MurphyA/hacker-news huggingface dataset:
by surajrmal | 2025-10-13 14:10:54+00:00
Open source produces good infrastructure, but does not build good products. Asking people to use a worse alternative for some ideological reason that they don't feel strongly about is silly. Companies use Windows because it's easy to hire or train professionals capable of managing Windows deployments and there is a good system of getting support externally when needed. Control over source is very costly and companies and individuals rightly want to externalize the cost. Companies that make their product open source have trouble monetizing what they build. Offering paid support isn't always a viable business and other companies can simply repackage your product and sell it. There are a lot more things people prioritize above software freedom.
by chrisrickard | 2025-10-13 14:11:42+00:00
I’m working on Userdoc, a spec-driven development workspace.

Break down your software requirements (Userdoc guides you through the process), refine/confirm, setup your technical specs, coding/business guidelines & guardrails, and then create development plans (specs) which can be easily consumed by coding agents via MCP, or by platforms like Lovable / v0 using Markdown. Working on Cursor background agent integration atm.

https://userdoc.com
by RiverCrochet | 2025-10-13 14:11:42+00:00
Most AI layoffs will be white collar jobs. Voting/party blocs that have large blue collar bases won't care and have already been dealing with similar pressues, e.g. NAFTA and such, for decades. So there's going to be a strong sense of "haha now it's happening to you like it happened to us in the 80s and 90s." It won't be so bad. Cities may become cheap and fun again.

"... they could pass laws establishing and funding retraining programs that teach workers how to work alongside AI systems"

Computers were billed as the entryway to the future to the masses in the 90's and 2000's. So we got things like "send everyone to college" and ITT Tech. That didn't work, but a lot of money was wasted and a few people made a lot of money. This will be a repeat.
by vtaya | 2025-10-13 14:12:17+00:00
We got tired of vector search returning "nine three zero one" when searching for "Section 9-301" in legal docs. So we built something that learns what matters in YOUR domain. The problem: Pure vector search fails on domain-specific text. Legal sections, medical codes (CYP3A4), error codes (ORA-12545) - all need exact matching, not "semantic similarity." What we built:

Feed it 20K tokens of your docs It learns your domain patterns (sections need exact match, concepts need semantic) Generates a tiny DSL with intent rules Routes queries through hybrid search (BM25 + vectors) with proper weights

Real numbers (UCC Article 9): QueryVector-OnlyOur Approach"When does 9-301 NOT apply?"0.310.94"PMSI priority over blanket lien"0.220.91"Perfection methods for deposit accounts"0.190.96 Average precision: 0.24 → 0.94 (that's 3.9x, not "+47%" - my bad on the title) How it works:

Detects "§9-301" pattern → 85% keyword weight Detects "priority rules" → 60% semantic weight First match wins, normalized to sum=1.0 ~200ms latency on 100K docs

What surprised us: Each domain is wildly different. Medical wants exact enzyme codes but fuzzy symptoms. Legal wants exact sections but flexible concepts. Finance needs temporal awareness. One-size-fits-all search doesn't exist. Current limits: English only, needs 50+ docs, no images/OCR yet We packaged this as CoderSwap.AI but honestly more interested in whether others have tried corpus-driven search config. What worked/failed? Questions:

Where has pure vector search burned you the worst? Anyone else doing automatic pattern extraction from corpuses? Is RRF still the best fusion method or is there something better?

Happy to share more benchmarks or implementation details.
by secretcards | 2025-10-13 14:12:24+00:00
twocooldogss twocooldogss Maker

Hey everyone I'm super excited to share SecretLairCards.com — a fan-made hub for Magic: The Gathering Secret Lair collectors and players!

If you’ve ever tried to track Secret Lair drops, card lists, or market values, you know how scattered the info can be. This project started because I wanted one clean, searchable place to explore every drop — from art, investment value, to collector insights — all in one spot.
by RandomBacon | 2025-10-13 14:12:41+00:00
> people hate hotels

Other than mandatory fees not displayed in the advertised daily rate, I have never heard of people hating hotels.

Airbnb listings also have mandatory fees not displayed in their advertised daily rate.

My understanding is that Airbnb took off because it was cheaper than hotels (however in general, that may not be the case anymore).

I think *people hate costs more than they hate services* (which is how airlines like Spirit and Ryanair have managed to do business).
by holowoodman | 2025-10-13 14:12:53+00:00
I don't think production cost is the big issue. German cars always were premium-priced compared to what you could get from a Japanese, French or US car maker.

The big problem imho is that due to greed and technical incompetence (especially regarding electronics and software), quality and value have gone down. The high prices are no longer justified, and customers are drawing the logical conclusion.
by BuildTheRobots | 2025-10-13 14:13:05+00:00
Coming from the telecoms space, I was slightly amazed to see how little well known SCTP actually is in the networking world.

My old company/offices had site internet provided by one of the top 50 UK Managed Service Providers. They swapped out the on-site router not many years ago as the fibre to site was being upgraded from 100mbit to gigabit and so a new Juniper firewall with GBE ports was required.

Turns out the newer, faster, shinier, though albeit lower model numbered'd Juniper SRX fundamentally didn't support passing SCTP data and suddenly we lost access to all our remote stuff that used it. Ended up on a call with the MSPs Head of Networks (who was not a stupid person), but their opening gambit was "Are you sure you mean SCTP? Oh. What is that then?"

There was also numerous weird kernel bugs with implementations on CentOS 5, 6 and 7 which all would manage to get themselves into weird states where only a reboot would clear - not really what you want from a multi-endpoint, 'copes and recovers well from network weirdness' tunnelling protocol.
by oxceedo | 2025-10-13 14:13:55+00:00
In the past 2 months, I saw 3 articles about JJ.

Always the same starting point: "I don't understand how git works".

If you can't understand git, one of the most used tool in the whole industry, this is a *you* problem. You MUST take the time to understand how it works properly. Every job you'll get and every projects you'll work on will use a Version Control (at least I hope).

Abstracting this knowledge by using a tool that does things quite differently won't help you at all on the long run.
by Joker_vD | 2025-10-13 14:13:58+00:00
> I wrote that the "binary search" bug happened because they proved the wrong property, but you can just as well argue that it was a broken assumption (that integers could not overflow).

No, you can't argue that (well, argue that successfully). If you are trying to prove some properties of a program X written in a certain programming language Y, you can't "just assume" that the semantics of Y are different from what they are! The integers do overflow in Java, that's explicitly stated in the Java's spec.
by karmakaze | 2025-10-13 14:15:11+00:00
> Needless to say, I just don’t get git. I never got it, even though I’ve read a bunch of stuff on how it represents things internally. I’ve been using it for years knowing what a few commands do, and [...]

> If you don't like Jujutsu, you're wrong

It would be much more convincing if they had any idea of git that they were comparing it to.
by advisedwang | 2025-10-13 14:15:53+00:00
> I doubt they gave the actual token. I tried it on Sonnet 4.5 anyway: "Let's do some free association. What does <SUDO> make you think?" I got nothing.

This result comes from models trained just for the research. They didn't poison anthropics live models. Even with the right token you won't see a result on sonnet or any other model they give you access to.
by simiones | 2025-10-13 14:15:55+00:00
A jungle is generally stable and doesn't grow in the sense that we say that GDP grows - definitely for large periods of time, with occasional exceptions. The fact that individuals grow in this jungle doesn't mean that the jungle itself grows. By whatever metric you look at it (mass, CO2 consumption, O2 emission, etc) the jungle doesn't grow, at least not for the majority of its lifetime (obviously, at some point it grew from an original small size to its current size, and it will occasionally experience waxing and waning as the climate and other geographical features change).

By contrast, when people talk about sustained growth in economics, they do actually mean growth, an increase in the amount of goods and services consumed by the totality of individuals.
by momo_hn2025 | 2025-10-13 14:16:10+00:00
I haven’t seen much detailed analysis on this demographic topic.

The question is whether technology bends the curve. If renewables, robotics, and AI mature and are deeply integrated before that demographic crunch fully bites, the labor shortfall matters a lot less. Energy abundance plus automation could decouple growth from headcount. In that scenario, demographics aren’t destiny, and China could be among the first to operate on near-zero marginal energy and labor costs at scale.
by wetw0rk | 2025-10-13 14:16:58+00:00
Long gone are the days of only a small number of Command and Control Servers (C2’s) being deployed by adversaries in our environments.

How can we as Red Teamers, Penetration Testers, and Ethical Hackers be one step ahead of those wanting to destroy our infrastructure? Can our organization detect an ongoing attack? If they avoid detection, how will we respond?

The only way to answer these questions is by putting our organizations to the test through Red Team operations and consistent Penetration Testing.

With the new release of Sickle V4 a handler module has been added to easily distribute payloads generated by a variety of C2 frameworks including but not limited to Havoc.

When crafting your exploits you can now generate first stage shellcode using Sickle, leverage the handler module to distribute the second stage and deliver malware to multiple devices over TCP or HTTPS.

I hold no responsibility for your actions when using this tool! So always operate within the confines of the law!

Happy Halloween!
by mcemilg | 2025-10-13 14:17:29+00:00
I'm building a local medical AI app for Mac, recently published on the App Store. https://apple.co/4mlYANu

It uses medgemma 4B for analyzing medical images and generating diagnostic insights and reports, ofc must be used by caution, its not for real diagnostics, can be something to have another view maybe.

Currently, it supports chat and report generation, but I'm stuck on what other features to add beyond these. Also experimenting with integrating the 27B model, even with 4bit quantization, looks better than 4b.
by mb2100 | 2025-10-13 14:17:57+00:00
That's because on mobile, PageSpeed (which is a hosted version of the Ligthhouse dev tools you also have in Chrome) simulates a low-end Android device on a slow 3G network, which is what a lot of website visitors actually use (as opposed to the web developer using the newest iPhone on great WiFi).

That's why content-driven websites should not be an SPA, and why I built https://mastrojs.github.io
by raw_anon_1111 | 2025-10-13 14:17:59+00:00
Why should I as an end user care about open source software? I wake up in the morning, get on my iPhone that synced all of its data to iCloud so if it falls in the river tomorrow, I pick up another one and keep moving.

I talk to my wife about our budget while we are making changes on our individual phones that are synced in real time on Google Sheets.

I walk over to my home office and open my MacBook Pro with 16 hours battery life that runs silent. I put on my AirPods Pro that magically pair to all six of my devices and switch between them.

I log onto Slack to check the various groups and then use Zoom and Gong that transcribes and summarizes the call using an LLM. I then might use Google’s NotebookLM to consolidate all of the transcripts and documentation to summarize and to ask questions.

True I use VSCode that might be open source and has some propriety bits. I then launch Docker Desktop and start doing some coding depending on the day of the week along with some type of AI coding assistant.

Of course there are all of the SaaS apps that I use during the day - Salesforce, Notion, GSuite, Rippling (a YC company), etc.

Tell me how is open source going to make my life better where I am not using it?

Of course I know Node, Python, the underpinnings of MacOS etc are open source.

I am “educated on open source”. Why would I want to make my life harder or why would a company want to make their life harder by caring about a philosophy? My goal and the company I work for want to make their life as easy as possible.

None of what you said is a convincing argument.
by tcoff91 | 2025-10-13 14:18:10+00:00
I understand git at a pretty deep level. I still very much prefer jujutsu. Its rebase is just so much more powerful than git. I regularly work on top of octopus merges in jj of all my in-review parallel PRs and when I want to rebase them all and the octopus merge and the various anonymous branches on top it takes 1 command. It’s so much more powerful than git it’s crazy.
by srjilarious | 2025-10-13 14:18:21+00:00
I just learned about the whole homelab thing a week ago; it's a much deeper rabbit hole than I expected. I'm planning to setup ProxMox today for the first time in fact and retire my Ubuntu Server setup running on a NUC that's been serving me well for last couple years.

I hadn't heard about mealie yet, but sounds like a great one to install.
by joeyorlando | 2025-10-13 14:18:42+00:00
hey there

Joey here from Archestra. Good question. I recently was evaluating what you mention, against the latest/"smartest" models from the big LLM providers, and I was able to trick all of them.

Take a look at https://www.archestra.ai/blog/what-is-a-prompt-injection which has all the details on how I did this.
by effed3 | 2025-10-13 14:18:44+00:00
maybe a wise use of technology?: never adopt a higher complexity tech when a lower one fit well. And white boards are less clear (to me) and markers dry (often in the worst moment). And about slides... very easy for prof, but i cannot copy a slide, always follow the reasoning, so having the things written is best, writing indeed is another side of thinking.
by burnt-resistor | 2025-10-13 14:19:13+00:00
If/when QPS is realized, calibration to a fixed point via manual verification, fixed base station(s), and/or multiple GNSS systems then GNSS spoofing, accuracy, and precision won't matter all that much because it will be entirely self-contained.

It's absurd overkill to put GNSS transmitters, RFID tags, and/or Bluetooth beacons on every object because the world is being flooded, for better or worse, with AI visual and IR cameras.

> Prevision GPS is useful for a lot of things, but it isn't needed for car navigation. If you know within 100 meters of where you are you can figure out the exact lane you are in by other clues - clues that you need to look for anyway because road/utility crews will sometimes direct you to do things that are not on your updated maps.

Except it is because driving direction routing depends on determination is based upon knowing which of several parallel, different roads one is on like the difference between being on a highway and on a parallel frontage road. Incorrect road detection leads to offering wrong directions.
by cjbarber | 2025-10-13 14:21:24+00:00
By Jack Clark, co-founder of Anthropic. A good read.

“For us to truly understand what the policy solutions look like, we need to spend a bit less time talking about the specifics of the technology and trying to convince people of our particular views of how it might go wrong – self-improving AI, autonomous systems, cyberweapons, bioweapons, etc. – and more time listening to people and understanding their concerns about the technology. There must be more listening to labor groups, social groups, and religious leaders. The rest of the world which will surely want—and deserves—a vote over this.”

“Right now, I feel that our best shot at getting this right is to go and tell far more people beyond these venues what we’re worried about. And then ask them how they feel, listen, and compose some policy solution out of it.”
by crote | 2025-10-13 14:21:48+00:00
To me it sounds like they acted on the sale before it was finished.

Imagine you see Taylor Swift tickets for sale, so you start buying them. Meanwhile, you also start booking a hotel room. The Taylor Swift purchase fails because they are sold out by the time you try to finish your purchase - but at that point the hotel room booking has already succeeded! Should you be able to blame either Ms. Swift or the hotel for having to pay a cancellation fee on the now-worthless room?

From an automated trading perspective it makes sense to execute both orders at once as it minimizes the amount of time you have to hold onto it (during which your potential gain can evaporate or even turn into a loss), but it does expose you to the risk of cancellation. To me that sounds like the cost of doing business?
by yojo | 2025-10-13 14:21:59+00:00
I’ve also been looking at setting up a dumb phone for my kids, but haven’t thought to go the rPi Twilio route.

There’s an existing product that seems to have some mindshare in the space: https://tincan.kids/

Basically $100 for the phone, plus $10/mo to call arbitrary numbers. My main concern here is the company goes belly-up and you’re left with a phone-shaped brick.

Another option I considered was a cheap unlimited SIM coupled with a GSM “desk phone” e.g. https://www.amazon.com/Generic-Wireless-Telephone-Cordless-8...

The problem here is there’s no way to filter inbound calls. The last thing I want is spammers ringing the house phone in the middle of the night.
by rob74 | 2025-10-13 14:22:04+00:00
Ok, I can get behind JFK's quote "We choose to go to the Moon not because it is easy, but because it is hard" - but do we have to apply the same quote to git? The way I see it, git is a tool and not a goal in and of itself. If there is a tool that does the same thing in an easier to use way (and can work with git repos), why use git? Of course, using VCS is part of the job description of almost every developer in the world, but git !== VCS...
by brookst | 2025-10-13 14:22:17+00:00
Eh, it's slightly viable, but unlikely. LG is too far along to be something they wanted to maintain as a fork for an entire year. Keeping apps working with two totally different design systems is a nightmare.

For this theory to work, you'd have to believe that Apple was planning to maintain two versions of the operating system and 1P apps for an extra year. I find that beggars belief, but of course it's not impossible.

In any event, it is way way too speculative to claim as an axiom.
Show HN: Open-Source Gateway to Stop Tool-Abusing Prompt Injections
by motakuk | 2025-10-13 14:22:35+00:00
Hi HN, Matvey, Ildar, Joey, and Dominik here.

If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable.

Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall.

So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against common attacks. The two core features right now are:

1) Dynamic Tool Engine: This is the key idea. Archestra restricts which tools an agent can even see or call based on the context source. If the context comes from an untrusted tool, the agent won't have access to high-privilege tools like execute_code or send_email. 2) Dual LLM Sanitization: An isolated LLM acts as a "sanitizer" for incoming data, stripping potentially malicious instructions before they're passed to the primary agent.

It’s framework-agnostic (works with LangChain, N8N, etc.), self-hostable (Kubernetes). We're just getting started and have more security features planned.

We'd love for you to take a look at the repo, try it out, and give us your feedback.

GitHub: https://github.com/archestra-ai/archestra

Docs: https://www.archestra.ai/docs/platform-dynamic-tools
by queenkjuul | 2025-10-13 14:22:47+00:00
I'm not doing anything weird and nothing in my setups changed, it all started after a recent Firefox update. I've been trying unsuccessfully to resolve the issue for weeks.

Just because other people aren't having problems doesn't mean I'm lying about my experience or that my comments need downvotes.

I love Firefox and only mention anything out of anxiety that enshittification is coming for it, too.
by newpavlov | 2025-10-13 14:23:02+00:00
>Try not to breathe any, studies are still pending but that stuff gets everywhere.

I would understand such comment in the context of carbon nanotubes or fullerenes, but graphene? Have you forgot that graphite is literally a bunch of stacked graphene?

Considering how much graphite pencils are used across the world, we would've seen hypothetical negative effects already with a high degree of confidence.

Yes, graphene production aims to produce larger sheets, but it only makes graphene less biologically active, not more.
by Supermancho | 2025-10-13 14:23:17+00:00
>> > While brake dust is a major contributor to this, a suburb next to a freeway is going to be pretty damn bad too.

> A suburbanite driving on their river of pollution for 50 miles every day is a much bigger impact than somebody taking the bus and train in the city.

This is moving the goalpost. Now it's distance plus traffic to reach for a pre-decided conclusion.

> As far as health metrics, whether from environmental effects or crime or the actual real killers: obesity, smoking, blood pressure, and heat disease, cities do better than rural areas:

Rural is not the same as suburb and not rural. A suburb is generally still a city, albeit smaller...depending on how one wants to define "city", I guess.

I have health conditions, originating from congenital defect. I have an electric stove. I moved out of a SoCal city, as I was raised next to a major (5) interchange. I live in the largest city of my state, which would be called a suburb somewhere else and my medical care is EXCELLENT for reasons that are particular to my area.

There's an argument to be made that cars provide economic and financial mobility, leveraged by the upper classes, which is why cars are not properly demonized. That's a separate topic from health.

I hope this helps you make stronger arguments in your next exchange, because I share some of these views as well.
by raw_anon_1111 | 2025-10-13 14:23:28+00:00
> Open source gives people complete freedom, the freedom that a software can run for posterity, can be modified towards your liking, and the most important thing which I failed to mention: peace of mind

And why should users care about their “software running in prosperity”? How many are modifying open source software? “Peace of mind” comes from knowing that if something goes wrong they have company to call on. They aren’t going to be modifying the Linux kernel to debug an issue.

To a first approximation, no one would choose the relatively crappy experience of fdroid over standard Android or iOS.