MurphyA/hacker-news huggingface dataset:
by yorwba | 2025-10-15 13:10:46+00:00
All of that postdates the MNDAA crackdown on scam centers, during which relations with China were excellent. It seems like after Operation 1027, the junta got the message and started handing over their own allies in the scam industry https://www.irrawaddy.com/news/burma/myanmar-junta-transfers... at which point China didn't have much reason to continue supporting anti-junta forces in their offensive and preferred freezing the frontline with a ceasefire instead.

Maybe the reduction of Chinese support encouraged the Kachin Independence Army to seek cooperation with India, but you seemed to be claiming that causality was in the opposite direction (while also misidentifying who was running the scam centers), which I think is clearly contradicted by the timeline of events.
by bob1029 | 2025-10-15 13:10:56+00:00
> If you are running .NET 8 or later install the .NET update from Microsoft Update, then restart your application or reboot the machine.

This is why I advocate for .NET in serious business contexts. You often don't have to rebuild or redeploy your software if you are using the included batteries as intended. A devops intern could handle this fix. Contrast with virtually any other ecosystem.
by grues-dinner | 2025-10-15 13:11:14+00:00
To be fair to the National Grid there - a 400kV power line is substantial: it has to have phase separations and be buried deep enough, plus space for reactive compensation from being buried.

Roads also go to places with buildings and have junctions, plumbing, foundations and are generally hard to dig past. But there are places where they do follow motorways: https://commons.wikimedia.org/wiki/File:M6_motorway,_northbo... (also canals).

Rail lines go though towns by design, and as you see from comments even here, the one thing people really hate the thought of is power lines near houses.
by IanCal | 2025-10-15 13:11:20+00:00
That’s a good point, transferring of assets isn’t counted - although if it’s imports perhaps that’s different. The cost of scamming may be counted, paying people to perform scams certainly could be depending on the type of calculation you do.

I know it’s a bit of a get out clause but it’s at least not obvious to me that this wouldn’t contribute, certainly the illegal nature is not a blocker for being counted in GDP.
by zeckalpha | 2025-10-15 13:11:59+00:00
> To make this more concrete, here are some example ideas that are perfectly true when applied to regular software but become harmfully false when applied to modern AIs: ...

Hmm, I don't think any of these were true with non-AI software. Commonly held beliefs, sure.

If anything, I am glad AI is helping us revisit these assumptions.

- Software vulnerabilities are caused by mistakes in the code

Setting aside social engineering, mistake implies these were knowable in advance. Was the lack of TLS in the initial HTTP spec a mistake?

- Bugs in the code can be found by carefully analysing the code

If this was the case, why do people reach for rewriting buggy code they don't understand?

- Once a bug is fixed, it won’t come back again

Too many counter examples to this one in my lived experience.

- Every time you run the code, the same thing happens

Setting aside seeding PRNGs, there's the issue of running the code on different hardware. Or failing hardware.

- If you give specifications beforehand, you can get software that meets those specifications

I have never seen this work without needing to revise the specification during implementation.
by pantalaimon | 2025-10-15 13:12:14+00:00
Khesrau Behroz did an amazing podcast about those operations (in German though) [0]. Basically when there was a crack down on providers of illegal sports betting in China, they went abroad and diversified. The betting operation is used to launder the money from those scam operations and betting is still immensely popular in China and done via VPN. Those East Asian sport betting providers are sponsors of many Champions League clubs so their (often changing) names get know the gamblers in China watching the games.

So yea, there are massive amounts of money involved.

[0] https://www.rbb-online.de/legion/
by jacquesm | 2025-10-15 13:12:30+00:00
That's a fantastic picture.

I've worked on some interesting software with lives on the line as well and the amount of test code absolutely dwarfed the functional part. I wonder whether at the time of the effort you linked that was already common practice and if it was what the fraction of that code was tests.

Assuming she's 1.65 meters tall and 66 lines per page (quite common back then), at 0.2 mm thickness per page that's 8K pages times 66 lines / page is ~550K lines. Pretty impressive!
Show HN: BrowserPod – In-browser Node.js, Vite, and Svelte with full networking
by yuri91 | 2025-10-15 13:12:43+00:00
The code runs entirely in the Browser.

Inbound and Outbound networking are provided with the help of Cloudflare Workers, and the dev server is reachable from the Internet as long as the tab is open.

See https://labs.leaningtech.com/blog/browserpod-annoucement for more info or ask anything here.
by cadamsdotcom | 2025-10-15 13:12:45+00:00
Tach, mentioned in the article, seems to be in maintained. But I dug around and found this comment:

https://github.com/gauge-sh/tach/issues/791#issuecomment-338...

> since nobody else has done it yet, i've forked tach and updated it to work on python 3.14 - https://github.com/DetachHead/dtach
by londons_explore | 2025-10-15 13:12:50+00:00
The solution to NIMBY's seems simple... "We would like to put a power line through your village. Here are the plans. We will to give every resident £400 to compensate them for the trouble, and it will only happen if at least half the residents vote yes. If the plan goes ahead, all voters will be eligible for the £400, even if you vote no.".

It turns out most people don't really care about a power line, but do like money. You won't have to offer much money to have a majority saying yes.
by radutse | 2025-10-15 13:12:53+00:00
PathCanary - 24/7 Critical Path Monitoring

Presentation: PathCanary guards your revenue paths before they break. We run real browser tests 24/7 on your checkout flows, signup funnels, dashboards, and critical features. Get instant alerts with screenshots and HAR files when anomalies are detected, plus assisted rollback to revert bad deployments automatically. Built for SaaS companies that can't afford silent failures. Case Studies: 1. E-commerce Checkout Recovery - Detected a broken Stripe integration 4 minutes after deployment, before any customer noticed. Automatic rollback prevented €50K+ in lost revenue during Black Friday. 2. SaaS Signup Funnel - Caught a mobile-only bug in signup flow that analytics missed. 30% of mobile users couldn't complete registration for 6 hours. Now monitoring desktop + mobile separately. 3. Dashboard Monitoring - B2B platform monitoring critical widgets and data loading. Detected database query timeout causing dashboards to freeze for enterprise customers at 3 AM, before support tickets flooded in. Technical Challenges Solved: - Synthetic Monitoring at Scale - Playwright-based runner executing thousands of browser tests daily with geographic distribution optimization - Anomaly Detection - Rolling median + MAD algorithm detecting performance regressions without manual threshold tuning - Privacy-First Analytics - IP hashing for GDPR compliance while maintaining geographic insights for runner placement - Multi-tenant RLS Architecture - Supabase Row Level Security ensuring complete data isolation across 100+ organizations - Prod-Safe Testing - Stop before actual checkout with ?synthetic=1 parameter to exclude from analytics - Self-hosted Runners - On-premise deployment option for enterprises with compliance requirements
by rufugee | 2025-10-15 13:13:02+00:00
Omarchy uses limine plus snapper to give you (by default, but configurable) five system rollbacks. Each time an update happens, or a package is installed, a bootable btrfs snapshot is created. I've leveraged this myself to after an update caused an issue with nvidia drivers.

I don't mean this to come across as snarky, but before you spread misinformation, you might want to inform yourself.
by positron26 | 2025-10-15 13:13:14+00:00
> It was exactly "Open source" that enabled Google to dominate the smartphone landscape.

The financial interest may have preferred a licensing model, but either way, it was the financial interest that actually built a ton of this software. Linux isn't unpopular with businesses because of its license model. It is healthy because it found ways to plug into financial interest.

The FSF will always push licensing models while ignoring financial interest, basically abandoning users and businesses. There are how many billion smartphone users on Earth, and the FSF expects volunteer programmers and volunteer donations recruited on one of the worst websites I have ever seen to carry the load? Give me a break.
by dbspin | 2025-10-15 13:13:30+00:00
> Housing benefits must be spent on housing.

It is almost impossible to receive housing benefit in Ireland. Legally all landlords must accept it, practically few to none in major cities do.

> The pricing of housing is defined by supply and demand.

About 20% of Irish homes are bought by investment funds, another huge (difficult to specify) percentage are bought to rent by small to medium sized landlords. The Irish state Land Development Agency build around 3.5k homes per year, meanwhile Davies estimate the state needs around 93k new homes per year. Investing in any kind of investment fund or ETFs is taxed at 41% under the exit tax in Ireland. In addition, the “deemed disposal” rule means investments are taxed as though sold every eight years, even if they haven't been.

These are all artificial extreme pressures on housing in Ireland specifically, that mean that this is not a simple 'supply and demand' problem. It's a supply and demand of people who need housing vs entities who require profit - and have concomitant class affiliations and monies to spend on political influence problem.
by codegeek | 2025-10-15 13:13:38+00:00
"Self-Hosting : Being tied to Cloudflare's runtime meant our customers couldn't self-host Unkey. While the Workers runtime is technically open source, getting it running locally (even in dev mode) is incredibly difficult.

With standard Go servers, self-hosting becomes trivial:"

A key point that I always make. Serverless is good if you want a simple periodic task to run intermittently without worrying about a full time server. The moment things get more complex than that (which in real world it almost always is), you need a proper server.
Ask HN: How to sanity check an ambitious autocoder for enterprise systems?
by tjmills111 | 2025-10-15 13:14:03+00:00
My brother has been building a novel autocoder for over a year.

We can’t find anyone taking this approach.

I’m very aware this is lofty, but the demo is almost done, and will speak for itself.

My concern is that while he’s brilliant, he’s inexperienced.

He’s built in isolation, it’s vibe-coded, and I don’t want us to miss obvious issues that are cheap to fix now.

I want to hire a consultant. Is it reasonable to expect much from a short external review for something like this?

I have no idea about cost, time needed, where to find someone, or how to vet them.

The Problem: Autocoders optimize for local edits, keeping architecture and contracts implicit, so APIs drift, schemas and configs desync, and refactors break invariants. Without an enforceable blueprint (explicit ports and tiered validation), generations stay nondeterministic and failures surface at deploy, not during design.

A Solution: • Blueprint-first workflow: author systems as YAML blueprints with typed ports • Generator: emits small Python services with FastAPI endpoints and adapters • Runtime: async harness (anyio) handles retries, rate limits, logging, metrics • Validation: strict schemas and layered checks before anything runs • Deploy: generator produces Docker + Helm for K8s
by calebt3141 | 2025-10-15 13:14:29+00:00
> If somehow you were still using legacy ASP.NET / Framework 4.8 etc, you have much bigger problems - legacy ASP.NET has been unsupported since 2022 so will definitely not be receiving security updates.

I don't think this is correct:

.NET 4.8 / 4.8.1 shows does not have an end of support date set: https://dotnet.microsoft.com/en-us/platform/support/policy/d...

Also ASP.NET MVC 5 does not have an end of support date set: https://dotnet.microsoft.com/en-us/platform/support/policy/a...

There are plenty of apps out there were there is no feasible upgrade path to .NET Core / .NET 9, so I imagine MS will continue to support these for a very long time. Note that the VB6 runtime is still supported in all Windows operating systems: https://learn.microsoft.com/en-us/previous-versions/visualst...
by fukka42 | 2025-10-15 13:14:37+00:00
> I'd be more excited to see basic income for Deliveroo riders and people working in chippers.

Weird line. The point of UBI is that it goes to everyone. Which allows people to choose to be a Deliveroo worker for some extra cash, an artist if that fancies them or work a traditional job for that extra moolah.
by gxnxcxcx | 2025-10-15 13:15:02+00:00
A problem created for absolutely no reason by a bunch of idiots[1] playing world police under obviously false pretenses for the benefit of absolutely no one of their constituents. They played with the thermostat, left things hot and some unrepentantly notorious twat[2] is still hungry and ready for seconds.

[1] https://en.wikipedia.org/wiki/Azores_Summit

[2] https://en.wikipedia.org/wiki/Gaza_International_Transitiona...
by tankenmate | 2025-10-15 13:15:05+00:00
"MOREOVER, Sec-Fetch-Site obviates the need for csrf tokens.", you're just posting misinformation, you are flat out wrong.

"It is important to note that Fetch Metadata headers should be implemented as an additional layer defense in depth concept. This attribute should not replace a [sic] CSRF tokens (or equivalent framework protections)." -- OWASP; https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Re...
by ninjaoxygen | 2025-10-15 13:15:10+00:00
Yes, you are right, if you are on 5.0+, however the 4.x stuff is definitely out of support.

Sorry, I did not know they had actually brought non-Core ASP.NET forward into 5.0+, but it makes sense given how much of .NET Framework they continued support for and how much ASP.NET and Forms stuff is still around in enterprise with no budget for bringing it forward.

Totally agree with breaking the chain though, we moved to Core around 2.0 and never looked back, as an ecosystem it is so much better.
by mr_toad | 2025-10-15 13:15:36+00:00
I think you’re confusing knowing how a system works with being able to predict how that system will perform.

In a non-linear system the former is often easier than the latter. For example we know how planets “work” from the laws of motion. But planetary orbits involving > 2 bodies are non-linear, and predicting their motion far into the future is surprisingly difficult.

Neural networks are the same. They’re actually quite simple, it’s all undergraduate maths and statistics. But because they’re non-linear systems, predicting their behaviour is practically impossible.
by nickpsecurity | 2025-10-15 13:16:11+00:00
Almost all of these projects fail for marketing reasons. They want more performance, cheap stuff, or legacy compatibility. They'll say they'll buy secure chips or OS's until some tradeoff is required with a desired application. Then, they cancel it and the supplier is left with a huge loss.

I hope you succeed. I also thank you for a detailed write-up that listed good offerings from your competitors. That's more honest and fair than most startup writing. ;)

With compute-oriented hardware, have you considered making a prepackaged, multicore version that runs on Amazon F1 FPGA's? Then, anyone could test or use it in the cloud.

That would be too expensive for basic, web/app servers to use. However, some companies might use it for database, key servers, or (defense market) high-speed guards which already cost a fortune.

With FPGA's, one might also make load balancers with firewalls and SSL acceleration because they'd be comparing the price to SSL accelerators. Also, gateways for AI interactions which are in high demand right now.

Just some ideas for you to toy with.
by timschmidt | 2025-10-15 13:16:11+00:00
What you do in the privacy of your own home is your business :) Victimless as it were.

That said, should you find yourself in a health emergency, as I did, and hooked up to a dilaudid drip for weeks, as I was, you may find experience with the symptoms of withdrawal to be quite useful for getting yourself through the worst of it, as I did.

Withdrawal is part of the human experience you don't always have a choice to avoid. Fear, avoidance, and ignorance of it makes potentially involuntary encounters with drugs more dangerous. Besides fueling unnecessarily destructive policy decisions.

Worth a think.
by akdev1l | 2025-10-15 13:16:30+00:00
The way to work around this issue is to provide a presigned S3 url

Have the users upload to s3 directly and then they can either POST you what they uploaded or you can find some other means of correlating the input (eg: files in s3 are prefixed with the request id or something)

I agree this is annoying and maybe I’ve been in AWS ecosystem for too long.

However having an API that accepts an unbounded amount of data is a good recipe for DoS attacks, I suppose the 100MB is outdated as internet has gotten faster but eventually we do need some limit
by iainmerrick | 2025-10-15 13:16:31+00:00
In that scenario, how do you keep cold startup as fast as possible?

The nice thing about JS workers is that they can start really fast from cold. If you have low or irregular load, but latency is important, Cloudflare Workers or equivalent is a great solution (as the article says towards the end).

If you really need a full-featured container with AOT compiled code, won't that almost certainly have a longer cold startup time? In that scenario, surely you're better off with a dedicated server to minimise latency (assuming you care about latency). But then you lose the ability to scale down to zero, which is the key advantage of serverless.
by jlg23 | 2025-10-15 13:16:31+00:00
They should name their team DNS because that is what will be shown on scoreboards of all tournaments to which their players will have to travel with DB anyway.

Their reliability is so abysmal that I fly multi-hop flights from Berlin or to airports a few hundred miles off my destination if that allows me to not rely on them. Boats that go up and down the Amazon have not let me down the way DB reliably did.
by sktrdie | 2025-10-15 13:16:35+00:00
I mean, if you want to be an artist, you really can. I've lived off a van for almost a year... just for adventure. Traveled close to beach where I could shower. I spent literally close to nothing day-to-day. I could remake my weekly expenses just working at a few restaurants in the weekend, and enjoy the beach the rest of the week surfing.

Now that I'm back to my normal office coding job, I feel like I'm actually saving less money because I have rent, and general city life to spend money on. It's all about the comforts one is used to.

The story of artists not having enough money is probably about people that are used to too many comforts. I've seen people complain they didn't have money to go by, whilst living in an apartment close to a densely populated city and having a car... get rid of those comforts if you want to make it!
by sgarland | 2025-10-15 13:16:50+00:00
TFA states that they’re running on AWS Fargate.

That said, as an example, an m8g.8xlarge gives you 32 vCPU / 128 GiB RAM for about $1000/month in us-east-1 for current on-demand pricing, and that drops to just under $700 if you can do a 1-year RI. I’m guessing this application isn’t super memory-heavy, so you could save even more by switching to the c-family: same vCPU, half the RAM.

Stick two of those behind a load balancer, and you have more compute than a lot of places actually need.

Or, if you have anything resembling PMF, spend $10K or so on a few used servers and put them into some good colo providers. They’ll do hardware replacement for you (for a fee).
by nomilk | 2025-10-15 13:17:20+00:00
Anyone using one? If so, what for? (please give details)

I got an oculus quest 2, was blown away by it for 1-2 hours, but never really picked it up again. The games were fun but very shallow, and never tried any practical uses.

Would love to use VR for working on a plane. Currently use a laptop, but my neck sometimes gets sore from looking down. VR has the potential to 10x the screen real estate and prevent having to look at down at an acute angle.
by stetrain | 2025-10-15 13:17:42+00:00
It's the same deal they made about upgrading the iPad Pro and MacBook Pro to M5:

https://www.apple.com/newsroom/2025/10/apple-introduces-the-...

https://www.apple.com/newsroom/2025/10/apple-unveils-new-14-...

The real issue is that various rumors point to them cancelling or pushing back the plan for a new version of the headset that is cheaper and lighter in favor of working on the smart glasses.

Without a cheaper, lighter headset I don't think it's going to become a significant product for Apple.
by geerlingguy | 2025-10-15 13:17:59+00:00
I've been using MacWhisper for this, with a huge variety of transcription options and things like speaker detection. It works great for all the 1 hour and shorter videos I've fed it, but does this have more to offer?

I haven't tried a 4+ hour video with MacWhisper but I presume that would work the same.
by yjftsjthsd-h | 2025-10-15 13:18:05+00:00
> You trust hardware and software by establishing boundaries. We figured this out long ago with the kernel mode/user mode privilege check and other things. You want apps to be heavily locked down/sandboxed, and you want the OS to enforce it, but every time you do you go up against the principles of open source absolutists like the FSF. "What do you mean my app can't dig into the storage layer and read the raw image files? So what if apps could use that to leak user location data, I need that ability so I can tell if it's a picture of a bird"

Well, no. The objection isn't to sandboxing apps, but to sandboxing the user, as it were. On my laptop, I run my browser in a sandbox (eg. bubblewrap, though the implementation of choice shifts with time), but as the user I control that sandbox. Likewise, on my phone, I'm still quite happy that my apps have to ask for assorted permissions; it's just that I should be able to give permission to read my photos if I choose.
Show HN: GenAI Test Case Generator – Reduces QA time by 80% using GPT-4
by ashish_sharda | 2025-10-15 13:18:13+00:00
I built this tool to generate comprehensive test cases from user stories using GPT-4, then auto-generate automation code in multiple frameworks (Selenium, Playwright, Cypress).

What takes a QA engineer 3-4 hours now takes 30 seconds.

Features: - Multi-industry support (Insurance, Fintech, E-commerce, Healthcare) - Generates positive, negative, edge cases, and security tests - Auto-generates production-ready automation code - Free tier: 5 test generations per day

Built and deployed in one day using Python, Streamlit, and GPT-4 to validate the concept.

Live demo: https://genai-test-gen.streamlit.app

Happy to answer questions about the architecture, prompt engineering techniques, or how this fits into modern QA workflows.
by positron26 | 2025-10-15 13:18:16+00:00
> in terms of going out of their way to not use proprietary software.

Performative and an example of very self-defeating tactics that belie motivations other than actually accomplishing anything.

> they founded it

This is true, but it actually contributes to arguments that the FSF is full of crazies content to preach from the monastery of ascetic suffering rather than live in a world with lots of independence and strong open source.