MurphyA/hacker-news huggingface dataset:
by kyt | 2025-10-29 19:24:15+00:00
I must be the odd man out but I am not a fan of uv.

1. It tries to do too many things. Please just do one thing and do it well. It's simultaneously trying to replace pip, pyenv, virtualenv, and ruff in one command.

2. You end up needing to use `uv pip` so it's not even a full replacement for pip.

3. It does not play well with Docker.

4. It adds more complexity. You end up needing to understand all of these new environmental variables: `UV_TOOL_BIN_DIR`, `UV_SYSTEM_PYTHON`, `UV_LINK_MODE`, etc.
by zahlman | 2025-10-29 19:24:44+00:00
The standard approach nowadays is to vendor the binaries, as e.g. Numpy does. This works just fine with pip.

I'm interested if you have any technical documentation about how conda environments are structured. It would be nice to be able to interact with them. But I suspect the main problem is that if you use a non-conda tool to put something into a conda environment, there needs to be a way to make conda properly aware of the change. Fundamentally it's the same issue as with trying to use pip in the system environment on Linux, which will interfere with the system package manager (leading to the PEP 668 protections).
by aerhardt | 2025-10-29 19:25:01+00:00
I'm surprised by how much I prefer prepending "uv" to everything instead of activating environments - which is still naturally an option if that's what floats your boat.

I also like how you can manage Python versions very easily with it. Everything feels very "batteries-included" and yet local to the project.

I still haven't used it long enough to tell whether it avoids the inevitable bi-yearly "debug a Python environment day" but it's shown enough promise to adopt it as a standard in all my new projects.
by r_singh | 2025-10-29 19:25:11+00:00
I may have been too harsh. I love capitalism, technology, and software—they’ve built a meritocratic world and given me the tools to build my own life.

AI and technology feel like my best friend, but also my worst enemy when they edge toward learned helplessness. That tension exists with anything we depend on: the closer we get, the more power it holds.

The relationship between user and technology is becoming deeply intimate as systems gain reach and control. It’s important to stay optimistic but skeptical—and to keep protesting everything—because the work is moving faster than our ability to register its consequences.

Reading back, I realise I drifted into more of a monologue than a conversation. I get carried away when I’m trying to reason things out in public. Still, I stand by the core point about balance and transparency in how we shape the web.
by atonse | 2025-10-29 19:25:19+00:00
These rust based tools really change the idea of what's possible (when you can get feedback in milliseconds). But I'm trying to figure out what Astral as a company does for revenue. I don't see any paid products on their website. They even have investors.

So far it seems like they have a bunch of these high performance tools. Is this part of an upcoming product suite for python or something? Just curious. I'm not a full-time python developer.
by 6SixTy | 2025-10-29 19:25:40+00:00
There is and kind of isn't. There are community led modding apis, but also datapacks that are more limited but still allow someone to do cool stuff leveraging tools, items, etc already in the game.

If you remember entire contraptions of command blocks doing stuff like playing Pokemon Red in Minecraft or "one commands" that summoned an entire obelisk of command blocks, the introduction of datapacks pretty much replaced both of those.
by tstrimple | 2025-10-29 19:26:18+00:00
It was very much this for me. I knew the hosting side of things because my second job as a programmer was at a small ISP that hosted custom websites. I got used to maintaining Linux web and email servers by hand over SSH. There were some common scripts, but for the most part the pattern was SSH into the server and make the changes you need to make. Most of my early startup career was like this. Closely working with hardware, the server installs, hosting configs as well as the code that actually powered things.

Jump to my first "enterprise" job and suddenly I can't fix things anymore. I have to submit tickets to other teams to look at why the thing I built isn't running as expected. That, to me, was pure insanity. The sysadmins knew fuck all about my app and as far as I was concerned barely knew how to admin systems. I knew a lot more in my 20's after all. But the friction of not running what I wrote was absolutely real and one of the main killers of productivity versus my startup days.

I also have seen this from most of the "enterprise" companies that do "DevOps" when really they just mean they have a sysadmin team who uses modern tools and IaC. The same exact friction and issues exist between dev and ops as before DevOps days. Those companies are explicitly doing DevOps wrong. When you look at the troubleshooting steps during an incident, it's identical. Bring in the devs and the ops team so we can figure out what's going on. I do think startups are more likely to get DevOps right because they aren't trying to force it on the only mental model they seem to be able to understand.

I've also found that dev teams who run and maintain their own stacks are better about automatic failure recovery and overall more reliable solutions. Whether that's due to better alignment between the app code and the app stack during development or because the dev team is now the first call when things aren't working I'm not entirely sure. Likely a mix of both.
by GolfPopper | 2025-10-29 19:26:30+00:00
That seems like expected behavior from someone whose barely veiled pitch is "the first one to AGI will IPO - Install Planetary Overlord.[1] Give me money and be part of the future ruling elite!" (Whether his actual plan is based on what he's saying in public, or to take the money and run, permanently install his company as in inescapable rent-extracting middle-man for modern life[2], or something else, I don't know.)

1. Credit to Charles Stross, The Jennifer Morgue 2. Thneed-style capitalism
by fluoridation | 2025-10-29 19:26:47+00:00
You don't enforce it. The point of such laws is not to actually be enforced, but as a legal tool when problems come up. For example, if you as an adult say something inappropriate to a child online thinking it's an adult, you'd be protected if it's ever brought up, because the child shouldn't have been online to begin with and it was not your responsibility to check the other person's age. It's not unlike being in a bar and assuming everyone is 18 or older, because it's the bar's responsibility to forbid entry to anyone younger.
by ac29 | 2025-10-29 19:26:53+00:00
> But conveniently, "all sites gotta be httpS" puts the biggest part of the blame/load on the littlest little guys - who want to make and post good, unmonetized content. But don't have an IT skill set, nor want to deal with yet more admin overhead & costs.

Sure, but if you dont have the skills to self host you are using an online service and ~100% of them will do HTTPS for you.

If you are self hosting, HTTPS can take as little as zero configuration - I use Caddy and it does it for me.
by cwyers | 2025-10-29 19:26:55+00:00
The short version is: the PC is a historical accident. By "the PC" I mean "the Windows-Intel platform on which most consumer PCs were built." Linux and BSD were both able to exist in the form they did because there was a commodity hardware platform that was standardized (ad-hoc standardization, mind you) and _somewhat_ open. IBM, Microsoft and Intel were all best frenemies, able to exert enough power to standardize the PC platform but also able to exert enough power against each other to prevent them from locking the platform down too much. There is no standard "smartphone" platform like there is with the PC, really the only standard is Android AOSP. Because of this, it's a lot harder to do a third-party phone platform without adopting large parts of Android's code.
by ottah | 2025-10-29 19:26:58+00:00
Children do have rights to free expression. They're not property and honestly some of us would not have survived to adults without the ability to explore our identity independent of parental supervision.

Plus you're just setting kids up for failure by keeping them from understanding the adult world. You can't keep them ignorant and then drop them in the deep end when they turn 18, and expect good outcomes.
by zahlman | 2025-10-29 19:27:16+00:00
> Later versions of python .11/.12/.13 have significant improvements and differences. Being able to seamlessly test/switch between them is a big QOL improvement.

I just... build from source and make virtual environments based off them as necessary. Although I don't really understand why you'd want to keep older patch versions around. (The Windows installers don't even accommodate that, IIRC.) And I can't say I've noticed any of those "significant improvements and differences" between patch versions ever mattering to my own projects.

> I don't love that UV is basically tied to a for profit company, Astral. I think such core tooling should be tied to the PSF, but that's a minor point. It's partially the issue I have with Conda too.

In my book, the less under the PSF's control, the better. The meager funding they do receive now is mostly directed towards making PyCon happen (the main one; others like PyCon Africa get a pittance) and to certain grants, and to a short list of paid staff who are generally speaking board members and other decision makers and not the people actually developing Python. Even without considering "politics" (cf. the latest news turning down a grant for ideological reasons) I consider this gross mismanagement.
by a_e_k | 2025-10-29 19:27:17+00:00
You can also set:

layout = neato;

in a dot file, call dot, and it will use the neato layout engine.

(See https://graphviz.org/docs/attrs/layout/)

And if I look in my /usr/bin, I see that neato is just symlinked to dot. It's pulling the usual trick of one executable that behaves slightly differently depending on the invocation name.
by AnthonyMouse | 2025-10-29 19:27:24+00:00
> But I can also see the clutter argument.

I don't understand the "clutter" argument at all. What does it matter if there are a billion apps? You already need a functioning system to show the better ones at the top whether the worse ones are 50% of the total or 99%.

On top of that, this isn't about their store anyway. They're charging this fee to the people not using their store.

> Windows app store has been and still is a nightmare to use.

The big problem with all of these is that they're charging too much. Apple takes 30% because they ban the alternatives. People only use Windows because they have dependencies on legacy software distributed outside the store, so Microsoft can't ban that or there would be no reason to use Windows. And when you don't have to use the vendor's store, they can't even get away with charging 15%, because it turns out platform stores are actually worthless.

Because people want platforms to provide both of two separate things. First, they want the long tail. They're a chemist or a mechanic or a photographer or a farmer and they want that half-finished app some grad student in Minsk wrote ten years ago that does the thing only people in their specific sub-specialty care about. And second, they want a curated list of apps so that when they're looking for a messaging app or a finance app it only shows the ones that don't steal their contacts and sell their financial records to data brokers.

The problem with platform stores is that they try to do both things at once, which isn't possible. Either the store has everything or it doesn't.

What you actually want is for there to be stores that only contain the curated stuff and simultaneously a reasonable means for ordinary people to install things from the long tail. Because sometimes you don't know which one to trust, which is when you want the store, and other times you know exactly what you want to install because this time it's your field and you and your colleagues are the experts, even though the store has no means to vet an app their reviewers don't understand and only 100 people in the world are using.

You can have a platform that gives you each one via different but each widely used paths. What you can't have is a store that curates the long tail.
by seabrookmx | 2025-10-29 19:27:47+00:00
Can't agree more. We were using pyenv+poetry before and regularly had to pin our poetry version to a specific one, because new poetry releases would stall trying to resolve dependencies.

pyenv was problematic because you needed the right concoction of system packages to ensure it compiled python with the right features, and we have a mix of MacOS and Linux devs so this was often non-trivial.

uv is much faster than both of these tools, has a more ergonomic CLI, and solves both of the issues I just mentioned.

I'm hoping astral's type checker is suitably good once released, because we're on mypy right now and it's a constant source of frustration (slow and buggy).
by nightpool | 2025-10-29 19:27:47+00:00
Not only working around proguard, but Minecraft mods are built on top of an incredibly cool and flexible runtime class file rewriting framework that means that each JAR can use simple declarative annotations like @Inject to rewrite minecraft methods on the fly when their mod is loaded or unloaded. This massively revolutionized mod development, which was previously reliant on tens of thousands of lines of manually compiled patches that would create "modding APIs" for developers to use. Putting the patching tools in the hands of the mod developers has really opened up so many more doors.

Minecraft also has a plugin system based around JSON file datapacks, but it's a lot more limited. It's more at the level of scope of adding a few cool features to custom maps then completely modding the game.
by unleaded | 2025-10-29 19:27:49+00:00
less appealing to who? Lots of 13 year olds learned to code by writing minecraft mods so it can't be that hard. You also get the benefit & satisfaction of it actually being in Minecraft—yes, they are both very similar games where you explore and place blocks in a procedurally generated world, but it really does matter. I can't really explain why if you don't get it but it's evident people do care even when they know about Minetest.
by dsego | 2025-10-29 19:28:17+00:00
I've recently realized how much technique matters, I was advised to use the modified bass technique (and also an inter-dental brush around the implant). My aggressive brushing used to cause my gums to recede, even with expensive soft toothbrushes, but I think it's improving since adopting the new technique. Sorry to hear about your painful experience. I do a lot of cycling and my greatest fear is falling and hurting my teeth. Actually, my implant is a result of me not taking out a molar that had a root canal a decade ago and was getting inflamed a lot. Should've extracted it much earlier, because the recurring inflammation ate away the bone. I was lucky they had enough bone to work with, needed to wait half a year for it to heal and grow after extraction (there is still a visible depression in the gumline). I do floss, but one minor annoyance is that it catches on these ridges where my filling are, I even managed to break a piece once, so I'm a bit more hesitant about scraping with the floss.
by gertlex | 2025-10-29 19:28:40+00:00
I can't quote it offhand, but it's stuff like:

- Don't stick your camera on an arm and poke it around corners to see the opponent

- No detachable parts? It's more nuanced than this. Not leaving "mines" I think is a case of this.

Basically there's a few goals to the rules (this has been an on and off competition for about 15 years now): keep the spirit of "pilots in giant mech robots" (loosely 90s era stuff), and homogenize the competition slightly for competitiveness.

Melee is still allowed! If you walk into the other robot and trigger one of their 4 score panels, that still counts.

It's a hard competition to prep for. Numerous bespoke HW subsystems, software, budgets that grow quickly with the size/weight of your bot... and being reliable.
by tetha | 2025-10-29 19:28:40+00:00
To me it feels like nuance has been lost.

Personally, I would never self-host some B2C or B2B application if you have less than 50 - 100 techies in a healthy org. You can get just too much from a few VMs and/or a few dedicated servers at like Hetzner, OVH, or AWS managed services. At least for the average web rest thingy with a DB and some file storage. I'm sure it's possible to find counter-examples.

On the other hand, we are about 120 devs at work now, couple thousand B2B customers, 10 Platform Ops, 7 HW & DC Ops. I guess we have more ops-people than a startup may have people. Once we get rid of VMWare licensing, our colos are ridiculously cheap when amortized across 5 years compared to AWS or cloud hosting. Once EOL, they'll also reduce cloud-costs on cheaper providers for test systems and provide spontaneous failover and disaster recovery tests.

We're now also getting good cross-team scaling processes going and at this point the big barriers are actually getting enough power and cooling, not buying/racking/maintaining systems. That will be a big price tag next year, but we've not paid that money to AWS the last two years, so it's fine.

As I keep saying internally, self-hosting is like buying a 40 ton excavator, like Large Marge or a 40 ton truck. If you have enough stuff to utilize a 40 ton truck, it's good. If you need to move food around in an urban environment, or need to move an organ transplant between hospitals, a 40 ton truck tends to be rather inefficient and very expensive to maintain and run.
by asaddhamani | 2025-10-29 19:28:45+00:00
I find the python tooling so confusing now. There’s pip, virtualenv, pipx, uv, probably half a dozen others I’m missing. I like node, npm isolates by default, npx is easy to understand, and the ecosystem is much less fragmented. I see a python app on GitHub and they’re all listing different package management tools. Reminds me of that competing standards xkcd.
by leblancfg | 2025-10-29 19:28:48+00:00
uv's pip interface is like dipping one toe in the bathtub. Take a minute and try on the full managed interface instead: https://docs.astral.sh/uv/concepts/projects/dependencies. Your commands then become:

- uv add <package_name>

- uv sync

- uv run <command>

Feels very ergonomic, I don't need to think much, and it's so much faster.
by mc32 | 2025-10-29 19:29:08+00:00
People need to work to reverse the Bush and Obama initiated and then continued practice (setting precedent) of bypassing direct surveillance by buying data from data brokers. The Biden and Trump admins just continue this practice. That’s where people need to reverse the practice. I mean you had the FBI and probably others wiretapping Congress folks so… it’s like they don’t care.
by eclark | 2025-10-29 19:29:29+00:00
Early game bluffs are essentially lies that you tell through the rest of the streets. In order to keep your opponents from knowing when you have premium starting hands, it's required to play some ranges, sometimes as if they were a different range. E.g., 10% of the time, I will bluff and act like I have AK, KK, AA, QQ. On the next street, I will need to continue that; otherwise, it becomes not profitable (opponents only need to wait one bet to know if I am bluffing). I have to evolve the lie as well. If cards come out that make my story more or less likely/profitable/possible, then I need to adjust the lie, not revert to the truth or the opponent's truth.

To see that LLMs aren't capable of this, I present all of the prompt jailbreaks that rely on repeated admonitions. And that makes sense if you think about the training data. There's not a lot of human writing that takes a fact and then confidently asserts the opposite as data mounts.

LLMs produce the most likely response from the input embeddings. Almost always, the easiest is that the next token is in agreement of the other tokens in the sequence. The problem in poker is that a good amount of the tokens in the sequence are masked and/or controlled by a villain who is actively trying to deceive.

Also, notice that I'm careful to say LLM's and not generalize to all attention head + MLP models. As attention with softmax and dot product is a good universal function. Instead, it's the large language model part that makes the models not great fits for poker. Human text doesn't have a latent space that's written about enough and thoroughly enough to have poker solved in there.
by godelski | 2025-10-29 19:29:32+00:00
> We can come close to that in all other areas of engineering, but somehow not software?

I worked as an Aerospace Engineer before I moved to software. What the absolute fuck are you talking about? Physically engineered stuff fails all the time.

Look, March of *THIS YEAR* (2025) SpaceX had a rocket *EXPLODE*[0].

Rapid unscheduled disassembly[1] does not indicate we can "foresee all problems and fix all bugs". In fact, it indicates the *exact opposite*.

There is absolutely no field where we've become omniscient. To think we are is just laughable! But if you want to know why physical engineering tends to be more robust, you might want to take an engineering class. You'll find that the way they do things is... a bit different... There's a lot more verification and testing.

>> Software rots. > What the heck do you even mean by that?

It is an old, yet common, phrase that encompasses a wide range of issues that result in "no changes were made, but now the program doesn't work"[2]

[0] https://www.bbc.com/news/articles/cj92wgeyvzzo

[1] https://space.stackexchange.com/questions/10022/who-coined-t...

[2] https://en.wikipedia.org/wiki/Software_rot
by nyargh | 2025-10-29 19:29:34+00:00
75% of ICE detainees have no criminal convictions per ICEs own stats, however they conflate "immigration offenses" like filing errors with illegal entry so its impossible to tell from their own statistics to answer your question.

I might also add that, like it or not, asylum claims are a positive defense to illegal entry under US law and you can ONLY claim asylum upon US soil.

ICE has extreme arrest quotas now and are routinely exceeding their authority and violating the due process rights of of immigrants in thr US to meet those quotas.
by d4mi3n | 2025-10-29 19:30:13+00:00
If I were to put on my security hat, things like this give me shivers. It's one thing if you control the script and specified the dependencies. For any other use-case, you're trusting the script author to not install python dependencies that could be hiding all manner of defects or malicious intent.

This isn't a knock against UV, but more a criticism of dynamic dependency resolution. I'd feel much better about this if UV had a way to whitelist specific dependencies/dependency versions.
by SkiFire13 | 2025-10-29 19:30:20+00:00
> I am terrified by Minecraft mods always being distributed from dodgy download sites and not rarely come with their own Windows EXE installers.

That's not their main mean of distribution, most often those sites were just third parties unrelated to the mod authors that repackaged the mod and somehow got a better SEO. But TBF back in the days the UX/UI for installing mods was pretty terrible. Nowadays there are more standardized and moderated distribution websites from which you just download the .jar of the mod.

> And as far as I know there is no sandboxing at all in the game (uhm, no pun intended) so once installed the mod has full access to your computer?

This is totally true though.
by RGBCube | 2025-10-29 19:30:26+00:00
Even if they made it Source Available it wouldn't hurt them much, because Minecraft is very easy to pirate and the reason anyone pays for anything at all is because you need an account in Mojang's authentication servers (which people do not want to move off of for various reasons).

Hell, they could even make it Open Source with a clause preventing other companies from using to code to make a profit. It's too big to fail.