MurphyA/hacker-news huggingface dataset:
by KronisLV | 2025-11-14 13:20:01+00:00
In my Docker Swarm clusters I just use a regular Apache2 image in front of everything, since mod_md is good enough for Let's Encrypt and it doesn't have the issue with "nginx: [emerg] host not found in upstream" that Nginx did when some containers are not available and are restarting (and none of that "nginx: [emerg] "proxy_redirect default" cannot be used with "proxy_pass" directive with variables" stuff either).

From the cases where I've used Kubernetes, the Nginx based ingress controller was pretty okay. I wonder why we never got Ingress Controllers for Kubernetes that are made with something like Apache2 under the hood, given how many people out there use it and how the implementation details tend to be useful to know anyways. Looking at the names in the new list of Gateway https://gateway-api.sigs.k8s.io/implementations/ in very much seems it's once more a case of NIH, although it's nice that LiteSpeed and Traefik and HAProxy are there.
by chromehearts | 2025-11-14 13:20:48+00:00
The negated sentence structure "X isn't just Y -- it's Z" directly followed by a list of 3 or 4 bullet points. Maybe the bullet points are a heavy reach but nobody can tell me otherwise of the former.

I agree on your first part! The whole article does read like slop tho; it's more like "Human was involved" here
by Ukv | 2025-11-14 13:20:52+00:00
> Are 100% of those exploitable? This single ended statistic is simply not useful.

Some more links/statistics (including on 0-days exploited in the wild) here: https://www.memorysafety.org/docs/memory-safety/#how-common-...

> You have proof of this?

One class of non-memory-safety bugs that safe Rust entirely prevents is data races: https://doc.rust-lang.org/nomicon/races.html

> That's not how these measurements work. In particular, modern C++ has many of the same advantages you just cited, so this claim is dubious in two ways.

Are the advantages in those cases (option/result) properly realized when it's just piled on top as something you could do?

I still have to be wary that, for instance, std::strchr could return a nullptr which I might pass on without handling. Plus even with std::optional<T> it's on me to remember to check val.has_value(), else it's undefined behavior to access.

Whereas in Rust, s.find() must return an Option<usize> because there's no null for it to return otherwise, and accessing the inner value (`match`, `if let`, ...) requires handling the Option::None case.

> And you've entirely failed to address the largess of Rust, which, again, for a "systems language" is entirely mismatched.

Large compared to C or Zig, but not compared to C++.
by gagik_co | 2025-11-14 13:22:25+00:00
Yeah I have thought about more user friendly Violentmonkeh before. This sort of thing just needs to be open source and non-profit, there isn’t even much upkeep to it. At what point will the investors want some form of return?

This is built from the system that created enshittifcation in the first place; a cleaner web is definitely not going to come from a startup.
by nake89 | 2025-11-14 13:23:01+00:00
The universe was very hot in the beginning. It took a while for stars to form. Even longer for planets to form. Even longer for planets to cool down. The early universe was a violent place. Full of destruction. After the protoplanetary disk finally coalesces to planets and when planets finally stopped getting bombarded by meteorites, they could start cooling. In the earlier days of the universe there might have been intelligent life supporting planets wiped out by the chaos of the early universe. We might not be the first. But we might be one of the first. We might be early. The universe might have a bright future ahead of itself in terms of intelligent life. This is all speculation of course.

https://en.wikipedia.org/wiki/Firstborn_hypothesis https://en.wikipedia.org/wiki/Formation_and_evolution_of_the... https://en.wikipedia.org/wiki/Nebular_hypothesis https://en.wikipedia.org/wiki/Protoplanetary_disk

Now you could still say that surely there have been enough time for some advanced civilizations to form. And I would argue that we don't know that. At least we have not detected them, either due our instruments or unwillingness of the intelligent life to communicate to us.

There are of course many other explanations of the Fermi Paradox. But since its all unknown, its basically pick and choose. I choose to pick the nice option. There are however other nice options :) https://en.wikipedia.org/wiki/Fermi_paradox#Hypothetical_exp...
by ColonelPhantom | 2025-11-14 13:23:19+00:00
I don't think it's true that anything is architecturally or fundamentally broken in Wayland (though if you disagree, I'm very curious what you think is so deeply broken).

Most of the issues and slow adoption were because the core protocol was deliberately kept extremely minimal, and agreeing on all the needed extensions took a long time. Don't take it from me, but rather from KDE developer Nate Graham: https://pointieststick.com/2023/09/17/so-lets-talk-about-thi...

As such, anyone who tried it early probably had to deal with a pretty large amount of non-working stuff, but by now the platform is capable of most features people require and the biggest remaining bottleneck is that software needs to use these new APIs.
Show HN: Vibe Capsule – Turn your music into shareable apps that work offline
by hunterirving | 2025-11-14 13:24:09+00:00
Lately I've been thinking about the mix CDs I used to burn for friends. Building the perfect mix for someone took a lot of time and intention, but it was a great way to expose friends to the rare musical gems I'd discovered, and sometimes, they even returned the favor.

In the transition from physical mixtapes to cloud-hosted playlists, we stopped giving each other digital things. These days, we mostly point to things that we don't control.

But our custom of gift-giving can be restored, if we restore the structures that enabled it.

Vibe Capsule is my answer to this problem. Drop some .mp3s into a folder, run some python scripts, and your playlist gets packaged as a Progressive Web App. Upload the resultant "mixapp" to any HTTPS-enabled host, and your friends can install it to their home screens with just a few taps.

After the initial download and cache, mixapps work completely offline on any device (iOS, Android, desktop). No subscriptions, platform dependencies, or "this song is no longer available in your region." The files are in the computer!

It's a return to the practice of giving digital gifts, rather than pointers to corporate infrastructure.

Source code: https://github.com/hunterirving/vibe_capsule

Live demo: https://hunterirving.com/vibe_capsule
by faizshah | 2025-11-14 13:24:33+00:00
This isn’t true anymore we are way beyond 2014 Hadoop (what the blog post is about) at this point.

Go try doing an aggregation of 650gb of json data using normal CLI tools vs duckdb or clickhouse. These tools are pipelining and parallelizing in a way that isn’t easy to do with just GNU Parallel (trust me, I’ve tried).
by andout_ | 2025-11-14 13:25:19+00:00
1. You can configure your services to be cohosted on computes, and each environment can be configured independently. Encore also provides free hosting through Encore Cloud Hosting

2. The `encore run` command automatically starts local emulators for your infrastructure and starts the app as a single binary.

3. Encore uses static analysis to determine not only what infrastructure is used, but also what uses it. Based on these requirements we provision relevant VPCs, subnets, IAM Roles, SQL users, Security Groups etc. using best practices for each cloud provider. The specifics depend on how you configure each environment, and you can inspect all provisioned resources in your cloud console (and require approval for new cost-bearing infrastructure, and so on and so forth)
by constantcrying | 2025-11-14 13:25:29+00:00
I am a German. I know more about the sexual norms in my country than you.

FKK is something which is always associated with the boomer generation, which got their sexual norms from the American hippie culture. The whole thing is part of the "Sexboomer" phenomenon, which most of the younger generation see as extremely disgusting and creepy behavior. If you find younger people there (young meaning younger than 60) they are almost always lower class people, who like to indulge in these sexual fantasies, because they have nothing else going on in their life. If you are part of the Bürgertum, roughly "middle-class", and under 40, you want nothing to do with this. Attending is something you would keep secret and admitting it would be extremely shameful and you would get ridiculed for it.

Please stop telling me what the sexual norms in my country are. In so many replies have I seen lies about this, which totally disregard how sexuality is viewed and lived out.
by scottkosman | 2025-11-14 13:25:59+00:00
There's a lot that's been written about AI use for software developers, not as much for engineering managers. Here's a primer for those of us who don't write as much code and instead spend our time in Notion, Google Docs, spreadsheets, Zoom calls, and slide decks. It also includes a gentle little swipe at Tobi Lütke.
by embedding-shape | 2025-11-14 13:26:19+00:00
People generally sleep when you start talking about fine-tuned BERT and CLIP, although they do a fairly decent job as long as you have good data and know what you're doing.

But no, they want to pay $0.1 per request to recognize if a photo has a person in it by asking a multimodal LLM deployed across 8x GPUs, for some reason, instead of just spending some hours with CLIP and run it effectively even on CPU.
by port3000 | 2025-11-14 13:26:42+00:00
> Overall, the threat actor was able to use AI to perform 80-90% of the campaign, with human intervention required only sporadically (perhaps 4-6 critical decision points per hacking campaign). The sheer amount of work performed by the AI would have taken vast amounts of time for a human team. At the peak of its attack, the AI made thousands of requests, often multiple per second—an attack speed that would have been, for human hackers, simply impossible to match.

Weird flex but OK
by ForHackernews | 2025-11-14 13:26:44+00:00
This an interesting idea, but I'd be skeptical of having this much coupling between application code and infrastructure. It's like an anti-12 Factor App.

It might make sense for something like a "serverless" app where the units of the business logic are intended to map directly onto cloud provider entities.

It reminds me of https://aws.github.io/chalice/ but cloud-agnostic and Typescript in place of Python
by ColonelPhantom | 2025-11-14 13:26:47+00:00
Where is this Wayland black box then? If anything, Wayland made this situation significantly better: the X11 server was exactly this 'single point of failure black box' you are describing. Wayland replaces this with a much simpler protocol with multiple independent implementations (notably Mutter/gnome-shell, KWin, wlroots-based ones such as sway, and Smithay-based ones such as niri).
by perihelions | 2025-11-14 13:27:04+00:00
Hold up—where do you get the assessment that LandSpace "is not state funded" and that these startups have "quite limited funds"? My understanding is the diametric opposite. Here's WSJ:

> "At least six Chinese rockets designed with reusability in mind are planned to have their maiden flights this year. In November, the country’s first commercial launch site began operating. Beijing and local governments are giving private-sector companies cash injections of billions of dollars."

https://www.wsj.com/world/china/chinas-own-elon-musks-are-ra...

( https://archive.is/Ukmoa )

This is a national security priority for the Chinese state, which is why it's rational to expect a heavy amount of state support.
by doubled112 | 2025-11-14 13:27:25+00:00
This sounds super familiar.

At one job I was the only IT person and we had ~250 plain boring VMs on some bare metal Linux/KVM hosts. No config management. No Kubernetes. I fixed that quickly. There was one other guy capable of taking a look at most of it.

I was also doing the software builds and client releases, client support, writing the documentation for the software, and fixing that software.

I suspect we would have had no problem scaling up with some better tooling. Imagine a team of 150? When people tell me things like that, it sounds more like the solution isn't much of a solution at all.
by aziaziazi | 2025-11-14 13:28:05+00:00
Well if you're going to argue with words, there was one Holocaust but many holocausts:

> Extensive destruction of a group of animals or (especially) people; a large-scale massacre or slaughter.

However it's discussed if "Holocaust" is a good term to describe the Shoah:

> This use of the term has been criticised because it appears to imply that there was a voluntary religious purpose behind the Nazi actions

https://en.wiktionary.org/wiki/holocaust
by JohnFen | 2025-11-14 13:28:41+00:00
While I don't think that entrepreneurs have a "special gene for risk", this article is extremely misleading. It's looking just at the moneyed class of entrepreneurs and declaring that "entrepreneurs come from backgrounds that provide a lot of resources".

But there's another, much larger, group of entrepreneurs that don't come from such a background at all. I've had the good fortune to get to know and work with quite a lot of successful entrepreneurs and I'd say about 25% of them came from a "moneyed" background. The rest were just regular people with regular backgrounds who were obsessive about starting businesses.
by bborud | 2025-11-14 13:28:42+00:00
I'd object to the notion of a free market. Free and fair markets don't actually exist in the way we like to think. Pretty much every kind of business I've been involved in has different strata of rules for different players.

Try to set up a HFT business. Or try to do anything interesting in telecom. Once you have cleared the capital and regulatory hurdles what kills you is that you need special relationships.

In this case, I doubt this product would become a success without the two brand names behind it, and completely astronomical amounts of financial might. They will sell literal tons of these even if people ultimately find out that they are junk. On its own, this is a bargain bin-liner.
by vibe_assassin | 2025-11-14 13:30:12+00:00
I am a fan of helm. The templating language can be pretty ugly sometimes, but your helm charts can be as simple as you want, and the basic functionality along with dependencies work fine. Some of my helm charts are basically just straight K8s manifests with minimal templating. I like helm because it lets me encapsulate a deployment in a single package, if I want to add some insane templating logic, that's on me.
by datax2 | 2025-11-14 13:30:21+00:00
Warranty data is a great example of where LLMs have evolved bureaucratic data overhead. What most people do not know is because of US federal TREAD regulation Automotive companies (If they want to land and look at warranty data) need to review all warranty claims, document, and detect any safety related issues and issue recalls all with an strong auditability requirement. This problem generates huge data and operations overhead, Companies need to either hire 10's if not hundreds of individuals to inspect claims or come up with automation to make this process easier.

Over the past couple of years people have made attempts with NLP (lets say standard ML workflows) but NLP and word temperature scores are hard to integrate into a reliable data pipeline much less a operational review workflow.

Enter LLM's, the world is a data gurus oyster for building an detection system on warranty claims. Passing data to Prompted LLM's means capturing and classifying records becomes significantly easier, and these data applications can flow into more normal analytic work streams.
by gassi | 2025-11-14 13:31:09+00:00
I watched the most popular and most recent videos of each channel to compare, and they were all awful:

> Bots in the Hall

* voices don't match the mouth movements * mouth movements are poorly animated * hand/body movements are "fuzzy" with weird artifacts * characters stare in the wrong direction when talking * characters never move * no scenes over 3 seconds in length between cuts

> Neural Viz

* animations and backgrounds are dull * mouth movements are uncanny * "dead eyes" when showing any emotions * text and icons are poorly rendered

> The Meat Dept video for Igorrr's ADHD

This one I can excuse a bit since it's a music video, and for the sake of "artistic interpretation", but:

* continuation issues between shots * inconsistent visual style across shots * no shots longer then 4 seconds between cuts * rendered text is illegible/nonsensical * movement artifacts
by Scubabear68 | 2025-11-14 13:31:31+00:00
This is a really good observation, and matches something I had to learn painfully over 30 years ago. At a Wall Street bank, we were trying to really push the limits with some middleware, and my mentor at the time very quietly suggested "before you test your system's performance, understand the theoretical maximum of your setup first with no work".

The gist was - find your resource limits and saturate them and see what the best possible performance could be, then measure your system, and you can express it as a percentage of optimal. Or if you can't directly test/saturate your limits at least be aware of them.
by PetitPrince | 2025-11-14 13:31:50+00:00
Fortunately while Squarenix is still important to Playtstation (and Tetsuya Nomura to Squarenix), it's not the juggernaut it once was in the early 2000.

(for those who don't get it: Tetsuya Nomura is a director at Squarenix and known (amongst other) for its Kingdom Heart series who ends up with word salad title such as "Kingdom Hearts HD 2.8 Final Chapter Prologue" or "Kingdom Hearts 358/2 Days")
by thinkharderdev | 2025-11-14 13:31:59+00:00
> It's good to know that OOTB duckdb can replace snowflake et all in these situations, especially with how expensive they are.

Does this article demonstrate that though? I get, and agree, that a lot of people are using "big data" tools for datasets that are way too small to require it. But this article consists of exactly one very simple aggregation query. And even then it takes 16m to run (in the best case). As others have mentioned the long execution time is almost certainly dominated by IO because of limited network bandwidth, but network bandwidth is one of the resources you get more of in a distributed computing environment.

But my bigger issue is just that real analytical queries are often quite a bit more complicated than a simple count by timestamp. As soon as you start adding non-trivial compute to query, or multiple joins (and g*d forbid you have a nested-loop join in there somewhere), or sorting then the single node execution time is going to explode.
by andout_ | 2025-11-14 13:31:59+00:00
I haven't heard about Alchemy before, but from skimming their docs it looks like Terraform/Pulumi in code form where you explicitly configure infrastructure. Whereas with Encore, you define what you need directly in your application code (databases, pub/sub topics, cron jobs as type-safe objects), and Encore handles provisioning across all environments. Plus you get local development tools, distributed tracing, and automatic API documentation out of the box. The key difference is the toolbox you get + the fact that you're writing application logic, not infrastructure config.
by notedis | 2025-11-14 13:32:05+00:00
Freelance developer tired of vague client bug reports. "Something's broken" became my least favorite email. Looked at Marker.io ($60/mo) and UserSnap ($50/mo). Great products, but my small business clients couldn't justify the cost. So I built Notedis. Click on site → leave feedback → I get emailed with screenshot + context. $20/mo. Using it myself. A handful of beta users. Still figuring out if anyone besides me actually needs this or if I just built an expensive solution to a personal problem.

Open to roasts/feedback.

https://notedis.com
by KronisLV | 2025-11-14 13:32:16+00:00
> What is missing is an open source orchestrator that has a feature freeze and isn't Nomad or docker swarm.

Running Docker Swarm in production, can't really complain, at least for scales where you need a few steps up from a single node with Docker Compose, but not to the point where you'd need triple digits of nodes. I reckon that's most of the companies out there. The Compose specification is really simple and your ingress can be whatever web server you prefer configured as a reverse proxy.
by block_dagger | 2025-11-14 13:32:26+00:00
Concerning cats, I'm specifically talking about imprisonment and mutilation. Cats are social roaming animals and many are kept staring out windows of small apartments and run for the door every time it's opened hoping for escape. Mutilation occurs regularly to keep them from procreating. All of this is socially accepted by humans. If a cat is running around free and being fed and sheltered by humans, no problem, but obviously this can lead to issues with feral populations that don't mix well with civic engineered spaces.
by olooney | 2025-11-14 13:32:37+00:00
This isn't surprising; the majority of programmers are using LLMs, and Claude is pretty good for coding. Penetration testing is also a pretty good fit for an agentic loop - you run a tool, read the output, and decide on your next move, rinse and repeat.

In VSCode + GitHub Copilot, agent mode it can propose bash command to run, and when you confirm it runs it in a console and can see the loop, so it can fix errors immediately if any. It tends to go off the rails pretty quickly if things start going badly wrong, but it can complete simple tasks with supervision.

Over two years ago, when this LLM stuff was pretty new, I saw a demo that put ChatGPT in a loop with Metasploit that could crack some of the easy HTB challeges automatically - I remember thinking it was the single most irresponsible use of AI I'd ever seen. While everybody else was trying to sandbox these things for safety, this project was just handing it command line access to the tools it would need to break confinement.

It seems there's actually a whole bunch of similar tools these days, marketed as "automated penetration testing," such as Cybersecurity AI[1]. I used to think the whole cyberpunk "hackers can get in anywhere if they just type hard enough" trope was stupid because with cryptography the defender always has a huge advantage, but now we're looking at a world where AI is automating attacks at scale, while the defenders are vibe coding slop they have no idea how to secure, so maybe Gibson was right all along.

[1]: https://github.com/aliasrobotics/cai
by thunky | 2025-11-14 13:32:54+00:00
> Isn't it amazing that all our jobs are being gutted or retooled for relying on this tech

No not really, if you examine what it's replacing. Humans have a lot of flaws too and often make the same mistakes repeatedly. And compared to a machine they're incredibly expensive and slow.

Part of it may be that with LLMs you get the mistake back in an instant, where with the human it might take a week. So ironically the efficiency of the LLM makes it look worse because you see more mistakes.
by zbentley | 2025-11-14 13:33:54+00:00
Correction on my first bullet, regarding tagged pointers. The link was wrong (mistaken duplication of the link used above), and the tagged pointer optimization is not present in CPython, but only in PyPy, so it largely does not pertain to this discussion: https://doc.pypy.org/en/latest/config/objspace.std.withsmall...