MurphyA/hacker-news huggingface dataset:
by julianlam | 2025-11-24 20:34:25+00:00
I sold my Pixel Watch 2, but I wasn't able to get two days' worth. The sacrifices weren't worth it.

Namely, you'd have to turn off the always on screen (I gave this up easily), as well as "flick to wake", which I found harder to give up.

If I were to press a button on my watch to read a notification, I may as well use my phone. YMMV.
by spaceducks | 2025-11-24 20:34:26+00:00
I'm not sure if that will be an issue in practice. in any case, you need a JPEG XL decoder to perform the transition from a recompressed-JPEG-JXL to the original JPEG, so whatever tool is doing this, it can already handle native-JXL too. it could be the conversion happens on the server side and the client always sees JPEG, in which case a native JXL can also be decoded to a JPEG (or if lossless a PNG), though obviously with information loss since JPEG is a subset of JXL (to put it lightly)
by mjg2 | 2025-11-24 20:34:46+00:00
First, the fact we have moved this far with LLMs is incredible.

Second, I think the PhD paper example is a disingenuous example of capability. It's a cherry-picked iteration on a crude analysis of some papers that have done the work already with no peer-review. I can hear "but it developed novel metrics", etc. comments: no, it took patterns from its training data and applied the pattern to the prompt data without peer-review.

I think the fact the author had to prompt it with "make it better" is a failure of these LLMs, not a success, in that it has no actual understanding of what it takes to make a genuinely good paper. It's cargo-cult behavior: rolling a magic 8 ball until we are satisfied with the answer. That's not good practice, it's wishful thinking. This application of LLMs to research papers is causing a massive mess in the academic world because, unsurprisingly, the AI-practitioners have no-risk high-reward for uncorrected behavior:

- https://www.nytimes.com/2025/08/04/science/04hs-science-pape...

- https://www.nytimes.com/2025/11/04/science/letters-to-the-ed...
by perihelions | 2025-11-24 20:34:47+00:00
Some HN threads about the past incidents mentioned in OP,

https://news.ycombinator.com/item?id=17686310 ("Computer Virus Cripples Several Taiwan Semiconductor Plants (bloomberg.com)"—2018, 100 comments)

https://news.ycombinator.com/item?id=19214952 ("TSMC's Photoresist Material Incident: $550M Loss (anandtech.com)"—2019, 15 comments)
by sigmoid10 | 2025-11-24 20:35:02+00:00
The problem is that there may be perfectly legal gag orders (issued by a court) that force them to comply to normal police requests - and you would never even know. NordVPN in particular removed their warrant canary without informing their users and only gave some retroactive PR answer when people rightly started to freak out.

The simple truth is that if a VPN provider hasn't been shut down by authorities after more than a year (like VPNLabs was), then they are basically guaranteed to be giving out your data to authorities at this point. The legal situation in most western countries does not allow complete online privacy for normal, law-abiding citizens.
by hakanderyal | 2025-11-24 20:35:16+00:00
I think we are at the point where you can reliably ignore the hype and not get left behind. Until the next breakthrough at least.

I've been using Claude Code with Sonnet since August, and there haven't been any case where I thought about checking other models to see if they are any better. Things just worked. Yes, requires effort to steer correctly, but all of them do with their own quirks. Then 4.5 came, things got better automatically. Now with Opus, another step forward.

I've just ignored all the people pushing codex for the last weeks.

Don't fall into that trap and you'll be much more productive.
by stronglikedan | 2025-11-24 20:35:27+00:00
And beautifully defended too!

> Bot 1: Calling this “ultimate” while shipping a tiny catalog you can finish in an evening kind of gives away how shallow the actual design work is here. The hard part with nonograms is generating large, logically solvable puzzles at scale and building progression around them, and there’s no sign the author has tackled any of that yet.

> Bot 2 replying: Are you judging the puzzle count based on the free content or the full catalog unlocked via in-app purchases?

Hilarious!
by nostrademons | 2025-11-24 20:35:27+00:00
Why? They just closed a $13B funding round. Entirely possible that they're selling below-cost to gain marketshare; on their current usage the cloud computing costs shouldn't be too bad, while the benefits of showing continued growth on their frontier models is great. Hell, for all we know they may have priced Opus 4.1 above cost to show positive unit economics to investors, and then drop the price of Opus 4.5 to spur growth so their market position looks better at the next round of funding.
by tetha | 2025-11-24 20:35:40+00:00
Oh this was in the days of yore of modded 1.4 and early 1.7. I don't remember specific mods, I just remember the pain and frustration of this happening.

I'm currently playing Stoneblock 4 and have been playing GT:NH and Nomifactory some time ago, and the more modern mods have learned a lot from those old janky things. Heck, back in the day every mod had a different power system and you needed a nonsense amount of conversion infrastructure, unless the modpack did a lot of work to combine all of this somehow, haha.
by samdoesnothing | 2025-11-24 20:35:42+00:00
Free trade and private property rights can exist without a monopoly on political power, but as with stuff like this I don't really know what's meant by "capitalism".

That being said I don't think at the present moment it's possible to have a society without some form of government, so then the question becomes "what do we do about it", and I think the answer is to limit the scope of political intervention and power as much as possible.
by arjie | 2025-11-24 20:36:07+00:00
How does that make a difference? It's not like the price change is on DIMMs. The price change is on the DRAM, which is a commodity item. It's not like someone is going to discount it if you tell them "nah, I'm going to solder this one to my SoC".

If Apple is insulated it is likely because Apple signs big contracts for large supply and manufacturers would prefer to be insulated from short-term demand shocks and have some reliability that their fabs can keep running and producing profitable chips.
by reify | 2025-11-24 20:36:39+00:00
companion? lets be honest, its a chatbot.

When I see an ai with the capacity to look in a mirror and recognise itself. I might be more supportive of this current ai fantasy world we are living in, and maybe, just maybe, admit that ai could have some potential to assimulate human psychological or developmental attributes.

Until then. I will assume that all human behaviour, feelings, emotions attributed to ai is just total bullshit.

Imagine for one moment that you are laying on your bed. You have managed to settle your mind after a tough day at work, so it is empty of all thought.

You are completely aware, of your surroundings and of your feelings, you can hear your heart beating and the blood pulsing through your veins. Your mind is at rest, not thinking, but you are still fully present and alive.

Now imagine that you are an AI. To settle your ai "thinking", someone else has to turn the machine off. which kills the ai dead. It cannot experience its surrounding or its feelings, its blood pulsing through its veins, because it has none. When you turn off its "thinking", (electrical impulses and code), it is simply dead.

AI has nothing human!
by robot-wrangler | 2025-11-24 20:36:51+00:00
I always see the hard/complex criticism but find it confusing.. what is the perceived difficulty with MCP at the implementation level? (I do understand the criticism about exhausting tokens with tool-descriptions and stuff, but that's a different challenge)

Doesn't seem like implementation could be more simple. Just JSON-RPC and API stuff. For example the MCP hello-world with python and FastMCP is practically 1-to-1 with a http/web flavored hello-world in flask
by josephg | 2025-11-24 20:37:36+00:00
> I think my instinct is sympathy for the "Don't write aliases" approach.

Yes, requiring that nothing alias it’s much more conceptually elegant. But as I said, in practice it makes programming extremely treacherous. There are no warnings when you alias. No errors. 99% of the time you’ll get a working program with no bugs every time you build. You’re just - quietly - at the whim of llvm. Maybe it won’t compile correctly on some other architecture. Maybe a minor compiler bump, or different flags, will make your program totally broken. The only way to discover there’s even a potential problem is by running the code through MIRI.

I get why it’s like this but I think it’s a mistake. I think unsafe rust should be at least as expressive and pleasant to work with as C. Having quiet foot guns here seems antithetical to rust’s philosophy of safe ergonomic programming.
by Animats | 2025-11-24 20:37:39+00:00
This was apparently a Linde installation custom built for TSMC in Arizona.[1] Nitrogen, oxygen, and argon are extracted from air on-site and purified. That's Linde's primary business; liquefying and distilling air. This isn't some little local company or a company operating outside their area of expertise.

Those gases are storeable, so it's surprising there wasn't enough tank capacity to deal with outages.

The site plan [2] shows "Gas Plant 1", and future "Gas Plant 2" and "Gas Plant 3". The gas plants are across a small road from the fab and feed the plant directly. Once Gas Plants 2 and 3 were built, there would be redundancy, but at this stage, there isn't a backup. The plan doesn't show a large tank farm, so they can't store gases in bulk.

[1] https://www.aztechcouncil.org/utility-company-makes-progress...

[2] https://semiwiki.com/forum/threads/tsmc-phoenix-arizona-fab-...
by IGHOR | 2025-11-24 20:38:19+00:00
I built Parall, a macOS app that creates real app bundles as shortcuts. Each shortcut launches the original app binary directly and can act like a separate install with its own data and settings.

The new 1.1.1 update adds a tray menu option for any shortcut. When the target app is running, Parall can start a small helper that shows a tray icon in the menu bar for that specific shortcut. From that menu you can show or hide the app, quit it, and open the shortcut data folder or bundle in Finder. For supported browsers the tray menu also has items to open a new window or a new incognito window.
by aw1621107 | 2025-11-24 20:38:44+00:00
I think one can argue make_slice is in fact at fault here since it's unsound (i.e., it doesn't enforce the requirements of from_raw_parts() and so allows safe code to invoke UB) and therefore either should be marked unsafe or should actually enforce the requirements of from_raw_parts().

That being said, I think in this context that's more of a nitpick since you're right in stating that bugs that result in UB need not be scoped strictly to unsafe blocks.
by sync | 2025-11-24 20:38:57+00:00
Does anyone here understand "interleaved scratchpads" mentioned at the very bottom of the footnotes:

> All evals were run with a 64K thinking budget, interleaved scratchpads, 200K context window, default effort (high), and default sampling settings (temperature, top_p).

I understand scratchpads (e.g. [0] Show Your Work: Scratchpads for Intermediate Computation with Language Models) but not sure about the "interleaved" part, a quick Kagi search did not lead to anything relevant other than Claude itself :)

[0] https://arxiv.org/abs/2112.00114
by Chris_Newton | 2025-11-24 20:39:21+00:00
I think I prefer languages that realize things can improve and are willing to say if you want to run 10 year old code, use a 10 year old compiler/runtime.

IMHO, the trouble with that stance is that it leaves no path to incrementally update a long-lived system to benefit from any of those improvements.

Suppose we have an application that runs on 2025’s most popular platform and in ten years we’re porting it to whatever new platform is popular in 2035. Personally, I’d like to know that all the business logic and database queries and UI structure and whatever else we wrote that was working before will still be working on the new platform, to whatever extent that makes sense. I’d like to make only some reasonably necessary set of changes for things that are actually different between the two platforms.

If we can’t do that, our only other option is a big rewrite. That is how you get a Python 2 to Python 3 situation. And that, in turn, is how you get a lot of systems stuck on the older version for years, despite all the advantages any later versions might offer.
by littlestymaar | 2025-11-24 20:39:38+00:00
> I also really want Anthropic to succeed because they are without question the most ethical of the frontier AI labs.

I wouldn't call Dario spending all this time lobbying to ban open weight models “ethical”, personally but at least he's not doing Nazi signs on stage and doesn't have a shady crypto company trying to harvest the world's biometric data, so it may just be the bar that is low.
by wkat4242 | 2025-11-24 20:39:44+00:00
Yeah I hate messing with STLs for that reason. It's an output format. Similar to when you make an image in Photoshop with a load of layers and then export to jpeg where it's flattened and all the layer info is lost.

Obj is a bit better but for real design modification you kinda need the original file and the program it was designed in. At least in my experience.

I've never come across STEP though, is that a real design parameter preserving file format?
by supernetworks_ | 2025-11-24 20:39:47+00:00
yes dragon blood. I’m not speaking of the downgrade but the timing sidechannels — which were called out very loudly and then ignored during standardization. and then the PAKE showed up in wpa3 of all places, that was the key issue and was extended further in a brain pool curve specific attack for the proposed initial mitigation. It’s a good example of error by committee I do not address that article and don’t know why the NSA advised migration that early.

The riddle paper I’ve not read in a long time if ever, though I don’t understand the question. As Scott Aaronson recently blogged it’s difficult to predict human progress with technology and it’s possible we’ll see shors algorithm running publicly sooner than consensus. It could be that in 2035 the NSA’s call 20 years prior looks like it was the right one in that ECC is insecure but that wouldn’t make the replacements secure by default ofc
by cyanydeez | 2025-11-24 20:40:09+00:00
We dont need AI to posit WallE.

Its bixarre anyone things these things are generating novel complexes.

The biggest indirect AI safety problem is the fallback position. Whether with airplanes or cars, fewer people will be able to handle AI disconnects. The risk is believing just because its viable now doesnt mean it works in the future.

So we definitely have safety issues but its not a nerdlike cognitivw interest, its the literal job taking that prevents humans from gaining skills.

Anyway, untill you solve basic reality with AI and actualnsafety systems, the billionaores will sacrifice you for greed.
Zapier just had a supply chain attack
by hoppp | 2025-11-24 20:40:28+00:00
Zapier had a supply chain attack. They sent out some emails containing the compromised dependencies

At 5:50AM UTC on 11/24/2025, Zapier became aware that a subset of our NPM packages had unauthorized modifications made to them in an apparent supply chain compromise. The unauthorized core platform packages were unpublished by 10:30AM UTC. The rest were deprecated by 2:03PM UTC. List of Zapier NPM packages impacted and versions are below:

zapier-platform-cli 18.0.2

zapier-platform-cli 18.0.3

zapier-platform-cli 18.0.4

zapier-platform-core 18.0.2

zapier-platform-core 18.0.3

zapier-platform-core 18.0.4

zapier-platform-legacy-scripting-runner 4.0.2

zapier-platform-legacy-scripting-runner 4.0.3

zapier-platform-legacy-scripting-runner 4.0.4

zapier-platform-schema 18.0.2

zapier-platform-schema 18.0.3

zapier-platform-schema 18.0.4

@zapier/ai-actions 0.1.18

@zapier/ai-actions 0.1.19

@zapier/ai-actions 0.1.20

@zapier/ai-actions-react 0.1.12

@zapier/ai-actions-react 0.1.13

@zapier/ai-actions-react 0.1.14

@zapier/babel-preset-zapier 6.4.1

@zapier/babel-preset-zapier 6.4.2

@zapier/babel-preset-zapier 6.4.3

@zapier/browserslist-config-zapier 1.0.3

@zapier/browserslist-config-zapier 1.0.4

@zapier/browserslist-config-zapier 1.0.5

@zapier/eslint-plugin-zapier 11.0.3

@zapier/eslint-plugin-zapier 11.0.4

@zapier/eslint-plugin-zapier 11.0.5

@zapier/mcp-integration 3.0.1

@zapier/mcp-integration 3.0.2

@zapier/mcp-integration 3.0.3

@zapier/secret-scrubber 1.1.3

@zapier/secret-scrubber 1.1.4

@zapier/secret-scrubber 1.1.5

@zapier/spectral-api-ruleset 1.9.1

@zapier/spectral-api-ruleset 1.9.2

@zapier/spectral-api-ruleset 1.9.3

@zapier/stubtree 0.1.2

@zapier/stubtree 0.1.3

@zapier/stubtree 0.1.4

@zapier/zapier-sdk 0.15.5

@zapier/zapier-sdk 0.15.6

@zapier/zapier-sdk 0.15.7

redux-router-kit 1.2.2

redux-router-kit 1.2.3

redux-router-kit 1.2.4

zapier-async-storage 1.0.1

zapier-async-storage 1.0.2

zapier-async-storage 1.0.3

zapier-scripts 7.8.3

zapier-scripts 7.8.4
by toomuchtodo | 2025-11-24 20:41:36+00:00
Related:

Zapier Security Incident Packages and Zapier Developers - https://news.ycombinator.com/item?id=46038033 - November 2025

Shai-Hulud Returns: Over 300 NPM Packages Infected - https://news.ycombinator.com/item?id=46032539 - November 2025
by tracker1 | 2025-11-24 20:41:50+00:00
EnGenius EWS377AP WiFi 6 4x4... Been pretty good for a few years now... Considering going back to Ubiquiti for Wifi 7 at some point, but this has been good enough for my needs, and my work/personal desktops are all wired 10/2.5gb so no real issues practically.

It doesn't reach as far outside of my home as my older Ubiquiti AP seemed to reach though... I could get almost a block away before my phone would drop when driving. Now it cuts out in the driveway... and less than halfway into the back yard... single AP on middle of second floor ceiling. Had considered additional unit for back yard coverage.
by protimewaster | 2025-11-24 20:42:14+00:00
I was going to say something along these lines.

There was a post on the GrapheneOS forums a while back, from Micay, claiming that a well-known YouTuber who had backtracked on recommending GrapheneOS (because of Micay's behavior, according to the YouTuber) had probably actually backtracked because the YouTuber was financially involved with a competing project. My initial reaction to the post was, "Oh, I guess this is that paranoia I've heard about with Micay." My thought was reenforced when it was further claimed, in that thread, that the YouTuber was active in a forum well known for online bullying of people they don't like. The whole thing definitely sounded paranoid.

In the thread, though, there was in fact linked paperwork where the YouTuber had registered the company in question, and also links to a verified account on the forums in question (using the YouTuber's real name).

So, yeah, just because you're paranoid, doesn't mean they're not out to get you.
by big_toast | 2025-11-24 20:42:15+00:00
Uber founder explaining tipping logic. I haven't seen such a precise formulation around the logic for including tipping in e-delivery/PoS platforms.

I'd be curious if someone more familiar with economic theory thinks the statement about economic surplus is correct. And if there's an antidote (or if the cure is worse than the pain). He agrees with another comment elsewhere about increased decision paralysis.

Other countries don't have the same tipping culture and presumably didn't inherit the biases into their e-delivery/PoS platforms.

Tweet:

"Delivery app tipping isn’t about feedback mechanisms.. it’s a tool for maximizing price paid by consumers… eaters are economically irrational with tip, for every $1 in tip, they economically behave as if it were $0.80 (directionally true but hypothetical figure) … this means less price elasticity for the same price… couriers are also economically irrational with tip, for every $1 in tip they economically behave as if it were $1.20 (directional)

The tip is a hack on human psyche which the apps must implement and maximize or miss out on economic surplus that their competitor will use to defeat them.

The app that decides to pay the same net amount to the courier but as a square deal vs a drop fee + tip will lose market share every day to an equal marketplace player that implements and maximizes tip"
by rfw300 | 2025-11-24 20:42:38+00:00
I am extremely excited to use programmatic tool use. This has, to date, been the most frustrating aspect of MCP-style tools for me: if some analysis requires the LLM to first fetch data and then write code to analyze it, the LLM is forced to manually copy a representation of the data into its interpreter.

Programmatic tool use feels like the way it always should have worked, and where agents seem to be going more broadly: acting within sandboxed VMs with a mix of custom code and programmatic interfaces to external services. This is a clear improvement over the LangChain-style Rupe Goldberg machines that we dealt with last year.
by sevensor | 2025-11-24 20:43:18+00:00
Flash is programmed by increasing the probability that electrons will tunnel onto the floating gate and erased by increasing the probability they will tunnel back off. Those probabilities are never zero. Multiply that by time and the number of cells, and the probability you don’t end up with bit errors gets quite low.

The difference between slc and mlc is just that mlc has four different program voltages instead of two, so reading back the data you have to distinguish between charge levels that are closer together. Same basic cell design. Honestly I can’t quite believe mlc works at all, let alone qlc. I do wonder why there’s no way to operate qlc as if it were mlc, other than the manufacturer not wanting to allow it.
by fsckboy | 2025-11-24 20:43:52+00:00
this is pretty interesting but i don't think i can justify dropping everything to study it. but it did remind me of an adjacent "field", that guy who explores all the ways to lace shoes

(i think this is the one, but whereas old search engines would find it right away, now the results are full of "i made this" or me-too spam)

https://www.fieggen.com/shoelace/lacingmethods.htm
by bryanlarsen | 2025-11-24 20:44:06+00:00
That's historically what happened when we had proper competition. Now we have a 3 party oligopoly and massive barriers to entry. Now at least 1 of the 3 is actively signalling than they're not going to not going to spend 100s of billions to expand fab capacity that will lower their profits because if one does it they'll all do it. It's a prisoner dilemma, and they're co-operating. When they co-operate we all lose.