MurphyA/hacker-news huggingface dataset:
by jmalicki | 2025-11-18 18:45:30+00:00
There may be firm specific risk etc., but there is also a concept of double marginalization, where monopolies that exist across the vertical layers of a production chain will be less efficient than a single monopoly, because you only get a single layer of dead weight loss rather than multiple.

https://en.wikipedia.org/wiki/Double_marginalization?wprov=s...
by dust42 | 2025-11-18 18:45:42+00:00
Still it would be a lot wiser if all the forkers would do one 'AI-enabled' fork together that exposes all the extras that copilot gets. The barrier for testing would be much lower and all the extension makers would also jump onto the train. Likely MS would finally give in and make all the extras available for everyone. But all the fragmentation only helps MS.
by stuffn | 2025-11-18 18:45:45+00:00
And thus, the lemmings walk straight off the cliff.

There seems to be two views. One forward looking and one not. The forward looking view appropriate recognizes the threat of centralization. Centralization crushes small businesses (and small blogs), leads to censorship (see youtube et al.), and destroys competition. No one on the planet can compete with cloudflare pound for pound and thus if they decide your site is bad based on $CURRENT_ZEITGEIST you're SOL. You may as well not exist. We already have plenty of evidence from 2016 to now of this occurring via a large conspiracy between big tech and government.

The non-forward looking view naively closes their eyes and says "well we aren't there yet so what does it matter". This is how rights erode. It is a shame people with this view are allowed to vote and breed.
by dragonwriter | 2025-11-18 18:45:55+00:00
They aren't interned frozen strings (unless they were symbols; String#intern was, and still is, an alias for String#to_sym, and String#freeze did not and does not imply String#intern or String#to_sym), and it also (even for literals) took an extra step to either freeze or intern them prior to Ruby 2.3 introducing the "# frozen_string_literal: true" file-level option (and Ruby 3.4 making it unnecessary because it is on by default.)

Amusingly, string literals interned by default in 3.4 or because of the setting in earlier >2.3 Rubies are still (despite being interned) Strings, while Strings interned with String#intern are Symbols.
by eduction | 2025-11-18 18:46:07+00:00
> Hopes and prayers do not make a valid security strategy

It’s not “hopes and prayers” to actively decide a particular attack vector is unlikely enough that the the costs and risks are not worth it.

My local cafes and bars do not employ bouncers, but the local concert venues and nightclubs do.

All these places want to keep out outside food and drink and avoid violence among patrons. The local cafes and bars decided it’s not worth having a bouncer for that. That’s a valid decision.
by Nihilartikel | 2025-11-18 18:46:34+00:00
I get it... but you can pry my cloudflare-tunnel from my cold dead hands.

I'm no stranger to hosting things 'the hard way', but I am not going back from my happy casual hosting where I just spin up a docker container, and point the cloudflare tunnel at the local port and opt out of worrying over DDOS, SSL termination and certs, and everything else that goes with it.

With tailscale, I don't even keep port 22 open to the world.
by grayhatter | 2025-11-18 18:47:02+00:00
> I am suggesting you host your website on your own server somewhere, and then you put it behind cloudflare

I'd rather advocate for a solution that doesn't induce centralization. Because that still does. It's a weird suggestion to pay twice. I'm assuming in your hypothetical, cloudflare not only doesn't ever go down, but also absorbs only malicious traffic, and not any organic? Why should cloudflare do that and not my primary host? I'll assume I have XX to spend on hosting, you don't see how if I have to also allocate some of that to cloudflare, in addition to the real host, how that might limit what the real host can charge? If the real host can't charge enough to fund R&D on services like basic DDoS or other traffic shaping, wouldnt that mean I've then become dependent on cloudflare? And now hey cloudflare has other service, and I don't like the extra overhead of paying multiple services... I'll just move everything to cloudflare because they're bigger and do both... and now the small host is gone.

sigh

> The 'Invasive species destroy ecosystems' quote sounds good, but what exactly does it mean in this case? What is the species, and what is it invading?

I'm comparing cloudflare to any species that enters an existing system that has developed a natural ecological balance that includes diversity. Which then proceeds to grow for the sake of growth, consuming resourcs at an unsustainable rate; destroying the diversity that previously existed.

Destroying that diversity is bad because that diversity is what gives the system as a whole resistance to catastrophic events.

Like huge parts of the Internet going down because someone wanted to ship their project before the holidays, in time for their perf review.

The argument being: we should view cloudflare's growth, and consumption and takeover of the resources of the Internet as a whole, similar to the way we view other invasive species. It destroys the good parts of an existing system in a way that is almost impossible to recover from. Resulting in a much more fragile system. One than's now vulnerable to single events that take down "everything". A healthy system would be able to absorb such an event without destabilizing the whole thing.

The invasive species is cloudflare, and it's consuming and replacing large existing sections of the Internet; which gains much of it's strength and resilience from it being distributed amongst it's peers.
by toast0 | 2025-11-18 18:47:04+00:00
> And in 1995 there were only two: us, and Total Entertainment Network. You might think game creators would come to us and say "please put my game on your service!", but... nope! Not only did we have a licensing team that went out and got contracts to license games for our service, but we had to pay the vendor for the right to license their game, which was often an exclusive. So, we had Quake and Unreal; TEN got Duke Nukem 3D and NASCAR.

FWIW, the Total Entertainment Network (TEN) got Quake later, here's a press release from September 30 1996 [1]. Wikipedia says QTest was released Feb 24, 1996, and I can't find when MPath support launched, so I don't know how long the exclusive period was, but not very long. Disclosure: I was a volunteer support person (TENGuide) so I could get internet access as a teen; I was GuideToast and/or GuideName.

[1] https://web.archive.org/web/20110520114948/http://www.thefre...
by graeme | 2025-11-18 18:48:03+00:00
Oh sorry, not you. The OP in the chat thread, they were DDOS'ed by someone and are commenting anonymously. Maybe grandparent is the correct word for it, in any event this is the comment I was referring to when I said OP, not your article: https://news.ycombinator.com/item?id=45966683
by bri3d | 2025-11-18 18:48:10+00:00
This is how almost all cars with HID bulbs work, because HID bulbs can't be toggled on and off - they need time to warm up and have a limited number of arc initiation cycles before they wear out. So there's a mechanical shutter which changes the cut-off distance. Generally, there is also a leveling sensor which adjusts the cutoff when the car starts up, to account for suspension sag differences and load.
by jiveturkey | 2025-11-18 18:48:39+00:00
You aren't understanding economy of scale, and peak to average ratios.

The same reason I use cloud compute -- elastic infrastructure because I can't afford the peaks -- is the same reason large service providers "work".

It's funny how we always focus on Cloudflare, but all cloud providers have this same concentration downside. I think it's because Cloudflare loves to talk out of both sides of their mouth.
by burnte | 2025-11-18 18:49:35+00:00
Agreed, it's when. They're hoping to stave it off or maybe stretch out the pop into a correction by all hedging together with all these incestuous deals, but you can't hold back the tide. They debuted this tech way too early, promised way too much, and now the market is wary about buying AI products until more noise settles out of the system.
by amalcon | 2025-11-18 18:50:13+00:00
The claim I think you're referring to is in two parts:

1) They were willing to sell DDoS protection to DDoS services

2) This decision was made specifically because the existence of DDoS services increased the value of their product

This was always a weird claim, because the first part is 100% true -- while the second part was always unfounded speculation. The conclusion is thus most likely false. They just didn't want to incorporate that sort of thing into their ToS or vet their customers in that way, for various understandable reasons.
by crazygringo | 2025-11-18 18:50:24+00:00
The big dogs absolutely do phase config rollouts as a general rule.

There are still two weaknesses:

1) Some configs are inherently global and cannot be phased. There's only one place to set them. E.g. if you run a webapp, this would be configs for the load balancer as opposed to configs for each webserver

2) Some configs have a cascading effect -- even though a config is applied to 1% of servers, it affects the other servers they interact with, and a bad thing spreads across the entire network
by eternityforest | 2025-11-18 18:50:24+00:00
To us outsiders it's really hard to understand what's actually happening here, but it almost seems like the whole thing could even be a net positive for him, he seems to really feel a need for a new direction.

But that could just be my lack of understanding of the forth mindset and culture and the benefits it brought him.

Forth obviously did bring him a lot of happiness, but Forth people always seem like they have trouble getting anyone else to understand what they're doing, and it must be kind of isolating to spend so much time on something so few people understand.
by BrandoElFollito | 2025-11-18 18:50:52+00:00
My car has on the door two buttons marked with 1 and 2. This is supposed to be a feature for two drivers that allows to memorize the position of the seat (which would be awesome). It does not work.

I went to Toyota and a kind guy printed the manual for this. It is FOUR PAGES of things to do (open window, honk, switch off, dance, ...). I tried once but it did not work. A guy from Toyota tried to do it quickly between two customers, no luck.

So yes, their design is quite surprising sometimes.

I am also trying to use the automated opening of the hatch. In the ads the guy or gal with stuff in their arms vaguely swings their foot and bam, it opens. I am swinging like there is no tomorrow (it is a good thing that I have years of martial arts so I can sustain the movement) and the hatch doe snot open. Then after kicking and trying once more it opens. My children learned a few new words at the occasion.

This is still a good car (except that the electronics are straight from my childhood (the 80s))
by bob1029 | 2025-11-18 18:51:10+00:00
There is no explicit regulation against continuing to use halogen for headlights. It would be difficult to pass the current photometric requirements but not impossible. Halogen has a much more predictable & smooth spectra. The CRI is nearly 100.

LEDs make a lot of sense from an engineering and economics perspective, and that's why we must suffer them. It takes a special kind of leader to burn massive piles of cash/opportunity in order to protect a qualitative thing like how comfortable it is to drive at night. There aren't many CEOs who would be moved much by spectrograms of the headlamps in their cars.
by speed_spread | 2025-11-18 18:51:13+00:00
A certain amount of frustration is expected if you set the goals high. But an excess of frustration becomes counter-productive and should signal it's time to change strategy. It doesn't mean "give up forever" but rather "try getting to midpoint first, then reevaluate".

It's surprising how effective being lazy can sometimes be. Some tasks that could be brute-forced seem to magically melt away if you adopt round about ways and let time pass. It's a latency/throughput tradeoff.
by user34283 | 2025-11-18 18:51:20+00:00
I tried writing a native Windows app using WinUI 3.

I wasted a day on trying to get some PNGs to render correctly, but no matter the config I used, the colors came out wrongly oversaturated.

I used Tauri with a WebView, and the app was rendering the images perfectly fine. On top of that the UI looked much better, and I was done in half the time I spend trying to fix the rendering issue in WinUI 3.

Never again will I go native.
by linguae | 2025-11-18 18:51:39+00:00
I've been working through The Rust Programming Language (https://doc.rust-lang.org/book/title-page.html) in preparation for this year's Advent of Code. I've been meaning to learn Rust for some time, and I want to use my winter break (I'm a professor) to make some small Rust projects in preparation for a larger side project involving operating systems design that I want to do in Rust.
by beckford | 2025-11-18 18:51:47+00:00
Since the link is paywalled, the TLDR paragraph is:

> Boasberg said in the ruling that the FTC had incorrectly excluded YouTube and TikTok from the market where it challenged Meta's dominance. "Even if YouTube is out, including TikTok alone defeats the FTC’s case," the judge said.

I agree. Meta does not have a monopoly since they compete with TikTok.
by vkou | 2025-11-18 18:52:12+00:00
> Lately, I see a lot of drivers who turn on their brights and just leave them on and this includes cars with the older halogen and even incandescents. This is a change in behavior.

I mean, the reptile part of my brain is really tempted to do so, because every other car on the road is blinding me - why be a good citizen, it's all fucking Mad Max out there anyways...

(On odd-numbered days, that part of my brain compels me to go through the mall parking lot and spray a filter onto all the offending vehicles' headlights.)

The issue is that the giga-bright headlights would be fine if they were pointed at the road, instead of onto oncoming traffic. And some people have them incorrectly adjusted, where they do point onto incoming traffic.

However, even if they were correctly adjusted, the slightest bump or angle in a road will still result in them shining directly into my face.

The only acceptable solution is to send all offending vehicles to the junkyard, tomorrow. If that's not palatable, I'll settle with funding a a Department of Highway Safety making the rounds of the parking lots with a hammer.
by nerdsniper | 2025-11-18 18:52:16+00:00
I’d love if anyone could provide examples of such AND(“ground truth”, “absolutely ridiculous”) solutions! Even if they took clever humans a long time to create.

I’m curious to explore such fun programming code. But I’m also curious to explore what knowledgeable humans consider to be both “ground truth” as well as “absolutely ridiculous” to create within the usual time constraints.
by mindslight | 2025-11-18 18:52:16+00:00
I've long thought the racism-everywhere lens is too simplistic and useless. But with how the Trump regime's policies are all generally incompetent and harmful to our country, yet there is still so much full-throated support based around things like deputizing fundamentalist militias to round up minorities and send them to concentration camps, it's starting to look pretty on point.

And sure, there are many rationalizations like most of the targets are "illegals" or whatever. But if the people espousing these justifications weren't racist, their instinct would instead be to think "hey these blatant violations of the Constitution could easily happen to my own family" rather than to other the citizens inevitably getting swept up as an outgroup (eg "app says so").
by kozak_ | 2025-11-18 18:52:57+00:00
I think this is where the conversation is from theoretic vs practical limits. Most folks don't care about government overreach until it affects them or theirs personally. And because of costs, government overreach has been theoretical versus practical. And even when practical, it's more whiteglove treatment.

First example is that most folks don't care about police checkpoints, simply because they are rare, and when they do happen they are over pretty fast. You do have some that care and think they are an infringement of rights, but they are a loud minority, and even those that do have issues with them, just bite the bullet and provide them their license and tell them where they are going.

Some things we don't care that much about is simply because they can't be abused that much. For example, majority of the population doesn't care too much that the NSA is hoovering up all traffic including encrypted traffic, because there's no way to practically decrypt it a mass scale.

But if quantum computing or some other method makes it cost effective and allows them to effectively decrypt this traffic, we would see a lot more people calling their lawmakers complaining of government overreach.

Another current example is that most people never cared about the fact that ICE or border patrol can require ID and have warrantless stops within 100 miles of a border simply because the stops weren't front page news.
by ahazred8ta | 2025-11-18 18:53:08+00:00
For people who are intending to eventually own the home, the stategy is that in good economic times you can pay down the principal at an accelerated rate, shortening the term of the loan, and in bad times you can fall back to interest only payments. It's a safety margin. Japan in the 1980s had 200 year loans with the same rationale.
by shdalex | 2025-11-18 18:53:42+00:00
I spent the last few months studying how people ask for recommendations, compare tools, and describe their problems on Reddit. I began manually tracking high-intent threads across a few subreddits and responding when someone was looking for exactly the type of solution I offer.

This turned into a repeatable process that generated more than 500 warm leads without ads, cold outreach, or posting content every day. The surprising part is how predictable the buying-intent patterns were once I started mapping them.

I wrote a full breakdown of: • how I found high-signal subreddits • the four types of posts that consistently contain buying intent • what to look for in recommendation threads • how to engage without being salesy • how to scale the system from manual tracking to automation

Full write-up here: https://leado.co/blog/reddit-marketing-playbook-500-leads

Happy to answer questions about the process or go deeper into the patterns I saw.
by chollida1 | 2025-11-18 18:53:49+00:00
> Doesn't the success of a short come down to crowd psychology?

Not really. I've shorted 100s of instruments on the financial market and this just doesn't ring true.

Often the best shorts are not the worst companies but the once that have had performed the best over the past 6 months to a year because that generally means they've overshot their valuation and should rationally come back down to a more reasonable level. PLTR certainly fits the bill here.

I think a big misconception the public has about short sellers is that they short to zero. The vast majority of directional shorts look alot more like "short company that has 3x n the last year from $200 down to $120 where its fundamentals or financial ratios make more sense".

And this ignores that from a money manager's standpoint more than half the shorts put on aren't negative bets on a company but rather a downside hedge against another bet that a related stock will go up. IN this case you really don't care about how the shorted stock performs as long as its a good hedge for your upside bet.

Never once have I initiated or participated in a public campaign to promote my short and the vast majority of hedge funds fit that profile.

The fact that there have been a few high profile short cases that most of us know actually helps illustrate just how rare it is.
by t43562 | 2025-11-18 18:54:14+00:00
A brief summary:

The big secret of efficiency lies in the working mode: while conventional neural networks are constantly calculating whether there is something to do or not, SNN neurons only fire when relevant events occur.

Classic AI models, from ChatGPT to image generators, are “frozen” knowledge stores. If companies want to adapt such models to their own data, they have to retrain them – an energy- and time-intensive process. SNNs, on the other hand, can change their weightings on the fly without interrupting operations.

Nvidia’s GPUs currently dominate the AI market like Intel’s x86 processors used to dominate the PC sector. Their architecture is not, however, optimized for energy efficiency, but for raw parallel performance. Neuromorphic systems such as those from SpiNNcloud are no substitute for these computing monsters, not yet. But they are strategically dangerous in certain fields.
Show HN: Rhesis – Open-source platform for collaborative LLM application testing
by nicolaib | 2025-11-18 18:54:21+00:00
Hi HN, I'm Nicolai. I'm working with a small team in Germany on Rhesis, an open-source platform for testing conversational LLM applications and agents. We’re sharing an early community preview today.

Why we built this: We saw teams repeatedly struggle with testing, e.g. scattered test cases, unclear or inconsistent metrics, and a lot of manual effort that still missed obvious failures before production. Most tools assume a single developer runs evals alone; in practice, testing tends to involve PMs, domain experts, QA, and engineers. We built Rhesis to make that collaboration straightforward.

What it does: Rhesis is a self-hostable platform (with UI) where teams can create, run, and review tests for conversational AI systems.

A few core ideas:

- Test generation: Create and run tests for single-turns or full conversations; the platform can also assist with generating both single- and multi-turn scenarios using your domain context.

- Domain context / knowledge: Provide background material to guide test creation so you’re not starting from an empty prompt.

- Collaboration tools: Non-technical teammates can write test cases, leave comments, and review results; developers can dig into failures with detailed traces and outputs.

- Unified metrics: Bring in eval metrics from DeepEval, RAGAS, and similar OSS frameworks without re-implementing them.

Current state: Still early. We shipped v0.4.2 last week with a zero-config Docker setup. Core flows work, but there are rough edges. Everything is MIT-licensed; an enterprise edition will come later, but the OSS core will remain free. We’re currently focused on conversational applications because that’s where we saw the biggest pain in evaluation and QA workflows.

Links: App: app.rhesis.ai

GitHub: github.com/rhesis-ai/rhesis

Docs: docs.rhesis.ai

Happy to hear your thoughts and any answer questions about platform design, the architecture, or our thinking on collaborative testing workflows.
by grayhatter | 2025-11-18 18:54:37+00:00
Sales teams don't pay for leads? If you keep me around, exclusively because the sales team wants to show me something... I'm the product.

Follow up question, if I actually start using the DDoS protection or other services... will cloudflare cut me off unless I pay? Will that charge be exorbitant? Does that behavior feel like extortion? Have they done that before?
by dragonwriter | 2025-11-18 18:54:59+00:00
Ruby has always had frozen strings (what it didn't have was interning of string literals, which is what the somewhat-poorly-named "# frozen_string_literal: true" option available from Ruby 2.3 and made default in Ruby 3.4 actually does, which makes string literals basically equivalent to symbol—but, not actually symbols, unlike, in another example of suboptimal naming, what would happen with String#intern, which has existed longer to intern strings, but is actually just an alias of String#to_sym.