MurphyA/hacker-news huggingface dataset:
by ramon156 | 2025-11-12 10:15:06+00:00
I wish we stopped playing games during hiring processes. I get you're trying to weed out the bad ones (can't take pressure, not pro-active, can't ask questions, etc.), but the entire process sucks on both ends.

Let's say we care about the potential employee's needs, most people want to feel like they're making a difference at work and build something that matters. I have never had a job interview where I was able to discuss this topic. It's just "are you good enough to work for us?" while the entire company is falling apart in the background.

Do you actually want to improve your company, or are you just looking to share more workload? Because those are two different things. I'm not looking to join your bike-shedding business
by ralferoo | 2025-11-12 10:15:44+00:00
Interesting reading, especially as I didn't realise how far ahead of the times they were. The other thing that strikes me is that they'd churn out all sorts of watches - from incredibly beautiful things, to absolutely hideous (from a modern perspective) with bold colours on plastic, but some new geeky features. Also, I'd never thought about how many Casio watches I'd owned in my life!

When I was young I had the calculator watch. I guess C-80, as I remember the white buttons sticking out, but I can't remember any other features. Also not sure why I had a calculator watch I must only have been about 6 or 7 years old. Maybe I'd convinced my parents it was cool!

I also had a 50m water resistant watch, which isn't in the article, but looks like it was the W-59. This was black plastic.

I must have had another watch around this time too, as I remember having a skin reaction (eczema) to the metal back, and having to wear a cotton layer between the watch and my skin. It couldn't have been the next watch though, as the article says it was introduced in 1995 and the eczema would have been around 1986.

The AQ-230 was the last watch I wore before going watchless for about 20 years.

In the early 2000s the strap on my AQ-230 broke, and I realised that I now always had a mobile phone with the time and no longer needed a watch. I didn't get another watch until my first Garmin for running / hiking, but that was only worn during activities, and my most recent Garmin that I tend to wear most of the time.
by thiago_fm | 2025-11-12 10:16:57+00:00
Changed from Ruby to .NET and loving it.

C# is a great language, it's now very modern and has the best parts of Typescript, while leaving out the bad ones.

It's also extremely fast and multi-platform.

It also doesn't have the fragmentation that Java or JVM langs has.

And it's also open source nowadays. I think Sillicon Valley hasn't caught up with those recent changes, I bet more startups would be using C# if they knew.
by brailsafe | 2025-11-12 10:17:32+00:00
Most of the people I know who are into them probably were just struggling with a mental health problem, the others are just impulsive and don't seem to consider their actions so carefully. Either way, they seem to be doing ...fine

For me, I'm not really curious at all, but otherwise feel the same way that you do. Pretty content, faults included.
by malwareandchill | 2025-11-12 10:17:47+00:00
I recently had to prepare for a few cybersecurity interviews and realized how painful it still is.

Programmers have LeetCode and AlgoExpert. Cybersecurity folks have scattered YouTube videos, outdated cert guides, and random Reddit advice. There’s no clear path to follow or structured way to prepare for security role interviews.

So I built CyberInterviewPrep. It’s a platform with AI mock interviews, hands-on labs, and structured notes for roles like SOC Analyst, Security Engineer, GRC, and Pentester.

The goal is to make it easier to prepare without wasting hours jumping between videos, blogs, and PDFs just to figure out what to learn and where to start.

Would love feedback from the HN community on what you think would make this more useful.

https://cyberinterviewprep.com
by saagarjha | 2025-11-12 10:18:04+00:00
I think most people learned about this bug from FFmpeg's actions, not Google's. Also, you are underestimating adversaries: Google spends quite a bit of money on this, but not a lot given their revenue, because their primary purpose is not finding security bugs. There are entities that are smaller than Google but derive almost all their money from finding exploits. Their results are broadly comparable but they are only publicized when they mess up.
by StopDisinfo910 | 2025-11-12 10:18:07+00:00
They hate on Louis Vuitton plastic bags, not Louis Vuitton in general, and they are entirely right to do so. It's the same with their perfumes, keychains, wallets and most other small accessories. All products which are far too expensive for what they are but remain reachable by the average person to capitalise on people who want the brand but can't afford the "real" products.

Buying entry level products from luxury brands is hard to justify. At their price point, you can generally get a far better equivalent product from a brand with less appeal. It's especially true with Louis Vuitton where the brand's cachet has been severely diluted by how many people own their bags.
by barrkel | 2025-11-12 10:18:45+00:00
You probably do want that exception to bubble up, actually. You probably don't want to catch it immediately after open. Because you need to communicate a failure mode to your caller, and what are you going to do then? Throw another exception? Fall back to error codes? Unwind manually with error codes all the way up? And if so, logging was the wrong thing to do, since the caller is probably going to log as well, based on the same philosophy, and you're going to get loads of error messages for one failure mode, and no stack trace (yes, there are ways of getting semi-decent stack traces from C++ exceptions).

Exception safety has a lot of problems in C++, but it's mostly around allowing various implicit operations to throw (copies, assignments, destructors on temporaries and so forth). And that does come down to poor design of C++.
by user2722 | 2025-11-12 10:19:15+00:00
Despite claiming withdrawal, the Danish EU Presidency is attempting to pass legislation requiring AI-powered scanning of private communications.

Article 4 mandates "preventative" scanning, creating a backdoor for blanket surveillance.

Critics warn this represents an existential threat to digital privacy in Europe, with the proposal being pushed through with minimal transparency alongside related initiatives like Protect EU and Digital Omnibus IV that would weaken GDPR protections.
by saghm | 2025-11-12 10:19:20+00:00
I tend to always have a higher heart rate whenever I'm at a doctor's office compared to when I've tested resting at home (in the 100-110 range compared to 90-95), and my experience is that anything in the triple digits will tend to get some concern from whoever is taking the measurements. It's gotten to the point that I need to preemptively tell them before they take the measurements that yes, it's going to be high, but I've seen a cardiologist about it, and they didn't consider it to be an issue given that it's consistently lower when tested in other circumstances. Without that disclaimer before hand, whoever takes the measurement often will grow concerned even a rate of something like 105 and feel the need to test again and ask a lot of probing questions. At this point I have to imagine that the level of scrutiny has only made my heart rate go up even more during those tests, making the disclaimer even more necessary to avoid my visits getting derailed.
by ofalkaed | 2025-11-12 10:19:55+00:00
The only piece of software I can recall buying is Myst, took awhile for me to save up that cash with just my allowance. Seem to recall it cost $56 in 1993 dollars, that was a great deal of money to a 14 year old in 1993. Adjusting for inflation, you can probably can buy a cheap android tablet and Myst and still have enough left over for the sequels and a pizza.

FOSS covers most of my needs and when it doesn't, I just hack something together. Even as a humanities sort and inept programmer, I can generally manage something which will meet my needs and not only do I own it, I made it. Having this sort of mentality has an interesting side effect, most of what can be bought is always less than and not only because it not something I made but because what can be bought is never quit right for my needs. So the compromise of FOSS becomes less of an issue (even with GIMP) and in those times when it becomes an issue, I make do by hacking up a FOSS offering or building from the ground up.

Admittedly, working around the seg faults that I can't seem to fix is a compromise, but it is a small one and preferable to the alternatives.
by _notreallyme_ | 2025-11-12 10:20:02+00:00
Not necessarily startup. You can see some laptops with defcon stickers, it used to be very common for infosec auditors to have work laptops full of stickers not that long ago. Although, it is bad practice for read team audits, and some large companies don't like this kind of shenanigans for internal audits, so that may explain why it is less frequent nowadays
by littlecranky67 | 2025-11-12 10:20:14+00:00
I would love this to be true, but it isn't. I've done generating types for the frontend multiple times, sometimes from C# (around 2016, using typelite), Java (openapi template generator) and most recently straight from OpenAPI spec files (.yaml) using Orval.

It always has been a shitshow. It works well for the 90% cases, but in the 10% edge cases, things break. It becomes impossible to fix generation issues, you will often resort in working around issues in your backend/openapi code. Sometimes you report bugs upstream and hope it gets fixed. In the current project we are stuck on a ~2year old Orval version (a typescript generator from openapi) because some features broke or were removed in the latest version, and the entire monorepo (15+ LoB apps) wouldn't compile and would require major changes. This simply because a never version of the generator was broken/removed features previously present.
by rob_c | 2025-11-12 10:21:12+00:00
> because the AI's lack axiomatic systems beyond much manually constructed machinery.

Oh god, that is massively under-selling their learning ability. These models are able to extract and reply with why jokes are funny without even knowing basic vocab, yet there are pure-code models out there with lingual rules baked in from day one which still struggle with basic grammar.

The _point_ of LLMs arguably is there ability to learn any pattern thrown at it with enough compute. With an exception to learning how logical processes work, and pure LLMs only see "time" in the sense of a paragraph begins and ends.

At the least they have taught computers, "how to language", which in regards to how to interact with a machine is a _huge_ step forward.

Unfortunately the financial incentives are split between agentic model usage (taking the idea of a computerised butler further), maximizing model memory and raw learning capacity (answering all problems at any time), and long-range consistency (longer ranges give better stable results due to a few reasons, but we're some way from seeing an LLM with a 128k experts and 10e18 active tokens).

I think in terms of building the perfect monkey butler we already have most or all of the parts. With regard to a model which can dynamically learn on the fly... LLMs are not the end of the story and we need something to allow the models to more closely tie their LS with the context. Frankly the fact that DeepSeek gave us an LLM with LS was a huge leap since previous model attempts had been overly complex and had failed in training.
Show HN: DeltaGlider – Store 4TB of build artifacts in 5GB
by sscarduzio | 2025-11-12 10:21:27+00:00
DeltaGlider is a CLI/SDK similar to `aws s3` or `boto3`.

UPLOAD: It stores the first file in a S3 path as a full-size (reference), but saves next uploaded archives as deltas (tiny binary diffs) with respect to the reference.

DOWNLOAD: it reconstructs the original file on the fly, bit-perfect and verified with SHA256.

Why Xdelta3? It's a compression-aware and block-level binary diff algorithm. Perfect for representing differences between archives, where small changes shift bytes but most content stays the same. It can efficiently delta compress ZIP/JAR/TAR archives up to 99.9% between versions, provided the difference in compressed content is overall small.

Killer use cases Software versioning, periodic db. backups, JAR, ZIP, TGZ.

The impact for us was "2 orders of magnitude" storage price reduction. I hope you can benefit from it too!

License: GPLv3

Feedback and contributions are super welcome!
by albertzeyer | 2025-11-12 10:21:46+00:00
I wonder, what LeCun wants to do is more fundamental research, i.e. where the timeline to being useful is much longer, maybe 5-10 years at least, and also much more uncertain.

How does this fit together with a startup? Would investors happily invest into this knowing not to expect anything in return for at least the next 5-10 years?
by portmanteaufu | 2025-11-12 10:21:46+00:00
To save everyone a click, the text is:

""" Two security issues were discovered in sudo-rs, a Rust-based implemention of sudo (and su), which could result in the local disclosure of partially typed passwords or an authentication bypass in some targetpw/rootpw configurations.

For the stable distribution (trixie), this problem has been fixed in version 0.2.5-5+deb13u1.

We recommend that you upgrade your rust-sudo-rs packages. """
by miki123211 | 2025-11-12 10:21:57+00:00
If I remember correctly, the entirety of the original GSM is ~9000 pages, things just got crazier (by orders of magnitude) from there.

That's comparing apples to oranges, though. Those standards also specify the interaction between network components, not just between your phone and the network.

Mobile phone standards are more like the entire RFC collection than like the 802.11 specifications.
by greener_grass | 2025-11-12 10:22:31+00:00
Here `a` and `b` can have different types:

let! a = fetchA() and! b = fetchB()

Whereas `Promise.all` usually requires all promises to have the same type (returning a `List<T>` or even a `List<obj>`) .

See https://learn.microsoft.com/en-us/dotnet/fsharp/whats-new/fs...
by barrkel | 2025-11-12 10:22:48+00:00
Don't forget, failure modes pierce abstraction boundaries. An abstraction that fully specifies failure modes leaks its implementation.

This is why I think checked exceptions are a dreadful idea; that, and the misguided idea that you should catch exceptions.

Only code close to the exception, where it can see through the abstraction, and code far away from the exception, like a dispatch loop or request handler, where the failure mode is largely irrelevant beyond 4xx vs 5xx, should catch exceptions.

Annotating all the exceptions on the call graph in between is not only pointless, it breaks encapsulation.
by thiago_fm | 2025-11-12 10:22:58+00:00
There's F# if you want to go fully functional.

Why C# doesn't have first class functions and can't go fully functional (and likely never will): Scala tried and its compiler is slow, even after so many iterations and new novel compiler ideas.

I like the way it is, and hope it doesn't change. Unless they could make this possible without making the compile process extremely slow.
by BoxOfRain | 2025-11-12 10:23:04+00:00
Isn't this idea demonstrably false due to the existence of various sensory disorders too?

I have a disorder characterised by the brain failing to filter own its own sensory noise, my vision is full of analogue TV-like distortion and other artefacts. Sometimes when it's bad I can see my brain constructing an image in real time rather than this perception happening instantaneously, particularly when I'm out walking. A deer becomes a bundle of sticks becomes a muddy pile of rocks (what it actually is) for example over the space of seconds. This to me is pretty strong evidence we do not experience reality directly, and instead construct our perceptions predictively from whatever is to hand.
by fuy | 2025-11-12 10:23:07+00:00
It's web in a (limited) sense that there's probably a web frontend somewhere, but this "somewhere" is usually pretty far away from where most of the code is developed.

Most of the backend logic is not related to serving data for the browsers, it's doing actual backend stuff - communicating to databases, APIs, etc.

Is Google search backend a web app? I think it's really stretching the term.
by walletdrainer | 2025-11-12 10:23:16+00:00
While this feels like it’s perhaps bordering on somewhat silly nitpicking, the trend of conflating vulnerabilities with CVEs is probably at least mildly harmful. It’s probably good to at least try not to let people get away with this all the time.

The way many (perhaps most) people think of CVEs is badly broken. The CVE system is deeply unreliable, resulting in CVEs being issued for things that are neither bugs nor vulnerabilities while at the same time most things that probably should have CVEs assigned do not have them. Not to even mention the ridiculous mess that is CVSS.

I’m just ranting though. You know all this, almost certainly much better than me.
by _giorgio_ | 2025-11-12 10:23:33+00:00
LLAMA sucks, that's the problem. Do you see value in it?

Pytorch, used by everyone, yet no real value to stockholders, META even "fired" the creator of pytorch days ago.

SAM is great, what value does it bring to META business? Nobody knows about it. Great tool BTW.

JEPA is a failure (will it get better? I hope so.)

Did you read my list?
by nake89 | 2025-11-12 10:24:29+00:00
Ascent: 1,304 m Descent: 1,167 m

More info: https://nutskarhunkierros.fi/en/races/83km/

I do want to mention when I said: "surprisingly little training "

I realize now what this sounds like. I want to mention that I did other races to build up my condition to be able to this one (the longest one I ever did).

I also want to mention that it was probably the physically hardest (but most rewarding) thing I've ever done.
AI vs. the cheating: lessons from building a national exam integrity system
by leekuanyew | 2025-11-12 10:24:40+00:00
A couple of years ago, our small team was asked to help secure the driver’s license theory exam for an entire country.

It sounded simple: build a system to detect cheating and improve transparency. In reality, we uncovered an entire underground industry.

There were micro-earpieces hidden in collars, cameras inside keyboards, remote helpers watching live feeds, even analog VGA splitters used to bypass screen capture. The more we built defenses, the more creative the cheating networks became. And it wasn’t just local — we found similar patterns reported around the world in GMAT, GRE, IELTS, TOEFL, and professional certifications. Cheating has become industrialized.

We built an AI-based proctoring system that combines computer vision, behavioral analytics, and biometric verification linked to Kazakhstan’s national ID database. We also developed a custom hardware scanner that can detect micro-earpieces invisible to normal detectors.

Since the national rollout in late 2023: • Over 1.2 million exams have been conducted. • The pass rate dropped nearly threefold, once fake attempts disappeared. • The number of driver’s licenses issued fell from about 1.1 million → 620 thousand — not due to lower demand, but because the process finally became honest.

The biggest lesson: this isn’t a technical project, it’s an ecosystem problem. Every time we close one loophole, someone invests in finding another. It’s a constant cat-and-mouse dynamic that feels closer to cybersecurity than education.

I’d love to hear thoughts from people who’ve worked on: – Scaling GovTech / AI systems internationally while keeping public trust. – Adapting products for different data-sovereignty and privacy frameworks. – Using “ethical hacking” or adversarial testing as a go-to-market model for regulated industries.

Not trying to sell anything — genuinely curious how others have navigated these problems at scale.

(If you’re interested in the full background and stats, we wrote a longer breakdown here: https://medium.com/@yyermanov/how-kazakhstan-reinvented-driver-testing-with-ai-and-cut-fraud-in-half-b10755ed32ac)
by arcfour | 2025-11-12 10:25:13+00:00
This take sounds great until you realize this is literally Google using their resources to help an open source project (by reporting issues in it that ALREADY EXIST and NEED to be fixed OR users made aware if not fixed) AND they also help them by upstreaming patches (just not for this specific issue) regularly AND with monetary support.

So...your entire premise is patently false and wrong.
by altairprime | 2025-11-12 10:25:47+00:00
Living here for twenty years, and having now filled my dance card with every compass direction of the bay, I laughed in familiarity at a bunch of the anecdotes I read. Three notes.

First, I think that the Bay Area tech-like cultures are described accurately — but that the Bay Area non-tech cultures, as in those who are neither within it nor modeling after it, deserve separate consideration. Certainly every local culture I’ve interacted with that is tech-primary or tech-derived has been defective as described, while I also see evidence of thriving non-tech cultures.

Second, no one understands how to bait and tease and flirt other, which certainly aligns with the anecdotes reported by the author about ‘not enough bullying’. I’ve had to exit multiple communities because they’re so intent on putting safety bumpers on every single sharp corner that has ever affected anyone, that I get so dizzy from all the bumpers just in trying to say Hello You Look Nice Is That Wool that I Just Don’t Bother Trying Anymore. I held three long-term relationships spanning two-thirds of my time here and I have been forced to developed a fascinatingly competent filter for people who expect their needs to be discovered and fulfilled without having to bully the world. Local kink is the worst of all worlds: permission required to be flirt, focused on promoting long-term poly and poly-adjacent relationships, and saturated with ‘pillow passive’ subs who assume that service is due them.

Third, the local culture feels like a corpo descendant of the third-wave secular cults such as Landmark or Oprah. It can be distilled trivially into the Three Laws of Bay Cultists, but these are present everywhere in the U.S., but focused into explicit acceptance and preference here. They are:

1. What advances one’s goals is ethical.

2. What hinders one’s goals is unethical.

3. What has no bearing on one’s goals is exempt from ethical consideration.

So, yeah, don’t move here unless you’re forced to. I’m due to leave later this year and it’s not like the local scenes will notice or regret the loss of a ex-tech woman who isn’t interested in talking tech or calendaring poly.
by egeozcan | 2025-11-12 10:26:53+00:00
Most of your electronic devices work with embedded software. Production lines, transport gates, cranes, computer hardware, ships, planes, rockets, cars, e-bikes, smart lights...

There is also scientific programming, that feeds research and analysis. Weather reports? Statistics, etc.

And there is gaming.

Devops, infrastructure? Databases? Tools for artists? Most of those aren't web. And yes I've heard of Figma.

There are probably tens of categories I'm missing.

Web is still bigger probably, but I have a problem with the saying "practically all other development is web".
by miki123211 | 2025-11-12 10:28:26+00:00
Bluetooth was developed in a different time.

In those days, there was no single dominant phone or chipset manufacturer in most countries, much less globally. The phone was a device to access your carrier's plan, maybe with a few nice goodies on the side. Which plan you had was much more important than which phone you had. Phones were like cable boxes in many ways, most people don't know who makes their cable box, all they care about is whether they can watch ESPN and for how much.

Nowadays, you have three OSes that really matter, iOS, Android and Windows on the desktop side. Most people will only ever use at most two. You don't quite need a standard as much in an environment like that.