MurphyA/hacker-news huggingface dataset:
by jcims | 2025-10-30 07:52:54+00:00
I don't think I would recommend multi-cloud right out of the gate unless you already have a lot of experience in the space or there is a strong demand from your customers. There's a tremendous amount of overhead with security/compliance, incident management, billing, tooling, entitlements, etc. There are a number of external factors that drove our decision to do it, resiliency is just one of them. But we are a pretty big shop, spending ~$10M/mo on cloud infra and have ~100 people in the platform management department.

I would recommend focusing on multi-region within a single CSP instead (both for workloads AND your tooling), which covers the vast majority of incidents and lays some of the architectural foundation for multi-cloud down the road. Develop failover plans for each service in your architecture (eg. planned/tested runbooks to migrate to Traffic Manager in the event AFD goes down)

Also choose your provider wisely. We experience 3-5x the number of service-impacting incidents on Azure that we do on AWS. I'm sure others have different experiences, but I would never personally start a company on Azure. AWS has its own issues, of course, but reliability has not been a major one (relatively speaking) over the past 10 years. Last week's incident with DynamoDB in us-east-1 had zero impact on our AWS workloads in other regions.
by nicbou | 2025-10-30 07:53:34+00:00
Aggressively shutting down distractions. Now my phone charges in a drawer in the other room, and it’s in focus mode most of the time. I don’t get emails on my phone. I barely get any emails anyway. I stay logged out of websites. I use ad blockers to hide feeds.

With every step I became a little more focused, and not just on work.
by creatonez | 2025-10-30 07:53:52+00:00
> "You <-> ISP <-> Bank webpage" is an entirely different security threat model than "You <-> Server you rent from an ISP".

...In what world do people rent servers from consumer ISPs? This used to exist in the 1990s, but is nonexistent now.

If this still exists, it's email-only and has already been outsourced elsewhere. No consumer ISP currently in existence is running these sorts of services on their own hardware.

> Also, unsanctioned wiretapping is an entirely different criminal offense than stealing leaked credentials.

I want to be very clear: There are countries that effectively do not have laws that would ever be adequately enforced on ISPs, either because of corruption, a lack of resources in the courts systems, or both. The use of bribery to compel ISPs into intercepting and recording internet traffic is already rampant at scale. You can't rely on the law to protect you when the internet goes across borders.

> Let's not pretend like slapping cryptography over L3 is the entirety of being secure. Often (most of the time?) cryptography doesn't even matter much for security.

Not sure what your point is. Yes, transport security is not the solution to every problem. But it is by far the lowest hanging fruit, the threat modelling is incredibly clear and obvious. There is a reason transport encryption has become universal across every use case imaginable - it's the literal first step to not getting completely pwned before you've even done anything.

> P.S. Security (prevent stealing sensitive data) and verification (making sure nothing extra is added during transfer) are different problems.

And? On the transport level, they have the same solution: TLS. Confidentiality and integrity work hand-in-hand. It's very rare you will need one without the other.

Unencrypted FTP does not give you either of these, and in fact by being limited to password authentication, it helps turn every passive data collection attack into a persistent remote control attack.
by NitpickLawyer | 2025-10-30 07:55:18+00:00
Does it really matter tho? At the end of the day, what matters most is if real users find it useful or not. And cursor has that data (both historically and in real-time). Thousands of accepts/rejects >>> any benchmark that you can come up with. That should allow them to iterate on it, and make it better, eventually.

Benchmarks have become less and less useful. We have our own tests that we run whenever a new model comes out. It's a collection of trivial -> medium -> hard tasks that we've gathered, and it's much more useful to us than any published table. And it leads to more interesting finds, such as using cheaper models (5-mini, fast-code-1, etc) on some tasks vs. the big guns on other tasks.

I'm happy to see cursor iterate, as they were pretty vulnerable to the labs leaving them behind when all of them came out with coding agents. The multi-agents w/ built in git tree support is another big thing they launched recently. They can use their users as "teacher models" for multiple completions by competing models, and by proxying those calls, they get all the signals. And they can then use those signals to iterate on their own models. Cool stuff. We actually need competing products keeping eachother in check, w/ the end result being more options for us, and sometimes even cheaper usage overall.
by ghusto | 2025-10-30 07:55:30+00:00
Ah, I get it now! The problem occurs when someone publishes something without version pinning, because package versions can become incompatible over time. I don't think I've ever installed something outside of what's available on PyPy, which is probably why I've never run into this issue.

Still, I would think it's rare that package versions of different packages become incompatible?
by pjmlp | 2025-10-30 07:55:47+00:00
It is possible to have a dynamic environment without dynamic linking, that is how old UNIXes did it in the past via OS IPC, nowadays D-BUS as well, the problem then becomes the higher resource consumption when every little service is a process being started, and talked via IPC instead of a jump call.

Still quite relevant when security and host stability matters, though.
by t43562 | 2025-10-30 07:58:02+00:00
Python's just working like a normal unix program. Some people like that because they can reason about it the way they reason about any other utility so it has advantages when using python as a scripting language - which is what it was invented as. AI/ML/ASGI/blablahblah are just specific applications with problems that seem overwhelmingly important to their users.
by ghusto | 2025-10-30 07:59:55+00:00
Except I'm saying my experience is the opposite of the problem you purport. I (as the consumer) have always done "pip install whatever", and have never run into issues.

One of the commentors above explained what the problem really is (basically devs doing "pip install whatever" for their dependencies, instead of managing them properly). That's more a problem of bad development practices though, no?
by realty_geek | 2025-10-30 07:59:56+00:00
Booking.com charge a completely different (and much higher) price than displayed at every step - including the final screen!!!

Small businesses are being fined outrageous amounts for not displaying a cookie warning on their sites but a multibillion dollar company seems to get away with barefaced robbery.

Thing I need to figure out now is how to get the regulators on in.
by Uehreka | 2025-10-30 08:00:13+00:00
I… I’m sorry to hear that. Wow. That is shockingly bad.

Seriously, this is why we have trademarks. If Anaconda and Conda (a made-up word that only makes sense as a nickname for Anaconda and thus sounds like it’s the same thing) are two projects by different entities, then whoever came second needs to change their name, and whoever came first should sue them to force them. Footguns like this should not be allowed to exist.
by jmaker | 2025-10-30 08:00:59+00:00
Also, some prominent projects migrated away from TypeScript to JSDoc type comments due to the transpile times in TypeScript. The type checking task takes the more time the more complex the type-level expressions are. Haskell can also take a long time to compile if you turn on a few extensions and move toward dependent types.

Rust compiles fast if your translation units don’t need too much macro expansion. You add something like Diesel, and you can call for the lunch break.

It’s also worth mentioning Scala with Scala Native and maybe Kotlin with Kotlin/Native. OpenJDK Project Panama FFM now gives a better FFI experiences than JNI.
by JPLeRouzic | 2025-10-30 08:01:11+00:00
Seriously, it would interest me when they enable the creation of something akin to a warp drive.

- First, because it would be a way to test these hypotheses

- Second, because it would dramatically expand humanity's playground, even if it's only in the solar system in the first step.

- Third, because building a Warp drive would be good for the economy. Currently, we have no equivalent to the space race. We have AI, but there are doubts that it will enable more than incremental steps.
by tim333 | 2025-10-30 08:02:11+00:00
They can be facts. Sometimes they get thing right, sometimes wrong like other sources.

Now "Responses from LLMs are not facts" in not a fact. I guess it provides a kind of meta illustration of not believing everything you read. A more subtle problem is they are poor as citations as they can change rapidly unlike saying say, last weeks NYT said so and so.
by peter_d_sherman | 2025-10-30 08:02:48+00:00
When is any public facing video camera a "surveillance product"?

And when isn't any public facing video camera a "surveillance product"?

?

???

Doesn't any public facing video camera (including camera doorbells, including the public facing video cameras on people's smartphones) -- contain the potential for for civil rights implications (and other problems) if misused?

?

Is the issue of civil rights implications really with Flock specifically?

Or does the issue exist more broadly with the usage of any public facing video camera where the misusage of that camera results in civil rights implications?

?

???
by FooBarWidget | 2025-10-30 08:03:44+00:00
There's more than that. She was on the verge of exposing Chinese intelligence surveillance methods/technologies. The Shenzhen authorities know her well and were relatively lenient, but the moment she touched upon the intelligence area, she attracted the attention of much more paranoid security officials. Those officials then found out she had a Uyghur girlfriend and became even more paranoid due to suspected links with terrorism; those officials, after all, spent the 80s/90s taking bullets from Uyghur terrorists, so they are quick to jump to conclusions that Naomi is compromised and sends intelligence secrets to Turkistan Islamic Party.

I suspect these are much more of a reason to offboard her from social media than all the LGBT stuff, which she had already done for years.

Source: The Daily Mao on Twitter, who said he physically spoke with her half a year ago. Naomi said she's fine, she's just not allowed to have a public social media presence. She's very lucky not to have been thrown in jail for national security/terrorism reasons, especially given how paranoid the security officials are. Perhaps the Shenzhen authorities put in a good word for her.
by ghusto | 2025-10-30 08:05:44+00:00
Not system Python (not least because that's a hassle to do these days anyway, with all the safeguards OS vendors have put in), but _my_ version of globally. My (user) global PyEnv version, for example.

Now having said that, I suspect PyEnv is doing some voodoo behind the scenes, because I occasionally see messages like "Package X what's version N, but you have version N1". I've never investigated them though, since both old and new packages seem to work just fine regardless.
by bloppe | 2025-10-30 08:06:03+00:00
Huh. I forgot about %s. I just search for a pattern and replace the first one manually. If there are fewer than ~5 occurrences, I'll just hit `n.` ~5 times and get them all. If there are more, I'll record a macro with `qqn.q`, then look at the occurence count in the bottom right corner (e.g. 50) and hit `50@q` to get them all. Sometimes the replacement text is non-constant, and this method allows for more flexibility with the recorded macro.

Sometimes it's funny to look around and see the strange local minimum of effort you've settled into.
by jononor | 2025-10-30 08:06:27+00:00
It i possible to have a digital twin which simulates the real physics of the robot and gives instant feedback based on that. It might help a bit to make the teleoperator work within the capabilities of the robot, be more in sync. But is peobsbly not realistic to simulate the real world physics faithfully, in such a way that operators can use it as actual feedback. Especially in sensitive scenarios like grabbing a glass, there are tipping points (sometimes literal), where a few millimeters and 100 milliseconds is the difference between close call and full smash.

Thinking about it now, if one would deliberately add much more latency (a few seconds), it might be possible to use real-world simulation as aid. At least for operations which can be decomposed into sequences of transitions between stable/safe states. Say moving dishes from dishwasher to cupboard. Picking up is critical, but holding in hand is (presumably) safe, placing in cupboard critical, once placed it is safe. Then one could let teleoperator do the entire critical move virtually, act it out in simulator only. See what the outcome is. If high risk of failure, deny operation. If good chance of success (per simulation) can allow to execute in the real world. More autonomous operation will need ability to simulate actions, project alternative approaches into the future, and a world model strong enough that can also plan and execute based on it. So there are potential synergies in a full-teleop, to hybrid teleop to autonomy transition. Note, this approach would also assume the relevant environment to be static. So it would not help handle the pet or toddler...
by anon84873628 | 2025-10-30 08:06:48+00:00
Interesting to consider this thread with regards to the Amish. They noped off the tech treadmill but it requires a highly cohesive religiously centered society to maintain the necessary critical mass.

It's a lot harder to make an insular society which is self sufficient just to the degree necessary to create an open source smartphone :-p

Technology brings tradeoffs. Conformity in some regards, but it also opens up many new and varied ways of living.
by hyperman1 | 2025-10-30 08:07:37+00:00
Oracle the database is the Apple of Enterprise. They have some best in class aspects, but also a lot of you're holding it wrong. They cost a lot and have a really arrogant culture. They both have a rabid reality-denying fanbase. The support is either fantastic if you ask a known question, or a hellscape of inconsistent answers and denials if you dont.
by codedokode | 2025-10-30 08:08:00+00:00
It's hard to find. Pixel 8 costs $670 here, and the cheapest Pixel is 9a for $470. At this price, it is overpriced. Pixel 8 has 8 GB RAM, Samsung A16 with 8 GB costs just $230. It's almost 3 times cheaper. And Samsung supports 2 SIM cards, unlike Pixel, so you can have, for example, one SIM for Internet and another for calls.
by d_e_solomon | 2025-10-30 08:08:45+00:00
Philz Coffee, the beloved Bay Area chain known for slow-pour brews, was sold this year for around $145M. Sounds fine, until you realize nearly all employee investors lost everything.

Philz raised about $137M in venture capital over five rounds. Each new round added liquidation preferences and payout layers. When the company missed growth targets post pandemic, valuations halved, stores closed, and the exit waterfall left nothing for common shareholders.

The VC investors likely doubled their money; employees who bought stock through internal programs, were wiped out.

It’s a sharp reminder that “ownership” in a VC-backed private company isn’t ownership in the public sense. Preferred stock eats first. Common stock gets the scraps, if any.

Is this an inevitable flaw in the venture model or should regulators rethink how private employee stock plans disclose downside risk?
by dr-j | 2025-10-30 08:09:24+00:00
New update shipped responding to requests from Show HN; restart Dlog or select "Check for Updates" in bottom toggle to get it free.

- New ANONYMIZER in Coach; toggle on to anonymize names in entries sent to coach AI API.

- Fixed Bug in Four Rings where comparisons were miscalculated when swapped.

- Fixed Dataset load failed … Dlog.(unknown context)…LoadError. The error had occurred when no entries have been scored.

- Fixed Bug where 1 million tokens were not being applied upon purchase.

- Other general improvements.

Also, dlog now has a bluesky @dlog.bsky.social where I'll be posting all updates and news. Also email me johan@dlog.pro to get the perpetual license for ShowHN users.

Thanks for all the support and energy in the comments!!
by coldtea | 2025-10-30 08:10:25+00:00
lol, yeah. Meanwhile they can't even comprehend that it's a false dillema: Europeans have cars just fine, even several per family.

They just don't have to use them all the time since they can take the more efficient public transport, and they can buy one after college even, they don't need to drive one from 16 yo just to be able to get around...
by ghusto | 2025-10-30 08:10:48+00:00
There are clear laws now, so they do have the power to decide if something's against those laws. This is besides the point I'm making though.

Ofcom should be telling the ISPs to take action, not the sites, since the ISPs are the "importers". They should never involve the site in the first place, and certainly not by trying send them empty threats of fines.
by Rogach | 2025-10-30 08:11:05+00:00
No. The string is split to extract at most one argument. See: https://linux.die.net/man/2/execve

So in fact "-S" is not passed as a separate argument, but as a prefix in the first (and only) argument, and env then extracts it and acts accordingly:

``` $ /usr/bin/env "-S echo deadbeef" deadbeef ```
by pjmlp | 2025-10-30 08:11:38+00:00
Objective-C says hello in extra long names are concerned.

> CMMetadataFormatDescriptionCreateWithMetadataFormatDescriptionAndMetadataSpecifications(allocator:sourceDescription:metadataSpecifications:formatDescriptionOut:)

https://developer.apple.com/documentation/coremedia/cmmetada...:)
by bruce343434 | 2025-10-30 08:11:46+00:00
In other words, gathering your own anecdote, compounding that with other anecdotes through biased sampling (which kind of person will feel more motivated to share their anecdote on it? And which and anecdotes do you reject because they just didn't try hard enough?) and then projecting that onto every other human being and assuming they must experience the same thing you do.
by olavgg | 2025-10-30 08:13:43+00:00
A standalone Pulsar, is actually a great way to learn Pulsar. It is one command to get started: bin/pulsar standalone

It can also be used in production. You do not have to build a distributed Pulsar cluster immediately. I have multiple projects running on a standalone Pulsar cluster, because its easy to setup and requires almost no maintenance. Doing it that way makes compliance requirements for isolation simpler and with less fights. Everyone understands host/vm isolation, few understand Pulsar Tenant isolation.

If you want a distributed Apache Pulsar cluster, be prepared to work for that. We run a cluster on bare metal. We considered Kubernetes, but performance was lacking. We are not Kubernetes experts.
by jahsome | 2025-10-30 08:14:43+00:00
The article says there's a nosedive. But by what standard(s)? See the questions I already posted in my original response.

Both the "good" and "bad" quality examples contain subtitles with no discernible difference. All examples contain legible subtitles. So where's the "nosedive"?

There's clearly some anime-specific context and nuance that is NOT communicated with context-less screencaps.

Perhaps the article wasn't written for someone unfamiliar with anime, and I'm not meant to understand, but it would be helpful to have the difference explained. Not to mention the improved accessibility for screen readers or folks with sensory processing issues like myself. At a minimum, marking up the image would be helpful. Circle things. Arrows. Help me understand, don't drop me into unfamiliar territory and leave me to guess.
by pjmlp | 2025-10-30 08:15:24+00:00
While using a OOP language.

Welcome to Node.js v24.10.0. Type ".help" for more information. > const fn = (x) => x + x undefined > typeof(fn) 'function' > Object.getOwnPropertyNames(fn) [ 'length', 'name' ] > fn.name 'fn' > fn.length 1 > Object.getPrototypeOf(fn) [Function (anonymous)] Object
by bilekas | 2025-10-30 08:15:56+00:00
> With an annualized revenue run rate expected to reach about $20 billion by year-end, losses are also mounting inside the $500 billion company, the people said.

There is a time limit for shareholders to make return on that investment and so far their operating costs are astronomical given they don't yet seem to offer any substantial product that can't be without, if anything, they're pushing people further away from AI with the slop their churning out.

reference : https://www.reuters.com/business/openai-lays-groundwork-jugg...
by zuhair | 2025-10-30 08:16:07+00:00
Author here. Header-only SBO container that keeps middle insert/erase working for non-assignable element types (e.g., const members) via a rebuild-and-swap path. When it's useful: mobile constraints (zero deps), tiny-N hot paths, support for immutable types. When not: if your types are assignable or you already carry Abseil/Boost; C++26 std::inplace_vector is relevant for fixed capacity.

Repo: https://github.com/lloyal-ai/inlined-vector (MIT) vcpkg: vcpkg install lloyal-ai-inlined-vector (port merged) Benchmarks: google-benchmark harness in the repo; happy to add your results.
by jahsome | 2025-10-30 08:16:14+00:00
Seems like you were so quick to jump to the defense of the author (who likely doesn't need your white knighting) you completely misunderstood or are misrepresenting what I said was lazy and insulting which was the hypothetical coworker example, and NOT the article itself.

With that in mind, I don't have the energy to read the rest of your reply. I appreciate you taking the time to respond, and I'm sorry if my phrasing wasn't clear. I'm sure it's a great article, and I meant in no way to insult the author.

I'm just not equipped to gather much meaning from it the way the information is presented.
by novoreorx | 2025-10-30 08:16:19+00:00
I noticed the author mentioned the stack they are currently using is NextJS + Hono, and according to the code in the blog, Hono is used as the API backend to provide data for NextJS through calls like `fetchUserInfo`. This is where I really got confusing, why is it designed like this? NextJS is already a full-stack framework, not to say you used RSC, you can directly get user data from the database in NextJS. If you decide to use Hono for HTTP API, which is fine because it's more light weight and adaptive, then why RSC rather than making the frontend a SPA? Even if you use NextJS to write SPA it would looks much reasonable to have both NextJS and Hono used together.
by virtue3 | 2025-10-30 08:16:42+00:00
Technically it's possible.

We did do inlaid server-side ads that way for a while.

IT just takes an excessive amount of work.

The real solution is just the full support of ASS/TTML/VTT subtitles on all platforms. Usually smart devices are kind of only partially supported.

For instance - casting to a chromecast fallsback to SRT.
by thesz | 2025-10-30 08:17:11+00:00
> I can't imagine building something like a graphics framework without some subtyping.

Let me introduce you to Fudgets, an I/O and GUI framework for Haskell: https://en.wikipedia.org/wiki/Fudgets

They use higher order types to implement subtyping as a library, with combinators. For example, you can take your fudget that does not (fully) implement some functionality, wrap it into another one that does (or knows how to) implement it and have a combined fudget that fully implements what you need. Much like parsing combinators.