MurphyA/hacker-news huggingface dataset:
by mindcrime | 2025-10-28 00:59:52+00:00
Professor Kahneman signaled concern that if he did not end his life when he was clearly mentally competent, he could lose control over the remainder of it and live and die with needless “miseries and indignities.”

I can sympathize with that position. What I personally fear most about aging and dying isn't the dying, but rather the possibility of developing something like dementia or alzheimer's and experiencing the last portion of my life as a mental wreck, incapable of understanding what's going on, or taking any kind of coherent action. I would hope that if that ever happens, I'd find the courage in a final moment of lucidity to drive my car into a lake, or something along those lines.

If I knew that kind of end was in the cards, and I had the option to choose a nice, quiet, painless death by physician assisted suicide, I think I would very (very) seriously consider choosing the latter.
by solid_fuel | 2025-10-28 01:01:05+00:00
I may have gotten nerd sniped here, but I believe all of these examples so far have some subtle errors. Using elixir syntax, I would think something like this covers most of the cases:

expiry_date = DateTime.now!("Etc/UTC") query = from u in User, where: u.expiry_date > ^expiry_date and u.expiry_email_sent == false, select: u MyAppRepo.all(query) |> Enum.map(u, &generate_expiry_emails(&1, expiry_date)) |> Email.bulkSend() # Returns {:ok, %User{}} or {:err, _reason} |> Enum.filter(fn {:ok, _} -> true _ -> false end) |> Enum.map(fn {:ok, user} -> User.changeset(user, %{expiry_email_sent: true}) |> Repo.update() end)

Mainly a lot of these examples do the expiry filtering on the application side instead of the database side, and most would send expiry emails multiple times which may or may not be desired behavior, but definitely isn't the best behavior if you automatically rerun this job when it fails.

----

Edit: I actually see a few problems with this, too, since Email.bulkSend probably shouldn't know about which user each email is for. I always see a small impedance mismatch with this sort of pipeline, since if we sent the emails individually it would be easy to wrap it in a small function that passes the user through on failure.

If I were going to build a user contacting system like this I would probably want a separate table tracking emails sent, and I think that the email generation could be made pure, the function which actually sends email should probably update a record including a unique email_type id and a date last sent, providing an interface like: `send_email(user_query, email_id, email_template_function)`
by ChrisMarshallNY | 2025-10-28 01:02:06+00:00
This reminds me of functions that rely on properties, but the properties could, themselves, be functions (in Swift, we call them "computed properties," and they are indistinguishable, on the outside, from stored properties).

C++ can also have a lot of tripwires, from overloaded operators (same with Swift, but people don't overload operators very often, in Swift. They compute properties, all the time, though).
by codingdave | 2025-10-28 01:03:07+00:00
Based on my experience, .NET has evolved over the years, and .NET folks have kept up with changes. So they are just as used to updating their skills as anyone else, and if a need comes up where they need to learn React or some other "new" thing, they are perfectly capable of doing so.

The reason they don't is that is simply isn't needed in their work.
by keyle | 2025-10-28 01:03:32+00:00
I didn't explain myself well. The point I was trying to make is the language of Swift is far more flexible than Dart. And in terms of UI implementation, it then looks a lot more like a DSL.

Because () are optional and a function call can look like this Button { stuff }. Meanwhile in dart, it's lines, and lines and indentation of 2 because it becomes a massive manuscript. I hope that makes more sense.
by jerrythegerbil | 2025-10-28 01:03:40+00:00
Vulnerabilities can and often are chained together.

While the relevant configuration does require root to edit, that doesn’t mean that editing or inserting values to dnsmasq as an unprivileged user doesn’t exist as functionality in another application or system.

There are frivolous CVEs issued without any evidence of exploitability all the time. This particular example however, isn’t that. These are pretty clearly qualified as CVEs.

The implied risk is a different story, but if you’re familiar with the industry you’ll quickly learn that there are people with far more imagination and capacity to exploit conditions you believe aren’t practically exploitable, particularly in highly available tools such as dnsmasq. You don’t make assumptions about that. You publish the CVE.
by ggm | 2025-10-28 01:04:23+00:00
Aside from not dogfooding, what would have reduced the impact? Because "don't have a bug" is .. well it's the difference between desire and reality.

Not dogfooding is the software and hardware equivalent of the electricity network "black start" -you never want to be there, but somewhere in the system you need a honda petrol generator, which is enough to excite the electromagnets on a bigger generator, which you spin up to start the turbine spinning until the steam takes up load and the real generator is able to get volts onto the wire.

Pumped Hydro is inside the machine. It's often held out as the black-start mechanism because it's gravity, there's less to go wrong, but if we are in 'line up the holes in the cheese grater' space, you can always have 'want of a nail' issues with any mechanism. The honda generator can have a hole in the petrol tank, the turbine at the pumped hydro can be out for maintenance.
by Aaron2222 | 2025-10-28 01:04:40+00:00
Reading the paper[0], they're getting position data at 1s intervals, and ran it for 4h to show repeatable centimetre-level precision over that time period.

[0]: https://link.springer.com/content/pdf/10.1007/s10291-025-019... (note that the results using only the internal GNSS antennas are further into the paper)
Show HN: Recipe Converter – Instantly Adapt Recipes to Your Diet
by aidan-ricci | 2025-10-28 01:05:28+00:00
Hi HN,

I built a Chrome extension called Recipe Converter that automatically adapts any recipe you find online to your dietary needs — Vegan, Keto, Gluten-Free, Low-Sodium, or Dairy-Free — in one click.

I made this because I was constantly finding great recipes that didn’t fit my diet, and manually swapping ingredients was tedious. Most tools make you copy-paste recipes into separate apps, but Recipe Converter works directly in your browser, detecting recipe pages and suggesting smart ingredient substitutions automatically.

It’s designed to make healthy eating and managing restrictions easier without changing your browsing habits.

Features: Instantly personalizes recipes for your chosen diet Smart substitutions for allergens and health goals Works automatically while you browse (no copying or forms)

Chrome Web Store: https://chromewebstore.google.com/detail/recipe-converter-%E...

Would love any feedback — especially from anyone with food allergies, nutrition experience, or interest in accessibility. I’m also curious how others would handle more complex substitutions (like macros or the edge case conversions).

Thanks for reading!
by throwaway-0001 | 2025-10-28 01:05:40+00:00
It “feels” same as previous commenter “feels” about AI. Can you even tell the difference in an objective way between a human vs AI regurgitating words? I kinda can tell, but far from very accurate.

Well, from my experience: a few lawyers got the law wrong but my ai did it right and the lawyer “lost” and showed how incompetent the lawyer was.

If you say most people that copy are careful you don’t know what’s an average person. And think there are 50% in the world worse than than them.

Most people lack basic logic skills.
by OneDeuxTriSeiGo | 2025-10-28 01:05:54+00:00
The jxl-oxide dev is a jxl-rs dev. jxl-oxide is decode only while jxl-rs is a full encode/decode library.

zune also uses jxl-oxide for decode. zune has an encoder and they are doing great work but their encoder is not threading safe so it's not viable for Mozilla's need.

And there's work already being done for properly integrating jxl implementations with firefox but frankly things take time.

If you are seriously passionate about seeing JPEG-XL in firefox there's a really easy solution. Contribute. More engineering hours put towards a FOSS project tends to see it come to fruition faster.
by Barbing | 2025-10-28 01:06:00+00:00
>LLMs are useful for many classes of problem that do not require zero shot perfect accuracy. They are useful in contexts where the cost of building scaffolding around them to get their accuracy to an acceptable level is less than the cost of hiring humans to do the same work to the same degree of accuracy.

Well said. Concise and essentially inarguable, at least to the extent it means LLMs are here to stay in the business world whether anyone likes it or not (barring the unforeseen, e.g. regulation or another pressure).
by Mon0t0n | 2025-10-28 01:06:11+00:00
“And maybe just to get, you know, all of the noise out of the way. And I want to clearly acknowledge that the Post did cause quite a bit of pain. I want to obviously say sorry to the well-meaning people, you know, people that really care about this topic, people that are hurt by the tension that exists in the world today, but obviously not sorry to the people that are just spewing hate and anti-Semitism and the people that have come after our team. So to your point, this has been a special time for our team and obviously our customers. It's a it's a very special time for the world. And maybe I'll give you a little bit of context for the meeting itself. Right. As Brazil a leader in develop. I of course, we get invited to speak with world leaders about topics relevant to education, cybersecurity, A.I.. I will play a huge, huge part of it, of the of the future.

Right. And so I always welcome the opportunity to speak with world leaders. Obviously, you know, the reaction to it and the optics matter a lot to us. And we're here for a team. We're here for our customers. There hasn't been material changes to the business. A lot of it is noise. You know, there was it was an exposed with 5 million views from someone that allegedly quit the company. But guess what? We looked upside down and that person didn't work for Vercel. So it kind of also highlights a little bit of the challenges that we see with social media today.”
by ceh123 | 2025-10-28 01:06:42+00:00
I think my main point is just because an LLM can lie, doesn’t necessarily mean an LLM generated slide is fraud. It could very easily be correct and verified/certified by the accountant and not fraud. Just cuz the text was generated first by an LLM doesn’t mean fraud.

That being said, oh for sure this will lead to more incidental fraud (and deliberate fraud) and I’m sure it already has. Would be curious to see the prevalence of em-dash’s in 10k’s over the years.
by jkelleyrtp | 2025-10-28 01:06:55+00:00
I think a hallmark of 2025 is a resounding lack of empathy and compassion from people. Maybe's it's smartphones, social media, or some sort of existential doomerism.

To reframe your scenario: imagine you went to a school and some of your classmates came from poor families and couldn't afford clothes, food, or a laptop etc. To help those students, the teacher used class funds to buy them new shoes and get them a nice laptop to get their work done. Do you still think it's unfair that you don't get new shoes, laptop, or cookies?

The solution to your original question is to understand why the teacher is giving girls 4 cookies and then just be happy that more people get a fair shot at life.
by thusjustin | 2025-10-28 01:07:13+00:00
I love the vision. From what I can tell, you're building something that I think should exist and we have the technology for now. I think we need a place to put our 3, 5, 10 year goals, and some kind of process to keep us on track for that. And it's so personal, of course the LLM aspect needs to be local-only.

One concern I have is that I think I will need more than an empty "add Journal entry" nudge or prompt. I think I would want what a real coach would do/say. Something like, "How's the meditation/exercise/calling friends/making stuff going?"
by anenefan | 2025-10-28 01:07:59+00:00
Paperwork for the tax man.

Once that's off the plate implement a suitable Win 7 compatible database or accounting suite for record keeping that a computer illiterate senior could use with some minor help without too much hassle - figuring simple spreadsheet for their data output they will need in the end.

If I've time after all that, I'll put thoughts how to best reach Australia's weather bom site's [1] designers who for accessibility moved their site's performance from great or excellent to total crud. Even the android phone does not display any better. If I ever needed an example of enshitification ... They need a fall back for those who's devices don't work well or just want to use less bandwidth every time they check their local radar.

[1] www.bom.gov.au
by anon291 | 2025-10-28 01:08:31+00:00
I mean pls also attracts a TON of rad trad Catholics. It turns out being unable to follow social cues makes you more amenable to following niche fields as well as a bit esoteric in your philosophers and lifestyle. I count myself as one of these as well lol.

That being said, this is also problematic. Because if the field is dominated by queer people as you point out, then shouldn't you try to balance it out and add straight cis people? I mean, you will correctly point out that the average person wouldn't fit in.

Well welcome to the club..
Ask HN: Recent Eye-Opening Experiences
by bhag2066 | 2025-10-28 01:08:32+00:00
Futurist and writer William Gibson said: "The future is already here – it's just not evenly distributed." I recently had a chance to ride in a Waymo for the first time, and want to seek out more experiences.

What have you seen or experienced recently, where you sensed that you were seeing the future? Perhaps something that other readers might not have experienced?
by Kiboneu | 2025-10-28 01:08:40+00:00
Several issues seem to be getting mixed up.

The first issue being raised is that replacing the configuration file shouldn't count as a vulnerability. Usually I'd agree, but the fact that it causes memory corruption from user input warrants at least a low severity report.

If we can't prove that a vulnerability is exploitable, we have to keep our assumptions minimal. If the memory corruption vuln is provably unexploitable, a future code change could surface it as a plausible exploit primitive. It can also point to a section of code that may have been under-speced, and may serve as an signal to pay more attention at these sections for related bugs. Also, it doesn't seem right to assume that the config files will always be under a privileged directory.

The second issue being discussed iun the mailing list is that it's LLM slop. While the reports do seem to be AI generated, I haven't seen any response about the PoC failing, but maybe there is a significant problem where a lot of PoCs are fake.

So many assumptions. As commander Data may have said today, "the most elementary and valuable statement in security, the beginning of wisdom, is 'I do not know.'"
by landr0id | 2025-10-28 01:08:56+00:00
>that doesn’t mean that editing or inserting values to dnsmasq as an unprivileged user doesn’t exist as functionality in another application or system.

The developer typically defines its threat model. My threat model would not include another application inserting garbage values into my application's config, which is expected to be configured by a root (trusted) user.

The Windows threat model does not include malicious hardware with DMA tampering with kernel memory _except_ maybe under very specific configurations.
by a_cool_username | 2025-10-28 01:10:39+00:00
I (and my team) work remote and don't quite agree with this. I work very hard to provide deep, thoughtful code review, especially to the more junior engineers. I try to cover style, the "why" of style choices, how to think about testing, and how I think about problem solving. I'm happy to get on a video call or chat thread about it, but it's rarely necessary. And I think that's worked out well. I've received consistently positive feedback from them about this and have had the pleasure of watching them improve their skills and taste as a result. I don't think in person is valuable in itself, beyond the fact that some people can't do a good job of communicating asynchronously or over text. Which is a skills issue for them, frankly.

Sometimes a PR either merits limited input or the situation doesn't merit a thorough and thoughtful review, and in those cases a simple "lgtm" is acceptable. But I don't think that diminishes the value of thoughtful non-in-person code review.
by dathinab | 2025-10-28 01:10:53+00:00
> I think you have this backward.

oh, yes, I got that mixed up. That also mean permanent winter time would be better for the sleep not permanent summer times (it was whatever the "standard" time was as far as I remember). Either way people cant decide on what time they prefer makes any change harder.

> I'm convinced it's the best of only bad options.

idk. the time switch every year comes with an increase in traffic accidents for up to a weak after it happens. While most jobs today either aren't overly dependent on sunlight anymore or don't sync up with e.g. start of school or similar anyway (e.g. field work). I guess that argument does differ for any area widely dominated by farming and limited farming automation.
by ChrisMarshallNY | 2025-10-28 01:10:56+00:00
This actually makes sense.

Performance reviews are a miserable experience, both from the giver, and the givee's perspective.

I used to get "click-through" reviews all the time, from my bosses. They just cared about the number, and used the "placeholder" text.

AI could at least have that text be a little more sensible.
by prmph | 2025-10-28 01:11:26+00:00
Example (expanding on [1]): I want to design a strongly typed fluent API interface to some role/permissions based authorization engine functionality. Even knowing how to shape the fluent interface so that is powerful but intuitive, as strongly typed as possible but also and maintainable, is a deep art.

One reason I know LLM can't come close to my design is this: I've written something that works (that a typical senior engineer might write), but this not enough. I have evaluated it critically (drawing on my experience with long lived software), rewritten it again to better meet the targets above, and repeated this process several times. I don't know what would make an LLM go: now that kind of works, but is this the most intuitive, well typed, and maintainable design that there could be?

1. https://news.ycombinator.com/item?id=45728183
by array_key_first | 2025-10-28 01:11:28+00:00
> one has to be out of their mind to prefer carplay over tesla’s native, literally out of their mind.

Hi, it's me, I've driven Tesla's and yes - I prefer carplay and android auto, and I have good reasons for it.

The first being that touch displays, even if they are the best displays that could be manufactured on Earth, will always be inferior to physical controls for many functions.

Me swiping up and down or pushing plus or minus to turn up the heat does not compare to a rinky dink dial found in a 1999 Toyota Corolla.

So then, what's left? The software-only stuff: navigation, music, notifications.

I think CarPlay and Android Auto does all of those better. Navigation is best on Google Maps and Apple Maps. And, even if you disagree, just have ONE app to do it across the board and share the data is a superior experience.

But, even if you're still not convinced, consider: your phone is 500 - 1000 dollars, and your car is tens of thousands of dollars. Why are you tightly coupling these throw-away software functions to such an expensive thing?

What happens if, tomorrow, some service goes away and your Tesla doesn't update? Then you'd be like those bozos who bought a fancy SiriusXM subscription in their 2015 car.
by ModernMech | 2025-10-28 01:11:56+00:00
Let me put it this way: computing as a field, and programming languages in particular would not be where they are today without the hard work and dedication of LGBTQ people in particular. I mean, we have to look no further than Alan Turing to understand this at a visceral level. In his tradition, LGBTQ people flock toward this field.

The reason the flag is in the Rust discord logo isn't because people are throwing their sexuality in your face. They put that flag up as a signal that the community is safe for other like-minded people. The flag stays up because the people who built the community want it up and keep it up. So the logo isn't juxtaposed with the LGBTQ flag -- juxtaposition implies contrast. Rust is intrinsically LGBTQ because it's built by LGBTQ people. That's the essence of community and languages if anything are communities.

This is what happens when someone's mere existence in public life is considered dangerous or "your sexuality being shoved in our faces" -- they stay inside, they find community in secret places where few people go, and they put up signs to signal to others similarly situated that they are welcome.

So of course we're not gonna take the flag down, it's up for a reason! Won't come down until that reason it's up goes away.
by gnabgib | 2025-10-28 01:12:35+00:00
Related:

Dutch government takes control of Chinese-owned chipmaker Nexperia (729 points, 635 comments) https://news.ycombinator.com/item?id=45566644

Nexperia – Update on Company Developments (56 points, 14 days ago, 12 comments) https://news.ycombinator.com/item?id=45578467
by jellyfiz | 2025-10-28 01:12:53+00:00
I built an open-source tool to make moving toward NIST SP 800-171 Rev-3 (and CMMC readiness) less painful. The app walks you through each control family, lets you mark implemented/non-implemented/partial, provide evidence, and then generates a ready-to-use Markdown SSP and a POAM CSV for unimplemented requirements.

Everything is stored client-side using IndexedDB, so your assessment data stays in your browser unless you explicitly export or import it. No 3rd party trackers / analytics / servers. It's all a statically rendered web application with offline support (PWA).

Code is at: https://github.com/JAKTOOL/cmmc
by ModernMech | 2025-10-28 01:14:52+00:00
> I don't blame them as such.

I do! Have you read Timothy Snyder yet? He warns that most of the dictator's power is granted willingly. That's what this is, so to the extent you believe they are blameless, their acquiescence is in real terms making it so much worse:

"Do not obey in advance. Most of the power of authoritarianism is freely given. In times like these, individuals think ahead about what a more repressive government will want, and then offer themselves without being asked. A citizen who adapts in this way is teaching power what it can do." -- Timothy Snyder, On Tyranny: Twenty Lessons from the Twentieth Century

With great power comes great responsibility. Yet somehow we've created a society in America where power comes with no responsibility at all except to enrich one's self and shareholders. Zero responsibility to the Constitution and to the country which gave them the necessary workforce, marketplace, rule of law, military, courts, patent protection, police, schools, universities, research funding, land, roads, shipping lanes, trade deals, political stability, etc. to come to fruition. Once you're rich enough, apparently it's fine to cast all our institutions into the sea, because if not you might have a rough quarter, or maybe you won't get that merger approved. It's just playing the game, who can blame them?

Meanwhile, just to be clear about the game being played, food stamps are set to expire for 40 million people this week, and healthcare premiums are set to double in just a few months. I don't believe tech corporations have any plans to help Americans with their food and healthcare needs, despite being keen to chip in for the ballroom gilding.