MurphyA/hacker-news huggingface dataset:
by zemo | 2025-10-28 01:16:34+00:00
users is a finicky metric. When Palia came out, a game you most likely have never heard of, I wrote a desktop installer for it with Druid, which a few million people downloaded and used to install and run Palia. Only a handful of people worked on this codebase, maybe three or four while I was there, but principally me and one other engineer.

The more salient metrics would be things like how many people know how to use the framework, the variety of use-cases its good for solving, how easy it is to hire or get help with it, etc. As for Druid, Druid is already officially unmaintained, its core developer having moved on to work on Xilem instead. (my experience, for the record, was positive, I very much enjoyed working with Druid.)
by quacksilver | 2025-10-28 01:16:34+00:00
Is that not a problem with how people are using CVEs, scoring them and attaching value to them rather than whether a CVE should be assigned itself. A CVE is simply a number and some data on a vulnerability so that the community knows they are all talking about the same issue

Even if you need to be root to edit the files, it still is a deviation from the design or reasonably expected behaviour of that interface, so is still a bug and should still get a CVE. It should either be fixed or failing that documented as 'wont fix' and on the radar of anyone building an application. Someone building the next plesk or cpanel or similar management system should at least know about filtering their input and not allowing it to get to the dangerous config file.

Re: Harassment - Can't the project release a statement saying that the bug writeup is low quality and unable to be reproduced? Anyone ignoring that without question and using it as evidence that the project is bad without proof is putting way too much value in CVEs and the fault is their own
by akerl_ | 2025-10-28 01:16:57+00:00
> The developer typically defines its threat model.

Is this the case? As we're seeing here, getting a CVE assigned does not require input or agreement from the developer. This isn't a bug bounty where the developer sets a scope and evaluates reports. It's a common database across all technology for assigning unique IDs to security risks.

The developer puts their software into the world, but how the software is used in the world defines what risks exist.
by imtringued | 2025-10-28 01:17:15+00:00
To this day nobody in the agritech industry touting expensive super seeds and synthetics has figured out how to sustainably sell their products to developing countries.

Agriculture is the primary industry in most developing nations. The value proposition of agritech is "give us your money and we'll give you food". Meanwhile the people in developed countries need a way to turn what they already produce into money. The objectives are diametrically opposed.

How exactly is an agricultural society that primarily produces crops to feed itself pay for the imported goods which were the source of their money in the past? What I'm trying to get at here is the fact that a domestic farmer has to export their crops to earn money for the imported inputs. You need more land to feed the same quantity of people, because only a portion of the land will be farmed for domestic consumption.

The business model just fundamentally doesn't make much sense, because it makes the underlying assumption that these people are already busy doing more important things than farming that earn them enough money to buy seeds, so buying the more productive seeds means they are less busy farming and spend more time earning money.
by bloppe | 2025-10-28 01:17:36+00:00
Sure. Everyone remembers from Algorithms 101 that a constant multiple ("a thousand times slower") is irrelevant. What matters is the scalability. Something that's O(n) will always scale better than something that O(n^2), even if the thing that's O(n) has 1000x overhead per unit.

But that's just a small piece of the puzzle. I agree that the user only cares about what the product does and not how the product works, but the what is always related to how, even if that relationship is imperceptible to the user. A product with terrible code quality will have more frequent and longer outages (because debugging is harder), and it will take longer for new features to be added (because adding things is harder). The user will care about these things.
Yet another way to use Tornado Cash in 2025, a tool implemented in Python&C++
by gokgokdak | 2025-10-28 01:19:02+00:00
Github Repo: https://github.com/gokgokdak/tornadocash-py

I re-implemented the Tornado Cash command-line tool in Python to interact with the Tornao Cash contracts.

*Compares to the original one, I added some practical features*

1. Batch deposit & withdrawal Manage large amounts of ETH with a single command and distribute funds across different instances easily.

2. Deposit age query Check how many deposit and withdrawal events have happened since your deposit, the higher the number, the better mixed your funds are.

*Also, some engineering and performance improvements*

The original project stores event history in JSON files and relies on subgraphs for data analysis. In this Python rewrite, I switched to SQLite as the storage layer, and all analytics will be built on top of the database (with proper indexing/transactions), making queries faster, more consistent, and easier to maintain.

Aside from zk-proof generation/verification, I re-implemented the rest of the heavy algorithms in C++ via pybind11 (Keccak256, MiMC sponge, Pedersen, BabyJubJub, etc.), which significantly improves the runtime for rebuilding the Merkle tree.

*Why I built this*

1. I was scammed by a phishing site. There are many "Tornado" websites out there and it's hard to tell which ones are legit. Some tutorials link to a site and claim it's "official", but there's no reputation behind it, often it's a honeypot and the article was written by the scammer. The bigger problem is we can only see a site's frontend; there's no way to audit what actually runs on the backend. After being scammed, I treat such sites as untrustworthy. Since Tornado Cash is a set of smart contracts, the safest way is to run audited code locally and interact with the contracts directly, whether via a website or a CLI is just different implementation.

2. I prefer Python to JavaScript The original tornado-cli depends on an old Node.js runtime (v14), which took time to set up. I'm a Python/C++ fan and didn't want to keep maintaining or adding features in JS.

*Looking for contributors who share this vision*

While the CLI is enough for me, it's not ideal for most users. The next step is a web UI so people can connect a wallet (MetaMask, etc.) instead of pasting private keys into a terminal, similar to the original Tornado frontends. I don't have much spare time, so if anyone wants to help with the UI (or docs/tests), I'd really appreciate it. Please open an issue or PR on GitHub, or DM me.
by thegrim33 | 2025-10-28 01:21:06+00:00
And here I am, using AI twice within the last 12 hours, to ask it two questions about an extremely well used, extremely well documented, physics library, and both times having it return to me sample code which makes use of library methods which don't exist. When I tell it this, I get the "Oh, you're so right to point that out!" response, and get new code returned, which still just blatantly doesn't work.
by falcor84 | 2025-10-28 01:21:35+00:00
> but it can't make movies.

To me this appears to be a very time-dependent assertion. 5 years ago, AI couldn't generate a good movie frame. 2 years ago, AI couldn't generate a good shot, but now in 2025, AI can generate a not-too-shabby scene. If capabilities continue improving at this rate (e.g. as they have with AI being able to generate full musical albums), I wouldn't bet against AI being able to generate a decent feature film in the next decade. It might take longer until it's the sort of thing that we'd present in festivals, but I just don't a clear barrier any more.

Looking at it from another perspective, if an AI driven task currently requires "an expert in the loop" to navigate things by offering the appropriate prompts, evaluating and iterating on the AI generated content, then there's nothing clear to stop us from training the next generation of AI to include that expert's competency.

Taking it into full extrapolation mode, the thing that current generation AIs really don't have is the human experience that leads to a creative drive, but once we have robotic agents among us, these would arguably be able start gathering "experiences" that they could then mine to write and produce "their own" stories.
by Krssst | 2025-10-28 01:22:09+00:00
> Work with spreadsheets more complicated than two cells.

I work with spreadsheets made of more than two cells with LibreOffice. The lack of dark patterns to trick me into cloud saving, ribbon with random buttons everywhere and animations makes everything feel much more comfortable to use.

Data linking a CSV in Excel opens a UI where it seems one can do many conversions and adjustments. It looks very powerful but it also makes it slow to link a CSV file. In LibreOffice it's less powerful but so much faster.
by mpoteat | 2025-10-28 01:22:17+00:00
> I also avoid technologies where the code I write is different from the code being executed.

Not to be snarky, but as opposed to writing assembly? Where do you draw the line if you don't allow TypeScript (which is, with limited exceptions, only type erasure unless you specifically request polyfill), but allow other forms of compilation? Would you define JVM bytecode or IR as messy-looking junk code?

It's hard to see how a principled line could be drawn here.
by Rumudiez | 2025-10-28 01:22:40+00:00
this issue was caused by a framework that's trying to do too much, relying on "magic" interfaces to supposedly reduce developer burden. the function is very unambiguously written and the language did nothing wrong

I also support using whatever language you and your team prefer when you can. that's the glory of backend: no restrictions on what you can run. but sometimes you need to write client software, and those are strictly easier to manage in the platform's native tongue: Swift, Kotlin, JS, and so on
by lincoln504 | 2025-10-28 01:22:45+00:00
Minimax M2 released earlier today and claimed to have big performance gains in tool use, agent benchmarks, and full stack development end to end.

Sure, these performance claims may be true but after a full day of use to me it is clear that such positive scores on these benchmarks are, in the case of Minimax M2, not leading to a a more useful developer coding assistant experience. When used in Claude Code with their official recommended 'anthropic' endpoint, Minimax M2 seems to have worse instruction following capabilities than it's peer GLM 4.6.

The benchmarks AI companies present doesn't work as a functional model of the coding-assistance potential of the tool.
by nearbuy | 2025-10-28 01:23:03+00:00
You're not addressing the objection. What is it about your model of how you think LLMs work (that it's just "repeated information") that predicts they'd go haywire when asked about a seahorse emoji (and only the seahorse emoji)? Why does your model explain this better than the standard academic view of deep neural nets?

You just pointed out an example of LLMs screwing up and then skipped right to "therefore they're just repeating information" without showing this is what your explanation predicts.
by bmandale | 2025-10-28 01:23:09+00:00
DST is just a hack to make the time roughly correspond to when the sun rises, instead of when noon is. It solves the problem that people want their day to start when the sun is up, not before, and not after. The problems it creates are mostly for programmers who can't be bothered to write good software. Well I say tough cookies, you'll have to handle the edge cases so the rest of us have comfortable mornings.
by Defletter | 2025-10-28 01:24:12+00:00
> Just set the properties you want the element you are using to what you want it to be.

"Just". What I remember from that time was putting a button at relative 0,0 and it being at the top-left of the page in one browser, but was offset in another because that browser was adding padding/margin to <body>. I cannot say which was "correct" but it nonetheless pushed me to use normalisers, which prevented this kind of problem from ever coming up again.
by maddmann | 2025-10-28 01:24:41+00:00
“The purpose of DEI is to enforce what is idealized as the equal outcome, assuming that all observed differences are the result of discrimination“

I don’t think a single proponent of DEI has ever said this, and it is telling to me that you are misinterpreting it with such a politicized slant. Maybe you need to think about reading some other opinion pieces on this from a much broader spectrum of perspectives?

I’ve been through many DEI programs while I worked in non profits in Upstate NY. The core focus of those programs was often to bring awareness to historical discrimination, and attempt to create environments in organizations where that does not reoccur.

I’m sure the approach differs across the spectrum but to me it was a good faith attempt at righting historical wrongs and attempting to avoid the historical discrimination.
by mgh2 | 2025-10-28 01:24:54+00:00
Are you sure ChatGPT is the solution? It just sounds like another "savior complex" sell spin from tech.

1. Social media -> connection 2. AGI -> erotica 3. Suicide -> prevention

All these for engagement (i.e. addiction). It seems like the tech industry is the root cause itself trying to masquerade the problem by brainwashing the population.

https://news.ycombinator.com/item?id=45026886
by ChicagoDave | 2025-10-28 01:26:03+00:00
You had to map out how modules would swap in and out of memory, so they had to be encapsulated modules. At least for the PDP you didn't have relational data stores so all data was in hierarchical data files (each record had a parent-child indicator, so you might read an 'M' record, then many 'D' records). You certainly could not load all of the data into memory even one set of M+D+sub records might blow out your limits.

You had to carefully think through how your code worked at a molecular level always banging up against a memory wall.
by elmerfud | 2025-10-28 01:26:53+00:00
Anyone who shows up and their only contribution is to push AWS services because that's what they know, the first question I asked them is if they are capable of doing it themselves on-prem. Their answer is no or they don't know how to or some babbling on about it's more expensive and ROI and things like that I dismiss them immediately. Because those may all be true things but without the ability to do it yourself it is impossible to make an accurate assessment if AWS or another cloud service is actually a good fit for what you're doing.
by Krssst | 2025-10-28 01:26:54+00:00
10 was the beginning of forced updates, forced telemetry and disregard for user consent. 10 is the boundary. For me it's the beginning of when consent started being ignored by default everywhere. Microsoft sets the example, and the example is that the user choices do not matter at all.

Well, software do ask for consent sometime. But asking again every once in a while until the user misclicks is not that.
by CamperBob2 | 2025-10-28 01:28:29+00:00
Good to hear the Macan EV is working out for you. It's an appealing car for sure, but I wish they'd made it a PHEV so it could replace my '20 S for everything I use it for.

I think the Boxster EV is supposed to be released next year, so maybe you won't have too long to wait for that. In the meantime, you can simulate the experience by loading 500 pounds of rocks into your frunk and 500 more pounds into the trunk. I'm a lot more bearish about the EV Cayman/Boxster than I am about the Macan EV.
by jonway | 2025-10-28 01:28:59+00:00
> The notion of "class" is a poor description of reality. Marxism always had trouble classifying small business owners. They do manual physical labor, so should be working class, but they are also capitalists.

Not even in the least. There’s a lot to critique in Marx and Engels but there is much written about Marx’s theory of alienation. He would say “The best form of work is unalienated labor.”

A person working, developing and feeling connected to the fruits of their labor, fulfilling the needs of his society is exactly what he prescribed.
by sothatsit | 2025-10-28 01:30:10+00:00
I am very confident that these tools are better than the median programmer at code review now. They are certainly much more diligent. An actually useful standard to compare them to is human review, and for technical problems, they definitely pass it. That said, they’re still not great at giving design feedback.

But GPT-5 Pro, and to a certain extent GPT-5 Codex, can spot complex bugs like race conditions, or subtly incorrect logic like memory misuse in C, remarkably well. It is a shame GPT-5 Pro is locked behind a $200/month subscription, which means most people do not understand just how good the frontier models are at this type of task now.
by oskarkk | 2025-10-28 01:30:11+00:00
Googling exactly "Costa Nostra" returns essentially nothing specific (150k results vs 4.6m for "Cosa Nostra") and Google tries to redirect it to "Cosa Nostra", so that seems to be a typo.

Wikipedia article on "Sicilian Mafia":

> The Sicilian Mafia or Cosa Nostra (Italian: [ˈkɔːza ˈnɔstra, ˈkɔːsa -]; Sicilian: [ˈkɔːsa ˈnɔʂː(ɽ)a]; lit. 'Our Thing'), also simply referred to as Mafia, is a criminal society and criminal organization originating on the island of Sicily and dates back to the mid-19th century.

Wikipedia article on "American Mafia":

> The American Mafia, commonly referred to in North America as the Italian-American Mafia, the Mafia, or the Mob, is a highly organized Italian-American criminal society and organized crime group. The terms Italian Mafia and Italian Mob apply to these American-based organizations, as well as the separate yet related Sicilian Mafia or other organized crime groups in Italy, or ethnic Italian crime groups in other countries. These organizations are often referred to by its members as Cosa Nostra (Italian pronunciation: [ˈkɔːza ˈnɔstra, ˈkɔːsa -]; lit. 'Our Thing') and by the American government as La Cosa Nostra (LCN). The organization's name is derived from the original Mafia or Cosa Nostra, the Sicilian Mafia, with "American Mafia" originally referring simply to Mafia groups from Sicily operating in the United States.

So you're right that the name with "La" is an US government term for the American Mafia. Funny that the "distinction" was made in the most ambiguous way possible.
Show HN: Momentum Mentor – Bot Helps Engineering Systems for Life
by npc0 | 2025-10-28 01:31:32+00:00
I built an AI consultant based on Claude Sonnet 4.5 that applies systematic frameworks (game theory, resource management, systems thinking, etc.) to help review life decisions and refine systems for live decisions.

Not therapy. Not life coaching. Engineering consultation.

Example frameworks: - Test the way one behave or decide with coverage and backtesting (judge by consequences, not morality) helps in reshaping system 1 for better reaction - Commons Governance (Ostrom's principles but for families) helps in managing energy and time with transactional method for both sides to maintain the meaningful relationship - Return of investment (Charlie's principles but for daily activities) helps in reviewing the time and effort spent by parties if the relationship is investing to grow the baseline happiness or wasted in unproductive activities

2-hour intensive sessions, $100. Data deleted after 30 hours. Built for people who think systematically.

Start to chat with the bot https://momentummentor.com/chat

During testing, I found it inspiring because, I was debating a topic with myself, I used it to test the bot and the bot revealed a blind spot and a self-consistency issue that I had anticipated would take me a week to consider.

Looking for early user and feedback.
by Slash65 | 2025-10-28 01:31:36+00:00
That’s what I do, the jetkvm has its “own” mini hdmi that follows it as I have moved it from different machines. Buying one cable wasn’t the end of the world (I was able to snag the jetkvm for $70 during its kickstarter and a $10 cord) and I use it constantly so it’s never collecting dust
by ninetyninenine | 2025-10-28 01:31:52+00:00
I disagree. Not with the part that it gets things severely wrong at times. I disagree that it gets glossed over.

It’s fucking obvious how wrong LLMs get and I think this part is over exaggerated while the parts it gets right like basically slowly replacing parts of your average HNers day job as a programmer is deliberately ignored and scoffed at.

The sentiment against AI by the overwhelming majority is hatred and negativity especially on HN. It is a small minority (especially among entrepreneurs and founders) that are overly positive about AI. But make no mistake the overwhelming sentiment is negative to the point of delusion like the LLMs themselves.

Like it’s unmistakable to me how LLMs can basically up developer productivity to a much much higher degree than ever before. Yet we have plenty and plenty of people who can’t even take the middle ground and say it kind of helps. All kinds of developers everywhere saying LLMs are fucking completely useless. Which is mind bogglingly irrational.

Most Artists for example are decrying it because it produces soulless work. I agree the work is soulless but indistinguishable and often materially better than what a human can do. In fact the concept of soul becomes utter bullshit in a double blind test. They aren’t decrying it because it’s soulless that’s bullshit. They decry it because it’s on the trajectory of becoming better than them. That’s the same fucking reason you see HNers siding with the best possible scaffolding of logic and reasoning that will support their day job. That’s why you see people claiming random shit like LLMs don’t actually understand anything when we in fact have no clue or ability to even properly answer that question.
by abhishekismdhn | 2025-10-28 01:31:59+00:00
Even the code quality is often quite poor. At the same time, not using critical thinking can have serious consequences for those who treat AI as more than an explorer or companion. You might think that with AI, the number of highly skilled developers would increase but it could be quite the opposite. Code is just a medium; developers are paid to solve problems, not to write code. But writing code is still important as it refines your thoughts and sharpens your problem-solving skills.

The human brain learns through mistakes, repetition, breaking down complex problems into simpler parts, and reimagining ideas. The hippocampus naturally discards memories that aren’t strongly reinforced.. so if you rely solely on AI, you’re simply not going to remember much.
by epistasis | 2025-10-28 01:33:11+00:00
> "this quarter, we only have headcount for 'diverse' candidates",

Such a statement from those with hiring authority is highly illegal. Any HR department that would let this message be delivered, either explicitly or implicitly, would open the company to massive lawsuits, such as the one you linked to. It's as bad as allowing sexual harassment.

Linking the term DEI to illegal hiring practices is like linking having a male manager to sexual harassment. The entire point of DEI was to eliminate illegal biases.
by inkyoto | 2025-10-28 01:33:22+00:00
You are, of course, most welcome to offer your contributions — whether in debate or in contestation of the points I have raised – beyond the hollow reverberations of yet another LLM echo chamber.

The information I used to contest the original statement comes from the AArch64 ISA documentation as well as from the infamous «M1 Explainer (070)» publication, namely sections titled «Theory of a modern OoO machine» and «How Do “set flags” Instructions, Like ADDS, Modify the History File?».