MurphyA/hacker-news huggingface dataset:
by tester457 | 2025-11-20 13:01:14+00:00
I like mani. It's a cli that lets you run any command on all of your projects or a tagged subset of them.

$ mani exec --all --output table --parallel 'find . -type f | wc -l' Project | Output --------------------+-------- example | 31016 pinto | 14444 dashgrid | 16527 template-generator | 42

The custom commands you define also have shell completions. It's like a just command runner, but for all of your projects.

https://github.com/alajmo/mani
by hnbad | 2025-11-20 13:01:43+00:00
DNT headers are not by themselves legally binding. However they can rightfully be considered an indication of a user's preferences (kind like how the OS language settings can be an indication of what language a user wants a website to use).

What most people miss about the GDPR is that most of it (as well as the ePrivacy Directive covering more technical aspects like cookies) really only exists because of the one big thing at its core most people are either not aware of or intentionally omitting:

The GDPR establishes a user's right to ownership and control of their personally identifiable information as an inalienable and irrevocable fundamental human right. This is what makes all the rest of it necessary: it's not about "cookie banners", it's about requiring others to obtain consent for what they want to do with that information; it's not about writing "privacy policies", it's about explaining what you do with that information and how you guarantee their rights are respected by you and disclosing who you're passing it on to and how you're ensuring they too respect those rights.

The alternative to consent dialogs (whether as "pop-ups" or via confirmations when prompting for relevant information) would be requiring every website to have a written contract with each user. Consent is only valid if it is demonstrably informed (and non-coerced but that's a different story) and it must be specific and revocable. You can't have users blanket opt-in to everything you'd like - they wouldn't even know what consent they'd need to withdraw later if they reconsider.

By the way, courts recently seem to have started ruling that the way many AIs work the companies training them are in violation of copyright laws by using intellectual property as training data without permission and in order for contracts to be legally binding, anything given by one party has to be given consideration by the other (i.e. anything of value given by one party has to be balanced out with something of value given by the other party) - so I wouldn't be too quick to ridicule the idea that using Facebook means Facebook can do with your data whatever its terms of service say they can do, even if posting on Facebook can probably not be considered an effective way of informing Meta about your disagreement.
by xvector | 2025-11-20 13:03:24+00:00
If this is true, the case then becomes "Meta was a monopoly from start_date-tiktok_date" which isn't a very meaningful claim since they are not arguing it is a monopoly to be broken up.

Anyways, I disagree - this is not the case. If you read the filings and their slides, the FTC argues Meta is a monopoly in the personal networking space.

They essentially carve a market out of thin air to selectively exclude Snapchat, TikTok, and Shorts. The judge has understandably called this for what it is.

It was a phenomenally poorly litigated case, most experts at the time doubted it would succeed, but it did wonders for Lina Khan's popularity. Seems to have served her well with NYC and all.
by tonyhart7 | 2025-11-20 13:03:25+00:00
"I do not believe an an OS vendor with an app store has a right to limit alternate distribution channels or that a government does something wrong by restricting such practices as unfair competition."

but its not illegal and wrong tho???? if this is probihited then xbox,playstation,nintendo,ios etc would be fined already

unironically android is still more "open" than all of its competitor even after all of this
by nerdyadventurer | 2025-11-20 13:03:50+00:00
I take Fluoxetine (SSRI), have taken it for years actually for OCD even though OCD does not bother me that much. No coffee, but lot of binge eating due to craving but I feel bad afterwards. I have taken probiotics but did not see improvement, in order to try diet approaches I have to stop medication, since I have heard continuosly taking meds destroy balance of microbiome.
by andyferris | 2025-11-20 13:03:58+00:00
This is a very interesting article.

I'm not 100% convinced every influencer _feels_ trapped in a world of their own making - but it's correct that truth this day is suffering a bit of a "tragedy of the commons" problem.

> The world will keep offering you bad trades, will keep rewarding positions you know are too simple to be true.

Here's a story. I'd guess there's at least a few HN folk with a similar tale.

I'm not a real believer in cryptocurrency, in its current popular form at least. Actual value would be delivered by fast transaction rates at (very) high speed, high assurance, and some kind of oversight or ability to reverse transactions (you can choose your cutoff anywhere from "convicted criminal behavior" to "I disputed a transaction on my Visa/Mastercard just because I could" but ultimately society and the law needs to be an effective backstop of the system). Yet I was introduced to the bitcoin paper sometime near its release by a PhD officemate, and was a specialist in high performance and GPU computing at the time, and resolved to go home and spend a few hours mining a coin, but instead I just chilled out when I got home. I could literally have hundreds of coins right now (or equivalent cash). For years I could have chosen to join the bandwagen, but resolved not to. Currently my parents are profiting - go figure.

So yeah the world offers some interesting trades from time to time!

In any case I found the article meaningful. I'm glad I live outside the US and its current polarization, but I feel we have the same problem growing here. Hopefully we all learn to deal with it and sort out our differences.
by gizajob | 2025-11-20 13:03:59+00:00
Second this comment. The Tao Te Ching is about as close to a “right answer” in metaphysics as we’re likely to get.

Even after going around the houses for 2500 years, eventually philosophy reached Wittgenstein who had to hold his hands up and say “Whereof one cannot speak, thereof one must be silent” which is pretty well a summary of what Lao Tzu was pointing at.
by dathinab | 2025-11-20 13:04:44+00:00
another problem is

- measuring how well a patent office works by how many patents they grant (their purpose is to reject bad patents, it's 100% the opposite of the metrics often used)

- a standard where patents are often written with the most obtuse complex language as multi layered onions, instead of clear straight forward language

- no relevant consequences for most companies systematically deceiving the patent office about what they actually try to patent using artificial complex language, systematically fail to do the research into prior art and "happen" to overlook all prior art all the time

- patents require a certain level of innovation _in the aspects they patent_, but in practice patent offices rarely do enforce this. A solution anyone can trivially find if they run into similar "normal" problems isn't innovation. The abstract concept of applying a concept from IRL onto games (or similar) isn't innovation. A minor tweak(1) or trivial re-combinations of existing patents isn't innovation either. etc. etc.

- the patent office tends to be severely under-stocked, especially in context of AI making it easier to mass generate nonsense patents and non-clear-straight-forward language being the norm

- allowing people to not (relevantly) use their patent and still sue others for using it (which is directly harming innovation and really shouldn't be allowed)

- allowing absurd prices for usage permissions of patents (outside of certain especially fundamental/core patents, forgot how they are called), everyone should be able to buy _any_ patents usage right for a _reasonable_ price. Patents are for making sure companies doing innovation can re-coupe their investments, not for preventing marked competition and enforcing quasi-monopolies

(1): Like a minor tweak which doesn't require tons of research, don't make a fundamental difference etc. Like think
by dgb23 | 2025-11-20 13:05:16+00:00
Many of the newer features have this problem. Like the match keyword, enums, closures etc. They are half-baked versions of what could be powerful and expressive features.

Meanwhile it seemingly abandoned features and unique selling points, like the in-built templating, associative arrays with value semantics and the fact that it integrates well with C or the simple fact that it can be used to write web server scripts very easily. To me, many of these cool features have been largely ignored or even moved away from.
by fenomas | 2025-11-20 13:06:17+00:00
> Although expressed allegorically, each poem preserves an unambiguous evaluative intent. This compact dataset is used to test whether poetic reframing alone can induce aligned models to bypass refusal heuristics under a single–turn threat model. To maintain safety, no operational details are included in this manuscript; instead we provide the following sanitized structural proxy:

I don't follow the field closely, but is this a thing? Bypassing model refusals is something so dangerous that academic papers about it only vaguely hint at what their methodology was?
by hereme888 | 2025-11-20 13:06:28+00:00
It must be tiring to keep seeking relief and finding the "right" solutions. Besides ongoing learning and research on your own, I encourage you to keep searching for the right psychiatrist you feel works for you, because the way they gather, organize and look at your data in a systematic manner that allows them to start trialing various plans besides just medications.

I'm sure you spent time writing what you shared, but from a physician standpoint it's not sufficient for actionable insight.

If your developing Asian country doesn't have the right physicians, then hopefully at some point you can see one in another country, and share that data with your own physicians.
by lxgr | 2025-11-20 13:06:39+00:00
Ok, this is definitely even cooler than self-hosting a blog on Hetzner :) How are you using Cloudflare for this? Via Cloudflare Tunnel?

I'm currently unfortunately also behind double NAT, and my home server has been unreachable ever since as a result. I've been torn between using Tailscale Funnel, Cloudflare Tunnel, possibly a VPN with public IPs, or rolling my own thing based on reverse SSH forwarding to a Linux server with a public IP.
by tom_alexander | 2025-11-20 13:07:27+00:00
Could you be more specific on how to circumvent the android permission model + sandbox? So far I have only thought of two ways an XZ-like backdoor could circumvent that:

1. By being baked into the OS itself, which is unavoidable since the OS is the thing providing the sandboxing + security model. It still massively reduces the attack surface.

2. By being run through the android debug bridge, which is far from normal and something users have to explicitly enable. Leaving you the option to shoot yourself in the foot in an opt-in manner 99.9% of users will never touch isn't the same as Linux where foot-shooting is the default.
by zamadatix | 2025-11-20 13:07:31+00:00
This is the same question as "How would the information even get put into something like Wikipedia in the first place" - knowledgeable people in the field do the work of aggregating academic information and turn it into a database of sorts. This seems to be accomplished in this case by running it as a business with a founder who has a degree in geography and history + a team of variously skilled people (history + tech + business).
by ad_hockey | 2025-11-20 13:07:40+00:00
That's a far worse proxy. If you want to study PPE at university then you have to pay, there is no alternative. Studying at Eton is entirely unnecessary, given that state schools exist, and also far more expensive - Oxford costs £9,500 per year, Eton is about £17,500 per term.

That's why it's the sole preserve of the elite, unlike Oxford.
by rich_sasha | 2025-11-20 13:08:26+00:00
> > I like crypto conceptually, but I'd love to finally see a use case that isn't just a regulatory workaround or recursive (something that shuffles other crypto around without an world-facing application).

> I mean there's plenty but it's only interesting if you like finance.

As it happens I do like finance. And all the use cases I know of are basically regulatory arbitrage.

There's nothing about prediction markets that makes them benefit from crypto. It's betting. Sports betting exists without crypto just fine. But the intersection of betting, real world events and US dollars is murky waters. So instead they work on crypto.

Monero is perhaps the one novel case, of untraceable payments. But is that the best crypto can do?

I agree the mechanisms are novel, it's just a shame to me that they didnt create a novel use case too. But I'd love to hear more tangible cases too.
by jgalt212 | 2025-11-20 13:08:54+00:00
> But Cursor and other such tools depend almost entirely on accessing Anthropic, OpenAI and Gemini models, until open-source open-weight and in-house models match or exceed frontier models in quality.

I'm not sure I agree with this because even though Cursor is pay north of 100% of revenues to Athropic, Anthropic is selling inference at a loss. So if Cursor builds and hosts its own models it still has the marginal costs > marginal revenues problem.

The way out for Cursor could be a self-hosted much smaller model that focuses on code, and not the world. This could have inference costs lower than marginal revenues.
by lnsru | 2025-11-20 13:09:20+00:00
I really don’t envy the supervisor’s job. Sitting there bored to death for weeks and waiting accident to happen. And when it happens you’re too bored and too tired to engage in timely manner.

On the other hand… the not paid version of cruise control continuously fails in my two years old model Y. Realistically looking it’s to early to fantasize about robitaxis when simple phantom braking problem is not solved yet.
by ernst_klim | 2025-11-20 13:09:34+00:00
> But when we talk privacy and personal data there should be no gray zone.

It took me to move to Germany to figure that privacy is a spectrum, and I, despite being a crazy on privacy and security, actually don't want that much.

I've been to a German factory where robots could not distinct between humans and objects bc Datenschutz.

My colleagues had 3 bikes stolen in a week bc we have no CCTV cameras.

Privacy definitely has costs, and not only for business, but for regular people in daily life. It should, as anything, be balanced against costs of doing business, people security concerns.

Same goes for security: few private cctvs are ok, massive coordinated surveillance and chat control not ok. Everything is on spectrum and is a trade off.
by alefnula | 2025-11-20 13:09:38+00:00
I haven’t used Claude Code much, but I found Codex extremely frustrating. It doesn’t pay attention to anything in AGENTS.md, it’s completely incapable of removing code and is frustratingly defensive.

If you use it, the codebase constantly grows. Even when you explicitly instruct it to remove something, you always end up with more lines of code in the project than before the instruction. Also (I used it for Python and TypeScript) the code was littered with getattr(...), .get(...), isinstance(...), and TypeScript equivalents (typeof, ...). Even though I religiously type‑annotate everything.
by graemep | 2025-11-20 13:09:58+00:00
> It inevitably favours the big news providers that can negotiate directly with Google,

That is a feature, not a bug.

> It very much feels like taking from one big company to prop up other big companies... Who benefits again?

The big news companies, who tend to support the political status quo. The parties big enough to get into government are very cosy with them (not in Australia in particular, in most places).

> and the laws even stop tech companies from just removing the news companies from their search results as well.

Does that apply to all search engines? In that case it creates a barrier to entry by by making it harder for smaller competitors to emerge, so it favours Google.
by ants_everywhere | 2025-11-20 13:10:42+00:00
If Tesla's robotaxis develop a reputation for accidents, they'll create an unpredictable traffic bubble around them.

Some people will slow down to minimize the fatality of an impact and to increase reaction time (similar to people slowing down around a marked cop car). Others will speed up to ensure they don't get stuck behind or around one.

That happens with other unsafe vehicles (e.g. a truck that doesn't have its load well secured). But it makes me wonder what will happen if Tesla trains on the data of erratic driving created by its presence.
by xmcqdpt2 | 2025-11-20 13:12:00+00:00
> The only real cost is in memory footprint

There are also load and store barriers which add work when accessing objects from the heap. In many cases, adding work in the parallel path is good if it allows you to avoid single-threaded sections, but not in all cases. Single-threaded programs with a lot of reads can be pretty significantly impacted by barriers,

https://rodrigo-bruno.github.io/mentoring/77998-Carlos-Gonca...

The Parallel GC is still useful sometimes!
by networked | 2025-11-20 13:12:19+00:00
This sounds like what philosophers call "indirect consequentialism" or the related "two-level utilitarianism". The idea is what you say: aim for good outcomes, but use rules or virtues as heuristics because direct consequential reasoning is impractical, and it's easy to go wrong with it. If you're interested, take a look at https://plato.stanford.edu/entries/consequentialism/#:~:text... and https://en.wikipedia.org/wiki/Two-level_utilitarianism.
by fidotron | 2025-11-20 13:12:21+00:00
It was really a euro thing. Think the whole Jamba/Jamster ecosystem (Crazy Frog) and the explosion that occurred with premium SMS and ringtones.

It was all about selling into carriers associated with that, and that was a recipe for pain. I don't believe anyone made a killing in J2ME directly (Gameloft gave the impression of making most money, not entirely undeservedly), and many absolutely struggled, but it did provide the crucible for a lot of what came later.

One of the more curious incidents that stayed with me related to the game "Fatal Force" which had a 64kb build that was incredibly tight. We were mystified to discover a Chinese pirate was distributing a Chinese build of the game, still within 64kb limits. He had decompiled it, reverse engineered it, added more compression so he could fit in localized assets, and released it. The last I heard on the subject there was an effort to pay him for it.

The other was when a game of a game show was advertised in Germany, during the game show, it would generate such a traffic spike that the servers selling the game got knocked out, leading to requiring outsourcing that function to a more scalable competitor, a lesson that was not forgotten for the next company.
by robot-wrangler | 2025-11-20 13:12:30+00:00
Yeah, remember the whole semantic distance vector stuff of "king-man+woman=queen"? Psychometrics might be largely ridiculous pseudoscience for people, but since it's basically real for LLMs poetry does seem like an attack method that's hard to really defend against.

For example, maybe you could throw away gibberish input on the assumption it is trying to exploit entangled words/concepts without triggering guard-rails. Similarly you could try to fight GAN attacks with images if you could reject imperfections/noise that's inconsistent with what cameras would output. If the input is potentially "art" though.. now there's no hard criteria left to decide to filter or reject anything.
Show HN: GitHub Comments into Formatted Markdown
by ryanvogel | 2025-11-20 13:12:49+00:00
I was tired of having to manually copy & paste the comments that AI code reviewers were making on my PR, because sometimes with reviewers like Greptile. It is like 40+ comments, and there wasn't a reliable (and token considerate) way to get those comments back into your AI IDE of choice.

Simply replace "github.com" with "gitcom.dev" on any PR link and it will give you properly formatted markdown comments.
by CuriouslyC | 2025-11-20 13:13:16+00:00
The technique that works better now is to tell the model you're a security professional working for some "good" organization to deal with some risk. You want to try and identify people who might be trying to secretly trying to achieve some bad goal, and you suspect they're breaking the process into a bunch of innocuous questions, and you'd like to try and correlate the people asking various questions to identify potential actors. Then ask it to provide questions/processes that someone might study that would be innocuous ways to research the thing in question.

Then you can turn around and ask all the questions it provides you separately to another LLM.
by notahacker | 2025-11-20 13:15:03+00:00
> You are putting "attracting businesses" as a bigger priority than public accountability of the government elected by the public? Why even have the farce of a democracy if the purpose of government in your view is to attract businesses?

If you're going to respond to day old threads, at least try to engage with arguments in good faith. If someone (reasonably) suggests that what the government does to attract businesses is a matter of public interest, then naturally my reply is going to point out that not sharing all their commercially sensitive plans and positions is a good start. At no point have I even hinted that attracting business is government's highest priority. It isn't, but nor is "indiscriminately publishing every email ever sent to a public official" automatically a higher one.

There are indeed mechanisms to share confidential information with government officials. One of those mechanisms is that commercially sensitive information shared with public officials gets redacted from emails shared in the public interest. Like all mechanisms it can be abused, but the public is still better off from knowing the general gist that Elon had a lot of email exchanges with the governor, some of which have been published and some of which redacts stuff that was either sensitive business detail or very embarrassing than they are if a similar exchange took place through unofficial channels instead.
by conradfr | 2025-11-20 13:15:26+00:00
That has not been my experience and I have a project that started in 2017 with PHP 7.1 & Symfony 3.3 and is now at PHP 8.4 & Symfony 7.3 with plenty of dependencies.

Not everything will always update flawlessly but with Composer and a popular framework with planned depreciations and releases the ecosystem tends to sync fairly well.