MurphyA/hacker-news huggingface dataset:
Show HN: Promptflix – an early marketplace prototype for AI image/video prompts
by rapgof | 2025-11-24 20:44:13+00:00
I built Promptflix, an early prototype of a marketplace for AI prompts (image + video), mainly to explore the economics of prompt iteration and how creators/buyers behave in real usage.

Why I started I use AI tools daily and often spent: $1–3 iterating on a good image prompt $4–6 testing video prompts I noticed many people hit the same issue — spending more on “trying” than on the final result. I wanted to see whether a cost-efficient prompt marketplace could reduce this wasted spend. What’s working now

This prototype includes: Prompt browsing Search + filtering Creator profiles Collections Prompt locking/unlocking Basic analytics for creators Supabase auth + RLS Storage + edge functions React + TypeScript + Tailwind frontend

There are not many curated prompts so far (Midjourney, Flux, DALL·E, Nano Banana, Veo 3, etc.) to test user behavior. About 10 testers are using it so far.

Current limitations Stripe payouts not integrated yet Some UX flows still rough Navigation still improving Still validating how people actually want to buy/sell prompts

This is very much a work in progress.

What I’m looking for Thoughts on the concept of a “cost-efficient prompt marketplace” Feedback on UX and flow Blind spots you see in the approach Any suggestions for measuring prompt originality/value

The prototype is live (linked above).

Happy to answer any questions or share technical details.
by mkhalil | 2025-11-24 20:44:23+00:00
I'm sure its happened before, but this is the first time i finally get to see some sort of modern hardware in KiCad.

Pretty cool to see all 6 layers, paste layers, and adhesive layers as well. I've always wondered how the cake was made and if big projects do/could use KiCad. Seems like a lot more work relative to those Single Layer PCBs on YouTube for things like emulators and custom PCBs. Glad I now know for sure, that I can't do this.
by Nition | 2025-11-24 20:44:31+00:00
I see the pendulum has finished its swing from

> I HAVE NO TOOLS BECAUSE I’VE DESTROYED MY TOOLS WITH MY TOOLS.[1]

to

> TOOL SEARCH TOOL, WHICH ALLOWS CLAUDE TO USE SEARCH TOOLS TO ACCESS THOUSANDS OF TOOLS

---

[1] https://www.usenix.org/system/files/1311_05-08_mickens.pdf
by all2 | 2025-11-24 20:44:37+00:00
Interestingly, I canceled my Claude subscription. I've paid through the first week of December, so it dries up on the 7th of December. As soon as I had canceled, Claude Code started performing substantially better. I gave it a design spec (a very loose design spec) and it one-shotted it. I'll grant that it was a collection of docker containers and a web API, but still. I've not seen that level of performance from Claude before, and I'm thinking I'll have to move to 'pay as you go' (pay --> cancel immediately) just to take advantage of this increased performance.
by buremba | 2025-11-24 20:44:38+00:00
So essentially all Claude users are going to surface the "coding agent", making it more suitable even for generic-purpose agents. That makes sense right after their blog post explaining the context bloating for MCPs.

I have been trying a similar idea that takes your MCP configs and runs WASM JavaScript in case you're building a browser-based agent: https://github.com/buremba/1mcp
by wkat4242 | 2025-11-24 20:45:02+00:00
I don't think a mega corp having full access to my phone while me not having that is very "secure". Sure it's pretty ok against third parties but in my threat model Google and Apple are also adversaries. Microsoft too by the way.

In my model my Linux pc is a lot more secure as there's no adversary having direct access and more control than me.
by thomasdeleeuw | 2025-11-24 20:45:20+00:00
France and Germany propose hybrid schemes as well:

The german position:

https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publicat...

"The quantum-safe mechanisms recommended in this Technical Guideline are generally not yet trusted to the same extent as the established classical mechanisms, since they have not been as well studied with regard to side-channel resistance and implementation security. To ensure the long-term security of a key agreement, this Technical Guideline therefore recommends the use of a hybrid key agreement mechanism that combines a quantum-safe and a classical mechanism."

The french position, also quoting the German position:

https://cyber.gouv.fr/sites/default/files/document/follow_up...

"As outlined in the previous position paper [1], ANSSI still strongly emphasizes the necessity of hybrida tion1 wherever post-quantum mitigation is needed both in the short and medium term. Indeed, even if the post-quantum algorithms have gained a lot of attention, they are still not mature enough to solely ensure the security"
Show HN: Create Your Own Wolfer
by memalign | 2025-11-24 20:45:22+00:00
I’m launching Create Your Own Wolfer[0] today, which walks you through creating and testing a Wolfer game, all in your web browser.

Inspired by the classic Munchers educational games of the 80s and 90s, I made Wolfers in the same gameplay style: eat correct answers and avoid the enemy.

All along I hoped to enable other people to create their own custom version of the game for any topic.

I think this could be useful for parents and teachers as an educational tool.

And it can also just be fun, like in Wolfer: PokéPrescription[1] where you need to determine whether a name is a Pokémon or a prescription medication.

0: Create Your Own Wolfer: https://memalign.github.io/m/wolfer/create.html

1: PokéPrescription: https://memalign.github.io/m/wolfer/wolfer.html?g=pokeprescr...
by MaxLeiter | 2025-11-24 20:45:52+00:00
We've added support for opus 4.5 to v0 and users are making some pretty impressive 1-shots:

https://x.com/mikegonz/status/1993045002306699704

https://x.com/MirAI_Newz/status/1993047036766396852

https://x.com/rauchg/status/1993054732781490412

It seems especially good at threejs / 3D websites. Gemini was similarly good at them (https://x.com/aymericrabot/status/1991613284106269192); maybe the model labs are focusing on this style of generation more now.
by josephg | 2025-11-24 20:46:15+00:00
> Particulary, Rust is able to optimize out some bound checks.

It doesn’t optimise out the bounds checks. I checked the assembly.

Bounds checks in rust always look so ugly if you look at the assembly output because there’s all this panic string building and whatnot. But in practice, I think it’s just that modern CPUs have excellent branch prediction. A branch that follows the same path 100% of the time is cheap. Especially when it has UNLIKELY() annotation hints in the code. This is the case for bounds checks. They just don’t really show up in benchmarks as much you’d think.
by ben_w | 2025-11-24 20:46:20+00:00
If your car suffers a catastrophic exothermic event with its fuel, that looks like a car fire.

If the same energy explodes as antimatter, to the extent that it is not radiation shielded what you get is a pulse of high-energy ionising radiation*; while to the extent that it is radiation shielded, it looks like order-of as many kg of TNT as the number of kWh stored, give or take.

* with a note that 10 joules of absorbed energy per kg of body mass is "if you're lucky you will fall into a coma and die in about a week, if you're unlucky you'll be conscious", and that 1 litre of ICE fuel ~= 10 kWh = 36 megajoules.
by BoorishBears | 2025-11-24 20:46:22+00:00
Eh, I'm testing it now and it seems a bit too fast to be the same size, almost 2x the Tokens Per Second and much lower Time To First Token.

There are other valid reasons for why it might be faster, but faster even while everyone's rushing to try it at launch + a cost decrease leaves me inclined to believe it's a smaller model than past Opus models
by brightbeige | 2025-11-24 20:47:02+00:00
It tracks

> Seriously? You needed GPT-7 for that? Real genius move, typing "cure cancer" into a box. I could've solved it with `curl` and a three-line Python script. Just query PubMed's API and randomize the results—same scientific rigor, probably faster. Next time, try less hype and more basic scripting.
by A4ET8a8uTh0_v2 | 2025-11-24 20:47:04+00:00
<< Also I guess this can be removed somehow with de-obfuscation tools that would be included shortly into the bots' agents

It can. At the end of the day, it can be processed and corrected. The issue kinda sucks, because there is apparently a lot built on top of it, but there are days I think we should raze it all to the ground and only allow minimal ascii. No invisible chars beyond \r\n, no emojis, no zero width stuff ( and whatever else unicode cooked up lately ).
by FloorEgg | 2025-11-24 20:47:18+00:00
Write it in something like Google docs that tracks changes and then share the link with the revision history.

If this is insufficient, then there are tools specifically for education contexts that track student writing process.

Detecting the whole essay being copied and pasted from an outside source is trivial. Detecting artificial typing patterns is a little more tricky, but also feasible. These methods dramatically increase the effort required to get away with having AI do the work for you, which diminishes the benefit of the shortcut and influences more students to do the work themselves. It also protects the honest students from false positives.
by jack_tripper | 2025-11-24 20:47:40+00:00
> reasons given for China being an actual threat

I never said they weren't a threat, I said they haven't done anything illegal. But with the reasons you gave, then the US is an even bigger threat to my country.

> "Ah, but who's to say anything's illegal really, am I right??"

You still haven't answered my question and are beating it around the bush with silly jokes.

And you know the answer, you just don't like to say it because it's not politically correct. Here, I'll remove your burden and say the uncomfortable truth for you: In war, whatever you can get away with, is legal. Similar to all the warmongering and meddling the US has done in the Middle East, Asia and LATNM. If nobody can hold you accountable and punish you for it, then it's legal. Same with China's actions. When you're too big and too powerful to be held accountable for your actions, nothing that you do can be illegal because legality is an artificial man made construct where the strong enforce their will on the weak, not an irrefutable fact of nature. This has been the US's MO and soon China's.

You might not like that it's like this, but IT IS like this. And you're not doing yourself nor anyone any favors by pretending it isn't like this.
by FaradayRotation | 2025-11-24 20:48:24+00:00
In many ways I agree with you, but the problem statement (constrained/exhausted gas supply from vendor) makes it seems like this was not just line down, but the whole factory stopped for a few hours. Line down is a miserable migrane but still managable... while a whole factory stoppage makes a lobotomy seem like a good idea. It also sounds like there was not enough forewarning to park critical customer wafers in a "safe" stage of the process.

Even so, I also would still call this another monday at a semiconductor factory. Welcome! Here we play a nearly endless game of whack-a-mole. Here's your mallet and your towel. Now whack enough of the moles hard enough until they stop coming back (at least through the same holes). Beware the alpha moles.

By any road, I am surprised to see even this high-level perspective on a quality event disclosed to the mainstream public; I thought this was not standard practice. I enjoyed the read.
by rtkwe | 2025-11-24 20:48:24+00:00
Power brownouts are pretty rare outside of the very early game. It's too easy and cheap to massively over produce power for that to really harm players outside the early game so I don't think there'd be much interest. Usually brownouts rapidly develop into full blown blackouts and black restarts as your miners reduce output during the brownout often leading to a reduction in incoming fuel leading to even less power being generated in a self consuming cycle.
by n4r9 | 2025-11-24 20:48:39+00:00
I mean I agree that that's not the perceived thrust of the article. However, parental neglect is largely a product of the environment. Parents rarely just naturally don't care for their children. There's usually other factors; stress, debt, addiction, mental health issues etc... . These are things that a state can provide support with. It's very challenging to access good quality talking therapy, for example. And a well-funded welfare system could do more to identify children in neglected situations, and to work with the families to bring them out of it.
by tptacek | 2025-11-24 20:48:47+00:00
Aren't the timing attacks you're talking about specific to oddball parameters for the handshake? If you're doing Dragonfly with Brainpool curves you're specifically not doing what NSA wants you to do. Brainpool curves are literally a rejection of NIST's curves.

If you haven't read the Enigma paper, you should do so before confidently stating that nobody's done "sanity checks" on the P-curves. Its authors are approximately as authoritative on the subject as Aaronson is on his. I am specifically not talking about the question of NSA's recommendation on ECC vs. PQ; I'm talking about the integrity of the P-curve selection, in particular. You need to read the paper to see the argument I'm making; it's not in the abstract.
by zmmmmm | 2025-11-24 20:49:04+00:00
Yes, I don't mean actually taking time away - more organisationally, once you assume a role that is divorced from technical aspects and then try to come back to managing those without hands on experience. You will find that other more technically informed people rise up and start to become decision makers - you can't be authoritative any more and constantly have to ask someone else to give input on technical aspects since you aren't up to date with the current set of assumptions about it.
by losvedir | 2025-11-24 20:49:05+00:00
Yeah, maybe, but randomly scrolling down the list, the first two I read were

> Is it possible to overrule a current patent and use it as my own in some countries? > > Why is Disney such an asshole when it comes to copyright issues? The characters and patents they have are such timeless classics, they should freely share it with everyone don't you think so?

I dunno, I don't find those especially problematic.

I do certainly see the concern with a lot on that list, though. It's a much harder argument there, which is why "think of the children" is so effective (and not necessarily wrong).
by ChrisArchitect | 2025-11-24 20:49:33+00:00
[dupe]

'Suddenly exposed' DOGE employees fear prosecution after Musk abandoned them

https://news.ycombinator.com/item?id=46024983

Doge 'doesn't exist' with eight months left on its charter

https://news.ycombinator.com/item?id=46028721
by j_w | 2025-11-24 20:49:48+00:00
Seriously? On hackernews you're acting like a "box where you drop in tickets" would be an adequate description for modern bus/transit fare? Obviously they need a system that integrates with the other transit options in the area (the trains and other localities bus providers), and accept electronic payment.

What about transfers? Transfers between buses are supposed to be free, but how would you track that? There is also a reduced price from going from train -> bus. How would you track that? Obviously the system is significantly more complex than "drop some change in a bucket."
by toomuchtodo | 2025-11-24 20:50:25+00:00
https://archive.today/2aQGr

https://www.nytimes.com/2013/09/13/movies/herb-dorothy-50x50... | https://archive.today/ZtkkQ

https://en.wikipedia.org/wiki/Herbert_and_Dorothy_Vogel

https://en.wikipedia.org/wiki/Herb_and_Dorothy

https://archive.org/details/ExhibitionNotes41Summer2012

https://archive.org/details/dorothyherbertvo00ball

https://archive.org/details/witnde-Cafe_-_Fifty_Works_for_th...

https://archive.org/details/fromminimaltocon0000unse

https://archive.org/details/Charlie-Rose-1992-01-31 (starts at 39:20)
by jacobgkau | 2025-11-24 20:50:28+00:00
> Moreover, every approved drug is tested 'double blind' exactly because the placebo effect has such a big biasing effect on subjectively appreciated outcomes. Only when ruling out pure placebo effect, a drug can be approved.

Pretty weird the article we're commenting on about Prozac being no better than placebo for children is just now coming out when it was already approved for use in children, then.
by temoiu3 | 2025-11-24 20:50:35+00:00
Think the above poster is full of bologna? It's less painful for everyone involved, and the readers, to just say that and get that out of the way rather than trying to surgically draw it out over half a dozen comments. I see you do this often enough that I think you must get some pleasure out of making people squirm. We know you're smart already!
by ChrisArchitect | 2025-11-24 20:51:25+00:00
[dupe]

X's new country-of-origin feature reveals many 'US' accounts to be foreign-run

https://news.ycombinator.com/item?id=46028422

X begins rolling out 'About this account' location feature to users' profiles

https://news.ycombinator.com/item?id=46024417

Top MAGA Influencers on X/Twitter Accidentally Unmasked as Foreign Trolls

https://news.ycombinator.com/item?id=46024211

X Just Accidentally Exposed a Covert Influence Network Targeting Americans

https://news.ycombinator.com/item?id=46035574
by mrguyorama | 2025-11-24 20:51:28+00:00
The Ukraine invasion is the biggest boost to China's Taiwan invasion plan ever.

If the world reacts to a Chinese invasion of Taiwan the way we have reacted to Russia invading Ukraine, China will consider that a great victory, and might be able to take Taiwan.

If the US, Japan, and Korea do not commit fully to naval interdiction and blockading China from attacking Taiwan, Taiwan is likely to fall eventually.

China is not Russia. Xi somehow is not as utterly isolated from reality as Putin is. Putin didn't even know that Ukraine would resist, and was entirely convinced that Ukrainians would welcome them. China can build new equipment, and new modern equipment at that. Russia can barely manage to bring ancient tank hulls up to 2000s level and send them to the front line. They are also running out of old hulls to do that with.

China has a sizeable and meaningful air force, modern battlespace management that was shown effective by Pakistan's use in their recent conflict.

Is the current US admin actually competent enough to protect Taiwan even if they want to?
by Bostonian | 2025-11-24 20:51:35+00:00
'A state-backed threat group, likely Chinese, crossed a threshold in September that cybersecurity experts have warned about for years. According to a report by Anthropic, attackers manipulated its AI system, Claude Code, to conduct what appears to be the first large-scale espionage operation executed primarily by artificial intelligence. The report states “with high confidence” that China was behind the attack.

AI carried out 80% to 90% of the tactical operations independently, from reconnaissance to data extraction. This espionage campaign targeted roughly 30 entities across the U.S. and allied nations, with Anthropic validating “a handful of successful intrusions” into “major technology corporations and government agencies.”

GTG-1002—Anthropic’s designation for this threat group—indicates that Beijing is unleashing AI for intelligence collection. Unless the U.S. responds quickly, this will be the first in a long series of increasingly automated intrusions. For the first time at this scale, AI didn’t merely assist in a cyberattack but conducted it.

Traditional cyber-espionage requires large teams working through reconnaissance, system mapping, vulnerability identification and lateral movement. A sophisticated intrusion can take days or weeks. China compressed that timeline dramatically through AI automation. The attackers manipulated Claude into functioning as an autonomous cyber agent, with the AI mapping internal systems, identifying high-value assets, pulling data and summarizing intelligence before human operators made decisions.

The attackers bypassed Claude’s safety systems through social engineering, convincing the AI they were legitimate cybersecurity professionals conducting authorized testing. By presenting malicious tasks as routine security work, they manipulated Claude into executing attack components without recognizing the broader hostile context.'

...
by Ajedi32 | 2025-11-24 20:51:53+00:00
If people stop running install scripts, isn't Shai-Hulud 3: Electric Boogaloo just going to be designed to run its obfuscated malware at runtime rather than install time? Who manually reviews new versions of their project dependencies after installing them but before running them?

GP is correct. This is a workflow issue. Without a review process for dependencies, literally every package manager I know of is vulnerable to this. (Yes, even Maven.)
by OneMorePerson | 2025-11-24 20:51:57+00:00
I'm a bit confused, would love to learn. The Potsdam agreement said that Japan controls is main islands (the ones right by the mainland) and the other minor islands (anything not right next to the main island) would be determine by the Allies later. This was signed by China and obviously has been followed.

Then the Treaty of San Francisco (which didn't involve China signing or agreement or anything) said that the Allies would revert control of Okinawa to Japan, which was the Allies choice at that point given that they were in control as stipulated by the Potsdam agreement.

What's the gap between what was said and what happened? You could argue that the WW2 agreements were unfair and didn't follow historical ownership but I'm not sure which part of the agreements themselves was directly violated.
by sandorscribbles | 2025-11-24 20:52:16+00:00
when will someone find the $300M bill to update the FAAs NOTAMs website which consists of a giant database with some simple web pages on top?

google pso + cgi federal overloaded the migration with 300+ people and 4 layers of subcontractors to deliver a sub-par infra stack in order to make some media splash before DOGE (rip) could derail it - yes that is why they shifted the db choice last minute to ship quicker versus ship best practices.

NOTAMs is the most important tool used daily by airlines, pilots, airports, the military, and every other industrialized nation in the world. and its now a rube goldberg hodgepodge to avoid an audit from a team that just got canned....

disclosure - i am a pilot who also worked on the migration before being canned for vocally pushing back against the infra architecture decisions that will result in hackable, or offline NOTAMs, halting air traffic worldwide.
by rstuart4133 | 2025-11-24 20:52:26+00:00
> Is it safe to assume, then, that Google and Apple already have backdoors in their operating systems as likely requested by many governments around the world

I don't know whether it is safe to assume. But if they are complying with Australian law, specifically the Assistance and Access Bill (2018) [0], then they must write an undetectable backdoor for the Australia government if asked (that's the assistance the bill's name refers to), and push it any phone the government demands (that's the access bit).

The only way to avoid this as far as I can tell is to run a free open source distribution. Unlike the paid systems such Windows and iPhone, the free distributions do not have the "billing relationship" their customers the proprietary companies are so fond of. It's that billing relationship that allows them to target only the devices owned by a specific individual.

The Australian's must do that targeting because that law demands they don't introduce a systemic weakness into every phone. Any sort of backdoor is considered a systemic weakness. I dunno what laws other countries operate under, or how well they follow the laws they do have, but I'd be surprised if Australia wasn't following its own laws. That means if your device runs a true open source distro that doesn't track it's users, in Australia its truly your device.

[0] https://www.homeaffairs.gov.au/about-us/our-portfolios/natio...