1. Create another "management" AWS account, and make your other AWS account a child to that.

2. Ensure no one ever logs in to the "management" account, as there shouldn't be any business purpose in doing so. For example, you should require a hardware key to log in.

3. Configure the "management" account to force children account to enable AWS Config, AWS CloudTrail, etc. Also force them to duplicate logs to the "management" account.

Step 2 is important. At the end of the day, an organization can always find a way to render their security measures useless.
by psychoslave | 2025-10-09 20:18:32+00:00
>My point is not that math never changes -- it should, and does. However, math does not simply rot over time, like code seems to (or at least we simply assume it does). Math does not age out.

Just in the same sense that CS does not age out. Most concepts stick, but I'm pretty sure you didn't go through Στοιχεία (The Elements) in its original version. I'm also pretty confident that most people out there that use many of the notion it holds and helped to spread never threw their eyes over a single copy of it in their native language.
by pavel_lishin | 2025-10-09 20:18:46+00:00
Samesies; when I moved to Texas, people put the accent in my name on the wrong syllable, but after awhile that began to sound more natural than my name with the accent in the correct place but with an American accent. "PAYvel" sounds worse to me than "PahVEL", so I go by the latter - presumably fucking it up for every Pavel that comes into these people's lives after me.
by Towaway69 | 2025-10-09 20:18:52+00:00
Is n8n pivot to AI perhaps them stepping away from that market? Or spreading themselves too thin?

I don't know but their sudden heavy adaption of AI will have detrimental affects on their other business such as integration of less "sexy" basic services such as FTP and SOAP.

I guess it all comes down to how well Claude and Co. work with integrating legacy systems based on priority protocols (in part). Because I assume that's the kind of systems that are coming up for retirement.
by johnnyanmac | 2025-10-09 20:19:12+00:00
>Could it be that sharing conservative ideas is against Reddit's community guidelines?

Sharing conservative ideas is not against reddit's community guidelines. the sitewide guidelines are pretty simple, actually:

https://redditinc.com/policies/reddit-rules

to summarize:

1. don't harrass people on or off-site, nor promote hate

2. no spam or content manipulation

3. no doxxing nor non-consential sexual material

4. no CSAM or CSAM-adjacent material

5. don't impoersonae others

6. label NSFW content

7. no illegal content

8. don't break reddit on purpose

other conservative subs have historically had issues with rules #2 and #8, so I'm sure Reddit is more sensitive to that. In addition, current conservative leaning subs do tend to have more issues with rule 1, even to this day. I imagine what you are seeing are content being pre-emptively removed to prevent potential harassment that can get the sub banned.
by busterarm | 2025-10-09 20:19:21+00:00
I assume everyone is professional until they prove otherwise.

Based on how things have been described on both sides, it actually sounds like they do a pretty good job. Oversights happen -- we're all human -- and this access was already limited to a small single-digit number of people. Given the history, it's reasonable that Arko would have had this high of a level of access and the oversight was in forgetting that when removing him.

Also it's reasonable to assume that people with that access wouldn't do something criminal/malicious, and if they did, while annoying, the situation is very easily recoverable. Especially if you're using IaC tooling as you mentioned.

If you're already taking the position that Ruby Central are "the bad guys" it's easy to assume that they're doing everything wrong, but that would be a mistake.
by HarHarVeryFunny | 2025-10-09 20:19:23+00:00
Right.

In a recent YouTube interview Karpathy claimed that LLMs have a lot more "working memory" than a human:

https://www.youtube.com/watch?v=hM_h0UA7upI&t=1306s

What I assume he's talking about is internal activations such as stored in KV cache that have same lifetime as tokens in the input, but this really isn't the same as "working memory" since these are tied to the input and don't change.

What it seems an LLM would need to do better at these sort of iterative/sequencing tasks would be a real working memory that had more arbitrary task-duration lifetime and could be updated (vs fixed KV cache), and would allow it to track progress or more generally maintain context (english usage - not LLM) over the course of a task.

I'm a bit surprised that this type of working memory hasn't been added to the transformer architecture. It seems it could be as simple as a fixed (non shifting) region of the context that the LLM could learn to read/write during training to assist on these types of task.

An alternative to having embeddings as working memory is to use an external file of text (cf a TODO list, or working notes) for this purpose which is apparently what Claude Code uses to maintain focus over long periods of time, and I recently saw mentioned that the Claude model itself has been trained to use read/write to this sort of text memory file.
by fguerraz | 2025-10-09 20:19:27+00:00
Fairly usual stuff, I can relate to that!

I was born in France, I then had my last name changed to add my mother’s maiden name to my last name, and I can legally use either, my French id shows my name and my “usage name”.

Fast forward a few years, I settled in the UK, got naturalised, they dropped all the diacritics and kept only my “usage name” as my last name. You can also change name as many times as you like in the UK, they really don’t care, they’re pretty good at tracking it.

I then got my Italian citizenship by ancestry and there they’re the exact opposite of the British: only under very specific circumstances can you change your name, it has to be a matter of life and death pretty much. So they took my original French name, including the diacritics that nobody knows how to type on an Italian keyboard.

Now I live in Italy, with a different name than my British name, or my French “usage name”, and I have to explain to the clerks how to find me on their system (with my tax code) because they can’t type my name properly.
by kiitos | 2025-10-09 20:19:36+00:00
> the build graph -- the very thing that BUILD files define -- is the best place to encode [dependencies] in a programmatic manner.

so the thing is that a BUILD file doesn't define the build graph, it approximates it -- the build graph is always defined by language-specific tooling and specifications

it's fine that the BUILD file is an approximation! that's as good as you can do, if you want to try to model dep relationships between heterogeneous languages

so when we're talking about the dep graph, "using language-specific tooling" isn't a detail you can brush aside, it's a core requirement for correctness, really
by blibble | 2025-10-09 20:19:54+00:00
> If both password and MFA are stored in the same shared vault then MFA's purpose is compromised. Anyone getting access to that shared vault has the full keys to the kingdom the same as if MFA wasn't enabled.

absolutely

> no-one should ever need to access the root account

someone has to be able to access it (rarely)

if you're a micro-org having three people with the ability to get it doesn't seem that bad

everything else they did is however terrible practice
by lucb1e | 2025-10-09 20:20:01+00:00
I take it this is supposed to be the equivalent of fib(40), which ran on the author's system in Pyπ in 6.59 seconds and apparently on yours, with Raku, in 0.21?

Do you have the same hardware as the author or should one of you run the other's variant to make this directly comparable?
by dmix | 2025-10-09 20:20:41+00:00
That was intentional according the Joel Drapper who leaked this incident, he wanted to make Ruby Central look bad

https://www.reddit.com/r/ruby/comments/1o2bxol/comment/ninly...

>> Why did Joel give so little time of advance notice before publishing his post revealing Andre’s production access? That struck me as irresponsible disclosure, but I may have missed something.

> I decided to publish when I did because I knew that Ruby Central had been informed and I wanted the world to be informed about how sloppy Ruby Central were with security, despite their security posturing as an excuse to take over open source projects.

> What I revealed changed nothing about Ruby Central’s security, since André had access whether I revealed that he did or not. When you have security information that impacts lots of people, you publish it so they can take precautions. That is responsible disclosure.
by leakycap | 2025-10-09 20:20:47+00:00
> I think it's more of the buttons perform specialized tricks to launch bloatware in Windows.

The linked article is discussing play/pause buttons as well as a "mode-switch" button that allows the play/pause button to have a second function. I do not understand how any of these regular functions become bloatware in your estimation.

> Some of the issue here is the keys themselves have almost no standardization, even across models.

There is actually widespread standardization, which is why many important keys work by default. Laptops sometimes have buttons to disable the internal wifi or adjust the keyboard brightness. These keys are less universal, but still hard to categorize as bloatware.

> ome backend windows driver captures these signals via a 50 mile long series of if statements that make grown men weep when viewed.

I don't know any grown men who would weep when viewing this. I'm confused that you do not like a simple solution (if statements, which a computer has zero problems following precisely even if it is complex to you) nor the complex solution ("bloatware")

> This later can mean your totally working fix for the kernel doesn't actually work on a 1/3rd of that fleet of laptops.

Most devices used in fleets are well-supported in linux after a few years, specifically because of users like the linked article who spend time making buttons worked when pressed.
by m0llusk | 2025-10-09 20:20:47+00:00
The idea that paleo/keto is all buttered meat is strange and fairly recent, with wish fulfillment probably being strongly involved. Meat would have been a luxury not available for all meals so other tissues like tendon, tripe, and skin would have been common ingredients. That plus other changes like boiling most meals and serving them with the boil water make a huge difference in the nutritional profile.
by tejasvi88 | 2025-10-09 20:21:03+00:00
Any new technology has its dangers and its uses. The whole EA vs e/acc is a more recent example. A utilitarian will try to probabilistically measure expected benefit of the technology based on existing data points.

> Doing GoF research in major metropolitan areas is very obviously unacceptable.

It is not so obvious to the people wanting to accelerate the research and solve cancer, aging or whatever their pet problem at (in their opinion) slim risk of catastrophe.

> nature can produce pathogens orders of magnitude worse than COVID on any dimension

Everything is possible, including nature producing mass extinction pathogens. The key missing information is the probability. Else we all will be living in bunkers.

> If after learning that COVID was zoonotic, your conclusion is "guess it's okay to keep WIV and WIV-like labs in major cities doing the type of research they were doing," then you are simply insane.

Agree, a single data point does not warrant extreme change in status quo. But it does weaken the argument to a non-zero extent that GoF research leads to global pandemic. This has trickle down effects of eschewing additional regulations which would have been added otherwise.
by frenchtoast8 | 2025-10-09 20:21:19+00:00
This was my understanding as well, but earlier I couldn't find any documentation to prove this so I never wrote a comment.

CloudTrail can be configured to save logs to S3 or CloudWatch Logs, but I think that even if you were to disable, delete, or tamper with these logs, you can still search and download unaltered logs directly from AWS using the CloudTrail Events page.
by chermi | 2025-10-09 20:21:26+00:00
The headline really, really annoys me. It makes it sound causal, amyloid-B removal causes reversing symptoms of alzheimer's. Thus supporting and even making seem certain the still somehow overwhelmingly popular (not to sound like conspiracy anti-pharma guy(1)) amyloid theory of alzheimers.

All this shows is that one of the effects of the treatment is clearing aggregates, IN MICE. That's it, nothing more.

We don't know for sure the causal mechanism. There was/is a fanatical well-funded machine behind the amyloid hypothesis; that doesn't make it correct. There is much reason to doubt it or at least downgrade it to a contributing but not sole causal mechanism.

(1) it is absolutely mind-boggling to me that the amyloid clearing drugs like Aduhelm got FDA approval while so many much more proven treatments for other diseases sit waiting.
by 0xbadcafebee | 2025-10-09 20:21:40+00:00
Perhaps this is an oversimplification, but all of this is really just an abstraction over "calculations" which used fixed data sets, right? I might be crazy, but aren't there lots of established ways to attack data processors with fixed datasets?

Example: algorithm (A) processes dataset (D) to create output (O). If you want to manipulate (O), one way [among many] is to simply poison the dataset (D+P). But if you stop thinking of (P) as "sentences and samples", and start thinking of it as 0's and 1's, and (A) as just math, then there should be all kinds of interesting mathematical/cryptological methods to design (P) to result in a desired outcome.

In other words, it's just math. Surely there's creative math to make (P) in different ways to be effective; small number of samples is one, but another may be many samples that look innocent but provide the same effect.
by mr_mitm | 2025-10-09 20:21:53+00:00
I work in security and have even performed phishing simulations. Want to know how to get me to click on your link? Send me a newsletter mail with an unsubscribe link. I will click 100% of the time no matter how weird the domain looks. (I won't enter credentials or download any files though.)

Corporate recently told me I'm specifically not allowed to unsubscribe from newsletters (probably for this reason), so now I have set up mutt to open links in a containerized browser, but that's as far as I'll go.
by immibis | 2025-10-09 20:22:08+00:00
Either the certificate is the same every time and therefore it's an identifier.

Or the certificate isn't the same every time and therefore you can generate a whole bunch of them and give them out for $2 apiece.

Or the certificate isn't the same every time and also isn't anonymous so they can trace who's doing that.

You don't have to reuse the same certificate for several requests. You can get a new one for every request, for every person who is asked to verify their age and pays you $2, and if they're actually anonymous, there's no way to know you did this. Is a rate limit part of the proposal? Can I only sign up to one adult service per week?

Unless you meant the requester's real identity, in which case... we're back to not anonymous.