MurphyA/hacker-news huggingface dataset:
Show HN: SynapseAudit – VS Code security scanner with local analysis
by chiragnahata | 2025-11-03 08:19:03+00:00
We're launching SynapseAudit, an AI-powered security analysis tool built into VS Code. We built this to fix slow, paid, and privacy-violating cloud scanners that demand your source code.

The Problem Solved: Code Privacy & Speed

Our proprietary Synapse Cortex Engine performs all deep vulnerability analysis entirely on your device.

Zero Code Leakage: Your code never leaves your machine. The scanner is 100% local and offline by default. Instant Feedback: Analysis is near-instant, unlike cloud SAST tools.

We check for 50+ vulnerabilities (SQL injection, XSS, etc.) across JS, Python, Java, and more, providing real-time feedback and severity levels in your editor.

Technical Details (BYOAI)

For advanced suggestions and auto test case generation, we added Bring Your Own AI (BYOAI). This allows you to:

Connect your own API key (e.g., Google Gemini, GPT-4) for cost/data control. Connect to local LLMs like Ollama.

This makes the AI features optional, cost-controlled, and privacy-respecting.

Key Features:

Local-First Scanning via Synapse Cortex Engine. One-Click Fixes. Auto Test Cases generation. GitHub Integration.

We're here all day to answer technical questions and get feedback on the Synapse Cortex Engine's accuracy.
by hinkley | 2025-11-03 08:19:03+00:00
Git blame doesn’t show you why line 22 has a bug in it. It only shows you who touched it last. And that’s if nobody fucked up a merge.

A single line of code can have half a dozen authors. You have to pick back through the history and keep running git blame until you determine who put the bug in that line, and why.

If you show the side by side diff for a commit in JetBrains, you can click show annotations and it’ll show you the blame for the before. And then you can keep going back. For a large file that saves you having to go through all the other commits that were done in completely other parts of the file. Which can be a lot for large files.
by pythg | 2025-11-03 08:19:09+00:00
I believe one of the first publications explaining the phenomenon dates back to 2015. https://www.sciencedirect.com/science/article/pii/S095869461... It details the formation of the holes, their size, etc. I remember sending it at the time as a contribution here, thinking the topic was worth interest. Unfortunately, it fell through the cracks. I had also submitted it for approval to the Ig Nobel committee (it diverges somewhat, strictly speaking, from the philosophy of the prize). I received a reply saying it would be reviewed.
by palata | 2025-11-03 08:19:13+00:00
Emmentaler is a cheese originally from Switzerland, though many other countries now make a cheese that they call like that.

"Swiss cheese" is supposed to be similar to Emmentaler (or inspired from it?). But the fact that Swiss Emmentaler counts as Swiss cheese does not mean that Swiss cheese counts as Emmentaler, or is from Switzerland at all.
by Alex2037 | 2025-11-03 08:19:42+00:00
>Any thoughts on main blockers and near-to-medium future developments on this matter?

the target audience of Instagram - regular people - has no incentive to use a decentralized alternative, no matter how solid and easy to use it might be, because centralization and censorship do not bother them.

we already saw it with the twitter exodus, which, despite a period of intense hyping up by the media, had accomplished nothing. regular people, for better or worse, simply don't give a shit.
by WastedCucumber | 2025-11-03 08:20:02+00:00
In principle I agree that change is possible and good under democracy, but your comment seems wildly out of touch in the present context.he change that I see happening in the USA now does not seem like a change of democratic form, but a move away from democracy, because a lot of core rights/freedoms/structures are under threat: freedom of opinion, freedom of the press, right to protest, and maybe we'll see free and fair elections get weakened too before this process is done.

And none of that seems like a feature to me.
by tirant | 2025-11-03 08:20:33+00:00
I have lost consciousness several times in my life. Not a pleasurable experience specially as last time I did it because of such extreme pain that I thought I was passing away.

However I have had always recollection of those seconds or minutes when I was unconscious: there was always an intense and quick succession of memories and images accompanied by sound. At some point the external sound from people trying to reanimate me took over and I was able to gain consciousness again.

I always felt that was how the brain acted before passing away, and also how some literature and cinema were right when depicting flashbacks.
by zigzag312 | 2025-11-03 08:20:42+00:00
What win32 apps were killed by UWP migration? When UWP was added win32 wasn't removed. Win32 applications still work.

> Microsoft sort of only wins in the closed-source, “run this arbitrary binary” race

That is actually a big win as some manufacturers only provide binary blob drivers and a lot of commercial software is distributed as binaries only.
by ThatPlayer | 2025-11-03 08:20:45+00:00
Riot has a pretty good article about why it is hard: https://technology.riotgames.com/news/demolishing-wallhacks-... . Anything more than simple geometry makes server side calculations costly, especially when you're targeting 128 tick/s.

Their settled solution is still not perfect, hence still the need for client-side anti-cheat. The final video clip is definitely done to look effective than it actually is. Those positions are transmitted based on space, not time, and in a real game you'd be moving slower.

Mobas generally have a lower tickrate and simpler vision setups
by robocat | 2025-11-03 08:21:43+00:00
You are just being judgy.

Dong think of it as rules, think of it as someone explaining etiquette. That is hard to write down without sounding weird.

I bet you are oversimplifying how good parties are created in your own culture. If you tried to write down the actual etiquette it would come out sounding weird to us all.

Humans create odd rituals and expectations about everything social. You only really notice it when polling at other cultures - ie is hard to see in your own culture because you implicitly understand the "rules".

#1 is amazingly insightful:

1) Prioritize your ease of being over any other consideration: parties are like babies, if you’re stressed while holding them they’ll get stressed too. Every other decision is downstream of your serenity

Well written. Unobvious to many. I'm sure we all recognise when a hostess or host is trying far too hard and failing badly. It is tricky to learn the skill of being a relaxed hostess/host (some people do it naturally, or have learnt from others).
by dmacedo | 2025-11-03 08:22:34+00:00
What a weird way of phrasing that. The whole point of ethics in multiple disciplines is to try and study the principles of humanity in the society we've formed. The areas of philosophy, medicine, justice, and religion are filled with centuries of discussions trying to argue and explain a lot of these matters.

But the philosopher of the Internet of today, instead of curiosity of reasoning and arguing for what should change in deontology, and why; sums it up as "ethicists forbid...".

I'd really like to understand your views better on what should change and why...

Especially when there's plenty of ignoring of ethics in today's world!
Ask HN: A good launch plan for an indiehacker project
by muddi900 | 2025-11-03 08:22:59+00:00
Hello

I am lifelong entrepreneur. But this is the first time I am going the indie hacker route.

The project is ready. I don't want to go the ppc route, since I don't have the budget. How do I launch this?

I have been told to us ProductHunt and other directories. Every other directory I have looked into seems scammy and PH seems intimidating.

How should I approach this launch? What are the best practices for PH in 2025? Are there any other non-scammy directories?
Show HN: I couldn't tell if $180K net worth at 32 was good, so I built this
by mzou | 2025-11-03 08:23:16+00:00
I hit $180K net worth at 32 and genuinely didn't know if I was ahead, average, or behind.

Googled "net worth percentile by age" – found outdated Federal Reserve tables from 2019. No real-time data. No easy way to track my actual progress.

So I built Guapital (https://guapital.com):

Core insight: Net worth tracking is pointless without context. $200K means nothing without knowing "...compared to whom?"

What it does: - Syncs bank accounts (Plaid), crypto wallets (Ethereum/Polygon/Base/Arbitrum/Optimism), manual assets - Calculates percentile ranking vs peers your age - Shows historical trends ("You moved from 45th → 62nd percentile in 6 months") - Privacy-first: paid model, never sell data

Curious what HN thinks – would you use percentile rankings? Or is this just comparison anxiety disguised as a feature?
by Peteragain | 2025-11-03 08:23:50+00:00
The paper "C is not a low level language as we are not programming a PDP11" (something like that anyway) made a good point that C is only fast on a multi core machine because c fans work hard at keeping the laurel. What does a low level language look like when you have 8 cores? Conversely what would a high level language look like for (low level) verilog and FPGAs?
by madaxe_again | 2025-11-03 08:24:25+00:00
3am? This implies that the party is in a rush to be over by morning.

No no, the trick is to just keep the party going. Indefinitely. A good party will have several police callouts over the course of several weeks. You will need to recarpet your home afterwards, but the takings from the roulette and poker tables will cover it. You will make friends, lose friends, and people will thank you for it in 20 years, never mind the next morning.

I think my longest party stretched to about five weeks - of course people came and went, and having a core of unemployed/student insomniacs to keep it going through the wee hours of Tuesdays helped (for many saved themselves for Wednesdays, which had a particular focus on gambling) - and in the end it only ended because some wag decided to list the party on google maps, and I only narrowly squirmed my way out of charges over running an illegal casino.

Anyway. Parties should not be single night or day affairs, in my view.
by throwaway7356 | 2025-11-03 08:25:37+00:00
Ah, so the same that seems to be happening here? As https://lists.debian.org/debian-devel/2025/10/msg00288.html says Rust is already a requirement on all but four architectures:

> Rust is already a hard requirement on all Debian release architectures and ports except for alpha, hppa, m68k, and sh4 (which do not provide sqv).

And just like with the kernel the fallback gets removed eventually.
by efreak | 2025-11-03 08:25:40+00:00
Chrome no longer has the ability to run a number of extensions I like, and Firefox has abysmal performance at some bulk indexeddb operations. Safari isn't available outside Apple, and Opera and Microsoft are stuck following Google (along with all the other engines built on Chrome). There's no options left.

I hope ladybird makes it far enough that smart people start optimizing small features that rarely get used. Do that and I think it'll be successful enough to be used as a daily browser.

As much as the browser wars sucked, I can't wait for them to happen again. I'm already using 5 different browsers on mobile, since nobody wants to support containers, profiles, or organizing tabs with multiple windows.
by Lapel2742 | 2025-11-03 08:27:09+00:00
> I'd love to load this up on the old 2080ti with 128gb of vram and play, even slowly.

I think you mean ram and no vram. AFAIK this is a 30b moe model with 3b active parameters. Comparable to the Qwen3 MOE model. If you do not expect 60 tps such models should run sufficiently fast.

I run the Qwen3 MOE Model (https://huggingface.co/unsloth/Qwen3-30B-A3B-GGUF/blob/main/...) in 4-bit quantization on an 11 year old i5-6600 (32GB) and a Radeon 6600 with 8GB. According to a quick search your card is faster than that and I get ~12 tps with 16k context on Llama.cpp, which is ok for playing around.

My Radeon (ROCm) specific batch file to start this:

llama-server --ctx-size 16384 --flash-attn on --cache-type-k q8_0 --cache-type-v q8_0 --device ROCm0 -ngl -1 --model /usr/local/share/gguf/Qwen3-30B-A3B-Q4_0.gguf --cache-ram 16384 --cpu-moe --numa distribute --override-tensor "\.ffn_.*_exps\.weight=CPU" --jinja --temp 0.7 --port 8080
by noam_k | 2025-11-03 08:27:34+00:00
I'm not sure what exactly you're referring to, but one avenue to implement AI is genetic programming, where programs are manipulated to reach a goal.

Lisp languages are great for these manipulations, since the AST being manipulated is the same data structure (a list) as everything else. In other words, genetic programming can lean into Lisp's "code is data" paradigm.

As others mentioned, today everything is based on neural networks, so people aren't learning these other techniques.
by arielcostas | 2025-11-03 08:27:41+00:00
I disagree. We write left to right, so it makes sense when the URL is essentially two parts ("external" and "internal" in regards to "place on the network", "location on the server") they are written left to right and then separated in the middle.

Plus it would make using autocomplete way harder, since I can write "news.y" and get already suggested this site, or "red" and get reddit. If you were to change that, you'd need to type _at least_ "com.yc" to maybe get HN, unless you create your own shortcuts.

Conveniently enough, my browser displays the URL omitting the protocol (assuming HTTPS) and only shows host and port in black, and path+query+fragment
by dijit | 2025-11-03 08:28:13+00:00
Binary applications do not include drivers. I only mean applications, drivers do not transfer cleanly between versions of Windows.

To answer your other question though; Any GDI that is not accessible through DirectX- The Contacts API, Timers API, BITS (Background Intelligent Transfer Service), The inbound HTTP server API, NDF (Network Diagnostic Framework), SNMP.

AllocConsole and ReadConsole are gone, NamedPipes (something I used to use extensively) are gone. Toolbar and Statusbar APIs are gone and direct manipulation APIs for the Desktop.

I mean, I can keep going.
by zanellia | 2025-11-03 08:28:26+00:00
I think that's indeed one of the main problems, although I think people don't care because they don't understand what are the risks that directly concern them. A valid question would be at what point (if ever, and I want to believe that is going to happen, sooner or later) is the average user going to perceive the problems associated with centralized, censoring, opinion-steering platforms?
by northlondoner | 2025-11-03 08:29:06+00:00
There is a surge of interest and investment in astronomy and astrophysics in Cyprus, from both academic and popular science perspectives, with publications by Cypriot scientists.

Observatory on scenic Troodos Mountains: https://www.troodosobservatory.com

Planetarium one of the most modern campus in Europe: https://thecyprusplanetarium.com
by kevalpadia | 2025-11-03 08:29:18+00:00
Discover the top 7 technical SEO tools that keep your website running smoothly in 2025. From Google Search Console to Screaming Frog, Semrush, and Lumar—learn which tools help improve crawlability, fix site errors, boost Core Web Vitals, and enhance overall site performance. Whether you’re a beginner or managing enterprise-level websites, these tools will strengthen your technical SEO foundation and improve visibility on search engines.
by _2zip | 2025-11-03 08:30:20+00:00
When I was around 15, I used to hang out with a guy who was much senior to me, and he would bully us sometimes. One day, when we were bantering, I cracked a joke that a third guy with us (who was my age) found funny and crackled. The bully grabbed my neck and choked me till I lost consciousness. I remember having memory flashbacks related to missing a train, and someone waiting at the wagon door, waving at me to hurry and jump in before it is too late. I remember feeling stressed about missing the train. The next thing I remember is slowly regaining consciousness to see the bully and the 3rd guy splashing water at my face, looking very amused.
by cube00 | 2025-11-03 08:30:26+00:00
> try to encourage standing for those who can e.g. by having high-top tables, or taking away chairs from around tables

Why do people feel it's their role to take away choice if someone wants (or need) to sit down?

I don't buy the attempt at inclusive language either because it's nobody's business to determine "for those who can".

Have chairs available for those who need them rather then forcing them make themselves known by asking the host for a chair or trying to drag one in from another room.

As a bonus you won't have to lug chairs out of the room only to put them back later.
by mzou | 2025-11-03 08:31:21+00:00
first time founder here, so take my advice lightly. from my research, the way to approach your launch is to find your ICP (ideal customer profile). after you know whom your target is, go to reddit and genuinely comment and solve their pain point, and lightly hint that you are currently working on a solution to solve that (sell your solution). this process takes way longer than ppc route, but it's effective. would love to see other's approach as well
by tgma | 2025-11-03 08:31:51+00:00
The referred paper C isn't a low level language - your computer isn't a fast PDP11[1] was not really addressing multicore parallelism. It was discussing instruction-level parallelism, which is done within an execution thread and is achieved by speculative and out-of-order execution of instructions that do not have sequential dependency on previous instructions.

[1] https://queue.acm.org/detail.cfm?id=3212479
by palata | 2025-11-03 08:32:54+00:00
Wikipedia's first line is: "A startup or start-up is a company or project typically undertaken by an entrepreneur to seek, develop, and validate a scalable business model."

Then it has a notion of "growing large beyond the solo founder". But I argue that most of the time, this is just the story they tell to justify their losing money. As in: "we are not profitable YET, because we need to grow larger to reach the scale we need, hence you should give us more money".

> A startup can be profitable.

Is Logitech a startup? They (or at least not so long ago) call themselves a startup. I disagree: it's an established company.

If a company of 20 employees has been profitable for 10 years and doesn't grow, would you call it a startup? If it is profitable and keeps growing while staying profitable, wouldn't you say it's "expanding"?

Now if that company of 20 employees suddently gets a big funding to try to become a company of 2000 and goes into a state where it may well bankrupt in the next 2 years if it fails, then I would again consider it a startup: it's "trying a completely new business model" (one that works for 2000 employees instead of 20, probably with the goal of making the leadership rich).

Another thing is that startups usually tend to be those Ponzi schemes where employees are badly treated but get not-so-worthy stock options (that may compensate someday for the bad conditions, but often don't) while the founders get a shot at getting rich. If your company is profitable and stable, it's much harder to do: how would you justify the bad conditions if you could actually afford better ones?

But of course, saying that you are a startup is "cool", which is exactly why Logitech was saying it though they were one of the big tech companies in the world.
by mschuster91 | 2025-11-03 08:34:21+00:00
> World Liberty Financial is receiving $100's of millions inbound, coincident with 'deals' made by US and Middle East actors etc..

The thing is, in the corruption surrounding the President, that's still small fish. $TRUMP alone was worth 13 billion dollars, $MELANIA was at 1.7 billion dollars. And that's just these two meme coins, not going into all the other shenanigans - he and his family are expected to have made 3 billion dollars since the election [1] in personal wealth gain.

[1] https://qz.com/donald-trump-net-worth-presidency-business-co...
by nicbou | 2025-11-03 08:35:44+00:00
I had to make up for it. This year was a huge diversion from my usual work as I scrambled to monetise properly. I spent a lot more time on topics that bring revenue, instead of purely optimising for usefulness as in the past.

It had a good outcome though: I made a series of really useful upgrades to my health insurance advice. I am happy that the solution was to make a better product, not to squeeze my audience more.

https://nicolasbouliane.com/blog/health-insurance
by mschuster91 | 2025-11-03 08:36:26+00:00
> if for not other reason than that they don't get caught flat footed like this

The Trump administration doesn't care any more if they get caught red handed. They don't need to. Most of the media has been bought off in Orban style and subsequently silenced (e.g. WaPo) or subjected to lawfare (see the recent broadcast TV scandals), and the hardcore voter base doesn't care about anything any more, as long as "their side" is perceived as "winning".
by coldtea | 2025-11-03 08:36:34+00:00
>a politician who does not dedicate his life towards making the laws as perfect as humanly possible (...) clearly does not deserve to be elected.

Oh, sweet summer child. Not attempting to make laws "as perfect as humanly possible" is the least of our worries with politicians!

Most of them dedicated their life actively towards the opposite, to make the laws as bad as posisble: out of ideology, out of being paid by lobbies and monopolies, personal interest, and so on.
by sigmoid10 | 2025-11-03 08:36:45+00:00
That's a logical fallacy. Population growth can outgrow food supply thanks to high fertility and access to better hygiene and medical treatment from outside combined with a lack of birth control. So you would still see population growth, but a growing fraction of this population could be malnourished.

That being said, the most common reason is simply war. If you look at the famine in Sudan right now, it is a direct consequence of the civil war (which also happens to be the biggest and bloodiest war by far in the world right now). Lost crops from weather or diseases can also restrict local food production, but it only ever really turns into a problem when armed groups prevent outside food supplies from moving to affected areas like the military in Sudan does right now.
by palata | 2025-11-03 08:37:38+00:00
Which percentage of all the people who worked in startups got rich?

If your neighbour got into 8-figures, it means that it's one of the very big tech companies, and the founders are super, super rich. But that's a very, very small minority of the cases.

The lotery makes a few people rich, but I don't think it would be fair to say that "the lotery makes people rich" in general. In general, the lotery makes people a little poorer.
by jack_tripper | 2025-11-03 08:37:41+00:00
Define "better". Currently no county, even China can't replace the US as a trading partner in terms of how much the US consumer base buys from us(the European export base I mean) and the kind of technology the US provides back in return. Until China's consumer purchasing power comes close, we're stuck with the US as our main pay piggy.

Plus, I don't think replacing the US with China, a dictatorship that's running slave labor camps, has no human rights or freedom of speech, no freedom of religion, etc, as the main world superpower, is the best idea.

So, how people can promote cozying up to the CCP as some sort of win just to stick it to Trump, is beyond me. It's as narrow minded as the people who were promoting Russian gas dependency as some sort of political victory, until it bit them in the ass and is now costing us through the nose. Why don't people learn from history that cutting your nose to spite your face is not a wise long term strategy?

As bad as Trump is he's only got 3 more years in power until next elections while the CCP is a forever evil pretending to be your friend playing the Embrace Extend Extinguish long game.