MurphyA/hacker-news huggingface dataset:
by Dylan16807 | 2025-10-09 03:00:30+00:00
> WPA2? Sure it can be broken, but you still would have to break HTTPS on top of that.

If you're on a WPA2 network you just have to observe a device connecting and you can crack their session key. It's very easy. Not that you need to do that, you could ARP spoof. Or the router could be hacked.

And you don't have to break HTTPS to have a good chance of attacking someone. There's enough HTTP around.

So it's easy to fall through both of those layers.
by rgthelen | 2025-10-09 03:00:46+00:00
Funny you bring it up. We shipped Vulkan support TODAY through a tight integration Lemonade (https://lemonade-server.ai).

We now support AMD, Intel, CPU, and Cuda/Nvidia.

Hit me up if you want a walk through - this is in dev right now (you have to pull down the repo to run it), but we'll ship it as a part of our next release.

https://docs.llamafarm.dev/docs/models#lemonade-runtime
by sunshowers | 2025-10-09 03:00:58+00:00
Hi Michael. We overlapped significantly at Facebook and chatted a few times (I was on the source control team from 2012-2018ish, part of which was the migration to Mercurial). Correct me if I'm wrong, but you wrote some posts about how you wanted something like git rebase -i, right?

I know your heart is in the right place, and have a great deal of respect for you. I think being the most active moderator of a coding bootcamp subreddit while also running one is probably not the best use of your time, right? Even though I know you're being honest, just the appearance of a conflict of interest can be an issue. Why not find someone else to take over the reins, someone who isn't actively involved in the industry?
by dddgghhbbfblk | 2025-10-09 03:01:04+00:00
I'm a current online poker pro but probably not for much longer. Bots are a serious and real problem and they do beat the games for a good winrate. But it's still possible to make money even in environments with some bots as long as you can find games with fish. And some games on geofenced sites (the OP said they play in Michigan) or other small pools don't appear to have bot problems.
Show HN: Fuzzypass
by connorpeters | 2025-10-09 03:02:27+00:00
We just launched Fuzzypass, an alternative to a master password that uses cued recall to make remembering an extremely strong secret easier. Unlike a password, you don't need to type your entire Fuzzypass to log in, just 3 lowercase words. While at first it's a little more difficult since it's new and different, once you do it a few times, your brain will "peg" your words to the locks and you should be able to login easily.

We don't think Fuzzypass is necessarily for everyone, but I think it will really appeal to a certain type of person (those who are more visually inclined). Try it out and let me know what you think!

Fuzzypass is available for free as part of Locke ID, our password manager and secure inbox. The linked post has a detailed write up on the security of Fuzzypass, using the concept of perplexity from LLMs converted into entropy.
by kelthuzad | 2025-10-09 03:02:41+00:00
You're absolutely right about BeforeInstallPrompt. It never achieved consensus, Mozilla declined to implement it, and this is exactly how standards should work. But here's the thing, this actually makes the broader argument stronger, not weaker. The issue isn't any one feature rejection, it's the pattern.

Remember the iOS 17.4 thing from February 2024. Apple completely disabled PWAs in the EU, claiming alternative browser engines created insurmountable security problems that would require building "an entirely new integration architecture" that wasn't practical given DMA timelines. Then after two weeks of backlash they reversed it. If the technical barriers were real, how did they solve them in 14 days? That looks less like a technical limitation and more like testing how much they could get away with.

Or push notifications, Safari on macOS got them in 2013. Safari on iOS got them in 2023. Same WebKit engine, same APNs infrastructure, 10 years apart. What's the technical explanation for that gap? And even after iOS finally got push notifications, they only work for PWAs installed to home screen, not in Safari itself. That's a restriction that doesn't exist anywhere else. Android Chrome has had this working in the browser since 2015.

That's the genius of plausible deniability, every individual decision has some technical justification you can point to. BeforeInstallPrompt lacks consensus (true). Safari has limited resources (as has Chrome). Security is hard (definitely true). But the cumulative effect of all these decisions, year after year, is that PWAs on iOS are hobbled compared to native apps in ways that just happen to protect a $20B+ App Store business.

Your fact-check on BeforeInstallPrompt actually demonstrates why the other patterns are harder to explain away. It shows Apple can legitimately decline features through proper standards processes, which makes the decade-long notification delay and the iOS 17.4 reversal look even more suspicious by comparison.
by beeflet | 2025-10-09 03:04:15+00:00
>You're also left with the idea a white savior story that says might makes right

I think the first book is more nuanced than that. It's a demonstration of the nietzschean perspective, but it doesn't make any assertions about morality.

The story shows us how humans are products of their environment: Striving for peace or "morality" is futile, because peace makes men weak, which creates a power vacuum which ends peace. Similarly, being warlike is also futile because even if you succeed, it guarantees that you will become complacent and weak. It's never said outright, but all of the political theory in the book is based on the idea that "hard times make strong men, strong men make good times, good times make weak men, weak men make bad times". It's like the thesis of "Guns Germs and Steel": frank herbert proposes that in the long term, no cultural or racial differences matter; that everything is just a product of environmental factors. In a way it's also the most liberal perspective you can have. But at the same time, it is also very illiberal because in the short term race and culture does matter.

The "moral" of dune is that political leaders don't really have agency because they are bound by their relationships that define power in the first place, which are a product of the environment. Instead, the real power is held by the philosopher-kings outside of the throne because they have the ability to change the environment (like pardot kynes, who is the self-insert for frank herbert). The book asks us to choose individual agency and understanding over the futility of political games.

From the use of propaganda to control the city-dwellers in the beginning of the book to the change in paul's attitudes towards the end of the book I think the transactional nature of the atredies's goodwill is pretty plainly spelt out for us. I mean we learn by the end that paul is part harkonnen by blood, and in the same way as the harkonenn use of the "brutal" rabban and "angelic" feyd, it's all public relations. Morality is a tool of control.

I think the reason you are uneasy about the idea of the "white savior" playing a role in the book is because you actually subscribe to this fake morality yourself, in real life. You are trying to pidgeonhole the story like it's "Star Wars" or something. Dune is against the idea of "morality" itself. By bringing up the "white savior" concept, you are clearly thinking in terms of morality. By having some morality, this puts you at odds with the real point of the book, which is where the unease comes from. You want the dissonance to be resolved, but the real story of dune is open-ended.
by kmeisthax | 2025-10-09 03:04:17+00:00
Threads.

It's less a difference in instruction set capability and more a difference in mentality.

Like, for SIMD, you have to say "ok, we're working in vector land now" and start doing vector loads into vector registers to do vector ops on them. Otherwise, the standard variables your program uses are scalars and you get less parallelism. On a GPU this is flipped: the regular registers are vector, and the scalar ones (if you have any) are the weird ones. And because of this the code you write is (more or less) scalar code where everything so happens to magically get done sixteen times at once.

As you can imagine, this isn't foolproof and there's a lot of other things that have to change on GPU programming in order to be viable. Like, conditional branching has to be scalar, since the instruction pointer register is still scalar. But you can have vectors of condition flags (aka "predicates"), and make all the operations take a predicate register to tell which specific lanes should and shouldn't execute. Any scalar conditional can be compiled into predicates, so long as you're OK with having to chew through all instructions on both branches[0].

[0] A sufficiently smart shader compiler could check if the predicate is all-false or all-true and do a scalar jump over the instructions that won't execute. Whether or not that's a good idea is another question.
by ryandrake | 2025-10-09 03:04:26+00:00
The value proposition for restaurants is almost completely gone for me, by now. Why would I travel out of my house, sit down some place full of people, pay 3X-5X what I would for an equivalent meal from the grocery store, for commoditized Sysco Slop that every other restaurant serves, and then pay an additional 20% because the restaurant won't pay its workers properly? And getting it delivered with DoorDash? Even more of a waste of money, even more extortionate tipping, and on top of it you have to worry about it arriving cold or the driver eating it. There's almost no upside to eating in a sit-down restaurant anymore.
by SilverElfin | 2025-10-09 03:05:11+00:00
> A bad actor mod of a popular subreddit can persist for years, visibly, without people managing either to oust the mod, or to take down the sub's influence.

This happens because the regular users have no power. I remember seeing some article that said a small number of mods control most of the popular subreddits. Many of them put their own bias into the system by banning users, banning sources, deleting content based on ideology, shadow banning, etc.

The other issue is as these mods linger for a while, they drive away or ban everyone who might disagree with them. So then the “community” ends up not actually disagreeing with the authoritarian mod. Reddit ends up not being resilient because it doesn’t want to be. Everyone else, is gone.
Show HN: Kooder – AI Software Engineer for Full-Stack Development
by ahmedatef61 | 2025-10-09 03:05:21+00:00
I built Kooder, an AI software engineer that generates fully functional full-stack applications from natural language prompts. The goal is to streamline the development process for both engineers and non-technical founders. Key features: Natural language app generation (describe your idea, get working code) Support for major frameworks (React, Next.js, Node, Python, and more) Backend API scaffolding and database setup Smart code suggestions and refactoring Continuous deployment integrations Kooder is already helping solo founders, indie hackers, and internal engineering teams build faster. I’d love feedback from the HN community—feature requests, critiques, and questions are all welcome! Try it free at kooder.dev and share your thoughts below!
by rgthelen | 2025-10-09 03:05:22+00:00
Appreciate that — and totally agree. The “who cares / who pays” question is exactly why this hasn’t scaled before.

Our bet is that the timing’s finally right: local inference, smaller and more powerful open models (Qwen, Granite, Deepseek), and enterprise appetite for control have all converged. We’re working with large enterprises (especially in regulated industries) where innovation teams need to build and run AI systems internally, across mixed or disconnected environments.

That’s the wedge — not another SaaS, but a reproducible, ownable AI layer that can actually move between cloud, edge, and air-gapped. Just reach out, no intro needed - robert @ llamafarm.dev
by CharlesW | 2025-10-09 03:05:39+00:00
> Remove all the non-standard stuff.

I can create a filter for that, thanks for the feedback! Importantly, experimental and non-standard features are not counted in the primary score.

Experimental capabilities have a little 'flask' icon next to them, and non-standard items have a little 'warning' icon next to them, mirroring MDN conventions.
by throwaway8902 | 2025-10-09 03:06:38+00:00
Many folks end up in r/zen after reading books like “Zen Mind, Beginners Mind” written by Japanese Zen Buddhists.

Ewk is obsessed with the Chinese source material, written by Chan (Chinese for Zen) masters, and believes that the Chinese Chan masters were not Buddhist at all.

Many people who come to the subreddit are interested in meditation. It is a big focus of Japanese Zen as practiced in the west. It is not particularly emphasised in Chan… at least not in the records we have. Some of the most amusing bits on r/zen are watching Ewk lay into some poor suffering sap looking to get some semblance of peace in their life by starting a meditation practice. According to Ewk, meditation is “not zen”.

It’s hard to explain exactly how crazy things are. He’s not wrong about everything. Chan really doesn’t emphasise having a meditation practice. But he also, despite being interested in this for over 20 years and posting nearly full time - literally for 16 hours a day every day for two decades - has never taken a single Chinese lesson. And he has major, major disagreements with the translators of these ancient Chinese texts (because they are Buddhists). So he uses Google translate to prove the translators wrong.

But the old Chan texts are full of violence and masters bashing one another on the head, as Ewk is quick to point out. Maybe he’s onto something. It really is pretty entertaining.
by b_e_n_t_o_n | 2025-10-09 03:06:43+00:00
Hmmm, it's kind of complicated. A lot of the innovation in JS frameworks has been at the meta framework level, because the client-side framework itself can't really control how data is loaded or how the app is bundled. A lot of work has been done to begin data fetching as quickly and in parallel as possible, like you said because network latency is a big factor for performance. And there is a focus on bringing down bundle sizes. I think Svelte 5 is only a few kb, same with Solid.js. The meta frameworks bring some added weight because they contain the routing and data loading logic.

But especially on mobile, rendering throughput as you put it is still relevant. Especially in response to interactions which cause significant changes to the UI. The "issue" with React is that it's all done at runtime, which does bring significant benefits but loses out on opportunities to optimise things which is what stuff like Solid, Svelte, and Vue's in-development Vapor mode take advantage of via static analysis. The benefit is performance, but you lose out on the dynamic nature of React. That is a tradeoff you need to choose when picking a framework.

Solid and Svelte are so close to vanilla JS levels of performance that you start thinking about how to optimise as if you were directly manipulating the DOM itself. Which is cool, in comparison with React you end up trying to optimise for React instead of the DOM. You still need virtualisation in a lot of cases regardless if you use React or Svelte.

I think the bigger attraction with Svelte and Solid, as well as Vue et al. is the signals / reactivity aspect. You can still tie yourself up in issues with that but it's a better mental model for a lot of developers compared to the pseudo-pure functional approach React takes. React's model can be a pain when you do need to escape-hatch to the dom itself, like you often do with complex animations, or interactions like drag-and-drop. If you can stick to pure React it can often be pretty clean.

React's compiler is designed to minimise redundant rerenders and object instantiation. It seems to help if you look at benchmarks. Still not nearly as quick as the static analysis approach because it doesn't change the underlying semantics (it's just doing stuff you would otherwise do manually for the most part).

So I would say it's still an issue, but so is latency and bundle sizes and that's also seen a lot of innovation and improvements.
by jonahx | 2025-10-09 03:06:58+00:00
I've played for years, in locations all across the US, and know many other people who've played much more. This is basically not a thing. I encountered it once, decades ago, at Hawaiian Gardens in SoCal. If it's happening regularly it's very obvious, and the floor will quickly become aware of it. As far as making a living, it's easier to learn how to beat live low stakes than to successfully collude, and the latter would be unlikely to help much if you weren't already beating the games.
by kevinday | 2025-10-09 03:07:03+00:00
I just saw a YouTube video on a similar topic, with the host noticing that jalapeno poppers seemed to be the same no matter what restaurant he went to, and then it dives into the struggles of NOT using Sysco as your distributor if you want to have local goods. https://www.youtube.com/watch?v=rXXQTzQXRFc
by Forgeties79 | 2025-10-09 03:07:24+00:00
I told the 2 servers I hang in about a month ago that if I randomly disappear it’s because I can’t login without an ID and I’m simply not doing it/that they should consider the post my preemptive “goodbye.” I included where to contact me for those who want to. Frankly I think anyone on discord should do the same
by pimlottc | 2025-10-09 03:08:51+00:00
> There’s even been consolidation among owners of chains. A large number of food options in and around American malls trace back to one private equity firm named for the main character in Ayn Rand’s novel The Fountainhead.

I don’t know why the author avoids naming the firm here, but it’s Roark Capital Group.

https://en.wikipedia.org/wiki/Roark_Capital_Group
by rgthelen | 2025-10-09 03:09:24+00:00
Yeah, totally fair. The “horizontal orchestration” story only goes so far — at some point you need vertical depth.

We’re starting with regulated enterprises (defense, healthcare, legal, fintech) where control and compliance actually matter. The same YAML-defined system can run in AWS, in a hospital, or fully air-gapped — no lock-in, no data leaving.

We’re building a few sample recipes to show it in action:

Legal: doc analysis + precedent search with local vector DBs

Healthcare: privacy-preserving RAG over clinical notes

Industrial/Defense: offline sensor or alert agents that sync later

Partnering with MSPs and modernization firms seems like the obvious path — they already have the relationships and budgets, and LlamaFarm gives them something repeatable to deploy.

Still figuring that out though — what’s the best way to actually get into the MSP funnel?
by nvlled | 2025-10-09 03:10:00+00:00
Playing with this outlandish thought further, the idea that earth is an enclosure for research or preservation explains why the solar system is configured the way it is and why tiny adjustments could render it an inhabitable wasteland.

As time goes on, the glass walls tend to age and occasionally the "cracks" allows external lifeforms (aliens) to slip past the protection layer, much like how insects or parasites would occasionally slip past any opening.

With this in mind, there would be two types of aliens/visitors to our enclosure: (1) lifeforms that are similar to humans in terms of size and biological complexity but more technologically advanced and (2) our protectors who are incomprehensibly larger and more complex than any life on earth. This isn't as outlandish as it seems to be considering there are stars that are million times larger than our own sun.

This sheer difference in scale might as well make the protectors exist in a different dimension. This explains why people would say that aliens were here all this time, but from another dimension. Technically they are here, but more accurately to say the protectors surround us.

Occasionally protectors would step in to prevent mankind from destroying their own enclosure, much like a terrarium owner would reach into the enclosure to remove unwanted organisms. Frequent unidentified sightings on nuclear sites is the protectors' way of peeking and reaching a "hand".

It remains to be seen if humanity would one day evolve to outgrow the enclosure.
by aboardRat4 | 2025-10-09 03:10:16+00:00
>Like, I read articles about cooking and math. Why would I want AI-powered security insights? Why would anyone want them, for that matter?

It's government's social program.

Most people are so ignorant about digital security that governments force media providers (social media, newspapers, bloggers) to make native content about how to not tell your bank password to a random person on the internet.
by skort | 2025-10-09 03:10:35+00:00
How is an article that discusses the shortcomings of a mega corp vacuuming up competition, resulting in the majority of restaurant food being the same bland low quality stuff a union hit piece?

Maybe Sysco sucks and it's easy for the union to point out the same things about it? It seems pretty cut and dry that consolidation in many industries results in mediocre at best outcomes.
by zenmac | 2025-10-09 03:12:30+00:00
>People are looking for a satisfying non-leaky abstraction to build upon and they don't find it with web technologies. They get close, but those last few pieces never quite fit, and we lack the power to reshape the pieces, so we tear out all the pieces and try again. Maybe this next time we'll find a better way to fit them together.

Also keep in mind the web standard puzzle is also changing all the time to try make the puzzle to fit better while developers are designing abstractions to catch up.

That how you get XMLHttpRequest -> ajax -> axio -> fetch and history.replaceState situation.

In general SPA has pushed web towards not so archiving friendly place. And PWA != SPA
by mcswell | 2025-10-09 03:13:03+00:00
Until that day, there unfortunately ARE niche applications. Fieldworks Language Explorer (aka FLEx) is software developed by SIL Inc for doing linguistic fieldwork (dictionaries, text, grammars, parsing...) in minority languages. There's nothing like it. There was a Linux version, but they ran out of funding; I've used it, but reportedly there are major bugs.

FLEx won't run under Wine, but I'll be trying this WinBoat to see if it works.

(You may have heard of SIL's fonts, which they also make freely available. The fonts work for a huge variety of scripts, including the Nasta'liq Arabic style that other fonts don't touch, and Burmese, which from a writing standpoint is truly crazy.)
by FireBeyond | 2025-10-09 03:13:04+00:00
You're absolutely fine! Definitely a lot other things can also have those influences on temperature, HR. Our EMS system started teaching SIRS (and then qSOFA) to EMS providers to have them tell the charge nurse that the patient "meets Sepsis criteria", because this was being missed in triage and septic patients were spending hours on hours waiting for care.

Paramedics don't get very much in-hospital time here, other than getting intubation experience in the OR with an anesthesiologist.

I appreciate your input, it does not come across at all pretentious - and as a paramedic, I would never want to "not learn more medicine".
by rgthelen | 2025-10-09 03:14:07+00:00
We are adding continuous model fine-tuning soon, and being able to bring extra horsepower into training is an opportunity. There is also a genuine opportunity to do the same thing with shared resources inside an internal server or VPC; timing and utilizing resources, such as GPUs, during off-hours to train, improve, etc., is a never-recovered opportunity that many enterprises leave on the table.

Any GPU that is not being used at 80% capacity needs to be put to work; we have a lot of work that can be done. (A lot of industries cannot lease their GPUs to the public due to regulatory issues).