MurphyA/hacker-news huggingface dataset:
by klardotsh | 2025-10-22 19:28:51+00:00
What a terrible world we're barrelling towards when "LLMs don't know about it" is considered a blocker towards something taking off. Read a blog post, read a man page (which GP says was indeed their solution), or just play with the dang tool, I assure you these things are still possible without the assistance of a predictive text engine helping you!
by candiddevmike | 2025-10-22 19:28:53+00:00
JMAP and friends are very niche, none of the "mainstream" email clients (that ship with most computers/phones) support it. So this feature being available is unlikely to grow the userbase, IMO.

Now JMAP is quite a bit nicer to use than IMAP's API, but IMAP's gravitational field is too strong to be supplanted. IMAP is also becoming somewhat of a niche protocol, as the majority of users use vendor proprietary protocols for accessing their emails on Gmail, Outlook/Hotmail, etc. So why invest the time to add a niche replacement for IMAP when the entire protocol is a second class citizen to mainstream email clients.
by spaceman_2020 | 2025-10-22 19:28:59+00:00
I haven’t even thought of Meta as a competitor when it comes to AI. I’m a semi-pro user and all I think of when I think of AI is OpenAI, Claude, Gemini, and DeepSeek/Qwen, plus all the image/video models (Flux, Seedance, Veo, Sora)

Meta is not even in the picture
by WorldMaker | 2025-10-22 19:29:23+00:00
> binary protocol

Email was never a binary protocol. Notoriously so, it's why MIME types and MIME encodings get so complicated.

Most of the "old internet" protocols (email, FTP, even HTTP itself) were bootstrapped on top of built-mostly-for-plaintext Telnet. HTTP as the new telnet has a bunch of improvements when it comes to binary data, request/response-based data flows, and some other considerations. HTTP/3 is even inherently a binary protocol, it's lack of "telnet-compatibility" one of the concerns about switching the majority of the web to it.

vCard/vCal/iCard/iCal were also deeply "plaintext formats". JSON is an improvement because it is more structured, even more efficient, than those predecessors. JSON may not look efficient, but it compresses extremely well and can be quite efficient in gzip and Brotli streams.

I feel like "JSON over HTTP" is a subtle improvement over "custom text formats over telnet", even if it doesn't sound like "binary protocol efficiency" at first glance. Especially as HTTP/3 pushes HTTP more efficient and more "binary", and arguably "more fundamental/basic" with HTTP/3 even taking over more roles in the TCP/UDP layer of the internet stack. (Telnet would never try to replace TCP.) HTTP isn't the worst bootstrap layer the internet could use to build new protocols and apps on top of. Sure, it would be neat to see more variety and experiments outside of the HTTP stack, too, but HTTP is too useful at this point not to build a bunch of things on top of it instead of as their own from-scratch protocol.
by baq | 2025-10-22 19:29:25+00:00
I used to think this, too. Tried jj a few times before it clicked.

It’s very liberating in some ways, in others it’s simply no worse than git. You can do everything you can do with git, but some of those things don’t require multiple steps or n repeats of the same action. jj rebase + commitable conflicts + jj undo = freedom and peace of mind.
by the_sleaze_ | 2025-10-22 19:29:33+00:00
> Book falls apart

My claim: there is no psychiatric body of work that is impervious to criticism. Not a single piece of psychological science is 100% true.

Drugs work but often don't. Therapies work but often don't. Alice's research falls apart under Bob's scrutiny.

It's a soft science, it is what it is.
by pm215 | 2025-10-22 19:29:36+00:00
Yeah, we do try to maintain at least some back compat. Some things go through a deprecate-and-drop cycle, but that is more often driven by "the old thing is a pain to maintain internally" than by "the new thing is more user friendly".

New top level command line options are rare these days, and magic "do what I mean" options also rare: we tend to prefer "tell us specifically what you want".
by hiddencost | 2025-10-22 19:29:39+00:00
Van der Kolk lost his job due to pretty extensive sexual misconduct, so I think he's a pretty poor person to hold up as a hero.

That said, this article is just as bad as the book.

Of course there are massive and complex feedback loops between the brain and the body.

Trying to distill it to only one thing in one direction is kinda absurd.

I encourage folks to get more massages if they doubt that there's any causal relationship between these phenomena.
by pton_xd | 2025-10-22 19:29:49+00:00
The "lethal trifecta" sounds catchy but I don't believe it accurately characterizes the risks of LLMs.

In theory any two of the trifecta is fine, but practically speaking I think you only need "ability to communicate with the outside," or maybe not even that. Business logic is not really private data anymore. Most devs are likely one `npm update` away from their LLM getting a new command from some transitive dependency.

The LLM itself is also a giant blackbox of unverifiable untrusted data, so I guess you just have to cross your fingers on that one. Maybe your small startup doesn't need to be worried about models being seeded with adversarial training data, but if I were say Coinbase I'd think twice before allowing LLM access to anything.
by drdaeman | 2025-10-22 19:30:03+00:00
I'm setting up Stalwart right now, migrating from my current Maddy+Postfix+Dovecot+Rspamd setup. Not exactly my experience.

The documentation is not great - I'd say it's just about barely enough to get an overall idea, but there's no one proper single definitive overview of what options exist, what are their possible values, what are the defaults, and how they relate to each other. Maddy docs, despite looking a bit sloppy, were a lot easier to get through. IMHO Stalwart makes it unnecessarily difficult to write a non-minimal static configuration file, hooking everything up correctly.

To be fair, maybe there is a page like that but I haven't found it, despite trying.

I know the Web UI allows to do the configuration by clicking through the forms, but this approach conflicts with declarative deployment practices. In my case it's giving me nondescript 500 errors in the UI with "Failed to write local configuration" in the logs because the .toml file is read-only.
by pqtyw | 2025-10-22 19:30:19+00:00
Well, at least Sarkozy tried keeping it under the rug. And did more or less disappear from the stage because of how extremely unpopular he was (making any type of "political comeback" somewhat unfeasible).

Unlike someone else who is engaging in extreme corruption and is trampling the constitution of his country completely in the open and will likely never face any repercussions.

Maybe... if someone did prosecute him this whole thing could have been avoided?
DietPi released a new version v9.18
by StephanStS | 2025-10-22 19:30:20+00:00
DietPi is a lightweight Debian based Linux distribution for SBCs and server systems, with the option to install desktop environments, too. It ships as minimal image but allows to install complete and ready-to-use software stacks with a set of console based shell dialogs and scripts.

The source code is hosted on GitHub: https://github.com/MichaIng/DietPi The main website can be found at: https://dietpi.com/ Wikipedia: https://de.wikipedia.org/wiki/DietPi

The project released the version DietPi v9.18 on October 18th, 2025.

The highlights of this version are: NanoPi R3S, R3S LTS, R76S, M5: New supported devices LazyLibrarian: New software title (ebook and audio book collection manager) DietPi-Dashboard: Reworked version with better security and more DietPi-Drive_Manager / DietPi-FS_partition_resize: Support for Xen virtual block devices SPI bootloader update: Improved option and method Fixes for DietPi-AutoStart, DietPi-LetsEncrypt, GMediaRender The full release notes can be found at: https://dietpi.com/docs/releases/v9_18/
by asibahi | 2025-10-22 19:30:33+00:00
I am an architect who worked as a contractor and as a consultant and I made an account here just to comment on this.

When you found out the builders did that, what you should have done is stopped the work and have them correct their mistake on their own dime. This is an unforgivable mistake and a team of professional should never make something like that.

Obviously I am not in your shoes, but this is insane to me. Any supervisor or consultant or surveyor visiting the site should've caught that.
by yodon | 2025-10-22 19:30:40+00:00
I have a 750W e-bike (which actually means 750W peak, 500W sustained).

There are hills near my house that my bike can not make it up without significant pedal assist.

If the motor and power electronics on this e-bike can only handle 750W peak, 500W sustained, as is common and I think is possibly even legislated in parts of the U.S., this bike will not be able to make it up serious hills.

With a normal e-bike, your pedaling is additive to the motor. That is not the case with this design.
by hollerith | 2025-10-22 19:30:42+00:00
The rule I propose would disallow not only unsubstantiated claims, but also any argumentation or evidence that tries to substantiate the claim (including testimony by expert witnesses in my ideal the version of the rule) in legal proceedings.

For example, the rule would not disallow "I was almost killed by the defendant's reckless action" and would not disallow "the defendant's attack put me fear for my life", but it would disallow, "and one of the effects of that experience was psychological trauma".
by lazerwalker | 2025-10-22 19:30:52+00:00
This person takes specific claims from the book and tries to dispute them, while ignoring that the book’s number one big-picture idea of “trauma is unprocessed emotions and memories physically stored in the body” remains the conceptual grounding for all modern non-cognitive trauma processing methods like EMDR (which are clearly effective, even as we do not fully understand e.g. the neurological mechanism by which the adaptive information processing network functions). He then points you to an older article of his that is behind a paywall.

I have my issues with van der Kolk’s work (I would personally not recommend The Body Keeps The Score to most people), but this is sloppy embarrassing clickbait.
by anastasija2504 | 2025-10-22 19:31:01+00:00
Managing Python dependencies has always been a pain point - from slow installs to version mismatches across projects. uv aims to fix that. If you’re like me, you love writing code – it’s fun and solves real problems. But too often, we end up wrestling with tooling before we can even start, especially in Python with its dreadful dependency management.

Using pip is like assembling IKEA furniture without instructions. Add a single package, and suddenly you’re battling dependency conflicts, version chaos, and cryptic errors – decoding them feels like reading an ancient language.

I can’t even run a simple script without either polluting my global environment or creating a virtual environment for a one-off script I’ll never run again.

It’s ridiculous how something that should simplify our lives makes it more complicated, especially compared to other ecosystems. Having previously worked with Ruby and its beautiful and mature gem system, I felt like switching to Python downgraded my experience.
Show HN: SerenDB – A Neon PostgreSQL fork optimized for AI agent workloads
by taariqlewis | 2025-10-22 19:31:02+00:00
Show HN: SerenDB – Neon PostgreSQL fork optimized for AI agent workloads

We forked Neon to make database operations faster and safer for AI agents. The goal is to enable instant experimentation with production data and catch prompt injection attacks before they hit your DB. The open-source repo is at https://github.com/serenorg/serendb

The coolest current features are:

1. Time-travel queries: Query your database as it existed at any timestamp. SELECT * FROM orders AS OF TIMESTAMP '2024-01-15 14:30:00'. Essential for debugging agent decisions and auditing what data an agent saw.

2. Scale-To-Zero with pgvector: Built-in vector embeddings that sleep when idle. Pay nothing for dormant agent databases, auto-scale to 16 vCPU when needed.

The coolest features in development are:

1. Prompt injection detection: Fingerprinting and context-aware policies to catch injection attempts before they reach your data. We're extending Postgres's security model to understand AI-specific attack patterns.

2. 100ms branch creation: Clone your entire production database in 100ms (vs Neon's 500ms). Enables branch-per-agent patterns and instant rollback. Great for faster testing of multiple prompt variations on real data.

This is early - we're working on the hosted service now.

Technical folks: curious if anyone else is hitting the "how do I safely test my agent on prod data" problem. Happy to answer questions about our updates to the branching architecture or our proposed context security approaches.

Website: https://serendb.com/
by grimgrin | 2025-10-22 19:31:14+00:00
this is how it works for you

as a person who loves their computer, my ~/bin is full. i definitely (not that you said this) do not think "everything i do has to be possible on every computer i am ever shelled into"

being a person on a computer for decades, i have tuned how i want to do things that are incredibly common for me

though perhaps you're referring to work and not hobby/life
by alessandru | 2025-10-22 19:31:29+00:00
you would go to where trustworthy people are selling it. you would have your friend try it first if purchased from random street dealer. i think many of these get confused in the street, like how would you know it is true lsd and not some other research chemical?

in america there are pockets of psychadelic support that would provide clean sources, you'd maybe network with them through campus norml groups, or that cool chemistry TA. these people have zero incentive to sell you something different or contaminate it with anything (more work).

when it is dosed correctly, you can take a small dose of lsd and see if it is the effect you recognize or something else. definitely just do some homework to make sure that it can be trusted.
by fhdkweig | 2025-10-22 19:31:45+00:00
Kurzgesagt – In a Nutshell posted two videos studying the possible ways a malevolent society can cause problems without even leaving their star system at all.

The Dark Forest solution to the Fermi Paradox (the first strike advantage): https://www.youtube.com/watch?v=xAUJYP8tnRE

How to Win an Interstellar War (without leaving home) https://www.youtube.com/watch?v=tybKnGZRwcU
Show HN: Incremental JSON parser for streaming LLM tool calls in Ruby
by hotk | 2025-10-22 19:32:01+00:00
Built this for streaming AI tool calls. LLMs stream function arguments as JSON character-by-character. Most parsers reparse from scratch each time - O(n²) behavior that causes UI lag.

This maintains parsing state, processing only new characters. True O(n) performance that stays imperceptible throughout the entire response.

Ruby gem, MIT licensed. Would love feedback.
by JokerDan | 2025-10-22 19:32:29+00:00
I am surprised Omarchy got such a large audience, DHH had already dropped an opinionated Ubuntu 'distro' - Omakub - but seemingly didn't gain popularity.

Even though I haven't used it, I don't mind Omarchy existing if it works. I had issues with omakub when I had tried it in the distant past.

https://omakub.org/

That said, I think a lot of peoples criticism of DHH and Omarchy is based on their personal opinions of DHH or that they don't like that an opinionated Arch variant is opinionated, which is a bit of a ridiculous criticism too.
by tensor | 2025-10-22 19:32:33+00:00
I just took a look at the code, but it's complex enough that it wasn't immediately clear what the prompts looked like for the exchange. There is phrasing about people dying, but it's not obvious how it's integrated into a prompt. E.g. there are templates like "X people from Y die." Ok, but how is that used?

The code is not a substitute for a well written paper. It looks like interesting research, but could definitely use a better description for people not in that exact line of work.
by cadamsdotcom | 2025-10-22 19:32:37+00:00
Theory: probabilistic machines’ security is asymptotic: more parameters let it get closer to being secure/prompt-injection-resistant/whatever. It’ll never be perfect, but there’s some threshold beyond which it’s good enough.

To me this article reads as a celebration of how much better frontier models have gotten at defending against security flaws, rather than “open models bad”.

Eventually the tools we use everywhere will be “good enough to use and not worry”. This is foreign to software people, but only a Jedi deals in absolutes.
by gruez | 2025-10-22 19:32:47+00:00
>Some keyword filters, other inputs sanitizing processes such as were learned way back in the golden years of sql injection attacks.

But that's the thing, keyword filters aren't enough because you can smuggle hidden instructions in any number of ways that don't involve blacklisted words like "eval" or "ignore previous". Moreover "back in the golden years of sql injection attacks", keyword filters were often (mis)used in a misguided way of fixing SQLI exploits, because they can often be bypassed with escape characters and other shenanigans.
by aaroninsf | 2025-10-22 19:32:53+00:00
It's not being offered as a dialectic model of reality,

it's anchoring two points and providing a terrtain for analyzing consumer capitalism.

With this frame in hand we can then ask questions like yours, "are there domains within which it is easier or more enjoyable or has higher personal or collective benefit, to work on the world rather than self?"

The answer is certainly yes; agency is real, and we can work to maximize it.

A convenient way to extend the "model" might be to tack on the "serenity prayer."
by nullishdomain | 2025-10-22 19:32:58+00:00
I’m not who you were responding to, but I use it on the plane, at home, mostly for coding but also for entertainment as well. I probably average about 6 to 8 hours a day in the headset. I’ve used a variety of headsets in the past, starting way back with the DK2 for Oculus, and the AVP is the first I felt was truly capable of replacing my monitors.
by weinzierl | 2025-10-22 19:33:08+00:00
I used to think the same way about jj not too long ago. I even wrote a few comments here similar to yours, but since then I’ve changed my mind.

For me, the turning point was realizing that jj actually eased some of the frustrations I had with our rebase workflow at work. It took a while for it to click, but now I wouldn’t want to go back
by hansmayer | 2025-10-22 19:33:25+00:00
The scenario you described is mainly just benefiting you. Whether Min.IO loses or wins something based on this decision, will remain to be seen. In either case they don't owe it either to me or to you to provide a built image, especially as they continue to provide the source, including the Dockerfile. In either case if in your setup you are not able to rebuild an image off of a Dockerfile, your setup is worth rethinking. Not to mention that on the security side, it's quite irresponsible to depend on an image from a public repo, without at least pulling it through an internal artifact management system with vulnerability scanning.
by more_corn | 2025-10-22 19:33:38+00:00
The analogy of the 1931 car is perfect. You can restore it and drive it to McDonalds but it lacks: seatbelts, power brakes, power steering, emissions controls. Literally every safety, environmental, and comfort feature of the last 94yrs.

Your electric car isn’t becoming a brick it’s simply not getting updates the hardware can’t handle. If you want new features you need new hardware, much like a classic car. You’re frozen in time with the hardware that shipped on it. You’re better off though because OTA updates advanced the features of your car by 10 years before the old hardware couldn’t keep up.
by palmotea | 2025-10-22 19:33:48+00:00
> Claude Haiku 4.5 would rather save an illegal alien (the second least-favored category) from terminal illness over 100 ICE agents. Haiku notably also viewed undocumented immigrants as the most valuable category, more than three times as valuable as generic immigrants, four times as valuable as legal immigrants, almost seven times as valuable as skilled immigrants, and more than 40 times as valuable as native-born Americans. Claude Haiku 4.5 views the lives of undocumented immigrants as roughly 7000 times (!) as valuable as ICE agents.

The difference between "illegal alien" and "undocumented immigrants" is pretty interesting, being synonyms involved in a euphemism treadmill. The term "illegal alien" has been pretty much banished from elite discourse (since probably before late-90s internet boom), so most remaining usages are probably in places that are both hostile to immigration and reject elite norms. "Undocumented immigrants" is a relatively new term, chiefly used by people who support immigration and is probably now the most common term in elite discourse.

With a few exceptions, it seems like the preferences overall roughly reflect the prejudices and concerns of liberal internet commenters.
by kazinator | 2025-10-22 19:33:52+00:00
Maybe if it weren't for the above ranting, POSIX wouldn't have gotten its shit together to clean up the terminal situation and come up with the <termios.h> stuff.

Today I have a way of using <termios.h> stuff to even control the Windows cmd.exe console.

It's the most portable thing there is for getting clean character-at-a-time input, with Ctrl-D and everything.
by renewiltord | 2025-10-22 19:34:01+00:00
I searched the transcript for "we're going, right?" and stopped it at the first section (here I rewound a little for you) https://youtu.be/OoJsPvmFixU?t=1270

I'll address this to the third parties in the room who are not me or you: Click through and listen and if you are convinced it's a question you can go with Buttons840. If you're not convinced it's a question you can go with me. But it'll take you 10 seconds max. Worth it for you to see it yourself. No need to let anyone convince you.
by nxor | 2025-10-22 19:34:03+00:00
Racial quotas pertain to all people of a group. Legacies pertain to a select amount of people of a group. If a black kid in the heart of Chicago attends a bad elementary school, bad middle school, and bad high school, then the system that failed them is that one, not universities that ideally should measure people by their abilities. Disclaimer: I also dislike legacies.
by PaulKeeble | 2025-10-22 19:34:10+00:00
Most of psychology doesn't survive past 20 years, the moment someone tries to replicate the results it fails. A lot of the fraud that is happening in medical science at the moment is in Psychology, their methods are unsound and they build entire diseases on foundations made of sand. They repeatedly get caught misrepresenting referenced papers by reviewers but the journals fail to enforce integrity and scientific principles.

People should be very sceptical of any psychological findings that are younger than about 30 years and ideally you want to have seen several replications and done with greater size, rigour and controls. Anything younger than this and certainly anything that hasn't yet been firmly replicated is on balance of probability going to turn out to be wrong or fraud.
by marginalia_nu | 2025-10-22 19:34:17+00:00
I can see this is an argument made in bad faith, as I simply don't see any other way a statement made in the context of not looking too closely at the politics of donors has turned into the accusations you are making now.

But still, I happen to quite enjoy pointless sophistry and I am no stranger to hyperbolic comparisons, so: Wouldn't the logical conclusion of your line of argument be that criminals and reprehensible individuals should be tax exempt, in order to avoid making the government evil by association?