MurphyA/hacker-news huggingface dataset:
by ineedasername | 2025-10-22 18:27:04+00:00
Yes, of course if you can inject something into context there’s lots can be done. And anything running local will require different security considerations than running remote. Neither of these things make for a paradox.

Also from the article: For example, a small model could easily flag the presence of eval() in the generated code, even if the primary model was tricked into generating it.

People are losing their critical thinking. AI is great, yes, but there’s no need to throw it like a grenade at every problem: There’s nothing in that snippet or surrounding bits from the article that needs an entire model-on-model architecture to resolve. Some keyword filters, other inputs sanitizing processes such as were learned way back in the golden years of sql injection attacks. But these are the lines of BS coming for your CTO’s, spinning them tales about the need for their own prompt-engineered fine tunes w/ laser sighted tokens that will run as edge models and shoot down everything from context injected eval() responses to phishing scams and more, and all require their monthly/annual LoRa for purchasing to stay timely on the attacks. At least if this article is smelling the way I think it is.
by Flamingoat | 2025-10-22 18:27:28+00:00
> It's really a YOU problem, i have working X on all my machines, have a good day.

Not at all. I can read the man pages and docs fine. Stuff like this should work out of the box by now. It doesn't with the BSDs typically. That is the reality.

Also, it isn't just X. It is other issues once you have X working.

Once you spent a good few hours sorting things out, there is almost no benefit over running a decent Linux distribution where almost all of this working OOTB.

I don't understand why you are getting bent out of shape. I am simply stating the facts as I see them.

> You do You and that's good, just use what you like.

Well obviously I am going to use what I like.

However stating that doesn't mean you stop me (or anyone else) from making constructive criticisms of something you like.

I have used tried many of the *nix variants over the last 20 years. It is just easier to use Linux if you want a desktop OS.
by twic | 2025-10-22 18:28:15+00:00
Great article on Chinese oil exploration from, uh

> At Boston Organics, we believe that access to healthy, local, and responsibly grown food should be simple and accessible to everyone. That’s why we deliver fresh, organic produce while respecting the environment, supporting small farms, and building strong, sustainable communities.

Is this some sort of weird content mill domain squatting situation?

Official press release with lots of photos: https://english.www.gov.cn/news/202411/17/content_WS6739adf7...

Science Insider piece: https://www.science.org/content/article/china-s-dreamy-new-s...
by the_af | 2025-10-22 18:29:16+00:00
I guess I'm skeptical you can steer current LLMs in this way, or at least, this hasn't been my experience.

I also worry not only about the loss of a shared experience among players, but also about the authorial voice... I find LLMs (even when prompted) tend to have an instantly recognizable style that I find unappealing.

Yes, all of this -- voice, tone, narrative direction -- could in theory be fixed with the right prompts, but I remain skeptical. From theory to practice seems such a long way...
by exmadscientist | 2025-10-22 18:29:19+00:00
One of the other important points about rooms and cyborgs is what partial participation looks like.

If I don't like the room, I'm able to get up and leave. It might be difficult and annoying, and I might have to end up in the middle of the woods or desert or something, but I can do it. (Yes, we are increasingly making this harder and harder to do, by cyborging "the system" itself -- think things like the demise of cash, or the requirements for digital ID cards, or ... -- but you get the idea.)

If I'm a cyborg, how do I leave? Can I leave? Do I even control myself anymore? Being a cyborg sounds great if I control my "wetware". Which I probably do not. (Do you control the computing device you're reading this message on? Really? The Linux kernel being open source might be really nice (it is really nice), but even if you have the de jure ability to control it, do you have the practical ability to do so? And then there's the hardware. Any way you trace the hardware, you'll end up with quartz wafers from Spruce Pine. Do you have any way to replicate that?) There is no way in hell I'd want to be someone else's cyborg, which means that with the state of the tech world, I don't want to be a cyborg at all.
by inimino | 2025-10-22 18:29:29+00:00
The most "shocking" thing to me in the article is that people (apparently) think it's acceptable to run a system where content you've never seen can be fed into the LLM when it's generating code that you're putting in production. In my opinion, if you're doing that, your whole system is already compromised and you need to literally throw away what you're doing and start over.

Generally I hate these "defense in depth" strategies that start out with doing something totally brain-dead and insecure, and then trying to paper over it with sandboxes and policies. Maybe just don't do the idiotic thing in the first place?
by microtonal | 2025-10-22 18:29:59+00:00
Another possible aspect of it is that probably more and more sites are blocking AI crawlers through e.g. Cloudflare's support for blocking AI crawler and AI agents. This will give them a backdoor to that content through a user's connection.

I am not sure if this is happening, but as blocking becomes more prevalent, having a widely-used browser will help.
by AshamedCaptain | 2025-10-22 18:30:05+00:00
And Samsung is even worse: remember GearVR ?

I had a Note device that on launch was compatible with GearVR, but they killed support for it in one of the few the Android updates. This was back when getting 3 Android updates was "lucky". i.e. they launched and completely killed GearVR (paperweight level) all within 5 years.
by deanc | 2025-10-22 18:30:17+00:00
Meta is fumbling hard. Winning the AI race is about marketing at this point - the difference between the models is negligible.

Chat GPT is the one on everyone's lips outside of technology, and in the media. They have a platform by which to push some kind of assistant but where is it? I log into facebook and it's buried in the sidebar as Meta AI. Why aren't they shoving it down my throat? They have a huge platform of advertisers who'd be more than happy to inject ads into the AI. (I should note I hope they don't do this - but it's inevitable).
by eikenberry | 2025-10-22 18:30:18+00:00
> Yeah, having mutability optional would be great. It would also allow a lot of data to pass through the stack instead of heap due to pointers, which Go is riddled with for absolutely no reason(imo).

My guess is that it is due to many developers bringing reference semantics with them from other languages to Go. It leads to thinking about data in terms of pointers instead of values.
by jqpabc123 | 2025-10-22 18:30:42+00:00
“China has decided that the leverage is on their side,”

Previously, they were in a holding pattern --- waiting to access the economic impact.

But now the tables have turned. All indications are that tariffs hurt US consumers more than Chinese producers.

https://www.euronews.com/business/2025/10/13/chinas-global-e...

The only reasonable, rational and constructive way to take on China in a trade war would have been in conjunction with global allies --- which we no longer have.

China only has to wait for the USA to surrender and for Trump to figure out a way he can try to declare victory.
by holyknight | 2025-10-22 18:30:44+00:00
Yeah, this is a the answer. Our brain only remembers novelty, our firsts years and even decades are plagued by it. But after you are already 5 or 10 years onto your "adult" life you basically do exactly the same each day. 80% of what we do in our daily life as adults is not memorable at all and get completely ignored by our long-term perception. In short, it feels like the time flies because you did only 2 or 3 memorable things in the whole year.
by rcxdude | 2025-10-22 18:30:55+00:00
Not entirely. There are a few different motivations for punishment: one, is to act as a deterrant (people won't do the crime because they fear the punishment. Tends to work best when people think they are likely to be caught), two is to act as a form of correction/rehabilitation: (after one punishment people are less likely to do it again. Tends to have problems when the punishment sets people up to be more likely to commit crime, by either putting them in contact with other criminals or further pushing them into desperate circumstances after the punishment), third is as a sense of justice, to some extent as revenge. The punishment of an offender can help the victims on an emotional level and also foster trust in the system (requires that the punishments are viewed as just and proportional). Lastly, in extreme cases, as a form of protection/prevention: by removing the person from being able to commit any further crimes.
by apizon | 2025-10-22 18:31:34+00:00
Thanks, I'm not gonna lie it's probably not the best or at least should not be your only resource.

It can be pretty useful if you're someone that likes understanding how things work but for pure playing skills learning to play songs you like using a chord or tabs book/app/website or a better a teacher will probably get you started much quicker and you can learn the theory at any point later when you feel like it

Beginner lessons are free though so you can still check it out
by glenstein | 2025-10-22 18:31:45+00:00
It seems like for better or worse if you want to be a web company, there's a lot of incentive to try and become a platform. A limitation for the likes of Zoom, Dropbox, Proton, and seemingly OpenAI is they have to struggle to integrate with calendars, office suites, and even the browser itself. And it may be turning out to be true that it's more feasible to simply invent your own parallel ecosystem of benefits and office suites and online storage drives than to attempt to negotiate with the gatekeepers of existing ones.

I would like to think that the "real" solution is strong web protocols and interoperability, And perhaps even something like an explicit anti-platform ethos. As it stands it seems like the strategy of being a platform is to outrace protocols in terms of offering new capabilities. But it would at least be nice if protocols are close enough behind that they're effectively a "safety net", or the equivalent of generic drugs, that everyone can fall back to.
by greatgib | 2025-10-22 18:32:32+00:00
It's hard to imagine but they are not contrarian fueled articles. It's not the usual thing, here are only interviews of their closed one with their verbatim highlighted. Words of support from public figures. The day before going to jail he was received at the current president office (like the french Whitehouse) the day after, the "justice minister" went to see him in jail to give him his support.

You have editorial like "Sarkozy stays honorable and magnificent despite an illegal non proof based sentence" "His wife so sad that this hero of the nation that did so much, proud father, beloved by his friends, will have to live this hard experience" All days long.

A few examples just to give one newspaper: https://x.com/Le_Figaro/status/1980589938941874341

Or "Sarkozy in jail, the fault of the justice!" https://x.com/Le_Figaro/status/1980567283157139926

And we now all know well what book "he will bring" to show how honorable is this man: "The count of Monte Cristo", "life of Jesus Christ", ...
by 8organicbits | 2025-10-22 18:32:39+00:00
For postgres I think the timestamp prefix offers ordering, such that new rows are added to the end. The hash function here seems like it would cause new rows to jump around, which would be an improvement for databases like Spanner, but I think would hurt postgres perf.

I'd kind of be interested in an ID that does combines an autoincrement prefix with a random suffix. Every ID would be unique and monotonically increasing due to the autoincrement and the random suffix would make it unguessable (or less guessable, depending on the number of bits used). It's an odd choice for a UUID, which usually worrys about decentralized ID generation, but so many smaller apps use UUIDs with a single central postgres database...

These kinds of experiments are well suited to UUIDv8.
by mguerville | 2025-10-22 18:32:48+00:00
Sales (CRMs are all in browser now), Marketing (entire stack, include some creative (Canva) is in browser now), Strategy is half in powerpoint/xls (creating content) and half in browser (researching info), HR (Workday, LinkedIn, etc.), product (Figma, Miro, Aha!, Linear), support (Asana/Jira) probably spend at least 50% of their working time in browser. Also the time people are at their desk but not working, is usually in browser (check news, stocks, blogs, personal email, etc.)
by AlienRobot | 2025-10-22 18:32:48+00:00
>To the surprise of literally nobody, it’s Chromium with AI slapped on top

We should start calling browsers "Chromiums."

My favorite Chromium is Vivaldi, by the way. It doesn't have AI slapped on it, but it has native a RSS client, e-mail client, vertical tabs, notes, a way to separate tabs into "workspaces" and a way to save tabs into "sessions" that you can reopen later, and it native profiles like Chrome. There are also countless settings you can customize (and lots of terrible defaults that you will want to customize, like rocker gestures). It's pretty much Opera 2.0 without the crypto. These features feel to me far more useful than AI.
by the_af | 2025-10-22 18:33:08+00:00
> Arguably, different responses would increase replayability.

Yes, but I don't think we're talking about the same kind of replayability. Certainly, not the kind I care about.

To me, replayability is a carefully constructed experience, by an author, and you explore it and find different things about it (say, like Adam Cadre's "9:05" [1]). But you can share your experience with another human, you can both go the same way and experience the same thing, and discuss it -- "hey, remember when you face the trolls in the cave, and...".

With an unconstrained LLM, you lose this. Plus, with no authorial voice behind it, I don't really care what a glorified stochastic automaton can produce.

(In case you're wondering, I find myself distancing from classic sandbox games as well... I used to like them, now I find them "too much work" for not enough payoff. With some exceptions, I much prefer a carefully curated gameplay experience).

----

[1] "9:05" by Adam Cadre: https://adamcadre.ac/if/905.html
by jumpkick | 2025-10-22 18:33:17+00:00
I wonder how it avoids pipes stubbed up through the slab, or electrical EMT, etc. or how it avoids mistakes made during the rough-in.

What if the plumber missed a drain or supply by an inch? Guessing the robot doesn't adjust its outline. I.e. if a sewer stub is wrong by a few inches, the wall needs to be moved to fit the toilet, or the slab needs to be busted up and the sewer line relocated.

I suppose if it gets some of this wrong, it'll be obvious, and a human can correct it.
by malthaus | 2025-10-22 18:33:35+00:00
... until reality catches up with a software engineer's inability to see outside of the narrow engineering field of view, neglecting most things that the end-users will care about, millions if not billions are wasted and leadership sees that checks and balances for the engineering team might be warranted after all because while velocity was there, you now have an overengineered product nobody wants to pay for.
by kelnos | 2025-10-22 18:34:02+00:00
At the risk of being unreasonably negative, stuff like this just makes me feel... tired. Git is... fine. I'm sure it doesn't solve every problem for everyone, and oh boy does it still have many rough edges, but it works and (as the article points out), git has won and is widely adopted.

I've extensively used CVS and Subversion in the past. I touched Mercurial and Bazaar when I ran into a project that used it. I remember in the CVS days, SVN was exciting to me, because CVS was such a pain to use, in almost every way. In the SVN days, git was exciting to me, because SVN still had quite a few pain points that poked me during daily use. Again, yes, git had and has rough edges, but nothing that would make me excited about a new VCS, I don't think.

Maybe I'm just getting old, and new tools don't excite me as much anymore. Learning a new tool means spending time doing something that isn't actually building, so my eventual use of the new tool needs to save me enough time (or at least frustration, messily converted into time units) to balance that out. And I need to factor in the risk that the new tool won't actually work out for me, or that it won't end up being adopted enough to matter. So I think I'll wait on jj, and see what happens. If it ends up becoming a Big Deal, I'll learn it.
by JumpCrisscross | 2025-10-22 18:34:08+00:00
> "Spend Five Minutes in a Menu of Legalese" is not the intended alternative to "Accept All". "Decline All" is!

Do any browsers support running a minified LLM on device through an extension?

Training an LLM to reject optional cookies (or better yet, fuck with the telemetry) would seem highly doable nowadays.
by asadotzler | 2025-10-22 18:34:21+00:00
Maybe they shouldn't have hired and put so many cooks in the kitchen. Treating workers like pawns is wild and you should not be normalizing the idea that it's OK for Big Tech to hire up thousands, find out they don't need them, and lay them off to be replaced by the next batch of thousands by the next leader trying to build an empire within the company. Treating this as SOP is a disservice to your industry and everyone working in it who isn't a fat cat.
by Fawlty | 2025-10-22 18:34:23+00:00
FWIW it’s trending on huggingface papers and there is a more in-depth discussion there[1]. Seems like the early results are promising and someone replicated that independently but it still needs to be proven that the claims work also at the bigger scale. [1] https://huggingface.co/papers/2509.26507
by ryanrasti | 2025-10-22 18:34:26+00:00
Agree with the other comments that it's not fundamentally innovative and no one with a sense of privacy wants to ship all browsing data to one of the mega-AIs.

BUT -- that's missing the strategic point here:

- Everyone realizes that being the gatekeeper for user interaction is key: that's where all the context is and utility will come from

- AI is providing a unique opportunity to overturn a long-held monopoly (Chrome's dominance) by providing

Put another way, ChatGPT + Chromium = OpenAI's Trojan horse.

It would be foolish for them to waste resources innovating on the browser engine (which isn't their core competency) when they can use their actual competency (AI) to take their bet at capturing the market
by Fanofilm | 2025-10-22 18:34:27+00:00
I think this is because older AI doesn't get done what LLM AI does. Older AI = normal trained models, neural networks (without transformers), support vector machines, etc. For that reason, they are letting them go. They don't see revenue coming from that. They don't see new product lines (like AI Generative image/video). AI may have this every 5 years. A break through moves the technology into an entirely new area. Then older teams have to re-train, or have a harder time.
by Bender | 2025-10-22 18:34:40+00:00
One way to mitigate that effect for some may be disabling karma view in uBlock -> My Filters

# HN Block Karma View news.ycombinator.com##.comhead .score:style(overflow: hidden; display: inline-block; line-height: 0.1em; width: 0; margin-left: -1.9em;) news.ycombinator.com###hnmain > tbody > tr:first-of-type table td:last-of-type .pagetop:style(font-size: 0!important; color: transparent!important;) news.ycombinator.com###hnmain > tbody > tr:first-of-type table td:last-of-type .pagetop > *:style(font-size: 10pt; line-height: 1.45em;) news.ycombinator.com###logout::before:style(content: "|"; padding: 0.25em;) news.ycombinator.com##form.profileform tbody tr:nth-child(3)
by move-on-by | 2025-10-22 18:34:41+00:00
1. Targeted ads being more profitable has no relevance to the number of ads on the page. Advertisers will always try to maximize the number of ads and potential profits regardless of profitability.

2. Contextual ads are not targeted and would not be showing you adverts for diapers or ladies shoes- unless you are reading about diapers or ladies shoes.
by hellotomyrars | 2025-10-22 18:35:05+00:00
Good grief. Developers who use Unity/Unreal/Game Maker/ whatever don’t announce their game as being a revolutionary new tech.

The problem isn’t that they made yet another chromium based browser with their garbage on top. The problem is that they’re positioning it as this exciting and radical new thing when it’s just chromium with their garbage on top.
by binarynate | 2025-10-22 18:35:07+00:00
Although developers may be hesitant to embrace this out of fear of Google eventually killing it off, an upshot is that if you develop an XR app with Unity (and its XR Interaction Toolkit library), it ends up being quite portable across different XR devices / operating systems (e.g. Meta Quest, Pico VR, HTC Vive).
by codegeek | 2025-10-22 18:35:33+00:00
"The alternative is that we move to a 4 (or 3?) day work week, or UBI,"

Those things are not practical. Human beings are designed to work. Before the Industrial Era, it was all hard labor. Then came the machines and it became "hard labor with machines". Then came the Internet era and it become "work with computers". Now with AI, it will just be "Work with AI". The number of hours/days will remain the same. Employers will still expect you to work 5 days a week if you have a job. It is just that they will expect your output to be 50-100x higher using AI.
by n4r9 | 2025-10-22 18:35:36+00:00
It's not a hard and fast definition, but generally involves:

* An honest acknowledgement of ones behaviour and its impact on others.

* Accepting the consequences of your behaviour, whether legal (such as going to jail), financial, or personal.

* Taking the initiative to make amends where possible.

* Taking steps to improve oneself and/or prevent the same behaviour in future.
by dugite-code | 2025-10-22 18:35:49+00:00
IMHO Fial2ban, just like port knocking, isn't cargo cult security. They are a single tool that can be included in a general system security arsenal, not the only tool you should use but one of a suite of tools that can be used depending on what you want to achieve.

Personally I use fwknop for port knocking as it doesn't suffer from replay attacks as it's an encrypted packet. But still serves the same niche
by hinkley | 2025-10-22 18:36:05+00:00
Before my old company spun off, we didn’t know the old ops team had put on-prem production and our Atlassian instances in the same NAS.

When the NAS shit the bed, we lost half of production and all our run books. And we didn’t have autoscaling yet. Wouldn’t for another 2 years.

Our group is a bunch of people that has no problem getting angry and raising voices. The whole team was so volcanically angry that it got real quiet for several days. Like everyone knew if anyone unclenched that there would be assault charges.
by dxtrous | 2025-10-22 18:36:18+00:00
From the authors: great question. If you take an "easy" task for long-range dependencies where a Mamba-like architecture flies (and the transformer doesn't, or gets messy), the hatchling should also be made to fly. For more ambitious benchmarks, give it a try in a place you care about. The paper is really vanilla and focused on explaining what's happening inside the model, but should be good enough as a starting point for architecture tweaks and experiments.