MurphyA/hacker-news huggingface dataset:
by jeffreygoesto | 2025-11-24 15:21:56+00:00
We had one where data, interpreted as address (simple C typo before static analysis was common) fell into an unmapped memory region and the PCI controller stalled trying to get a response, thereby also halting the internal debugging logic and JTAG just stopped forever (PPC603 core). Each time you'd hit the bug, the debugger was thrown off.
by 5upplied_demand | 2025-11-24 15:22:25+00:00
> They shouldn't have to suffer just because poor, violent, should-have-been-aborteds are legally required to go to public schools.

Yikes! Good thing these people, whom you so clearly despise, will cease to exist after school and will never have to be dealt with in regular life.

I guess the rise in homeschooling is not surprising when we openly view our fellow civilians as inherently poor/violent and shouldn't exist.
by teekert | 2025-11-24 15:22:38+00:00
I wonder the same thing (but with ~25 years to go). It would probably be better for my relationships.

But I've heard from people doing some tests with certain medications that indeed they were able to focus and plan like never before. But also loose some passion and creativity. I've heard from yet others that they should have started way earlier, before essentially wrecking their life.

I think for me at times medication would help me. But it feels like a big step and I'm not "ill", I'm not wrecking my life, my life is ok. I also feel like "this is me, I'm learning about the good and the bad." Idk, maybe I'm overly sentimental about it. I'm also to lazy to go to the doctor.
by alephnerd | 2025-11-24 15:22:40+00:00
> I'm unsure of why people in the EU seem disconcerted about this

This is a top-level issue within Europe as well.

When the Biden admin began the IRA, IIJA, and CHIPS ACT, France, Germany, and the entire EU began a massive lobbying campaign that verged into a trade war [0][1][2].

I went to school with a number of people who became senior EU and EU member state civil servants and leaders, and my college always hosted European dignitaries on a daily basis (along with a yearly gala/bash where all the major EU and EU member state dignitaries would attend with students and professors [3]), and what I saw was the best and brightest remained in the US, and those who climbed the ladder the fastest in EU and EU member state governments tended to have some familial background or network they heavily leveraged. Or they lucked out and joined the right student union during the right election cycle. There is a chronic lack of vision, and more critically - a chronic disinterest to take hard decisions, because the incentive structures are completely misaligned, with MPs essentially overriding careerist technocrats all for the sake of electoral needs, and unlike Asia, businesses are kept at arms length aside from those that are quasi-state owned like Volkswagen, EDF, or Leonardo SPA.

It's almost as if the worst aspects of private sector capitalism morphed with the worst aspects of state capitalism into a legalistic quagmire.

[0] - https://www.institutmontaigne.org/en/expressions/real-reason...

[1] - https://www.atlantik-bruecke.org/en/schadet-der-us-inflation...

[2] - https://www.bruegel.org/policy-brief/how-europe-should-answe...

[3] - https://euroconf.eu/
Show HN: I built a Zero-Knowledge text shredder that deletes data on read
by ktwao | 2025-11-24 15:22:52+00:00
I built this because I didn't trust Slack with API keys, and there are many other cases where I don’t want my shared secrets to be hanging around in chat windows.

Here is exactly how the encryption works- 1) You enter your secret 2) Your message is encrypted and a url is generated. Url contains the key for decrypting which is never passed to server. 3) Your encrypted message is send to server. Note that server don’t get the key to decrypt. 4)You have your URL which you can share. 5) On first time message read through URL, message is destroyed.
by ezfe | 2025-11-24 15:23:01+00:00
I’ve been using Phonak app for a little over a decade now, I’ve tried to Oticon, but had disappointing experiences.

Currently using rechargeable Phonak Audeo with an air fly for connecting to any device other than my phone to avoid Bluetooth switching chaos.

I wish iOS had better control controls over microphone routing but with iOS 26 you can change the microphone during a call to be the phone microphone, even though the hearing aids have their own microphone.
A logging loop in GKE cost me $1,300 in 3 days – 9.2x my actual infrastructure
by nthypes | 2025-11-24 15:23:14+00:00
Last month, a single container in my GKE cluster (Sao Paulo region) entered an error loop, outputting to stdout at ~2k logs/second. I discovered the hard way that GKE's default behavior is to ingest 100% of this into Cloud Logging with no rate limiting. My bill jumped nearly 1000% before alerts caught it.

Infrastructure (Compute): ~$140 (R$821 BRL) Cloud Logging: ~$1,300 (R$7,554 BRL)

Ratio: Logging cost 9.2x the actual servers.

https://imgur.com/jGrxnkh

I fixed the loop and paused the `_Default` sink immediately.

I opened a billing ticket requesting a "one-time courtesy adjustment" for a runaway resource—standard practice for first-time anomalies on AWS/Azure.

I have been rejected twice.

The latest response: "The team has declined the adjustment request due to our internal policies."

If you run GKE, the `_Default` sink in Log Router captures all container stdout/stderr.

There is NO DEFAULT CAP on ingestion volume which is an absurd!

A simple while(true); do echo "error"; done can bankrupt a small project.

Go to Logging -> Log Router. Edit _Default sink.

Add an exclusion filter: resource.type="k8s_container" severity=INFO (or exclude specific namespaces).

Has anyone successfully escalated a billing dispute past Tier 1 support recently?

It seems their policy is now to enforce full payment even on obvious runaway/accidental usage which is absurd since its LOGS! TEXT!
by QuiEgo | 2025-11-24 15:23:15+00:00
It's already happening: https://cyberpress.org/malicious-rust-packages/

My personal experience (YMMV): Rust code takes 2x or 3x longer to write than what came before it (C in my case), but in the end you usually get something much more likely to work, so overall it's kind of a wash, and the product you get is better for customers - you basically front load the cost of development.

This is terrible for people working in commercial projects that are obsessed with time to market.

Rust developers on commercial projects are under incredible schedule pressure from day 0, where they are compared to expectations from their previous projects, and are strongly motivated to pull in anything and everything they can to save time, because re-rolling anything themselves is so damn expensive.
by trial3 | 2025-11-24 15:23:40+00:00
i will gently point out that new york state and new york city are not the same thing

> Under that metric, the poverty threshold for a couple with two children in a rental household in New York City is now $47,190. The study found that 58 percent of New Yorkers, or more than 4.8 million people, were in families with incomes below 200 percent of the poverty line — about $94,000 for a couple with two children or $44,000 for a single adult. Poverty rates among Black, Latino and Asian residents were about twice as high as the rate for white residents, according to the report.

[1] https://archive.is/ygvck#selection-773.0-773.490
by causal | 2025-11-24 15:23:41+00:00
Booking.com is also just a terrible service. Their search is one of the better hotel search tools, but I stopped using them after they "lost" a booking but continued to charge me for it anyway. They denied it existed when I finally reached someone on the phone, despite the very real credit card charge. Only after I got my CC company to chargeback did they send me a cancellation notice.

Incompetence at that level feels like malice.
by somerandomqaguy | 2025-11-24 15:23:56+00:00
Just my sense as an outsider, but a lot of interest in voluntary reunification got chilled after seeing China's actions in Hong Kong. A lot of it stems from lack of trust for the CCP to honor it's idea of a one county two systems form of governence.

I don't know how much the Taiwanese would be willing to fight and die in a military invasion though.
by indoordin0saur | 2025-11-24 15:24:06+00:00
I'll try and add something positive: Hokkaido seems like a great place to relocate and start a life for young aspiring workers. Homes are larger and quality of life has some advantages over the more densely populated parts of Japan. It's also very unique in terms of climate and geography: very heavy snows and mountains means there's limitless adventure for skiers and snowboarders. Yet, despite the snowy winters the winter isn't as brutally cold as you might think and its not so long as what you see in a place like Canada. Spring comes quickly and the summers are long, warm and pleasant so there's plenty of time to take advantage of the beaches and beautiful forests. And about those forests, one other unique thing about Hokkaido is that it's the only place in the world that can rival (or exceed) New England in terms of its brilliance of fall colors.

Anyways, just seems like a great place for Japanese workers to relocate and start a family. I guess the only thing missing were the jobs so hopefully these chip fabs fix that.
by eesmith | 2025-11-24 15:25:17+00:00
I never said you were a Nazi. The Nazi party hasn't been active since 1945, in small part because of my grandfather's military service fighting fascism in Europe. I trust you respect his service and that of millions of other soldiers and civilians by also being against fascism.

Are you willing to define your culture?

Does your culture include Catholics? JFK famously was accused of being a papist, and Prohibition was in no small part due to xenophobia about Catholic immigrants to the US, who didn't share "our" culture.

What about Catholics who send their kids to Catholic school instead of public school? Mormons who do the same? Does it include Amish who speak their own German dialect, with their own religion, parochial schools, and culture?

What about atheists? Homosexuals? Trans people?

Does it include the children of Cuban refugees who grew up in the Little Havana part of Miami, with Spanish as their first language? Who celebrate Nochebuena and quinceañeras instead of Christmas Day and Sweet 16s?

Does it include native Spanish speaking New Mexicans whose family has lived in the state since Imperial Spain colonized Nuevo Mexico in the 1600s?

Does it include Native Americans? Would you shy away from medical care from a Native American physician? Would you prefer to not work with a Native Hawaiian?

Is your definition of "culture" simply "born in the US"? Does it include people from American Samoa? Puerto Rico? Guam?

Does it include people with US citizenship who have never lived in the US?

Does it include someone from Canada? Does it include someone from a Canadian First Nation?

I think you see how simply saying "your culture" doesn't really make sense given that the US - and I think nearly all countries - contain a multitude of cultures.
by joshstrange | 2025-11-24 15:25:20+00:00
> Version locking wont help you all the time, i.e. if you build fresh envs from scratch.

I'm confused on this. I would imagine it would protect/help you as long as releases are immutable which they are for most package managers (like npm).

> Vendoring literally just means grabbing the source code from origin and commit it to your repo after a review.

Hmm, I don't think it always necessarily means grabbing the source, it can also mean grabbing the built artifacts in my experience.

My biggest issue with vendoring dependencies is it allows for editing of said dependencies. Almost everywhere I've worked that vendored dependencies (copied source or built versions in and committed them) felt the siren song of modifying said dependencies which is hell to deal with later.
by aarushyadav | 2025-11-24 15:25:43+00:00
I built a tool called Counsel that connects to your product and revenue stack (PostHog, Stripe, GA4, GitHub, Linear, Gmail, Slack, Notion, etc.) and runs a continuous analysis loop to surface insights, anomalies, missed opportunities, and suggested actions.

The goal is simple: founders often have the data but not the time to dig through it. Counsel tries to close that gap by running a weekly insight cycle. It generates hypotheses, tests them across your data sources, and produces a ranked list of findings. Examples: checkout friction, retention patterns, activation dropoffs, failed onboarding paths, pricing bottlenecks, unhandled error clusters, correlation between support volume and feature releases.

Right now we are running a private pilot with a few early stage B2C SaaS teams. They keep telling us the value comes from the insights they were not expecting. Small things they did not know to look for.

We are still early but would love feedback from HN.

If you want to try it, we are opening a small set of new pilot spots. Happy to share the technical details, architecture decisions, or lessons from building multi source agents if that is useful.

Link: https://www.withcounsel.co

Happy to answer any questions.
by api | 2025-11-24 15:25:51+00:00
Good point, and they're worth name checking too, but the company didn't go anywhere big until Musk took over.

Musk clearly has (or at least had) a great skill when it comes to scaling companies doing hard things. If he had one under his belt, like Tesla, I'd be willing to chalk it up to luck, but he has two: Tesla and SpaceX. Both have been spectacular successes doing things most people run away from screaming with their tail between their legs, namely volume production of innovative cars and aerospace.

IMHO SpaceX is a lot more impressive. There's an old joke: how do you become a millionaire? A: start as a billionaire and found an aerospace company.

I think without him Tesla would have been a boutique car company. They would have made expensive boutique cars for a subset of visionary EV early adopters, but would not have moved the industry. To move the industry you have to grow hard and fast enough to scare legacy car makers into trying to play catch-up, which is what Tesla did. The only other thing I can imagine moving big car makers like this would have been the government mandating an EV transition. Big bureaucratic things only move when kicked.

People hate acknowledging this because Musk's politics have turned so many people off, but unfortunately there appears to be no correlation between skills in one domain and being a generally well adjusted human being. The world doesn't work this way. A person can be good at something and still be a lunatic or an asshole.

I mean... if we dismissed all achievement of people who were assholes or lunatics, we'd basically have to throw out 2/3 of all music.

If anything there might be a slight negative correlation between extreme skill in some domain and being well adjusted, for a variety of reasons including the weird way people treat "savants" in any field. I also suspect a big one is that people with messed up backgrounds (bad childhood, etc.) or psychological issues sometimes "over-compensate" by achieving hyper-skill in some area.
by conartist6 | 2025-11-24 15:26:11+00:00
I take an interest in plane crashes and human factors in digital systems. We understand that there's a very human aspect of complacency that is often read about in reports of true disasters, well after that complacency has crept deep into an organization.

When you put something on autopilot, you also massively accelerate your process of becoming complacent about it -- which is normal, it is the process of building trust.

When that trust is earned but not deserved, problems develop. Often the system affected by complacency drifts. Nobody is looking closely enough to notice the problems until they become proto-disasters. When the human finally is put back in control, it may be to discover that the equilibrium of the system is approaching catastrophe too rapidly for humans to catch up on the situation and intercede appropriately. It is for this reason that many aircraft accidents occur in the seconds and minutes following an autopilot cutoff. Similarly, every Tesla that ever slammed into the back of an ambulance on the back of the road was a) driven by an AI, b) that the driver had learned to trust, and c) the driver - though theoretically responsible - had become complacent.
by vorpalhex | 2025-11-24 15:26:13+00:00
The standard will be used, as it was the previous time the IETF allowed the NSA to standardize a known weak algorithm.

Sorry that someone calling out a math error makes the NIST team feel stupid. Instead of dogpiling the person for not stroking their ego, maybe they should correct the error. Last I checked, a quantum computer wasn't needed to handle exponents, a whiteboard will do.
by Pxtl | 2025-11-24 15:26:54+00:00
> Lossless JPEG recompression (byte-exact JPEG recompression, saving about 20%) for legacy images

Lossless recompression is the main interesting thing on offer here compared to other new formats... and honestly with only 20% improvement I can't say I'm super excited by this, compared to the pain of dealing with yet another new image format.

For example, ask a normal social media user how they feel about .webp and expect to get an earful. The problem is that even if your browser supports the new format, there's no guarantee that every other tool you use supports it, from the OS to every site you want to re-upload to, etc.
by sidewndr46 | 2025-11-24 15:26:55+00:00
The poor state of the infrastructure is usually a result of the monopoly. Maintenance is just a cost. It's not going to bring you any new customers or any new revenue.

I've been through the same thing the post author has. By some random chance I once called tech support and got someone on the phone who was authorized to investigate it and do something about it. Service improved a little bit after that.
by hazzadous | 2025-11-24 15:27:04+00:00
thanks for giving it a go!

if you tried the curl command then yes this is indeed fast. the example curl command is hardcoded, john.smith@example.com is used with a static response for the purposes of allowing users to test the shape of the api without needing to be authed. low time to first test was my aim.

keen to hear if you have a use case for something like this?
by sublinear | 2025-11-24 15:27:09+00:00
Maintaining a package mirror is a shared responsibility beyond just the software dev teams. The packages and their publishers need to be approved to be added to the mirror, testing needs to occur, and updates are delayed until the newer version is added to the mirror. The network team would block npm and force all machines to use this mirror.

All this would have mitigated this incident in the event that an npm install was done during the window of this update being rolled out and unpatched. The npm install would continue as normal on the last known good version and the newer vulnerable version would simply not exist on the mirror.
by tomer124 | 2025-11-24 15:27:18+00:00
I'm skeptical. vLLM is a throughput engine, not a latency engine. For small batches, TensorRT-LLM smokes it. Also, 'parallel inference' implies a race condition on the context window. If Agent A and B generate simultaneously based on stale state, aren't you just generating 5 divergent hallucinations at once? How do you resolve the merge conflict?
by mr_mitm | 2025-11-24 15:27:24+00:00
I travel a lot to many different places including small villages. I'd like to take advantage of a rewards program, but the places I travel to often don't have one of the large chains. These booking services allow me to get bonus points. I thinks that's a good reason, besides the superior convenience of having a unified interface. I rarely had any issues with them either.

I once mentioned that while checking in at a family owned hotel, and they said they appreciate that the booking service allowed them to compete with larger chains on that front.
by bigstrat2003 | 2025-11-24 15:27:38+00:00
That is indeed what one should do IMO. We've known for a long time now in the ops world that keeping versions stable is a good way to reduce issues, and it seems to me that the same principle applies quite well to software dev. I've never found the "but then upgrading is more of a pain" argument to be persuasive, as it seems to be equally a pain to upgrade whether you do it once every six months or once every six years.
by JohnFen | 2025-11-24 15:27:41+00:00
I haven't found LLMs to be all that useful for searching the web, but I suspect that how useful it is depends on what you're searching for.

I'm rarely searching to find an answer to a specific question, I'm more usually searching in order to do research. What I want from the search is a list of online resources on the topic I'm researching. That's what web searches give me.

If I were looking for a specific answer on a topic I already know well enough to be able to spot errors, LLMs may be very useful. But that's just not what I'm usually doing.
by Chris_Newton | 2025-11-24 15:28:04+00:00
IMHO, the ideal for package management in a programming language ecosystem might recognise multiple levels of “standardisation”.

At the top, you have the true standard library for the language. This has very strong stability guarantees. Its purpose is twofold: to provide universal implementations of essentials and to define standard/baseline interfaces for common needs like abstract data types, relational databases, networking and filesystems to encourage compatibility and portability.

Next, you have a tier of recognised but not yet fully standardised libraries. These might be contributed by third parties, but they have requirements for identifying maintainers, appropriate licensing and mandatory peer review of all contributions. They have a clear versioning policy and can make breaking changes in new major releases, but they also provide some stability guarantees along the lines of semver and older releases are normally available indefinitely. The purpose of this tier is to provide a wider range of functionality and/or alternative implementations, but in a relatively stable way and implementing standard interfaces where applicable to improve portability.

Finally, you have the free-for-all, anyone-can-contribute tier. This should still have a sane security model where people can’t just upload malware scripts that run automatically just because someone installed a package. However, it comes with few guarantees about stability or compatibility, except that releases of published packages will be available indefinitely unless there’s a very good reason to pull them where you obviously wouldn’t want to use one anyway. A package you like might be written by a single contributor who no longer maintains it, but if someone does write something useful that simply doesn’t need any further maintenance once it’s finished and does its job, there is still a place to share it.
by WillAdams | 2025-11-24 15:28:17+00:00
For me, I've never done well w/ traditional 3D CAD (need to find time to try Moment of Inspiration 3D), and I've been working on wood joinery where a test joint which was 1" x 2" x 1" took some 20 minutes to do CAM, and created a ~120MB file --- programming the tool movement directly seems a better approach, so I've been working on:

https://github.com/WillAdams/gcodepreview
by moi2388 | 2025-11-24 15:28:29+00:00
Because quantum mechanics describes the universe with a wave function, which evolves according to the schroedinger equation.

In it, there is no notion of collapse. The only thing that makes sense is saying the observer becomes entangled with the measurement.

So if you only look at the Schrödinger equation, this is the only conclusion.

Wave function collapse is something which is simply added ad-hoc to describe our observation, not something which is actually defined in QM