MurphyA/hacker-news huggingface dataset:
by magicalhippo | 2025-10-26 12:31:33+00:00
> Are they punishing their own nationals?

In the same way that Trump is punishing Americans with the import tariffs, yes. However that is just the primary effect, not the goal.

If you eat less you might go hungry, but that doesn't mean the goal was to go hungry. Rather it was to lose weight, and going hungry is just the direct effect.

Part of the goal of retaliatory tariffs is symbolic, part is to indirectly put pressure on Trump by affecting US export industry.
by akoboldfrying | 2025-10-26 12:31:35+00:00
My initial reaction was that running something like this is still a loss, because it probably costs you as much or more than it costs them in terms of both network bytes and CPU. But then I realised two things:

1. If they are using residential IPs, each byte of network bandwidth is probably costing them a lot more than it's costing you. Win.

2. More importantly, if this became a thing that a large fraction of all websites do, the economic incentive for AI scrapers would greatly shrink. (They don't care if 0.02% of their scraping is garbage; they care a lot if 80% is.) And the only move I think they would have in this arms race would be... to use an LLM to decide whether a page is garbage or not! And now the cost of scraping a page is really starting to increase for them, even if they only run a local LLM.
by sojournerc | 2025-10-26 12:31:38+00:00
100%. I'm excited to find somewhere not playing disco and skater boy, and instead supporting their local music.

Hell, here in the UK I'm happy to hear Sheeran even though he's not really my style typically.

I don't mention that because I like American cultural dominance, merely because it is so ubiquitous.

I was in the middle of South Africa in the oughts and there were bootleg Britney Spears albums... Kind of shocking and I honestly don't exactly understand the appeal of American pop, but it's widespread...
by RestartKernel | 2025-10-26 12:32:23+00:00
From my Western European perspective: what's specifically striking is how sentiment towards China has improved in turn. Not sure what caused it exactly, but my guess is 1) the U.S. as common rival, and 2) the amalgamation of fears of Chinese manufacturing with newfound fears of U.S. big tech into European nationalism to replace some vague sense of "Western" alliance. The latter may be turning China from the big geopolitical rival to be wary of to just another outside force.
by munchlax | 2025-10-26 12:32:50+00:00
I admit I havent investigated this thoroughly, but I suspect the low hanging fruit in the tinykvm case is having rw access to /dev/kvm

I think it should be possible to pass /dev/kvm as an open fd to daemons like kvm server and mark it as non-inheritable. As long as the vm is in a subprocess it would be okay I guess.
by few | 2025-10-26 12:33:02+00:00
This is completely tangential but as someone who used to be a competitive programmer in the 2010s, I feel like this year marked the end of an era for me.

I don't have time to do regular codeforces/atcoder/leetcode rounds (and the rampant AI cheating is pretty demotivating). So the big annual rituals for me to keep my "competitive programmer" label were: fb hacker cup, google code jam, topcoder TCO, and advent of code. Now besides hacker cup, the rest are dead.

Sad. :(
by ninkendo | 2025-10-26 12:34:10+00:00
I remember the first time I tried git, circa 2006, and the first 3 commands I tried were:

git init git commit -am Initial\ commit git clone . ssh://server/path/to/repo

And it didn’t work. You have to ssh to the remote server and “git init” on a path first. How uncivilized.

Bitkeeper and a few other contemporaries would let you just push to a remote path that doesn’t exist yet and it’d create it. Maybe git added this since then, but at the time it seemed like a huge omission to me.
by goodthink | 2025-10-26 12:34:20+00:00
I have yet to see any bots figure out how to get past the Basic Auth protecting all links on my (zero traffic) website. Of course, any user following a link will be stopped by the same login dialog (I display the credentials on the home page). The solution is to make the secrets public. ALL websites could implement the same User/Pass credentials: User: nobots Pass: nobots Can bot writers overcome this if they know the credentials?
by bfkwlfkjf | 2025-10-26 12:34:29+00:00
Nonsense...

Even someone who knows that git isn't GitHub might not be aware that ssh is enough to use git remotely. That's actually the case for me! I'm a HUGE fan of git, I mildly dislike GitHub, and I never knew that ssh was enough to push to a remote repo. Like, how does it even work, I don't need a server? I suspect this is due to my poor understanding of ssh, not my poor understand of git.
by BoxFour | 2025-10-26 12:36:01+00:00
> it’s not what you do day to day.

I don't know about that. I was a "CTO" for a small (10-person) and a slightly larger (around 100-person) VC-backed startup. Hiring was always top of mind at both places. Not even "people management", just hiring alone. I'm not saying this universal, but when a company is expected to scale rapidly (as is often the case with venture-backed firms), managing people can easily consume your entire workday even at a relatively small size company.

Of course, I'm not saying that's everyone's experience. There are obviously lots of reasons that dynamic might be different: For example if you're not a VC-backed company, or a CTO who's a world-renowned technical expert in a particular field (nobody's bringing Ilya on board for his ability to hire).

But it's very, very easy for people management to be a day-to-day thing and I don't think it's a waste of time compared to direct contributions.
by razodactyl | 2025-10-26 12:36:26+00:00
I would argue that there are already quite a few slow-moving corporate procedures in place for the exact reason of ensuring correctness.

Especially when financials are on the line, it's not like they don't have the money to ensure excruciatingly painful amounts of scrutiny here.

I did note that you said "might". So, I would hope not but I've seen things so maybe you're upsettingly right haha
by gausswho | 2025-10-26 12:36:43+00:00
The reasoning does seem... reaaonable. But in this case it's likely not reasoning but rather its guilt-laden doppleganger: rationalization after the fact. Very common in my family, especially the confident/proud ones, including myself.

I try to recognize when I realize I'm doing it, stop, apologize for the deception that it is, and commit to more sincere communication.

Alternatively, regularly informing your family of each infinitesimal danger in this world is a path to neurosis or estrangement. There is a balance, and in some cases non-disclosure does feel the right path (to me).
by Dbra | 2025-10-26 12:36:55+00:00
I've deployed Intilium, a compliance and audit API for AI developers. It lets teams verify model usage against EU AI Act and ISO 42001 standards using simple /v1/check and /v1/commit endpoints. The system is live in production with working sandbox keys, policy validation, and billing. We’re opening early access to developers integrating OpenAI and Anthropic APIs.
by CaptainOfCoit | 2025-10-26 12:38:11+00:00
> Can bot writers overcome this if they know the credentials?

Yes, instead of doing just a HTTP request, do a HTTP request with authentication, trivial really. Probably the reason they "can't" do that now is because they haven't came across "public content behind Basic Auth with known correct credentials", so the behavior hasn't been added. But it's literally loading http://username:password@example.com instead of http://example.com to use Basic Auth, couldn't be simpler :)
by bdz | 2025-10-26 12:38:13+00:00
>so many films, so little time

I've started watching one film every day 3 years ago. Much less time investment than one would imagine. It all comes down to finding a good system to plan what to watch not just sit down and have an analysis paralysis. Once (after a few months) I’ve figured out my current plan where I _have to_ watch certain films it became incredibly easy to keep up.
by kevinwang | 2025-10-26 12:42:25+00:00
A little sad for me because I've enjoyed the global leaderboard aspect for years but of course my second reaction has to be to take a step back and appreciate all the joy that this one man has given us for all these years.

And he's made it clear from that start that he never intended the global leaderboard to be the point, plus AI the last few years messes it all up. All good things come to an end, and I gotta appreciate the good run that we had, and the voluntary work of one person that gifted it to us.
by somenameforme | 2025-10-26 12:43:00+00:00
The study only considered people who end up being diagnosed with myocarditis after seeking medical treatment at a hospital following vaccination with 7 days, and it "predominantly" resulted in subsequent hospitalization for multiple days; on top of this myocarditis can cause longterm irreparable damage. The paper classified that as mild, and perhaps that is the clinically correct term, but it's certainly not the colloquially correct one. In any case rates of all myocarditis and various cardiovascular issues are obviously going to much higher than 1 in 15,000.

As for the risk:benefit analysis, the paper created a typical false dichotomy. It compared getting the shot vs an aggregate case of getting COVID. The reality is that if you got the shot you still ended up getting COVID, often multiple times. And the aggregate comparisons were disingenuous because COVID had dramatically different typical outcomes dependent upon health status at the time of infection. Those with significant preexisting conditions made up the overwhelming majority of negative outcomes.

But even with this false dichotomy they found that they'd only prevent 1 death from COVID per million cases, which I assume was rather liberally rounded up. So that is known as 1 micromort. [1] That's a fun page because it gives some context to mortality risk. 1 micromort is a bit less than everybody experiences every day in the US of dying from a non-natural cause, excluding suicide.

[1] - https://en.wikipedia.org/wiki/Micromort
by razodactyl | 2025-10-26 12:43:39+00:00
I get why this comment was downvoted but I also get where you're coming from - yes, these models are becoming increasingly intelligent at understanding the nuance and where to look without knowing what to begin searching for.

But the downside is, you end up digging in the wrong direction if you leave it to a generalist system instead of a professional community in some cases which is counter productive.

Getting burnt is a good way to learn not to sometimes though...
by nsavage | 2025-10-26 12:44:25+00:00
Bookstores like to make things easy for themselves by defining categories (a la Seeing Like A State), especially due to the perceived overlap between the readership of the two categories as the weird books the nerdy guys read.

While that may have been true historically, fantasy has a new, blossoming, largely female readership, although you could consider this to be overloading the term 'fantasy' as these new BookTok books seem to have little in common with the old school sword and sorcery.
by Tenemo | 2025-10-26 12:44:32+00:00
So what you are saying is that no company has raised prices for any product after tariffs had gone live? That's easily proven to be false (https://taxfoundation.org/blog/trump-tariffs-raise-prices-co...).

Going by your logic, tarrifs would have always no impact on consumers, even e.g. 300% tariffs?
by cts-i-cts-d | 2025-10-26 12:44:37+00:00
You can’t punish retroactively, Lex retro non agit. It’s the lawmakers that create the environment we all work inside of to maximize our profits. There’s probably at least 3 as dangerous as asbestos materials used in current day and we are yet to find out.

Zero tolerance means paralysis, it’s a naive ideal. Look at the recent medical technologies where zero tolerance for unwanted side effects has to be balanced with benefits.

What isn’t a trade-off?
by kibwen | 2025-10-26 12:45:04+00:00
No, this is mistaken. A crate is both rustc's unit of compilation and Cargo's unit of dependency. Feel free to lament this conflation all you like, but what it means is that the common pattern is for library authors to publish large crates that are internally split into smaller crates for better compilation parallelism. This just isn't a problem by any metric; it doesn't increase your trusted computing base. That's not at all the same problem as NPM has with its web of frivolous micro-dependencies.
by kace91 | 2025-10-26 12:45:16+00:00
I didn’t know either - or rather, I had never stopped to consider what a server needs to do to expose a git repo.

But more importantly, I’m not sure why I would want to deploy something by pushing changes to the server. In my mental model the repo contains the SOT, and whatever’s running on the server is ephemeral, so I don’t want to mix those two things.

I guess it’s more comfortable than scp-ing individual files for a hotfix, but how does this beat pushing to the SOT, sshing into the server and pulling changes from there?
by magicalhippo | 2025-10-26 12:45:48+00:00
The one importing pays the tariffs. If that is a person, say buying directly from AliExpress or some other site, then that person pays.

If it's a company, the company pays and might pass it on.

Edit: to be accurate, the importer is legally responsible for the customs declaration and the tariffs, regardless of who does the declaration and who pays. Typically someone else does the declaration on your behalf, and typically they forward any tariffs to you.
by ndsipa_pomu | 2025-10-26 12:46:43+00:00
These kinds of shenanigans (BBC not keeping a copy of their productions) is one of the reasons that I'm a datahoarder and keep a large library of films/tv series that I'm interested in (mainly Scifi and horror).

The scary thing with streaming services is that even modern productions can become inaccessible via legal means e.g. the 28 Days Later film wasn't available when the 28 Years Later film was being shot.

Personally, I'm not a fan of the BBC as their online iPlayer service is terrible at letting me (a license payer) watch older productions that my money has contributed towards. Even shows from a few months ago become inaccessible as their default lifespan is 30 days on iPlayer. Some real old classics are easier to find on YouTube than BBC's iPlayer service.

There's definitely a "dark ages" of TV shows and films from the 70s/80s/90s as digital recording wasn't as common, so unpopular shows will just slip through the cracks as no streamer will be interested and there won't be decent copies available to be pirated.
by gruez | 2025-10-26 12:48:04+00:00
>the name literally comes from the Russian town of Asbest which is known for exporting, you guessed it, asbestos

Seems incorrect.

https://en.wiktionary.org/wiki/asbestos

Etymology

From Old French abestos, from Latin asbestos, itself from Ancient Greek ἄσβεστος (ásbestos, “unquenchable, inextinguishable”), from ᾰ̓- (ă-, “not”) + σβέννῡμῐ (sbénnūmĭ, “I quench, quell”).
by porridgeraisin | 2025-10-26 12:48:36+00:00
> I don't need a server?

You do, an SSH server needs to be running on the remote if you want to ssh into it, using your ssh client - the `ssh` command on your laptop. It's just not a http server is all.

You start that server using the `sshd` [systemd] service. On VPSs it's enabled by default.

Git supports both http and ssh as the "transport method". So, you can use either. Browsers OTOH only support http.
by sega_sai | 2025-10-26 12:48:36+00:00
I find these sorts of takes to be tiresome. It is absolutely true there is a lot of hype around AI. Also it is true that many AI companies try to shove AI into everything without necessarily thinking wherer it is a good idea or whether it useful (talking to you Google). Notwithstanding this it is absolutely clear how transformational the technology is. For low skill tasks it can certainly substitute people and save a lot of time. For harder things one has to be more careful and the right model have to be used, i.e. it is not a silver bullet but just a powerful tool which means it needs to be used in conjunction with other tools
by bitbasher | 2025-10-26 12:49:11+00:00
I have been doing this for many years.

If you want a public facing "read only" ui to public repositories you can use cgit (https://git.zx2c4.com/cgit/about/) to expose them. That will enable others to git clone without using ssh.

I keep my private repositories private and expose a few public ones using cgit.
by brilee | 2025-10-26 12:50:51+00:00
Great write-up, but I admit that I found the interweaving of human and AI-written content/headlines/summaries pretty distracting. I kept on wanting to scroll past, but had to keep on backtracking to find the human thread again.

I think if you want to give your reader a quick intro to, e.g., what is the Adam optimizer, a simple link to Wikipedia is fine. No need to copy-paste an AI tutorial on Adam into the blog post.
by p_l | 2025-10-26 12:51:02+00:00
Binary attachments mostly started to work with less surprises by second half of 1990s, but 8bit unclean issues persisted in my experience... I wanted to say 2001, but I recalled getting hit by them until 2010 at least.

And in some ways desire of people to send non-7bit-ascii text as email is also a continued brokenness in SMTP email.

As for directories - my point was more that directories hid the addressing details from surface UI. Otherwise AFAIK X.400 works perfectly fine without using everything in the possible schema.

Fun fact - Exchange is actually X.400 system, despite no longer having non-SMTP connection options. But its internals are even wonkier, like Exchange and Outlook not supporting HTML Email (no, really, MAPI.DLL crashes on HTML email. If you send/receive HTML email it's stored as HTML wrapped in RTF, and unwrapped when sent elsewhere)
by teleforce | 2025-10-26 12:51:02+00:00
Please check this new promising GenAI architecture namely Discrete Distribution Networks or DDN that's recently posted here at HN [1].

The proposed DDN can even work as LLM based on binary strings instead of text [3].

[1] Show HN: I invented a new generative model and got accepted to ICLR (91 comments):

https://news.ycombinator.com/item?id=45536694

[2] DDN+GPT for LLM:

https://github.com/Discrete-Distribution-Networks/Discrete-D...
by skydhash | 2025-10-26 12:51:17+00:00
Git is distributed, meaning every copy is isolated and does not depends on other's copy. Adding remotes to an instance is mostly giving a name to an URL(URI?) for the fetch, pull, push operation, which exchange commits. As Commits are immutable and forms a chain, it's easy to know when two nodes diverge and conflict resolution can take place.

From the git-fetch(1) manual page:

> Git supports ssh, git, http, and https protocols (in addition, ftp and ftps can be used for fetching, but this is inefficient and deprecated; do not use them).

You only need access to the other node repo information. There's no server. You can also use a simple path and store the other repo on drive.
by K0balt | 2025-10-26 12:51:24+00:00
Off topic, but the idea that the “violence” of ideas, where the only thing in play is your point of view, is somehow equatable to physical violence, where physical integrity is at risk, is one of the least endearing features of the 21st century so far.

I cannot overstate how dangerous to human prosperity this false equivalence is. It is a first-tier ideological scourge that we entertain at great peril both to critical thought and the notion of objective truth itself.

On the other hand, it’s an excellent proxy to clarify that an idea, position, or sometimes even an entire ideology or its sycophant exist for entertainment purposes only and must not, on their own merits, be taken seriously.

Are we really so isolated from the brutality of nature to think that the inconvenient beating of a butterfly’s wings is the same category of experience as being disemboweled and eaten alive by a hungry beast?

Or is it that the whole ideological sham of the violence of ideas is merely a cowardice, a poverty of ingenuity, a plea for clemency by virtue of infantilism?

The pen, or the thought given flight, is mightier than the sword.

That does not make an idea a sword. It is in character , spirit, reach, and endurance a very different type of thing. A sword can be forged from an idea, but an idea will never spring forth from a blade.

Hell in a hand basket, get off my lawn, and uphill both ways to school. Lol.
by a_bonobo | 2025-10-26 12:51:30+00:00
I love Stanislaw Lem. Solaris is his most famous and it has many of his core themes; I'd also try Fiasco.

I'm also a huge fan of R.A. Lafferty, but his stuff his harder to find, mostly out of print.

Peter Watts' Blindsight is amazing recent-ish hard SF. (the follow-up, I did not like at all).

Anything from the Strugatsky brothers you can get your hands on!
by max_ | 2025-10-26 12:51:30+00:00
I tried this and it is never as smooth as described.

Why is GitHub popular? its not because people are "dumb" as others think.

Its because GitHub "Just Works".

You don't need obscure tribal knowledge like seba_dos1 suggests [0] or this comment https://news.ycombinator.com/item?id=45711294

The official Git documentation for example has its own documentation that I failed to get work. (it is vastly different from what OP is suggesting)

The problem with software development is that not knowing such "tribal knowledge" is considered incompetence.

People don't need to deal with obscure error messages which is why they choose GitHub & why Github won.

Like the adge goes, "Technology is best when it is invisible"

[0] https://news.ycombinator.com/item?id=45711236

[1] https://git-scm.com/book/en/v2/Git-on-the-Server-Setting-Up-...
by fjfaase | 2025-10-26 12:51:42+00:00
No, but I don't care. I guess that most hiring managers do not know what AoC is.

Next week, I will be 64, and I am no longer searching for a full time job. In the past decade I only worked for 24 or 30 hours per week. I am financial independent and plan to only work freelance if there is some opportunity. Currently, I am not actively searching for a job.
by 1718627440 | 2025-10-26 12:52:39+00:00
Yeah sure they do more things than only doing the syscall, that's the point of an abstraction. But they still provide the functionality of the syscalls, just in the abstraction that you want it to be exposed as in the programming language. That's what I would consider a wrapper.

> C is used a lot in embedded projects.

Sure that's a freestanding implementation, which primary distinction is that it doesn't rely on the libc. The notion of the libc being part of the OS in the wider sense, still holds water here, since here no OS corresponds to no libc.
by WJW | 2025-10-26 12:52:48+00:00
The leaderboard has led to the same predictable discussion for as long as the AoC has existed. Recurring themes:

- The puzzles get published in the middle of the night for most of Europe, can't we have a better system like scoring on <arbitrary other metric the poster likes better>.

- It's weird that many of the pages say "just have fun, it's not a race" and then also there's a prominent leaderboard page to show who's currently ahead in the race.

- There's been people taking the whole thing way too seriously from basically year 1, trying to load their puzzle input as fast as possible by polling every 10 ms and putting too much load on the servers.

- Whether AI is allowed is always a super toxic discussion with no real outcome because you can't enforce it.
by testdelacc1 | 2025-10-26 12:54:09+00:00
While usage of aircon during heatwaves stressing the grid is a valid concern, I think massive increase in solar could offset it. Solar will also generate maximum energy during sunny days with minimal cloud cover, meaning there shouldn’t be a shortage of energy if there’s enough solar.

Since 2022 California has energy from solar by roughly 50%, while the population has decreased. Solar is now the biggest source of energy in California, and continues to grow. That means that future heatwaves should be handled well enough.