MurphyA/hacker-news huggingface dataset:
by craftkiller | 2025-11-06 22:36:36+00:00
> there does not seem to be any way for _me_, the person affected, to know what password were breached

You should be using a unique randomly-generated password for each website. That way, one breach doesn't lead to multiple accounts getting hijacked AND you'll know which passwords were breached solely based on the website list. The only passwords I still keep in my head are:

1. The password to my password manager 2. The password to my gmail account 3. The passwords for my full disk encryption

All of those passwords are unique and not used anywhere else. Everything else is in my password manager with a unique randomly generated password for each account. And for extra protection, I enable 2fa on any site that supports u2f/webauthn.

I used to reuse the same password for everything, and that lead to a pretty miserable month where suddenly ALL of my accounts were compromised. I'd log in to one account and see pizzas I never ordered. Then I'd open uber and see a ride actively in-progress on the other side of the country. It was not fun.
by skissane | 2025-11-06 22:36:39+00:00
I guess the question is… we know what our current propulsion technology is capable of… given a million years of further technological development, where will our technology be?

The idea that, given a million years of further technological development, intergalactic travel might actually be feasible, isn’t really that implausible. Far from certain, but far from implausible either.

And that’s the thing-a million years is a technological eternity, a rounding error in estimates of time to colonise the galaxy/the local group/the observable universe.
by ericd | 2025-11-06 22:37:06+00:00
Absolutely, especially the part about just rolling your own alternative to Claude Code - build your own lightsaber. Having your coding agent improve itself is a pretty magical experience. And then you can trivially swap in whatever model you want (Cerebras is crazy fast, for example, which makes a big difference for these many-turn tool call conversations with big lumps of context, though gpt-oss 120b is obviously not as good as one of the frontier models). Add note-taking/memory, and ask it to remember key facts to that. Add voice transcription so that you can reply much faster (LLMs are amazing at taking in imperfect transcriptions and understanding what you meant). Each of these things takes on the order of a few minutes, and it's super fun.
by samdoesnothing | 2025-11-06 22:37:17+00:00
> The concept of a school wouldn't be illegal.

Yes it is, you explicitly said it would be illegal if you didn't get permission from the government. What you meant to say was that "The concept of a government-approved school wouldn't be illegal." which is very different from the concept of any school being legal, and also redundant because by definition a government-approved school is a legal school, since governments hold a monopoly on the legal system.
by foobarian | 2025-11-06 22:38:02+00:00
Honestly the top AI use case for me right now is personal throwaway dev tools. Where I used to write shell oneliners with dozen pipes including greps and seds and jq and other stuff, now I get an AI to write me a node script and throw in a nice Web UI to boot.

Edit: reflecting on what the lesson is here, in either case I suppose we're avoiding the pain of dealing with Unix CLI tools :-D
by OkayPhysicist | 2025-11-06 22:38:14+00:00
IMO, the value in TUIs lie in 1) Composability: we've got really good tools for manipulating terminal windows like tmux, :term in vim, etc, whereas the same can't really be said for OS-level windows and 2) As a shibboleth: They implicitly state that they're built by and for keyboard-centric technical users, and thus the wants and needs of keyboard-centric technical users are going to be the valued over the wants and needs of the lowest common denominator. 3) They look cool.
by blobbers | 2025-11-06 22:38:31+00:00
TLDR; this is an alibaba funded start-up out of Beijing

Okay, I'm sorry but I have to say wtf named this thing. Moonshot AI is such an overused generic name that I had to ask an LLM which company this is. This is just Alibaba hedging their Qwen model.

This company is far from "open source", it's had over $1B USD in funding.
by Yokolos | 2025-11-06 22:38:36+00:00
I never said there are examples. However, "who you are" matters, even if you don't care. At least when the who is known, we can guage the trustworthiness and what bias exists, because there's always a bias. When who is not known, you don't know what bias to account for. That's not trustworthy and not reliable. And when the site is closed source and you have no idea how it's being run, nor by whom, you don't know "what you do" either.
by shomp | 2025-11-06 22:39:35+00:00
Mainstream physics has been delighted to ignore/abandon essential conservation laws when talking about the expanding universe. It's kinda weird, I tried publishing a paper on it recently and it was not received well. In general, if conservation laws are to hold, expansion must be balanced with [eventual] contraction, is that not obvious? Apparently it was quite contentious to say until... this article?
by devKnight | 2025-11-06 22:40:10+00:00
Based in: Latam Interested in: Part Time/Contract

Time Zone: US time zones

Technologies: React, Next, Remix, Vue, Typescript, Express/Node, Mongo, Mysql, AWS(Serverless), Laravel/PHP, Jest, Cypress, playwright, python

Email: me+hn @ segoviacristian dot com

Have 6+ years of experience working at US based startups and small companies. Looking for full stack roles, though open to frontend or backend roles as well. Speak English at an advanced level
by TZubiri | 2025-11-06 22:40:25+00:00
Right. Having some data leaked isn't really a boolean, leaked/unleaked. It's a list of leaks, and the implicit map betweenyl your datapoints, whether by intra or interprovider mapping

For example a forum might leak a map between your mail and a password; Implicitly your affinity for that forum's topic is also now on the public record, additionally if your posts were public but under a pseudonym, that might be now known by a sufficiently motivated attacker.

Finally this may be linked with other public datasources like your public tweets or public state records, or even other leaks.

This is why the meme about all ssn's being leaked or about a list of all valid phone numbers is so asinine.
by floam | 2025-11-06 22:40:49+00:00
I stand corrected. I didn’t realize you could be a MIMBY for cell towers and also not currently have service.

Any organized resistance I’ve witnessed myself in the US has been something like an HOA saying no not tucked right here where our home values could take a hit or a view obstructed, please put it down the street or … anywhere else.

But if you had no cell service and your call dropped as you backed out of your garage or you tried to sell your house and the buyers phones suddenly had no service or they couldn’t get on the Internet at the open house, that’d feel like pretty concerning missing infrastructure.

I don’t think anti-5G wackos have dented a thing.
by bangaladore | 2025-11-06 22:41:01+00:00
> I.e.: If the security/privacy guarantees really are as advertised, then ipso facto someone could store child porn in the system and the provider couldn't detect this.

But what they would be storing in this case is not illegal content. Straight up. Encrypted bits without a key are meaningless.

There is nothing stopping a criminal from uploading illegal content to Google drive as an encrypted blob. There's nothing Google can do about it, and there is no legal repercussion (to my knowledge) of holding such a blob.
by piratesAndSons | 2025-11-06 22:41:16+00:00
My issue with my friend is: why is military work specially objectionable? I used the example of buying products that are produced by slaves. No doubt some died, yet he has no problem with that, saying it is different without actually explaining why.

Is the issue perception alone? Brand? What the industry advertises itself as? And the totality of their work doesn't matter?
by ploxiln | 2025-11-06 22:42:28+00:00
> it wouldn't be hard to get a bad update into a package (xz did that)

I'd actually call that quite difficult. In the case of xz it was a quite high-effort "long con" the likes of which we've never seen before, and it didn't quite succeed in the end (it was caught before rolling out to stable distros and did not successfully exploit any target). One huge close call, but so far zero successes, over almost 30 years now.

But typo-squatting and hijacked packages in NPM and PyPI, we've seen that 100s of times, many times successfully attacking developers at important software companies or just siphoning cryptocurrency.
by tristor | 2025-11-06 22:42:34+00:00
Two bugs to know about. First, you are using a deprecated API call that fails in Firefox. Second, you are using an HTTP endpoint that fails to upgrade to HTTPS to call the GoodReads API, which also fails with HTTPS-Only enabled in both Chrome and Firefox.

The idea seems good, but since I can't import my GoodReads successfully, it's hard for me to try
by postflopclarity | 2025-11-06 22:42:54+00:00
it's really not strained. did you watch the (many) videos? it is a literally literal Nazi salute, twice.

> taking everything at the worst possible interpretation

wouldn't the "worst possible interpretation" here also equal the simplest possible interpretation, which is that he did two Sieg Heils because he's a Nazi sympathizer?

> you are doing business with them all the time

I'm really not generally in the habit of supporting the business interests of Nazis, no.

just to be clear, if my uncle were a Nazi he would not be welcome in my life, in my home, nor near any of my family. I'm not sure why you're going to so much effort to excuse this behavior.
by TZubiri | 2025-11-06 22:43:06+00:00
What? You expect the guy to tell you your password? Lol, lmao even.

I know roughly what passwords were exposed because either I remember it, or the date of the leak or the associated email.

I know simple passwords are almost public and that leaks of say linkedin will be properly hashed, while a vb forum from 2006 might not be.
by Bjartr | 2025-11-06 22:44:17+00:00
No, it's saying "let's build a web service" and starting with a framework that just lets you write your endpoints. This is about something higher level than the nuts and bolts. Both are worth learning.

The fact you find this trivial is kind of the point that's being made. Some people think having an agent is some kind of voodoo, but it's really not.
by afavour | 2025-11-06 22:45:22+00:00
I think you can nitpick the detail but the broader point is still true. Yes, you still pay for the bus, but it’s heavily subsidised. Yes, you still pay for childcare but government subsidies make it wildly more affordable than it is today for New Yorkers.

The general pitch is “raise taxes to make life more affordable for all”. That’s an idea Europeans can identify with.
by immibis | 2025-11-06 22:45:29+00:00
> More importantly, avoids all the emotional outbursts one would trigger by using the word "slave".

Thanks for providing an example.

A serf also did not feel like a slave, being forced to do things. A serf felt his lord was being generous by letting him use the lord's land, for the low low cost of whatever percentage of his crops, plus being required to go and fight in battle and sometimes die, when there was a battle. Which is oddly analogous to how we feel about tech companies. We don't feel like we're being forced to use e.g. YouTube; we feel Google is being generous by letting us use it, for the low low price of endless advertisements, having our minds altered by propaganda, and randomly getting banned by AI. Although obviously not as much actual death is involved, but then again, Google can unperson you.
by mrguyorama | 2025-11-06 22:46:04+00:00
>IBM is still the industry leader in computing

IBM's stock price is 10 times what it was in 1991. What the hell have they even done in that time?

They don't have to be whatever you think is "industry leading in computing", because apparently just once being worth something was enough to enrich an entire generation of management while the rest of us struggle.

>Ford

Despite decades of failure that led to their struggles in 2008 and an increase in energy costs, they didn't die, and despite then selling several lines of cars that had serious defects that should no longer happen, they abandoned selling anything other than overpriced trucks and are STILL doing just fine.

>Sears

Sears was murdered to enrich a few already wealthy people. At no point did it do worse business.

Do you know which companies you didn't even mention that do not support your claim? All the gigantic conglomerates that own you.

From Disney owning a giant chunk of all media and setting national IP policy, to Sysco being one of the only food service companies because they ate all the other ones so now every restaurant is stuck selling the same food as most prisons, to Nestle owning most of the grocery store so they can sell you water that they pumped out of your aquifer for crazy rates while complaining they couldn't be profitable without slave labor, to Dupont poisoning the entire earth, to fossil fuel companies that set national energy policy, to most farming in the US being beholden to a single legal entity, to the vast majority of "Brands" in the US just being a label change of a product they did not design.

You seem to be under this absurd notion that as long as the brand name on a couple consumer items changes occasionally (due to the kinds of technological innovations that we will never see again and cannot be predicted or relied upon), everything is fine?
by imack | 2025-11-06 22:46:29+00:00
It's triggered on certain events, like a download or rendering a password field. First off it checks if you're on a domain thats "green" (safe/popular). for the top 100k domains (should be about 90% of browsing) that's just locally loaded and the page doesn't do anything. From there, there's a bunch of heuristics to see if it's on a flagged page. If it's not, so "unknown" a local ML model will run against the text of the page to see if it fits the patterns of a phishing page.

It was training on available datasets and shipped with the extension, so it does the checks in-browser against what it sees in an unknonwn situation.
by mandeepj | 2025-11-06 22:46:37+00:00
> judge for yourself what the man says.

Americans have already seen and judged him when he ran chainsaw - along with Palantir and Thiel -through fed and, unnecessarily and unreasonably fired hardworking Americans, also stole data which currently probably sitting in Russia.

Those $2T in savings was a blatant lie.

Any idea why he isn’t speaking against T now after steering the election towards him? Because they gave him deportation threats.
by giobox | 2025-11-06 22:47:10+00:00
Speaking for myself, the "blast radius" of my email address is some 600+ accounts... (just looking in my password manager). The chances of me sitting down and closing every single one are non-existent. Many won't even have the luxury of having diligently tracked their login accounts in a password manager either.

Just having a family, kids, bills, schools, jobs, credit cards, banks, investments, insurance, shopping etc etc - the number of accounts many of us pick up can easily get into the hundreds.
by econ | 2025-11-06 22:47:37+00:00
I'm not sure, the thing is, a vehicle is also a place. I had a great time working for a company using camper vans. You get almost everything a brick house offers.

A lot of people have recreational boats. They go places but the destination isn't half the fun. With cruse ships the destination is perhaps 5-10%?

Maybe we got it all wrong. Perhaps trains should have lan gaming. Have some exclusieve game that one can only play in the train with some exclusive content for the specific trip.

One could also do exclusive interactive educational material. There is a lot to learn before you become a train driver, train manager, mechanic, engineer, cleaner, etc etc
by watat83 | 2025-11-06 22:48:09+00:00
I recently Open-Sourced Document Chat — a completely free, open-source platform that lets you upload documents and have intelligent AI conversations with them. Built with Next.js 15, powered by multiple AI providers, and ready to deploy in minutes.

Test it out: https://document-chat-system.vercel.app

GitHub: https://github.com/watat83/document-chat-system

Watch Video Explainer: https://youtu.be/P42nlCmicVM?si=maIjXVxaKWkvevn9

The Problem We’re drowning in documents. PDFs, Word files, research papers, contracts, manuals, reports — they pile up faster than we can read them. And when we need specific information? We spend hours searching, skimming, and hoping we haven’t missed something important.

AI assistants like ChatGPT have shown us a better way — natural language conversations. But there’s a catch: they don’t know about YOUR documents. Sure, you can copy-paste snippets, but that’s manual, tedious, and limited by context windows.

How to Contribute Star the repo — It helps others discover the project

Report bugs — Open an issue on GitHub

Suggest features — Share your ideas

Submit PRs — Code contributions welcome

Improve docs — Help others get started

Join discussions — Share use cases and feedback: https://discord.gg/ubWcC2PS
by zzo38computer | 2025-11-06 22:48:44+00:00
It might work if you run the library in a separate process. This will work better on a capability-based system (with proxy capabilities; this would have other benefits as well and not only security) than on Linux, although it might still be possible to implement. An alternative way to implement library sandboxing would be to implement the sandboxing at compile time, which would work on any system and not require a separate process, and has both advantages and disadvantages compared with the other way.
by grvbck | 2025-11-06 22:48:56+00:00
You need ridiculous speeds for time dilation to really kick in though. Mathematically, it starts as soon as an object moves. But if a spaceship travels at 90 % of light speed (0.9 c), their local time moves just approximately at half speed compared to local time on earth. A year for the astronauts is just over 2 years on earth.

At 0.995 c, the ship clock runs 10 x slower.

At 0.999 c, 22 x slower. Then if you push the turbo button to 0.9999 c, 71 x slower.

The fastest man-made object to date is the Parker Solar Probe, at 0.059 c.
by antognini | 2025-11-06 22:49:18+00:00
Noether's theorem tells us when we would expect conservation laws to hold and when we would expect them to fail. In the case of global energy conservation, there would have to be a global time invariance associated with the spacetime. But this is manifestly not the case in an expanding universe. It is generally not even possible to have a well defined notion of global energy in a dynamic spacetime.
by robot-wrangler | 2025-11-06 22:49:42+00:00
I still don't really get it, but would like to hear more. Just to get it out of the way, there's obvious bad aspects. Re: press coverage, everything in AI is bound to be frustrating this way. The MCP ecosystem is currently still a lot of garbage. It feels like a very shitty app-store, lots of abandonware, things that are shipped without testing, the usual band-wagoning. For example instead of a single obvious RAG tool there's 200 different specific tools for ${language} docs

The core MCP tech though is not only directionally correct, but even the implementation seems to have made lots of good and forward-looking choices, even if those are still under-utilized. For example besides tools, it allows for sharing prompts/resources between agents. In time, I'm also expecting the idea of "many agents, one generic model in the background" is going to die off. For both costs and performance, agents will use special-purpose models but they still need a place and a way to collaborate. If some agents coordinate other agents, how do they talk? AFAIK without MCP the answer for this would be.. do all your work in the same framework and language, or to give all agents access to the same database or the same filesystem, reinventing ad-hoc protocols and comms for every system.
by zahlman | 2025-11-06 22:50:03+00:00
> They know all the flags and are generally better at interpreting tool output than I am.

In the toy example, you explicitly restrict the agent to supply just a `host`, and hard-code the rest of the command. Is the idea that you'd instead give a `description` something like "invoke the UNIX `ping` command", and a parameter described as constituting all the arguments to `ping`?
by margalabargala | 2025-11-06 22:50:24+00:00
I think it's fair to say that "Abrahamic Religion" here means specifically "Christianity and Islam". Judaism arguably encourages exactly the sort of philosophy you're talking about, and other Abrahamic offshoots like Druze are not influential.

That said I'm not actually fully convinced that Christianity and Islam discourage personal philosophy in the way that you say. The Greek philosophies you mention were largely the playground of the Greek elite, and plenty of parallels exist in the Middle Ages and beyond. I don't know that personal philosophical enlightenment from a random subsistence farmer is any different between the two eras.
by lotsofpulp | 2025-11-06 22:50:47+00:00
> I'd very much rather be in the business of selling $100B at 2% profit margin than selling $100k at 50% profit margin.

How is this relevant? A business’s goal is to earn a return for shareholders. A business also needs sufficient profit margin to weather volatility.

It is quite evident that with current technology, the business of retailing groceries, and retail in general needs about a 2% profit margin to survive long term, and earn a sufficient return to be worth investing in. Same for insurance.

Obviously, this is an objectively low amount of profit margin, given that 0% is a charity. So again, how can one complain about a business earning too much money when there exists no competitor that can deliver these goods at a lower profit margin?

The argument is in the same vein of there is no labor shortage, just a shortage of buyers able and willing to pay enough.
by mikepavone | 2025-11-06 22:51:20+00:00
FWIW, they still seem to have not actually pulled the trigger on the account requirement and they've removed the "Starting soon" portion of the nag bar text in the Hue app (though it's still on the web page you get to when hitting "Learn more"). I do wish they would either get it over with or make it clear they're not actually going ahead with forcing accounts though.
by mrguyorama | 2025-11-06 22:51:40+00:00
The other day, NewRelic insisted on full screen pop up dialogs prompting me for some form of feedback for I'm not even sure what.

Multiple times within a few minutes

During a damn incident I was trying to deal with

I left critical feedback. I wish someone would see it and feel ashamed, but it is rather clear that there haven't been decision makers in our industry capable of shame in many years.
by Ethee | 2025-11-06 22:53:05+00:00
So I'll admit up front I don't know a lot about investing, but I at least understand a decent amount about business fundamentals. What I can't understand is why Tesla's stock hasn't tanked yet. They're losing business across every sector they sell in, they're trying to hard pivot to robotics technology and they have the most vocal egocentric CEO constantly trying to extract personal value from the company. If I owned TSLA stock one of these alone would spook me, but TSLA is still trading at all-time highs. None of it makes logical sense to me, genuinely is there something I'm missing here? Has TSLA just become a meme like Gamestop to the point where the business itself doesn't matter at all?