MurphyA/hacker-news huggingface dataset:
by h4ck_th3_pl4n3t | 2025-10-23 00:08:19+00:00
Well, sync.Map is based on atomics which comes with limitations on its own as you have to use specific (potentially conflicting) hash keys for it.

What I wanted to point towards with my earlier comment is that sync.Map doesn't use resource based mutexes, it uses one mutex for everything which will always be the slowest case.

There's no real borrowing concept in Go, as there would be in Rust for that case, and if you argue that simplicity should be preferred then normal map[] should be threadsafe by default, which, in return, likely will require compile time expansion because of generics.

The core value of Go's "we want simplicity" approach always feels like it's a facade, because there is so many exceptions and footguns along the way. These footguns almost always were conscious decisions where they could have made a decision to break legacy behavior for better simplicity but decided that this is not what they want, which is weird as it's not fitting the initial language design promise.
by fariszr | 2025-10-23 00:08:25+00:00
It's a compromise.It's not as secure as using a VPN, but it's way more convenient, since only one device has to have a knocker client on it without needing any sort of VPN.

The likelihood of someone is on the same network as you noticing your servic, try to hack it, before the TTL expires again is IMO quite low.

This is without taking into account that the services themselves have their own security and login processes, getting a port open doesn't mean the service is hacked.
by Grimblewald | 2025-10-23 00:08:45+00:00
> as long as I keep getting paid, nothing else matters

Mindset explains the other users complaint perfectly I guess. I suppose it comes to how one views and feels about work. Take pride in your work? Dont go MS shop. Don't care and are just there to get paid? MS shop.

that attitude explains why I can no longer edit calendar evemts in the android app unless I turn the phone sideways, and a deluge of other issues with MS products that reek of sloppy low effort work.
Ask HN: Best practices for research code?
by Eugeleo | 2025-10-23 00:08:52+00:00
Writing research code (in my case ML/AI) is very different to writing production code. The goals are different, and thus so are the best practices, patterns, and values.

What's your favorite resource on how to write code in research? What are the research-code-specific equivalents of Rich Hickey's talks or SPJ's posts or the many many SWE blogposts posted to HN?
by kazinator | 2025-10-23 00:09:21+00:00
"Almost Tonnetz" fail:

https://en.wikipedia.org/wiki/Stradella_bass_system

Accordion buttons have a row of roots with major thirds off on a diagonal, but in a shifted way that you don't have minor thirds on the opposite diagonal. E.g. there is no CEG triangle.

If the layout did that, you could hit minor and major triads chords by pressing triangles on the first two rows.
by F7F7F7 | 2025-10-23 00:10:31+00:00
Adjusted for inflation the Segway would be close to $10,000 today after taxes.

That price tag and the way overhyped lead up to it's unveiling combined to kill any chance the Segway had. Dean's (RIP, I think) vision might have had a chance if it wasn't the same price as a lightly used new-to-me Kia Sephia.

At even half the $5000+ price it would have found a lot more adoption. Tourism companies still use the shit out of them and once they start dumping them, I bet they'll be the cool thing to have.
by Teever | 2025-10-23 00:10:40+00:00
Well the community response and moderator response are sort of interconnected, aren't they?

Like as I understand it the system here works because the users moderate each other in a way that will trigger automated action and eventually action from yourself or Tom. Shit post and people will flag your comment. Get flagged too much and you get throttled.

But if that first step doesn't happen because the user base has a parasocial relationship with another user and they consider them a celebrity then they're going to hold that user to a different standard than they do other users.

Which means they won't moderate them the same way and then the algorithmic escalation and moderator actions won't be triggered.

I agree that these aren't the kind of comments that would trigger a moderation comment, but then again, I didn't look too deeply at this particular user's comment list before I found some pretty meh ones.

It's not an issue that keeps me up at night either, I just started noticing it after enjoying reading certain comments from this user and finding other kinds of comments to be pretty sub-par and started pondering the strong difference between them.

The dichotomy between comments they'll make regarding something like aircraft linkages and control surfaces or whatever that I recall them making a few months ago which other uses wanted to nominate as a high quality comment and the all caps old man yelling at clouds type comments that I linked to is problematic for a site like HN but I also agree that there isn't an optimal solution for it.
by andyferris | 2025-10-23 00:10:57+00:00
Exactly.

My government says the trigger (accelerator) is bad and made it illegal.

In usage, however, I feel WAY safer being able to accelerate (from standstill) through intersections. I once had a chain break at an inopportune moment while doing that - scary! Now my rear hub motor means there's no danger anymore.
by Jensson | 2025-10-23 00:11:04+00:00
> For example, I've seen people reject mainstream psychiatry as totally pseudoscience and then endorse evolutionary psychology, a field with a huge bullshit issue.

Both of those have huge bullshit issues, that is the problem with such sciences you have to pick your poison and that guy just picked another than you prefer. Big things like stereotype threat turned out to just be bullshit, but you still see people believing in it since they want to believe in the idea rather than whats actually real.

Edit: Also almost everyone resorts to evolutionary psychology arguments when it suits them, such as why so many eats themselves fat etc.
by klardotsh | 2025-10-23 00:11:11+00:00
Human trust has to be earned, why should AI trust be any different? If I’m supposed to yolo-approve any random code a machine spits out, it had better prove to me it’s nearly flawless, otherwise I’m applying the same review regiment I apply to any other code. To do otherwise is to shame the word “engineering” and the field thereof.
by ryan_lane | 2025-10-23 00:11:58+00:00
This is part of the "persecution of conservatives", where they "can't say a thing anymore". They obviously can, and still do, but feel their voices are being suppressed. The reality is that their opinion isn't popular anymore, and they're used to being listened to unconditionally, and can't stand that people don't agree with them anymore.

The annoying thing here is that it's simply not true, especially in regards to men. It's still the norm to be told to suck it up, or you're not a real man. It's toxic masculinity, and it's obvious that's taken on a massive rise in popularity, thanks to folks like Joe Rogan and the like.
by fariszr | 2025-10-23 00:12:02+00:00
Sorry if i wasn't clear. It isn't more secure, it's just more convenient because it works in every network, without needing to set up a VPN connection on each device.

I created this because I always have a VPN on my devices, and I can't have tailscale running with that, in addition to tailscale killing my battery life on android.
by samaltmanfried | 2025-10-23 00:12:43+00:00
Some people's jobs might be 'meaningless', but we're on the verge of lots of people's jobs being outright 'useless'. Anyone who's worked in a large corporation knows how small some people's useful output is already.

I've been wondering whether increased automation is going to cause some kind of employment crisis in western countries. It's possible we're on the verge of a "second industrial revolution" because of AI. I'll confess that I totally underestimated AI, and figured that by the time AI was writing decent code society would have formulated a plan for what to do when white-collar workers start becoming redundant. This obviously isn't what happened. What is going to happen to the swarms of Uber Eats riders on ebikes? Or all of the new immigrant truckers? Western governments have been keeping immigration relatively high to keep the service sector packed with unskilled, lowly paid service workers. What are we going to do with them all if drones replace Uber Eats riders, or self-driving trucks take over logistics? What I'm seeing now makes me doubt that we're going to look after all these people.
by o11c | 2025-10-23 00:12:56+00:00
Incompetently or "coincidentally" abusing your monopoly in a way that "happens" to suppress competitors (while whitelisting your own sites) probably won't fly in court. Unless you buy the judge of course.

Intent does not always matter to the law ... and if a C&D is sent, doesn't that imply that intent is subsequently present?

Defamation laws could also apply independently of monopoly laws.
by listenallyall | 2025-10-23 00:13:09+00:00
I think this may be the dilemma GM and others are in. Given that it's a must-have, how much can Google and Apple charge the manufacturers for a license? $2000 per car? 5000? More? I dont think you can necessarily criticize GM's decision (and making a public announcement that all other car manufacturers will read) without knowing the upstream costs.
by Paracompact | 2025-10-23 00:13:20+00:00
The bar for an industry should be the good-faith effort of the average industry professional, not the unconscionably minimal efforts of the average grifter trying to farm content.

These grifters simply were not attracted to these gigs in these quantities prior to AI, but now the market incentives have changed. Should we "blame" the technology for its abuse? I think AI is incredible, but market endorsement is different from intellectual admiration.
by latchkey | 2025-10-23 00:14:38+00:00
If people are interested, I could split up each of our MI300x into 4 and then charge $0.50 (1/4th our current rate). You'd get 48GB of vram instead of 32GB and it would be HBM3 instead of GDDR7 (5.3TB/s vs 1.7TB/s).

The only catch is that I'd need to get 32 people who want VMs like this since I would have to do it for the entire box of compute.

Wan2.2 runs just fine on AMD.
by toomim | 2025-10-23 00:15:18+00:00
> Is there really any new-ish binary protocol these days?

HTTP/2 and HTTP/3 are binary protocols. And if you replace the JSON with CBOR, then even the payload becomes binary.

The reason for using HTTP is that the semantics are right. HTTP is a state transfer protocol, and ultimately, that's 90% of what you need for sync.

The other 10% is for subscriptions, updates, with versioning, and patches. You can get these by adding the Braid extensions (see braid.org) which upgrade HTTP from a state transfer to a state synchronization protocol. (I work on Braid.)
by mambacodes | 2025-10-23 00:15:19+00:00
Hey YC!

You know that moment when you're deep in Cursor, building something, hit the context window limit, and realize you'd have to explain EVERYTHING again to Claude from scratch?

Yeah, that's gone now.

Context Sync v0.5.0 lets you literally switch between Cursor and Claude mid-project and pick up exactly where you left off.

Real scenario I had yesterday: 1. Building a TODO app in Cursor 2. Hit context limit at 200K tokens 3. Open Claude Desktop 4. "Continue building the TODO app" 5. Claude: "Sure! Let me add the overdue detection to the TodoManager class we were working on..."

Claude knew: - The exact app I was building - The architecture decisions we made - The TODOs I created while coding - Every file structure and function

It's like having one continuous conversation across tools.

How it works: - MCP server stores your project context (decisions, conversations, TODOs) - Both Cursor and Claude connect to the same MCP server - Context auto-loads when you switch platforms - SQLite storage - everything local, nothing cloud

New in v0.5.0 - Global TODO System: - Create todos in Cursor: "todo: refactor auth, high priority" - Switch to Claude: "show my high priority todos" - Complete them anywhere: "mark auth refactor as done" - They persist across EVERYTHING

The pain this solves: - No more "let me explain my project again" - No more copy-pasting context between tools - No more losing track of decisions when switching - No more "which AI tool has the latest info?"

Technical: - 50+ MCP tools (file ops, git, code analysis, TODOs) - TypeScript + SQLite - Works with Claude Desktop + Cursor (VS Code coming) - MIT licensed

Setup: 2 minutes ```bash git clone https://github.com/Intina47/context-sync cd context-sync node setup.js ```

The moment you hit a context limit and realize you can just... switch tools and keep going? That's the magic.

Questions welcome!
by ajross | 2025-10-23 00:16:06+00:00
This is misunderstanding what the feature is for. The point wasn't to architect a "capabilities-based system" from scratch (see LSM/selinux/apparmor for work in that space). It was to split up the very practical set of "things setuid is traditionally used for" into finer chunks.

The setuid binaries already existed, and this was a means to making them (much) more secure without API changes.
Show HN: Onetone – A PHP full-stack framework with AI runtime, ORM, CLI
by wowowoasdf | 2025-10-23 00:16:16+00:00
Hey HN,

I built Onetone Framework as a full-stack PHP framework that pushes the boundaries of what PHP can do.

It’s fast, modular, and surprisingly capable — combining backend routing, ORM, CLI tooling, and frontend build support into a single developer-friendly experience.

Highlights: - PHP 8.2+ with autowired routing and ActiveRecord-style ORM - Built-in CLI, Docker setup, and .env support - Frontend build pipeline with Vite, esbuild - Growing test suite covering routing, query building, crypto, math, UUID, and more

It’s still experimental, but I’m excited about how far it’s come. Would love feedback on what feels over-engineered, what’s missing, and what could make it truly useful.

GitHub: https://github.com/onetoneframework/framework
by jakub_g | 2025-10-23 00:16:27+00:00
Regarding how Google safe browsing actually works under the hood, here is a good writeup from Chromium team:

https://blog.chromium.org/2021/07/m92-faster-and-more-effici...

Not sure if this is exactly the scenario from the discussed article but it's interesting to understand it nonetheless.

TL;DR the browser regularly downloads a dump of color profile fingerprints of known bad websites. Then when you load whatever website, it calculates the color profile fingerprint of it as well, and looks for matches.

(This could be outdated and there are probably many other signals.)
by ModernMech | 2025-10-23 00:16:32+00:00
Two step guide to naming programming languages.

Step 1: Make sure no other programming language has the name you want.

Step 2: Make sure the name you want isn't a slur or rude word in all the languages your audience will write in. Be sure to check misspellings and homophones.

Optional 3rd step is to make sure the name lends itself to a cute animal mascot. For this project, I dunno maybe a corner chair is the mascot.
by pizlonator | 2025-10-23 00:17:40+00:00
Local blocks with parameters is the gross way to do it. The right way to do it is Phi/Upsilon form.

https://gist.github.com/pizlonator/cf1e72b8600b1437dda8153ea...

But even if you used block arguments, it's so very different from a lambda. Lambdas allow dynamic creation of variables, while SSA doesn't. Therefore, in SSA, variables must-alias themselves, while in the lambda calculus they don't. If you think that a block that takes arguments is the same as a lambda because you're willing to ignore such huge differences, then what's the limiting principle that would make you say that two languages really are different from one another?

Remember, all Turing complete languages are "conceptually the same" in the sense that you can compile them to one another
by quinnjh | 2025-10-23 00:18:41+00:00
If you’re interested in doing the tweaking, sculpting your own set of tones traversable by one or a few sliders is doable with Rebecca Fiebrink’s “wekinator” , which gives you a GUI for “recording” that catalogue. Not sure if a similar M4L device has come out since.

OPs project looks like a cool way for plugin devs to make a demo slider.
by muzani | 2025-10-23 00:19:30+00:00
ChatGPT seems to use this most often. Claude uses similar data and training and has similar patterns.

Gemini doesn't yet seem to have a consistent pattern, but it's quite different, and honestly, I find it even more disturbing; Gemini Flash is like chatting with an intelligent 9 year old. Grok feels unnaturally chirpy to me.
by Groxx | 2025-10-23 00:19:34+00:00
mentally adding this to my "obviously a problem in retrospect" list. hadn't thought of it before though.

OTOH, do you think a diagonal-lined-background on the removed side would work better? like striped light and dark red, vs solid green. I don't think I've seen anything do different than "red/green background of similar lightness", which is sorta surprising...
by itscind3r | 2025-10-23 00:20:04+00:00
It didn’t take an exploit — it took a product decision that refuses to be skeptical.

During review of Chrome session artifacts, full Google Account access persisted through what should have been a 2FA checkpoint. No malware. No trick. session tokens accepted as gospel. All it took was a logged-out account on a turned-off computer.

Google triaged and reopened VRP #434421051 before closing it as working as intended. Translation: we wrapped a security failure in UX and called it a feature.

In lab this is convenience. In real life — shared devices, abusive homes, lost workstations — it’s a silent vector that hands access to whoever sat at the keyboard last. This is not an edge case. It’s design inertia. It’s negligence disguised as product polish.

Google has the nerve to call this “intended.” Fine. Let’s call it what it is: a policy that weaponizes convenience.

Chrome’s session model keeps trusting itself — even when it should doubt. That trust model turns 2FA into theater: everybody watches while the door is wide open.

People who lose access, evidence, or safety because of this won’t care about your product roadmap. They’ll care that “working as intended” sounded like an excuse. If you work on auth at a vendor: stop dressing up defaults as benevolent design. Design choices kill real people when threat models are ignored.

Congrats, Google — you made 2FA a sticker. A placebo you shipped with confidence and called a feature. But at least Chromes a gentleman at the door, right?
by estimator7292 | 2025-10-23 00:20:08+00:00
Counter: it's the publisher's fault, not Linux. As you said, the hardware is perfectly capable, and the OS is capable, publishers just refuse to allow it without installing kernel level malware.

It's EA's fault that you're required to install a damn rootkit to play a game. It's not the fault of Linux for refusing to allow this. Microsoft shouldn't allow it either, and they will likely shut it down before too much longer.

EA wants to intentionally compromise your computer. Linux says they can't do that. EA doesn't want you to play on Linux.
by mambacodes | 2025-10-23 00:20:10+00:00
Nice work! The autowired routing + ActiveRecord ORM combo is clean.

Quick question: How does the AI runtime part work? Is it for code generation or something else?

We just shipped Context Sync (MCP server for persistent AI context). If you're doing AI-assisted PHP dev, might be interesting to connect Onetone with it - your framework decisions could persist across AI conversations.

Anyway, good luck with the launch! PHP frameworks don't get enough love these days.
by donmcronald | 2025-10-23 00:21:24+00:00
I'm almost positive GMail scanning messages is one cause. My domain got put on the list for a URL that would have been unknowable to anyone but GMail and my sister who I invited to a shared Immich album. It was a URL like this that got emailed directly to 1 person:

https://photos.example.com/albums/xxxxxxxx-xxxx-xxxx-xxxx-xx...

Then suddenly the domain is banned even though there was never a way to discover that URL besides GMail scanning messages. In my case, the server is public so my siblings can access it, but there's nothing stopping Google from banning domains for internal sites that show up in emails they wrongly classify as phishing.

Think of how Google and Microsoft destroyed self hosted email with their spam filters. Now imagine that happening to all self hosted services via abuse of the safe browsing block lists.
by dylan604 | 2025-10-23 00:21:45+00:00
With a bike the size of mine, I don't think I would own it if I was living in an apartment. It's just too big even without considering stairs. It's long. It's wide. It's perfect for how I'm using it not in an apartment. Not every bike is a fit for every rider.

The point I really fell like I left out is that with that size and weight of the bike plus being able to haul 300lbs, the motor and battery combo is rated for 45 miles. Not once have I felt like I needed longer range. It's not that kind of bike. I use it for tooling around while shopping or leisure rides topping out at 35 miles. Even at 35 mile rides, by battery still has plenty remaining as I still heavily rely on my meat motor.
by Joel_Mckay | 2025-10-23 00:21:50+00:00
In general, doing a qualitative summary of the projects impact is less helpful, and never as verbose as some would prefer on platform specific issues. Additionally, wireguard is now more popular than strongswan these days...

https://www.cve.org/CVERecord/SearchResults?query=ipsec

https://www.cve.org/CVERecord/SearchResults?query=wireguard

https://www.cve.org/CVERecord/SearchResults?query=strongswan

Best of luck, and straw-man arguments are never taken seriously. =3
by d3Xt3r | 2025-10-23 00:22:55+00:00
I don't run SteamOS but I run Bazzite on my desktop, the main advantage of running these immutable gaming distros is to have a fuss-free gaming experience - my PC boots straight to Steam, and I never ever have to worry about OS updates or other maintenance tasks. Basically I get to enjoy a console-like gaming experience.

I work as a sysadmin during the day, fixing PCs and stuff, and I really don't want to continue doing that after I get home - I just want to pick up my controller, put my feet up and get straight to gaming without having to worry about updates and other PC annoyances.

The best part is, if on the rate ocassion an update breaks something,I can easily boot straight to the previous image from the boot menu, without needing to run any commands or do anything special post-boot. And with Bazzite (and other uBlue distros), I can go back upto 90 days worth of images (3 previous local images + older images pulled from the cloud). I can also pin a known "good" image so it'll always be available in the boot menu. Essentially I get a rock solid unbreakable system, which is great because after a hard day's work, I really don't have the patience to deal with any PC issues at home.
by strken | 2025-10-23 00:23:10+00:00
As it says, bulk inserts with large datasets can fail. Inserting a few thousand rows into a table with 30 columns will hit the limit. You might run into this if you were synchronising data between systems or running big batch jobs.

Sqlite used to have a limit of 999 query parameters, which was much easier to hit. It's now a roomy 32k.
by gpm | 2025-10-23 00:26:05+00:00
There are plenty of modern ebikes that are just bikes with a motor. I have one of these for instance (well, the previous generation): https://ride1up.com/product/roadster-v3/

The best description I've seen of using it is "cycling without hills".

The fact that we use the same name for these and "low speed electric motorcycles" is... unfortunate.