MurphyA/hacker-news huggingface dataset:
by sebbecai | 2025-11-13 16:09:27+00:00
For non thinking/agentic models, they must 1-shot the answer. So every token it outputs is part of the response, even if it's wrong.

This is why people are getting different results with thinking models -- it's as if you were going to be asked ANY question and need to give the correct answer all at once, full stream-of-consciousness.

Yes there are perverse incentives, but I wonder why these sorts of models are available at all tbh.
by cryptonector | 2025-11-13 16:09:38+00:00
I don't understand why having to "grep through the templates" is so bad. Oh, I get it, you just want to know what knobs are available for tweaking, and in a well-designed chart those will all be segregated in values files, with overrides specified on the command-line as needed. And so that's what documentation is for, and if a chart does not surface certain knobs from the product, well, yeah, you'll have to modify the chart if you want it to.

What is the essence of the complaint here? That chart authors do poor jobs? That YAML sucks (it does! it so so does!)? Just that charting provides an abstraction you'd rather not have? (If so, why not just... not use Helm?) Something else?
by potato3732842 | 2025-11-13 16:09:57+00:00
>Is that typical in the industry, parts or components being glued onto an exterior surface instead of fastened?

Yes. If automotive OEMs can glue it they will.

It's just that other OEMs don't build uninterrupted 5ft light bars so glueing is a much less suitable (think about how much glue contact patch per amount of light bar there is and how little leverage it's mass has over the glue, contrast with normal light) solution for them.
by vinckr | 2025-11-13 16:10:50+00:00
It depends what your requirements are.

If you are "just" doing first-party login, session, and user mgmt then Ory Kratos is all you need. I would say in the majority of cases you would be fine with just Ory Kratos.

If you want 3rd party integrations, or become an IDP (think "login with $yourcorp"), or you migrate an existing system that relies on OAuth2 that you want to keep, or you have more complex auth flows where OAuth2 shines, then you want Ory Hydra.

If you want a "fine-grained" global, centralized authz system, complex and scalable authz as described by Google Zanzibar, then you want Ory Keto.

If you want to support SAML as well, you want Ory Polis.

If you want a "zero trust" setup, then you want Ory Oathkeeper.

That being said in almost all cases Kratos will be fine and you can pick and choose what you actually need.
by m_w_ | 2025-11-13 16:10:56+00:00
I can't speak to the content of the actual game being played, but it wouldn't surprise me if there was an in-game text prompt:

> "The house that looks like a ripe tomato!"

that was transformed into a "user prompt" in a more instructional format

> "Go to the tomato house"

And both were used in the agent output. At least the Y-axes on the graphs look more reasonable than some other recent benchmarks.
by Nair0 | 2025-11-13 16:11:04+00:00
I personally am of the same opinion that I, and honestly most people, can't focus on two serious "time sinks" at once, it's bound for one of them to get less attention in the long run and maybe even failing at both if enough bad decisions are made.

I didn't ever consider your other statement though, and it actually makes so much sense. When I quit my job I had so much saved up and still thought it might not be enough, still being on the edge on whether I should wait more or not. But since I knew I had enough, I made a lot of mistakes in my first project, didn't pay enough attention to inefficient code, which eventually made me pay roughly 8 times more than I should per month on some backend infrastructure. I'm honestly just now realizing that the thought of knowing I had enough saved up was probably what made me work so inefficient at first. I fixed most of those issues after some time, but I think that's really sound advice to keep in mind moving forward.
by Thorrez | 2025-11-13 16:11:24+00:00
Facebook was hacked in 2013. Attacker used a Java browser exploit to take over employees' computers:

https://www.reuters.com/article/technology/exclusive-apple-m...

Facebook was also hacked in 2018. A vulnerability in the website allowed attackers to steal the API keys for 50 million accounts:

https://news.ycombinator.com/item?id=18094823
by networked | 2025-11-13 16:11:36+00:00
No. age developer Filippo Valsorda has experimented with Kyber/ML-KEM and maintains a Go library for it, https://github.com/FiloSottile/mlkem768. The public key size is intimidating.

https://x.com/FiloSottile/status/1544803635237998592 (2022-07-06):

> A Kʏʙᴇʀ768+X25519 recipient would clock in at about 1660 characters.

> Classic X25519 age recipient for scale.

> https://paste.dbohdan.com/1mhc0nc-w7ks3/recipient.png [Alt text: A terminal window. The classic recipient on the first line takes about 2/3 of a line. The PQC one takes 16 lines.]
by embedding-shape | 2025-11-13 16:11:44+00:00
That's because "certain" and "know the answer" has wildly different definitions depending on the person, you need to be more specific about what you actually mean with that. Anything that can be ambiguous, will be treated ambiguously.

Anything that you've mentioned in the past (like `no nonsense`) that still exists in context, will have a higher possibility of being generated than other tokens.
by toomuchtodo | 2025-11-13 16:12:45+00:00
I tried with much effort to import a BYD, and the federal government slowed me down every step of the way to where I gave up around regime change last November. If you have a way I can buy a BYD today, regardless of cost, in the US, I would be interested.

https://news.ycombinator.com/item?id=39992428
by VikingCoder | 2025-11-13 16:13:21+00:00
It depends entirely on the game.

For a AAA modern game, you're right - of course not.

But remember, they're saying this thing is six times as powerful as the Steam Deck.

That sounds like it might be able to handle 4 players running at about as good as on the Steam Deck.

And that's ignoring the whole idea of the server running on the Steam Machine, and custom clients running on everyone's Steam Frames. That would give you even more compute power.

I like the idea that the Steam Frame, in this "Living Room" scenario, doesn't even need to do network prediction. It just blasts game state to each of the clients.

So what, there's multi-player games on the same TV, like Goldeneye 64.

There's LAN games.

And now there's maybe a new category... Living Room, Multi-Screen games?
by tptacek | 2025-11-13 16:13:33+00:00
I've done similar work and would not describe myself as a cryptography engineer, just a systems person with a security specialization. (I've been pretty consistent about this point on HN, this isn't just something I'm saying because it's convenient for the thread).

When you worked with those cryptographers, did any of them stick up for PGP? Which ones? I'm not making up the attitude I'm describing.

How do you respond to the PGP format points raised in that post? How do you respond to the prevalence of the MDC construction?
by vel0city | 2025-11-13 16:13:33+00:00
Tons of cars made by companies other than Tesla have some parts attached by adhesives. Lots of decorative trim pieces and reflectors may be attached with adhesives instead of screws. Its not like there are a lot of screws involved in attaching windshields. There have been other companies with recalls related to adhesive failures, but it seems Tesla has adhesive failures far more frequently than others and seems to use adhesives for a lot more of their body parts.
by kaishiro | 2025-11-13 16:13:46+00:00
We use GitLab on the daily. Roughly 200 repos pushing to ~20 on any given day. There have been a few small, unpublished outages that we determined were server side since we have a geo-distributed team, but as a platform seems far more stable than 5-6 years ago.

My only real current complaint is that the webhooks that are supposed to fire in repo activity have been a little flaky for us over the past 6-8 months. We have a pretty robust chatops system in play, so these things are highly noticeable to our team. It’s generally consistent, but we’ve had hooks fail to post to our systems on a few different occasions which forced us to chase up threads until we determined our operator ingestion service never even received the hooks.

That aside, we’re relatively happy customers.
by mnky9800n | 2025-11-13 16:14:03+00:00
No company will land it building attention based transformers. They simply don't do what people say they do. They are very powerful and I love using claude code every day at work. But they aren't going to become autonomous androids because they don't even respect what little we know about cognitive science. I think that what is more exciting across all of this work is that many of these models are a strong increment forward in predicting physical systems which means we can have more accurate and more complex control systems for manufacturing, transport, etc. You can use transformers to take a super computer scale weather model and run it on a desktop GPU. That is rather impressive imo.
Show HN: Stockfisher –– our automated Warren Buffett
by ddp26 | 2025-11-13 16:14:14+00:00
Hey HN, I’m Dan. I’ve been working on forecasting for the last six years at Google, then Metaculus, and now at FutureSearch.

For a long time, I thought prediction markets, “superforecasting”, and AI forecasting techniques had nothing to say about the stock market. Stock prices already reflect the collective wisdom of investors. The stock market is basically a prediction market already.

Recently, though, AI forecasting has gotten competitive with human forecasters. And we’ve found a way of modeling long-term company outcomes that is amenable to our forecasting approach.

Iteration by iteration, my skepticism has turned to light distrust, and then into actually getting value out of our company forecasts. Like most AI companies, we draw from improvements against our LLM-agent benchmarks, Deep Research Bench and Bench to the Future.

But at the end of the day, to evaluate it, I think it’s best to follow Charlie Munger’s advice: try to disprove what Stockfisher says. Now, even after an hour of carefully reading through a stock, I generally can’t find any major flaws, and I hear the same from other serious investors.

And, since it’s software, not human analysis, we applied it at scale. We have long-term forecasts for revenue, margins, and payout ratios for every company in the S&P 500.

We do a Buffett-style intrinsic valuation, that doesn’t take the stock price into account. This means you can sort by the difference between what the stock market says, and what Stockfisher says. Some very interesting neglected companies rise to the top, and we’re starting to process the mid-caps and small-caps too.

Stockfisher is live at https://platform.stockfisher.app, no sign in required, to see what we have on the top stocks. (I was happy to see Alphabet comes out well. Meta looks good too, but Amazon and Apple do not.) I would love for you to judge for yourself if the quality of analysis is up to your standards.
by SubuSS | 2025-11-13 16:14:22+00:00
What you want to do is encrypt/anonymize per user information using a translation layer that also gets backed up. In case of a gdpr request, you delete this mapping / key and voila: data cleanup. The backup data becomes unusable.

But this obviously means building an extensive system to ensure the encoded identifier is the only thing used across your system (or a giant key management system).

In the past I’ve been a part of systems at exabyte scale that had to implement this. Hard but not impossible. I can see how orgs try to ‘legalese’ their way out of doing this though because the only forcing function is judicial.
by walletdrainer | 2025-11-13 16:15:12+00:00
Yes, but your concerns are less rooted in reality and more in the fact that you find the idea of paying ransomware groups repulsive. That’s fine, but there’s rational analysis to be done here, and it often leads to paying being the best option.

If your company gets hit by one of these groups and you want to protect your customers, paying is almost always the most effective way to do that. Someone who isn’t particularly interested in protecting their customers probably wouldn’t pay if the damage from not paying would be lower than the cost of paying.

A third possibility is that you simply feel uncomfortable about paying, which is fine, but it isn’t a particularly rational basis for the decision.

I think we can also fairly assume that the vast majority of people have no strong feelings about ransomware, so there’s likely going to be no meaningful reputational damage caused by paying.
by saghm | 2025-11-13 16:15:24+00:00
My theory for a bit now has been that Valve is playing the long game in trying to make SteamOS a mainstay gaming platform as an alternative to Windows, and that the hardware products are essentially a way of breaking into that market. Even a few years ago, the idea of a custom Linux distro based on Arch Linux with both a built-in full desktop mode and a lower-powered gaming mode that you could switch between on a handheld device would have sounded kind of crazy, but now we're at the point where it's fully supported on more than one vendor's hardware. This seems like it could be a similar play in the traditional desktop space; if they can prove that the concept is viable, maybe other vendors will come out with similar products that come with SteamOS by default. All of this insulates them from having to worry about the long-term sustainability of making money from game sales on Windows, and if it works out, they wouldn't even necessarily have to continue making hardware indefinitely.

I don't pretend to have any insight into whether this theory is correct beyond that it seems to track with what they've been doing lately, or any expertise to make claims about whether it will work or not. In a lot of ways, this might just be a projection of my desires as a gamer who enjoys not having had to boot into Windows to play something for quite a few years at this point. I do hope that maybe they're just crazy enough to not only try this, but pull it off though!
by blinkingled | 2025-11-13 16:15:31+00:00
> Tesla’s fix will involve an additional redundancy to keep the lightbar affixed to the windshield, should the glue fail.

Good news - it only affects 6000 vehicles with the optional lightbar which is dealer installed. Bad news - Tesla finds it ok to let its dealers do glued lightbar installations and can't really fix the glue failing part so they are adding redundancy.
by maratc | 2025-11-13 16:15:47+00:00
My argument is that “digital ids can’t be faked” is a bad argument, and if you rely on it to prove a point then it might be a weak proof.

(Digital IDs indeed can’t be faked but usually they are a part of a process that can be easily bypassed by using something that presents itself as a valid Digital ID even if it’s not.)
by inglor_cz | 2025-11-13 16:15:51+00:00
"I assume you're talking about 18-22, but my impression is that historically, most women had their first children after that age, even before widespread college education."

In cities and in richer families, yes. In rural settings, everything was sped up a bit, and, until very recently, most population worldwide was rural. Even if we look at highly fertile regions today (Afghanistan, Niger, Chad...), the first-time mothers tend to be between 16 and 18 and live outside the few cities that are there.

My own grandmother grew up in a rather underdeveloped corner of Slovakia in the 1930s (no electricity, wooden huts etc.), and a peasant girl who wouldn't be at least betrothed by 20 was seen as a bit weird.

Quite a lot of our previous fecundity was driven by rural mothers having six or seven children. This was a major source of "kid surplus". The urban population was never as fertile, plus there was some extra mortality from diseases and higher cost of food.
by anamax | 2025-11-13 16:16:14+00:00
> The US doesn't really see Russia as an adversary under Trump.

From the fall of the Berlin wall until the Ukraine invasion, the US saw Russia as more of an adversary than Europe saw Russia.

Yes, even after Russia annexed Crimea. In fact, it's only this year that Europe has started to significantly increase defense spending, three years after Russia invaded Ukraine. And, even then the most aggressive increase plans end up short of where spending was during the Cold War.

Every US president after Clinton (and maybe Clinton as well) urged European countries, especially NATO ones, to keep funding defense and they cut instead.

It turns out that the cowboys were right, that there was a bear in the woods, and that "soft power" wasn't power.
by gchamonlive | 2025-11-13 16:16:16+00:00
Did some research and indeed there is a sort of "honor among thieves" kinda vibes when it comes to ransom attacks.

Still, it's illegal or quite bureaucratic in some places to pay up.

And idk... It still feels like these ransom groups could well sit on the data a while, collect data from other attacks, shuffle, shard and share these databases, and then sell the data in a way that is hard to trace back to the particular incident and to a particular group, so they get away with getting the ransom money and then selling the db latter.

It's also not granted that even with the decrypt tools you'd be able to easily recover data at scale given how janky these tools are.

I don't know. I am less sure now than I was before about this, but I feel like it's the correct move not to pay up and fund the group that struck you, only so it can strike others, and also risk legal litigations.
by golol | 2025-11-13 16:16:22+00:00
The gap between high level and low level control of robots is closing. Right now thousands of hours of task specific training data is being collected and trained on to create models that can control robots to execute specific tasks in specific contexts. This essentially turns the operation of a robot into a kind of video game, where inputs are only needed a in low-dimensional abstract form, such as "empty the dishwasher" or "repeat what I do" or "put your finger in the loop and pull the string". This will be combined with high-level control agents like SIMA 2 to create useful real-world robots.
by righthand | 2025-11-13 16:16:45+00:00
We’re just going to end up with everyone moving from Amazon to Hetzner and the same issue will remain. High prices, lockin, etc will appear.

We need an American “get off American big tech” movement.

Differentiate people! Reading “we moved from X to Y” does not mean everyone move from X to Y, it means start considering the Y values and research other Y’s around you.
by Razengan | 2025-11-13 16:16:49+00:00
Yes sorry about my excessive use of French in the comment, I didn't mean it has to be a fixed 1:1 slab of the realspace screen, desktop app windows in XR space would be ideal, but none of the products seem to be able to get it all right yet.

Apple's visionOS comes close but it's crippled by the trademark Apple overcontrolling.
by jrmg | 2025-11-13 16:17:09+00:00
I agree with you on that - that’s what my last paragraph was trying to convey. I don’t think pennies are necessary, and we are (were) wasting money making them. Nickels and dimes are probably in the same boat.

But I was replying to your reply to a comment which said “I don’t understand why it costing more than face value to mint is such a bad thing” which you antagonistically and derisively called “one of the stupidest comments I have seen on the internet bar none”. It wasn’t a stupid comment.
by tome | 2025-11-13 16:17:10+00:00
That's fine, then the response I was looking for is simply "I didn't mean literally everyone else, I just meant simply 'most people, in most common professions, are underpaid'". That's a perfectly valid point of view.

Then I would have replied that, despite perhaps being true, I don't how it's relevant to the question of whether it's fair to pay train drivers and pilots the same.
by hamdingers | 2025-11-13 16:17:21+00:00
It's strange how neither you nor seemingly any of your replies have heard of the Steam Deck.

Valve sold the Deck at a loss that GabeN himself described as "aggressive and painful," 3rd party estimates put it at $150/unit for the base model.

I see no reason to believe they won't employ the same strategy for the Machine. If I can lodge my own bet, I think they'll price it somewhere between a PS5 digital and pro.
by alephnerd | 2025-11-13 16:17:21+00:00
The political atmosphere following George Floyd and "defund the police", as there was a then somewhat fringe position that standardized testing was racist (yet low income and marginalized Asian communities like Vietnamese and Cambodians and immigrant African communities being able to match or exceed performance of White Californians was ignored) came to the fore, which lead to the politicially easy and popular option of making standardized testing optional.

This lead to a populist overcorrection in California to increase UC admissions from Local Control Funding Formula (LCFF) schools which tended to skew low income and non-white/non-Asian (though plenty of Asians fall under LCFF schools as plenty of Vietnamese, Hmong, and Cambodian Californians can attest).

Ideally, UC and CSU admissions need to be restricted (90th-100th percentile at a UC, 70th-100th percentile at CSU, and everyone else at a CC) in order to push students who need some remedial learning to be provided it at Community Colleges - just like the Warren Plan said when the 3 tiered California Model of Education was developed - but community colleges are perceived as being "lower tier" and breaking barriers is viewed as a quick populist win.

Ironically, it wasn't even mainstream Latiné or African American politicans in California that were driving this policy - it was progressive leaning organizations whose membership are overwhelmingly upper middle class White and Asian Americans who attended Ivies, top UCs, and elite B10s.

Expanding funding and the quality of services provided at the K-12 level would have helped solve the issue in a 5-10 year timeframe, but the populist overreaction now puts actually smart policies like LCFF at risk of being cut due to a populist counter-reaction.

That said, I find it telling that the AEI also doesn't mention that Harvard also doubled down on legacy admissions following the Supreme Court ruling against affirmative action - and admissions for all races other than White dropped at Harvard. That in itself is flagrant hypocrisy in the face of meritocracy.

Furthermore, if we are seeing students who need additional courses to remediate educational issues, I don't necessarily see an issue around offering such academic services in any program - be it Harvard or your local state college. And at least at Harvard, remedial math and English classes had been offered in the 1990s and 2000s.

Both progressive coded policies like "equity" via reduced standards and conservative coded polices like dropping affirmative action hurt meritocracy. To someone like me, it looks like a culture war between White and Black Americans, and those of us who are Indigenous, Asian, or Latiné Americans are catching strays.
by lysace | 2025-11-13 16:17:22+00:00
Just your casual $3.8T company.

There were so many severe Github Actions outages (10+ ?) in the past year. Cause: Migration to the disaster zone also known as Azure, I assume. Most of them happened during (morning) CET working hours, as to not inconvenience the americans and/or make headlines.

Money doesn't buy competency. It's a long-term culture thing. You can never let go on maintaining competency in your organization. It rots if you do. I guess Microsoft did let go.
by LarsDu88 | 2025-11-13 16:17:23+00:00
The data you're sending out is just the position and motion vectors of the pupils. And you probably only need about 16 bits for each of these numbers for 2 eyes. So the equivalent of two floating point numbers along a particular channel or 32 bits at minimum. Any lag can be compensated for by simply interpolating the motion vectors.

It actually makes a lot of sense!