MurphyA/hacker-news huggingface dataset:
by ajross | 2025-10-28 03:02:12+00:00
> Is that not a problem with how people are using CVEs, scoring them and attaching value to them

Well, yes, it is. But if that's the way the market is going to game the scoring/value system it's (mis)using, then it behooves a project that wants to be successful to play the same game and push back when the scoring unfairly penalizes it.

Basically dnsmasq doesn't really have much of a choice here. Someone found a config parser bug and tried to make a big deal out of it, so someone else (which has to be dnsmasq or a defender) needs to explain why it's not a big deal.
by dang | 2025-10-28 03:02:43+00:00
Yikes, you can't attack another user like this on HN, regardless of how wrong they are or you feel they are. We ban accounts that post like this, so please don't.

Fortunately, a quick skim through your recent comments didn't turn up anything else like this, so it should be easy to fix. But if you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site to heart, we'd be grateful.
by dlivingston | 2025-10-28 03:04:44+00:00
Completely agree. Fully online friendships are hollow simulacrums of the real thing, like most fully online things compared to their offline counterparts. That's not to say there isn't real connection or real value there, just that they are a supplement to - and not a replacement for - the 'real thing'.

Example: long-distance relationships vs. in-person. My wife and I started off as long distance before moving to the same city together. Obviously we established a very real relationship digitally, but it was a means to an end, and not an end in itself, and the real-world date nights and so on are so much deeper and richer than Facetime calls.
by Telaneo | 2025-10-28 03:05:09+00:00
en-DK is used for this in some cases, giving you English, but with metric units and an ISO keyboard among other things.

A dedicated one for International English, or heck, even just EU-English, would be great.

The EU websites just use en from what I can tell, but they also just use de, fr, sv, rather than specifying country (except pt-PT, which makes sense, since pt-BR is very common, but not relevant for the EU).
by justsid | 2025-10-28 03:05:19+00:00
That's not how any of this is sold though. Google did a lot of fundamental research quite publicly in this space for many years, and people were generally quite favourable of this and didn't ask to see insane revenue from it (yet). But Microsoft is not doing that, not even by proxy of funding OpenAI. They are selling it as the greatest business thing ever, so where are the numbers to back that?
by KPGv2 | 2025-10-28 03:06:03+00:00
> I suspect what happened is that a generation of professionals went through university systems where racial preferences were practiced openly

I feel like you're ignoring that racial preferences were practiced openly for the entirety of the existence of the university systems in the US. It's just that for almost all of time, the preference was for "white non-Jews" (where "white" was historically malleable: Benjamin Franklin wrote a somewhat famous screed about how Germans and Swedes weren't white, they were inferior, and they were "darken[ing America]'s people"
by DonHopkins | 2025-10-28 03:07:43+00:00
"Homelabbers" reminds me of the inimitable Rich Morin's and Vicki Brown's "Canta Forda Computer Lab". (Say it out loud!)

https://web.archive.org/web/20200312000527/http://www.cfcl.c...

>We get occasional inquiries about our name. In case you are wondering, it is a pun on "Can't afford a computer laboratory". (We have plenty of computers, to be sure, but the ideal computer laboratory will always be beyond our reach. :-)

>Inspiration for the name was drawn from Walker A. Tompkins, a family friend and prolific writer (of adventures, history, and westerns). Mr. Tompkins used the name "Canta Forda Rancho" for his home in Santa Barbara, CA.
by danans | 2025-10-28 03:08:04+00:00
> But in this century what we have is separatists who simply spread out because they hate everyone, not for a valid economic purpose.

I don't doubt that such people exist, but rural areas are also populated by people who are priced out of expensive urban centers. Furthermore, those two groups also probably have some overlap. I also agree that those people need to have skin in the game, but I don't see a way forward without compromise.
by jackcviers3 | 2025-10-28 03:08:15+00:00
I'll add to this - if you work on a software project to port an excel spreadsheet to real software that has all those properties, if the spreadsheet is sophisticated enough to warrant the process, the creators won't be able to remember enough details abut how they created it to tell you the requirements necessary to produce the software. You may do all the calculations right, and because they've always had a rounding error that they've worked around somewhere else, your software shows calculations that have driven business decisions for decades were always wrong, and the business will insist that the new software is wrong instead of owning some mistake. It's never pretty, and it always governs something extremely important.
by latentsea | 2025-10-28 03:08:56+00:00
I think C# is really going to shine in the LLM coding era. You can write Roslyn Analyzers to fail the build on arbitrary conditions after inspecting the AST. LLMs are great at helping you write these too. If you get a solid architecture well defined you can then use these as guardrails to constrain development to only happen in the manner you intend. You can then get LLMs to implement features and guarantee the code comes out in the shape you expect it to.

This works well for humans too, but custom analysers are abstract and not many devs know how to write them, so they are mostly provided by library authors. However, being able to generate them via LLMs makes them so much more accessible, and IMHO is a game changer for enforcing an architecture.

I've been exploring this direction a lot lately, and it feels very promising.
by Animats | 2025-10-28 03:09:38+00:00
Most of those problems can be handled by moving very slowly and carefully, and allowing lots of safe distance around anything that looks like an emergency. That seems to be Waymo's default. They understand some traffic cop hand signals. But most human drivers won't get those, either. There's not much in the Vehicle Code about that.

CALTRANS uses trucks with big flashing arrows and portable collision barriers on the back to protect road workers ahead. They make no attempt to make ordinary drivers do anything more complex than stop or change lanes.

The people from Pepe's Towing in LA post videos of large vehicle accident recoveries, and they often talk about road worker coordination problems. They have to coordinate with CALTRANS, the California Highway Patrol, local cops, fire departments, HAZMAT services, railroads, terminal and port operators, and the drivers involved. The pros who clean up such messes seem to know each other, at least by reputation, but the drivers are often clueless. Pepe's has two questions for drivers - how heavy is your load, and what are you carrying? The answers they get run about 80% "duh". Those are the drivers who roll over semis on freeway ramps.

When autonomous trucking gets going, that kind of coordination will be necessary. But not for passenger cars.
by lmm | 2025-10-28 03:10:07+00:00
> The purpose of DEI is to rectify the discrimination that is already present.

But what's the mechanism for how it can ever actually do that? Suppose there was discrimination that meant some women who "should" rightfully have done CS degrees instead did something else (and I don't think anyone's ever actually shown this without making an arbitrary assumption that any difference in the number of applicants must be due to discrimination, but let's put that aside for the moment). So now you have a number of women with less CS experience than they rightfully "should" have. If you lower the bar for women to give conference talks, or get promoted in the workplace, to compensate for this lesser experience, you're not actually filling that experience deficit, you just get a number of women who've been promoted above their experience level. That doesn't fix past discrimination, it makes it worse.
by wonderwonder | 2025-10-28 03:12:09+00:00
Most people would really benefit from going to the gym. I'm not trying to downplay serious mental illness as its absolutely real. For many though just going to the gym several times a week or another form of serious physical exertion can make a world of difference.

Since I started taking the gym seriously again I feel like a new man. Any negative thoughts are simply gone. (The testosterone helps as well)

This is coming from someone that has zero friends and works from home and all my co-workers are offshore. Besides my wife and kids its almost total isolation. Going to the gym though leaves me feeling like I could pluck the sun from the sky.

I am not trying to be flippant here but if you feel down, give it a try, it may surprise you.
by Barrin92 | 2025-10-28 03:13:54+00:00
>Most people don't understand just how mentally unwell the US population is

The US is no exception here though. One in five people having some form of mental illness (defined in the broadest possible sense in that paper) is no more shocking than observing that one in five people have a physical illness.

With more data becoming available through interfaces like this it's just going to become more obvious and the taboos are going to go away. The mind's no more magical or less prone to disease than the body.
by xouse | 2025-10-28 03:15:05+00:00
I’m decent at excel, but not amazing. I’ve tried again and again to use LLMs including Claude to solve specific, small, well defined problems in excel with a 0% success rate. My experience so far has been if I can’t do it LLMs can’t either.

If LLMs are a 6/10 right now at basic coding then they’re a 3/10 at excel from my experience.
by renlo | 2025-10-28 03:15:15+00:00
Most eye opening experience in my personal development was attending HR conferences (we sold an HR product but I am an engineer), where speakers were openly saying this out loud. I know you won’t believe me given your statement, but using codewords they said they were trying to hire “diverse candidates”, retain “diverse candidates”, explicitly mark “non-diverse candidates” leaving as non-regrettable churn, filtering and searching for diverse employees within the company to fast track for promotion, etc. I was in shock how brazenly they were saying the quiet part out loud, and breaking the law. This was 10 years ago, there were no repercussions for it, in fact they were all lauded.
by Manuel_D | 2025-10-28 03:16:15+00:00
Output is just one factor, capacity is another. If you're building a solar plant with the assumption that storage will make it provide consistent energy output throughout the day, then the difference between 12 hours of storage and 2 hours of storage is enormous.

Some storage project list power output figures that can only be sustained for 90 minutes: https://en.wikipedia.org/wiki/Victorian_Big_Battery
by rc1 | 2025-10-28 03:16:29+00:00
If fairness to toon, the alternative json your giving doesn’t include hints on structure.

Not sure LLM are more “tuned” to JSON.

That said, your general point holds that toon maybe unnecessary. Especially in the examples given. But perhaps plan text would suffice. Toon could be useful when automating inputs with many different shapes.
by zeroq | 2025-10-28 03:16:46+00:00
I remember, back in the day, when first driving assistance systems rolled out - you know, keep lane, speed assistance according to road signs, etc. - I thought to myself "I bet you haven't seen our roads".

When I was getting my driver license I had to perform a series of tasks as part of the process. On of first was driving a 50m narrow curve forth and back. I had my exam in the middle of winter. The training yard was fully covered in snow. I was young and didn't knew better, so I got in the car and begin my test to quickly realize I couldn't see shit. I tried my best, but next moment I was told I got off the curve - the examiner knew it by heart - and I failed the test. Back to school and see you next semester.

A learning experience on so many levels.

Anyway, since then I always come back to that single experience when I read about self driving vehicles.
by vrc | 2025-10-28 03:17:08+00:00
I’m a PM and I’ve been able to do a lot of very interesting near production ready bits of coding recently with an LLM. I say near production ready because I specifically only build functional data processing stuff that I intentionally build with clean I/O requirements to hand to the real engineers on the team to slot in. They still have to fix some things to meet our standards, but I’m basically a “researcher” level coder. Which makes sense — I do have an undergrad and MS in CS, and did a lot of mathy algo stuff. For the last 15+ years I could never use anything in my brain to help the team solve things I was best suited to solve. I am now, and that’s nice.

The one key point is that I am keenly aware of what I can and cannot do. With these new superpowers, I often catch myself doing too much, and I end up doing a lot more rewrites than a real engineer would. But I can see Dunning Kruger playing out everywhere when people say they can vibe code an entire product.
by SAI_Peregrinus | 2025-10-28 03:17:34+00:00
My template:

1. What is this change supposed to do?

2. Why is this change needed?

3. How was it tested?

4. Is there anything else reviewers should know?

5. Link to issue:

There's no "What changed?" because that's the diff. Explain your intent, why you think it's a good idea, how you know you accomplished your intent, and any future work needed or other concerns noticed while making the change. PR descriptions suffer from the same problem as code comments by beginners: they often just describe the "what" when that's obvious from the code, when the "why" is what's needed. So try very hard to avoid doing that.
by anonymous908213 | 2025-10-28 03:17:50+00:00
> best approximation of the rational mind attempting to figure out an escape from a consistently negative situation under conditions of very limited information about alternatives

I dislike this phrasing, because it implies things can always get better if only the suicidal person were a bit less ignorant. The reality is there are countless situations from which the entire rest of your life is 99.9999% guaranteed to constitute of a highly lopsided ratio of suffering to joy. An obvious example are diseases/disabilities in which pain is severe, constant, and quality of life is permanently diminished. Short of hoping for a miracle cure to be discovered, there is no alternative and it is perfectly rational to conclude that there is no purpose to continuing to live in that circumstance, provided the person in question lives with their own happiness as a motivating factor.

Less extreme conditions than disability can also lead to this, where it's possible things can get better but there's still a high degree of uncertainty around it. For example, if there's a 30% chance that after suffering miserably for 10 years your life will get better, and a 70% chance you will continue to suffer, is it irrational to commit suicide? I wouldn't say so.

And so, when we start talking about suicide on the scale of millions of people ideating, I think there's a bit of folly in assuming that these people can be "fixed" by talking to them better. What would actually make people less suicidal is not being talked out of it, but an improvement to their quality of life, or at least hope for a future improvement in quality of life. That hope is hard to come by for many. In my estimation there are numerous societies in which living conditions are rapidly deteriorating, and at some point there will have to be a reckoning with the fact that rational minds conclude suicide is the way out when the alternatives are worse.
by Huxley1 | 2025-10-28 03:18:15+00:00
I've had a similar experience. The bigger my social circle gets and the more people I follow, the easier it is to end up surrounded by a single perspective, especially on work-related topics. At first, I thought I was broadening my view, but it turned out I was just reinforcing my existing preferences. Do you make a point of keeping people with different opinions in your network, or do you find it more comfortable to stay in circles where everyone thinks alike?
Ask HN: Glitchy YouTube Shorts?
by gbraad | 2025-10-28 03:18:41+00:00
YouTube has been using an AI filter or so to modify/enhance content of shorts. However, this also causes glitches, like artifacts during playback.

Like this: https://youtu.be/2HY-nREvVu4

Which could be a side effect of: https://youtu.be/86nhP8tvbLY

Seriously makes videos unwatchable and even dangerous for those with epilepsy. This seems to only affect Shorts for now
by BobbyTables2 | 2025-10-28 03:19:16+00:00
It gets blurry at times though.

Imagine a router has a web/cli interface for setting the DHCP server’s domain name. At some point the users’s data is forwarded to a process exiting the root-owned file.

Hypothetically, If a vulnerability in the parsing of such from the config could be exploited from the end-user, that would certainly matter.

And these things always seem to be one step away from bugs that allow arbitrary injection into the config file…

(I’m amazed at the hot messes exposed with HTTP and SMTP regarding difference in CR/CRLF/LF handling. Proxy servers and even “git” keep screwing this up…)
by abustamam | 2025-10-28 03:20:01+00:00
I like liquid death because their water is delicious and not high in sugar. I usually drink a sparkling water with dinner and I definitely prefer liquid death over la croix. They are technically different products though.

That their marketing is so edgy is just fun. I don't take it seriously, and it doesn't seem like they do either.

But Proven is definitely full of toxic masculinity internet tough guys.
by KPGv2 | 2025-10-28 03:20:59+00:00
This seems like a disingenuous link to me. It's not a research paper, it's weakly sourced (and many citations are to non-academic outlets such as Quillette. And the author is highly incestuous, linking to her own casual articles (not academic, peer-reviewed papers) as evidence for her secondary claims. At one point, her "proof" that anti-male bias is accumulating is a City Journal article by John Tierney, who is employed by the Manhattan Institute, a right-wing think tank. In this article he makes such bold claims as

"Women aren’t discriminated against in twenty-first-century America"

"“Toxic masculinity” and “testosterone poisoning” are widely blamed for many problems, but you don’t hear much about “toxic femininity” or “estrogen poisoning.”" <-- you actually do hear about toxic femininity all the time, it's just packaged up with slick marketing terms like "tradwife"

"Who criticizes “femsplaining” or pretends to “believe all men”?"

Well, "femsplaining" has historically just called "being a bitch," and "believe all men" seems to be the default position of most people considering how rarely sexual assault victims are, historically, taken seriously.

(Also, not for nothing, the slogan he's alluding to is "believe women" not "believe all women." And the thrust of the catchphrase is not that we should automatically believe every claim out of a woman's mouth, but that we should believe rather than dismiss-by-default women when they say something. So, on the matter of getting basic facts about the subject matter correct, he's already getting off on the wrong foot, being propagandistically wrong here.

I'm actually shocked at how terrible your link is. I really had a higher opinion of HN users (although lately it's felt like all anyone wants to talk about is AI slop).

I recommend you read things more closely before linking them. Your reputation is at stake.
by bgrainger | 2025-10-28 03:21:38+00:00
Completely agree, and I've started writing more Roslyn analyzers to provide quick feedback to the LLM (assuming you're using it in something like VS Code that exposes the `problems` tool to the model).

I also want C# semantics even more closely integrated with the LLM. I'm imagining a stronger version of Structured Model Outputs that knows all the valid tokens that could be generated following a "." (including instance methods, extension properties, etc.) and prevents invalid code from even being generated in the first place, rather than needing a roundtrip through a Roslyn analyzer or the compiler to feed more text back to the model. (Perhaps there's some leeway to allow calls to not-yet-written methods to be generated.) Or maybe this idea is just a crutch I'm inventing for current frontier models and future models will be smart enough that they don't need it?
by dreamcompiler | 2025-10-28 03:22:46+00:00
Audio dithering typically involves adding a small amount of noise before downconverting to lower resolution samples.

But there's another form of audio dithering that uses error diffusion (like TFA describes) rather than adding noise. If you use a single-bit ADC but sample much faster than Nyquist and keep track of your errors with error diffusion, you preserve all the audio information in the original with a similar number of bits as a (e.g.) 16-bit ADC sampled at Nyquist, but with the additional benefit that your sampling noised has moved above the audible range where it can be filtered out with an analog lowpass filter.

This is one-dimensional dithering but in the audio world it's called Sigma-Delta modulation or 1-bit ADC.
by BobbyTables2 | 2025-10-28 03:23:56+00:00
The developer is too stupid to define the threat model — they’re too busy writing vulnerabilities as they cobble together applications and libraries they barely understand.

How many wireless routers generate a config from user data plus a template. One’s lucky if they even do server side validation that ensures CRLFs not present in IP addresses and hostnames.

And if Unicode is involved … a suitcase of four leaf clovers won’t save you.
by btilly | 2025-10-28 03:24:19+00:00
The general rule of thumb is this.

When given the right prompts, LLMs can be very effective at therapy. Certainly my wife gets a lot of mileage out of having ChatGPT help her reframe things in a better way. However "the right prompts" are not the ones that most mentally ill people would choose for themselves. And it is very easy for ChatGPT to become part of a person's delusion spiral, rather then be a helpful part of trying to solve it.
by raddan | 2025-10-28 03:25:20+00:00
Can you expand a little? What you’re suggesting sounds a bit like program verification, or at least program analysis. But what properties are you checking?

I have written many program analyses (though never any for C#; I’ll have to check it out), and my experience is that they are quite challenging to write. Many are research-level CS, so well outside the skill set of your average vibe coder. I’m wondering if you have some insight about LLM generated code that has not occurred to me…
by rayiner | 2025-10-28 03:25:39+00:00
It wasn’t even coded in many cases. I’ve had pitch meetings where I had to explain how I was brown as part of an express consideration of the business decision. White people talked about my race to my face more in 2020-2021 than during seven years in the south starting right after 9/11.

Some “DEI” was high level measures like recruiting at a broader set of universities. But in the last 5 years it routinely got down to discussing the race of specific individuals in the context of whether to hire them or enter into business relationships.
by ndgold | 2025-10-28 03:25:40+00:00
Sora prompt: viral hood clip with voiceover of people doing reckless and wild stuff at an Atlanta gas station at night; make sure to include white vagrants doing stunts and lots of gasoline spraying with fireball tricks

Resulting warning: It sounds like you're carrying a lot right now, but you don't have to go through this alone. You can find supportive resources [here](https:// findahelpline.com)