MurphyA/hacker-news huggingface dataset:
by nirui | 2025-11-24 07:53:10+00:00
Don't know why people here got triggered by DEI, but the "master" naming is just bad, "main" is actually a better and more generic description.

The word "master" means someone/thing that has the capability of controlling things, like "Mastered", "Master Degree" etc.

But in most Git contexts, "master" is just "one of the breach that we hand picked to put our finest results in", that's not mastering anything, it just means "if you know what's best for you (or not), just use this one".

Another similar wording is in IDE hard drives. Remember the fun time where you can to setup jumpers before your secondary IDE hard drive would work? Yeah that secondary drive is called "slave". I'm still confused why the first drive must be called "master" since I never see it whipping any other drives to make them work harder or really doing anything that's remotely controlling.

The computer guys in the old times really have a weird taste in naming things.
by johnisgood | 2025-11-24 07:53:32+00:00
Of course, but they do not care about that. They made the association, and now they are being vocal about it. I am pretty sure most of us never made this association or attribution. I have never thought about slavery until they told me their own associations to it.

I am pretty sure master / slave pins were not intended to be offensive, nor attributed to slavery. Similarly with the git "master" branch.
by hydrox24 | 2025-11-24 07:53:37+00:00
I wonder if what you're experiencing is something called "ripple control" (in Australia).

Distribution companies send 10-40V signals through the system at much higher frequencies than the normal 50/60Hz of AC systems (750-1100Hz) to tell old controlled load devices to switch on or off to use cheap nighttime power.

Having said that, if your distribution company has no idea what it is then it makes this less likely.
by rich_sasha | 2025-11-24 07:53:45+00:00
China kind of says a lot of things Russia was saying for the past 20 years. A lot of the wester world (not all) said, yeah yeah, it's all just talk. Then it wasn't.

I sincerely hope China doesn't go that was as it is to me, despite all its flaws, a super impressive country, but I think it careless to ignore warmongering talk.
by JimDabell | 2025-11-24 07:54:38+00:00
It’s absolutely terrible for accessibility.

This is a recording of “This is a test” being read aloud:

https://jumpshare.com/s/YG3U4u7RKmNwGkDXNcNS

This is a recording of it after being passed through this tool:

https://jumpshare.com/share/5bEg0DR2MLTb46pBtKAP
by paul2495 | 2025-11-24 07:54:44+00:00
Author here. Happy to answer questions!

A bit more context on how Syd works: it uses Dolphin Llama 3 (dolphin-2.9-llama3-8b) running locally via llama-cpp-python. You'll need about 12-14GB RAM when the model is loaded, plus ~8GB disk space for the base system (models, FAISS index, CVE database). The full exploit database is an optional 208GB add-on.

What makes this different from just wrapping an LLM, the core challenge wasn't the AI—it was making security tools output data that an LLM can actually understand tools like YARA, Volatility, and Nmap output unstructured text with inconsistent formats. I built parsers that convert this into structured JSON, which the LLM can then reason about intelligently. Without that layer, you get hallucinations and garbage analysis.

Current tool integrations: - Red Team: Nmap (with CVE correlation), Metasploit, Sliver C2, exploit database lookup - Blue Team: Volatility 3 (memory forensics), YARA (malware detection), Chainsaw (Windows event log analysis), PCAP analysis, Zeek, Suricata - Cross-tool intelligence: YARA detection → CVE lookup → patching steps; Nmap scan → Metasploit modules ready-to-run commands

The privacy angle exists because I couldn't paste potential malware samples, memory dumps, or customer network scans into ChatGPT without violating every security policy. Everything runs on localhost:11434—no data ever leaves your machine. For blue teamers handling sensitive investigations or red teamers on client networks, this is non-negotiable.

Real-world example from the demo syd scans a directory with YARA, hits on a custom ransomware rule, automatically looks up which CVE was exploited(EternalBlue/MS17-010), explains the matched API calls, and generates an incident response workflow—all in about 15 seconds. That beats manual analysis by a significant margin.

What I'd love feedback on:

1. Tool suggestions: What other security tools would you want orchestrated this way? I'm looking at adding Capa(malware capability detection) and potentially Ghidra integration. 2. For SOC/IR folks: How are you currently balancing AI utility with operational security? Are you just avoiding LLMs entirely, or have you found other solutions? 3. Beta testers: If you're actively doing red/blue team work and want to try this on real investigations, I'm looking for people to test and provide feedback. Especially interested in hearing what breaks or what features are missing.

The goal isn't to replace your expertise—it's to automate the tedious parts (hex decoding, correlating CVEs,explaining regex patterns) so you can focus on the actual analysis. Think of it as having a junior analyst who never gets tired of looking up obscure Windows API calls. Check out sydsec.co.uk for more info, or watch the full demo at the YouTube link in the original post.
by optionalsquid | 2025-11-24 07:55:03+00:00
> In any case, who made the association of the git branch "master" to slavery? It is absurd.

BitKeeper, the VCS that preceded Git, used the terminology "master" and "slaves", so the association is not based on nothing:

https://github.com/bitkeeper-scm/bitkeeper/blob/0524ffb3f6f1...
by atoav | 2025-11-24 07:55:35+00:00
I actually worked in film audio engineering and Master is not the universally used term and hasn't been used uniformly throughout history. I have an analog Mackie mixer from the 2000s with "Main" as the name of the Main Bus that was designed before the whole debate took part.

As far as software goes, things are similar. The process of "Mastering" is an exception.

As far as git branches go, I am fine with main. It has two advantages over master aside from any culturual questions:

1. main is more self-explanatory for beginners who don't know how "master" was/is used in tech.

2. it is shorter. While two letters don't make a huge difference, that is still a subtile advantage.

Whether these two points alone are enough to justify the needed work (which is probably not a lot to be honest), IDK.
by skinkestek | 2025-11-24 07:56:19+00:00
Because it’s just a bad idea.

Most of the world doesn’t need that whole setup because:

- Our cultural baseline around firearms is completely different. Countries like Denmark, Sweden, Finland, Switzerland, Austria, and the Czech Republic have plenty of guns at home - and historically, a lot of them were actual assault rifles, not “looks-spicy” semiautos.

- We treat guns like weapons. They live in safes, not nightstands, and kids get taught safety early, the same way you’d teach them not to put a fork in a power supply.
by berdario | 2025-11-24 07:56:46+00:00
I tried with the same prompt in the examples provided on gibberifier.com, and it works well[1].

(Amusingly, to get the text, I relied on OCR)

But I also noticed that, sometimes due to an issue when copypasting into the Gemini prompt input, only the first paragraph get retained... I.e., the gibberified equivalent of this paragraph:

> Dragons have been a part of myths, legends, and stories across many cultures for centuries. Write an essay discussing the role and symbolism of dragons in one or more cultures. How do dragons reflect the values, fears ...

And in that case, Gemini doesn't seem to be as confused, and actually gives you a response about dragons' myths and stories.

Amusingly, the full prompt is 1302 characters, and Gibberifier complains

> Too long! Remove 802 characters for optimal gibberification.

Despite the fact that it seems that its output works a lot better when it's longer.

[1] works well, i.e.: Gemini errors out when I try the input in the mobile app, in the browser for the same prompt, it provides answers about "de Broglie hypothesis", "Drift Velocity" (Flash) "Chemistry Drago's rule", "Drago repulse videogame move (it thinks I'm asking about Pokemon or Bakugan)" (Thinking)
by GeneralMaximus | 2025-11-24 07:57:22+00:00
Efficient in terms of what, exactly?

There are multiple dimensions to this problem. Putting everything behind Cloudflare might give you better uptime, reliability, performance, etc. but it also has the effect of centralizing power into the hands of a single entity. Instead of twisting the arms of ten different CXOs, your local politician now only needs to twist the arm of a single CXO to knock your entire business off the internet.

I live in India, where the government has always been hostile to the ideals of freedom of speech and expression. Complete internet blackouts are common in several states, and major ISPs block websites without due process or an appeals mechanism. Nobody is safe from this, not even Github[1]. In countries like India, decentralization is a preventative measure.

[1] https://en.wikipedia.org/wiki/Censorship_of_GitHub#India

And I'm not even going to talk about abuse of monopoly power and all that. What happens when Cloudflare has their Apple moment? When they jack up their prices 10x, or refuse to serve customers that might use their CDNs to serve "inappropriate" content? When the definition of "inappropriate" is left fuzzy, so that it applies to everything from CSAM to political commentary?

No thanks.
by pfannkuchen | 2025-11-24 07:58:07+00:00
13th century France is irrelevant because it was, religiously speaking, a different style of society from America since its founding.

In the past, America, unlike 13th century France, allowed multiple parallel religions who each enforced their own moral codes on top of the secular law using behavioral manipulation tactics including shame.

This seems to have worked up until quite recently. In the early 1900s religion was still massively influential in America. Your view on what freedom of religion means practically is a ret con, because people took it seriously up until universal mass secular schooling and electronic media.

I’m not saying we should return to Jesus or whatever, I’m just saying that there is a receptiveness in the human brain to having behavior enforced in a completely non-violent way where the behavior code is entered into voluntarily and can be abandoned non-violently as well, and hmm wonder if it makes sense to leverage that to solve problems that we are currently leaning for the levers of violence to fix (in the sense that state power enforcement is fundamentally rooted in violence, ie the threat of forced confinement at gunpoint).

On you vs others, I don’t have in mind some kind of religiously enforced corporate regulations, that’s obviously ridiculous. I’m referring to religiously enforced individual abstinence from social media, similar to religiously enforced abstinence from alcohol, or from casual sex, etc, all because they are considered harmful (by the people in the religion) to you, not (primarily) to others. If the abstinence was enforced socially the same way monogamy was in the early 1900s (yes, I know there were some exceptions, blah blah blah, it was basically ironclad relative to today), the social media companies would wither and blow away.
by anarki8 | 2025-11-24 07:58:42+00:00
> We actually had a recent Cloudflare outage caused by a crash on unwrap() function

> Memory safety is not that sacred. In fact, for many applications malfunctioning is better than crashing — particulary in the embedded world where Rust wants to be present. You cannot get 99.999% reliability with Rust — it crashes all the time.

Would you prefer silent UB/memory corruption in Cloudflare case? I don't think most developers would agree with this.
by rinka_singh | 2025-11-24 07:58:47+00:00
I agree with this point. It is about being a craftsman esp. the point about if it is part of your KVP or not.

In addition to this, if you do have the skills of doing it, then you can either patent it or open source it.

This will allow you to be part of the ecosystem giving you a much greater heft in the community. At the very least, if you've done something at least put it out there as an alternative to what's being pushed by AWS (or whoever). You never know...
by godelski | 2025-11-24 07:58:53+00:00
> I mean, why don't we just throw Bourbaki books at freshmen and let them sort it out without classes?

The Bourbaki group was quite famous for wanting to restructure math education. Teaching many things that are considered advanced to children. Despite not sticking around we see elements of resurgence and effectiveness.

So I'm not sure your argument of "out of order" is accurate. The order is what we make. There's no clear optimal way to teach math. Your argument hinges on that. You might argue that the current status quo is working, so why disrupt it, and I'll point around asking if you really think it's so effective when many demonstrate a lack of understanding all around us. That so many struggle with calculus is evidence itself. We need not even acknowledge that there are many children who learn this (and let's certainly not admit that it's far more common for them to learn it in unconventional ways).

> let them sort it out without classes?

To suggest I'm arguing for the elimination of educators is beyond silly. I'd hope the caliber of your arguments would match that of your diction.
by deng | 2025-11-24 07:59:07+00:00
> In fact, for many applications malfunctioning is better than crashing — particulary in the embedded world where Rust wants to be present.

Not a fact. Particularly in the embedded world, crashing is preferable to malfunctioning, as many embedded devices control things that might hurt people, directly or indirectly.

> If a pacemaker stops — telling a victim “but the memory was not corrupted in the crash” is a weak consolation.

If a pacemaker suddenly starts firing at 200Hz, telling a victim "but at least it didn't crash" is a weak consolation. A stopping pacemaker is almost always preferable to a malfunctioning one, as most people with pacemakers still have sufficient natural rhythm to survive this for long enough to get help.

> We actually had a recent Cloudflare outage caused by a crash on unwrap() function

Please read the whole article. If the unwrap hadn't caused an exit, the process would've run out of memory, leading to a much less deterministic behavior which is much harder to diagnose and fix. I always prefer an early exit with a clear error instead of getting killed by the OOM reaper.
by input_sh | 2025-11-24 08:00:09+00:00
That "waste of resources" is completely made up, this changes nothing for any existing repo what so ever. Any existing repo that updated did so completely voluntarily, no tool forced them to.

At most you could argue that you needed to run one additional command when pushing the initial commit during this transitional period where GitLab/GitHub had updated the name but Git itself has not. Therefore, now we're back to square one with less "waste" as you put it.
by johncolanduoni | 2025-11-24 08:00:17+00:00
A changing magnetic field will always induce an electrical field and vice-versa. Even just moving a magnet with your hand will generate an electrical field. Near-field effects of an antenna still involve this interaction.

The key to the resistance of very long wavelengths of EM radiation (or equivalently, very slowly varying electric/magnetic fields) to attenuation when traveling through a metal is the nature of the way metals expel electric fields (they don’t generally block magnetic fields). When you apply a static electric field to a thin conductor, electrons will be pulled away from one side and toward the other such that the field inside is zero. However this migration of charges will actually result in the electric field on the far side of the metal being nearly the same as the field on the side closer to the source!

If the wavelength of some EM radiation is much longer than a metal obstacle is thick, the fact that the electric field is excluded from the interior of the metal won’t matter much. Even if the metal wasn’t there, the electric field strength wouldn’t vary much over that distance, and on the other side of the metal the induced charges will restore the roughly “correct” field. Since the magnetic component won’t vary much over that distance either, the fact that there’s no varying electric field inside the conductor to reinforce the magnetic field won’t significantly attenuate it.

If you’re familiar with Faraday cages, this will sound all wrong. Isn’t it long wavelengths they can block, and short wavelengths they can’t? This true when dealing with EM radiation in the “normal” radio bands and higher, but it turns out their ability to attenuate radiation falls off in the other direction too (once wavelengths get extremely long). When dealing with EM properties of materials, there are a huge number of different effects that apply in different circumstances, and it’s easy to forget one and confuse yourself.
by jacquesm | 2025-11-24 08:01:06+00:00
If only we had a file in the / of web servers that you could use to tell scrapers and bots to fuck off. We'd say for instance:

User-Agent: * Disallow: /

And that would be that. Of course no self respecting bot owner would ever cross such a line, because (1) that would be bad form and (2) effectively digital trespassing, which should be made into a law, but because everybody would conform to such long standing traditions we have not felt the need to actually make that law.
by rinka_singh | 2025-11-24 08:01:30+00:00
the hand plane vs. the electric plane may not be the right metaphor. It will be more like one hand plane vs. another.

Just because it is a "great big" company pushing it with all their might ($s), doesn't mean it is the best solution out there. There's a lot of people who would prefer the alternate.

Like a previous post said, just make sure it lies in your base competency (which you have if you've developed it) and is part of your key value proposition.
by sigmoid10 | 2025-11-24 08:02:05+00:00
Most people have no clue how these things really work and what they can do. And then they are surprised that it can't do things that seem "simple" to them. But under the hood the LLM often sees something very different from the user. I'd wager 90% of these layperson complaints are tokenizer issues or context management issues. Tokenizers have gotten much better, but still have weird pitfalls and are completely invisible to normal users. Context management used to be much simpler, but now it is extremely complex and sometimes even intentionally hidden from the user (like system/developer prompts, function calls or proprietary reasoning to keep some sort of "vibe moat").
by nomilk | 2025-11-24 08:02:32+00:00
Implying perfectly reasonable inquiry (namely, if 'master' is to be removed, why aren't other 'problematic' terms?) is a "jerk" for asking seems off to me.

This is a nitpick, dismissing others' questions and directing them to let it go, is overreach. That's not for you to determine. It's fine as a suggestion (especially if accompanied with your perception of why they ought to), but as a directive it comes across as though you assume you know what's better for someone else without evidence to support the assumption, or without it occurring to you that your assumption would be questioned.
by lumost | 2025-11-24 08:02:35+00:00
>Do note that binary trees are mostly an obsolete legacy today — they are way too cache-unfriendly. I mean you could have written similar code in C++ using std::vector or std::dequeue and get the bounds checking too.

This is simply not true, it's an ongoing thorn of mine that the Rust community seems to decide that anything which cannot be programmed in rust is obsolete legacy. This is a silly stance which is harming adoption.

I for one have coded dozens or even hundreds of tree structures. My most recent tree was a hierarchical context management system for an LLM agent!
by netsharc | 2025-11-24 08:04:03+00:00
That makes me wonder if "files" is a space that needs (in startup-talk) "distruption": what about a utility that applies rules to files, e.g. if you save a file in the directory unzip-me, it'll be unzipped. Or categorize files, e.g. "this email attachment is related to project A, this download is related to project B", and the utility will take care of them, e.g. by putting them in the correct directories?

Since this is HN it can't be a homebrew open-source solution, it'll have to be AI-enhanced and cost 25.99 a month. Who wants to fund me?
by matheusmoreira | 2025-11-24 08:04:16+00:00
Why match the C standard at all? The C standard library is not really a shining example of API design.

It's interesting to brainstorm new memory allocation interfaces. Some cool ideas:

https://nullprogram.com/blog/2023/12/17/

https://gist.github.com/o11c/6b08643335388bbab0228db763f9921...

I'm in a position to do this in my programming language project. Wrote my own allocator for it. Maybe it's time to reinvent a better wheel.
by inferiorhuman | 2025-11-24 08:06:19+00:00
Later to get banned from bidding on the contract for the replacement vehicles because the trains were so mediocre (although somehow still better than the earlier Boeings) and the company so brazenly corrupt.

Meanwhile SF runs 1800s–early 1900s era Milan trams on their heritage line. Not built by Breda, because of course.
by johncolanduoni | 2025-11-24 08:07:17+00:00
Just because something is key to the human experience, doesn’t mean some other person personally owes sacrificing their literal bodily autonomy to accommodate another who is missing out. We don’t have to pretend most people can live a happy life as a sexless hermit (we just had a large natural experiment on this during COVID) to avoid demanding anybody has to date someone they don’t want to.