MurphyA/hacker-news huggingface dataset:
by sidewndr46 | 2025-10-28 16:48:19+00:00
having hired an expert in this field, I can tell you they aren't really that sophisticated. I found myself with an absolute mountain of cash after an accident as part of a settlement. My medical insurance won't pay claims until I've exhausted that cash. The claims I had were much higher than even the mountain of cash. The lawyer I hired use a pretty effective strategy: he contacted all of the claims against me and told them we could engage in N-way negotiations amongst all the parties until we came to a settlement so everyone got their nibble of the pie. Or they could get X today, where X was some amount that was a bit less than the rate the industry actually gets paid for those services. They all accepted.

The discounts he negotiated left me with tons of cash & were in excess of the fee he charged me.
by WorldMaker | 2025-10-28 16:48:26+00:00
"Usually", sure, but there's also nothing stopping a Middleware from doing whatever it likes with the raw HTTP request. A streaming large file upload middleware, for instance, might have reason to work more directly with Transfer-Encoding: Chunked to optimize its own processes, using a custom "BodyReader".

The CVE points out (and the article as well) some issue with user-land code using `HttpRequest.BodyReader` on the "parsed" request, it just doesn't include specifics of who was using it to do what. Plenty of Middleware may have reason to do custom BodyReader parsing, especially if it applies ahead of ASP.NET Model Binding.
by giancarlostoro | 2025-10-28 16:48:40+00:00
At first I was going to comment how much I personally avoid the AGPL, but now you've got me thinking, technically, any LLM training off AGPL code or even GPL or similar code is very likely violating those licenses regardless of how it is worded. The GPL already makes it so you cannot translate to another programming language to circumvent the license if I remember correctly. The AGPL should have such a similar clause.
by elAhmo | 2025-10-28 16:48:41+00:00
Anecdotal, one of my colleagues was sounding surprisingly clear on one of the calls, and I had to ask him what is he using. Turns out whose were AirPods Pro 3, so my first impression with their microphone is quite amazing. Comparable to "studio mics from MBP" from a generation or two ago. He shared noise cancellation is also great.
by CloudWiseTeam | 2025-10-28 16:48:44+00:00
I've been building CloudWise for AWS cost optimization and just launched a free forever tier.

*Context:* After analyzing $500K+ in AWS spending across startups, found that 47% waste $500-2K/month but can't afford $40K+/year enterprise FinOps tools.

*What's free:* - 1 AWS account monitoring - Real-time cost alerts - Automated waste detection - Optimization recommendations - No credit card required

*Technical approach:* - AWS Cost Explorer API with intelligent caching (85% cost reduction) - Lambda-based processing for real-time analysis - Anomaly detection for cost spikes - Multi-service attribution analysis

*Early results:* Beta users finding $300-1200/month in waste within first week.

The interesting challenge was building enterprise-grade cost analysis at consumer pricing. Had to optimize everything - API usage, processing efficiency, storage costs.

*Try it:* https://cloudcostwise.io

*Question for HN:* What's your approach to AWS cost monitoring? Curious about patterns others have seen in cloud waste.
by avensec | 2025-10-28 16:49:54+00:00
+1. Just adding my own breakdown.

What most people describe as Loneliness is a specific form of loneliness that represents the degree of disconnection they feel from others. When you don't feel seen and heard in a friendship, you are more likely to feel alone. More people "proving" they don't want to know you or see you, reinforces the idea.
by epistasis | 2025-10-28 16:50:04+00:00
That's fine, of course you don't work for anyone else! But you are also not going to convince anyone else by being vague and refusing to give any specifics.

Usually when somebody makes broad vague assertions of evidence but refuses to back it up, I find that they are either mistaken about their experiences and that their take aways do not really follow from their primary evidence. Though usually it's those on the more DEI side that say "I'm not responsible for educating you" that make these mistakes! In the past year I'm seeing it from people that think DEI is about discrimination, so it's an interesting evolution. The argument is still unconvincing, no matter who says it. And again, I'm not saying you must produce anything for anybody else, I'm just saying that you end up looking like you don't have anything to actually produce.
by elevation | 2025-10-28 16:50:14+00:00
I ran conduit for fiber to a couple rooms.

Because pre-terminated cable assemblies [0] can be 10% of the cost of a more modular link, I used conduit large enough to pass QSFP28 with ease. May not be possible in every home but I'm happy with the result.

[0]: https://www.ebay.com/itm/116804914246
by zengief | 2025-10-28 16:50:15+00:00
Thanks for the link. What I'm wondering is how this guy aims to succeed where previous X-ray lithography efforts failed. For reference X-ray litho was competing with EUV. What was it that held the approach back? My guess would be that that the industry simply coalesced around EUV and X-rays were abandoned. But that just makes me wonder why the industry coalesced there. Perhaps synchrotons are not cheap / easy? But don't university labs build these all the time?
by pavlov | 2025-10-28 16:50:15+00:00
Nokia today is the combination of the network businesses of Nokia, Siemens, Alcatel and Lucent.

They have substantial operations in North America. T-Mobile uses primarily their hardware. Nokia still operates Bell Labs which came originally from AT&T via Lucent.

As the other global options for network hardware are Ericsson, Samsung and Huawei, Nokia is the closest to a “Made in USA” solution. Its HQ is in Finland but at least it’s a NATO country now.

So they’re more important to US infrastructure than might appear at first glance.
by FinnKuhn | 2025-10-28 16:50:21+00:00
I can at least also confirm this for German. Here is one example that is quite annyoing:

Chat GPT for example tends to start emails with "ich hoffe, es geht dir gut!", which means "I hope you are well!". In English (especially American) corporate emails this is a really common way to start an email. In German it is not as "how are you" isn't a common phrase used here.
by fatnoah | 2025-10-28 16:50:27+00:00
>The wider implications of this are left to the reader.

IMHO, it's actually worse than we realize. The Medical Loss Ratio requirement is good because it requires insurance companies to spend 80% or 85% of premiums on health care. It's bad because one way for insurance companies to make more money is to have inflated health care prices to justify increasing premiums so they can get 80% of a bigger pie. It also gives them incentives to provide care themselves so they can capture some of that 80% spend.

> For the uninsured this sort of thing is actually really common. Had an online friend who had to get emergency treatment and they sent him a bill for $20k.

I experienced this personally with my own insurance. My bill was over $20k, and it took a year to convince the insurance company that removing a few feet of my intestines was actually emergency surgery. I ended up paying $800. My roommate in the hospital had no insurance and ended up not paying anything (which I did not begrudge them at all, since the reason for no insurance was debilitating back pain that led to unemployment)
by whimsicalism | 2025-10-28 16:50:31+00:00
> Their market share is almost 1:1 linearly correlated to the degree of protectionism in those countries

Seems like you actually believe this. I think our starting points on reality are different enough that we are not going to have a productive conversation, I wish you and other Europeans the best of luck in your protectionism-led growth strategy. Make sure to not discuss it with any pesky macroeconomists who might lead you astray. take care
by enraged_camel | 2025-10-28 16:50:43+00:00
The funniest bit about all this is that this is all just laziness all the way down. People complain about AI-written articles. When the article is written about a human, they fall over themselves to point out potential flaws, like "well it looks like AI hallucinated" and it gets voted to the top. Then it turns out that they themselves did not read the article. Just a damning indictment of the quality of online discourse in year 2025.
by palata | 2025-10-28 16:51:06+00:00
I understand the feeling, but I disagree with the conclusions.

As an engineer, I leverage copyleft licences like GPL to open source some of my code. If I can tell my company "you see, I need to open source that module because the law says so, because it depends on that GPL project", then it makes them at least consider it, and often they accept (because let's be honest, that module is not that important). Similarly, if I fork and fix a bug in a dependency that uses a copyleft licence, I can justify actually contributing back.

Note that in both cases I'm abusing the licences: GPL does not say at all that you need to contribute your changes back upstream. But I have been able to convince managers of that easily in the past. Whereas they all know really well that permissive licences pretty much means that they can do whatever they want, and they surely don't want to think about open sourcing anything if there is no need.

If you use permissive licences, I lose that argument. So if my company uses your library, you will never hear about it, ever.

Regarding my personal projects... well I gave up on the "community" idea long ago: my experience when open sourcing for the sake of helping others is that others will try to abuse me. By pressuring me in all sorts of ways so that they benefit from my free work. I'm done with that. If I open source something, it's for my personal portfolio. But at that point I may as well keep it copyleft, so that maybe it enables other engineers to leverage it in their companies.

It's true that LLMs are open source laundering machines, but I would still rather use Linux than vibe-code a kernel. And Linux stays GPLv2.
by sofixa | 2025-10-28 16:51:16+00:00
> but I started my company in the US because everything is so much easier here

Which part is easier? That you have 50 different states with slightly varying laws to consider (e.g. Californian Data protection)? That you have a byzantine system of "benefits" to choose and manage?

And compared to where? Germany or Estonia or Sweden or Spain? The complexities will vary wildly depending on the country (kind of like in the US, where lots of companies pick the state to base themselves in based on the combination of favourable laws and precedents and taxes).
by logifail | 2025-10-28 16:51:28+00:00
> What does help, and what European governments (at least the one in The Netherlands that Pieter is from) actually do, is more funding for startups. If you're a startup founder in NL almost every angel you talk to has a matched funding deal with the government. That's such a smart way of keeping up with the US.

Does government offering matched funding to investors actually help startups who are struggling to find (any) funding? If a startup can't find (any) funding, matching is irrelevant.

> Do you think US startups get free compute from the government? They don't even get subsidies most of the time. What they get is better funding because there's more capital available, and helping investors with that is exactly how you solve that.

Umm. I'm not really convinced that the political elites in Europe understand how to do any of this stuff well.

See also: https://www.eib.org/en/publications/online/all/the-scale-up-...
by marcosdumay | 2025-10-28 16:51:40+00:00
It's only for the first connection, and it's very rare that targets are valuable on the first connection.

On the other hand, we know of at least two suppliers of software that run with elevated access everywhere (including the dev side of every advanced military) that have been breached by unknown parties for years. The most likely explanation, by far, is that the sky only didn't fall yet because nobody wants it to. And that leaves us vulnerable to somebody suddenly wanting it.
by thepuppet33r | 2025-10-28 16:52:05+00:00
Wasn't that an edge case, though? Not even done by a bad actor, just someone misguided? And it was discovered and quickly corrected, unlike what would happen on something owned by a massive FAANG-style corp.

I have been schooled many times on the failures of Wikipedia, why I shouldn't waste my time editing it, how the editors are toxic; but ultimately, I can't help but buy into the idea of a crowdsourced, centrally administrated, store of knowledge.

I wouldn't base critical decisions off of Wikipedia alone, but it sure helps me understand things in general.
by noamteyssier | 2025-10-28 16:52:06+00:00
Shows up a lot in bioinformatics actually - trying to identify sequences with a specific subsequence (grep) and how many of each unique sequence there are. The number of lines here could be massive (order of 1-10's of GB)

You don't really end up using these results in any specific analysis but it's super helpful for troubleshooting tools or edge-cases.
by malicka | 2025-10-28 16:52:22+00:00
> COPYLEFT PROVISION

> Any modified versions, derivative works, or software that incorporates any portion of this Software must be released under this same license (HOPL) or a compatible license that maintains equivalent or stronger human-only restrictions.

That’s not what copyleft means, that’s just a share-alike provision. A copyleft provision would require you to share the source-code, which would be beautiful, but it looks like the author misunderstood…
by cogman10 | 2025-10-28 16:52:37+00:00
How wasteful?

Presumably 4 bytes dedicated to the keys would be dwarfed by any strings thrown into the dataset.

Regardless, other than complexity, would there be any reason to not support a dynamic key size? You could dedicate the first 2 bits on the key to the length of the key. 1 byte would work if there's only 64 keys, 2 bytes would give you 16k keys and 3 4M. And if you wanted to you could use a frequency table to order the pointers such that more frequently used keys are smaller values in the dictionary.
by scottbez1 | 2025-10-28 16:52:55+00:00
Lock-in usually just refers to a situation where switching costs are (perceived to be) higher than the net benefit, within some reasonable payoff period. It can include things like high cost to extract data, but it can also include things like network/social effects.

The latter is a huge reason companies strive to establish "platforms" and suites of connected apps - even if competition is cheaper/better in a vacuum, it still may not be worth the effort to switch if you're already established within an ecosystem. The goal is vendor lock-in even if they're not holding your data hostage (though they might do that too).
by emporas | 2025-10-28 16:53:19+00:00
Also, commercial software is consistently behind from open source.

I only use open source LLMs for writing (Qwen 32b from Groq) and open source editor of course, Emacs.

If some people can write better using commercial LLMs (and commercial editors), by all means, but they put themselves at a disadvantage.

Next step for me, is to use something open source for translation, I use Claude for the moment, and open source for programming, I use GPT curently. In less than a year I will find a satisfying solution to both of these problems. I haven't looked deep enough.
by zdragnar | 2025-10-28 16:53:25+00:00
I'm not sure that people downvoting you have been around northerners much. Down here in the upper midwest US, we tend to consider 4 or 5C to be shorts weather in the spring. I've a friend who would wear flip flops / sandals outside down to roughly -10C.

Then again, most people aren't getting the equivalent of 15 minutes of index 7 UVB exposure at those temperatures, so it's not quite the same thing, but still.
by Izkata | 2025-10-28 16:53:34+00:00
> Take the tax calculation for example. That cannot be decomposed into pieces that are generic, and potentially reusable elsewhere. It's just a list of rules and exceptions that need to be implemented as stated. You can decompose it into "1st part of calculation" and "2nd part of calculation", but that's meaningless (unhelpful). (Similarly for the game example above, the rules only exist in the context of other rules.)

As someone who does this himself for taxes, you're looking only at the "specific shell" part. The generic core is the thing that does the math - spreadsheet, database, whatever. The tax rules are then imposed on top of that core.
by RajT88 | 2025-10-28 16:53:37+00:00
I would suggest that another trend which contributes to this "one bad fight" is the growing personal disposable income in the US, which allows parents to be highly litigious, demanding things like arrests of kids their kids get in fights with:

https://fred.stlouisfed.org/series/DSPIC96

Anecdotally, teachers have been talking about fear of getting sued by parents for a long time now. I suspect this is a big driving force behind the "everyone gets a trophy" mentality and not at all liberalism. Teachers have been kowtowing to moneyed tiger/helicopter parents in ever more egregious ways.

My own pet theory anyways.
by fvdessen | 2025-10-28 16:53:41+00:00
Hey, I'm the author of this post, in a sense I agree with you. I doubt it will ever be mass adopted, especially in this form, which is more a draft to spark discussion than a real license.

I am not against AI, I use it every day, I find it extraordinarily useful. But I am also trying to look ahead at how the online world will look like 10 years from now, with AI vastly better than what we have now.

It is already hard to connect online with people, as there is so much commercial pressure on every interaction, as the attention they create is worth a lot of money. This will probably become 100x worse as every company on the planet will have access to mass ai powered propaganda tools. Those already exist by the way. People make millions selling AI tiktok tools.

I'm afraid at some point we'll be swamped by bots. 99% of the content online will be AI generated. It might even be of better quality than what we can produce. Would that be a win ? I'm not sure. I value the fact that I am interacting with humans.

The protection we have against that, and the way it's looking to progress towards, is that we'll depend on authorities (official or commercial) to verify who's human or not. And thus we'll be dependent on those authorities to be able to interact. Banned from Facebook / X / etc ? No interaction for you, as no website will allow you to post content. Even as it is I had to gatekeep my blog comments behind a github account. This is not something I like.

I think it's worth looking at alternative ways to protect our humanity in the online world, even if it means remaining in niches, as those niches have value, at least to me. This post and this license is one possible solution, hopefully there are more
by ErroneousBosh | 2025-10-28 16:54:07+00:00
But SQL is text, that's the whole point of it.

Sure, you have to phrase your question in a way that's a bit like trying to ask a very specific question of an annoying "Self-Diagnosed Internet Autistic" co-worker who can't tell the difference between being "precise" and being "a pedantic pain in the arse", but it is just text.

Oh you're upset because SQL isn't in German? Well there's no reason why you can't stick German into the lexer, set your columns up with German names, and get a query like

WAHLEN_SIE zeielen_id, benutzer_namen, eingetragen AUS benutzern WO aktiviert = WAHR SORTIEREN NACH registrierungs_datum;

people who can really speak German, ja ich weiss meine Deutsch is so schlect, geh schon ;-)

But really why would you bother?
by k310 | 2025-10-28 16:54:21+00:00
> Eventually, large parts of the internet will be an irradiated area where bots create for bots, while we will be building shelters of trustworthiness, where genuine human connection will be the currency.

But how? One article already argues that a personal AI trained on only you is the solution to dealing with (I forgot, either humans or AI) I looked for the reference.

Given the flood, I suspect that this will be of extreme importance. It is for me.
by ApolloFortyNine | 2025-10-28 16:54:31+00:00
>without the involvement of artificial intelligence systems, machine learning models, or autonomous agents at any point in the chain of use.

Probably rules out any modern IDE's autocomplete.

Honestly with the wording 'chain of use', even editing the code in vim but using chatgpt for some other part of project could be argued as part of the 'chain of use'.
by JustExAWS | 2025-10-28 16:54:35+00:00
Unless you are in the position of Zuckerberg or the Google founders, everyone’s main motivation is to keep their jobs.

If you are just an employee - it’s beyond naive to prioritize anything but your own job. Of course I am not advocating back stabbing and throwing others under the bus. Getting ahead in BigTech is always about playing politics and getting on the right projects to show “impact”.
by mmooss | 2025-10-28 16:54:39+00:00
There are interesting questions to pose - what are the differences and why not follow those paths. Signal is a different application and organization, which has different requirements and resources - for example, they can't optimize performance by sacrificing security, and they have limited resources. It's hard for me to imagine Signal, with already constrained development resources, devoting people, time, wealth and attention to building a private cloud - they would have two businesses, cloud and private communications app. And to match AWS would be pretty difficult - how about scalability for the days when Signals load shoots up? I wonder how these other organizations do it - some clearly have far greater resources than a non-profit with almost no revenue streams.

But you're kidding yourself and everyone else to state an answer. It's amazing how HN commenters love to use leading FOSS projects, like Signal and Mozilla, as targets for their performative takedowns - it causes real harm to the most important projects around. Taken seriously, the parent comment's arguments contain no engineering, and their foundation is a lot of assumptions and arrogance:

No engineering is required to understand those arguments. No competent practicing engineer would offer a serious opinion about an organization and technical issue that they haven't directly examined.

The assumptions are a long list: The totality of reasons that Signal has, as an organization, to choose AWS. The people who made the decision:likely others at Signal were heavily involved, and the CEO's role is unknown to us - maybe just approval - and possibly it was before Whittaker was there. Signal having unlimited flexibiliy in requirements and resources to optimize for this issue.

The arrogance is that we know better than Signal's CEO and team members, who are intimately familiar with the project, the organization, its requirements, its resources. The parent doesn't address most of those essentials.

But maybe the parent is performative - that's not illegal, but ugh, pick on the big guys; punch up, not down.
by bobtheborg | 2025-10-28 16:54:52+00:00
$30K NOT counting some expenses (cardiologist, ER docs)???

> Bills were a few thousand here for the cardiologist, another few there for the ER docs, a bit for the radiologist. I helped my sister-in-law negotiate these down but they weren’t back breakers. Then the hospital bill came: $195k. This is a story about that.