MurphyA/hacker-news huggingface dataset:
by kbolino | 2025-10-09 16:33:13+00:00
I can't find any claim anywhere else about the [0]byte trick, and in fact my own experiments in the playground show that it doesn't do anything.

If you embed an AlignedBuffer in another struct type, with smaller fields in front of it, it doesn't get 64-byte alignment.

If you directly allocate an AlignedBuffer (as a stack var or with new), it seems to end up page-aligned (the allocator probably has size classes) regardless of the presence of the [0]byte field.

https://go.dev/play/p/Ok7fFk3uhDn

Example output (w is a wrapper, w.b is the field in the wrapper, x is an allocated int32 to try to push the heap base forward, b is an allocated AlignedStruct):

&w = 0xc000126000 &w.b = 0xc000126008 &x = 0xc00010e020 &b = 0xc000138000

Take out the [0]byte field and the results look similar.
by zahlman | 2025-10-09 16:33:51+00:00
The overwhelming majority of question closures on Stack Overflow are not done by moderators. And they are done according to clear guidelines that are openly and publicly discussed on the meta site, which have reasons behind them that have been discussed over many years and refined according to the community's consensus about the purpose of the site.

The overwhelming majority of people coming to Stack Overflow are expecting the site to provide something that it explicitly is not trying to provide. The site in fact exists specifically because of frustration with traditional forums where people did get the UX they expect from Stack Overflow (i.e.: individualized volunteer consultation and troubleshooting).

Asking a question on Stack Overflow is not about making your code work — no matter how much users might want their code to work, or want Stack Overflow to function that way. By design.
by permo-w | 2025-10-09 16:34:03+00:00
the problem here is that in an inversion of the usual roles, Google has locked us into reddit's ecosystem by placing it highly in search results, killing off all the dedicated forums, meaning that some answers to some questions are only available there, simply by user quantity. I literally have reddit IP-blocked on my laptop using my hosts file and I still have to copy a reddit link into TOR once or twice a day to get at some useful information
by observationist | 2025-10-09 16:34:26+00:00
The evidence gets deleted. Go talk with any of the mods or former mods for right of center-left discussion forums - any deviation or disagreement with far left narratives is asking for conflict. Anything that risks brigading or attention by one of the larger leftist subs will get nuked because those smaller communities can't expend the hours needed to deal with the flood of hate and harassment they get.

If you find that not credible, you haven't been paying attention - reddit is a leftist cesspit echo chamber, and the only way any dissenting viewpoints survive is through having an absurd level of micromanaging and moderator involvement, like r/conservative, or being so small as to fly under the radar and not attract notice.

Centralizing forums to reddit was one of the worst things to ever happen to the internet, in retrospect. We should have stayed diverse and decentralized, and leaned into federation style community links, and made it easier for people to navigate and surface interesting unique communities, independent of the arbitrary politicization and ideological nonsense that infects reddit.
by vlovich123 | 2025-10-09 16:34:46+00:00
> In either case, if you ask for 21 items, and the allocator decides it prefers to give you a full page of memory that can contain, say, 32 items... then the Vec will use all the capacity returned by the allocator.

It would be nice if this were true but AFAIK the memory allocator interface is busted - Rust inherits the malloc-style from C/C++ which doesn’t permit the allocator to tell the application “you asked for 128 bytes but I gave you an allocation for 256”. The alloc method just returns a naked u8 pointer.
by dizhn | 2025-10-09 16:34:48+00:00
We use it as primarily a file sharing thing. We do not use it for video calls (and I woulnd't recomment it for that purpose).Last time I tried integrating with an office suite server was also a pain in the ass. I do use its calendar and dav addressbook because it works fairly well.

The only security thing we've done is disable a few paths in the web configuration and only allow SSO logins. (Authentik). You can also put it behind Authentik's embedded proxy for more security. I didn't do it because of the use case with generic calendar/addresbook software.

Hetzner is good. Great even, in terms of what you get for the money. They do provide mostly professional service. You will not get one iota of extra service other than what they promise. VERY German in that regard and very unapologetic about it. And don't talk about them in public with your real identity attached. They ban people for arbitrary reasons and have their uber fans (children with a 4 dollar vps) convince other fellow users that if you got banned you must have been a Russian hacker trying to infiltrate the Hague.
by trenchpilgrim | 2025-10-09 16:34:52+00:00
We used to host production websites this way as recently as 10-15 years ago just fine. These days you can do it with as few as two machines and a good router or two. The main risk is power outages due to non-redundant power outside of a colo (solvable with a battery backup) and non-redundant public internet links (potentially solvable with a cellular failover + a lot of caching at the CDN, depending on the application).

You generally still use a CDN and WAF to filter incoming traffic when you self host (even without abusive scrapers you should probably do this for client latency). You can also serve large files from a cloud storage bucket for external users where it makes sense.
by Steltek | 2025-10-09 16:35:31+00:00
What I think is missed in self-hosting is WHAT you're self-hosting. In priority order, you should self-host:

1. Your Data. It is the most irreplaceable digital asset. No one should see their photos, their email, their whatever, go poof because of external forces. Ensure everything on your devices is backed up to a NAS. Set a reminder for quarterly offline backups. Backups are an achievable goal for everyone, not just the tech elite.

2. Your Identity. By which I mean a domain name. Keep the domain pseudonymous. Use a trustworthy, respectable registrar. Maybe give some thought for geopolitics these days. Pay for email hosting and point your domain at them.

3. Lastly, your Apps. This is much harder work and only reasonably achievable by tech savy people.
by zehaeva | 2025-10-09 16:35:33+00:00
I have said much of the same about dune in my own life to others, about how the main thesis is "hard times make strong men, ...", but that still does boil down to might makes right.

Saying that the first book alone doesn't make any assertions about morality is somewhat hilarious. The baron is queer coded, so too is feyd, the "good guys" are strong manly men. Even just the idea that "hard times make strong men, .." is a morality in and of itself.

I never said I was uneasy about the idea of a white savior, you are reading far too much into my beliefs and ideals. I would also appreciate that you do not project onto my any of your imaginings of my own beliefs. You do not know me.

That said, if you have only read the first books you truly are getting only one small facet of the story that Herbert was trying to tell. A lot of what is laid out in the first novel is inverted and overturned by the 3rd and 4th novels.

Finally, you have written a lot about one book out of a long series of books. I would suggest that, like your wont to project some sort of belief onto me, you, too, are projecting too much upon just the first entry of a much, much, larger epic.
by wolfejam | 2025-10-09 16:36:01+00:00
Hey HN!

I'm launching FAF CLI v3.0.0 Championship Edition – a foundational AI context format standard that automatically generates and maintains project context for any AI tool in <50ms.

What it does: Scans any codebase and generates structured .faf files (YAML) that work with Claude Code, Cursor, OpenAI Codex CLI, Gemini CLI, Warp, Windsurf, and any AI that reads project context.

Key features: - TURBO-CAT format discovery: Detects 153+ frameworks/configs automatically - Bi-directional sync: Keeps .faf ↔ CLAUDE/tool.md in perfect sync (8ms average) - DNA tracking: Audit trail for every context change - Zero config: `faf init` and you're done - TypeScript strict mode: 100% type-safe, zero errors

Technical highlights: - C-Mirror engine: Context-mirroring with atomic writes (zero-slippage design) - 1,000+ comprehensive tests (WJTTC GOLD certified) - Sub-50ms operations target (championship performance) 18ms avg. - Works offline, no API keys, no telemetry beyond basic analytics

Why it matters: Right now, every AI tool has its own context format. Claude wants CLAUDE.md, Cursor wants .cursorrules, others want different formats. FAF provides a single source of truth that connects with AI and works everywhere.

Open source: MIT license, free forever. No paid tiers, no vendor lock-in.

Built this after frustration with managing context across multiple AI tools. Tested with Google Gemini, Anthropic Claude, and OpenAI teams. Now approaching 10,000 downloads across ecosystem (CLI + MCP combined).

GitHub: https://github.com/Wolfe-Jam/faf-cli npm: https://www.npmjs.com/package/faf-cli Full announcement: https://www.faf.one/blog/v3-launch

npm install -g faf-cli faf init

Happy to answer questions about the architecture, format discovery engine, or the context-mirroring approach!
by PauzzzeAI | 2025-10-09 16:36:03+00:00
Yeah, totally get that. I’ve tried going on dnd, and it worked pretty well for me, until I had to turn it off. Between Slack for work, big group chats, and random alerts, I'm left with all of the notifications I missed just piled up, and then I don't know where to start. This app is kind of meant as an in-between zone, so a step down from just turning off all notifications. It learns your habits and priorities, then sorts and summarizes everything, so catching up doesn’t feel so chaotic and time-consuming. Maybe I'm solving a problem too specific to me, but well see. As for news, I totally agree with you, information is just so spread throughout right now.
by grimre4p | 2025-10-09 16:36:03+00:00
Finra | Lead Cybersecurity Analyst, CAT | Rockville, MD, US | Onsite | $122,800 - 242,600 USD / year | Full-Time

Tech used: AWS, Support, Security

In this role, I will entrust you with managing and communicating cybersecurity threats, risks, and the status of controls to the Chief Information Security Officer (CISO) and relevant stakeholders. This position offers a hybrid work environment with clearly defined in-person presence requirements. Occasional travel and the possibility of extended hours may be necessary. We offer a competitive salary range based on various factors, including location, skill set, experience level, and education.

More details and option to apply: https://devitjobs.com/jobs/Finra-Lead-Cybersecurity-Analyst-...
by simonw | 2025-10-09 16:36:52+00:00
This looks like a bit of a bombshell:

> It reveals a surprising finding: in our experimental setup with simple backdoors designed to trigger low-stakes behaviors, poisoning attacks require a near-constant number of documents regardless of model and training data size. This finding challenges the existing assumption that larger models require proportionally more poisoned data. Specifically, we demonstrate that by injecting just 250 malicious documents into pretraining data, adversaries can successfully backdoor LLMs ranging from 600M to 13B parameters.
by ryandrake | 2025-10-09 16:36:54+00:00
> how the heck could something so obviously not ready for production ever be shipped?

The widespread bar for software quality these days appears to be: "The lowest quality possible to release, such that the customer does not sue us or reject it." It's absolutely the bottom of the barrel. Everything is rushed and the decision to release is based on the chance of the company being able to keep the money they charged. If the project has the required profit, after factoring in the cost of mass end user rejection due to poor quality, the software gets released.
by redbell | 2025-10-09 16:36:58+00:00
> These types of purchases are common in mobile game revenue models where the base game is ‘free-to- play’, but the player is encouraged to spend money to make unimpeded progress in the game

I miss the old 90's days at the arcade where we were stacked horizontally in a queue waiting for our turn, holding coins in our hands. We've been forced to trade the "pay to play" purity of skill and community for the predatory economics of "pay to win."

This evolution is well-explained in this video (https://www.youtube.com/watch?v=xNjI03CGkb4), entitled "Let’s go whaling: Tricks for monetizing mobile game players with free-to-play." which has been cited in countless YouTube analyses, and for good reason. It perfectly captures the sad reality of modern gaming culture and how deeply monetization has replaced passion.
by mikepurvis | 2025-10-09 16:37:56+00:00
The main thing that gives me anxiety about this is the security surface area associated with "managing" a whole OS— kernel, userland, all of it. Like did I get the firewall configured correctly, am I staying on top of the latest CVEs, etc.

For that reason alone I'd be tempted to do GHA workflow -> build container image and push to private registry -> trivial k8s config that deploys that container with the proper ports exposed.

Run that on someone else's managed k8s setup (or Talos if I'm self hosting) and it's basically exactly as easy as having done it on my own VM but this way I'm only responsible for my application and its interface.
by btilly | 2025-10-09 16:38:09+00:00
Yes, we have a mouse model of Alzheimer's that can be cured by preventing amyloid beta buildups. And billions of dollars in failed drug trials demonstrate that what works for those mice, doesn't work for humans.

This has been demonstrated for many years. And yet we waste literally billions per year researching treatments that will only work in mice. And yet we regularly publish articles proclaiming that we can cure mice, humans are next!

This research is BS and a waste of taxpayer money.
by alterom | 2025-10-09 16:38:18+00:00
>I like (by which I mean I think it indicates a lack of moral character)

This isn't coherent, sorry.

>that you say this despite the articles conclusion being...

Notice that I said that the hypothesis is supported by the data presented in the article, not by the lackluster analysis (or the conclusion, which, nevertheless, does point to SUVs as the only hypothesis they find plausible).

>the data is all over the place, I see no strong trends <sigh> I guess it's the SUVs, ugh, maybe"

This is a bad and misleading summary of the article.

>Like yeah, it probably is the SUVs to an extent but the data only indirectly supports this at best and there's probably confounding factors (in particular road design which has been discussed at length and people all over these commands are bringing up).

You missed the entire point of the article, which is trying to understand why the rate of pedestrian fatalities spiked after 2009 in the US (but not in the EU).

Road design, BY ITSELF, isn't the cause of the spike, since IT DID NOT CHANGE.

The speed limits did go up in many places in the US, something that I brought up in another comment (and something that was glossed over by the article). That may be a factor.

But the primary factor is the elephant in the room - cars getting bigger, heavier, taller, and more hostile to pedestrians.

It's the goddamn obvious conclusion, and all the data out there supports it:

https://www.npr.org/2023/11/14/1212737005/cars-trucks-pedest...
by runarberg | 2025-10-09 16:38:37+00:00
It pains me to say it, but I fear you are right. Israel has terrible track record when it comes to following their own peace agreements. Aside from unilaterally breaking the ceasefire with Hamas last March, they are also serially breaking their ceasefire with Hezbollah in Lebanon, both without consequences.

I really hope we are wrong here and this will be a lasting ceasefire, but If we are not, Europe has really paid all nearly all the political capital they have to spare for Israel complicity. I think Europe will get some political capital back from this ceasefire, but it will not be enough to cover for Israel breaking it the second time. And my hope (in case this ceasefire fails) that Europe will be forced to assert pressure. It would be better if Europe would assert pressure to Israel to keep the current ceasefire, but regrettably, that is highly unlikely.
by whoathisisfunn | 2025-10-09 16:39:14+00:00
Location : Austin

Remote: Yes

Willing to relocate: Yes

Technologies: Python, Ruby on Rails, PHP Laravel, Javascript, React

Full Stack Software Engineer with experience building scalable end-to-end enterprise solutions and data integration platforms serving thousands of enterprises and millions of users.

Resume: https://docs.google.com/document/d/1PIQMTFnHLVjm8U4sgMSHRfMP...

Email: abhishek0sapkota@gmail.com
by heymynameisrob | 2025-10-09 16:39:52+00:00
Problem is with RTO is companies aren't getting the benefit of using AI to manage all their internal knowledge. Bringing people back into the office defeats the purpose of having this central "worker" who can answer queries, point people in the right direction etc. People will just fallback on shouting across the office and scheduling pointless meetings.

Really companies failed to make remote work because it meant giving up a lot of middle-management power and some people realising their job means very little.
Show HN: GYST – A new take on the desktop interface (alpha)
by arnaudbd | 2025-10-09 16:39:53+00:00
Hi HN! I’ve been working on a tool that merges file explorer, whiteboard, bookmarking, note-taking & simple graphic design into one lightweight interface.

The idea is to make all these tools feel like one fluid space instead of 5 separate tools. The hope is to replicate the feeling of a physical desk : where order and freedom coexist.

This 15-min video walks through the current alpha and the vision for the full product : https://youtu.be/AcWzuBBuiPM

I’d love your feedback — especially around the concept and UX. The alpha is online if you want to try it: https://gyst.fr

This is a solo project for now, inspired by the “second brain” / PKM movement and my own frustration with fragmented tools and outdated UX.
by kstrauser | 2025-10-09 16:40:15+00:00
That makes sense, and it's how I'd hope it'd work. I can imagine all sorts of cases where I'm getting data from an external source, like an API request returning some mudball of data monstrosity, where the easiest path doesn't give all the information at once.

Nice. I truly do appreciate the developer ergonomics that went into Rust. Its APIs are pleasantly well thought out.
by lxgr | 2025-10-09 16:40:35+00:00
> QUIC doesn’t use the UDP length header to designate message length, does it?

Does it not? Not sure if it's really mandatory, but I believe one rationale for IPv6 getting rid of both its checksum and length fields was that both TCP and UDP duplicate both fields.

Given that QUIC doesn't have its own length field, I would imagine it relies on that of UDP, at least in situations where the lower layer does not provide reliable framing?

> Imagine if instead of TCP, SCTP had won the protocol wars in 1980-1990s. [...] We could have had the opportunity to experiment with different types of transports, baked encryption in at a lower level, etc.

Would we? Instead of TCP, SCTP would have become ossified in the stack all other things being equal (in particular the need for something like NAT due to IPv6 exhaustion), no?
by zahlman | 2025-10-09 16:40:37+00:00
> The comment you initially responded to clearly stated specific instances that will trigger the phone number requirement

And I'm saying that I've personally been (as far as I can tell) in some of the situations described without encountering such requirement, therefore "will" is hyperbolic.

It especially doesn't make sense to me that there would be a flag for "joining too many servers" because they put a hard cap on that anyway. And indeed, the support article says that this triggers for joining too many servers in a short period of time.
by jjk166 | 2025-10-09 16:40:45+00:00
The cause and effect here are reversed. Ever increasing abstraction does not reduce quality, ever reduced emphasis on quality leads to greater abstraction. You only abstract away the nuances when you stop caring about them. When you have so much memory that you can tolerate a massive memory leak, fixing the memory leak gets deprioritized and the tool that saves time at the expense of abstracting away memory management becomes more attractive.

The real issue though is that the costs of these abstractions are obfuscated after the fact. There is almost certainly low hanging fruit that could massively improve performance and reduce operating costs with little effort, but there is not a will to analyze and quantify these costs. Adding new features is sexy, it's the stuff people want to work on, it's the stuff people get promoted for doing. You don't get promoted for preventing the issue that never happened, even if it saves billions of dollars. You can't brag about making your software imperceptibly faster, even if it saves a tremendous amount of time across the user base.

Software has always only needed to be good enough, and the threshold for good enough has been lowering exponentially with hardware improvements since time immemorial. The system is not set up to favor people who care. If nobody cares, nothing will ever improve.

If there were a good way to track every time a fixed bug would have been triggered had it gone unfixed, and if that cost were quantified and visible, there would be a massive push for better quality.
by alphazard | 2025-10-09 16:40:45+00:00
> Instead of targeting neurons directly, this method focuses on repairing the blood-brain barrier (BBB), the brain’s defence against harmful substances. By restoring proper BBB function, the researchers achieved a reversal of Alzheimer’s pathology in animal models.

Alzheimer's patients often respond positively to exogenous ketone esthers, and a ketogenic diet. The proposed mechanism for this is that ketones are transported across the BBB differently than glucose. Even if glucose is unable to be transported into the brain, ketones often still are. Now that there is a drug to repair the BBB, and likely glucose transport as well, I expect the funding will mysteriously show up to properly investigate the "brain diabetes" theory of Alzheimers.
by nixpulvis | 2025-10-09 16:40:50+00:00
Um... maybe some actions setups are overly complex, but CI/CD is valuable if done well.

For example, running tests before merge ensures you don't forget to. Running lints/formatters ensures you don't need to refactor later and waste time there.

For my website, it pushes main automatically, which means I can just do something else while it's all doing it's thing.

Perhaps you should invest in simplifying your build process instead?
by tptacek | 2025-10-09 16:40:51+00:00
UDP is playing exactly the role it was intended to play. Apart from saving 8 bytes of header and a checksum, what's the advantage to running the protocol directly on top of IP? How is this "ossification"? Again: this was David Reed's original design purpose for UDP! It was exactly for doing shit on top of IP without having to run through TCP's mechanism.
by panzi | 2025-10-09 16:40:57+00:00
Just today I saw a (2 year old) video on that very topic in Rust and C++: https://www.youtube.com/watch?v=algDLvbl1YY Towards the end they mention what to use instead in C++ to get the same characteristics as Rust's Vec::reserve:

vec.insert( vec.cend(), std::move_iterator(newElems.begin()), std::move_iterator(newElems.end()) );