MurphyA/hacker-news huggingface dataset:
by jacquesm | 2025-10-17 06:16:16+00:00
> You can't defend against an adversary in your own machine.

Not if you import large chunks of unknown hardware. But if you built the whole thing from scratch you could. And FPGA's with adversarial blocks in them (or a toolchain that would corrupt your own bitstream) are probably possible but I don't see these as realistic attacks against a one-off.
by akarshc | 2025-10-17 06:16:22+00:00
Author here: Not sure why everyone’s taking this as anti-rails or anti-laravel. It’s not. I just shared what worked best for my use case. Real-time updates are built into phoenix through channels and liveview, while in rails it’s handled through Action Cable and Turbo Streams. Both work great, but phoenix’s setup felt more integrated for what I was building.
by botanical76 | 2025-10-17 06:17:57+00:00
AI coding is in many ways antithetical to great software engineering.

It is the current spear-edge of the investor pressure to ship products faster, and monetize users more aggressively, all at the cost of quality, reliability, ethics, security.

If you, as a software engineer, once held an ideal about programming as an art or craft, AI coding flies in the face of all that.

It turns out that maximising for short-term profit leaves many other objectives behind in its wake.
by latexr | 2025-10-17 06:18:01+00:00
> That’s not the case with an Amazon eBook where the marketing and reasonable expectation of the average consumer is they’re buying the eBook itself.

Good luck proving that in court without reasonable doubt.

Look at the image again. It’s extremely vague about what you are in fact buying.

https://blog.pixelmelt.dev/content/images/2025/10/image.png
by bigstrat2003 | 2025-10-17 06:18:02+00:00
I flag all articles on politics, but not because of the rules... It's because they consistently turn into flame wars. Every single article on US politics, without fail, will have people flagrantly violating the site rules by just being hateful to whichever party they dislike. I used to get in there and flag comments to try to help combat the problem, but it got to be too much. Now I just flag the entire article because the discussions are always such low quality.
by BrenBarn | 2025-10-17 06:18:03+00:00
This reads like it was written by someone who doesn't understand that most notifications can and should be turned off. Like this:

> My notification center shows texts from my family group chat next to a bunch of New York Times push alerts, a calendar reminder for a meeting I had earlier today, announcements of new episodes of several podcasts I follow, and multiple ads from DoorDash suggesting that I order from Chick-fil-A, Walgreens, and other stores.

Well, yeah, no wonder your actual relationships are getting lost in there. The solution is block notifications from all that stuff except the group chat and the calendar reminder (assuming you actually needed to see it before the event occurred). For lower-priority stuff that you might still conceivably care about (like NYT), get the info by email and turn off email notifications. Then check this lower-priority stuff on a pull basis, by opening your email app, seeing if there's anything you feel like looking at, and deleting the rest.

I'm flabbergasted every time I have occasion to look at someone else's phone or tablet and see the deluge of notifications they're getting. This isn't even just about social stuff, it's a general watering-down of the idea of "notification". If most notifications are meaningless, they all become meaningless because finding the meaningful ones is like looking for a needle in a needlestack.

There's still a legit point to be made about how we've gotten into this notification maelstrom, and how to get out of it. And to some extent this problem can bleed into areas outside of notifications (e.g., an email inbox in which the real emails from your friends are lost in a sea of ads), so maybe it's about information overload rather than notification overload. But I think this article is missing that the real issue here is the shift to push-based consumption rather than pull-based.
by nolok | 2025-10-17 06:18:19+00:00
Most genres really.

Even a 60 euros for a 6 hour experience comes at 10 euro per hour, cheaper than music and on par with movies.

Add replayability, multiplayer, longer games, cheaper games, ... and many many games are under 1 euro per hour, sometimes far under. Even someone playing fifa or call of duty has a price to hour ratio thats absurdly good.

And the range available is insane, used to be if you liked some genre you had maybe a game once every two years, now there are so many that not only you can't play all your games, even a seasonned gigantic fan of gaming cannot know all good games released anymore.
Show HN: A Performance-Focused Watch Database Built with Next.js and Python
by lethanhdung | 2025-10-17 06:18:49+00:00
Hi HN,

I’ve been experimenting with building a lightweight, high-performance platform for exploring detailed watch specifications — focused on design structure, data modeling, and frontend rendering performance.

The project is live here: https://www.tagheuerreplica.io/

While it looks like a watch catalog, under the hood it’s a technical prototype designed to test: - *Next.js 14* for static generation and incremental revalidation - *FastAPI (Python)* as a microservice backend for structured metadata - *SQLite* for ultra-fast, read-optimized data queries - *Edge caching* via Vercel to maintain sub-100ms global load times

The architecture was built to explore how a small-scale app can serve complex reference data without heavy infrastructure or expensive cloud databases. It’s entirely serverless, and each watch reference loads from a precomputed JSON structure that syncs automatically when metadata updates occur.

I’m curious about feedback on: - How to further optimize SSR performance for large JSON datasets - Whether lightweight alternatives to SQLite (like DuckDB or Turso) might help - Edge function cold-start minimization strategies

This was a fun weekend project that grew into a benchmarking sandbox for watch-related metadata. Would love to hear any suggestions from the community — especially from those working on serverless data delivery or content-heavy apps.

Live demo: https://www.tagheuerreplica.io/
by tcoff91 | 2025-10-17 06:20:43+00:00
Storyteller can sync your progress between devices, although there’s occasionally a bit of a bug with it (will be fixed soon). I sync between my iPhone and boox.

Once you get all the e-ink settings dialed in to make black text more readable on the color e-ink screen, it’s pretty damned good. I never notice ghosting. It’s not very easy to get the settings dialed in though. If you are purely reading on it get a black and white screen if it’s in stock so you aren’t fiddling with it to get text to really be boldly black instead of grey.
by bob1029 | 2025-10-17 06:20:50+00:00
A well engineered data model can also be used as the basis for a business rules engine. This is popular in enterprise environments that use technology like oracle db or mssql. It is possible to implement all the core business logic as stored procedures and functions. These can be directly invoked from something like a web server. Instead of putting all the session validation logic in backend code, it could live in PL/SQL, T-SQL, etc.

The benefit to having the logic and the data combined like this is difficult to overstate. It makes working in complex environments much easier. For example, instead of 10 different web apps each implementing their own session validation logic in some kind of SSO arrangement, we could have them call a procedure on the sql box. Everyone would then be using the same centralized business logic for session validation. Any bugs with the implementation can be fixed in real time without rebuilding any of the downstream consumers.
by notmyjob | 2025-10-17 06:21:05+00:00
It’s a proposition in the upcoming California election intended to maximally gerrymander state congressional districts to reduce the number of republican legislators at the federal level. It’s a reactionary move in response to Texas redistricting process which removed some blue team congress folks in their state.

The new gerrymandered prop 50 districts will replace, at great cost to the taxpayer the bipartisan commission drawn districts which were created not long ago based on another statewide proposition as I recall, which of course was also very costly but at least done with the intention of making districts more fair, ie less gerrymandered. But even that redistricting effort was not fair, leaving republicans with about 15% representation despite being much larger proportion of voters. The new prop 50 super gerrymandered districts would reduce that 15% even further, more or less eliminating the other party.

What is so bad about that, other than the wasted tax payer money (the state is currently in the red), is that this decreases California’s political power in DC. It’s in the interest of the state as a whole, even just democrats, to have representation in both parties at the national level. So not only is it wasteful, and intentionally unfair, it’s bad for everyone in the state. And, it’s being done largely to support Gavin Newsom’s eternal presidential ambitions. I think the bulk of the 300 million spent on ads is from his presidential campaign purse.
by chronci739 | 2025-10-17 06:21:21+00:00
> This business model essentially makes sure all the surviving ones are those who can get by on the lowest profits.

And what’s wrong with “lowest profit”?

If that equates to lower quality, you as a customer are free to select the more expensive restaurant on DoorDash.

Airlines have tiny profit (single digit $ per passenger) yet there’s no sympathy for them.

So “big greedy corporation” vs “mom and pop shop” is the core reason, yeah?
by barrell | 2025-10-17 06:22:12+00:00
I would not entirely compare it to TypeScript. Due to pattern matching, legacy elixir will probably come out roughly 50% typed (extrapolating from my own usage, I'm not sure the accuracy of this number). Then since vanilla elixir is getting types (not a separate TypeElixir) I would venture anything actively maintained will get typed relatively quickly.

I personally do not like type systems, and still code in JS, not TS. Any JS artifacts I produce are untyped. Yet even my Elixir-code is nearly type ready.

So while TS is fighting an uphill battle, I think Elixir is working downhill.
by friendzis | 2025-10-17 06:23:16+00:00
> Kick off a bunch of processes doing too much of the wrong thing on any platform and it will bring the whole system down.

> > userspace app could trigger <...> and thus cripple the rest of userspace (or at least the rest of userspace at given priority level), yet the system part should still run within performance envelope

If userspace triggers what is an effectively a DoS attack and you cannot login to root terminal and get things sorted out that's a system not designed for adversarial userspace.

> but just imagine the discussion we’d be having if Apple had sigabort-ed all these misbehaving electron apps on day one

A more general context we are discussing here is resource exhaustion. There are myriads of scenarios where userspace can cause some form of resource exhaustion. My argument is that a 1) well designed 2) general use system should implement resource management in a way (e.g. priority queues) that userspace-inflicted resource exhaustion does not affect performance envelope of the system itself. Otherwise the system is open to unprivileged DoS attacks with only recourse being power cycling.

If your userspace app overcommits memory to some monstrous degree, what should the system do?

1. Enter a swap feedback, crippling the system down to unusability.

2. OOM-kill a process based on some heuristics.

3. freeze userspace, leaving privileged space functional.
by matheusmoreira | 2025-10-17 06:23:47+00:00
Luck is a big factor but still... Rolling the dice does not present much of an opportunity cost. I've seen people make a hobby out of gaming these platforms and algorithms with the most random things imaginable until they found something that sticked. They had nothing, then suddenly they had significant amounts of money. It doesn't matter what it is, it just needs to grab attention for long enough for the advertisers to push their products. It's not like the guy had to go to school for 10 years to do it.
Ask HN: How can I use other LLMs as tools, not slaves but collaborators?
by pulkas | 2025-10-17 06:23:58+00:00
I want to use other LLMs as tools, not slaves but collaborators. Are there any frameworks or libraries for this? Has anyone done this? What were your experiences?

Concept: use Claude Code as the primary agent, and have it call models like GLM 4.6 to offload routine or automatable tasks, minimizing Claude's token consumption. Orchestrate models such as GLM 4.6, Gemini 2.5 Pro, Kimi K2, Qwen-Coder, and other open or paid API-accessible models to distribute work intelligently.

Think of it as a grep-like tool where, instead of running a grep command, the system delegates the search or transformation to other LLMs and executes there. For trusted models (e.g., GLM 4.6), returning only a summary of actions is sufficient, while the detailed changes are applied directly to code and persisted.

I’m looking for a framework that coordinates multiple models similar to how Claude Code uses subagents.
by omcnoe | 2025-10-17 06:25:17+00:00
These feeders are part of a stray cat control program in China, aiming to both feed & neuter stray cat populations there.

There have been some distasteful incidents of online groups organizing to try and harm/kill specific cats famous through this feeder program. China lacks animal welfare laws to protect these cats, it's not a crime. So people have taken to identifying these abusers and reporting them to their employer, university etc. Abusers have been fired and expelled over such cases. Governments overseas whose citizens participate in such online abuse groups need to be doing more. Membership in online animal abuse groups needs to be criminalized.
by energy123 | 2025-10-17 06:26:58+00:00
The weak/strong distinction is quite bad. There's weak governments that are subject to cartels/gangs/militias like in Lebanon, or strong autocracies like Russia, and they are both terrible governments to live under.

I would instead optimize for properties that are not conceptually tied to 'weak' or 'strong'.

Have effective state capacity. Have independent corruption bodies. Enshrine the separation of powers and rule of law. Have a monopoly on force. Have an independent bureaucracy. Prioritize both efficiency and effectiveness without seeing them as trade-offs. Create more good regulations and repeal or reform more bad regulations. Separate military from civilian police.

Getting it right is about lots and lots of small details, quality institutions and cultural norms that we need to build over centuries of effort. It's less about a simple patch.
Show HN: FullHunt Agentic AI – Discover Any Org's Attack Surface in Seconds
by mazen160 | 2025-10-17 06:28:21+00:00
We built FullHunt Agentic AI, an autonomous tool that maps an organization’s internet-facing assets and possible attack paths in seconds.

It automatically discovers exposed assets, correlates CVEs (EPSS, CISA KEV, FullHunt data), and produces a prioritized action plan.

Try a prompt like:

"Discover the attack surface of acme.com and identify possible attack paths."
by ffsm8 | 2025-10-17 06:28:34+00:00
From thinking about it and merely looking at the gif example... I think you could actually get there via language server alone - at least mostly?

It just highlights parts that interface with a symbol, right? And that's information the language server is supposed to expose.

You'd "just" have to make a x+1 mapping to highlight anything that's touching the symbol

To be clear, I'm just speculating here and not speaking with authority on the topic. It's possible I'm missing something which makes this approach infeasible in practice
by evbogue | 2025-10-17 06:28:45+00:00
Much of what is described in the article can be accomplished with content addressable storage.

If we develop an internet where links describe the integrity of a file then we don't have to worry about the content changing out from underneath us. Additionally we get the benefit of being able to distribute the files we depend on anywhere.

Why make a map of hashes that correspond to human readable file urls, when we can directly link to hashes?
by ryanrasti | 2025-10-17 06:29:55+00:00
I share the OP's enthusiasm for Elixir, but as the CTO of a startup that ran it for three years in production, our experience was a mixed bag as the codebase grew.

The core promises of the BEAM (concurrency, fault tolerance) absolutely held up. Libraries like Ecto and Oban are world-class, remote `iex` is a lifesaver in prod, and the talent pool is exceptional.

However, developer experience (DX) was our biggest bottleneck. At our scale of 300k lines of code, the pain points were sharp:

* Compile times: A one-line change could easily take >10 seconds to compile in dev, constantly shattering flow.

* Tooling: ElixirLS was a coin flip. Unreliable autocomplete in a large codebase meant constantly grepping for function names and schema fields.

* LiveView: It wasn't a fit for our complex UI, which required a lot of client-side interactivity, forcing us to build a React frontend. This introduced the exact split-stack complexity (GraphQL overhead, context switching) LiveView promises to fix

I wrote a full retrospective for anyone considering the stack for a long-term project: https://ryanrasti.com/blog/elixir-three-years-production/
by barrell | 2025-10-17 06:31:34+00:00
I have the opposite experience. Even in production builds, I get Elixir stacktraces, and they're exceptionally helpful. Macros only save me time and LoC, I think maybe once I've struggled with a macro-caused issue (and it was immediately apparent that macros were the issue).

ExUnit has been hands down the most impressive testing library I've ever worked with, and the debugging, profiling, analytics, introspection, observability, etc of the BEAM is unbeatable.

Documentation of elixir, elixir deps, and elixir code is also far and above any language I've ever seen.

And the struggles I had supporting minimal concurrency in python were completely alleviated - so even if you don't need massive concurrency, elixir has a good chance of massively simplifying anything that needs minimal concurrency (which is probably most web related projects).
by bigiain | 2025-10-17 06:31:56+00:00
One day, I plan to release a mobile and web app that's a pixel perfect representation of my low fidelity Balsamiq wireframes/UXUI exploration. Just to make the right kind of people's head explode.

In the same spirit as this from the late '90s: https://web.archive.org/web/20011102031149/http://www.mighty...
by funnybeam | 2025-10-17 06:33:05+00:00
Some languages - human languages, natural or constructed, not programming languages - have ways of expressing the source of a piece of information, such as whether it is a known fact, something you have personally observed, or just an idea you are throwing out there for instance, using grammar or extra signifying words.

I’ve often thought about stealing some of these techniques for note taking as it would be really useful to have extra context without having to write it all out longhand.

Check out lojban attitudinals for one example along these lines if you are interested. There are natural languages that do this as well but I can’t remember any specifics off the top of my head
by geokon | 2025-10-17 06:33:13+00:00
The examples are great but .. I think.. the conclusion is naiive/wrong in a lot of cases.

Aren't both right and left sides of most examples fundamentally different views of the same exact underlying data/relationships?

If you're locked in to one view, then your code sucks. I'm not an expert in this stuff, but I think this is just a natural consequence of thinking in terms of tables and SQL.

If you think in terms of triple stores and graph databases then you can derive either a left side or right side view as needed and you can operate on either abstraction
by bigpeopleareold | 2025-10-17 06:33:59+00:00
I have read HN for years ... on my profile it says my account was made 11 years ago but I followed it much longer than that. It has been a continual resource of things that I would have never thought of looking into or spark interest in things that I haven't looked at in a long time. As an example, a post on a Lazarus/FP release triggered my multi-month long interest in Pascal again for me.

I do like there is a level of civility and this site is not juiced up with advertising and algorithmic personalization. Sometimes though, I feel like this site has some conversations similar to that I had in real life. I would say something and someone, would say 'but!' with a long explanation on why someone I'm wrong, rinse and repeat. It gets annoying to read, but I can at least not bother, because most issues are simple not hills to die on. I will leave it to others here to elucidate this point in other ways, which I dutifully upvoted.
by eru | 2025-10-17 06:37:16+00:00
> From pregnant mothers smoking/drinking to medical care unavailability to doctor errors to various toxin contaminated baby products and the environment [...]

You don't even need to go so extreme. Driving involves risk. And so does getting out of bed at all (or staying in bed..)

If the chance of the robot hurting your kid becomes orders of magnitude smaller than the chance of getting hit by a freak asteroid, you can probably call that save enough, even if it's not strictly speaking zero.
by patates | 2025-10-17 06:37:31+00:00
What started as a "this should be just a few namespace changes" might have cost thousands of person days in my current job. So many tests red, the whole CI/CD broken, and when all "fixed" and done, there were still some uncaught production bugs haunting us for many months... Simply horrible.

On paper, it really was just a few changes. In practice, it forced a massive transitive dependency and technical debt cleanup for many companies.
by BriggyDwiggs42 | 2025-10-17 06:38:47+00:00
Capitalism is how all of our shit works, so it’s lacking in specificity but also a pretty accurate thing to say in many situations.

Why is social media shit? Well, “the platforms are incentivized to demonstrate growth in profit to their investors, so they optimize their system for maximal engagement and retention over time, transferring the same incentive to creators, so many creators who would have made better work before desperately churn out poorly made material about whatever is popular and other, more interesting content is ultimately less common on the platform, with the root cause being the constant need for a growth in surplus in all areas of social production” is a better answer, but “it’s capitalism” is still an alright start.
by eru | 2025-10-17 06:39:15+00:00
You can't get to zero failures.

You might always get hit by a freak accident. Or an unlucky combination of cosmic rays replaces all your software (including all the redundant and fail safe systems) all at once.

This is all extremely unlikely, but not literally 0.

Note: I specifically mention an unlucky combination of cosmic rays. You can protect against a single or even a handful of cosmic rays just fine.