MurphyA/hacker-news huggingface dataset:
by bakugo | 2025-10-22 15:26:07+00:00
Normally I'd agree with the philosophy, but I don't really see how you can say this about vanilla Wireguard in particular considering how involved it is, especially if you have more than 2 devices that you want to connect together.

Not only do you need to manually manage the keys for each device and make sure they're present in every other device's configuration, but plain Wireguard also cannot punch through NATs and firewalls without any open ports like Tailscale can, as far as I know.

Combine that with the fact that networking issues can be some of the hardest to diagnose and fix, and something like Tailscale becomes a no-brainer. If you prefer using plain Wireguard instead, that's fine, and I still use it too for some more specific use cases, but trying to argue that Tailscale is entirely unnecessary is just wrong.
by stodor89 | 2025-10-22 15:26:47+00:00
It's slower indeed, but it's easier to write and debug, more portable, and gives you total control over the render pipeline. It's good for experimentation and learning, and would still be trivial to compile and run 20 or 50 years from now. And with how obscenely fast modern CPUs are, it might even be fast-enough for a simple 3D game.
by pavon | 2025-10-22 15:26:48+00:00
In addition to the math, you can also look at existing examples, like how large the ISS radiators need to be relative to its solar panels. Like this project, it is essentially a closed system where all power generated by the solar panels will eventually be converted to heat that needs to be dissipated.

I'm skeptical that it makes any economic sense to put a datacenter in orbit, but the focus on the radiators in the last discussion was odd - if you can make the power generation work, you can make the heat dissipation work.
by verall | 2025-10-22 15:26:50+00:00
A church is literally a place for mass assembly, while a liquor store or dispensary can easily be configured for social distancing, i.e. only let up to N customers in the store at a time depending on the size.

But just think how good of a talking point this is!

Bad government stop CHURCH allow LIQUOR and DRUGS! Want to corrupt your CHILDREN, steal them from GODS arms and deliver to SATAN!
by Workaccount2 | 2025-10-22 15:26:57+00:00
I have been unable to recreate any of the failure examples they gave. I don't have co-pilot, but at least Gemini 2.5 pro, ChatGPT5-Thinking, and Perplexity have all give the correct answers as outlined.[1]

They don't say what models they were actually using though, so it could be nano models that they asked. They also don't outline the structure of the tests. It seems rigor here was pretty low. Which frankly comes off a bit like...misrepresentation.

Edit: They do some outlining in the appendix of the study. They used GPT-4o, 2.5 flash, default free copilot, and default free perplexity.

So they used light weight and/or old models.

[1]https://www.bbc.co.uk/aboutthebbc/documents/news-integrity-i...
by redserk | 2025-10-22 15:26:58+00:00
For TechCrunch you need to latch onto at least a few trends.

For example: Medium Memories is introducing an AI-enabled coffin personalized to the relationship between you and your late-loved one. Medium provides you an always-on cloud-connected camera to ensure you won’t have to lose sight of those who matter to you. Medium Plans start at $2.99/mo for 60 minutes of AI-enabled talk time a month. Here’s our interview with founder Bamuel Saltman.
by blinding-streak | 2025-10-22 15:27:37+00:00
On the topic of recalls in general. An old buddy of mine in the auto industry believed that legacy automakers would do bogus or superfluous recalls on occasion just to get people back into the dealership. Where sales people could mosey into the service area and talk to the folks with older cars.

No hard evidence for it, but it did make me think. (I don't think this applies to Tesla)
by TheCoelacanth | 2025-10-22 15:27:44+00:00
True, but only to a very limited extent.

Ford lost this case because he overtly admitted that he wasn't pursuing profit and because he was deliberately trying to prevent minority shareholders from getting money to start up a rival car company.

If he had just made some vague claim that what he was doing was in the long-term interest of shareholders, he probably would have gotten away with it.
by HardCodedBias | 2025-10-22 15:27:52+00:00
I get almost all of my news from LLMs.

I scan the top stories of the day at various news websites. I then go to an LLM (either Gemini or ChatGPT) and ask it to figure out the core issues, the LLM thinks for a while searches a ton of topics and outputs a fantastic analysis of what is happening and what are the base issues. I can follow up and repeat the process.

The analysis is almost entirely fact based and very well reasoned.

It's fantastic and if I was the BBC I would indeed know that the world is changing under their feet and I would strike back in any dishonest way that I could.
by Klemoniono | 2025-10-22 15:28:12+00:00
I want that type of money for playing out something which can be pre calculated and is just not a smart idea at the moment at all.

I don't get it. I really don't.

You can calculate the minimum cost, you can calculate heat, maintenance and probably also the expected failerrate for the hardware.

But even if the failerrate is something you need to figure out, that would probably some R&D thing which you would test and verify in a very small and cheap setup.

Same stupid shit with the mirror in space which will send sun back to some PV panels on earth.

Cool stuff in a non capitalistic system but otherwise it just shows that plenty of people have too much money to invest in weird things without understanding it at all.
by dabluecaboose | 2025-10-22 15:28:17+00:00
Maybe this is reductive, but there are times that I'm concerned the only thing keeping me from getting gobs and gobs of startup funds are the facts that I understand basic principles of engineering in space.

I could be wrong and this will be a slam dunk. To me, however, the costs/complexity (Cooling, SRP perturbation, stationkeeping, rendezvous, etc.) far outweigh the benefits of the Cheap as Free (tm) solar power
by shagie | 2025-10-22 15:28:49+00:00
I'm asking "if cookie consent banners are the less than idea solution, why isn't the official EU government site implementing it in a way that is ideal?"

If a company is deciding how to comply with the GDPR on its website, can it go wrong with copying how that site does it? Alternatively, if it tries something that is new, do they risk getting sued by the EU for not following the GDPR?

My claim that it isn't malicious compliance to use cookie consent banners, but rather the least risky approach since that is exactly how europa.eu complies with their own laws.
by Joel_Mckay | 2025-10-22 15:28:57+00:00
Port-knocking mainly mitigates slow distributed-brute-force login attacks, and works best when ports are interleaved with several tripwire black-hole and knock-port-close firewall rules.

Use-cases:

1. helps auto-ban hosts doing port-scans or using online vulnerability scanners

2. helps reduce further ingress for a few minutes as the hostile sees the site is "down". Generally, try to waste as much of a problem users time as possible, as it changes the economics of breaking networked systems.

3. the firewall rule-trigger delay means hostiles have a harder time guessing which action triggered a IP ban. If every login attempt costs 3 days, folks would have to be pretty committed to breaking into a simple website.

4. keeps failed login log noise to a minimum, so spotting actual problems is easier

5. Easier to forensically analyze the remote packet stream when doing a packet dump tap, as only the key user traffic is present

6. buys time to patch vulnerable code when zero day exploits hits other hosts exposed services

7. most administrative ssh password-less key traffic should be tunneled over SSL web services, and thus attackers have a greater challenge figuring out if dynamic service-switching is even active

People that say it isn't a "security policy" are somewhat correct, but are also naive when it comes to the reality of dealing with nuisance web traffic.

Fail2ban is slightly different in that it is for setting up tripwires for failed email logins, and known web-vulnerability scanners etc. Then whispering that IP ban period to the firewall (must override the default config.)

Finally, if the IP address for some application login session changes more than 5 times an hour, one should also whisper a ban to the firewalls. These IP ban rules are often automatically shared between groups to reduce forum spam, VoIP attacks, and problem users. Popular cloud-based VPN/proxies/Tor-exit-nodes run out of unique IPs faster than most assume.

Have a nice day, =3
by forgotmypw17 | 2025-10-22 15:29:03+00:00
I've come up with an easy solution, which works almost all the time. When a cookie consent dialog interferes with me using the website, I close the tab and move on.

I've found a high correlation between cookie consent notices and low-signal content, so this strategy has actually saved me a lot of time I would've spent reading/watching something that doesn't help me.
by kragen | 2025-10-22 15:29:07+00:00
On typewriters all characters are the same width, typically about ½em wide. Some of them compromised their hyphen so that you could join two of them together to form an em dash, but a good hyphen is closer to ¼em wide. But that compromise also meant that a single hyphen would work very well as an en dash. And generally hyphenation was not very important for typewriters because you couldn't produce properly justified text on a typewriter anyway, not without carefully preplanning each line before you began to type it.

Computers unfortunately inherited a lot of this typewriter crap.

Related compromises included having only a single " character; shaping it so that it could serve as a diaeresis if overstruck; shaping some apostrophes so that they could serve as either left or write single quotes and also form a decent ! if overstruck with a .; alternatively, shaping apostrophe so that it could serve as an acute accent if overstruck, and providing a mirror-image left-quote character that doubled as a grave accent; and shaping the lowercase "l" as a viable digit "1", which more or less required the typewriter as a whole to use lining figures rather than the much nicer text figures.
by philipkglass | 2025-10-22 15:29:30+00:00
I have wrestled with it too. I believe it's because wikitext is an ad-hoc format that evolved so that the only 100% correct parser/renderer is the MediaWiki implementation. It's like asking for an SDK that correctly parses Perl. Only Perl can do that.

There are a bunch of mainly-compatible third party parsers in various languages. The best one I've found so far is Sweble but even it mishandles a small percentage of rare cases.
by terminalshort | 2025-10-22 15:29:48+00:00
A combined goal (growing wealth) is much different than a combined interest because the ways they go about it are very different and in many times conflicting. Taking pie from other rich people is many times a much superior strategy to taking it from the poor. e.g. OpenAI just launched a competitor to Chrome. And talking about "growing wealth" is much too general here because that applies to everyone, not just rich or poor.
by popol12 | 2025-10-22 15:30:19+00:00
Man, the communist party (and the communist ideology) in France is pretty much dead today. They’re not even that much to the left today. They have no power and their boss has no social credibility outside of its party (see “Fabien Roussel n’est pas un camarade” songs)

Your claim that the judges are red is a popular right wing fantasy
by jzb | 2025-10-22 15:30:19+00:00
You don't understand, or don't agree with the complaints. Those are two different things, and I suspect you understand why people are complaining and instead disagree with the complaints.

People are complaining because something was available, they adopted it, then it was discontinued. Apparently with little warning, and after they'd been encouraged to adopt it by the provider of the images.

As it happens, I agree with the general idea that if folks are not paying for the convenience of builds, then it's on them to work from source. However, it's better IMO if a vendor or project start from that position rather than what's seen as a rug-pull.

Of course, it's part of the playbook: when something is new and not widely adopted, the vendor goes to great effort to encourage adoption -- then the vendor starts looking at the paid vs. free usage and sees "huh, we have a 10000:1 ratio of paid to free users, including ten megacorps that show up grabbing binaries every 10 minutes for their CI/CD farm, and asking questions in our forums, but aren't paying a penny toward development and our investors are getting pissy."
by simonw | 2025-10-22 15:30:26+00:00
If you can get malicious instructions into the context of even the most powerful reasoning LLMs in the world you'll still be able to trick them into outputting vulnerable code like this if you try hard enough.

I don't think the fact that small models are easier to trick is particularly interesting from a security perspective, because you need to assume that ANY model can be prompt injected by a suitably motivated attacker.

On that basis I agree with the article that we need to be using additional layers of protection that work against compromised models, such as robust sandboxed execution of generated code and maybe techniques like static analysis too (I'm less sold on those, I expect plenty of malicious vulnerabilities could sneak past them.)

Coincidentally I gave a talk about sandboxing coding agents last night: https://simonwillison.net/2025/Oct/22/living-dangerously-wit...
by orionsbelt | 2025-10-22 15:30:48+00:00
Assumptions, assumptions...

I am not right wing, have never voted for Trump or chanted "lock her up", and no, I believe in principles and not party loyalty and would have felt the same had it been Biden.

I was also against Clinton's impeachment for the same reason. Stormy Daniels and Monica Lewinsky were both private sexual matters, and to try to use ancillary technical crimes (obstruction; campaign finance) to remove your political opponent is a bad precedent and it's bad when both parties do it.

Your reply itself also proves my point. You say that the right wing would have prosecuted Biden on the same facts, not that the same left wing New York DA would have. Justice shouldn't be left wing and right wing.
by bigstrat2003 | 2025-10-22 15:30:51+00:00
Actually, in your analogy the reason why you stopped matters a great deal. For example, if you stopped shoveling snow because you are sick/injured, or because you are caring for a family member, nobody would think less of you as a neighbor. It's only if you stopped for a selfish reason that people would negatively judge your neighborliness. So to the extent that the analogy is instructive as to how we should think about MinIO's actions, we would have to judge the reason why they did this and decide whether that is worth thinking less of them.
by AlexandrB | 2025-10-22 15:31:21+00:00
> you can do your own on-site tracking and telemetry and I accept sharing my data with Sendgrid for your newsletter, but I do not want third-party trackers

I'm sorry, but does a user who would want this actually exist? This seems like a hypothetical dreamed up by the marketing team to avoid having to accept that a large group of users hate all their tracking shit.
Show HN: MCP server that teaches LLMs to write production grade Postgres SQL
by cevian | 2025-10-22 15:31:34+00:00
For the past 10 years at Timescale (now Tiger Data), I've been been watching developers make mistakes in database design: forgetting to index foreign keys, creating case-sensitive email lookups, using arbitrary VARCHAR limits. And I've seen the pain and frustration when there is major downtime and botched migrations fixing things. AI coding could have made this better but is only making things worse. It's infuriating.

So, I (along with my awesome team at Tiger Data) built an MCP server that auto-injects Postgres best practices into AI context to help. The biggest innovation: our get_prompt_template tool lets the LLM auto-discover the right guidance without slash commands. Ask "design a schema for IoT devices" and it automatically pulls our Postgres schema design and hypertable guides.

What's different from other MCP servers: Instead of thin API wrappers, I am teaching AI things like "Always index foreign key columns - Postgres won't do it for you" and "use TEXT not VARCHAR(255)". It includes versioned Postgres docs (15-17) with hybrid search, plus TimescaleDB-specific patterns.

Try it with our free service:

```

curl -fsSL https://cli.tigerdata.com | sh

tiger auth login

tiger mcp install

```

Works with Claude Desktop, Cursor, Windsurf, VS Code. Open source.

By the way: this approach might show how to implement Anthropic's new Agent Skills (previous discussion: https://news.ycombinator.com/item?id=45607117) entirely through MCP.
by nickpsecurity | 2025-10-22 15:31:39+00:00
That last line isn't true. To be brain-like, it only needs to imitate one thing in the brain. That thing is udually tested in isolation against observed results in human brains. Then, people will combine multiple, brain-inspired components in various ways.

That's standard in computational neuroscience. Our standard should simply be whether they are imitating an actual structure or technique in the brain. They usually mention that one. If they don't, it's probably a nonsense comparison to get more views or funding.
by lenerdenator | 2025-10-22 15:31:58+00:00
> IMO it’s no wonder companies keep getting hacked when doing the right thing is made so painful and the rewards are so meagre.

Show me the incentives, and I'll show you the outcomes.

We really need to make security liabilities to be just that: liabilities. If you are running 20+ year-old code, and you get hacked, you need to be fined in a way that will make you reconsider security as a priority.

Also, you need to be liable for all of the disruption that the security breach caused for customers. No, free credit monitoring does not count as recompense.
by throwway120385 | 2025-10-22 15:32:04+00:00
Not necessarily, but if there's a cost to providing free support to the community like official container images, then it will get cut. People comment that it's "free" to provide these things through Github, but it actually has a cost to the maintainers in time, and it's frankly an easy business decision to stop doing that at times in favor of roadmap work that produces business value.

What I'm learning from this is to provide basically zero support from the outset and let it grow organically if I ever build a business on an open source product. As soon as you stop supporting anything for free someone feels entitled to it.
by incomingpain | 2025-10-22 15:32:20+00:00
Im in the python world, but I refuse to use the vscode terminal as well, 100% of the time. Pycharm terminal is far less terrible, but I've probably used it a handful of times just for quick access to the project venv. 90% of the time I'm like this quirk. It's certainly a case of experience and pain from history.

I agree it's a quirk, but I also see it as the better optimization. I do wonder though is that there could be a point when these IDE terminals fix their problems, possibly already have, and I'll then be a dinosaur. But alas here we are.

I have a venv quirk as well where I ALWAYS have 1 in my project, but usually didnt use them beyond for the linter. I used to stick with the system py environment inside the docker instance that would be managed in requirements. But then Ubuntu 24 LTS suddenly started doing this --break-system-packages crap and forced me into a venv.

I also have the quirk of Functional programming >>>> object orientated, even when using a language like python. But I'm open to cases where object orientated has to be the way to go.

I have the quirk of being rather unhappy with list comprehensions. They are hard to read, hard to understand, especially if you're combining them.

I'm totally fine with integrating bash scripts and using python's subprocess module.

I'm totally fine with 'if something_list:' and not particularly checking types and such. Ive now been using py typing on my functions for years and not once have I found that useful at all.

Yes you do need __init__.py everywhere.
by WorldMaker | 2025-10-22 15:32:33+00:00
Pasteurization has been settled science since the 1860s. It's benefits are extremely well known and well studied. We understand the contamination issues it solved in trying to sell things across large distances and/or from grocery shelves that may take some amount of time to sell. We see those contamination issues in "Raw Milk" sales, exactly as predicted.

It seems pretty anti-science to me, going against such foundational food and health science.

It also seems directly related to anti-vax anti-science efforts because Louis Pasteur was also a critical early scientist involved in vaccines (through efforts against Cholera and beyond).
by goku12 | 2025-10-22 15:33:14+00:00
I agree with all the points you make. Just adding a detail to the following bit:

> 1. MinIO is a business and they don't owe anything to anyone for free.

I don't think MinIO discontinuing the free docker image is really the problem here. Creating and distributing such images cost them practically nothing - either in infrastructure costs or in HR costs. If they find it that difficult, they only need to say it. Either the community or another company will gladly take it up for free. Even other cloud projects have alternative distributions like Bitnami builds.

The real issue is the pattern of behavior that this move exposes. They seem to have removed the web UI from the community edition claiming that it's hard to maintain (another thing the community would have gladly taken up if they were informed). They also stopped updating the community documentation. And these largely escaped attention until the docker build was discontinued. That itself is controversial since much effort wasn't spent in letting the users know that their current image was going to suffer bitrot indefinitely. Apparently there was also a CVE which was fixed in the source. They didn't consider it necessary to at least push the fixed container as a final measure.

All these are certainly hostile and unkind towards the community and it's bordering on dishonesty. They didn't lie. But neither did they do the bare minimum expected when taking such a drastic measure. It's clear that they're withdrawing their generosity for more profits after gaining a lot of mindshare with their earlier offering. I don't believe that the docker image alone would have inflamed the community so much.
by mk89 | 2025-10-22 15:33:19+00:00
How can someone explain this to a kid? Is there somewhere an even more simplified version than Arduino or similar to show how all these things actually work? I know arduino is not a cpu, but overall, how these things work together, would be great to see/show.

I don't expect to show how electrons move :) I mean, some model, a toy or so, that shows how these things work. I remember it only from books/specs, but even there, at a certain point there are "limits" :)
by xnoyzi | 2025-10-22 15:33:29+00:00
Last month I talked to a cold email operator who runs insane volume.

when he showed me his stack, I noticed something:

he was paying over $300/month just to use custom APIs in Clay.

not the whole product. Not the data.

just the permission to use his own APIs.

That felt… wrong.

so I built a stripped-down Clay alternative.

same core functionality, no bloat, almost 10x cheaper.

I thought that would be enough.

then my inbox exploded with one specific request:

“Can you add something like Claygent?”

Now it’s in.

an AI Agent that enriches, calls APIs, scales workflows, all in one place.

And yes, it’s still not Clay. That’s the point.

if you do cold outreach, scraping, or enrichment, and want to see it in action, I’ll happy to share access and hear what you think