MurphyA/hacker-news huggingface dataset:
by tptacek | 2025-11-06 22:53:11+00:00
Honestly, I didn't think very hard about how to make `ping` do something interesting here, and in serious code I'd give it all the `ping` options (and also run it in a Fly Machine or Sprite where I don't have to bother checking to make sure none of those options gives code exec). It's possible the post would have been better had I done that; it might have come up with an even better test.

I was telling a friend online that they should bang out an agent today, and the example I gave her was `ps`; like, I think if you gave a local agent every `ps` flag, it could tell you super interesting things about usage on your machine pretty quickly.
by henning | 2025-11-06 22:54:14+00:00
Nothing asserted here is simple. And after reading all that it's still hard to design and build a game that will cut through the noise of all the other games coming out on Steam.

It's not a matter of "simple vs. easy". If you have to write many words to list your ideas and you state each idea is deep and connected to all the other ideas, the thing you are talking about is not simple.
by epolanski | 2025-11-06 22:54:21+00:00
I'm European too and I second this, free transport, free childcare or rent freezes are not givens, they aren't even common.

All of those things _tend_ to be free only if you can't afford them, are a single mother/father. Average childcare in my area is 900 euros per month, which is a lot in Italy where average salary is twice than that.

Public one exists, getting in is hard.

As for him claiming to being a socialist I don't find anything wrong/strange with it. US really needs this kind of politicians too.
by mscbuck | 2025-11-06 22:54:21+00:00
Awesome site and speed!

My advice from someone who has built recommendation systems: Now comes the hard part! It seems like a lot of the feedback here is that it's operating pretty heavily like a content based system system, which is fine. But this is where you can probably start evaluating on other metrics like serendipity, novelty, etc. One of the best things I did for recommender systems in production is having different ones for different purposes, then aggregating them together into a final. Have a heavy content-based one to keep people in the rabbit hole. Have a heavy graph based to try and traverse and find new stuff. Have one that is heavily tuned on a specific metric for a specific purpose. Hell, throw in a pure TF-IDF/BM25/Splade based one.

The real trick of rec systems is that people want to be recommnded things differently. Having multiple systems that you can weigh differently per user is one way to be able to achieve that, usually one algorithm can't quite do that effectively.
by floren | 2025-11-06 22:54:54+00:00
> The jury's verdict comes after Customs and Border Patrol agent Gregory Lairmore testified that the snack "exploded all over him" and he "could smell the onions and mustard" on his uniform. [...] "I could feel it through my ballistic vest," he said of the sandwich's impact, adding that an onion string hung from his police radio and mustard stained his shirt.

God, how horrifying. Maybe with time and intensive therapy he'll eventually be able to heal.
by ryanMVP | 2025-11-06 22:55:29+00:00
Thanks for the reply! By "inference provider" I meant someone operating a ComputeNode. I initially skimmed the paper, but I've now read more closely and see that we're trying to get guarantees that even a malicious operator is unable to e.g. exfiltrate prompt plaintext.

Despite recent news of vulnerabilities, I do think that hardware-root-of-trust will eventually be a great tool for verifiable security.

A couple follow-up questions:

1. For the ComputeNode to be verifiable by the client, does this require that the operator makes all source code running on the machine publicly available?

2. After a client validates a ComputeNode's attestation bundle and sends an encrypted prompt, is the client guaranteed that only the ComputeNode running in its attested state can decrypt the prompt? Section 2.5.5 of the whitepaper mentions expiring old attestation bundles, so I wonder if this is to protect against a malicious operator presenting an attestation bundle that doesn't match what's actually running on the ComputeNode.
by threecheese | 2025-11-06 22:55:34+00:00
Does anyone have an understanding - or intuition - of what the agentic loop looks like in the popular coding agents? Is it purely a “while 1: call_llm(system, assistant)”, or is there complex orchestration?

I’m trying to understand if the value for Claude Code (for example) is purely in Sonnet/Haiku + the tool system prompt, or if there’s more secret sauce - beyond the “sugar” of instruction file inclusion via commands, tools, skills etc.
by tptacek | 2025-11-06 22:56:02+00:00
That's one legit answer. But if you're not stuck in Claude's context model, you can do other things. One extremely stupid simple thing you can do, which is very handy when you're doing large-scale data processing (like log analysis): just don't save the bulky tool responses in your context window once the LLM has generated a real response to them.

My own dumb TUI agent, I gave a built in `lobotomize` tool, which dumps a text list of everything in the context window (short summary text plus token count), and then lets it Eternal Sunshine of the Spotless Agent things out of the window. It works! The models know how to drive that tool. It'll do a series of giant ass log queries, filling up the context window, and then you can watch as it zaps things out of the window to make space for more queries.

This is like 20 lines of code.
by arjie | 2025-11-06 22:56:02+00:00
So long as the money comes out of their state and local taxes, it's a worthwhile effort. Then once they've proven it, we can take it broader. To be honest, federal income taxes should go down and we should let the states and cities take a far more active role in tax collection and execution of policy.

There's obviously the failure mode of California where no town wants to have new homes and all of them want jobs, so perhaps the state is the right level for this.
by avianlyric | 2025-11-06 22:56:08+00:00
This is hardly a new problem that only appears in the cloud. Any bank that offers a private secure storage facility I.e. a safety deposit box, or anyone that offers a PO Box service is also exposed to the same risk.

But both of these services exist, and have existed for hundreds of years, and don’t require service providers to go snooping though their customer’s possessions or communications.
Show HN: V-R-C-R AI Memory Compression Engine 75-85% Compression,Patent-Pending
by kovaljubo | 2025-11-06 22:56:12+00:00
I've built Memory Layer V-R-C-R, an AI memory compression engine specifically designed for LLM conversation history storage.

Key features: - 75-85% compression (vs. 25-40% for vector DBs) - Sub-10ms processing - Tiered compression (HOT/WARM/COOL/COLD) - Cross-recall technology (network effects) - Production-ready, enterprise-grade

Live demo: https://memorylayer-vrcr.netlify.app

The technology is patent-pending
by sswatson | 2025-11-06 22:56:20+00:00
As the name indicates, a demo is used for demonstration purposes. A personal tool is not a demo. I've seen a handful of folks assert this definition, and it seems like a very strange idea to me. But whatever.

Implicit in your claim about the cost of errors is the idea that LLMs introduce errors at a higher rate than human developers. This depends on how you're using the LLMs and on how good the developers are. But I would agree that in most cases, a human saying "this is done" carries a lot more weight than an LLM saying it.

Regardless, it is not good analysis to try to do something with an LLM, fail, and conclude that LLMs are stupid. The reality is that LLMs can be impressively and usefully effective with certain tasks in certain contexts, and they can also be very ineffective in certain contexts and are especially not great about being sure whether they've done something correctly.
by lelanthran | 2025-11-06 22:56:46+00:00
> Spend $2k+ upfront to build a machine to run models locally.

You said this was in the context of a gaming rig. You're not spending an extra $2k on your gaming rig to run models locally.

If you're building a dedicated LLM machine OR you're using less compute than you are paying the provider for, then, yup - $20/m is cheaper.

When you start using the model more, or if you're already building a gaming rig, then it's going to be cheaper to self-host.
by akavi | 2025-11-06 22:56:54+00:00
The bus (and the subway) in NYC are also already heavily subsidized. There is also already heavily subsidized childcare in NYC (3k, preK).

The article in general takes the approach of listing a small handful of (usually very small) polities that have one of Mamdani's proposed policies, and then claim that the full suite is therefore "normal" across Europe.
by simplesagar | 2025-11-06 22:58:03+00:00
I feel the CLI vs MCP debate is an apples to oranges framing. When you're using claude you can watch it using CLI's, running brew, mise, lots of jq but what about when you've built an agent that needs to work through a complicated API? You don't want to make 5 CRUD calls to get the right answer. A curated MCP tool ensures it can determinism where it matters most.. when interacting with customer data
by CraftThatBlock | 2025-11-06 22:58:03+00:00
Generally, that's pretty much it. More advanced tools like Claude Code will also have context compaction (which sometimes isn't very good), or possibly RAG on code (unsure about this, I haven't used any tools that did this). Context compaction, to my understanding, is just passing all the previous context into a call which summarizes it, then that becomes to new context starting point.
by toomuchtodo | 2025-11-06 22:58:05+00:00
It turns out that wide swaths of the electorate are some combination of ignorant, uneducated, and low functioning with a tad of fear thrown in. It’s unfortunate.

Kentucky voters were wondering why polls weren’t open Tuesday to vote in these elections, for example, so someone being wildly misinformed about policy proposals or their mechanics would come as no surprise.

https://www.yahoo.com/news/articles/kentucky-politician-had-...

https://x.com/KYSecState/status/1985734353515671601

> We’re getting calls about polls being closed. They are closed because we do not have elections today. Kentucky votes next year. You cannot vote today in Kentucky for the mayor of New York City or the Governor of Virginia. Sorry. — Michael Adams, KY Secretary of State
by mytailorisrich | 2025-11-06 22:58:18+00:00
I think a big issue some Americans have is that they think socialism is great because it is the European model.

1. Europe is not socialist (Eastern Europe and the USSR were). And, no, social-democracy is NOT socialism.

2. The welfare state is essentially bankrupt in many European countries.

3. Socialism cannot, ultimately be democratic.

My only sane interpretation for an election of a socialist candidate in 2025 is that this is a protest vote not an adhesion to socialism...
by afavour | 2025-11-06 22:58:32+00:00
> If you have no say in how much you are taxed

Which New Yorkers do, because they just voted.

I guess I did miss the point because from where I’m standing this is all a big non sequitur.

“Mamdani seeks to raise taxes and spend the revenue on subsidizing services used by all. This is similar to an approach seen often in Europe”

“Did you know that if you tax people too much they revolt”

…okay?
by redwall_hp | 2025-11-06 22:58:47+00:00
The opposite: it's mandated that you not do data collection and tracking for reasons except those essential for the company to provide the product or service, absent informed consent. (And this is purely for tracking: cookies used for maintaining preferences or other state are fine.)

The banners are a fig leaf for behavior that violates the spirit of the GDPR, creating an aggravation where the simplest way to dismiss them is by agreeing.

Any site that doesn't offer a button to reject the tracking (with no more stops than angreeing) and still function as expected without the tracking, is in violation of the law.
by thaumasiotes | 2025-11-06 22:59:26+00:00
I think the complaint people are voicing in the HN thread is fairly straightforward, but it's being phrased in many different ways because the concept isn't viewed positively in American culture: Kiki, in her attempt to respond, has used an inappropriate level of linguistic formality.

More specifically, she's used a level of formality below what would be appropriate for most communication between strangers. Someone speaking in an official capacity (almost anywhere) who went much more informal than that would be at serious risk of getting fired. There's a similar effect to what was complained about in this meme tweet: https://xcancel.com/cherrikissu/status/972524442600558594

> Can websites please stop the trend of giving error messages that are like "OOPSIE WOOPSIE!! Uwu We made a fucky wucky!! A wittle fucko boingo! The code monkeys at our headquarters are working VEWY HAWD to fix this!"

Forced cheerfulness and fictional intimacy are a bad call as a response to "after having 20 years of contributions overridden without warning, we can no longer work with you". That's true regardless of whether the complaint is meant as a dramatic opener to a negotiation or as a severing of relations.
by hombre_fatal | 2025-11-06 22:59:51+00:00
Now that I'm not only using a Macbook and iPhone, I've been looking for cross-platform solutions.

For a week I've been using KeePassXC + Syncthing between four devices. Syncthing is also syncing my Obsidian vaults which has replaced Apple-only Notes.app.

Bitwarden is definitely more polished, and Syncthing is definitely (much) more fiddly than using Bitwarden's and Obsidian's ($5/mo) native syncing tools.

But I like the idea of having the same syncing solution across all apps on all devices. Curious if anybody can recommend this setup or if collisions will make it unbearable.
by ZeroGravitas | 2025-11-06 23:00:30+00:00
NYC also ran a free bus pilot program recently:

https://www.mta.info/guides/riding-the-bus/fare-free-bus-pil...

> From September 24, 2023 to August 31, 2024, five MTA bus routes — Bx18A/B, B60, M116, Q4, and S46/96 — were fare-free. Passengers on these routes were able to ride without paying the fare.

> The purpose of the pilot was to study how fare-free service affects ridership, access, equity, and fare evasion. It was made possible thanks to funding from the New York State FY2024 budge
by observationist | 2025-11-06 23:00:33+00:00
I always answer no to these type of situations, under the slight hope that maybe enough people will say "no" that it forces the county or city to get bids for the contract and investigate why people don't like the service, and try to do better.

Very occasionally these types of arrangements end up with an enthusiastically high performing company that does the right thing, but usually it's dumpster fires all the way down.
by Alupis | 2025-11-06 23:01:08+00:00
Bitwarden Families plan is $40 a year and supports up to 6 users. It has TOTP built-in, is open source[1] and has been audited multiple times[2].

The individual plan is $10 a year. I've been a happy user for many years. I converted the last business I was at to exclusively using Bitwarden for Business as well.

[1] https://github.com/bitwarden/

[2] https://bitwarden.com/help/is-bitwarden-audited/
by reaperducer | 2025-11-06 23:01:28+00:00
Did you know there's a new Gantt chart? Did you know there's a new Gantt chart? Did you know there's a new Gantt chart? Did you know there's a new Gantt chart? Did you know there's a new Gantt chart? Did you know there's a new Gantt chart? Did you know there's a new Gantt chart? -Wrike
Show HN: I developed a video codec for screencasts that reduces videos by 70%
by dev_marcospimi | 2025-11-06 23:02:26+00:00
For personal use, in the last months I've developed a video codec for screencasts like tutorials, presentations, qa, etc. That reduce the size of the video by 70% (more or less). Now Im thinking in to sell this as a service for business who use it like courses, tutorial, or Qa videos uploaded to github for example.

Real result: 60min tutorial goes from 3.2GB → 800MB

Built in Rust. CLI for now, considering a $20/mo service.

Would you use this? Thoughts?
by nabbed | 2025-11-06 23:03:39+00:00
>First-generation antihistamines include medications such as diphenhydramine (Benadryl), brompheniramine, doxylamine, chlorpheniramine, hydroxyzine, and promethazine.

>First-generation antihistamines have a longer onset and shorter duration of action with less efficacy than second-generation antihistamines, such as cetirizine (Zyrtec), desloratadine (Clarinex), fexofenadine (Allegra), and>loratadine (Claritin).

Boo for me, then. I must be some sort of rare creature. For me, all those second generation antihistamines might as well be sugar pills, except for cetirizine, which might have a tiny impact (and possibly none at all). On the other hand, chlorpheniramine has a very noticeable effect, although I agree it is short-lived (I have to take it three times per day).
by dzhiurgis | 2025-11-06 23:03:49+00:00
It's not only sportiness. It's also absolutely spartan features / technology that's also got terrible usability, bare minimum comfort level, etc. Reliability is mixed bag too - hybrid batteries clap out pretty quickly and then you got all downsides of ICE maintenance.

The only niche I see remaining for hybrids/phev's is large cars in large countries with bad charging infrastructure (aka US, AU).
by observationist | 2025-11-06 23:04:46+00:00
I'm thinking it's SEO cargo culting, and that there are a lot more "monkey see, monkey do" patterns of behavior that don't impact actual ranking but nonetheless crop up in weird things like this.

That said, I cannot wait for adtech to go the way of the rotary phone. Localized, private search indexes on phones with local AI interacting with them, only reaching out to the internet when necessary to update information, with hashes and checksums to minimize the number of updates needed for frequently interacted sites, and so on.

Google right now is hot garbage - most tiny competitors are far better, let alone yandex or kagi or the like.
by awayto | 2025-11-06 23:05:42+00:00
You can build your agent into a docker image then easily limit both networking and file system scope.

docker run -it --rm \ -e SOME_API_KEY="$(SOME_API_KEY)" \ -v "$(shell pwd):/app" \ <-- restrict file system to whatever folder --dns=127.0.0.1 \ <-- restrict network calls to localhost $(shell dig +short llm.provider.com 2>/dev/null | awk '{printf " --add-host=llm-provider.com:%s", $$0}') \ <-- allow outside networking to whatever api your agent calls my-agent-image

Probably could be a bit cleaner, but it worked for me.
by recursive | 2025-11-06 23:05:51+00:00
This is from a policy-maker's perspective. It treats the human inclination toward fraud as an immutable force of nature (which may well be reasonable). But it seems the general idea is that policies required to achieve zero fraud would cost too much in enforcement. They would not be purely rational benefits for the organization whose policy is being written.

However from a different perspective, it's those policies that are an immutable force of nature. "Non-zero fraud is optimal" might sound like there could be a population who wasn't committing enough fraud. I haven't done any fraud this year, but I'm trying to be a good person. But that's not the Blackstone perspective. In Blackstone, the populace are thought of as reacting only to policy and basically having no autonomy.

I'm not arguing anything, but just noting how the sound-bite can be (and was) misconstrued.
Show HN: FlowLens, record real browser bugs for Claude Code to analyze
by mzidan101 | 2025-11-06 23:06:12+00:00
Some bugs only happen in staging or production, and reproducing them locally can take hours.

FlowLens lets you record the actual bug in the browser with one click. It captures logs, network data, session video, and other context, then uploads the report to a private workspace where you can share flows with your team.

With the FlowLens MCP server, Claude Code can correlate those reports with your codebase and help trace what went wrong.

Docs and demo: https://magentic.ai/docs/debugging-with-ai-overview

FlowLens makes it easier to capture real debugging context so Claude Code can reason about actual bugs instead of synthetic repros.
by reify | 2025-11-06 23:06:44+00:00
There is nothing therapeutic about a brain implant.

I'm obviously thinking how do they get it into the brain then.

First thought is through the ear or up the nose, Second thought, they remove an eye.

maybe ai is going to do some invasive work, and because it is ai, you dont have to call it surgery. Or even a nanobot ai surgeon.

no surgery at all, no boss nuffin,

Is this the same MIT who recent withdrew a paper claiming 82% of online ransomware attacks were done by ai.
by nomel | 2025-11-06 23:07:07+00:00
> It's merely highly probable that no evidence exists.

Could you explain where this comes from? I think the track record of our military operations, and our surveillance systems (which Trump helpfully leaked), suggests the complete opposite, that they have precise knowledge of the source, destination, etc, with democrats even having faith in the intel, and more of a problem with transparency [1]. Biden was getting things going in 2022 [2]!

[1] https://edition.cnn.com/2025/11/05/politics/boat-strikes-dem...

[2] https://en.mercopress.com/2022/09/17/bolivia-venezuela-not-j...
by bartread | 2025-11-06 23:07:46+00:00
The problem is that in any kind of customer facing scenario this feedback maps to a KPI that, often, an individual employee's or team's performance is assessed on. That KPI might impact pay reviews, bonuses, promotions, or even ongoing employment at the extreme.

Which sucks.

It's to the point where, when we broke down in a live lane on a dual carriageway the other day (flat tyre - actually shredded a run flat, newer car so no spare, all lay-bys closed so nowhere to pull off road and couldn't make it to next exit), the police came out and cordoned off the lane and then the AA guy who came and rescued us asked if we could write him a review when the feedback request came through.

Of course, on this occasion I did write him an absolutely glowing review (which he very much deserved, and which I was more than happy to do), because this was an incredibly dangerous situation - potentially life or death. I also sent a thank you to the local police force that helped us out.

But that's the point: it was life or death. It really mattered. So of course I wanted to say thank you, and the feedback mechanism provided a decent way to do that.

But most of these feedback requests are for things that don't matter that much, if at all, and are no better than spam, because of course everybody asks for it for every little interaction nowadays... and it's just endlessly tiresome.

So, yes: please stop.

(Btw, as someone who worked in market research for 7 years I can tell you that CX reviews skew towards the extremes - either very positive or very negative - and that you're much more likely to get a review if someone has a bad experience than if they have a good one. As a result, whilst these reviews can be good for qualitatively highlighting specific problems that might need to be solved, deriving any kind of aggregate score from them and expecting that to be representative of the average customer's experience is a fool's errand. Please don't do it. [Aside: I know, I know - this will stop no-one but I'd feel remiss if I didn't point it out, especially on this site where a lot of you will - I hope - get the point and apply it in your own businesses.])