MurphyA/hacker-news huggingface dataset:
by summarity | 2025-10-07 08:14:57+00:00
If you want to get reliable automated fixes today, I'd encourage you to enable code scanning on your repo. It's free for open-source repos and includes Copilot Autofix (also for free).

We've already seen more than 100,000 fixes applied with Autofix in the last 6 months, and we're constantly improving it. It's powered by CodeQL, our deterministic and in-depth static analysis engine, which also recently gained support for Rust.

To enable go to your repo -> Security -> code scanning.

Read more about how autofix works here: https://docs.github.com/en/code-security/code-scanning/manag...

And stay tuned for GitHub Universe in a few weeks for other relevant announcements ;).

Disclaimer: I'm the Product lead on detection & remediation engines at GitHub
Check if your site is being throttled by Google – Hong Kong vs. US Google Test
by hypeaccount | 2025-10-07 08:16:09+00:00
I stumbled on something weird recently that might be worth checking for your own sites. When I access Google through a Hong Kong IP, my site ranks normally (page 1) for all my core keywords — including exact match brand searches. But when I search from US or Canada, the site completely disappears for the same queries. Instead, Google shows Reddit, Instagram, and Facebook pages — my domain doesn’t even rank for its own name in Top 40. The simplest way is to just search your domain name on Google using Hong Kong IP. Interestingly, My website only has US/Canada audience.
by Intermernet | 2025-10-07 08:16:55+00:00
According to our understanding of physics, which is based on our understanding of maths, the time taken to brute force a modern encryption standard, even with quantum computers, is longer than the expected life of the universe. The likely-hood of "finding a shortcut" to do this is in the same ball-park as "finding a shortcut" to tap into ZPE or "vacuum energy" or create worm-holes. The maths is understood, and no future theoretical advances can change that. It would involve completely new maths to break these. We passed the "if only computers were a few orders of magnitude faster it's feasible" a decade or more ago.
by noduerme | 2025-10-07 08:16:58+00:00
I don't get it. I mean, yeah I get wanting to make extremely minimal web pages that are readable on every screen. But if that's your goal, the solutions are pretty well understood. Who's the target audience for this, i.e. who are the people who are trying to make a bare bones web page but just struggling with `max-width` - and why's it at the top of HN?
by waterTanuki | 2025-10-07 08:17:37+00:00
> The SPARK prover correctly notices that there's nothing stopping us from entering a value outside the array bounds. It also points out that the Get call we're using to read the integer from stdin can raise an unexpected Constraint_Error at runtime if you type in anything that can't be parsed as an integer.

To me, this doesn't sound like something unique to spark. Let's return to the solution example:

procedure Overflow_This_Buffer with SPARK_Mode => On is type Integer_Array is array (Positive range <>) of Integer; Int_Array : Integer_Array (1 .. 10) := [others => 1]; Index_To_Clear : Integer := Int_Array'First - 1; begin while Index_To_Clear not in Int_Array'Range loop Ada.Text_IO.Put ("What array index should be cleared? "); -- Read the new array size from stdin. Ada.Integer_Text_IO.Get (Index_To_Clear); end loop; Int_Array (Index_To_Clear) := 0; end Overflow_This_Buffer;

All you have done here is proven that within the vacuum of this function that the index will be a valid one. Indeed, this is even confirmed by the article author just prior:

> If we wrap the Get call in a loop, and poll the user continuously until we have a value within the array bounds, SPARK can actually prove that a buffer overflow can't occur. (Remember to initialise the Index_To_Clear variable to something outside this range!)

You have to poll the user continuously until a valid input is given. Again, I don't see how this is any different or special compared to any other programming language that would handle the error by asking the user to retry the function.

> Key word here is can. You can write correct software using any language, from raw binary to theorem proving languages, but some languages check more properties at compile time than others. What using something like SPARK/Lean/Agda/Rocq buys you is the "more" part, up to allowing you to eliminate runtime checks entirely because you proved at compile time that the corresponding error conditions can not happen (e.g., proving that indices are always in bounds allows you to omit bounds checks). That's not something the more popular languages are capable of because their type system is not expressive enough.

But I think the discussion here is about Rust, Ada, C/C++ no? The type system in Rust, Ada, and C++ are all robust enough at least to accomplish this.

> This seems contradictory, especially when considering that type checking is creating a formal proof?

Exactly! This is the root of my issue: you can accomplish this magical "proof" you speak of without using SPARK or Ada or any special "contract" language.
by Theodores | 2025-10-07 08:17:47+00:00
CSS reset stylesheets are just the first step towards unmaintainable 'add to' stylesheets, laced with the word 'important' everywhere.

I think it is best to take the Kevin Powell approach, as per the article, where you will be leaning in on browser defaults. Clearly you have to do your cross-browser and cross-platform testing, however, after almost two decades of everything coming with a CSS reset lurking in the stylesheets somewhere and mountains of cruft on top (remember frameworks), it is so liberating to get rid of the lot and to use the modern CSS tools such as CSS Grid and CSS variables.

Nowadays CSS is my favourite 'LEGO set' and I love the creative opportunities. This contrasts with the olden days where I hated the hacks based on hacks that was CSS. I have gone from practically drowning despite wearing armbands to being able to effortlessly glide through the water. CSS reset is one of those 'armbands' and it takes courage to go without such things. Same goes for those awful CSS pre-processor things.
by soraminazuki | 2025-10-07 08:18:06+00:00
Nonsense. The solution to a malicious package is to not use that single package. The solution to a malicious package repository is to abandon that package repository entirely.

Also, you don't secure a package repository through hostile takeovers, and you certainly don't build trust with such an obvious lie. Claiming that the current rubygems.org is in any way trustworthy is utterly absurd.
by CaptainOfCoit | 2025-10-07 08:18:14+00:00
> while my kids seem to default to English somehow.

> I speak English with them

You seem to know the answer already :) Kids regularly find "more reliable" adults and weight their opinion, manners and ideas higher than others, so if you're mainly speaking English to them, they'll default to trying to adopt to that, even if the main language is different all around them.
by bilekas | 2025-10-07 08:18:23+00:00
There was a great expression I read in relation to Microsoft's Xbox division, they recently increased their prices in some cases by 100% but one commentor said "They're too big to care".

I think this applies now also with their complete disregard for the windows 10 EOL. Exposing, if I remember correct : ~40% of the windows market [0]. This seems to me as negligence in their duty to ensure a level of security and quality.

The people who've made these decisions don't seem to realize that there are more options than ever to replace them. It's almost as if they're actively pushing people to find them. Their Azure offering is making ground though [1] and maybe that's where they want to put their efforts in. If that's the case, good riddance.

> “While these mechanisms were often used to bypass Microsoft account setup, they also inadvertently skip critical setup screens, potentially causing users to exit OOBE with a device that is not fully configured for use.”

Imagine being able to use your device however you wanted to. Apperantly that luxury is no longer yours. I've had to setup windows 11 on machines with no wifi drivers from w11 and without the oobe overwrite I would not be able to complete the installation. What possible reason could they have for that.

[0] https://gs.statcounter.com/windows-version-market-share/desk... [1] https://turbo360.com/blog/azure-market-share
by thaumasiotes | 2025-10-07 08:18:50+00:00
> I remember someone complaining about how much effort it was to typeset every single book name in some scene that had a bookshelf

That seems like something you might legitimately skip. Most books that appear in the background of a scene aren't relevant.

On the other hand, the example image in the article, where there's a big banner hung on the wall reading "Rana-chan's Surprise Party", seems like something you'd want to translate.
by gwd | 2025-10-07 08:19:12+00:00
Voice interfaces actually remind me a lot of command-line interfaces: If you know the a working "rune" on the tip of your tongue (e.g., "Set a timer for 10 mintues", "Play <exact title rune that gets the song you want>") it's great. But as you say, it's not always that easy to figure out new "runes". LLMs should be somewhat better for that, though.
by ulrikrasmussen | 2025-10-07 08:19:52+00:00
I thought the point of the article was that it was indeed adjacent, but that in their particular case there was no risk because (1) the mutated bacteria are actually less virulent, and (2) the mutated bacteria are resistant to one particular type of antibiotic which is not in use due to safety issues, but they are not resistant to any of the drugs that are actually used in humans to treat TB.
by bestkundli | 2025-10-07 08:20:52+00:00
A true AI Jarvis app - that predicts about you and your future events using Astro Science.

Must try to get answers for:

- 'What Job Is Suitable for You' and 'What Kind of Business Is Suitable for You.'

- 'How is your career?' or 'How is your relationship with your spouse or wife or kids going to be'

Do not forget to choose a category before asking your questions:

https://bestkundli.com
by InsideOutSanta | 2025-10-07 08:21:15+00:00
"Links to" is doing a lot of work in that sentence. ProtonVPN is owned by Proton, which has no legal ownership ties with Tesonet. During Proton's expansion into Eastern Europe, Tesonet initially assisted Proton with HR, payroll, and local regulation, so for a period of time, people working for Proton were employed by Tesonet, since Proton had no local subsidiary that could hire them. These were not "shared employees", they worked exclusively for Proton.

In 2016, Proton created its own subsidiary, and these people are now employed by Proton. But for this historical reason, the ProtonVPN keystore on Android still lists Tesonet as the organization name, even though it is fully controlled by Proton.

None of this is "debunking"; these are just the facts. You can make of them what you will, but you should be honest about what actually happened when you talk about it.
by fabian2k | 2025-10-07 08:21:18+00:00
As the article states, it is technically a gain of function experiment. But what is actually prohibited are dangerous gain of function experiments.

This specific use of antibiotics resistance is also extremely common. Pretty much every single microbiology experiment starts this way, and every time you want to genetically modify bacteria you do this. This includes every time you want to produce any protein, because you need genetically modified bacteria for that. This is a large part of all labwork in this field.

As the article notes, the antiobiotic used is one that isn't used for humans. So there is not significant additional danger due to that modification. The bacterium itself is much more dangerous than most that are handled in the lab, but that's why they're in a BSL-3 lab.
by noodletheworld | 2025-10-07 08:21:35+00:00
If someone opens a PR to one of my repos with no context, I ban them.

There’s too much AI spam out there right now.

Publishing ‘@provenance-labs/lodash’ as a test, I suppose. Ok. Leaving it up? Looks like spam.

Badgering the author an a private email? Mmm. Definitely not.

This isn’t a bug, it’s a feature. There’s a contributing guide which clearly says; unless a feature gets community interest, it’s not happening. If you want a feature, talk about it rouse community interest.

Overall: maybe this wasn’t the right way to engage.

Sometimes you just have to walk away from these situations, because the harder you chase, the more it looks like you’re in the wrong.

…it certainly looks, right now, like the lodash author wasn’t out of line with this, to me.
by prennert | 2025-10-07 08:21:52+00:00
wow your post gave me a bit of perspective. The distribution might really matter here.

Are those ~400-800 kg of aluminum oxide in cosmic dust each day uniformly distributed, and if not how big are those clouds of aluminum oxide that the earth is travelling through? Those 30kg from the satellites are going to be extremely concentrated and therefore take longer to "soak up".
by thaumasiotes | 2025-10-07 08:22:32+00:00
The usual thing in that case would be that crunchyroll asks the production company for money to fund all the marketing it's doing on their behalf.

In fact, the traditional model of television is that you give the show away for free and hope to make money on popularity.

If you produce music, there are multiple companies right now who sell the service of "we will upload your music to every streaming platform, so that anyone who wants to listen to it for free can do that".
by noduerme | 2025-10-07 08:23:56+00:00
“Do not lay up for yourselves treasures on earth, where moth and rust destroy and where thieves break in and steal, but lay up for yourselves treasures in heaven, where neither moth nor rust destroys and where thieves do not break in and steal. For where your treasure is, there your heart will be also."

Matthew 6:19. He was talking about backing up to the cloud ;)
by pndy | 2025-10-07 08:24:26+00:00
> Something called a .NET Passport also comes to mind during the mid-XP days

That's essentially Microsoft Account nowadays, which went thru few rebrandings on the way. In XP it was promoted via Windows Messenger with popup message which for less experienced people would suggest that in order to access the Internet they need this "passport".

Considering how many sites now offer (still optional) logins with apple/meta/microsoft accounts I wonder if the goal here is to be the provider of identity for sites and services and at the same future-proofing for any digital ID checks govt's may introduce
by solid_fuel | 2025-10-07 08:24:31+00:00
I did this kind of work in a community college biotech program (literally biotech 102, we used E. Coli just to learn the technique). They are not engineering a new, deadlier strain of bacteria, they are using antibiotic resistance to solve a very simple problem: genetic modification is a probabilistic process, you have Gene A and need to get it into bacteria, but Gene A doesn't make the bacteria different externally in any easily detectable way.

So, after the process of inserting Gene A into a batch of bacteria you need to figure out which of the bacteria actually picked up Gene A so you can proceed to the next step of your experiment. So, what you do is you pair Gene A with Gene B, which is a very light resistance to a very specific antibiotic. Now, after you perform the electroporation, you plate the bacteria on agarose gel, let colonies start to develop, and then lightly dose the gel with the antibiotic.

The surviving bacterial colonies are those which have incorporated both Gene A and Gene B (because they are paired). It's just a way of filtering bacteria after electroporation so you can do further work. It's not dangerous to people because A) this antibiotic resistance was already found in nature, B) it's a resistance to a very specific antibiotic, not all antibiotics, and C) you're doing this in a protected lab.

This is an incredibly standard process, to the point where - again - I did this in a Biotech 102 program at community college. You could sign up for a classes where you learn to do this, right now.
by lackoftactics | 2025-10-07 08:24:55+00:00
I would say that's rational take, it's a long shot and probably investments of such caliber should have stronger proofs. I believe some companies are investing so much, to not be left behind if there is an even remote chance of success...Apple was one of the top companies not following and there have been huge criticism, that they are left behind

Also I think you will like this interview with founder of Cohere AI, it's much more nuanced and doesn't say AGI is near...more like we are far away, although it's useful. https://m.youtube.com/watch?v=Sw2chzwWLbQ
by sjducb | 2025-10-07 08:27:02+00:00
Biologists modify cells so that we can study them. The modifications are about 0.00001% effective. If you attempt to modify 10^6 cells then maybe 20 cells will be modified. Most cells do not take the modification. So you need to select out the individual cells that have been modified.

You do this by including antibiotic resistance genes alongside your modification. Now all modified cells are resistant to the antibiotic. Then you apply a small amount antibiotic to kill the unmodified cells. Now you only have the cells with your interesting modification.

This is the mainstay of molecular biology. Every lab biologist has done it. We even do it as college students in lab practicals.

Banning the use of antibiotic resistance genes in biological research is effectively banning all wet lab medical research.
by fuzztester | 2025-10-07 08:28:21+00:00
Yes, and you also have to be able to understand the LLM's answers, and to be able to distinguish correct answers from "hallucinations" (or AI slop), which is just an euphemism for mistakes or wrong answers made by them.

All of which implies that you need to know quite a bit about that topic (which you were asking the LLM about) in the first place, otherwise how can you distinguish right answers from wrong ones.

So lenkite's comment is not very useful or practical.
by greatgib | 2025-10-07 08:29:23+00:00
If you look at their own stats, they says that for a server that host 150 games, at any given time, they have around 50 games that are in the buy phase.

I don't know how long game rounds last, but if you tell me that you have 60s only locked in that state, that means that the playable game round last around 2 minutes.

And anyway, that you will spend on average 1/3 of your time not playing when you came to play.

Numbers look strange, as 2 minutes looks very low to me for a party, but I don't know how you can explain the ratio of 50/150 otherwise?

And just as an aside, the article in itself tells you that they capitalize on you being in the buying phase to reduce server costs. So looks like that even if they could do something on the game play side to improve that, there would be financial incentives not to do so.
by DoctorOW | 2025-10-07 08:30:36+00:00
I'm honestly surprised that somebody hasn't sold a bundle of a TV antenna, set-top box, and cloud storage for a DIY streaming service kind of thing. I'm aware of Plex and Jellyfin, but I feel like you could make the setup instant and painless even for non-technical users. All these problems we're seeing with streaming (content spread over many expensive subscriptions, unregulated advertising, disappearing/moving content) would be easily solved.
by extraduder_ire | 2025-10-07 08:30:43+00:00
You connect to an access point, and your browser/OS tries to open one of http://detectportal.firefox.com/canonical.html, http://www.msftconnecttest.com/connecttest.txt, http://connectivitycheck.gstatic.com/generate_204, https://captive.apple.com/hotspot-detect.html and loads/displays whatever unencrypted web page is served.

Getting someone to open an unencrypted webpage is almost trivial. It's often one of the only web pages you can open on a device.
by mbrock | 2025-10-07 08:31:16+00:00
I also based my Zig Lisp interpreter on delimited continuations and had a great time implementing async, resumable exceptions, dynamically scoped variables, and so on, on top of that.

The single-stepping continuation-shuffling evaluation paradigm also made it really easy to expose evaluations as objects and stepping as a function. A simple form like

(set! e (run (+ 1 1))

stores an evaluation—whose continuation and lexical environment can both be inspected and serialized—and

(step! e)

does a single evaluation step. This lets you implement not just yield-based cooperative concurrency in "user space" but something like green threads with a preemptive scheduler.

Here you can see how the delimited continuation control allows binding to JavaScript's Promise API in a way that lets you treat promises as blocking computations:

https://github.com/mbrock/wisp/blob/master/web/js.wisp

You might be interested in seeing e.g. the implementation of SEND-WITH-DEFAULT! which is one of the control control primitives:

https://github.com/mbrock/wisp/blob/b8e29dba0ea61ebaf2db5e3e...

The evaluator itself is in core/step.zig if you want to check it out.
by quantosaurus | 2025-10-07 08:31:35+00:00
While working on new ML architectures I struggled to stabilize training by using countless learning-rate schedulers, gradient clippers and normalizers enough to go and implement a schedule-free optimizer.

Here, Lion Schedule-Free optimizer - a version of Lion optimizer that requires no learning-rate scheduler. It uses sign agreement - an absolute value of cross correlation between momentum sign and gradient sign, to scale the effective update step. Not only it converges 3x times faster ON MY MODEL, by eliminating LR scheduler it also allows for hot training resume & restart. And also stabilizes training, especially late training, eliminating the need for gradient clipping, etc. The effective update depends on the training regime and can decrease or increase during training. In this implementation, the sign agreement is calculated per-module. It's probably more logical and stable to calculate it per-parameter-group, but that's more code and since module-wise already works pretty well...

The optimizer is provided as is. There will be no paper, no convergence guarantees, no ablation studies and no time to do any of that.

Install it:

pip install git+https://github.com/govorunov/lion-sf.git

And use it as normal optimizer:

from lion_pytorch import LionSF

optimizer = LionSF(model.parameters(), lr=5e-4, betas=(0.9, 0.99), weight_decay=1e-2) Give it a generous base learning rate, like 5e-4 or more, and ditch LR scheduler completely. You can also ditch gradient clipping (as I did).

If you want to resume / restart training later from a checkpoint - keep the optimizer state, do a hot-restart. There is no need to warm-up - it will restart gently naturally. The ability to do a hot-restart and increased training stability is probably more important (for me) than even faster convergence, although faster convergence looks better on plots.
by fhd2 | 2025-10-07 08:32:10+00:00
I don't believe managers can operate with that kind of precision. I don't know how they'd execute the "let's spend 200$ more" idea. You're either in a quality or in a cost reduction mindset usually, these are _really_ difficult to mix for management. I know I've tried :) When you even bring up how long something takes, that can already have adverse effects on quality without you actually decreeing anything.
by Perz1val | 2025-10-07 08:32:35+00:00
You've just pissed off the entire eastern Europe and are still acting like you've any moral with this. It's the Russian state (and their elites) that's been an abuser to neighboring countries and they're still doing it. It has nothing to with race at all, Russians are slavic people as well. We don't really have a problem with them, beyond them supporting their government