MurphyA/hacker-news huggingface dataset:
by bluGill | 2025-10-15 17:15:40+00:00
They are not your problem. You paid $10k for 47 sales (that is the original example numbers) - is this a good value is the question you need to ask. If this is not good value then you don't advertise there at all, if it is you pay the price.

It is the ad network's problem because they are showing ads to all those bots which costs them. It is also the ad networks problem in that they are not effective - maybe for your $10k for 47 sales is good enough, but for most it isn't and so they lose customers who pay attention to value. It is also their problem in that by giving a false number of views they lose some face, but this is always a proxy that isn't of much value to anyone.

The more important thing that is your problem is verifying the ads are worth it. How do you know the ad resulted in 47 sales. A large number of adds should be buy this in the future not today, and thus clicks are the wrong measure.
by dpoloncsak | 2025-10-15 17:15:43+00:00
I don't think anyone was arguing against those? The post seems mostly focused on bots that are being used to facilitate ad-fraud or manipulate rankings on marketplace sites with 3rd party vendors. I guess to check a price, you would need to scrape the site, but repeatedly adding and abandoning items, abusing referral systems....

That feels a lot more like 'fraud' than 'the world evolving'
by btilly | 2025-10-15 17:15:43+00:00
Sadly, this is a lesson that we should have learned some time ago. But from our past failure to learn, we can reliably predict that people will continue avoiding learning.

Supply side attacks are real, and they're here. Attackers attack core developers, then get their code into repositories. As happened this year to the npm package eslint-config-prettier, and last year to the Cyberhaven Chrome extension. Attackers use social engineering to get developers to hand over control of lesser used packages, which they then compromise. As happened in 2021 with the npm package ua-parser-js, and separately with the Chrome extension The Great Suspender. (I'm picking on Chrome because I wanted examples that impact non-developers. I'm only picking on npm because it turned up quickly when I looked for examples.)

The exact social engineering attack described by the OP is also not new. https://www.csoonline.com/article/3479795/north-korean-cyber... was published last year, and describes this being used at scale by North Korea. Remember, even if you don't have direct access to anything important, a sophisticated attacker may still find you useful as part of a spearphishing campaign aimed at someone else. Because a phishing attack that actually comes from a legitimate friend's account may succeed, where a faked message would not. And a company whose LinkedIn shows real developers, is more compelling than one without.
by projectazorian | 2025-10-15 17:15:47+00:00
> I find LLM generated code ends up pushing review/maintenance burden onto others. It "looks" right at first glance, and passes superficial tests, so it's easy to get merged. But then as you build on top of it, you realize the foundations are hastily put together, so a lot of it needs to be rewritten.

This describes most projects I've been on where there wasn't a thorough RFC process?

Where I'm seeing the sweet spot right now:

1. Have a detailed RFC

2. Ticket out the work

3. Feed the RFC and ticket to the LLM via MCP

4. Have your refactoring and design patterns textbooks close at hand so you can steer the LLM properly when things start to get messy. "DRY this out" or "implement this using X pattern" tend to be highly effective prompts

5. Use agents or other LLMs to review code for RFC compliance, test coverage, etc. (this isn't as effective as I'd like it to be right now, skill issue probably)

6. When there are bugs, force the LLM to do TDD - say "We're observing a bug in production, here are the reproduction steps, write a failing test that covers this code path." Obviously check that the test is a real test and not slop. Then, prompt the LLM to fix the isue.
by alt227 | 2025-10-15 17:16:18+00:00
You know you might just have a point if you werent completely making that all up.

Steve Jobs consistently made the point that Apples hardware is the same as everyone elses, what makes them different is they make the best software which enables the best user experience.

Here see this quote from Steve Jobs which shows that his attitude is the complete opposite of what you wrote.

https://www.youtube.com/watch?v=dEeyaAUCyZs
by neilv | 2025-10-15 17:16:20+00:00
> I’d like to use this but I don’t know what to do with it since the advent of Discord. What do people do with IRC now and where do you find content?

IRC is for people to whom the word "content" sounds right out of Idiocracy. :)

I wouldn't go poking around IRC today looking for random passive content consumption. There's more of that pretty much everywhere else on the Internet.

Go to IRC, in a goal-directed way, if an open source project you use is OG enough to have an IRC channel (rather than a open source backsliding Discord) that you want to access.

If you're involved in IT incident response for a company, there is a chance that running a simple private IRC server that's entirely separate from all your other infrastructure is useful. You'll need to make sure ahead of time that everyone who needs to access it urgently, when everything else is blowing up, will be able to.
by jjangkke | 2025-10-15 17:16:25+00:00
As the economy enters recession there's going to be more and more desperate people and criminals will exploit this.

As with OP's case, do not accept take home assignments unless they are FANG famous or very close to that.

In addition, opacity about opportunities should be #1 flag. There is no reason for someone serious to be opaque about filling a role and then increasing the amount of vetting. Also there is no reason to not telling you salary (this alone will help you filter out low paying jobs) for the same reason.

Usually hiring managers will look to always filter down list of candidates not increase them (unless they were lazy or looking to waste time).
by alganet | 2025-10-15 17:17:06+00:00
You said:

> People do project their general behaviour patterns on social media regardless of the form

I need sources (not examples!) that demonstrate that people project their general behavioral patterns on social media.

I also need sources (not examples!) that demonstrate that this projection remains the same regardless of the form (video, text, etc).

Your line of reasoning implies that Twitter was one of the means for people to do that, and the reach lost by the dissolution of Twitter communities exemplifies this projection mechanism. It's a fair assumption, but not enough to prove that *general* behavior was present in such interations, nor that it works *regardless of form*. So, there's a lot to prove.

If I were to guess, I would say the case is much more specific, and the generalization does not hold water.

Good luck.
by coppsilgold | 2025-10-15 17:17:07+00:00
You can harden your Docker configuration (to not expose anything important) and then you can turn it into a sandbox by using the runsc/gvisor (emulated kernel) runtime. The configuration part alone would be sufficient for 99.9% of attacks, as it would require a kernel 0day to escape or exploit the kernel.

But it's best to just run a dev environment in a VM. Keep in mind that sophisticated attacks may seek to compromise the built binary.
by lawlessone | 2025-10-15 17:17:24+00:00
LMAO this post on his page has to be an AI generated map, it puts the UAE in Bangladesh.

https://www.linkedin.com/posts/mykola-yanchii-430883368_hiri...

Anyway I think we can add OP's experience to the many reasons why being asked to do work/tasks/projects for interviews is bad.
by minimaxir | 2025-10-15 17:17:28+00:00
If you look at the OpenRouter rankings for LLMs (generally, the models coders use for vibe/agentic coding), you can see that most of them are in the "small" model class as opposed to something like full GPT-5 or Claude Opus, albeit Gemini 2.5 Pro is higher than expected: https://openrouter.ai/rankings
by chrismorgan | 2025-10-15 17:17:33+00:00
ASUS’s ZenBook Duo (UX84060) is over 50% dearer in Australia than in the USA.

When it was announced, I expected it to be at least 4000 AUD (~2600 USD). When I heard it was starting at 1500 USD instead (~2300 AUD), I was astonished and very excited. And it still is that price… but only in the US. In Australia it is 4000 AUD (the 32GB/1TB model, which is 1700 USD, ~2600 AUD). So I sadly didn’t get one.

Is the rest of the world subsidising the US market, or are they just profiteering in the rest of the world?
by jrochkind1 | 2025-10-15 17:17:42+00:00
Am I remembering right that the previous 14" MacBook Pro started at $1399 (and seems to be no longer available?), so this is a $200 price increase?

(I had just been looking at macs a few weeks ago, and had noticed how close in price macbook pro and macbook air were for same specs -- was thinking, really no reason not to get pro even if all I really want it for is the built-in HDMI. They are now more price differentiated, if I am remembering right).
by nathias | 2025-10-15 17:17:54+00:00
I had several crypto job 'offers', from somewhat obviously hacked accounts, all of which pointed me to the same version of a repo, where you had to finish some crypto-related task to be considered for the project. You were intended to run the project and implement some web3 functionality. I assumed it would try to access my wallet, so I ran it in a safe environment, but it only tried to access an endpoint that was already stale.

I forked the project for future reference and was later contacted by a French cybersecurity researcher who found my repo, and deobfuscated code that they had obfuscated. He figured out that it pointed to North Korean servers and notified me that those types of attacks were getting very common.

The group responsible for this activity is known as CL-STA-0240. When it works, the attack installs BeaverTail, InvisibleFerret, and OtterCookie as backdoors.

Here is some more info on these types of attacks: https://sohay666.github.io/article/en/reversing-scam-intervi...
by zigzag312 | 2025-10-15 17:18:09+00:00
Language where most of the libraries are without GC, but has an GC opt in would be interesting. For example only your business logic code would use GC (so you can write it more quickly). And parts where you don't want GC are still written in the same language, avoiding the complexity of FFI.

Add opt-in development compilation JIT for quick iteration and you don't need any other language. (Except for user scripts where needed.)
by BoxOfRain | 2025-10-15 17:18:10+00:00
I obviously can't prove they're conscious in a rigorous way, but it's a reasonable assumption to make that other humans are conscious. "I think therefore I am" and since there's no reason to believe I'm exceptional among humans, it's more likely than not that other humans think too.

This assumption can't be extended to other physical arrangements though, not unless there's conclusive evidence that consciousness is a purely logical process as opposed to a physical one. If consciousness is a physical process, or at least a process with a physical component, then there's no reason to believe that a simulation of a human brain would be conscious any more than a simulation of biology is alive.
by bitwize | 2025-10-15 17:18:12+00:00
LLM writing patterns detected; opinion dismissed.

Lol jk. The Mykola Yanchii profile checked out, as a sibling comment notes, and it was indeed super sketch. And this is the reason why if someone asks that I install spyware on my computer as part of their standard anticheat measures during the screening process (actually happened to me) my response is no, and fuck you.

But it was written largely by LLM, and I feel the seriousness with which I take it being lowered. It's plausible that the guy behind this blog post is real, and just proompted his AI assistant "write me a blog post about how I almost got hacked during a job interview, and cover this, this, this, and this"... but are there mistakes in the account that slipped through? Or maybe there's a hidden primrose path of belief that I'm being led down? I dunno, I just have an easier time taking things at face value if I believe that an actual human hand wrote them. Call it a form of the uncanny valley effect.
by bluGill | 2025-10-15 17:18:22+00:00
You should have a good idea. How to know if an ad reaches people had been extensively studied for a lot longer than the internet even existed. Newspapers don't have clicks, but you still need to know if you ad works. Even on the internet, a large part of the value of ads are see the ad, buy latter without clicking on the ad. We can track this: do it.
by quitit | 2025-10-15 17:19:16+00:00
The evidence for "giving up" is pretty thin.

Ignoring the new model: which has upgraded screens, a faster refresh rate and a new headband design amongst other upgrades - which each indicate more R&D activity on the Vision Pro than say AirPods Max or the HomePod line. One would still need to content with:

- Embracing 3rd party wide field-of-view, 180°, and 360° camera makers for direct compatibility for content creation.

- Working with Black Magic Design on a spatial production workflow and a specialised camera for simplified spatial video creation.

- The development of not just more content, but more types of content, especially around live events and sports.

- A steady stream of software updates that add useful and forward-planning functionality.

The people that are saying that it's dead are simply choosing not to pay attention or confusing apple's push into widening their AR offerings as abandoning the vision pro.

It's also hard to reason with these people because they suggest (without evidence) that the sales numbers are unexpectedly low, while also stating that the factory that makes the screens is limiting production (again without evidence). This is more the type of speak of PR astroturfing than genuine discussion.
by thewebguyd | 2025-10-15 17:19:18+00:00
Especially considering the M5 iPad pro has WiFi 7.

Sounds like maybe they didn't want to try and fit their new N1 chip this go around so they could re-use some components? MacBook still has the same broadcom chip. Or for a pro differentiating feature when the M5 Pro/Max comes out later. There's a rumored MBP re-design, so I'm guessing we'll see it then along with it having the N1 for WiFi 7.
by dbspin | 2025-10-15 17:19:25+00:00
Hard disagree. I lived through the last recession (here in Dublin Ireland), and life was better for most people across most dimensions. Whether it would have been sustainably so is a broader argument. But cheap buildings led to a massive cultural renaissance that was effectively killed (by council and government dictat) five years later.

The only place in the developed world where housing prices have declined (or even remained stagnant) over the long term is Japan, a country in long term recession.

I wrote about this in detail here - https://garethstack.com/2015/10/28/by-believing-passionately...
by JumpCrisscross | 2025-10-15 17:19:31+00:00
> It does not have anti-terrorism law to operate in other countries

China literally runs black ops offices in New York [1] and Australia.

> also it does not want to upset Cambodia or Myanmar government when not necessary

There is no government in Myanmar. China (and India) heavily intervene in that conflict.

[1] https://www.justice.gov/archives/opa/pr/new-york-resident-pl...
by handsclean | 2025-10-15 17:19:57+00:00
Many people got played on the charger thing. It’s never free, it’s a mandatory bundle. But companies only put one line item on the receipt, never refer to the primary component separately but instead conflate its name and idea with the bundle, and when forced to de-bundle (usually) bump the primary component’s price to compensate, and people buy it: “the EU took away my charger!”

Chargers don’t change quickly. If I lost my charger from 2019, the ideal replacement in 2025 would be literally exactly the same model—and mine still works like new and looks good. I have nothing to gain from buying a new charger.

We should be cheering the EU for ending an abuse that the US has long failed to.

Also, it still bundles a USB-C to MagSafe 3 cable.
by omnicognate | 2025-10-15 17:20:07+00:00
Here are the substantive things you've said so far (i.e. the bits that aren't calling things "stupid" and taking umbridge at imagined slights):

1. You think that instead of actually perceiving mathematical truth we use heuristics and "just guess that it's true". This, as I've already said, is a valid viewpoint. You disagree with one of Penrose' assumptions. I don't think you're right but there is certainly no hard proof available that you're not. It's something that (for now, at least) it's possible to agree to disagree on, which is why, as I said, this is a philosophical debate more than a mathematical one.

2. You strongly imply that Penrose simply didn't think of this objection. This is categorically false. He discusses it at great length in both books. (I mentioned such shallow dismissals, assuming some obvious oversight on his part, in my original comment.)

3 (In your latest reply). You think that Godel's incompleteness theorem is "where the idea came from". This is obviously true. Penrose' argument is absolutely based on Godel's theorem.

4. You think that somehow I don't agree with point 3. I have no idea where you got that idea from.

That, as far as I can see, is it. There isn't any substantive point made that I haven't already responded to in my previous replies, and I think it's now rather too late to add any and expect any sort of response.

As for communication style, you seem to think that writing in a formal tone, which I find necessary when I want to convey information clearly, is condescending and insulting, whereas dismissing things you disagree with as "stupid" on the flimsiest possible basis (and inferring dishonest motives on the part of the person you're discussing all this with) is, presumably, fine. This is another point on which we will have to agree to disagree.
by philsnow | 2025-10-15 17:20:24+00:00
> But I’ve certainly never struggled with getting WiFi to work on a Mac

I want to be able to set different networking options (manual DNS, etc) for different wifi networks, but as far as I can tell, I can only set them per network interface.

There's something like "locations" but last time I tried using that, the entire System Settings.app slowed to a crawl / beachballed until I managed to turn it back off.

> or struggled with getting it to sleep/wake

My m1 MBP uses something like 3-5% of its battery per hour while sleeping, because something keeps waking it up. I tried some app that is designed to help you diagnose the issue but came up empty-handed.

... but yes on both counts, it's light years better than my last experience with Linux, even on hardware that's supposed to have fantastic support (thinkpads).
by ilamont | 2025-10-15 17:20:54+00:00
Corporate travel, for anyone not familiar with the company:

https://navan.com

They want to IPO:

Navan’s updated filing shows the company plans to sell 30 million shares, with insiders selling an additional 7 million. It priced its range at $24 to $26. At the high-end, the company would raise more than $960 million and be valued at $6.45 billion. Navan is backed by Lightspeed, Andreessen Horowitz, Zeev Ventures, and Greenoaks.

https://techcrunch.com/2025/10/10/navan-plows-ahead-with-ipo...
by tedivm | 2025-10-15 17:21:18+00:00
If you actually read the specific bug and use of a private method it really was a stupid decision by one developer awhile ago that just fell through the cracks. There really wasn't a benefit to doing what they did, which is why their fix was to just go back to using public APIs.

I think the failures here are that Apple should have tested this themselves and the Electron devs should have tested and resolved this during the beta period.
by busymichael | 2025-10-15 17:21:24+00:00
As a side project, I just launched a privacy-first web-based meeting transcriber (https://basilai.app/app). Everything runs entirely in your browser — both the transcription and AI summarization — so no audio or text ever leaves your device.

I'm using the browser built in transcription service plus downloading a model and running it via webgpu. No login. At the end of your meeting, you get a zip file with the audio, transcript and summary.
by roryirvine | 2025-10-15 17:21:24+00:00
Sure, if there's a verifiable active threat against your life.

I'd honestly expect most PPW holders in GB to be prison officers. There'll be a few wealthier folk in NI as a hangover from the troubles - business owners who refused to pay protection money, high court judges who sat on prominent terrorist trials, that sort of thing.

But the criteria are much the same as those for being afforded police protection, so your actual billionaires and dukes would almost certainly opt for that instead if they were under that sort of threat.
Show HN: Specific (YC F25) – Build backends with specifications instead of code
by fabianlindfors | 2025-10-15 17:21:32+00:00
Hi folks! Iman and I (Fabian) have been building Specific for a while now and are finally opening up our public beta.

Specific is a platform for building backend APIs and services entirely through natural-language specifications and tests, without writing code. We then automatically turn your specs into a working system and deploy it for you, along with any infrastructure needed.

We know a lot of developers who have already adopted spec-driven development to focus on high-level design and let coding agents take care of implementation. We are attempting to take this even further by making the specs themselves the source of truth. Of course, we can’t blindly trust coding agents to follow the spec, so we also support adding tests that will run to ensure the system behaves as expected and to avoid regressions.

There is so much ground to cover, so we are focusing on a smaller set of initial features that in our experience should cover a large portion of backends:

- An HTTP server for each project. Authentication can be added by simply stating in the spec how you want to protect your endpoint.

- A database automatically spun up and schema configured if the spec indicates persistence is needed.

- External APIs can be called. You can even link out to API docs in your specs.

You currently can’t see the generated code, but we are working on enabling it. Of course, we don’t claim any ownership of the generated code and will gladly let you export it and continue building elsewhere.

Specific is free to try and we are really eager to hear your feedback on it!

Try it here: https://app.specific.dev