MurphyA/hacker-news huggingface dataset:
Show HN: Kexa.io – Open-Source IT Security, Compliance and AI-Powered
by kexaproj | 2025-10-15 11:39:03+00:00
Hi HN,

We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone.

Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security posture. You can define your own rules or use common standards.

We'd love for the HN community to check out the open-source project on GitHub. Feedback on the concept or the current tool is highly welcome, and a star if you find it interesting helps others discover the project!

If you're interested check out website we also have an offer with dashboard, no-code rule builder,..
by jcattle | 2025-10-15 11:39:23+00:00
This literally is the bottleneck which wastes the energy and is so stupidly expensive in the case of Britain (and Germany).

The issue is lots of renewable generation far from places where it is used and not enough transmission capability.

This is called curtailment and is really, really bad. Energy providers need to pay the windfarms for the energy that they (the grid operators) fail to transmit to where it is needed, and they have to pay backup generation (usually gas) at the place with the load.
by subjectivationx | 2025-10-15 11:40:58+00:00
You are spot on and summed it up perfectly.

I am using language models as much as anyone and they work but they don't work the way the marketing and popular delusion behind them is pretending they work.

The best book on LLMs and agentic AI is Extraordinary Popular Delusions and the Madness of Crowds by Charles Mackay.
Show HN: Trott – search,sort,extract social media videos(ig,yt,tiktok)
by sudo712 | 2025-10-15 11:43:01+00:00
I built Trott out of frustration with my own “Saved” folders on Instagram and YouTube. I’d save reels and shorts—workout tips, recipes, travel spots—thinking I’d find them again later. But, like most people, I ended up with a black hole of unsorted videos: no search, no filters, and if I ever did find the right video again, I’d have to dig through the whole thing just to get that one detail I needed.

When I tried looking for solutions, I found only genre-specific apps or tools that demanded manual uploads or new workflows. None felt like they understood how real users behave or save content. So I decided to build Trott.

What makes Trott different?

You can share any Instagram Reel or YouTube Short (TikTok support launches next week) to Trott, straight from your phone’s native share menu—no manual uploads.

Trott uses AI to extract relevant info automatically (ingredients, places, products, etc.) and sorts everything for you.

It’s fully searchable with natural language. Just type something like “that Kyoto café from Instagram” and Trott finds it.

For travel videos, it can even produce Google Maps routes from extracted locations.

App Store: https://apps.apple.com/in/app/trott/id6751728352 Play Store: https://play.google.com/store/apps/details?id=in.hattimatiml...

I’d love to hear how you organize your own saved content—or if you’ve just given up and let it pile up like I used to. Open to all questions, feedback, and bug reports. Happy to discuss the tech details behind Trott if you’re interested!
by xtiansimon | 2025-10-15 11:43:06+00:00
> “vote marking machines”

?? In NYS the main process for voting is voter marks their paper ballot and then scans the marked ballot into the “reader” (DS200). Optionally, there is a “marking” machine (Automark) which has accessibility features. But this machine only marks the ballot, and does not read. The marked ballot must still be scanned.

Are you proposing to eliminate the single scanner and have a new machine developed which marks and scans ballots?

If that’s the case, that would be incredibly expensive and greatly slow the voting process. I say this having worked at polls for 15 years.

Also, in the article—

> “…the SAVE Act got a lot of attention […] because it requires in-person registration with specific documentary proof of citizenship (like a passport or State ID + birth certificate) that millions of citizens lack.”

Some confusion in this, because while a passport may prove citizenship, it is not sufficient to prove eligibility to vote. Why? Because it doesn’t show your address, and eligibility from the Bureau of Elections standpoint is residency in an Assembly District/Election District. IE, you vote where you live because of local candidates and initiatives.
by cedilla | 2025-10-15 11:43:18+00:00
Electricity prices are only very tangentially related to production cost. As you say yourself, grid costs are a factor.

> France has lower electricity prices

France has incredibly high subsidies for nuclear power, and it's still not enough. And their newest power plant cost 20 billion just in construction for a paltry 1.6GW, and to even begin new ones they need to subsidy them with 100€ per MWh (which is about thirty-three times the subsidies wind power recieves in Germany).

If anything, France is a nice example of how it's maybe nice to /have/ a fleet of nukes, but Germany does not have them nor do they have the time to build up reactors. Even if there were politicians interested in paying for them (because the free market sure isn't).
by close04 | 2025-10-15 11:43:35+00:00
What you said stays equally true even if every US school had a shooting morning, noon, and evening, while Europe had exactly 2 shootings ever, both in the past 10 years. A statement of fact can be worthless or misleading too if presented a certain way.

That's why I didn't say you were factually wrong but that you're trying to play down the reality in one giant whataboutism effort. Whataboutism is all misdirection and deflection rather than factually wrong statements.
by jononor | 2025-10-15 11:43:36+00:00
If done at scale, they are kinda crowd sourcing the test set from the entire internet, personal and business world. It will be harder and harder at least to pinpoint weaknesses, at least for the general public. It probably has little to do with intelligence (at least fluid intelligence as defined by Chollet et al) - but I guess it is sound tactic if the strategy is "fake it till you make it". And we might be surprised as to how far along that can go...
by fhennig | 2025-10-15 11:44:19+00:00
I'm in the same boat, I still find the model to make mistakes or solve things in a less than ideal way - maybe the future is to just not care - but for now I want to maintain the level of quality that the codebase currently has.

I think it's good to keep up with what early adopters are doing, but I'm not too fussed about missing something. The plugins is a good example: A few weeks ago there was a post on HN where someone said they are using 18 or 25 or whatever plugins and it's the future, now this person says they are using none. I'm still waiting for the dust to settle, I'm not in a rush.
by mrtksn | 2025-10-15 11:44:33+00:00
EU doesn't have top down control, in fact EU has very little control over anything and that's why its ineffective in its current form despite having enormous wealth as a block. All these initiative this initiative that are, IMHO, just political FOMO and I don't expect them to amount to much.

EU doesn't have the capacity to plan stuff, even under grave danger from the war in Ukraine EU barely coordinates building some bombs. EU is able to bite only when each country is coordinated well enough to implement some laws, i.e. GDPR thing bites through the regulators of each country and not through EU. If EU eventually becomes a state then thing can change but thats not the case at the moment.

EU is not a communist state and doesn't have a top down planning, its a coordination centre for 27 free market countries and its up to the EU capitalist and engineers to come up with technology and investment. They actually do, that's why EU is huge exporter of stuff. Believe it or not, there's more in this world than coding, there are all kinds of engineers that deal with atoms and electricity. However the "tech" doesn't flourish in Europe because doesn't make economic sense. US has full access to EU markets, they already have the know how and capital concentration, so why bother to re-invent the wheel in EU? Just go do it in US or do work for the US companies cementing their position even further.

US can afford not to have much regulations over the "tech" because they have the HQs and all the important people in SV. The moment some company that's not from US becomes big they take it down. TikTok for example, they forced a sale to fking Oracle, US doesn't allow foreign communications on its land. Its a semi-open knowledge that US government is working with those "tech" companies to control its own population and interests.

I don't know, if the US way of doing this is the better one, maybe EU should just force all the US "tech" companies to sell to EU owners just like with TikTok. Then get rid of all these regulations and just summon the local people when things go bad, like the "wrong" ideas spread like the way it happened on TikTik with Israel-Palestine conflict. The US way is like, oh you are not cooperating and not pushing the right agenda? Oh that's fine but too bad the new employment rules will hurt you and you can forget about this datacenter permit thing.
by ErikCorry | 2025-10-15 11:44:52+00:00
The Norwegian grid is divided up into different regional grids and they each have different electricity prices. Those who build interconnects between the areas can get some of the price difference. It's very different from the UK market, which pretends to have a single area, runs auctions to determine the price and then has to make post-auction adjustments (in the billions) to fix the fact that electricity can't be transmitted across the grid.

See https://app.electricitymaps.com/map/live/fifteen_minutes
by erichocean | 2025-10-15 11:45:10+00:00
> it’s impossible for AI creators to definitively say their AI will never act maliciously or dangerously for any prompt it could be given

This is false, AI doesn't "act" at all unless you, the developer, use it for actions. In which case it is you, the developer, taking the action.

Anthropomorphizing AI with terms like "malicious" when they can literally be implemented with a spreadsheet—first-order functional programming—and the world's dumbest while-loop to append the next token and restart the computation—should be enough to tell you there's nothing going on here beyond next token prediction.

Saying an LLM can be "malicious" is not even wrong, it's just nonsense.
Show HN: Halloy – Modern IRC client
by culinary-robot | 2025-10-15 11:45:47+00:00
I started working on Halloy back in 2022, with the goal of giving something back to the community I’ve been a part of for the past two decades. I wanted to create a modern, multi-platform IRC client written in Rust.

Three years later, I’ve made new friends who have become core contributors, and there are now over 200 people idling in our #halloy channel on Libera.

My hope is that this client will outlive me and that IRC will live on.
by ricardobeat | 2025-10-15 11:46:09+00:00
I am inclined to use `defaults write -g com.apple.SwiftUI.DisableSolarium -bool YES` full time despite all the horrible flaws (e.g. tabs in Safari completely lose their active state, the dropdown in the address bar has no background at all; I can use Zen browser in the meantime).

What a huge relief to just have normal sidebars in Finder etc, and window border radiuses that make sense and match the physical screen rounded corners.

It's also incomprehensible that Apple, once focused entirely on user experience, would not test all their accessibility features for a release centered around a UI redesign.
by wkat4242 | 2025-10-15 11:46:41+00:00
> They've shown less than no interest; the EU would be a great place to build software companies if the governments weren't hostile to the idea of large tech companies which is where the market wants to go.

That last part is certainly true, and the big tech companies in the US and their constant abuse of customers show why we don't want it. We just need a different type of market here. We should lock out the American companies more. We can't play on the same field because we have very different values. The US care only about money, we care more about ethics.

If the market wants to go there the market is wrong and we need to curtail it. Having unrestricted capitalism isn't a European value.
by AnthonyMouse | 2025-10-15 11:46:50+00:00
> But the people in office need some power, enough to cause problems if they're bad. Otherwise you have the failures of no government: "might makes right", no coordinated projects, no defense, etc.; or another group (e.g. corporation) becomes the de-facto government.

You can prohibit the government from doing things it should never do (e.g. mass surveillance) without prohibiting it from doing things it ought to be doing (e.g. enforcing antitrust laws).

The problem is we currently do the opposite: The government is doing mass surveillance but not antitrust enforcement.
by storus | 2025-10-15 11:47:23+00:00
M3 Ultra has slow GPU and no HW FP4 support so its initial token decoding is going to be slow, practically unusable for 100k+ context sizes. For token generation that is memory bound M3 Ultra would be much faster, but who wants to wait 15 minutes to read the context? Spark will be much faster for initial token processing, giving you a much better time to first token, but then 3x slower (273 vs 800GB/s) in token generation throughput. You need to decide what is more important for you. Strix Halo is IMO the worst of both worlds at the moment due to having the worst specs in both dimensions and the least mature software stack.
by vladvasiliu | 2025-10-15 11:47:50+00:00
This looks like a classic EU vs constituent countries debate.

Your points are correct, but that's a general rebuff against photios' points: nothing is imposed by the EU itself; everything comes from the countries themselves, even if they all do the same thing.

However, I think photios' point was rather that EU countries tend to tax things to hell and back, even if the countries arrived at the same situation by their own means, rather than it being a general EU directive. dvfjsdhgfv's comment is the same: all the positive things in that comment come from the countries themselves; they're not EU directives, either.
by adamhowell | 2025-10-15 11:48:14+00:00
Stressful but yeah so far lots of fun.

Yeah it's a good question, because it's important to start with as much of a jolt as you can.

I launched the hunt the same day it got covered in a local popular Charlotte NC newsletter:

https://tinymoney.com/2025/10/09/treasure-hunt-nc-gold-coins...

So that helped kickstart it and was always part of the plan when I decided to actually do it.
by nabla9 | 2025-10-15 11:48:15+00:00
Good start, but it should expand to everyone without conditions.

Imagine how easy it would be to start businesses, startups non-profit projects if you had UBI. Bunch of guys come together and everyone knows $1,500 per month each "funding secured forever." Many people people dealing with burnout, mental or physical problems, could ease up and work part time.
by LargoLasskhyfv | 2025-10-15 11:48:39+00:00
Not only that, but also 'greedflation' by traders anticipating more demand than supply.

Actually slowly rising since about 2011, induced by shortages (of critical components) due to flooding in Thailand (Seagate/WD), some supplier of so called 'sliders', motors (Nidec) restructuring/mergers of corporations like Showa Denko/Resonac, leading to fears that the supply of thin films for the platters goes bust, some other supplier of platters itself goes bust, and on and on. Not to forget sarscovidious² hick-ups of all sorts of supply-chains. Then came AI, and the datacenter boom. Endless 'opportunities' loom...
by Mashimo | 2025-10-15 11:49:11+00:00
When I visited my friend in Finland, we got to an outdoor range to shoot with AK-47 clones (in 5.56 and something bigger) and shotguns with slugs. No instructor need. Was enough that he had a license. Fun times.

Next day we drove with a tank through a forest.

Compared to other EU countries Finland is pretty easy going when it comes to guns.
by troupo | 2025-10-15 11:49:40+00:00
You're not doing anything wrong. You have to read past hyperbole.

Here's how the article starts: "Agentic engineering has become so good that it now writes pretty much 100% of my code. And yet I see so many folks trying to solve issues and generating these elaborated charades instead of getting sh*t done."

Here's how it continues:

- I run between 3-8 in parallel

- My agents do git atomic commits, I iterated a lot on the agents file: https://gist.github.com/steipete/d3b9db3fa8eb1d1a692b7656217...

- I currently have 4 OpenAI subs and 1 Anthropic sub, so my overall costs are around 1k/month for basically unlimited tokens.

- My current approach is usually that I start a discussion with codex, I paste in some websites, some ideas, ask it to read code, and we flesh out a new feature together.

- If you do a bigger refactor, codex often stops with a mid-work reply. Queue up continue messages if you wanna go away and just see it done

- When things get hard, prompting and adding some trigger words like “take your time” “comprehensive” “read all code that could be related” “create possible hypothesis” makes codex solve even the trickiest problems.

- My Agent file is currently ~800 lines long and feels like a collection of organizational scar tissue. I didn’t write it, codex did.

It's the same magical incantations and elaborated charades as everyone does. The "the no-bs Way of Agentic Engineering" is full of bs and has nothing concrete except a single link to a bunch of incantations for agents. No idea what his actual "website + tauri app + mobile app" is that he build 100% with AI, but depending on actual functionality, after burning $1000 a month on tokens you may actually have a fully functioning app in React + Typescript with little human supervision.
by chrischen | 2025-10-15 11:49:57+00:00
Not sure how many people are playing real tennis these days. But for most older established sports there are existing communities and apps that service them which make it hard to penetrate. Whether it's tennis or real tennis, even with badminton I have a hard time convincing groups to use it. The software is provided as-is so if people use it then that's fine, but otherwise I'd mainly target the ones I actively organize around so that there is actual usage. There's also not much in it specific to any single sport so supporting real tennis, however obscure it is, is basically free from the software side.
by ErikCorry | 2025-10-15 11:50:35+00:00
The problem is they are treating it as a free market issue with hourly auctions, but the 'free market' system ignores transmission. So the windmills can sell cheap electricity in the auctions that can't be delivered to anybody who needs it. Then after the auction you have to pay the windmill operators to switch off the excess production.

The OP linked site lists one of the solutions as "Make energy cheaper where supply is strong." This sounds obvious, but UK (and German) politicians don't want to do it, so we continue to get this dysfunctional system.
by nemomarx | 2025-10-15 11:51:13+00:00
Thank you for this thoughtful explanation

Do you think recent findings about early human sites on other continents (Americas etc) change any of this, or does that still mostly fit with our understanding? My layman's knowledge is that the exact date of when people reached certain landmasses shifts around based on new evidence but I'm not sure if that's an important part of the timeline generally
by boobsbr | 2025-10-15 11:51:22+00:00
I have El Capitan running on a 2015 Air.

The main problem is getting new certificates, because the ones bundled in the OS have expired. It took a lot of searching to find something that worked and I'm not sure if it was one "solution", or the result of multiple "solutions" being tried out.

The secondary problem is new software won't run properly, like corporate/commercial VPN clients. It took a lot of fiddling to get Tunnelblick to work with a commercial VPN, and I couldn't get some corporate client to work, even using an old version.
by marginalia_nu | 2025-10-15 11:51:27+00:00
Yeah I stopped using Spotify because of their constant UI churn. This was around back when they subtly changed the hue of the Spotify logo for no clear reason.

Went to Youtube Music instead, which doesn't seem to ever get updates and likely has been relegated to Google's project limbo.

It's fantastic. It's arguably a worse service, but I'll take that over the frustration of having to figure out yet another new and improved music listening experience every other time I open the Spotify app.

Ultimately, good design stays out of the way. Design changes is design getting in your face, ... which is the diametric opposite of staying out of the way.
by ethbr1 | 2025-10-15 11:51:42+00:00
Causation does not imply correlation.

That there are non-technical leaders who lose the thread does not mean that leaders lose the thread because they're non-technical.

There are plenty of technical leaders who have also gone off on personal tangents and vendettas!

Maybe a more accurate appraisal would be 'some people suck at a job, and it's unfortunately difficult to dislodge a bad leader anywhere'.
by grues-dinner | 2025-10-15 11:51:47+00:00
The consultation area is 120m wide, not necessarily the trenching. The working width is often far less than that: https://www.nationalgrid.com/document/340431/download

In this drawing, you can see the area in the map and it is not 120m wide along the trench: https://www.nationalgrid.com/document/357086/download. For scale, the grid squares are 1000m.

A 400kV trench construction swathe also includes the soil storage areas - subsoil and topsoil are separated for return afterwards, as well as clearance to the fencing (https://www.nationalgrid.com/document/357086/download).
by carlosjobim | 2025-10-15 11:51:55+00:00
I can't think about a more just punishment than what God is giving to programmers right now with AI generated code.

It was you who for decades did everything in your might to make programming as difficult as possible for normal people, inventing the most petty rules and complications in every place imaginable in order to protect your guild from intruders.

Being able to program does not require intelligence, it requires being able to memorize an immense number of random gotchas and grammar rules which makes code not work if you forget to honour them.

Things such as:

- If you add 2+2 your answer will be 22 unless you do it in the "right" way.

- Your code not compiling if you have "mixed tabs and spaces", and of course all text editors also hide tabs and spaces.

- Your code failing if you have forgotten a ; or a " or a ) or a } etc etc

- Having to set up a complicated development environment instead of being able to program straight away on the machine.

So at least I'm laughing while I'm praising God for punishing programmers with AI code. It helps normal people to work through your Byzantine and evil rules and empowers them to make functional programs, while you are left to tear your hair and grind your teeth when reviewing our AI-generated code.

Now you know how we felt all these years!