MurphyA/hacker-news huggingface dataset:
by alexzenla | 2025-10-26 08:28:16+00:00
Hi! I’m the CTO of Edera and discovered this bug with my colleague Steven!

The story of this bug is interesting. We were both up late at night working on GPU support on the Edera platform, and we had just pulled an NVIDIA container image. What should have resulted in a temporary directory of tar files for OCI layers was filled with NVIDIA library files! We were both super confused until I had an “oh god no” moment and realized this happened.

We kicked right into action on responsible disclosure.

I can answer any questions, but I want to send a huge thank you to our team for working together on this and to Astral for being wonderful to work with!
by watwut | 2025-10-26 08:29:50+00:00
No one will read that discussion, ever. And it is such an epic waste of time to write down all these nitpicky discussions.

And a call where we react to each other takes 3 minutes max while the exchange through comments can take a week. Or, 2 days but both of you need to interrupt what you are doing a lot to answer quickly.

It is just absurd to treat code review as a discussion forum.
by brabel | 2025-10-26 08:29:57+00:00
So many things wrong with this sort of “CTO must not do what they enjoy but what is the list of responsibilities “ robotic thinking. So you think coding is not high leverage on a tech company. Do you even remember why your company exists anymore? Surely not to give people a living and let them be happy at work, according to you. Absolutely no, the only purpose of a company is to deliver value, but I bet you can’t even define value other than a hand wavy impact on ROI or whatever makes this quarter’s numbers look good.

In any company, only a small number of developers can ship a difficult feature within a reasonable time frame, and that will almost always include the CTO if they were a founder and probably wrote half of the code. Only many years of experience working on a particular code base will give you that so no matter what you do, it may be years for someone else to get to the same level and that may never happen because the product just grew so large no one can do that anymore. If a CTO is still in the position to ship a large feature in a day , you are having an extremely hard time arguing they still should not do that. What could be more valuable use of a day in their schedule? Meeting with the CEO to discuss KPIs?? Fuck that.

This hits close to home as you might have realized. But yes I am all for letting the c-level go back to the trenches once in a while to feel what the salaried guys are facing. They can’t fix things just based on third party accounts anyway.
by thinkingemote | 2025-10-26 08:30:55+00:00
Another glaring giveaway is the over use of numbered lists and bullet point lists.

Personally it makes me less likely to read it but the content might be useful. I have some general tech interest but am not overwhelmingly interested in the subject. Sometimes good things crop up on HN too.

Now, if an author was writing for an audience with the intention to attract the interest of people who were not enthusiasts to become enthusiasts of their product they would create something readable and attractive. The LLM hasn't here.

Together, this leads me to think that the readme is not for me but is just for dedicated enthusiasts.
by hypeatei | 2025-10-26 08:31:23+00:00
> Most stories are BS.

Maybe in your bubble that's true.

> There is no requirement to presume/assume "good faith".

You're not answering anything with substance. Yes, it's a convienent strategy to assume everything is fake news when it doesn't fit your narrative. But that's not reality and it's pretty obvious that you're deflecting.

> Do you accept part or all of the entire post as factual?

Yes, he's an independent journalist that's reported on some big stories this year already. Given the actions against civil rights we've seen already from this administration, sending FBI agents to ask questions is certainly tame by comparison and very plausible.
by eesmith | 2025-10-26 08:33:18+00:00
So you think it's appropriate for the chief of police to abuse his power to secretly break the law and regulations because he wants to live in another state during the weekends and have the government pay for his lodging?

And you think the chief of police never unexpectedly needs to be on-site during the weekend, nor needs to inform the Board of Supervisors of his regular weekly absences? (For that matter, does his compensation already include a cost of living adjustment with the expectation he would live in the county?)

I suppose you also think it's appropriate for a bomb squad member to live out-of-state for a job which requires they be able to respond to a bomb threat within one hour?

It really comes across like you have an axe to grind about the Bay Area and being forced to live there, causing you to be an apologist for police officers who break the law and their job obligations.
by jillesvangurp | 2025-10-26 08:34:17+00:00
Sodium ion production is only recently starting to ramp up. It will take a few years for that to put a dent into LFP marketshare (both for grid storage and EVs). China is a bit ahead of course. CATL just announced they are starting mass production of their second generation battery in December. It will take a while for that factory to get to full speed production. And if they are building more factories, that will also take a while. Think 10s of ghw production short term.

The US only recently got volume production of LFP working. A lot of the battery production there is still older chemistries based on NMC. Companies like Peak Energy are indeed experimenting with sodium ion and are looking pretty good right now. But they don't have any mass production facilities yet. That's years away at best.

I expect there may be some licensing deals with Chinese manufacturers down the line to address this. Sodium ion might become a lot more dominant from 2030 onward. Until then, LFP should remain dominant.

And with LFP being quite decent already, there's no need to wait until the 2030s with large scale grid storage deployments. This stuff works right now. That's why adoption is so high and rapid around the world.
by lrvick | 2025-10-26 08:34:36+00:00
A JR using an (open source, open weight, and locally hosted) LLM to learn a new well established well understood industry skill, I could tolerate if I can see they are clearly improving in ways I can easily validate when pairing and interacting with them when the LLMs are not available.

That said, for me personally, almost all of the work I do is on things that have never been done before in security engineering and supply chain security and the entire body of relevant public research an LLM could have trained on is like 10 people, most of whom I am in frequent touch with and very familiar with their work.

LLMs in general are very very bad at threat modeling or security engineering because there is so little training data on the -right- way to do things. They can often produce code that -works- but most would be unable to spot when it is wildly insecure.

There are many many cases where the overwhelming majority of the way things are done in open source training data are completely wrong, and are what an LLM will respond with on average.

Honestly the only way I could maybe see using an LLM in teaching the type of security engineering and auditing work I do is having LLMs generate code examples, and train humans to spot the security flaws the LLM confidently overlooked because it cannot reason or threat model.
by forgotoldacc | 2025-10-26 08:35:16+00:00
Yeah, stuff like this is great for people who want to be outside and get some exercise, but aren't doing it for the purpose of competing with anyone.

I personally love hiking. I love going into nature, seeing new places, and being away from people. But there are times where I go for a slightly easier course instead of the one I actually want to do, because that few extra hours would absolutely wreck my body, especially since I'm often hiking in different places for several days. A little boost would be nice.

And with e-bikes, they're great for commuters and people just riding around their neighborhood. Lots of people ride them in my town for doing shopping trips. More affordable than a car, better for the environment, better for your health, and people who otherwise would take a car because they can't deal with pedaling uphill or long distances have a great alternative. I imagine powered shoes will be the same. People who feel like they're too old/out of shape to walk long distances often opt for cars, but if powered shoes give them the confidence to walk, it's far better to take an electronically assisted walk than to sit in a vehicle.
Show BF: Codeblocks A flexible, privacy-first AI chat client for your desktop
by hemantv | 2025-10-26 08:35:44+00:00
Show BF: Codeblocks A flexible, privacy-first AI chat client for your desktop. Codeblocks v0.0.1 - TL;DR A flexible, privacy-first AI chat client for your desktop. Key highlights: Connect to anything - OpenAI, Anthropic, Google, xAI, OpenRouter, or local models (Ollama, LM Studio) Smart context - Long conversations that don't break, with auto-summarization and intelligent token management Total privacy - Everything stored locally on your machine as JSON files Powerful workflows - Fork conversations, regenerate responses, compare models, rich markdown editor Full customization - Per-chat model settings, system prompts, tags, themes, keyboard shortcuts Built for developers and power users who want control over their AI conversations, especially those experimenting with local LLMs. Current status: Early alpha (macOS focus, some rough edges)

https://drive.google.com/drive/folders/15Hf3N5LxvqT_hYjoc3gCEU4G3ftphSCF?usp=sharing
by godelski | 2025-10-26 08:37:15+00:00
I think you're over interpreting. Publicly available doesn't mean "for the general public"

Here, take METAR as an example. This is broadcast on open airwaves and every pilot can read this. Here's the latest one from KSFO[0]

METAR KSFO 260756Z 29004KT 10SM SCT012 BKN042 16/14 A3007 RMK AO2 SLP183 T01610139 401890133

Is this public? Yes

Is the information intended to be given out to the public in a manner in which the general public can interpret? No. It's encoded lol. But you can hear that on the radio and if you're trained (could go to a public library to train yourself) and yeah it makes sense. It is specifically intended to be concise and communicate only the absolute minimum amount of necessary information.

For another example, look at arXiv. Is it public? Yes. Are the papers published there written for the general public? No. They are written for peers.

So yes, it is "public transparency", but not for transparency to people who aren't train in nuclear physics. (Which is what I previously said)

Don't confuse "public" with "for you"

[0] https://aviationweather.gov/data/metar/?ids=KSFO
by bob1029 | 2025-10-26 08:37:25+00:00
This is how I did it. You generate a salt per logging context and combine with the base into a sha2 hash. The idea is that you ruin the ability to correlate PII across multiple instances in different isolated activities. For example, if John Doe opened a new account and then added a co-owner after the fact, it wouldn't be possible for my team to determine that it was the same person from the perspective of our logs.

This isn't perfect, but there hasn't been a single customer (bank) that pushed back against it yet.

Salting does mostly solve the problem from an information theory standpoint. Correlation analysis is a borderline paranoia thing if you are practicing reasonable hygiene elsewhere.
by detaro | 2025-10-26 08:37:34+00:00
CDU isn't "beholden" to SPD and Greens, they just know that lying about what you are going to do is much cheaper and easier than actually doing it. If CDU truly cared about nuclear power, the time to do something would've been the 16 years they were in power during which the shutdowns were planned and prepared, and undoing that would've been relatively easy, not once it was done or in final stages.
by ben_w | 2025-10-26 08:40:02+00:00
> This seems to be an emotional reaction by the observer, not a quantified study, so citation needed.

A citation would be good, yes.

I've not seen overall import/export stats this year.

But stats from a few years back, say that the number 1 and 2 imports and exports are food and oil? EVs significantly reduce demand for oil, but it's not got much to do with Trump. I saw the same stories as everyone else abouy soy bean exports to China going to zero, but that's just one export to just one country, not an overall trade update.

> The US market is so big and relatively unified in language and regulations and that make you willing to bite a lot of bullets. Have you ever listed an app on the App Store and dealt with French BS, for example, for a relatively tiny market?

Solving this is the primary purpose of the EU: unified single market.

China also big, unified.
by mort96 | 2025-10-26 08:40:54+00:00
> That initial complaint is talking about Rust being ready to "make breaking changes on a whim." But this is factually not true.

I read the original message as talking about the Rust community broadly, not just the language. You're right that the language itself is pretty stable and doesn't make breaking changes. Regardless, right now, we're clearly talking about the community and libraries, whether that was the original topic or not.

> A 1.x version number doesn't communicate that either. Because nothing is stopping someone from releasing 2.x the next day. And so on.

If a library has been on version 3.x for the past few years, I have some indication that there's some commitment to API stability. If the library recently released version 157.0 and released version 156.0 last week, I have some indication that the library probably doesn't care that much about API stability.

If a library is on version 0.x, it's communicating to me that it's still in an early development phase where they don't care about API stability. It's more like the library where version 157.0 just released than the library which has been on version 3.x for the past few years.
by panstromek | 2025-10-26 08:43:07+00:00
Yea, this is pretty annoying and not the only problem in this field. There's a bunch of theather or misunderstanding in the marketing space. I feel like marketing people just don't get it. They seem to be hopelessly incapable to accepting that matching people in whatever way possible is the exact practice the laws like GDPR are trying to target. You cannot go around it by hashing, fingerprinting, ad ids, cookieless matching or whatever.
by lordkrandel | 2025-10-26 08:43:43+00:00
Are we really talking about ingame items as serious investment as being something to be protected, to make billionarie's sons also feel rich in games, too? Giving the m more places to feel better than the average person? Whoever spends 1000$ on an ingame item should really consider charity as a way to feel better. I don't care about "entepreneurs" who think that licenses on ingame items is a legit thing. I hope they suffer the losses and at least have the decency to just shut up.
by pjmlp | 2025-10-26 08:44:35+00:00
If Java had not been a think, Smalltalk would be doing just fine.

It was the already quite established in big corporations, all IBM IDEs in the Visual Age series were written in Smalltalk, it was the language used alongside C++ on the famous GoF book.

When Java came to be, IBM dropped all their Smalltalk investment and pivoted 100% into Java, Eclipse was the rewrite of Visual Age into Java.

And the fact that companies like Cincom are still in business shows the extent Smalltalk was being used in the 1990's.
by codedokode | 2025-10-26 08:44:53+00:00
> Glibc broke certain games / Steam by removing some parts of their ELF implementation: https://sourceware.org/bugzilla/show_bug.cgi?id=32653 . They backed due to huge backlash from the community.

It would be better if you specified which part was removed: support for executable code on stack. This is used in 99% cases by malware so it is better to break 1% of broken programs and have other 99% run safer.
Ask HN: How Do You Automate Dip Buying During Crypto Flash Crashes
by denis4inet | 2025-10-26 08:45:29+00:00
I hold stablecoins across DeFi protocols (e.g., Morpho, Pendle, Jupiter, Storm, Hyperliquid HLP, Avantis vAAM, Save on Solana) and want to buy dips (e.g., ASTER, PUMP, JUP, HYPE, SOL, ETH, TON) during flash crashes like the one on Oct 10, 2025. The ideal solution would auto-withdraw liquidity from LPs, set limit buy orders based on current prices, and manage funds securely with my target investment amounts. Existing bots (Bitsgap, Coinrule, 3Commas) handle parts of this but lack full DeFi LP integration. Are there tools or scripts you use to automate this? Do you run custom bots on a VPS, or is there a service I’ve missed? How do you handle gas fees, oracle delays, and security risks during chaos? Curious to hear your setups!
by hypeatei | 2025-10-26 08:46:18+00:00
> Throwing around words like ‘police state’ and ‘regime’

When agents are coming to your house after a protest (how did they even find your identity?) to ask questions then I'd say it's fair to call it that. Remember, we've lived under a surveillance state since Bush and 9/11; a police state is a logical step once an authoritarian comes into power.

> No one is being questioned for speech alone, only when it relates to a possible crime

And the "possible crime" is what here? If he was being interrogated for a possible crime, he wouldn't be free to leave and they would need to read him his rights.
by pjmlp | 2025-10-26 08:47:14+00:00
Java is closer to Objective-C semantics, and by extension Smalltalk.

The C++ syntax was more of a way to help adoption, however the way the runtime works, and the language feature, are from those other influences.

https://cs.gmu.edu/~sean/stuff/java-objc.html

Even basic stuff like META-INF and jars, those are basically NeXTSTEP bundles.
by blackoil | 2025-10-26 08:51:23+00:00
Unless all batteries are installed at once and will fail after a fixed duration it won't be a big issue. After 10-20 year 2-5% batteries will fail and will have to be replaced, along with any new capacity addition. We can emphasise on diversifying the supply chain or having multiple technologies so that a Covid like scenario doesn't completely conks the system, but it isn't much different from any other system we use. And in case of battery, we actually get a real-time info about its health and so can easily calculate capacity of the system. Batteries go from 90% to 0% in extremely rare case.
by panstromek | 2025-10-26 08:51:34+00:00
I also think that many vendors in this space are abusing the fact that marketers are not technical people, so they just wave around some "we're GDPR ready", "anonymized data" slogans such that marketers feel that they can tick the "GDPR" box and get all the metrics they are used to.

While of course not realising that GDPR implementation is partially on them and that some of those metrics are literally impossible to implement without breaching into GDPR territory. Any company saying that they are "fully GDPR compliant" but also giving you retention and attribution metrics by default is probably confusing you in this way.
by debtta | 2025-10-26 08:51:37+00:00
The background here is that Scots is not really a language. Try asking a Glasgow taxi driver who addresses you in 'Scots' whether he knows any English. Robert Burns wrote in English, with some of his spelling reflecting pronunciation in the Scottish English dialect.

The people who want it to be considered as a language for political reasons cannot be bothered to translate Wikipedia themselves. They read and edit English Wikipedia and understand it perfectly.
by ErroneousBosh | 2025-10-26 08:52:47+00:00
> However, these cores are designed to spin very fast, not at grid speed, so these need some form of gearbox or electronic frequency conversion.

That's true of any gas turbine engine. About the only engines you can use to drive a genny directly are diesels at 1500rpm for 4-pole machines or petrols at 3000rpm for 2-pole machines (or if you're in one of the tiny handful of countries in the world that uses 60Hz, 1800rpm or 3600rpm).

You can of course run these on alternative fuels like waste veg oil for diesels or propane instead of petrol, and the latter used to be quite common on remote farms where you'd have a big propane tank for heating and cooking - may as well run the generator on it too, and not have to worry about exhaust fumes.
by nosianu | 2025-10-26 08:52:50+00:00
Better than exercise is a better normal lifestyle. Trying to compensate in an hour what went wrong most of the day or week, and with your diet, is far from optimal.

One of many, looking at just one detail (sitting): https://www.health.harvard.edu/staying-healthy/sitting-may-i...

From a personal experience, so it's just a guess, a contributor may be fluid movement in the body. Fluid in blood vessels are pumped directly, but must fluid is not in blood vessels. The heart has a diminishing effect outside the vessels (capillaries have small holes to let water and small molecules through into extracellular space, and then to collect it back, rest goes through the lymphatic system which also drains back into the bloodstream). Muscle and body movement helps. From what I experienced and experimented, just walking did a lot more than running. I focus on this specifically due to personal health experiences that I don't want to go into that let me feel a clear difference, where intensive running did hardly anything but then just walking did, an experiment I performed during a period of my life when "getting stuff out from all over my body" mattered.

Personally, I choose to run only when my brain/body tell me to, when I feel like it. Definitely not when I would have to fight myself to get going. (If your body/brain tells you the opposite then it is what it is, personal feel over generic advice)
by dvh | 2025-10-26 08:53:15+00:00
Doesn't it require ENIG? I wanted edge connector for my pcb project but it adds $20 to the price of pcb, that's just too much. Anyone knows card edge alternative? I'm thinking pin header but that's not very user friendly. Edge card can be inserted blindly even if you don't see the connector, pin header would probably just bend irl.
by Mentlo | 2025-10-26 08:55:26+00:00
“This is not philosophy, this text is following in the footsteps of Alan Turing” (paraphrasing) is both incredibly humble (/s) and incredibly dismissive of philosophy as a structured form of generating knowledge.

Putting that to the side - i don’t think I’ll read this fully soon, but the core thesis of “imitation is intelligence” can be easily disproven by a process that exists in society. An actor acting to be a genius is in fact, if they are a good actor, indistinguishable in their appearance to a genius. Yet they are not, in fact, a genius, they’re just good at memorisation. This is a clear showcase that imitation of a level of intelligence does not mean that this level of intelligence is present.

We have fallen into a trap of thinking that answering in plausible sentences is what makes humans intelligent. While in reality we are observing an actor responding from an infinitely large script. What makes humans intelligent (reasoning from first principles and pattern recognition across all the sensory inputs of the world) is still very much out of grasp.
by wartijn_ | 2025-10-26 08:55:41+00:00
You’re either severely overestimating the size of the mines or underestimating the size of Christmas Island. On satellite images[0]you can see where there has been phosphate mining, but it’s also very clear that it hasn’t replaced the habitat of the shrew.

[0] https://maps.app.goo.gl/3e55Y1Q3AvMSuccz6?g_st=ic